Function at 0x469590
Capabilities:
Contain obfuscated stackstrings
Parse pe header

Disassembly:
push ebp
mov ebp, esp
and esp, 0xffffffc0
push 0xffffffffffffffff
push 0x630aa2
mov eax, dword fs:[0]
push eax
sub esp, 0x268
mov eax, dword [0x6cd400]
xor eax, esp
mov dword [esp + 0x230], eax
push ebx
push esi
push edi
mov eax, dword [0x6cd400]
xor eax, esp
push eax
lea eax, [esp + 0x278]
mov dword fs:[0], eax
mov edi, ecx
mov dword [esp + 0x34], edi
mov esi, dword [ebp + 8]
xor eax, eax
mov dword [esp + 0x44], eax
lea ecx, [esp + 0x20]
mov dword [esp + 0x20], eax
mov dword [esp + 0x24], eax
call fcn.004a23a0
mov dword [esp + 0x280], 0
push esi
lea ecx, [esp + 0x24]
call fcn.004a2420
xor eax, eax
mov dword [esp + 0x1a8], 0
mov dword [esp + 0x1ac], 0
mov dword [esp + 0x1ac], 7
mov dword [esp + 0x1a8], 0
mov word [esp + 0x198], ax
mov byte [esp + 0x280], 1
mov dword [esp + 0x1f0], eax
mov dword [esp + 0x1f4], eax
mov dword [esp + 0x1f4], 7
mov dword [esp + 0x1f0], eax
mov word [esp + 0x1e0], ax
mov byte [esp + 0x280], 2
mov dword [esp + 0x190], eax
mov dword [esp + 0x194], eax
mov dword [esp + 0x194], 7
mov dword [esp + 0x190], eax
mov word [esp + 0x180], ax
mov byte [esp + 0x280], 3
mov dword [esp + 0x1d8], eax
mov dword [esp + 0x1dc], eax
mov dword [esp + 0x1dc], 7
mov dword [esp + 0x1d8], eax
mov word [esp + 0x1c8], ax
mov byte [esp + 0x280], 4
push 0x13
mov dword [esp + 0xc0], eax
mov dword [esp + 0xc4], eax
push 0x6839cc
lea ecx, [esp + 0xb4]
mov dword [esp + 0xc8], 7
mov dword [esp + 0xc4], eax
mov word [esp + 0xb4], ax
call fcn.00403c30
mov byte [esp + 0x280], 5
lea eax, [esp + 0x198]
push eax
lea eax, [esp + 0xb0]
push eax
lea ecx, [esp + 0x28]
call fcn.004a2760
mov byte [esp + 0x280], 4
cmp dword [esp + 0xc0], 8
jb 0x469750
push dword [esp + 0xac]
call fcn.004c56c2
add esp, 4
push 4
push 0x679a3c
push dword [esp + 0x1b0]
xor eax, eax
push eax
lea ecx, [esp + 0x1a8]
mov dword [esp + 0xd0], 7
mov dword [esp + 0xcc], 0
mov word [esp + 0xbc], ax
call fcn.004048b0
test eax, eax
sete al
mov byte [edi], al
push 0xe
xor eax, eax
mov dword [esp + 0x134], 0
mov dword [esp + 0x138], 0
push 0x68395c
lea ecx, [esp + 0x128]
mov dword [esp + 0x13c], 7
mov dword [esp + 0x138], 0
mov word [esp + 0x128], ax
call fcn.00403c30
mov byte [esp + 0x280], 6
lea ebx, [edi + 0x34]
push ebx
lea eax, [esp + 0x124]
push eax
lea ecx, [esp + 0x28]
mov dword [esp + 0x50], ebx
call fcn.004a2760
test al, al
sete al
mov byte [esp + 0x3b], al
mov byte [esp + 0x280], 4
cmp dword [esp + 0x134], 8
jb 0x46982a
push dword [esp + 0x120]
call fcn.004c56c2
mov al, byte [esp + 0x3f]
add esp, 4
xor ecx, ecx
mov dword [esp + 0x134], 7
mov dword [esp + 0x130], 0
mov word [esp + 0x120], cx
test al, al
je 0x4698ac
mov eax, dword [case.0x79a990.0]
test al, 1
jne 0x469887
or eax, 1
mov dword [case.0x79a990.0], eax
mov byte [esp + 0x280], 7
push ecx
call fcn.004015a0
call fcn.0042d900
push 0x639710
call fcn.005e9ef6
add esp, 4
mov byte [esp + 0x280], 4
cmp dword [ebx + 0x14], 8
jb 0x46988f
mov ebx, dword [ebx]
mov eax, dword [0x6d66e8]
push ebx
push 0x683980
push 0x683a38
push 0x6d66e8
call dword [eax + 0x24]
jmp 0x46c776
lea esi, [edi + 0x1c]
cmp esi, ebx
je 0x4698bf
push 0xffffffffffffffff
push 0
push ebx
mov ecx, esi
call fcn.00403b10
cmp dword [esi + 0x14], 8
jb 0x4698c9
mov ecx, dword [esi]
jmp 0x4698cb
mov ecx, esi
cmp dword [esi + 0x14], 8
mov eax, dword [esi + 0x10]
lea edx, [ecx + eax*2]
jb 0x4698db
mov ecx, dword [esi]
jmp 0x4698dd
mov ecx, esi
cmp dword [esi + 0x14], 8
lea ecx, [ecx + eax*2]
jb 0x4698ea
mov eax, dword [esi]
jmp 0x4698ec
mov eax, esi
cmp eax, ecx
je 0x469928
cmp word [eax], 0x20
je 0x4698ff
add eax, 2
cmp eax, ecx
jne 0x4698f0
jmp 0x469928
cmp eax, ecx
je 0x469928
lea ebx, [eax + 2]
cmp ebx, ecx
je 0x469928
lea ebx, [ebx]
movzx esi, word [ebx]
cmp esi, 0x20
je 0x46991e
mov word [eax], si
add eax, 2
add ebx, 2
cmp ebx, ecx
jne 0x469910
lea esi, [edi + 0x1c]
cmp dword [esi + 0x14], 8
jb 0x469932
mov ebx, dword [esi]
jmp 0x469934
mov ebx, esi
test eax, eax
jne 0x46993c
xor ecx, ecx
jmp 0x469942
mov ecx, eax
sub ecx, ebx
sar ecx, 1
test edx, edx
je 0x46994a
sub edx, eax
sar edx, 1
push edx
push ecx
mov ecx, esi
call fcn.00404090
cmp dword [edi + 0x2c], 0
jne 0x469960
mov ecx, esi
call fcn.00423ed0
push 0x683a5c
lea ecx, [esp + 0xb0]
call fcn.004035b0
mov byte [esp + 0x280], 8
lea eax, [edi + 0x4c]
push eax
lea eax, [esp + 0xb0]
push eax
lea ecx, [esp + 0x28]
call fcn.004a2760
mov byte [esp + 0x280], 4
cmp dword [esp + 0xc0], 8
jb 0x4699af
push dword [esp + 0xac]
call fcn.004c56c2
add esp, 4
xor eax, eax
push 0x6839f4
lea ecx, [esp + 0xb0]
mov dword [esp + 0xc4], 7
mov dword [esp + 0xc0], 0
mov word [esp + 0xb0], ax
call fcn.004035b0
mov byte [esp + 0x280], 9
lea eax, [edi + 4]
push eax
lea eax, [esp + 0xb0]
push eax
lea ecx, [esp + 0x28]
call fcn.004a2760
mov byte [esp + 0x280], 4
cmp dword [esp + 0xc0], 8
jb 0x469a1e
push dword [esp + 0xac]
call fcn.004c56c2
add esp, 4
xor eax, eax
push 0x683a0c
lea ecx, [esp + 0xb0]
mov dword [esp + 0xc4], 7
mov dword [esp + 0xc0], 0
mov word [esp + 0xb0], ax
call fcn.004035b0
mov byte [esp + 0x280], 0xa
lea eax, [esp + 0x180]
push eax
lea eax, [esp + 0xb0]
push eax
lea ecx, [esp + 0x28]
call fcn.004a2760
mov byte [esp + 0x280], 4
cmp dword [esp + 0xc0], 8
jb 0x469a91
push dword [esp + 0xac]
call fcn.004c56c2
add esp, 4
push 4
push 0x679a3c
push dword [esp + 0x198]
xor eax, eax
push eax
lea ecx, [esp + 0x190]
mov dword [esp + 0xd0], 7
mov dword [esp + 0xcc], 0
mov word [esp + 0xbc], ax
call fcn.004048b0
test eax, eax
sete al
push 0x683ac8
lea ecx, [esp + 0xb0]
mov byte [edi + 0x80], al
call fcn.004035b0
mov byte [esp + 0x280], 0xb
lea eax, [edi + 0x9c]
push eax
lea eax, [esp + 0xb0]
push eax
lea ecx, [esp + 0x28]
call fcn.004a2760
mov byte [esp + 0x280], 4
cmp dword [esp + 0xc0], 8
jb 0x469b29
push dword [esp + 0xac]
call fcn.004c56c2
add esp, 4
xor eax, eax
push 0x683afc
lea ecx, [esp + 0xb0]
mov dword [esp + 0xc4], 7
mov dword [esp + 0xc0], 0
mov word [esp + 0xb0], ax
call fcn.004035b0
mov byte [esp + 0x280], 0xc
lea eax, [edi + 0x84]
push eax
lea eax, [esp + 0xb0]
push eax
lea ecx, [esp + 0x28]
call fcn.004a2760
mov byte [esp + 0x280], 4
cmp dword [esp + 0xc0], 8
jb 0x469b9b
push dword [esp + 0xac]
call fcn.004c56c2
add esp, 4
xor eax, eax
push 0x683a80
lea ecx, [esp + 0xb0]
mov dword [esp + 0xc4], 7
mov dword [esp + 0xc0], 0
mov word [esp + 0xb0], ax
call fcn.004035b0
mov byte [esp + 0x280], 0xd
lea eax, [esp + 0xac]
push eax
lea ecx, [esp + 0x24]
call fcn.004a25e0
mov bl, al
mov byte [esp + 0x280], 4
cmp dword [esp + 0xc0], 8
jb 0x469c08
push dword [esp + 0xac]
call fcn.004c56c2
add esp, 4
xor eax, eax
mov dword [esp + 0xc0], 7
mov dword [esp + 0xbc], 0
mov word [esp + 0xac], ax
test bl, bl
je 0x469f5d
push 0x683aa0
lea ecx, [esp + 0xb0]
mov dword [esp + 0x30], eax
mov dword [esp + 0x2c], eax
call fcn.004035b0
mov byte [esp + 0x280], 0xe
lea eax, [esp + 0x2c]
push eax
lea eax, [esp + 0xb0]
push eax
lea eax, [esp + 0x30]
push eax
lea ecx, [esp + 0x2c]
call fcn.004a2d40
mov byte [esp + 0x280], 0x10
cmp dword [esp + 0xc0], 8
jb 0x469c8d
push dword [esp + 0xac]
call fcn.004c56c2
add esp, 4
mov ebx, dword [esp + 0x2c]
xor eax, eax
xor esi, esi
mov dword [esp + 0xc0], 7
mov dword [esp + 0xbc], 0
mov word [esp + 0xac], ax
test ebx, ebx
jle 0x469f47
lea eax, [edi + 0xcc]
mov edi, eax
mov eax, dword [esp + 0x28]
push esi
push ecx
mov ecx, esp
mov dword [esp + 0x38], 0
mov dword [ecx], eax
mov eax, dword [esp + 0x30]
mov dword [esp + 0x34], esp
test eax, eax
je 0x469ce7
mov ecx, dword [eax]
push eax
call dword [ecx + 4]
mov byte [esp + 0x288], 0x11
lea eax, [esp + 0x38]
push eax
mov byte [esp + 0x28c], 0x10
lea ecx, [esp + 0x2c]
call fcn.004a2f40
mov byte [esp + 0x280], 0x12
mov eax, dword [esp + 0x30]
push ecx
mov ecx, esp
mov dword [esp + 0xc8], 0
mov dword [ecx], eax
mov eax, dword [esp + 0x34]
mov dword [esp + 0x30], esp
test eax, eax
je 0x469d33
mov ecx, dword [eax]
push eax
call dword [ecx + 4]
mov byte [esp + 0x284], 0x13
lea eax, [esp + 0xc8]
push eax
mov byte [esp + 0x288], 0x12
lea ecx, [esp + 0x28]
call fcn.004a3120
mov byte [esp + 0x280], 0x14
push 8
xor eax, eax
mov dword [esp + 0xc0], 0
mov dword [esp + 0xc4], 0
push 0x67c9e4
lea ecx, [esp + 0xb4]
mov dword [esp + 0xc8], 7
mov dword [esp + 0xc4], 0
mov word [esp + 0xb4], ax
call fcn.00403c30
mov byte [esp + 0x280], 0x15
lea eax, [esp + 0xac]
push eax
lea ecx, [esp + 0xc8]
call fcn.00417cd0
cmp dword [eax + 0x14], 8
jb 0x469dc9
mov eax, dword [eax]
push eax
call fcn.005eaf27
add esp, 4
mov dword [esp + 0x2c], eax
mov byte [esp + 0x280], 0x14
cmp dword [esp + 0xc0], 8
jb 0x469df7
push dword [esp + 0xac]
call fcn.004c56c2
add esp, 4
xor eax, eax
mov dword [esp + 0x160], eax
mov dword [esp + 0x164], eax
mov dword [esp + 0xc0], 7
mov dword [esp + 0xbc], 0
mov word [esp + 0xac], ax
mov dword [esp + 0x164], 7
mov dword [esp + 0x160], eax
mov word [esp + 0x150], ax
mov byte [esp + 0x280], 0x16
lea eax, [esp + 0x150]
push eax
mov eax, dword [esp + 0x34]
push ecx
mov ecx, esp
mov dword [esp + 0xf0], esp
mov dword [ecx], eax
mov eax, dword [esp + 0x38]
test eax, eax
je 0x469e6d
mov ecx, dword [eax]
push eax
call dword [ecx + 4]
mov byte [esp + 0x288], 0x17
mov byte [esp + 0x288], 0x16
lea ecx, [esp + 0x28]
call fcn.004a3e90
lea eax, [esp + 0x2c]
push eax
mov ecx, edi
call fcn.004669c0
lea ecx, [esp + 0x150]
cmp eax, ecx
je 0x469ea9
push 0xffffffffffffffff
push 0
push ecx
mov ecx, eax
call fcn.00403b10
mov byte [esp + 0x280], 0x14
cmp dword [esp + 0x164], 8
jb 0x469eca
push dword [esp + 0x150]
call fcn.004c56c2
add esp, 4
xor eax, eax
mov dword [esp + 0x164], 7
mov dword [esp + 0x160], 0
mov word [esp + 0x150], ax
mov byte [esp + 0x280], 0x19
mov eax, dword [esp + 0xc4]
push eax
push dword [eax]
lea eax, [esp + 0x44]
push eax
lea ecx, [esp + 0xd0]
call fcn.0040cef0
mov byte [esp + 0x280], 0x12
push dword [esp + 0xc4]
call fcn.004c56c2
add esp, 4
mov byte [esp + 0x280], 0x10
mov eax, dword [esp + 0x30]
test eax, eax
je 0x469f3a
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
inc esi
cmp esi, ebx
jl 0x469cc3
mov edi, dword [esp + 0x34]
mov byte [esp + 0x280], 4
mov eax, dword [esp + 0x28]
test eax, eax
je 0x469f5d
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push 0x10
xor eax, eax
mov dword [esp + 0xc0], 0
mov dword [esp + 0xc4], 0
push 0x683b88
lea ecx, [esp + 0xb4]
mov dword [esp + 0xc8], 7
mov dword [esp + 0xc4], 0
mov word [esp + 0xb4], ax
call fcn.00403c30
mov byte [esp + 0x280], 0x1c
lea eax, [esp + 0xac]
push eax
lea ecx, [esp + 0x24]
call fcn.004a25e0
mov bl, al
mov byte [esp + 0x280], 4
cmp dword [esp + 0xc0], 8
jb 0x469fe2
push dword [esp + 0xac]
call fcn.004c56c2
add esp, 4
xor eax, eax
mov dword [esp + 0xc0], 7
mov dword [esp + 0xbc], 0
mov word [esp + 0xac], ax
test bl, bl
je 0x46a332
push 0x17
mov dword [esp + 0xc0], eax
mov dword [esp + 0xc4], eax
push 0x683bac
lea ecx, [esp + 0xb4]
mov dword [esp + 0x34], eax
mov dword [esp + 0x30], eax
mov dword [esp + 0xc8], 7
mov dword [esp + 0xc4], eax
mov word [esp + 0xb4], ax
call fcn.00403c30
mov byte [esp + 0x280], 0x1d
lea eax, [esp + 0x2c]
push eax
lea eax, [esp + 0xb0]
push eax
lea eax, [esp + 0x30]
push eax
lea ecx, [esp + 0x2c]
call fcn.004a2d40
mov byte [esp + 0x280], 0x1f
cmp dword [esp + 0xc0], 8
jb 0x46a091
push dword [esp + 0xac]
call fcn.004c56c2
add esp, 4
mov ebx, dword [esp + 0x2c]
xor eax, eax
xor esi, esi
mov dword [esp + 0xc0], 7
mov dword [esp + 0xbc], 0
mov word [esp + 0xac], ax
test ebx, ebx
jle 0x46a31c
lea eax, [edi + 0xd4]
mov dword [esp + 0x2c], eax
mov edi, eax
jmp 0x46a0d0
mov eax, dword [esp + 0x28]
push esi
push ecx
mov ecx, esp
mov dword [esp + 0x38], 0
mov dword [ecx], eax
mov eax, dword [esp + 0x30]
mov dword [esp + 0x44], esp
test eax, eax
je 0x46a0f4
mov ecx, dword [eax]
push eax
call dword [ecx + 4]
mov byte [esp + 0x288], 0x20
lea eax, [esp + 0x38]
push eax
mov byte [esp + 0x28c], 0x1f
lea ecx, [esp + 0x2c]
call fcn.004a2f40
mov byte [esp + 0x280], 0x21
mov eax, dword [esp + 0x30]
push ecx
mov ecx, esp
mov dword [esp + 0xc8], 0
mov dword [ecx], eax
mov eax, dword [esp + 0x34]
mov dword [esp + 0x40], esp
test eax, eax
je 0x46a140
mov ecx, dword [eax]
push eax
call dword [ecx + 4]
mov byte [esp + 0x284], 0x22
lea eax, [esp + 0xc8]
push eax
mov byte [esp + 0x288], 0x21
lea ecx, [esp + 0x28]
call fcn.004a3120
mov byte [esp + 0x280], 0x23
push 0x67c9e4
lea ecx, [esp + 0xb0]
call fcn.004035b0
mov byte [esp + 0x280], 0x24
lea eax, [esp + 0xac]
push eax
lea ecx, [esp + 0xc8]
call fcn.00417cd0
cmp dword [eax + 0x14], 8
jb 0x46a19e
mov eax, dword [eax]
push eax
call fcn.005eaf27
add esp, 4
mov dword [esp + 0x2c], eax
mov byte [esp + 0x280], 0x23
cmp dword [esp + 0xc0], 8
jb 0x46a1cc
push dword [esp + 0xac]
call fcn.004c56c2
add esp, 4
xor eax, eax
mov dword [esp + 0x148], eax
mov dword [esp + 0x14c], eax
mov dword [esp + 0xc0], 7
mov dword [esp + 0xbc], 0
mov word [esp + 0xac], ax
mov dword [esp + 0x14c], 7
mov dword [esp + 0x148], eax
mov word [esp + 0x138], ax
mov byte [esp + 0x280], 0x25
lea eax, [esp + 0x138]
push eax
mov eax, dword [esp + 0x34]
push ecx
mov ecx, esp
mov dword [esp + 0x44], esp
mov dword [ecx], eax
mov eax, dword [esp + 0x38]
test eax, eax
je 0x46a23f
mov ecx, dword [eax]
push eax
call dword [ecx + 4]
mov byte [esp + 0x288], 0x26
mov byte [esp + 0x288], 0x25
lea ecx, [esp + 0x28]
call fcn.004a3e90
lea eax, [esp + 0x2c]
push eax
mov ecx, edi
call fcn.004669c0
lea ecx, [esp + 0x138]
cmp eax, ecx
je 0x46a27b
push 0xffffffffffffffff
push 0
push ecx
mov ecx, eax
call fcn.00403b10
mov byte [esp + 0x280], 0x23
cmp dword [esp + 0x14c], 8
jb 0x46a29c
push dword [esp + 0x138]
call fcn.004c56c2
add esp, 4
xor eax, eax
mov dword [esp + 0x14c], 7
mov dword [esp + 0x148], 0
mov word [esp + 0x138], ax
mov byte [esp + 0x280], 0x28
mov eax, dword [esp + 0xc4]
push eax
push dword [eax]
lea eax, [esp + 0xf0]
push eax
lea ecx, [esp + 0xd0]
call fcn.0040cef0
mov byte [esp + 0x280], 0x21
push dword [esp + 0xc4]
call fcn.004c56c2
add esp, 4
mov byte [esp + 0x280], 0x1f
mov eax, dword [esp + 0x30]
test eax, eax
je 0x46a30f
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
inc esi
cmp esi, ebx
jl 0x46a0d0
mov edi, dword [esp + 0x34]
mov byte [esp + 0x280], 4
mov eax, dword [esp + 0x28]
test eax, eax
je 0x46a332
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
cmp byte [edi], 0
lea ecx, [esp + 0xac]
je 0x46af0b
push 0x683b24
call fcn.004035b0
mov byte [esp + 0x280], 0x2b
lea eax, [edi + 0x244]
push eax
lea eax, [esp + 0xb0]
push eax
lea ecx, [esp + 0x28]
call fcn.004a2760
mov byte [esp + 0x280], 4
cmp dword [esp + 0xc0], 8
jb 0x46a38d
push dword [esp + 0xac]
call fcn.004c56c2
add esp, 4
xor eax, eax
push 0x683b54
lea ecx, [esp + 0xb0]
mov dword [esp + 0xc4], 7
mov dword [esp + 0xc0], 0
mov word [esp + 0xb0], ax
call fcn.004035b0
mov byte [esp + 0x280], 0x2c
lea eax, [edi + 0x25c]
push eax
lea eax, [esp + 0xb0]
push eax
lea ecx, [esp + 0x28]
call fcn.004a2760
mov byte [esp + 0x280], 4
cmp dword [esp + 0xc0], 8
jb 0x46a3ff
push dword [esp + 0xac]
call fcn.004c56c2
add esp, 4
xor eax, eax
push 0x683c38
lea ecx, [esp + 0xb0]
mov dword [esp + 0xc4], 7
mov dword [esp + 0xc0], 0
mov word [esp + 0xb0], ax
call fcn.004035b0
mov byte [esp + 0x280], 0x2d
lea eax, [edi + 0x274]
push eax
lea eax, [esp + 0xb0]
push eax
lea ecx, [esp + 0x28]
call fcn.004a2760
mov byte [esp + 0x280], 4
cmp dword [esp + 0xc0], 8
jb 0x46a471
push dword [esp + 0xac]
call fcn.004c56c2
add esp, 4
xor eax, eax
push 0x683c74
lea ecx, [esp + 0xb0]
mov dword [esp + 0xc4], 7
mov dword [esp + 0xc0], 0
mov word [esp + 0xb0], ax
call fcn.004035b0
mov byte [esp + 0x280], 0x2e
lea eax, [edi + 0x28c]
push eax
lea eax, [esp + 0xb0]
push eax
lea ecx, [esp + 0x28]
call fcn.004a2760
mov byte [esp + 0x280], 4
cmp dword [esp + 0xc0], 8
jb 0x46a4e3
push dword [esp + 0xac]
call fcn.004c56c2
add esp, 4
xor eax, eax
push 0x683bdc
lea ecx, [esp + 0xb0]
mov dword [esp + 0xc4], 7
mov dword [esp + 0xc0], 0
mov word [esp + 0xb0], ax
call fcn.004035b0
mov byte [esp + 0x280], 0x2f
lea eax, [edi + 0x2a4]
push eax
lea eax, [esp + 0xb0]
push eax
lea ecx, [esp + 0x28]
call fcn.004a2760
mov byte [esp + 0x280], 4
cmp dword [esp + 0xc0], 8
jb 0x46a555
push dword [esp + 0xac]
call fcn.004c56c2
add esp, 4
xor eax, eax
push 0x683c10
lea ecx, [esp + 0xb0]
mov dword [esp + 0xc4], 7
mov dword [esp + 0xc0], 0
mov word [esp + 0xb0], ax
call fcn.004035b0
mov byte [esp + 0x280], 0x30
lea eax, [edi + 0x31c]
push eax
lea eax, [esp + 0xb0]
push eax
lea ecx, [esp + 0x28]
call fcn.004a2760
mov byte [esp + 0x280], 4
cmp dword [esp + 0xc0], 8
jb 0x46a5c7
push dword [esp + 0xac]
call fcn.004c56c2
add esp, 4
xor eax, eax
push 0x683d10
lea ecx, [esp + 0xb0]
mov dword [esp + 0xc4], 7
mov dword [esp + 0xc0], 0
mov word [esp + 0xb0], ax
call fcn.004035b0
mov byte [esp + 0x280], 0x31
lea eax, [edi + 0x334]
push eax
lea eax, [esp + 0xb0]
push eax
lea ecx, [esp + 0x28]
call fcn.004a2760
mov byte [esp + 0x280], 4
cmp dword [esp + 0xc0], 8
jb 0x46a639
push dword [esp + 0xac]
call fcn.004c56c2
add esp, 4
xor eax, eax
push 0x683d3c
lea ecx, [esp + 0xb0]
mov dword [esp + 0xc4], 7
mov dword [esp + 0xc0], 0
mov word [esp + 0xb0], ax
call fcn.004035b0
mov byte [esp + 0x280], 0x32
lea eax, [edi + 0xf4]
push eax
lea eax, [esp + 0xb0]
push eax
lea ecx, [esp + 0x28]
call fcn.004a2760
mov byte [esp + 0x280], 4
cmp dword [esp + 0xc0], 8
jb 0x46a6ab
push dword [esp + 0xac]
call fcn.004c56c2
add esp, 4
xor eax, eax
push 0x683ca8
lea ecx, [esp + 0xb0]
mov dword [esp + 0xc4], 7
mov dword [esp + 0xc0], 0
mov word [esp + 0xb0], ax
call fcn.004035b0
mov byte [esp + 0x280], 0x33
lea eax, [edi + 0x3dc]
push eax
lea eax, [esp + 0xb0]
push eax
lea ecx, [esp + 0x28]
call fcn.004a2760
mov byte [esp + 0x280], 4
cmp dword [esp + 0xc0], 8
jb 0x46a71d
push dword [esp + 0xac]
call fcn.004c56c2
add esp, 4
xor eax, eax
push 0x683cdc
lea ecx, [esp + 0xb0]
mov dword [esp + 0xc4], 7
mov dword [esp + 0xc0], 0
mov word [esp + 0xb0], ax
call fcn.004035b0
mov byte [esp + 0x280], 0x34
lea eax, [edi + 0x3f4]
push eax
lea eax, [esp + 0xb0]
push eax
lea ecx, [esp + 0x28]
call fcn.004a2760
mov byte [esp + 0x280], 4
cmp dword [esp + 0xc0], 8
jb 0x46a78f
push dword [esp + 0xac]
call fcn.004c56c2
add esp, 4
xor eax, eax
push 0x683df0
lea ecx, [esp + 0xb0]
mov dword [esp + 0xc4], 7
mov dword [esp + 0xc0], 0
mov word [esp + 0xb0], ax
call fcn.004035b0
mov byte [esp + 0x280], 0x35
lea eax, [edi + 0x154]
push eax
lea eax, [esp + 0xb0]
push eax
lea ecx, [esp + 0x28]
call fcn.004a2760
mov byte [esp + 0x280], 4
cmp dword [esp + 0xc0], 8
jb 0x46a801
push dword [esp + 0xac]
call fcn.004c56c2
add esp, 4
xor eax, eax
push 0x683e40
lea ecx, [esp + 0xb0]
mov dword [esp + 0xc4], 7
mov dword [esp + 0xc0], 0
mov word [esp + 0xb0], ax
call fcn.004035b0
mov byte [esp + 0x280], 0x36
lea eax, [edi + 0x13c]
push eax
lea eax, [esp + 0xb0]
push eax
lea ecx, [esp + 0x28]
call fcn.004a2760
mov byte [esp + 0x280], 4
cmp dword [esp + 0xc0], 8
jb 0x46a873
push dword [esp + 0xac]
call fcn.004c56c2
add esp, 4
xor eax, eax
push 0x683d68
lea ecx, [esp + 0xb0]
mov dword [esp + 0xc4], 7
mov dword [esp + 0xc0], 0
mov word [esp + 0xb0], ax
call fcn.004035b0
mov byte [esp + 0x280], 0x37
lea eax, [edi + 0x16c]
push eax
lea eax, [esp + 0xb0]
push eax
lea ecx, [esp + 0x28]
call fcn.004a2760
mov byte [esp + 0x280], 4
cmp dword [esp + 0xc0], 8
jb 0x46a8e5
push dword [esp + 0xac]
call fcn.004c56c2
add esp, 4
xor eax, eax
push 0x683da8
lea ecx, [esp + 0xb0]
mov dword [esp + 0xc4], 7
mov dword [esp + 0xc0], 0
mov word [esp + 0xb0], ax
call fcn.004035b0
mov byte [esp + 0x280], 0x38
lea eax, [edi + 0x184]
push eax
lea eax, [esp + 0xb0]
push eax
lea ecx, [esp + 0x28]
call fcn.004a2760
mov byte [esp + 0x280], 4
cmp dword [esp + 0xc0], 8
jb 0x46a957
push dword [esp + 0xac]
call fcn.004c56c2
add esp, 4
xor eax, eax
push 0x683f30
lea ecx, [esp + 0xb0]
mov dword [esp + 0xc4], 7
mov dword [esp + 0xc0], 0
mov word [esp + 0xb0], ax
call fcn.004035b0
mov byte [esp + 0x280], 0x39
lea eax, [edi + 0x19c]
push eax
lea eax, [esp + 0xb0]
push eax
lea ecx, [esp + 0x28]
call fcn.004a2760
mov byte [esp + 0x280], 4
cmp dword [esp + 0xc0], 8
jb 0x46a9c9
push dword [esp + 0xac]
call fcn.004c56c2
add esp, 4
xor eax, eax
push 0x683f78
lea ecx, [esp + 0xb0]
mov dword [esp + 0xc4], 7
mov dword [esp + 0xc0], 0
mov word [esp + 0xb0], ax
call fcn.004035b0
mov byte [esp + 0x280], 0x3a
lea eax, [edi + 0x1b4]
push eax
lea eax, [esp + 0xb0]
push eax
lea ecx, [esp + 0x28]
call fcn.004a2760
mov byte [esp + 0x280], 4
cmp dword [esp + 0xc0], 8
jb 0x46aa3b
push dword [esp + 0xac]
call fcn.004c56c2
add esp, 4
xor eax, eax
push 0x683e90
lea ecx, [esp + 0xb0]
mov dword [esp + 0xc4], 7
mov dword [esp + 0xc0], 0
mov word [esp + 0xb0], ax
call fcn.004035b0
mov byte [esp + 0x280], 0x3b
lea eax, [edi + 0x1cc]
push eax
lea eax, [esp + 0xb0]
push eax
lea ecx, [esp + 0x28]
call fcn.004a2760
mov byte [esp + 0x280], 4
cmp dword [esp + 0xc0], 8
jb 0x46aaad
push dword [esp + 0xac]
call fcn.004c56c2
add esp, 4
xor eax, eax
push 0x683ee0
lea ecx, [esp + 0xb0]
mov dword [esp + 0xc4], 7
mov dword [esp + 0xc0], 0
mov word [esp + 0xb0], ax
call fcn.004035b0
mov byte [esp + 0x280], 0x3c
lea eax, [edi + 0x1e4]
push eax
lea eax, [esp + 0xb0]
push eax
lea ecx, [esp + 0x28]
call fcn.004a2760
mov byte [esp + 0x280], 4
cmp dword [esp + 0xc0], 8
jb 0x46ab1f
push dword [esp + 0xac]
call fcn.004c56c2
add esp, 4
xor eax, eax
push 0x684068
lea ecx, [esp + 0xb0]
mov dword [esp + 0xc4], 7
mov dword [esp + 0xc0], 0
mov word [esp + 0xb0], ax
call fcn.004035b0
mov byte [esp + 0x280], 0x3d
lea eax, [edi + 0x1fc]
push eax
lea eax, [esp + 0xb0]
push eax
lea ecx, [esp + 0x28]
call fcn.004a2760
mov byte [esp + 0x280], 4
cmp dword [esp + 0xc0], 8
jb 0x46ab91
push dword [esp + 0xac]
call fcn.004c56c2
add esp, 4
xor eax, eax
push 0x6840b8
lea ecx, [esp + 0xb0]
mov dword [esp + 0xc4], 7
mov dword [esp + 0xc0], 0
mov word [esp + 0xb0], ax
call fcn.004035b0
mov byte [esp + 0x280], 0x3e
lea eax, [edi + 0x214]
push eax
lea eax, [esp + 0xb0]
push eax
lea ecx, [esp + 0x28]
call fcn.004a2760
mov byte [esp + 0x280], 4
cmp dword [esp + 0xc0], 8
jb 0x46ac03
push dword [esp + 0xac]
call fcn.004c56c2
add esp, 4
xor eax, eax
push 0x683fb8
lea ecx, [esp + 0xb0]
mov dword [esp + 0xc4], 7
mov dword [esp + 0xc0], 0
mov word [esp + 0xb0], ax
call fcn.004035b0
mov byte [esp + 0x280], 0x3f
lea eax, [edi + 0x22c]
push eax
lea eax, [esp + 0xb0]
push eax
lea ecx, [esp + 0x28]
call fcn.004a2760
mov byte [esp + 0x280], 4
cmp dword [esp + 0xc0], 8
jb 0x46ac75
push dword [esp + 0xac]
call fcn.004c56c2
add esp, 4
xor eax, eax
mov dword [esp + 0xc0], 7
mov dword [esp + 0xbc], 0
mov word [esp + 0xac], ax
call fcn.00401520
lea ecx, [eax + 0x1ec]
push 0x67c688
call fcn.00404860
test eax, eax
jne 0x46ad42
push 0x684010
lea ecx, [esp + 0xb0]
call fcn.004035b0
mov byte [esp + 0x280], 0x40
lea eax, [edi + 0x10c]
push eax
lea eax, [esp + 0xb0]
push eax
lea ecx, [esp + 0x28]
call fcn.004a2760
mov byte [esp + 0x280], 4
cmp dword [esp + 0xc0], 8
jb 0x46ad04
push dword [esp + 0xac]
call fcn.004c56c2
add esp, 4
xor eax, eax
push 0x6841a8
lea ecx, [esp + 0xb0]
mov dword [esp + 0xc4], 7
mov dword [esp + 0xc0], 0
mov word [esp + 0xb0], ax
call fcn.004035b0
mov byte [esp + 0x280], 0x41
jmp 0x46aead
push 0x67791c
call fcn.00401520
add eax, 0x1ec
push eax
call fcn.00404800
add esp, 8
test al, al
je 0x46ad72
call fcn.00401520
mov eax, dword [eax + 0x760]
cmp dword [eax + 0x108], 0x1e
je 0x46ad92
push 0x677930
call fcn.00401520
add eax, 0x1ec
push eax
call fcn.00404800
add esp, 8
test al, al
je 0x46ae22
push 0x684200
lea ecx, [esp + 0xb0]
call fcn.004035b0
mov byte [esp + 0x280], 0x42
lea eax, [edi + 0x10c]
push eax
lea eax, [esp + 0xb0]
push eax
lea ecx, [esp + 0x28]
call fcn.004a2760
mov byte [esp + 0x280], 4
cmp dword [esp + 0xc0], 8
jb 0x46ade4
push dword [esp + 0xac]
call fcn.004c56c2
add esp, 4
xor eax, eax
push 0x684110
lea ecx, [esp + 0xb0]
mov dword [esp + 0xc4], 7
mov dword [esp + 0xc0], 0
mov word [esp + 0xb0], ax
call fcn.004035b0
mov byte [esp + 0x280], 0x43
jmp 0x46aead
push 0x684160
lea ecx, [esp + 0xb0]
call fcn.004035b0
mov byte [esp + 0x280], 0x44
lea eax, [edi + 0x10c]
push eax
lea eax, [esp + 0xb0]
push eax
lea ecx, [esp + 0x28]
call fcn.004a2760
mov byte [esp + 0x280], 4
cmp dword [esp + 0xc0], 8
jb 0x46ae74
push dword [esp + 0xac]
call fcn.004c56c2
add esp, 4
xor eax, eax
push 0x684298
lea ecx, [esp + 0xb0]
mov dword [esp + 0xc4], 7
mov dword [esp + 0xc0], 0
mov word [esp + 0xb0], ax
call fcn.004035b0
mov byte [esp + 0x280], 0x45
lea eax, [edi + 0x124]
push eax
lea eax, [esp + 0xb0]
push eax
lea ecx, [esp + 0x28]
call fcn.004a2760
mov byte [esp + 0x280], 4
cmp dword [esp + 0xc0], 8
jb 0x46aee6
push dword [esp + 0xac]
call fcn.004c56c2
add esp, 4
xor eax, eax
mov dword [esp + 0xc0], 7
mov dword [esp + 0xbc], 0
mov word [esp + 0xac], ax
jmp 0x46b13c
push 0x6842e4
call fcn.004035b0
mov byte [esp + 0x280], 0x46
lea eax, [edi + 0x2bc]
push eax
lea eax, [esp + 0xb0]
push eax
lea ecx, [esp + 0x28]
call fcn.004a2760
mov byte [esp + 0x280], 4
cmp dword [esp + 0xc0], 8
jb 0x46af56
push dword [esp + 0xac]
call fcn.004c56c2
add esp, 4
xor eax, eax
push 0x68424c
lea ecx, [esp + 0xb0]
mov dword [esp + 0xc4], 7
mov dword [esp + 0xc0], 0
mov word [esp + 0xb0], ax
call fcn.004035b0
mov byte [esp + 0x280], 0x47
lea eax, [edi + 0x3ac]
push eax
lea eax, [esp + 0xb0]
push eax
lea ecx, [esp + 0x28]
call fcn.004a2760
mov byte [esp + 0x280], 4
cmp dword [esp + 0xc0], 8
jb 0x46afc8
push dword [esp + 0xac]
call fcn.004c56c2
add esp, 4
xor eax, eax
push 0x684268
lea ecx, [esp + 0xb0]
mov dword [esp + 0xc4], 7
mov dword [esp + 0xc0], 0
mov word [esp + 0xb0], ax
call fcn.004035b0
mov byte [esp + 0x280], 0x48
lea eax, [edi + 0x2d4]
push eax
lea eax, [esp + 0xb0]
push eax
lea ecx, [esp + 0x28]
call fcn.004a2760
mov byte [esp + 0x280], 4
cmp dword [esp + 0xc0], 8
jb 0x46b03a
push dword [esp + 0xac]
call fcn.004c56c2
add esp, 4
xor eax, eax
push 0x68438c
lea ecx, [esp + 0xb0]
mov dword [esp + 0xc4], 7
mov dword [esp + 0xc0], 0
mov word [esp + 0xb0], ax
call fcn.004035b0
mov byte [esp + 0x280], 0x49
lea eax, [edi + 0x2ec]
push eax
lea eax, [esp + 0xb0]
push eax
lea ecx, [esp + 0x28]
call fcn.004a2760
mov byte [esp + 0x280], 4
cmp dword [esp + 0xc0], 8
jb 0x46b0ac
push dword [esp + 0xac]
call fcn.004c56c2
add esp, 4
xor eax, eax
push 0x6843c4
lea ecx, [esp + 0xb0]
mov dword [esp + 0xc4], 7
mov dword [esp + 0xc0], 0
mov word [esp + 0xb0], ax
call fcn.004035b0
mov byte [esp + 0x280], 0x4a
lea eax, [edi + 0x304]
push eax
lea eax, [esp + 0xb0]
push eax
lea ecx, [esp + 0x28]
call fcn.004a2760
mov byte [esp + 0x280], 4
mov eax, dword [esp + 0xc0]
cmp eax, 8
jb 0x46b123
inc eax
push eax
push dword [esp + 0xb0]
lea ecx, [esp + 0x43]
call fcn.00403d70
push 0
lea ecx, [esp + 0xb0]
mov dword [esp + 0xc4], 7
call fcn.00403d30
push 0x684300
lea ecx, [esp + 0x10c]
call fcn.004035b0
mov byte [esp + 0x280], 0x4b
lea eax, [edi + 0x34c]
push eax
lea eax, [esp + 0x10c]
push eax
lea ecx, [esp + 0x28]
call fcn.004a2760
mov byte [esp + 0x280], 4
lea ecx, [esp + 0x108]
call fcn.00403680
push 0x684348
lea ecx, [esp + 0x10c]
call fcn.004035b0
mov byte [esp + 0x280], 0x4c
lea eax, [edi + 0x364]
push eax
lea eax, [esp + 0x10c]
push eax
lea ecx, [esp + 0x28]
call fcn.004a2760
mov byte [esp + 0x280], 4
lea ecx, [esp + 0x108]
call fcn.00403680
push 0x684428
lea ecx, [esp + 0x10c]
call fcn.004035b0
mov byte [esp + 0x280], 0x4d
lea ebx, [edi + 0x394]
push ebx
lea eax, [esp + 0x10c]
push eax
lea ecx, [esp + 0x28]
call fcn.004a2760
mov byte [esp + 0x280], 4
lea ecx, [esp + 0x108]
call fcn.00403680
push 0x684470
lea ecx, [esp + 0x10c]
call fcn.004035b0
mov byte [esp + 0x280], 0x4e
lea eax, [edi + 0x37c]
push eax
lea eax, [esp + 0x10c]
push eax
lea ecx, [esp + 0x28]
call fcn.004a2760
mov byte [esp + 0x280], 4
lea ecx, [esp + 0x108]
call fcn.00403680
call fcn.00401520
mov esi, eax
push 0x679cb0
lea eax, [esi + 0x1ec]
push eax
call fcn.00404800
add esp, 8
test al, al
je 0x46b31f
push 0x6843fc
mov ecx, ebx
call fcn.004036d0
lea eax, [esi + 0x354]
mov ecx, eax
mov dword [esp + 0x28], eax
call fcn.0043a140
push ecx
lea ecx, [esp + 0x34]
mov esi, eax
call fcn.00401730
mov ecx, dword [esp + 0x28]
lea eax, [esp + 0x30]
push eax
call fcn.00437970
mov ecx, dword [esp + 0x28]
lea eax, [esp + 0x2c]
push eax
call fcn.004377b0
push eax
lea ecx, [esp + 0x34]
call fcn.00438ca0
test al, al
je 0x46b31f
mov edi, dword [esp + 0x28]
lea ebx, [ebx]
lea ecx, [esp + 0x30]
call fcn.004378a0
push eax
mov ecx, ebx
call fcn.00404840
dec esi
test esi, esi
jle 0x46b2f2
push 0x68441c
mov ecx, ebx
call fcn.004036d0
push ecx
lea eax, [esp + 0x40]
push eax
lea ecx, [esp + 0x38]
call fcn.0046dd80
lea eax, [esp + 0x2c]
push eax
mov ecx, edi
call fcn.004377b0
push eax
lea ecx, [esp + 0x34]
call fcn.00438ca0
test al, al
jne 0x46b2d0
mov edi, dword [esp + 0x34]
push 0x6777b4
call fcn.00401520
add eax, 0x1ec
push eax
call fcn.00404800
add esp, 8
test al, al
je 0x46bda8
push 0x684528
lea ecx, [esp + 0x10c]
call fcn.004035b0
mov byte [esp + 0x280], 0x4f
lea eax, [esp + 0x108]
push eax
lea ecx, [esp + 0x24]
call fcn.004a25e0
mov bl, al
mov byte [esp + 0x280], 4
lea ecx, [esp + 0x108]
call fcn.00403680
test bl, bl
je 0x46b743
push ecx
lea ecx, [esp + 0x34]
mov dword [esp + 0x30], 0
call fcn.00401730
push 0x684528
lea ecx, [esp + 0x10c]
call fcn.004035b0
mov byte [esp + 0x280], 0x50
lea eax, [esp + 0x2c]
push eax
lea eax, [esp + 0x10c]
push eax
lea eax, [esp + 0x38]
push eax
lea ecx, [esp + 0x2c]
call fcn.004a2d40
mov byte [esp + 0x280], 0x52
lea ecx, [esp + 0x108]
call fcn.00403680
mov esi, dword [esp + 0x2c]
xor ebx, ebx
test esi, esi
jle 0x46b732
nop
push ecx
lea ecx, [esp + 0x2c]
call fcn.00401730
push ebx
push ecx
lea eax, [esp + 0x38]
mov ecx, esp
mov dword [esp + 0x44], esp
push eax
call fcn.004149a0
mov byte [esp + 0x288], 0x53
lea eax, [esp + 0x30]
push eax
mov byte [esp + 0x28c], 0x52
lea ecx, [esp + 0x2c]
call fcn.004a2f40
mov byte [esp + 0x280], 0x54
push ecx
lea ecx, [esp + 0xc8]
call fcn.00401730
push ecx
lea eax, [esp + 0x2c]
mov ecx, esp
mov dword [esp + 0x40], esp
push eax
call fcn.004149a0
mov byte [esp + 0x284], 0x55
lea eax, [esp + 0xc8]
push eax
mov byte [esp + 0x288], 0x54
lea ecx, [esp + 0x28]
call fcn.004a3120
mov byte [esp + 0x280], 0x56
push 0x681e00
lea ecx, [esp + 0x10c]
call fcn.004035b0
mov byte [esp + 0x280], 0x57
lea eax, [esp + 0x108]
push eax
lea ecx, [esp + 0xc8]
call fcn.00417cd0
push eax
lea ecx, [esp + 0x16c]
call fcn.00408490
mov byte [esp + 0x280], 0x59
lea ecx, [esp + 0x108]
call fcn.00403680
push 0x684594
lea ecx, [esp + 0x1b4]
call fcn.004035b0
mov byte [esp + 0x280], 0x5a
lea eax, [esp + 0x1b0]
push eax
lea ecx, [esp + 0xc8]
call fcn.00417cd0
push eax
lea ecx, [esp + 0x214]
call fcn.00408490
mov byte [esp + 0x280], 0x5c
lea ecx, [esp + 0x1b0]
call fcn.00403680
push 0x6844b8
lea ecx, [esp + 0xb0]
call fcn.004035b0
mov byte [esp + 0x280], 0x5d
lea eax, [esp + 0xac]
push eax
lea ecx, [esp + 0xc8]
call fcn.00417cd0
push eax
lea ecx, [esp + 0x1fc]
call fcn.00408490
mov byte [esp + 0x280], 0x5f
lea ecx, [esp + 0xac]
call fcn.00403680
lea ecx, [esp + 0xf0]
call fcn.00403590
mov byte [esp + 0x280], 0x60
lea eax, [esp + 0xf0]
push eax
push ecx
lea eax, [esp + 0x30]
mov ecx, esp
mov dword [esp + 0x44], esp
push eax
call fcn.004149a0
mov byte [esp + 0x288], 0x61
mov byte [esp + 0x288], 0x60
lea ecx, [esp + 0x28]
call fcn.004a3e90
lea ecx, [esp + 0xe8]
call fcn.004304f0
mov byte [esp + 0x280], 0x62
push 0x6828a0
lea ecx, [esp + 0x124]
call fcn.004035b0
mov byte [esp + 0x280], 0x63
lea eax, [esp + 0xf0]
push eax
push ecx
lea eax, [esp + 0x128]
push eax
lea ecx, [esp + 0xf4]
call fcn.0045e250
add esp, 4
mov ecx, eax
call fcn.004036b0
mov byte [esp + 0x280], 0x62
lea ecx, [esp + 0x120]
call fcn.00403680
push 0x682840
lea ecx, [esp + 0x80]
call fcn.004035b0
mov byte [esp + 0x280], 0x64
lea eax, [esp + 0x1f8]
push eax
push ecx
lea eax, [esp + 0x84]
push eax
lea ecx, [esp + 0xf4]
call fcn.0045e250
add esp, 4
mov ecx, eax
call fcn.004036b0
mov byte [esp + 0x280], 0x62
lea ecx, [esp + 0x7c]
call fcn.00403680
lea eax, [esp + 0xe8]
push eax
push ecx
lea eax, [esp + 0x170]
push eax
push ecx
lea eax, [esp + 0x220]
push eax
call fcn.00401520
lea ecx, [eax + 0x3b0]
call fcn.0045e3a0
add esp, 4
mov ecx, eax
call fcn.0045e4a0
add esp, 4
mov ecx, eax
call fcn.0040cbf0
mov byte [esp + 0x280], 0x60
lea ecx, [esp + 0xe8]
call fcn.00430550
mov byte [esp + 0x280], 0x5f
lea ecx, [esp + 0xf0]
call fcn.00403680
mov byte [esp + 0x280], 0x5c
lea ecx, [esp + 0x1f8]
call fcn.00403680
mov byte [esp + 0x280], 0x59
lea ecx, [esp + 0x210]
call fcn.00403680
mov byte [esp + 0x280], 0x56
lea ecx, [esp + 0x168]
call fcn.00403680
mov byte [esp + 0x280], 0x54
lea ecx, [esp + 0xc4]
call fcn.00408ec0
mov byte [esp + 0x280], 0x52
lea ecx, [esp + 0x28]
call fcn.004149c0
inc ebx
cmp ebx, esi
jl 0x46b3f0
mov byte [esp + 0x280], 4
lea ecx, [esp + 0x30]
call fcn.004149c0
push 0x6844c8
lea ecx, [esp + 0x16c]
call fcn.004035b0
mov byte [esp + 0x280], 0x65
lea eax, [esp + 0x168]
push eax
lea ecx, [esp + 0x24]
call fcn.004a25e0
mov bl, al
mov byte [esp + 0x280], 4
lea ecx, [esp + 0x168]
call fcn.00403680
test bl, bl
je 0x46bda8
xorps xmm0, xmm0
push ecx
lea ecx, [esp + 0xb0]
movsd qword [esp + 0xc8], xmm0
call fcn.00401720
lea ecx, [esp + 0xac]
call fcn.00467280
mov byte [esp + 0x280], 0x66
push ecx
lea ecx, [esp + 0x30]
mov dword [esp + 0x34], 0
call fcn.00401730
push 0x6844c8
lea ecx, [esp + 0x16c]
call fcn.004035b0
mov byte [esp + 0x280], 0x67
lea eax, [esp + 0x30]
push eax
lea eax, [esp + 0x16c]
push eax
lea eax, [esp + 0x34]
push eax
lea ecx, [esp + 0x2c]
call fcn.004a2d40
mov byte [esp + 0x280], 0x69
lea ecx, [esp + 0x168]
call fcn.00403680
xor esi, esi
cmp dword [esp + 0x30], esi
jle 0x46bc66
mov edi, edi
push ecx
lea ecx, [esp + 0x2c]
call fcn.00401730
push esi
push ecx
lea eax, [esp + 0x34]
mov ecx, esp
mov dword [esp + 0x44], esp
push eax
call fcn.004149a0
mov byte [esp + 0x288], 0x6a
lea eax, [esp + 0x30]
push eax
mov byte [esp + 0x28c], 0x69
lea ecx, [esp + 0x2c]
call fcn.004a2f40
mov byte [esp + 0x280], 0x6b
push ecx
lea ecx, [esp + 0xec]
call fcn.00401730
push ecx
lea eax, [esp + 0x2c]
mov ecx, esp
mov dword [esp + 0x40], esp
push eax
call fcn.004149a0
mov byte [esp + 0x284], 0x6c
lea eax, [esp + 0xec]
push eax
mov byte [esp + 0x288], 0x6b
lea ecx, [esp + 0x28]
call fcn.004a3120
mov byte [esp + 0x280], 0x6d
push 0x676964
lea ecx, [esp + 0xf4]
call fcn.004035b0
mov byte [esp + 0x280], 0x6e
push 0x678d1c
call fcn.00401520
add eax, 0x548
push eax
call fcn.00404800
add esp, 8
test al, al
jne 0x46b945
push 0x678d28
call fcn.00401520
add eax, 0x548
push eax
call fcn.00404800
add esp, 8
test al, al
jne 0x46b945
push 0x6845d4
lea ecx, [esp + 0x16c]
call fcn.004035b0
mov byte [esp + 0x280], 0x70
lea eax, [esp + 0x168]
push eax
lea ecx, [esp + 0xec]
call fcn.00417cd0
push eax
lea ecx, [esp + 0xf4]
call fcn.004036b0
mov byte [esp + 0x280], 0x6e
lea ecx, [esp + 0x168]
jmp 0x46b98e
push 0x6845c4
lea ecx, [esp + 0x214]
call fcn.004035b0
mov byte [esp + 0x280], 0x6f
lea eax, [esp + 0x210]
push eax
lea ecx, [esp + 0xec]
call fcn.00417cd0
push eax
lea ecx, [esp + 0xf4]
call fcn.004036b0
mov byte [esp + 0x280], 0x6e
lea ecx, [esp + 0x210]
call fcn.00403680
lea ecx, [esp + 0x1b0]
call fcn.00403590
mov byte [esp + 0x280], 0x71
lea eax, [esp + 0x1b0]
push eax
push ecx
lea eax, [esp + 0x30]
mov ecx, esp
mov dword [esp + 0x44], esp
push eax
call fcn.004149a0
mov byte [esp + 0x288], 0x72
mov byte [esp + 0x288], 0x71
lea ecx, [esp + 0x28]
call fcn.004a3e90
lea ecx, [esp + 0x228]
call fcn.00403590
mov byte [esp + 0x280], 0x73
push 0x6845a4
lea ecx, [esp + 0x1fc]
call fcn.004035b0
mov byte [esp + 0x280], 0x74
push 0x679a3c
lea eax, [esp + 0x1fc]
push eax
lea ecx, [esp + 0xf0]
call fcn.00417cd0
push eax
call fcn.00404800
add esp, 8
mov bl, al
mov byte [esp + 0x280], 0x73
lea ecx, [esp + 0x1f8]
call fcn.00403680
test bl, bl
je 0x46bbfa
push ecx
lea ecx, [esp + 0x124]
call fcn.00401720
lea ecx, [esp + 0x120]
call fcn.00467280
mov byte [esp + 0x280], 0x75
push 0x6845b8
lea ecx, [esp + 0x80]
call fcn.004035b0
mov byte [esp + 0x280], 0x76
lea eax, [esp + 0x1b0]
push eax
lea eax, [esp + 0x80]
push eax
lea ecx, [esp + 0x128]
call fcn.00468080
mov byte [esp + 0x280], 0x75
lea ecx, [esp + 0x7c]
call fcn.00403680
push 0x684624
lea ecx, [esp + 0x68]
call fcn.004035b0
mov byte [esp + 0x280], 0x77
push 0x684634
lea ecx, [esp + 0x98]
call fcn.004035b0
mov byte [esp + 0x280], 0x78
lea eax, [esp + 0x64]
push eax
lea ecx, [esp + 0xec]
call fcn.00417cd0
push eax
lea eax, [esp + 0x98]
push eax
lea ecx, [esp + 0x128]
call fcn.00468080
mov byte [esp + 0x280], 0x77
lea ecx, [esp + 0x94]
call fcn.00403680
mov byte [esp + 0x280], 0x75
lea ecx, [esp + 0x64]
call fcn.00403680
push ecx
lea eax, [esp + 0xd4]
push eax
lea ecx, [esp + 0x128]
call fcn.00468180
mov byte [esp + 0x280], 0x79
lea eax, [esp + 0xd0]
push eax
lea eax, [esp + 0xf4]
push eax
lea ecx, [esp + 0xb4]
call fcn.00468100
push 0x684624
lea ecx, [esp + 0x50]
call fcn.004035b0
mov byte [esp + 0x280], 0x7a
lea eax, [esp + 0x4c]
push eax
lea ecx, [esp + 0xec]
call fcn.00417cd0
push eax
lea eax, [esp + 0x1b4]
push eax
call fcn.00401520
lea ecx, [eax + 0x3f0]
call fcn.004497a0
mov ecx, eax
call fcn.004036b0
mov byte [esp + 0x280], 0x79
lea ecx, [esp + 0x4c]
call fcn.00403680
movsd xmm0, qword [esp + 0xc4]
addsd xmm0, qword [0x68fe58]
movsd qword [esp + 0xc4], xmm0
mov byte [esp + 0x280], 0x75
lea ecx, [esp + 0xd0]
call fcn.00403680
mov byte [esp + 0x280], 0x73
lea ecx, [esp + 0x120]
call fcn.00467300
mov byte [esp + 0x280], 0x71
lea ecx, [esp + 0x228]
call fcn.00403680
mov byte [esp + 0x280], 0x6e
lea ecx, [esp + 0x1b0]
call fcn.00403680
mov byte [esp + 0x280], 0x6d
lea ecx, [esp + 0xf0]
call fcn.00403680
mov byte [esp + 0x280], 0x6b
lea ecx, [esp + 0xe8]
call fcn.00408ec0
mov byte [esp + 0x280], 0x69
lea ecx, [esp + 0x28]
call fcn.004149c0
inc esi
cmp esi, dword [esp + 0x30]
jl 0x46b820
movsd xmm0, qword [esp + 0xc4]
mulsd xmm0, qword [0x68fe48]
sub esp, 8
movsd qword [esp], xmm0
call fcn.005ecbe0
fstp qword [esp + 0x44]
movsd xmm0, qword [esp + 0x44]
mulsd xmm0, qword [0x68fe68]
add esp, 8
movsd qword [esp + 0x3c], xmm0
call fcn.00401520
movsd xmm0, qword [esp + 0x3c]
push 0x676964
lea ecx, [esp + 0x10c]
movsd qword [eax + 0x3e8], xmm0
call fcn.004035b0
mov byte [esp + 0x280], 0x7b
push ecx
cvttsd2si ecx, qword [esp + 0xc8]
lea edx, [esp + 0x10c]
call fcn.00499670
add esp, 4
lea ecx, [esp + 0xd0]
push 0x6826f0
call fcn.004035b0
mov byte [esp + 0x280], 0x7c
lea eax, [esp + 0x108]
push eax
lea eax, [esp + 0xd4]
push eax
lea ecx, [esp + 0xb4]
call fcn.00468080
mov byte [esp + 0x280], 0x7b
lea ecx, [esp + 0xd0]
call fcn.00403680
push ecx
lea eax, [esp + 0x22c]
push eax
lea ecx, [esp + 0xb4]
call fcn.00468180
mov byte [esp + 0x280], 0x7d
push eax
call fcn.00401520
lea ecx, [eax + 0x3b8]
call fcn.00403640
mov byte [esp + 0x280], 0x7b
lea ecx, [esp + 0x228]
call fcn.00403680
mov byte [esp + 0x280], 0x69
lea ecx, [esp + 0x108]
call fcn.00403680
mov byte [esp + 0x280], 0x66
lea ecx, [esp + 0x2c]
call fcn.004149c0
mov byte [esp + 0x280], 4
lea ecx, [esp + 0xac]
call fcn.00467300
push 0x6845e4
lea ecx, [esp + 0xd4]
call fcn.004035b0
mov byte [esp + 0x280], 0x7e
lea eax, [esp + 0xd0]
push eax
lea ecx, [esp + 0x24]
call fcn.004a25e0
mov bl, al
mov byte [esp + 0x280], 4
lea ecx, [esp + 0xd0]
call fcn.00403680
test bl, bl
je 0x46c01e
push 0x684600
lea ecx, [esp + 0xd4]
call fcn.004035b0
mov byte [esp + 0x280], 0x7f
lea eax, [edi + 0x3c4]
push eax
lea eax, [esp + 0xd4]
push eax
lea ecx, [esp + 0x28]
call fcn.004a2760
mov byte [esp + 0x280], 4
lea ecx, [esp + 0xd0]
call fcn.00403680
push ecx
lea ecx, [esp + 0x30]
mov dword [esp + 0x2c], 0
call fcn.00401730
push 0x6846bc
lea ecx, [esp + 0x50]
call fcn.004035b0
mov byte [esp + 0x280], 0x80
lea eax, [esp + 0x28]
push eax
lea eax, [esp + 0x50]
push eax
lea eax, [esp + 0x34]
push eax
lea ecx, [esp + 0x2c]
call fcn.004a2d40
mov byte [esp + 0x280], 0x82
lea ecx, [esp + 0x4c]
call fcn.00403680
mov ebx, dword [esp + 0x28]
xor esi, esi
test ebx, ebx
jle 0x46c00d
lea eax, [edi + 0x40c]
mov dword [esp + 0x28], eax
mov edi, eax
push ecx
lea ecx, [esp + 0x2c]
call fcn.00401730
push esi
push ecx
lea eax, [esp + 0x34]
mov ecx, esp
mov dword [esp + 0x44], esp
push eax
call fcn.004149a0
mov byte [esp + 0x288], 0x83
lea eax, [esp + 0x30]
push eax
mov byte [esp + 0x28c], 0x82
lea ecx, [esp + 0x2c]
call fcn.004a2f40
mov byte [esp + 0x280], 0x84
push ecx
lea ecx, [esp + 0xc8]
call fcn.00401730
push ecx
lea eax, [esp + 0x2c]
mov ecx, esp
mov dword [esp + 0x40], esp
push eax
call fcn.004149a0
mov byte [esp + 0x284], 0x85
lea eax, [esp + 0xc8]
push eax
mov byte [esp + 0x288], 0x84
lea ecx, [esp + 0x28]
call fcn.004a3120
mov byte [esp + 0x280], 0x86
lea ecx, [esp + 0x108]
call fcn.00403590
mov byte [esp + 0x280], 0x87
lea eax, [esp + 0x108]
push eax
push ecx
lea eax, [esp + 0x30]
mov ecx, esp
mov dword [esp + 0x44], esp
push eax
call fcn.004149a0
mov byte [esp + 0x288], 0x88
mov byte [esp + 0x288], 0x87
lea ecx, [esp + 0x28]
call fcn.004a3e90
push 0x67e7c4
lea ecx, [esp + 0xd4]
call fcn.004035b0
mov byte [esp + 0x280], 0x89
lea eax, [esp + 0x108]
push eax
lea eax, [esp + 0xd4]
push eax
lea ecx, [esp + 0xcc]
call fcn.00417cd0
push eax
mov ecx, edi
call fcn.004497a0
mov ecx, eax
call fcn.004036b0
mov byte [esp + 0x280], 0x87
lea ecx, [esp + 0xd0]
call fcn.00403680
mov byte [esp + 0x280], 0x86
lea ecx, [esp + 0x108]
call fcn.00403680
mov byte [esp + 0x280], 0x84
lea ecx, [esp + 0xc4]
call fcn.00408ec0
mov byte [esp + 0x280], 0x82
lea ecx, [esp + 0x28]
call fcn.004149c0
inc esi
cmp esi, ebx
jl 0x46bea0
mov edi, dword [esp + 0x34]
mov byte [esp + 0x280], 4
lea ecx, [esp + 0x2c]
call fcn.004149c0
push 0x6846fc
lea ecx, [esp + 0xd4]
call fcn.004035b0
mov byte [esp + 0x280], 0x8a
lea eax, [esp + 0xd0]
push eax
lea ecx, [esp + 0x24]
call fcn.004a25e0
mov bl, al
mov byte [esp + 0x280], 4
lea ecx, [esp + 0xd0]
call fcn.00403680
test bl, bl
je 0x46c153
mov edx, edi
xor ecx, ecx
call fcn.00421c10
push ecx
lea ecx, [esp + 0x38]
mov dword [edi + 0x418], eax
call fcn.00401730
push 0x6846fc
lea ecx, [esp + 0xd4]
call fcn.004035b0
mov byte [esp + 0x280], 0x8b
lea eax, [esp + 0xd0]
push eax
lea eax, [esp + 0x38]
push eax
lea ecx, [esp + 0x28]
call fcn.004a2ad0
mov byte [esp + 0x280], 0x8d
lea ecx, [esp + 0xd0]
call fcn.00403680
lea ecx, [esp + 0xf0]
call fcn.00403590
mov byte [esp + 0x280], 0x8e
lea eax, [esp + 0xf0]
push eax
push ecx
lea eax, [esp + 0x3c]
mov ecx, esp
mov dword [esp + 0x44], esp
push eax
call fcn.004149a0
mov byte [esp + 0x288], 0x8f
mov byte [esp + 0x288], 0x8e
lea ecx, [esp + 0x28]
call fcn.004a3bf0
mov ecx, dword [edi + 0x418]
lea edx, [esp + 0xf0]
mov eax, dword [ecx]
push edx
mov eax, dword [eax + 4]
call eax
test al, al
jne 0x46c12e
mov byte [esp + 0x280], 0x8d
jmp 0x46c55e
mov byte [esp + 0x280], 0x8d
lea ecx, [esp + 0xf0]
call fcn.00403680
mov byte [esp + 0x280], 4
lea ecx, [esp + 0x34]
call fcn.004149c0
push 0x684654
lea ecx, [esp + 0xd4]
call fcn.004035b0
mov byte [esp + 0x280], 0x90
lea eax, [esp + 0xd0]
push eax
lea ecx, [esp + 0x24]
call fcn.004a25e0
mov bl, al
mov byte [esp + 0x280], 4
lea ecx, [esp + 0xd0]
call fcn.00403680
mov bh, byte [ebp + 0xc]
test bl, bl
je 0x46c297
mov edx, edi
mov ecx, 5
test bh, bh
jne 0x46c1ae
mov ecx, 1
call fcn.00421c10
push ecx
lea ecx, [esp + 0x38]
mov dword [edi + 0x41c], eax
call fcn.00401730
push 0x684654
lea ecx, [esp + 0xd4]
call fcn.004035b0
mov byte [esp + 0x280], 0x91
lea eax, [esp + 0xd0]
push eax
lea eax, [esp + 0x38]
push eax
lea ecx, [esp + 0x28]
call fcn.004a2ad0
mov byte [esp + 0x280], 0x93
lea ecx, [esp + 0xd0]
call fcn.00403680
lea ecx, [esp + 0xf0]
call fcn.00403590
mov byte [esp + 0x280], 0x94
lea eax, [esp + 0xf0]
push eax
push ecx
lea eax, [esp + 0x3c]
mov ecx, esp
mov dword [esp + 0x44], esp
push eax
call fcn.004149a0
mov byte [esp + 0x288], 0x95
mov byte [esp + 0x288], 0x94
lea ecx, [esp + 0x28]
call fcn.004a3bf0
mov ecx, dword [edi + 0x41c]
lea edx, [esp + 0xf0]
mov eax, dword [ecx]
push edx
mov eax, dword [eax + 4]
call eax
test al, al
jne 0x46c272
mov byte [esp + 0x280], 0x93
jmp 0x46c55e
mov byte [esp + 0x280], 0x93
lea ecx, [esp + 0xf0]
call fcn.00403680
mov byte [esp + 0x280], 4
lea ecx, [esp + 0x34]
call fcn.004149c0
test bh, bh
je 0x46c3a4
push 0x684688
lea ecx, [esp + 0xd4]
call fcn.004035b0
mov byte [esp + 0x280], 0x96
lea eax, [esp + 0xd0]
push eax
lea ecx, [esp + 0x24]
call fcn.004a25e0
mov bl, al
mov byte [esp + 0x280], 4
lea ecx, [esp + 0xd0]
call fcn.00403680
test bl, bl
je 0x46c422
push 0x6847d8
lea ecx, [esp + 0xd4]
call fcn.004035b0
mov byte [esp + 0x280], 0x97
lea eax, [edi + 0x468]
push eax
lea eax, [esp + 0xd4]
push eax
lea ecx, [esp + 0x28]
call fcn.004a2760
mov byte [esp + 0x280], 4
lea ecx, [esp + 0xd0]
call fcn.00403680
push 0x684820
lea ecx, [esp + 0x50]
call fcn.004035b0
mov byte [esp + 0x280], 0x98
lea eax, [edi + 0x480]
push eax
lea eax, [esp + 0x50]
push eax
lea ecx, [esp + 0x28]
call fcn.004a2760
mov byte [esp + 0x280], 4
lea ecx, [esp + 0x4c]
call fcn.00403680
push 0x684730
lea ecx, [esp + 0x68]
call fcn.004035b0
mov byte [esp + 0x280], 0x99
lea eax, [edi + 0x498]
push eax
lea eax, [esp + 0x68]
push eax
lea ecx, [esp + 0x28]
call fcn.004a2760
mov byte [esp + 0x280], 4
lea ecx, [esp + 0x64]
call fcn.00403680
call fcn.00401520
cmp byte [eax + 0x5ac], 0
jne 0x46c447
push 0x684654
lea ecx, [esp + 0xd4]
call fcn.004035b0
mov byte [esp + 0x280], 0x9a
lea eax, [esp + 0xd0]
push eax
lea ecx, [esp + 0x24]
call fcn.004a25e0
test al, al
sete bl
mov byte [esp + 0x280], 4
lea ecx, [esp + 0xd0]
call fcn.00403680
test bl, bl
je 0x46c447
call fcn.00401520
mov ecx, dword [esp + 0x48]
mov edi, dword [eax + 0xf8]
lea esi, [eax + 0xf8]
call fcn.00403750
push eax
push 0x684920
jmp 0x46c76d
call fcn.00401520
mov ecx, dword [esp + 0x48]
mov edi, dword [eax + 0xf8]
lea esi, [eax + 0xf8]
call fcn.00403750
push eax
push 0x684778
jmp 0x46c76d
push 0x684980
lea ecx, [esp + 0xd4]
call fcn.004035b0
mov byte [esp + 0x280], 0x9b
lea eax, [esp + 0xd0]
push eax
lea ecx, [esp + 0x24]
call fcn.004a25e0
mov bl, al
mov byte [esp + 0x280], 4
lea ecx, [esp + 0xd0]
call fcn.00403680
test bl, bl
je 0x46c74d
mov edx, edi
mov ecx, 6
test bh, bh
jne 0x46c49f
mov ecx, 2
call fcn.00421c10
push ecx
lea ecx, [esp + 0x38]
mov dword [edi + 0x420], eax
call fcn.00401730
push 0x684980
lea ecx, [esp + 0xd4]
call fcn.004035b0
mov byte [esp + 0x280], 0x9c
lea eax, [esp + 0xd0]
push eax
lea eax, [esp + 0x38]
push eax
lea ecx, [esp + 0x28]
call fcn.004a2ad0
mov byte [esp + 0x280], 0x9e
lea ecx, [esp + 0xd0]
call fcn.00403680
lea ecx, [esp + 0xf0]
call fcn.00403590
mov byte [esp + 0x280], 0x9f
lea eax, [esp + 0xf0]
push eax
push ecx
lea eax, [esp + 0x3c]
mov ecx, esp
mov dword [esp + 0x44], esp
push eax
call fcn.004149a0
mov byte [esp + 0x288], 0xa0
mov byte [esp + 0x288], 0x9f
lea ecx, [esp + 0x28]
call fcn.004a3bf0
mov ecx, dword [edi + 0x420]
lea edx, [esp + 0xf0]
mov eax, dword [ecx]
push edx
mov eax, dword [eax + 4]
call eax
test al, al
jne 0x46c580
mov byte [esp + 0x280], 0x9e
lea ecx, [esp + 0xf0]
call fcn.00403680
mov byte [esp + 0x280], 4
lea ecx, [esp + 0x34]
call fcn.004149c0
jmp 0x46c779
mov byte [esp + 0x280], 0x9e
lea ecx, [esp + 0xf0]
call fcn.00403680
mov byte [esp + 0x280], 4
lea ecx, [esp + 0x34]
call fcn.004149c0
cmp byte [edi], 0
jne 0x46c5e5
push 0x6848c8
lea ecx, [esp + 0xd4]
call fcn.004035b0
mov byte [esp + 0x280], 0xa1
mov eax, 1
mov dword [esp + 0x44], eax
lea eax, [esp + 0xd0]
push eax
lea ecx, [esp + 0x24]
call fcn.004a25e0
test al, al
jne 0x46c5e5
xor bl, bl
jmp 0x46c5e7
mov bl, 1
mov dword [esp + 0x280], 4
mov eax, dword [esp + 0x44]
test al, 1
je 0x46c60d
and eax, 0xfffffffe
lea ecx, [esp + 0xd0]
mov dword [esp + 0x44], eax
call fcn.00403680
test bl, bl
je 0x46c705
mov edx, edi
mov ecx, 4
call fcn.00421c10
push ecx
lea ecx, [esp + 0x38]
mov dword [edi + 0x424], eax
call fcn.00401730
push 0x6848c8
lea ecx, [esp + 0xd4]
call fcn.004035b0
mov byte [esp + 0x280], 0xa2
lea eax, [esp + 0xd0]
push eax
lea eax, [esp + 0x38]
push eax
lea ecx, [esp + 0x28]
call fcn.004a2ad0
mov byte [esp + 0x280], 0xa4
lea ecx, [esp + 0xd0]
call fcn.00403680
lea ecx, [esp + 0xf0]
call fcn.00403590
mov byte [esp + 0x280], 0xa5
lea eax, [esp + 0xf0]
push eax
push ecx
lea eax, [esp + 0x3c]
mov ecx, esp
mov dword [esp + 0x44], esp
push eax
call fcn.004149a0
mov byte [esp + 0x288], 0xa6
mov byte [esp + 0x288], 0xa5
lea ecx, [esp + 0x28]
call fcn.004a3bf0
mov ecx, dword [edi + 0x424]
lea edx, [esp + 0xf0]
mov eax, dword [ecx]
push edx
mov eax, dword [eax + 4]
call eax
test al, al
jne 0x46c6e0
mov byte [esp + 0x280], 0xa4
jmp 0x46c55e
mov byte [esp + 0x280], 0xa4
lea ecx, [esp + 0xf0]
call fcn.00403680
mov byte [esp + 0x280], 4
lea ecx, [esp + 0x34]
call fcn.004149c0
test bh, bh
jne 0x46c749
push 0x676964
lea ecx, [esp + 0xd4]
call fcn.004035b0
mov byte [esp + 0x280], 0xa7
push 0xffffffffffffffff
lea eax, [esp + 0xd4]
push eax
push 0xffffffffffffffff
mov ecx, edi
call fcn.0046c810
mov byte [esp + 0x280], 4
lea ecx, [esp + 0xd0]
call fcn.00403680
mov bl, 1
jmp 0x46c77b
call fcn.00401520
mov ecx, dword [esp + 0x48]
mov edi, dword [eax + 0xf8]
lea esi, [eax + 0xf8]
call fcn.00403750
push eax
push 0x684868
push 0x683a38
push esi
call dword [edi + 0x24]
add esp, 0x10
xor bl, bl
mov byte [esp + 0x280], 3
lea ecx, [esp + 0x1c8]
call fcn.00403680
mov byte [esp + 0x280], 2
lea ecx, [esp + 0x180]
call fcn.00403680
mov byte [esp + 0x280], 1
lea ecx, [esp + 0x1e0]
call fcn.00403680
mov byte [esp + 0x280], 0
lea ecx, [esp + 0x198]
call fcn.00403680
mov dword [esp + 0x280], 0xffffffff
lea ecx, [esp + 0x20]
call fcn.004a2410
mov al, bl
mov ecx, dword [esp + 0x278]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x230]
xor ecx, esp
call fcn.005e96ad
mov esp, ebp
pop ebp
ret 8