Function at 0x453290
Capabilities:
Access peb ldr_data
Get ntdll base address

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4e8bc2
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x100
mov eax, dword [0x52406c]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0xa8], edx
mov eax, ecx
mov dword [ebp - 0x94], eax
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0xc8], eax
mov eax, dword [ebx + 8]
mov dword [ebp - 0xac], eax
mov eax, dword [ebx + 0x10]
mov dword [ebp - 0xa4], eax
mov eax, dword [ebx + 0x14]
mov dword [ebp - 0xb0], eax
mov eax, dword [ebx + 0x18]
mov edi, dword [ebx + 0xc]
mov dword [ebp - 0xb4], eax
mov eax, dword [ebx + 0x1c]
mov dword [ebp - 0xb8], eax
mov eax, dword [ebx + 0x20]
mov dword [ebp - 0xbc], eax
mov eax, dword [ebx + 0x24]
mov dword [ebp - 0xc0], eax
mov eax, dword [ebx + 0x28]
mov dword [ebp - 0xc4], eax
mov eax, dword [ebx + 0x2c]
mov dword [ebp - 0x28], eax
mov eax, dword [ebx + 0x30]
mov dword [ebp - 0x90], 0
mov dword [ebp - 0x98], eax
mov eax, dword fs:[0x2c]
mov ecx, dword [eax]
mov eax, dword [0x52c45c]
cmp eax, dword [ecx + 4]
jle 0x453411
push 0x52c45c
call fcn.0046cc7b
add esp, 4
cmp dword [0x52c45c], 0xffffffff
jne 0x453411
lea ecx, [ebp - 0x44]
mov dword [ebp - 4], 1
call fcn.00459e50
mov edx, eax
mov byte [ebp - 4], 2
mov ecx, 0x52c460
call fcn.004347a0
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x30]
cmp edx, 8
jb 0x4533df
mov ecx, dword [ebp - 0x44]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4533d5
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x45484b
push edx
push ecx
call fcn.0046c951
add esp, 8
xor eax, eax
mov dword [ebp - 0x34], 0
push 0x4f05f0
mov dword [ebp - 0x30], 7
mov word [ebp - 0x44], ax
call fcn.0046cfd7
add esp, 4
mov byte [ebp - 4], 0
push 0x52c45c
call fcn.0046cc31
add esp, 4
push 0x52c460
lea ecx, [ebp - 0x5c]
call fcn.00432790
mov dword [ebp - 0x90], 2
lea ecx, [ebp - 0x8c]
mov dword [ebp - 4], 3
call fcn.00438680
mov edx, eax
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x74]
call fcn.004347a0
push 3
push 0x50508c
push 0
mov ecx, eax
mov byte [ebp - 4], 5
call fcn.00430b30
mov dword [ebp - 0x90], 6
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x44], xmm0
movq xmm0, qword [eax + 0x10]
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
movq qword [ebp - 0x34], xmm0
mov byte [eax], 0
mov byte [ebp - 4], 7
mov edx, dword [ebp - 0x60]
cmp edx, 0x10
jb 0x4534c0
mov ecx, dword [ebp - 0x74]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4534b6
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x454850
push edx
push ecx
call fcn.0046c951
add esp, 8
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x60], 0xf
mov byte [ebp - 0x74], 0
mov byte [ebp - 4], 8
mov edx, dword [ebp - 0x78]
cmp edx, 8
jb 0x453513
mov ecx, dword [ebp - 0x8c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x453509
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x454855
push edx
push ecx
call fcn.0046c951
add esp, 8
xor eax, eax
mov dword [ebp - 0x7c], 0
xorps xmm0, xmm0
mov dword [ebp - 0x78], 7
movlpd qword [ebp - 0x1c], xmm0
mov word [ebp - 0x8c], ax
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x18], eax
call fcn.0044fff0
mov dword [ebp - 0x1c], eax
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x8c]
push 1
push 0x508894
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x78], 0xf
mov byte [ebp - 0x8c], 0
call fcn.00432b30
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x74]
push 1
push 0x508898
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x60], 0xf
mov byte [ebp - 0x74], 0
call fcn.00432b30
lea eax, [ebp - 0x74]
mov byte [ebp - 4], 0xb
push eax
lea ecx, [ebp - 0x1c]
call fcn.004554e0
lea ecx, [ebp - 0x8c]
cmp eax, ecx
je 0x4535c0
cmp dword [ebp - 0x78], 0x10
push dword [ebp - 0x7c]
cmovae ecx, dword [ebp - 0x8c]
push ecx
mov ecx, eax
call fcn.00432b30
mov byte [ebp - 4], 0xa
mov edx, dword [ebp - 0x60]
cmp edx, 0x10
jb 0x4535f8
mov ecx, dword [ebp - 0x74]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4535ee
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x45485a
push edx
push ecx
call fcn.0046c951
add esp, 8
mov byte [ebp - 4], 9
mov edx, dword [ebp - 0x78]
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x60], 0xf
mov byte [ebp - 0x74], 0
cmp edx, 0x10
jb 0x453645
mov ecx, dword [ebp - 0x8c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x45363b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x45485f
push edx
push ecx
call fcn.0046c951
add esp, 8
push 1
push 0x508894
lea ecx, [ebp - 0x8c]
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x78], 0xf
mov byte [ebp - 0x8c], 0
call fcn.00432b30
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x74]
push 2
push 0x50889c
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x60], 0xf
mov byte [ebp - 0x74], 0
call fcn.00432b30
lea eax, [ebp - 0x74]
mov byte [ebp - 4], 0xd
push eax
lea ecx, [ebp - 0x1c]
call fcn.004554e0
lea ecx, [ebp - 0x8c]
cmp eax, ecx
je 0x4536c1
cmp dword [ebp - 0x78], 0x10
push dword [ebp - 0x7c]
cmovae ecx, dword [ebp - 0x8c]
push ecx
mov ecx, eax
call fcn.00432b30
mov byte [ebp - 4], 0xc
mov edx, dword [ebp - 0x60]
cmp edx, 0x10
jb 0x4536f9
mov ecx, dword [ebp - 0x74]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4536ef
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x454864
push edx
push ecx
call fcn.0046c951
add esp, 8
mov byte [ebp - 4], 9
mov edx, dword [ebp - 0x78]
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x60], 0xf
mov byte [ebp - 0x74], 0
cmp edx, 0x10
jb 0x453746
mov ecx, dword [ebp - 0x8c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x45373c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x454869
push edx
push ecx
call fcn.0046c951
add esp, 8
push 2
push 0x5088a0
lea ecx, [ebp - 0x74]
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x60], 0xf
mov byte [ebp - 0x74], 0
call fcn.00432b30
push 0
mov byte [ebp - 4], 0xe
call fcn.004c86f1
add esp, 4
lea ecx, [ebp - 0x8c]
push edx
push eax
call fcn.004344a0
add esp, 8
mov esi, eax
lea eax, [ebp - 0x74]
mov byte [ebp - 4], 0xf
push eax
lea ecx, [ebp - 0x1c]
call fcn.004554e0
cmp eax, esi
je 0x4537b0
cmp dword [esi + 0x14], 0x10
mov ecx, esi
jb 0x4537a5
mov ecx, dword [esi]
push dword [esi + 0x10]
push ecx
mov ecx, eax
call fcn.00432b30
mov byte [ebp - 4], 0xe
mov edx, dword [ebp - 0x78]
cmp edx, 0x10
jb 0x4537eb
mov ecx, dword [ebp - 0x8c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4537e1
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x45486e
push edx
push ecx
call fcn.0046c951
add esp, 8
mov byte [ebp - 4], 9
mov edx, dword [ebp - 0x60]
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x78], 0xf
mov byte [ebp - 0x8c], 0
cmp edx, 0x10
jb 0x453838
mov ecx, dword [ebp - 0x74]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x45382e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x454873
push edx
push ecx
call fcn.0046c951
add esp, 8
push 3
push 0x5088a4
lea ecx, [ebp - 0x74]
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x60], 0xf
mov byte [ebp - 0x74], 0
call fcn.00432b30
lea eax, [ebp - 0x74]
mov byte [ebp - 4], 0x10
push eax
lea ecx, [ebp - 0x1c]
call fcn.004554e0
lea ecx, [ebp - 0x5c]
cmp eax, ecx
je 0x453883
cmp dword [ebp - 0x48], 0x10
push dword [ebp - 0x4c]
cmovae ecx, dword [ebp - 0x5c]
push ecx
mov ecx, eax
call fcn.00432b30
mov byte [ebp - 4], 9
mov edx, dword [ebp - 0x60]
cmp edx, 0x10
jb 0x4538bb
mov ecx, dword [ebp - 0x74]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4538b1
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x454878
push edx
push ecx
call fcn.0046c951
add esp, 8
push 3
push 0x5088a8
lea ecx, [ebp - 0x74]
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x60], 0xf
mov byte [ebp - 0x74], 0
call fcn.00432b30
lea eax, [ebp - 0x74]
mov byte [ebp - 4], 0x11
push eax
lea ecx, [ebp - 0x1c]
call fcn.004554e0
lea ecx, [ebp - 0x44]
cmp eax, ecx
je 0x453906
cmp dword [ebp - 0x30], 0x10
push dword [ebp - 0x34]
cmovae ecx, dword [ebp - 0x44]
push ecx
mov ecx, eax
call fcn.00432b30
mov byte [ebp - 4], 9
mov edx, dword [ebp - 0x60]
cmp edx, 0x10
jb 0x45393e
mov ecx, dword [ebp - 0x74]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x453934
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x45487d
push edx
push ecx
call fcn.0046c951
add esp, 8
push 2
push 0x5088ac
lea ecx, [ebp - 0x74]
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x60], 0xf
mov byte [ebp - 0x74], 0
call fcn.00432b30
lea eax, [ebp - 0x74]
mov byte [ebp - 4], 0x12
push eax
lea ecx, [ebp - 0x1c]
call fcn.004554e0
cmp eax, edi
je 0x453988
cmp dword [edi + 0x14], 0x10
mov ecx, edi
jb 0x45397d
mov ecx, dword [edi]
push dword [edi + 0x10]
push ecx
mov ecx, eax
call fcn.00432b30
mov byte [ebp - 4], 9
mov edx, dword [ebp - 0x60]
cmp edx, 0x10
jb 0x4539c0
mov ecx, dword [ebp - 0x74]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4539b6
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x454882
push edx
push ecx
call fcn.0046c951
add esp, 8
push 0
push 0x5037ec
lea ecx, [ebp - 0x8c]
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x78], 0xf
mov byte [ebp - 0x8c], 0
call fcn.00432b30
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x74]
push 3
push 0x5088b0
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x60], 0xf
mov byte [ebp - 0x74], 0
call fcn.00432b30
lea eax, [ebp - 0x74]
mov byte [ebp - 4], 0x14
push eax
lea ecx, [ebp - 0x1c]
call fcn.004554e0
lea ecx, [ebp - 0x8c]
cmp eax, ecx
je 0x453a3c
cmp dword [ebp - 0x78], 0x10
push dword [ebp - 0x7c]
cmovae ecx, dword [ebp - 0x8c]
push ecx
mov ecx, eax
call fcn.00432b30
mov byte [ebp - 4], 0x13
mov edx, dword [ebp - 0x60]
cmp edx, 0x10
jb 0x453a74
mov ecx, dword [ebp - 0x74]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x453a6a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x454887
push edx
push ecx
call fcn.0046c951
add esp, 8
mov byte [ebp - 4], 9
mov edx, dword [ebp - 0x78]
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x60], 0xf
mov byte [ebp - 0x74], 0
cmp edx, 0x10
jb 0x453ac1
mov ecx, dword [ebp - 0x8c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x453ab7
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x45488c
push edx
push ecx
call fcn.0046c951
add esp, 8
push 5
push str.event
lea ecx, [ebp - 0x8c]
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x78], 0xf
mov byte [ebp - 0x8c], 0
call fcn.00432b30
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x74]
push 1
push 0x5088bc
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x60], 0xf
mov byte [ebp - 0x74], 0
call fcn.00432b30
lea eax, [ebp - 0x74]
mov byte [ebp - 4], 0x16
push eax
lea ecx, [ebp - 0x1c]
call fcn.004554e0
lea ecx, [ebp - 0x8c]
cmp eax, ecx
je 0x453b3d
cmp dword [ebp - 0x78], 0x10
push dword [ebp - 0x7c]
cmovae ecx, dword [ebp - 0x8c]
push ecx
mov ecx, eax
call fcn.00432b30
mov byte [ebp - 4], 0x15
mov edx, dword [ebp - 0x60]
cmp edx, 0x10
jb 0x453b75
mov ecx, dword [ebp - 0x74]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x453b6b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x454891
push edx
push ecx
call fcn.0046c951
add esp, 8
mov byte [ebp - 4], 9
mov edx, dword [ebp - 0x78]
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x60], 0xf
mov byte [ebp - 0x74], 0
cmp edx, 0x10
jb 0x453bc2
mov ecx, dword [ebp - 0x8c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x453bb8
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x454896
push edx
push ecx
call fcn.0046c951
add esp, 8
push 3
push 0x5088c0
lea ecx, [ebp - 0x74]
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x60], 0xf
mov byte [ebp - 0x74], 0
call fcn.00432b30
lea eax, [ebp - 0x74]
mov byte [ebp - 4], 0x17
push eax
lea ecx, [ebp - 0x1c]
call fcn.004554e0
mov edx, dword [ebp - 0xa4]
cmp eax, edx
je 0x453c12
cmp dword [edx + 0x14], 0x10
mov ecx, edx
jb 0x453c07
mov ecx, dword [edx]
push dword [edx + 0x10]
push ecx
mov ecx, eax
call fcn.00432b30
mov byte [ebp - 4], 9
mov edx, dword [ebp - 0x60]
cmp edx, 0x10
jb 0x453c4a
mov ecx, dword [ebp - 0x74]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x453c40
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x45489b
push edx
push ecx
call fcn.0046c951
add esp, 8
push 2
push 0x5088c4
lea ecx, [ebp - 0x74]
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x60], 0xf
mov byte [ebp - 0x74], 0
call fcn.00432b30
lea eax, [ebp - 0x74]
mov byte [ebp - 4], 0x18
push eax
lea ecx, [ebp - 0x1c]
call fcn.004554e0
mov edx, dword [ebp - 0xa8]
cmp eax, edx
je 0x453c9a
cmp dword [edx + 0x14], 0x10
mov ecx, edx
jb 0x453c8f
mov ecx, dword [edx]
push dword [edx + 0x10]
push ecx
mov ecx, eax
call fcn.00432b30
mov byte [ebp - 4], 9
mov edx, dword [ebp - 0x60]
cmp edx, 0x10
jb 0x453cd2
mov ecx, dword [ebp - 0x74]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x453cc8
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4548a0
push edx
push ecx
call fcn.0046c951
add esp, 8
push 2
push 0x5088c8
lea ecx, [ebp - 0x74]
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x60], 0xf
mov byte [ebp - 0x74], 0
call fcn.00432b30
lea eax, [ebp - 0x74]
mov byte [ebp - 4], 0x19
push eax
lea ecx, [ebp - 0x1c]
call fcn.004554e0
mov edx, dword [ebp - 0xac]
cmp eax, edx
je 0x453d22
cmp dword [edx + 0x14], 0x10
mov ecx, edx
jb 0x453d17
mov ecx, dword [edx]
push dword [edx + 0x10]
push ecx
mov ecx, eax
call fcn.00432b30
mov byte [ebp - 4], 9
mov edx, dword [ebp - 0x60]
cmp edx, 0x10
jb 0x453d5a
mov ecx, dword [ebp - 0x74]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x453d50
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4548a5
push edx
push ecx
call fcn.0046c951
add esp, 8
mov edx, 0x525ae0
lea ecx, [ebp - 0x110]
call fcn.00434880
mov edx, eax
mov byte [ebp - 4], 0x1a
cmp dword [edx + 0x14], 8
jb 0x453d78
mov edx, dword [edx]
mov ecx, edx
mov dword [ebp - 0x7c], 0
xor eax, eax
mov dword [ebp - 0x78], 7
mov word [ebp - 0x8c], ax
lea esi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x453d94
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x8c]
call fcn.00432030
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x74]
push 3
xor eax, eax
mov dword [ebp - 0x64], 0
push 0x5088cc
mov dword [ebp - 0x60], 7
mov word [ebp - 0x74], ax
call fcn.00432030
lea edx, [ebp - 0x8c]
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0xf8]
call fcn.004347a0
mov esi, eax
lea edx, [ebp - 0x74]
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0xe0]
call fcn.004347a0
push eax
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x1e
call fcn.004554e0
cmp eax, esi
je 0x453e26
cmp dword [esi + 0x14], 0x10
mov ecx, esi
jb 0x453e1b
mov ecx, dword [esi]
push dword [esi + 0x10]
push ecx
mov ecx, eax
call fcn.00432b30
mov byte [ebp - 4], 0x1d
mov edx, dword [ebp - 0xcc]
cmp edx, 0x10
jb 0x453e64
mov ecx, dword [ebp - 0xe0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x453e5a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4548aa
push edx
push ecx
call fcn.0046c951
add esp, 8
mov byte [ebp - 4], 0x1c
mov edx, dword [ebp - 0xe4]
mov dword [ebp - 0xd0], 0
mov dword [ebp - 0xcc], 0xf
mov byte [ebp - 0xe0], 0
cmp edx, 0x10
jb 0x453ebd
mov ecx, dword [ebp - 0xf8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x453eb3
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4548af
push edx
push ecx
call fcn.0046c951
add esp, 8
mov byte [ebp - 4], 0x1b
mov edx, dword [ebp - 0x60]
cmp edx, 8
jb 0x453efb
mov ecx, dword [ebp - 0x74]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x453ef1
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4548b4
push edx
push ecx
call fcn.0046c951
add esp, 8
mov byte [ebp - 4], 0x1a
mov edx, dword [ebp - 0x78]
cmp edx, 8
jb 0x453f3c
mov ecx, dword [ebp - 0x8c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x453f32
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4548b9
push edx
push ecx
call fcn.0046c951
add esp, 8
mov byte [ebp - 4], 9
mov edx, dword [ebp - 0xfc]
cmp edx, 8
jb 0x453f80
mov ecx, dword [ebp - 0x110]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x453f76
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4548be
push edx
push ecx
call fcn.0046c951
add esp, 8
push 2
push 0x5088d4
lea ecx, [ebp - 0x74]
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x60], 0xf
mov byte [ebp - 0x74], 0
call fcn.00432b30
lea eax, [ebp - 0x74]
mov byte [ebp - 4], 0x1f
push eax
lea ecx, [ebp - 0x1c]
call fcn.004554e0
cmp eax, 0x525ac8
je 0x453fd9
cmp dword [0x525adc], 0x10
mov ecx, 0x525ac8
push dword [0x525ad8]
cmovae ecx, dword [0x525ac8]
push ecx
mov ecx, eax
call fcn.00432b30
mov byte [ebp - 4], 9
mov edx, dword [ebp - 0x60]
cmp edx, 0x10
jb 0x454011
mov ecx, dword [ebp - 0x74]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x454007
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4548c3
push edx
push ecx
call fcn.0046c951
add esp, 8
push 3
push 0x5088d8
lea ecx, [ebp - 0x74]
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x60], 0xf
mov byte [ebp - 0x74], 0
call fcn.00432b30
lea eax, [ebp - 0x74]
mov byte [ebp - 4], 0x20
push eax
lea ecx, [ebp - 0x1c]
call fcn.004554e0
mov edx, dword [ebp - 0xb0]
cmp eax, edx
je 0x454061
cmp dword [edx + 0x14], 0x10
mov ecx, edx
jb 0x454056
mov ecx, dword [edx]
push dword [edx + 0x10]
push ecx
mov ecx, eax
call fcn.00432b30
mov byte [ebp - 4], 9
mov edx, dword [ebp - 0x60]
cmp edx, 0x10
jb 0x454099
mov ecx, dword [ebp - 0x74]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x45408f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4548c8
push edx
push ecx
call fcn.0046c951
add esp, 8
push 3
push 0x5088dc
lea ecx, [ebp - 0x74]
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x60], 0xf
mov byte [ebp - 0x74], 0
call fcn.00432b30
lea eax, [ebp - 0x74]
mov byte [ebp - 4], 0x21
push eax
lea ecx, [ebp - 0x1c]
call fcn.004554e0
mov edx, dword [ebp - 0xb4]
cmp eax, edx
je 0x4540e9
cmp dword [edx + 0x14], 0x10
mov ecx, edx
jb 0x4540de
mov ecx, dword [edx]
push dword [edx + 0x10]
push ecx
mov ecx, eax
call fcn.00432b30
mov byte [ebp - 4], 9
mov edx, dword [ebp - 0x60]
cmp edx, 0x10
jb 0x454121
mov ecx, dword [ebp - 0x74]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x454117
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4548cd
push edx
push ecx
call fcn.0046c951
add esp, 8
push 3
push 0x5088e0
lea ecx, [ebp - 0x74]
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x60], 0xf
mov byte [ebp - 0x74], 0
call fcn.00432b30
lea eax, [ebp - 0x74]
mov byte [ebp - 4], 0x22
push eax
lea ecx, [ebp - 0x1c]
call fcn.004554e0
mov edx, dword [ebp - 0xb8]
cmp eax, edx
je 0x454171
cmp dword [edx + 0x14], 0x10
mov ecx, edx
jb 0x454166
mov ecx, dword [edx]
push dword [edx + 0x10]
push ecx
mov ecx, eax
call fcn.00432b30
mov byte [ebp - 4], 9
mov edx, dword [ebp - 0x60]
cmp edx, 0x10
jb 0x4541a9
mov ecx, dword [ebp - 0x74]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x45419f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4548d2
push edx
push ecx
call fcn.0046c951
add esp, 8
push 3
push 0x5088e4
lea ecx, [ebp - 0x74]
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x60], 0xf
mov byte [ebp - 0x74], 0
call fcn.00432b30
lea eax, [ebp - 0x74]
mov byte [ebp - 4], 0x23
push eax
lea ecx, [ebp - 0x1c]
call fcn.004554e0
mov edx, dword [ebp - 0xbc]
cmp eax, edx
je 0x4541f9
cmp dword [edx + 0x14], 0x10
mov ecx, edx
jb 0x4541ee
mov ecx, dword [edx]
push dword [edx + 0x10]
push ecx
mov ecx, eax
call fcn.00432b30
mov byte [ebp - 4], 9
mov edx, dword [ebp - 0x60]
cmp edx, 0x10
jb 0x454231
mov ecx, dword [ebp - 0x74]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x454227
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4548d7
push edx
push ecx
call fcn.0046c951
add esp, 8
push 3
push 0x5088e8
lea ecx, [ebp - 0x74]
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x60], 0xf
mov byte [ebp - 0x74], 0
call fcn.00432b30
lea eax, [ebp - 0x74]
mov byte [ebp - 4], 0x24
push eax
lea ecx, [ebp - 0x1c]
call fcn.004554e0
mov edx, dword [ebp - 0xc0]
cmp eax, edx
je 0x454281
cmp dword [edx + 0x14], 0x10
mov ecx, edx
jb 0x454276
mov ecx, dword [edx]
push dword [edx + 0x10]
push ecx
mov ecx, eax
call fcn.00432b30
mov byte [ebp - 4], 9
mov edx, dword [ebp - 0x60]
cmp edx, 0x10
jb 0x4542b9
mov ecx, dword [ebp - 0x74]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4542af
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4548dc
push edx
push ecx
call fcn.0046c951
add esp, 8
push 3
push 0x5088ec
lea ecx, [ebp - 0x74]
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x60], 0xf
mov byte [ebp - 0x74], 0
call fcn.00432b30
lea eax, [ebp - 0x74]
mov byte [ebp - 4], 0x25
push eax
lea ecx, [ebp - 0x1c]
call fcn.004554e0
mov edx, dword [ebp - 0xc4]
cmp eax, edx
je 0x454309
cmp dword [edx + 0x14], 0x10
mov ecx, edx
jb 0x4542fe
mov ecx, dword [edx]
push dword [edx + 0x10]
push ecx
mov ecx, eax
call fcn.00432b30
mov byte [ebp - 4], 9
mov edx, dword [ebp - 0x60]
cmp edx, 0x10
jb 0x454341
mov ecx, dword [ebp - 0x74]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x454337
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4548e1
push edx
push ecx
call fcn.0046c951
add esp, 8
push 3
push 0x5088f0
lea ecx, [ebp - 0x74]
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x60], 0xf
mov byte [ebp - 0x74], 0
call fcn.00432b30
lea eax, [ebp - 0x74]
mov byte [ebp - 4], 0x26
push eax
lea ecx, [ebp - 0x1c]
call fcn.004554e0
mov edx, dword [ebp - 0x28]
cmp eax, edx
je 0x45438e
cmp dword [edx + 0x14], 0x10
mov ecx, edx
jb 0x454383
mov ecx, dword [edx]
push dword [edx + 0x10]
push ecx
mov ecx, eax
call fcn.00432b30
mov byte [ebp - 4], 9
mov edx, dword [ebp - 0x60]
cmp edx, 0x10
jb 0x4543c6
mov ecx, dword [ebp - 0x74]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4543bc
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4548e6
push edx
push ecx
call fcn.0046c951
add esp, 8
push 3
push 0x5088f4
lea ecx, [ebp - 0x74]
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x60], 0xf
mov byte [ebp - 0x74], 0
call fcn.00432b30
lea eax, [ebp - 0x74]
mov byte [ebp - 4], 0x27
push eax
lea ecx, [ebp - 0x1c]
call fcn.004554e0
mov edx, dword [ebp - 0x98]
cmp eax, edx
je 0x454416
cmp dword [edx + 0x14], 0x10
mov ecx, edx
jb 0x45440b
mov ecx, dword [edx]
push dword [edx + 0x10]
push ecx
mov ecx, eax
call fcn.00432b30
mov byte [ebp - 4], 9
mov edx, dword [ebp - 0x60]
cmp edx, 0x10
jb 0x45444e
mov ecx, dword [ebp - 0x74]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x454444
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4548eb
push edx
push ecx
call fcn.0046c951
add esp, 8
lea eax, [ebp - 0xe0]
xorps xmm0, xmm0
push eax
lea ecx, [ebp - 0x1c]
movlpd qword [ebp - 0x2c], xmm0
call fcn.004526f0
push eax
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 0x28
call fcn.00440470
mov byte [ebp - 4], 9
mov edx, dword [ebp - 0xcc]
cmp edx, 0x10
jb 0x4544b3
mov ecx, dword [ebp - 0xe0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4544a9
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4548f0
push edx
push ecx
call fcn.0046c951
add esp, 8
mov dword [ebp - 0xd0], 0
mov dword [ebp - 0xcc], 0xf
mov byte [ebp - 0xe0], 0
mov byte [ebp - 4], 0x29
lea eax, [ebp - 0x94]
push dword [ebp - 0xc8]
lea ecx, [ebp - 0x80]
mov dword [ebp - 0x80], 0
push eax
lea eax, [ebp - 0x9c]
mov dword [ebp - 0x7c], 0
push eax
mov dword [ebp - 0x78], 0
call fcn.00457610
lea eax, [ebp - 0x80]
mov byte [ebp - 4], 0x2a
push eax
lea ecx, [ebp - 0x2c]
call fcn.00440630
lea ecx, [ebp - 0x80]
call fcn.00417e10
push fcn.00402350
push 1
push 8
lea eax, [ebp - 0x9c]
mov byte [ebp - 4], 0x2d
push eax
call fcn.0046c9c0
xorps xmm0, xmm0
movlpd qword [ebp - 0x24], xmm0
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x20], 0
call fcn.0044fff0
mov dword [ebp - 0x24], eax
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0x8c]
push 1
push 0x5088f8
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x78], 0xf
mov byte [ebp - 0x8c], 0
call fcn.00432b30
mov byte [ebp - 4], 0x2f
lea ecx, [ebp - 0x74]
push 1
push 0x508898
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x60], 0xf
mov byte [ebp - 0x74], 0
call fcn.00432b30
lea eax, [ebp - 0x74]
mov byte [ebp - 4], 0x30
push eax
lea ecx, [ebp - 0x24]
call fcn.004554e0
lea ecx, [ebp - 0x8c]
cmp eax, ecx
je 0x4545d2
cmp dword [ebp - 0x78], 0x10
push dword [ebp - 0x7c]
cmovae ecx, dword [ebp - 0x8c]
push ecx
mov ecx, eax
call fcn.00432b30
mov byte [ebp - 4], 0x2f
mov edx, dword [ebp - 0x60]
cmp edx, 0x10
jb 0x45460a
mov ecx, dword [ebp - 0x74]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x454600
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4548f5
push edx
push ecx
call fcn.0046c951
add esp, 8
mov byte [ebp - 4], 0x2e
mov edx, dword [ebp - 0x78]
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x60], 0xf
mov byte [ebp - 0x74], 0
cmp edx, 0x10
jb 0x454657
mov ecx, dword [ebp - 0x8c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x45464d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4548fa
push edx
push ecx
call fcn.0046c951
add esp, 8
push 1
push 0x5088fc
lea ecx, [ebp - 0x74]
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x60], 0xf
mov byte [ebp - 0x74], 0
call fcn.00432b30
mov byte [ebp - 4], 0x32
lea edx, [ebp - 0x8c]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x78], 0xf
mov byte [ebp - 0x8c], 0
mov eax, dword [ecx]
push edx
mov dword [ebp - 0x90], 0xe
call dword [eax + 0xc]
lea eax, [ebp - 0x74]
push eax
lea ecx, [ebp - 0x24]
call fcn.004554e0
lea ecx, [ebp - 0x8c]
cmp eax, ecx
je 0x4546d6
cmp dword [ebp - 0x78], 0x10
push dword [ebp - 0x7c]
cmovae ecx, dword [ebp - 0x8c]
push ecx
mov ecx, eax
call fcn.00432b30
mov byte [ebp - 4], 0x31
mov edx, dword [ebp - 0x78]
mov dword [ebp - 0x90], 6
cmp edx, 0x10
jb 0x45471b
mov ecx, dword [ebp - 0x8c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x454711
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4548ff
push edx
push ecx
call fcn.0046c951
add esp, 8
mov byte [ebp - 4], 0x2e
mov edx, dword [ebp - 0x60]
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x78], 0xf
mov byte [ebp - 0x8c], 0
cmp edx, 0x10
jb 0x454768
mov ecx, dword [ebp - 0x74]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x45475e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x454904
push edx
push ecx
call fcn.0046c951
add esp, 8
mov edi, dword [ebp - 0x94]
lea ecx, [ebp - 0x24]
push edi
call fcn.004526f0
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x90], 7
call fcn.0044fef0
mov byte [ebp - 4], 0x33
mov esi, dword [ebp - 0x28]
test esi, esi
je 0x4547bb
or edi, 0xffffffff
mov eax, edi
lock xadd dword [esi + 4], eax
jne 0x4547b5
mov eax, dword [esi]
mov ecx, esi
call dword [eax]
lock xadd dword [esi + 8], edi
dec edi
jne 0x4547b5
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 4]
mov edi, dword [ebp - 0x94]
lea ecx, [ebp - 0x1c]
call fcn.0044fef0
mov edx, dword [ebp - 0x30]
cmp edx, 0x10
jb 0x4547f7
mov ecx, dword [ebp - 0x44]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4547ed
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x454909
push edx
push ecx
call fcn.0046c951
add esp, 8
mov edx, dword [ebp - 0x48]
cmp edx, 0x10
jb 0x45482b
mov ecx, dword [ebp - 0x5c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x454821
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x45490e
push edx
push ecx
call fcn.0046c951
add esp, 8
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0046c93b
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
call fcn.004be3cc
call fcn.004be3cc
call fcn.004be3cc
call fcn.004be3cc
call fcn.004be3cc
call fcn.004be3cc
call fcn.004be3cc
call fcn.004be3cc
call fcn.004be3cc
call fcn.004be3cc
call fcn.004be3cc
call fcn.004be3cc
call fcn.004be3cc
call fcn.004be3cc
call fcn.004be3cc
call fcn.004be3cc
call fcn.004be3cc
call fcn.004be3cc
call fcn.004be3cc
call fcn.004be3cc
call fcn.004be3cc
call fcn.004be3cc
call fcn.004be3cc
call fcn.004be3cc
call fcn.004be3cc
call fcn.004be3cc
call fcn.004be3cc
call fcn.004be3cc
call fcn.004be3cc
call fcn.004be3cc
call fcn.004be3cc
call fcn.004be3cc
call fcn.004be3cc
call fcn.004be3cc
call fcn.004be3cc
call fcn.004be3cc
call fcn.004be3cc
call fcn.004be3cc
call fcn.004be3cc
call fcn.004be3cc
int3