Function at 0x464810
Capabilities:
Enumerate pe sections
Get file size
Read file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x55b93d
mov eax, dword fs:[0]
push eax
sub esp, 0xd9c
mov eax, dword [0x5c04b4]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov edi, ecx
mov dword [ebp - 0xc54], edi
mov ecx, dword [ebp + 8]
mov dword [ebp - 0xc44], ecx
mov ebx, dword [ebp + 0x18]
mov esi, dword [ebp + 0x20]
mov dword [ebp - 0xc7c], esi
mov eax, dword [ebp + 0x28]
mov dword [ebp - 0xc3c], eax
test eax, eax
je 0x464871
mov dword [eax], 0
push ecx
mov ecx, edi
call fcn.004a8130
mov ecx, eax
mov dword [ebp - 0xc40], ecx
test ecx, ecx
je case.default.0x4677cd
mov dword [ebp - 4], 0
mov edx, dword [ebp + 0x14]
cmp edx, 0xe00
ja 0x466420
je 0x4663d4
cmp edx, 0x9c
ja case.0x4683eb.16777234
movzx eax, byte [edx + 0x469350]
jmp dword [eax*4 + 0x46918c]
test esi, esi
je 0x46846b
cmp dword [ebp + 0x24], 0x8c
jb 0x46846b
mov ecx, dword [ebp - 0xc3c]
test ecx, ecx
je 0x46846b
mov dword [ecx], 0x8c
mov ecx, esi
call fcn.00463ee0
jmp 0x46916c
test ebx, ebx
je case.default.0x4677cd
cmp dword [ebp + 0x1c], 4
jb case.default.0x4677cd
test esi, esi
je 0x46846b
cmp dword [ebp + 0x24], 4
jb 0x46846b
mov ecx, dword [ebp - 0xc3c]
test ecx, ecx
je 0x46846b
mov dword [ecx], 4
push dword [ebx]
mov eax, dword [ebp - 0xc44]
push eax
mov ecx, edi
call fcn.004b84d0
mov dword [esi], eax
xor eax, eax
jmp 0x46916c
test esi, esi
je 0x46846b
cmp dword [ebp + 0x24], 4
jb 0x46846b
mov ecx, dword [ebp - 0xc3c]
test ecx, ecx
je 0x46846b
mov dword [ecx], 4
mov ecx, edi
call fcn.0049bd70
mov dword [esi], eax
xor eax, eax
jmp 0x46916c
push ecx
mov ecx, edi
call fcn.00460870
xor eax, eax
jmp 0x46916c
mov ecx, edi
call fcn.004a8200
xor eax, eax
jmp 0x46916c
test ebx, ebx
je case.default.0x4677cd
cmp dword [ebp + 0x1c], 0x10
jb case.default.0x4677cd
mov ecx, dword [ebx + 4]
add ecx, ebx
mov edx, dword [ebx + 8]
call fcn.004f3770
test eax, eax
js 0x469167
cmp dword [ebx + 0xc], 0
je 0x4649cc
mov ecx, edi
call fcn.004a8200
mov ecx, edi
call fcn.0046e1c0
xor eax, eax
jmp 0x46916c
test ebx, ebx
je case.default.0x4677cd
cmp dword [ebp + 0x1c], 0x10
jb case.default.0x4677cd
test esi, esi
je 0x46846b
cmp dword [ebp + 0x24], 0x58
jb 0x46846b
mov ecx, dword [ebp - 0xc3c]
test ecx, ecx
je 0x46846b
mov dword [ecx], 0x58
push esi
push ebx
mov eax, dword [ebp - 0xc44]
push eax
call fcn.004812d0
jmp 0x46916c
test ebx, ebx
je case.default.0x4677cd
cmp dword [ebp + 0x1c], 0x14
jb case.default.0x4677cd
push dword [ebx + 8]
mov eax, dword [ebx + 0x10]
add eax, ebx
push eax
mov eax, dword [ebx + 0xc]
add eax, ebx
push eax
push dword [ebx + 4]
push ecx
mov ecx, edi
call fcn.0049e9d0
movzx eax, al
neg eax
sbb eax, eax
and eax, 0xfffffff2
add eax, 0xe
jmp 0x46916c
test ebx, ebx
je case.default.0x4677cd
cmp dword [ebp + 0x1c], 0x10
jb case.default.0x4677cd
call fcn.004a13a0
mov edi, eax
test edi, edi
je 0x464aaf
mov ecx, dword [ebx + 8]
add ecx, ebx
mov eax, dword [edi + 0x58]
mov eax, dword [eax + 8]
test eax, eax
je 0x464aa8
push 0
push dword [ebx + 0xc]
push ecx
push dword [ebx + 4]
push dword [ebx]
push 0xfbf
call eax
add esp, 0x18
mov esi, eax
jmp 0x464ab4
mov esi, 0x1b67
jmp 0x464ab4
mov esi, 0xc1d
mov ecx, edi
call fcn.004a13d0
neg esi
sbb esi, esi
and esi, 0xe
mov eax, esi
jmp 0x46916c
test ebx, ebx
je case.default.0x4677cd
cmp dword [ebp + 0x1c], 0xc
jb case.default.0x4677cd
push dword [ebx + 8]
push dword [ebx + 4]
lea ecx, [edi + 0x94f8]
call fcn.0054e0f0
movzx eax, al
neg eax
sbb eax, eax
and eax, 0xfffffff2
add eax, 0xe
jmp 0x46916c
test ebx, ebx
je case.default.0x4677cd
cmp dword [ebp + 0x1c], 8
jb case.default.0x4677cd
cmp dword [ebx + 4], 0
je 0x464b1e
push dword [edi + 0x9a7c]
jmp 0x464b24
push dword [edi + 0x9a80]
call dword [sym.imp.KERNEL32.dll_SetEvent]
test esi, esi
je 0x46846b
mov ecx, dword [ebp + 0x24]
cmp ecx, 0x10
jb 0x46846b
mov eax, dword [ebp - 0xc3c]
test eax, eax
je 0x46846b
mov dword [eax], 0x10
test byte [edi + 0x9e58], 8
jne 0x464b65
mov eax, 2
jmp 0x46916c
push eax
push ecx
push esi
mov ecx, edi
call fcn.0049f2a0
jmp 0x46916c
cmp byte [edi + 0x95fc], 0
jne case.0x4648b8.22
push 0
push 0
push 0x416
push dword [edi + 0x1c98]
call dword [0x5c0134]
xor eax, eax
jmp 0x46916c
test ebx, ebx
je case.default.0x4677cd
cmp dword [ebp + 0x1c], 0x28
jb case.default.0x4677cd
cmp dword [ebx], 0x28
jb 0x464bf9
push dword [ebx + 0x24]
mov eax, dword [ebx + 0x20]
add eax, ebx
push eax
mov eax, dword [ebx + 0x1c]
add eax, ebx
push eax
push ecx
mov eax, dword [ebx + 0x14]
add eax, ebx
push eax
mov eax, dword [ebx + 0x10]
add eax, ebx
push eax
push dword [ebx + 0xc]
push dword [ebx + 8]
push dword [ebx + 4]
mov eax, dword [ebp - 0xc44]
push eax
mov ecx, edi
call fcn.0046b210
movzx eax, al
neg eax
sbb eax, eax
and eax, 0xfffffff2
add eax, 0xe
jmp 0x46916c
mov esi, dword [ebx + 0x20]
add esi, ebx
mov edx, dword [ebx + 0x1c]
add edx, ebx
mov ecx, dword [ebx + 0x14]
add ecx, ebx
mov eax, dword [ebx + 0x10]
add eax, ebx
push 0xffffffffffffffff
push esi
push edx
push ecx
push ecx
push eax
push 0
push dword [ebx + 0xc]
push dword [ebx + 8]
push dword [ebx + 4]
mov eax, dword [ebp - 0xc44]
push eax
mov ecx, edi
call fcn.0046b240
movzx eax, al
neg eax
sbb eax, eax
and eax, 0xfffffff2
add eax, 0xe
jmp 0x46916c
test ebx, ebx
je case.default.0x4677cd
cmp dword [ebp + 0x1c], 0xc
jb case.default.0x4677cd
push dword [ebx + 8]
push dword [ebx + 4]
mov eax, dword [ebp - 0xc44]
push eax
mov ecx, edi
call fcn.0046b7e0
movzx eax, al
neg eax
sbb eax, eax
and eax, 0xfffffff2
add eax, 0xe
jmp 0x46916c
test ebx, ebx
je case.default.0x4677cd
cmp dword [ebp + 0x1c], 0x14
jb case.default.0x4677cd
test esi, esi
je 0x46846b
cmp dword [ebp + 0x24], 4
jb 0x46846b
mov ecx, dword [ebp - 0xc3c]
test ecx, ecx
je 0x46846b
mov dword [ecx], 4
push esi
push ebx
lea ecx, [edi + 0x20]
call fcn.0047dd70
jmp 0x46916c
test ebx, ebx
je case.default.0x4677cd
cmp dword [ebp + 0x1c], 8
jb case.default.0x4677cd
test esi, esi
je 0x46846b
mov ecx, dword [ebp + 0x24]
cmp ecx, 0x14
jb 0x46846b
mov eax, dword [ebp - 0xc3c]
test eax, eax
je 0x46846b
mov dword [eax], 0x14
push eax
push ecx
push esi
push ebx
mov ecx, edi
call fcn.0049ee70
jmp 0x46916c
test ebx, ebx
je case.default.0x4677cd
cmp dword [ebp + 0x1c], 0x18
jb case.default.0x4677cd
push ebx
mov ecx, edi
call fcn.0049f150
jmp 0x46916c
test ebx, ebx
je case.default.0x4677cd
mov eax, dword [ebp + 0x1c]
cmp eax, 4
jb case.default.0x4677cd
shr eax, 2
push eax
push ebx
mov ecx, edi
call fcn.00496130
xor eax, eax
jmp 0x46916c
test ebx, ebx
je case.default.0x4677cd
mov eax, dword [ebp + 0x1c]
cmp eax, 8
jb case.default.0x4677cd
shr eax, 2
dec eax
push eax
lea eax, [ebx + 4]
push eax
push dword [ebx]
mov ecx, edi
call fcn.00496290
xor eax, eax
jmp 0x46916c
test ebx, ebx
je case.default.0x4677cd
cmp dword [ebp + 0x1c], 4
jb case.default.0x4677cd
test esi, esi
je 0x46846b
cmp dword [ebp + 0x24], 0xc
jb 0x46846b
mov ecx, dword [ebp - 0xc3c]
test ecx, ecx
je 0x46846b
mov dword [ecx], 0xc
push esi
push dword [ebx]
mov ecx, edi
call fcn.00496f20
jmp 0x46916c
xor ebx, ebx
mov dword [ebp - 0xd1c], ebx
lea ebx, [ebx]
cmp ebx, dword [edi + 0x1dbc]
jge case.0x4648b8.22
add edi, 0x9494
push edi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov ecx, dword [ebp - 0xc54]
mov eax, dword [ecx + 0x1db8]
mov esi, dword [eax + ebx*4]
push edi
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push 0
mov ecx, esi
call fcn.004830d0
inc ebx
mov dword [ebp - 0xd1c], ebx
mov edi, dword [ebp - 0xc54]
jmp 0x464dd0
test ebx, ebx
je case.default.0x4677cd
cmp dword [ebp + 0x1c], 4
jb case.default.0x4677cd
xor eax, eax
mov dword [ebp - 0xc78], eax
cmp eax, dword [edi + 0x1dbc]
jge case.default.0x4677cd
lea esi, [edi + 0x9494]
push esi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [edi + 0x1db8]
mov ecx, dword [ebp - 0xc78]
mov eax, dword [eax + ecx*4]
mov dword [ebp - 0xc68], eax
push esi
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov ecx, dword [ebx]
mov eax, dword [ebp - 0xc68]
cmp ecx, dword [eax + 4]
jne 0x464eb7
cmp ecx, 2
jne 0x464eb7
push 0
push 0
mov ecx, dword [eax + 0xc]
call fcn.004f3120
add esp, 8
mov esi, eax
test esi, esi
jne 0x464ea9
lea edx, [eax + 0x4c]
mov ecx, dword [edi + 0x1db0]
call fcn.00513500
lea edx, [esi + 4]
mov ecx, dword [edi + 0x1db0]
call fcn.00513500
neg esi
sbb esi, esi
and esi, 0xe
mov eax, esi
jmp 0x46916c
mov eax, dword [ebp - 0xc78]
inc eax
jmp 0x464e2b
test ebx, ebx
je case.default.0x4677cd
cmp dword [ebp + 0x1c], 4
jb case.default.0x4677cd
test esi, esi
je 0x46846b
mov eax, dword [ebp + 0x24]
cmp eax, 2
jb 0x46846b
mov edi, dword [ebp - 0xc3c]
test edi, edi
je 0x46846b
mov dword [edi], 2
mov ecx, dword [ebx]
cmp ecx, 2
jae case.default.0x4677cd
xor edx, edx
mov word [esi], dx
shr eax, 1
mov dword [ebp - 0xc60], eax
lea edx, [ebp - 0xc60]
push edx
push eax
push esi
push dword [ecx*4 + 0x586610]
call fcn.0046f310
lea ecx, [esi + 2]
lea ecx, [ecx]
mov ax, word [esi]
add esi, 2
test ax, ax
jne 0x464f30
sub esi, ecx
sar esi, 1
lea eax, [esi*2 + 2]
mov dword [edi], eax
xor eax, eax
jmp 0x46916c
test ebx, ebx
je case.default.0x4677cd
cmp dword [ebp + 0x1c], 0x1c
jb case.default.0x4677cd
xor edx, edx
xor esi, esi
mov eax, dword [ebx + 4]
test eax, eax
je 0x464f6f
lea edx, [eax + ebx]
mov eax, dword [ebx + 8]
test eax, eax
je 0x464f79
lea esi, [eax + ebx]
mov ecx, dword [ebx + 0xc]
push dword [ebx + 0x18]
push esi
push ecx
push dword [ebx + 0x14]
mov eax, ecx
and al, 2
movzx eax, al
neg eax
sbb eax, eax
not eax
and eax, edx
push eax
and cl, 1
movzx eax, cl
neg eax
sbb eax, eax
and eax, 0x59209c
push eax
push edx
push dword [ebx + 0x10]
call fcn.00481450
jmp 0x46916c
test ebx, ebx
je case.default.0x4677cd
cmp dword [ebp + 0x1c], 4
jb case.default.0x4677cd
push 0
push dword [ebp + 0xc]
push dword [ebx]
mov ecx, edi
call fcn.004b7e10
xor eax, eax
jmp 0x46916c
test ebx, ebx
je case.default.0x4677cd
cmp dword [ebp + 0x1c], 0x10
jb case.default.0x4677cd
test esi, esi
je 0x46846b
cmp dword [ebp + 0x24], 4
jb 0x46846b
mov ecx, dword [ebp - 0xc3c]
test ecx, ecx
je 0x46846b
mov dword [ecx], 4
mov dword [ebp - 0xc54], 0
mov eax, dword [ebx + 4]
mov ecx, dword [ebx + 8]
mov dword [edi + 0x9600], eax
mov dword [edi + 0x9604], ecx
mov eax, dword [ebx + 0xc]
mov dword [edi + 0x9608], eax
call fcn.004a13a0
mov dword [ebp - 0xc60], eax
test eax, eax
je 0x465069
lea ecx, [ebp - 0xc54]
push ecx
push dword [ebx + 8]
push dword [ebx + 4]
mov edx, dword [ebx + 0xc]
mov ecx, eax
call fcn.004a0670
add esp, 0xc
mov ebx, eax
mov eax, dword [ebp - 0xc60]
jmp 0x46506e
mov ebx, 0xc1d
mov ecx, eax
call fcn.004a13d0
test ebx, ebx
jne 0x469167
mov eax, dword [ebp - 0xc54]
mov dword [edi + 0x960c], eax
cmp eax, 1
sete al
movzx eax, al
push eax
lea ecx, [edi + 0x94f8]
call fcn.0054df30
mov eax, dword [ebp - 0xc54]
mov dword [esi], eax
xor eax, eax
jmp 0x46916c
mov ecx, edi
call fcn.004b7c80
xor eax, eax
jmp 0x46916c
test ebx, ebx
je case.default.0x4677cd
cmp dword [ebp + 0x1c], 8
jb case.default.0x4677cd
cmp dword [ebx], 8
jb case.default.0x4677cd
mov eax, dword [ebx + 4]
test eax, eax
je case.default.0x4677cd
add eax, ebx
mov dword [ebp - 0xc60], eax
mov dword [ebp - 0xc64], 0
mov esi, dword [ebp + 0xc]
test esi, esi
jne 0x465102
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov esi, eax
lea eax, [ebp - 0xc64]
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov edx, eax
mov ecx, esi
call fcn.00439930
add esp, 4
call fcn.00439c70
mov esi, eax
mov ebx, dword [ebp - 0xc64]
push ebx
push dword [ebp - 0xc60]
lea ecx, [edi + 0x9978]
call fcn.004c8070
movzx edi, al
neg edi
sbb edi, edi
and edi, 0xfffffff2
push esi
call fcn.00439c40
add esp, 4
test ebx, ebx
je 0x46515b
push ebx
call dword [sym.imp.MSVCR120.dll_free]
add esp, 4
lea eax, [edi + 0xe]
jmp 0x46916c
test ebx, ebx
je case.default.0x4677cd
cmp dword [ebp + 0x1c], 0x24
jb case.default.0x4677cd
mov eax, dword [ebx]
cmp eax, 0x24
jb case.default.0x4677cd
xor ecx, ecx
cmp eax, 0x28
jb 0x465195
mov eax, dword [ebx + 0x24]
test eax, eax
je 0x465193
lea ecx, [eax + ebx]
jmp 0x465195
xor ecx, ecx
mov eax, dword [ebx + 0x14]
test eax, eax
je 0x4651a1
lea edi, [eax + ebx]
jmp 0x4651a3
xor edi, edi
mov eax, dword [ebx + 0x1c]
test eax, eax
je 0x4651af
lea edx, [ebx + eax]
jmp 0x4651b1
xor edx, edx
mov eax, dword [ebx + 0x10]
test eax, eax
je 0x4651bc
add eax, ebx
jmp 0x4651be
xor eax, eax
push ecx
mov ecx, dword [ebp - 0xc3c]
push ecx
push dword [ebp + 0x24]
push esi
push dword [ebx + 0x20]
push edi
push edx
push eax
push dword [ebx + 0xc]
push dword [ebx + 8]
push dword [ebx + 0x18]
push dword [ebx + 4]
call fcn.004a9680
jmp 0x46916c
test esi, esi
je 0x46846b
cmp dword [ebp + 0x24], 4
jb 0x46846b
mov ecx, dword [ebp - 0xc3c]
test ecx, ecx
je 0x46846b
mov dword [ecx], 4
mov ecx, edi
call fcn.0049bcc0
mov eax, dword [edi + 0x9618]
mov dword [esi], eax
xor eax, eax
jmp 0x46916c
test ebx, ebx
je case.default.0x4677cd
mov esi, dword [ebp + 0x1c]
cmp esi, 0x10
jb case.default.0x4677cd
cmp dword [ebx], 0x10
jb case.default.0x4677cd
mov ecx, dword [ebx + 8]
test ecx, ecx
je case.default.0x4677cd
mov edx, dword [ebx + 0xc]
test edx, edx
je case.default.0x4677cd
lea eax, [edx + ecx]
cmp eax, esi
ja case.default.0x4677cd
push 0x5c
push edx
lea eax, [ecx + ebx]
push eax
push dword [ebx + 4]
push dword [ebp + 0x10]
push dword [ebp + 0xc]
mov ecx, edi
call fcn.0046e9a0
jmp 0x46916c
test esi, esi
je 0x46846b
mov ecx, dword [ebp + 0x24]
cmp ecx, 0x18
jb 0x46846b
mov eax, dword [ebp - 0xc3c]
test eax, eax
je 0x46846b
mov dword [eax], 0x18
push eax
push ecx
push esi
mov ecx, edi
call fcn.00486a80
jmp 0x46916c
test esi, esi
je 0x46846b
mov ecx, dword [ebp + 0x24]
cmp ecx, 0x1bf0
jb 0x46846b
mov eax, dword [ebp - 0xc3c]
test eax, eax
je 0x46846b
mov dword [eax], 0x1bf0
push eax
push ecx
push esi
mov ecx, edi
call fcn.0049ae50
jmp 0x46916c
test esi, esi
je 0x46846b
cmp dword [ebp + 0x24], 0x804
jb 0x46846b
mov ecx, dword [ebp - 0xc3c]
test ecx, ecx
je 0x46846b
mov dword [ecx], 0x804
push 0x804
push 0
push esi
call sub.MSVCR120.dll_memset
add esp, 0xc
mov dword [esi], 0x804
lea eax, [edi + 0x1494]
test eax, eax
je 0x46533c
cmp word [eax], 0
jne 0x4653b4
push 0x1000400
mov ecx, edi
call fcn.004a8130
mov edi, eax
test edi, edi
je case.0x4648b8.22
mov dword [ebp - 0xc38], 0
push 0x800
push 0
lea eax, [ebp - 0xc34]
push eax
call sub.MSVCR120.dll_memset
add esp, 0xc
lea eax, [ebp - 0xda4]
push eax
push 0x804
lea eax, [ebp - 0xc38]
push eax
push 0
push 0
push 0x1f00b
push 0
push 0
mov ecx, edi
call fcn.004a7bf0
test eax, eax
jne case.0x4648b8.22
cmp word [ebp - 0xc34], ax
je case.0x4648b8.22
lea eax, [ebp - 0xc34]
push eax
mov edx, 0x400
lea ecx, [esi + 4]
call fcn.0052fa00
add esp, 4
xor eax, eax
jmp 0x46916c
test ebx, ebx
je case.default.0x4677cd
cmp dword [ebp + 0x1c], 4
jb case.default.0x4677cd
test esi, esi
je 0x46846b
cmp dword [ebp + 0x24], 4
jb 0x46846b
mov ecx, dword [ebp - 0xc3c]
test ecx, ecx
je 0x46846b
mov dword [ecx], 4
push dword [ebx]
mov ecx, edi
call fcn.00483ba0
mov dword [esi], eax
test eax, eax
je 0x469167
xor eax, eax
jmp 0x46916c
test esi, esi
je 0x46846b
cmp dword [ebp + 0x24], 0x44
jb 0x46846b
mov ecx, dword [ebp - 0xc3c]
test ecx, ecx
je 0x46846b
mov dword [ecx], 0x44
mov dword [esi], 0x44
add esi, 4
push 0x40
push 0
push esi
call sub.MSVCR120.dll_memset
add esp, 0xc
mov dword [ebp - 0xc7c], 0
lea eax, [ebp - 0xc7c]
push eax
push ecx
push esi
lea ecx, [edi + 0x9624]
call fcn.005066d0
xor eax, eax
jmp 0x46916c
test ebx, ebx
je case.default.0x4677cd
cmp dword [ebp + 0x1c], 8
jb case.default.0x4677cd
test esi, esi
je 0x46846b
cmp dword [ebp + 0x24], 4
jb 0x46846b
mov ecx, dword [ebp - 0xc3c]
test ecx, ecx
je 0x46846b
mov dword [ecx], 4
cmp dword [ebx], 8
jne case.default.0x4677cd
call fcn.004a13a0
mov edi, eax
test edi, edi
je 0x4654f1
mov eax, dword [ebx + 4]
add eax, ebx
mov ecx, dword [edi + 0x58]
mov ecx, dword [ecx + 8]
test ecx, ecx
je 0x4654ea
push esi
push eax
push 0xfd2
call ecx
add esp, 0xc
mov esi, eax
jmp 0x4654f6
mov esi, 0x1b67
jmp 0x4654f6
mov esi, 0xc1d
mov ecx, edi
call fcn.004a13d0
test esi, esi
jne 0x469167
xor eax, eax
jmp 0x46916c
test esi, esi
je 0x46846b
cmp dword [ebp + 0x24], 0xc
jb 0x46846b
mov ecx, dword [ebp - 0xc3c]
test ecx, ecx
je 0x46846b
mov dword [ecx], 0xc
mov dword [esi], 0xc
mov eax, dword [edi + 0x98b8]
mov dword [esi + 4], eax
mov eax, dword [edi + 0x98b0]
mov dword [esi + 8], eax
xor eax, eax
jmp 0x46916c
test esi, esi
je 0x46846b
cmp dword [ebp + 0x24], 4
jb 0x46846b
mov ecx, dword [ebp - 0xc3c]
test ecx, ecx
je 0x46846b
mov dword [ecx], 4
mov eax, dword [edi + 0x9620]
mov dword [esi], eax
xor eax, eax
jmp 0x46916c
test ebx, ebx
je case.default.0x4677cd
cmp dword [ebp + 0x1c], 0xe
jb case.default.0x4677cd
test esi, esi
je 0x46846b
cmp dword [ebp + 0x24], 0x850
jb 0x46846b
mov ecx, dword [ebp - 0xc3c]
test ecx, ecx
je 0x46846b
mov dword [ecx], 0x850
cmp dword [ebx], 0xe
jne case.default.0x4677cd
xor eax, eax
mov dword [ebp - 0xc64], eax
mov ecx, dword [ebx + 8]
test ecx, ecx
je 0x4655e4
call fcn.004df7f0
mov dword [ebp - 0xc64], eax
push eax
push 0
push dword [ebx + 4]
push ecx
lea edx, [ebx + 0xc]
mov ecx, dword [edi + 0x9a84]
call fcn.004df560
mov edi, eax
push 0x850
push 0
push esi
call sub.MSVCR120.dll_memset
add esp, 0x1c
mov dword [esi], 0x850
mov dword [esi + 4], edi
mov ebx, dword [ebp - 0xc64]
test ebx, ebx
je 0x465695
cmp dword [ebx + 0x10], 0
je 0x465654
mov dword [ebp - 0xc84], 0x40
lea eax, [ebx + 0x14]
cmp dword [eax], 0x40
jb 0x46563c
lea eax, [ebp - 0xc84]
mov eax, dword [eax]
mov dword [esi + 8], eax
push eax
push dword [ebx + 0x10]
push 0x40
lea eax, [esi + 0xc]
push eax
call dword [sym.imp.MSVCR120.dll_memcpy_s]
add esp, 0x10
cmp dword [ebx + 8], 0
je 0x46568e
mov dword [ebp - 0xc6c], 0x400
lea eax, [ebx + 0xc]
cmp dword [eax], 0x400
jb 0x465675
lea eax, [ebp - 0xc6c]
mov eax, dword [eax]
mov dword [esi + 0x4c], eax
lea ecx, [esi + 0x50]
push eax
push dword [ebx + 8]
mov edx, 0x400
call fcn.0052fba0
add esp, 8
mov ecx, ebx
call fcn.004df850
neg edi
sbb edi, edi
and edi, 0xe
mov eax, edi
jmp 0x46916c
test ebx, ebx
je case.default.0x4677cd
cmp dword [ebp + 0x1c], 0x11
jb case.default.0x4677cd
test esi, esi
je 0x46846b
cmp dword [ebp + 0x24], 5
jb 0x46846b
mov ecx, dword [ebp - 0xc3c]
test ecx, ecx
je 0x46846b
mov dword [ecx], 5
cmp dword [ebx], 0x11
jne case.default.0x4677cd
lea eax, [esi + 1]
push eax
push dword [ebx + 4]
call fcn.00500090
push edx
push eax
push dword [ebx + 9]
mov edx, dword [ebx + 0xd]
add edx, ebx
mov ecx, dword [edi + 0x9a84]
call fcn.004df290
add esp, 0x14
mov byte [esi], al
cmp byte [ebx + 8], 0
je case.0x4648b8.22
cmp al, 6
jne case.0x4648b8.22
cmp dword [esi + 1], 0x10000
jne case.0x4648b8.22
mov ecx, dword [ebx + 0xd]
add ecx, ebx
lea eax, [ebp - 0xc40]
push eax
mov edx, dword [ebx + 9]
call fcn.005073c0
add esp, 4
test al, al
je case.0x4648b8.22
cmp dword [ebp - 0xc40], 0
jne case.0x4648b8.22
mov byte [esi], 0
mov dword [esi + 1], 0
xor eax, eax
jmp 0x46916c
test ebx, ebx
je case.default.0x4677cd
cmp dword [ebp + 0x1c], 8
jb case.default.0x4677cd
test esi, esi
je 0x46846b
mov eax, dword [ebp + 0x24]
cmp eax, 2
jb 0x46846b
mov edi, dword [ebp - 0xc3c]
test edi, edi
je 0x46846b
mov dword [edi], 2
shr eax, 1
push eax
push esi
push dword [ebx + 4]
call fcn.0046d820
test eax, eax
je 0x469167
lea eax, [eax*2 + 2]
mov dword [edi], eax
xor eax, eax
jmp 0x46916c
test ebx, ebx
je case.default.0x4677cd
cmp dword [ebp + 0x1c], 8
jb case.default.0x4677cd
test esi, esi
je 0x46846b
mov eax, dword [ebp + 0x24]
cmp eax, 2
jb 0x46846b
mov edi, dword [ebp - 0xc3c]
test edi, edi
je 0x46846b
mov dword [edi], 2
shr eax, 1
push eax
push esi
push dword [ebx + 4]
call fcn.0046d930
jmp 0x4657ac
test ebx, ebx
je case.default.0x4677cd
cmp dword [ebp + 0x1c], 0x20c
jb case.default.0x4677cd
test esi, esi
je 0x46846b
mov eax, dword [ebp + 0x24]
cmp eax, 2
jb 0x46846b
mov edi, dword [ebp - 0xc3c]
test edi, edi
je 0x46846b
mov dword [edi], 2
push ecx
shr eax, 1
push eax
lea ecx, [ebx + 4]
mov edx, esi
call fcn.005179e0
add esp, 8
test al, al
je 0x469167
lea ecx, [esi + 2]
mov ax, word [esi]
add esi, 2
test ax, ax
jne 0x465865
sub esi, ecx
sar esi, 1
lea eax, [esi*2 + 2]
mov dword [edi], eax
xor eax, eax
jmp 0x46916c
test ebx, ebx
je case.default.0x4677cd
cmp dword [ebp + 0x1c], 4
jb case.default.0x4677cd
push dword [ebx]
lea ecx, [edi + 0x9e68]
call fcn.004936f0
movzx eax, al
neg eax
sbb eax, eax
and eax, 0xfffffff2
add eax, 0xe
jmp 0x46916c
test ebx, ebx
je case.default.0x4677cd
cmp dword [ebp + 0x1c], 0x18
jb case.default.0x4677cd
test esi, esi
je 0x46846b
mov ecx, dword [ebp + 0x24]
cmp ecx, 0x20
jb 0x46846b
mov eax, dword [ebp - 0xc3c]
test eax, eax
je 0x46846b
mov dword [eax], 0x20
push eax
push ecx
push esi
push dword [ebx + 0x14]
push dword [ebx + 0x10]
push dword [ebx + 0xc]
push dword [ebx + 8]
push dword [ebx + 4]
mov ecx, edi
call fcn.0046de60
jmp 0x46916c
test esi, esi
je 0x46846b
mov ecx, dword [ebp + 0x24]
cmp ecx, 0xc
jb 0x46846b
mov eax, dword [ebp - 0xc3c]
test eax, eax
je 0x46846b
mov dword [eax], 0xc
push eax
push ecx
push esi
mov ecx, edi
call fcn.0046dee0
jmp 0x46916c
lea ebx, [edi + 0x9494]
push ebx
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [edi + 0x9a34]
cmp eax, dword [ebp + 0x24]
jbe 0x46596f
mov esi, 5
push ebx
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov eax, esi
jmp 0x46916c
push eax
push dword [edi + 0x9a30]
push esi
call sub.MSVCR120.dll_memcpy
add esp, 0xc
mov eax, dword [edi + 0x9a34]
mov ecx, dword [ebp - 0xc3c]
mov dword [ecx], eax
xor esi, esi
push ebx
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov eax, esi
jmp 0x46916c
push 0xb
mov ecx, edi
test byte [edi + 0x9e58], 8
je 0x4659bd
push 1
push 0x1000600
call fcn.0046b7e0
xor eax, eax
jmp 0x46916c
push 0
push 0x1000600
call fcn.0046b7e0
xor eax, eax
jmp 0x46916c
test ebx, ebx
je case.default.0x4677cd
cmp dword [ebp + 0x1c], 0xc
jb case.default.0x4677cd
mov eax, dword [ebx + 8]
add eax, ebx
push eax
push dword [ebx + 4]
mov eax, dword [ebp - 0xc44]
push eax
mov ecx, edi
call fcn.0046e160
movzx eax, al
neg eax
sbb eax, eax
and eax, 0xfffffff2
add eax, 0xe
jmp 0x46916c
test ebx, ebx
je case.default.0x4677cd
cmp dword [ebp + 0x1c], 8
jb case.default.0x4677cd
push dword [ebx + 4]
mov eax, dword [ebp - 0xc44]
push eax
mov ecx, edi
call fcn.0046e190
movzx eax, al
neg eax
sbb eax, eax
and eax, 0xfffffff2
add eax, 0xe
jmp 0x46916c
test esi, esi
je 0x46846b
cmp dword [ebp + 0x24], 0x90
jb 0x46846b
mov ecx, dword [ebp - 0xc3c]
test ecx, ecx
je 0x46846b
mov dword [ecx], 0x90
lea eax, [edi + 0x9494]
push eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
cmp dword [edi + 0x9a6c], 0
jne 0x465aa1
cmp dword [edi + 0x9a68], 0
jne 0x465aa1
mov esi, 0x12
lea ecx, [edi + 0x9494]
push ecx
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov eax, esi
jmp 0x46916c
mov dword [esi], 0x90
mov eax, dword [edi + 0x9a64]
mov dword [esi + 4], eax
mov eax, dword [edi + 0x9a68]
mov dword [esi + 8], eax
mov eax, dword [edi + 0x9a6c]
mov dword [esi + 0xc], eax
xor eax, eax
mov word [esi + 0x10], ax
xor edx, edx
mov dword [ebp - 0xcf4], edx
cmp edx, dword [edi + 0x1dbc]
jge 0x465af6
mov eax, dword [edi + 0x1db8]
mov ecx, dword [eax + edx*4]
mov eax, dword [ecx + 4]
cmp eax, dword [edi + 0x9a64]
jne 0x465b0c
push ecx
lea eax, [esi + 0x10]
push eax
call fcn.00483260
xor esi, esi
lea ecx, [edi + 0x9494]
push ecx
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov eax, esi
jmp 0x46916c
inc edx
jmp 0x465aca
lea esi, [edi + 0x9494]
push esi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
lea eax, [edi + 0x9a68]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemTimeAsFileTime]
push esi
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov edx, 0x4c
mov ecx, dword [0x5c6138]
mov ecx, dword [ecx + 0x1db0]
call fcn.00513500
mov edx, 0x44
mov ecx, dword [0x5c6138]
mov ecx, dword [ecx + 0x1db0]
call fcn.00513500
xor eax, eax
jmp 0x46916c
test esi, esi
je 0x46846b
cmp dword [ebp + 0x24], 8
jb 0x46846b
mov ebx, dword [ebp - 0xc3c]
test ebx, ebx
je 0x46846b
mov dword [ebx], 8
mov dword [esi + 4], 8
mov dword [esi], 8
push ecx
lea eax, [ebp - 0x41c]
push eax
lea ecx, [edi + 0x98c4]
call fcn.004c9860
test al, al
jne 0x465bb7
mov eax, 0x12
jmp 0x46916c
mov edx, dword [ebp + 0x24]
lea edx, [edx - 8]
shr edx, 1
add esi, 8
lea eax, [ebp - 0x41c]
push eax
mov ecx, esi
call fcn.0052fa00
add esp, 4
lea ecx, [esi + 2]
mov ax, word [esi]
add esi, 2
test ax, ax
jne 0x465bd6
sub esi, ecx
sar esi, 1
lea eax, [esi*2 + 0xa]
mov dword [ebx], eax
xor eax, eax
jmp 0x46916c
test ebx, ebx
je case.default.0x4677cd
cmp dword [ebp + 0x1c], 0x10
jb case.default.0x4677cd
cmp dword [ebx + 4], 0
jne 0x465c1e
cmp dword [ebx + 8], 0
jne 0x465c1e
lea ecx, [edi + 0x9590]
call fcn.004c72c0
mov eax, dword [ebx + 4]
test eax, eax
je 0x465c31
push eax
lea ecx, [edi + 0x9590]
call fcn.004c70f0
mov eax, dword [ebx + 8]
test eax, eax
je case.0x4648b8.22
push dword [ebx + 0xc]
push eax
lea ecx, [edi + 0x9590]
call fcn.004c71d0
xor eax, eax
jmp 0x46916c
test ebx, ebx
je case.default.0x4677cd
cmp dword [ebp + 0x1c], 8
jb case.default.0x4677cd
cmp dword [ebx], 8
jb case.default.0x4677cd
mov eax, dword [ebx + 4]
mov dword [ebp - 0xd04], eax
mov eax, dword [ebp - 0xc44]
mov dword [ebp - 0xd00], eax
mov eax, dword [edi + 0x9ac4]
lea ecx, [ebp - 0xc45]
push ecx
lea ecx, [ebp - 0xd04]
push ecx
lea ecx, [edi + 0x9ac4]
call dword [eax + 8]
mov dword [ebp - 0xda0], eax
cmp byte [ebp - 0xc45], 0
jne case.0x4648b8.22
push ecx
lea ecx, [ebp - 0xd04]
push ecx
push eax
lea ecx, [edi + 0x9ac4]
call fcn.00472180
test eax, eax
jne case.0x4648b8.22
mov eax, 0xd
jmp 0x46916c
test ebx, ebx
je case.default.0x4677cd
cmp dword [ebp + 0x1c], 8
jb case.default.0x4677cd
test esi, esi
je 0x46846b
cmp dword [ebp + 0x24], 0x18
jb 0x46846b
mov eax, dword [ebp - 0xc3c]
test eax, eax
je 0x46846b
mov dword [eax], 0x18
push eax
push esi
push dword [ebx + 4]
mov ecx, edi
call fcn.0046eda0
jmp 0x46916c
lea ecx, [edi + 0x9b60]
call fcn.004a4a50
test al, al
je 0x469167
xor eax, eax
jmp 0x46916c
test ebx, ebx
je case.default.0x4677cd
cmp dword [ebp + 0x1c], 0xc
jb case.default.0x4677cd
test esi, esi
je 0x46846b
mov eax, dword [ebp + 0x24]
cmp eax, 0x20
jb 0x46846b
mov ecx, dword [ebp - 0xc3c]
test ecx, ecx
je 0x46846b
mov dword [ecx], 0x20
mov ecx, dword [edi + 0x9da4]
test ecx, ecx
je 0x467845
mov byte [ebp - 0xc4d], 0
lea edx, [ebp - 0xc4d]
push edx
push eax
push esi
push dword [ebx + 8]
push dword [ebx + 4]
call fcn.004287e0
test al, al
je 0x465bad
cmp byte [ebp - 0xc4d], 0
je case.0x4648b8.22
mov eax, 0x14
jmp 0x46916c
test ebx, ebx
je case.default.0x4677cd
mov eax, dword [ebp + 0x1c]
cmp eax, 0x10
jb case.default.0x4677cd
test esi, esi
je 0x46846b
cmp dword [ebp + 0x24], 4
jb 0x46846b
mov ecx, dword [ebp - 0xc3c]
test ecx, ecx
je 0x46846b
mov dword [ecx], 4
cmp dword [ebx], 2
jne 0x465e0b
cmp eax, 0x14
jae 0x465e0b
mov eax, 0xa
jmp 0x46916c
push esi
push eax
push ebx
push 0x473630
push dword [ebp + 0x10]
push dword [ebp + 0xc]
mov ecx, edi
call fcn.00473470
jmp 0x46916c
test ebx, ebx
je case.default.0x4677cd
mov eax, dword [ebp + 0x1c]
cmp eax, 0xc
jb case.default.0x4677cd
test esi, esi
je 0x46846b
cmp dword [ebp + 0x24], 4
jb 0x46846b
mov ecx, dword [ebp - 0xc3c]
test ecx, ecx
je 0x46846b
mov dword [ecx], 4
push esi
push eax
push ebx
push 0x4735e0
push dword [ebp + 0x10]
push dword [ebp + 0xc]
mov ecx, edi
call fcn.00473470
jmp 0x46916c
test ebx, ebx
je case.default.0x4677cd
mov eax, dword [ebp + 0x1c]
cmp eax, 0xc
jb case.default.0x4677cd
test esi, esi
je 0x46846b
cmp dword [ebp + 0x24], 4
jb 0x46846b
mov ecx, dword [ebp - 0xc3c]
test ecx, ecx
je 0x46846b
mov dword [ecx], 4
push esi
push eax
push ebx
push 0x473540
push dword [ebp + 0x10]
push dword [ebp + 0xc]
mov ecx, edi
call fcn.00473470
jmp 0x46916c
test ebx, ebx
je case.default.0x4677cd
mov eax, dword [ebp + 0x1c]
cmp eax, 8
jb case.default.0x4677cd
test esi, esi
je 0x46846b
cmp dword [ebp + 0x24], 4
jb 0x46846b
mov ecx, dword [ebp - 0xc3c]
test ecx, ecx
je 0x46846b
mov dword [ecx], 4
push esi
push eax
push ebx
push 0x4736e0
push dword [ebp + 0x10]
push dword [ebp + 0xc]
mov ecx, edi
call fcn.00473470
jmp 0x46916c
mov ecx, dword [edi + 0x9da4]
test ecx, ecx
je 0x467845
call fcn.00427e60
test al, al
jne 0x469167
call fcn.00439c70
mov esi, eax
mov ecx, dword [edi + 0x9da4]
call fcn.0042efe0
mov bl, al
push esi
call fcn.00439c40
add esp, 4
test bl, bl
je 0x469167
xor eax, eax
jmp 0x46916c
test ebx, ebx
je case.default.0x4677cd
cmp dword [ebp + 0x1c], 0xc
jb case.default.0x4677cd
test esi, esi
je 0x46846b
cmp dword [ebp + 0x24], 8
jb 0x46846b
mov ecx, dword [ebp - 0xc3c]
test ecx, ecx
je 0x46846b
mov dword [ecx], 8
call fcn.00439be0
mov edi, eax
push esi
push ebx
push dword [ebp + 0x10]
push dword [ebp + 0xc]
mov ecx, dword [ebp - 0xc54]
call fcn.004757c0
mov esi, eax
push edi
call fcn.00439c40
add esp, 4
mov eax, esi
jmp 0x46916c
test esi, esi
je 0x46846b
cmp dword [ebp + 0x24], 8
jb 0x46846b
mov ecx, dword [ebp - 0xc3c]
test ecx, ecx
je 0x46846b
mov dword [ecx], 8
mov dword [esi], 8
movzx eax, byte [edi + 0x3385]
cmp eax, 2
je 0x46601e
cmp eax, 3
je 0x46601e
dec eax
neg eax
sbb eax, eax
and eax, 0xfffffffe
add eax, 2
mov dword [esi + 4], eax
xor eax, eax
jmp 0x46916c
mov dword [esi + 4], 1
xor eax, eax
jmp 0x46916c
test ebx, ebx
je case.default.0x4677cd
cmp dword [ebp + 0x1c], 9
jb case.default.0x4677cd
test esi, esi
je 0x46846b
cmp dword [ebp + 0x24], 1
jb 0x46846b
mov ecx, dword [ebp - 0xc3c]
test ecx, ecx
je 0x46846b
mov dword [ecx], 1
push esi
push ebx
call fcn.0046f1b0
jmp 0x46916c
test ebx, ebx
je case.default.0x4677cd
cmp dword [ebp + 0x1c], 4
jb case.default.0x4677cd
test esi, esi
je 0x46846b
cmp dword [ebp + 0x24], 1
jb 0x46846b
mov ecx, dword [ebp - 0xc3c]
test ecx, ecx
je 0x46846b
mov dword [ecx], 1
push esi
mov ecx, ebx
call fcn.0046f140
jmp 0x46916c
call fcn.004a13a0
mov edi, eax
test edi, edi
je 0x464aaf
mov ecx, dword [edi + 0x58]
mov eax, dword [ecx + 8]
test eax, eax
je 0x464aa8
mov ecx, dword [ebp - 0xc3c]
push ecx
push dword [ebp + 0x24]
push esi
push dword [ebp + 0x1c]
push ebx
push 0xffe
call eax
add esp, 0x18
mov esi, eax
jmp 0x464ab4
lea eax, [edi + 0x9e0c]
push eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov dword [edi + 0x9e04], 0
push dword [ebp + 0x1c]
push ebx
lea ecx, [edi + 0x9df4]
call fcn.004d2340
mov byte [edi + 0x9e08], 1
call fcn.004a3780
mov esi, eax
test esi, esi
je 0x46613f
push 0
push dword [ebp + 0x1c]
mov edx, ebx
mov ecx, esi
call fcn.004a0970
add esp, 8
mov ebx, eax
jmp 0x466144
mov ebx, 0xc1d
mov ecx, esi
call fcn.004a13d0
mov byte [edi + 0x9e08], 0
lea eax, [edi + 0x9e0c]
push eax
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
test ebx, ebx
jne 0x469167
xor eax, eax
jmp 0x46916c
mov ebx, dword [ebp - 0xc3c]
test ebx, ebx
je 0x46617e
mov dword [ebx], 0
mov eax, dword [ebp + 0x24]
mov dword [ebp - 0xc4c], eax
mov edx, 0x80
lea ecx, [ebp - 0x94]
call fcn.0050da70
call fcn.004a3780
mov edi, eax
test edi, edi
je 0x4661c1
lea eax, [ebp - 0xc4c]
push eax
push esi
lea eax, [ebp - 0x94]
push eax
xor edx, edx
mov ecx, edi
call fcn.004a09a0
add esp, 0xc
mov esi, eax
jmp 0x4661c6
mov esi, 0xc1d
mov ecx, edi
call fcn.004a13d0
test esi, esi
jne 0x468b78
test ebx, ebx
je case.0x4648b8.22
mov eax, dword [ebp - 0xc4c]
mov dword [ebx], eax
xor eax, eax
jmp 0x46916c
test ebx, ebx
je case.default.0x4677cd
cmp dword [ebp + 0x1c], 8
jb case.default.0x4677cd
test esi, esi
je 0x46846b
mov ecx, dword [ebp + 0x24]
cmp ecx, 8
jb 0x46846b
mov eax, dword [ebp - 0xc3c]
test eax, eax
je 0x46846b
mov dword [eax], 8
push eax
push ecx
push esi
push ebx
call fcn.00488fd0
jmp 0x46916c
test esi, esi
je 0x46846b
cmp dword [ebp + 0x24], 0x14
jb 0x46846b
mov ebx, dword [ebp - 0xc3c]
test ebx, ebx
je 0x46846b
mov dword [ebx], 0x14
mov edi, dword [edi + 0xc]
test edi, edi
je 0x469167
mov dword [ebp - 0xda8], edi
push edi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov byte [ebp - 4], 8
push ebx
push dword [ebp + 0x24]
push esi
call fcn.0054d3a0
mov esi, eax
mov byte [ebp - 4], 0
push edi
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov eax, esi
jmp 0x46916c
test esi, esi
je 0x46846b
cmp dword [ebp + 0x24], 0xc
jb 0x46846b
mov ecx, dword [ebp - 0xc3c]
test ecx, ecx
je 0x46846b
mov dword [ecx], 0xc
mov dword [esi], 0xc
call fcn.0050ac00
mov dword [esi + 4], eax
mov dword [esi + 8], 0
xor eax, eax
jmp 0x46916c
test ebx, ebx
je case.default.0x4677cd
cmp dword [ebp + 0x1c], 2
jb case.default.0x4677cd
test esi, esi
je 0x46846b
cmp dword [ebp + 0x24], 0x15
jb 0x46846b
mov ecx, dword [ebp - 0xc3c]
test ecx, ecx
je 0x46846b
mov dword [ecx], 0x15
xor eax, eax
mov dword [ebp - 0xcd4], eax
mov dword [ebp - 0xcd0], eax
mov dword [ebp - 0xccc], eax
mov dword [ebp - 0xcc8], eax
mov dword [ebp - 0xcc4], eax
mov byte [ebp - 0xcc0], al
mov dword [ebp - 0xcd4], 0x15
call fcn.004a13a0
mov dword [ebp - 0xc40], eax
test eax, eax
je 0x46637c
mov ecx, dword [eax + 0x58]
mov ecx, dword [ecx + 8]
test ecx, ecx
je 0x466375
push 1
lea eax, [ebp - 0xcd4]
push eax
push ebx
push 0xffc
call ecx
add esp, 0x10
mov edi, eax
mov eax, dword [ebp - 0xc40]
jmp 0x466381
mov edi, 0x1b67
jmp 0x466381
mov edi, 0xc1d
mov ecx, eax
call fcn.004a13d0
test edi, edi
jne 0x469167
mov eax, dword [ebp - 0xcd4]
mov dword [esi], eax
mov eax, dword [ebp - 0xcd0]
mov dword [esi + 4], eax
mov eax, dword [ebp - 0xccc]
mov dword [esi + 8], eax
mov eax, dword [ebp - 0xcc8]
mov dword [esi + 0xc], eax
mov eax, dword [ebp - 0xcc4]
mov dword [esi + 0x10], eax
mov al, byte [ebp - 0xcc0]
mov byte [esi + 0x14], al
xor eax, eax
jmp 0x46916c
mov esi, dword [ebp + 0x1c]
jmp 0x468843
test ebx, ebx
je case.default.0x4677cd
cmp dword [ebp + 0x1c], 0x2c
jb case.default.0x4677cd
test esi, esi
je 0x46846b
cmp dword [ebp + 0x24], 4
jb 0x46846b
mov ecx, dword [ebp - 0xc3c]
test ecx, ecx
je 0x46846b
mov dword [ecx], 4
push esi
push ebx
push dword [ebp + 0x10]
push dword [ebp + 0xc]
mov ecx, edi
call fcn.004b0c80
jmp 0x46916c
cmp edx, 0xf00
ja 0x467fc4
je 0x467f0b
lea eax, [edx - 0xe02]
cmp eax, 0x65
ja case.0x4683eb.16777234
movzx eax, byte [eax + 0x469510]
jmp dword [eax*4 + 0x4693f0]
test ebx, ebx
je case.default.0x4677cd
cmp dword [ebp + 0x1c], 0xc
jb case.default.0x4677cd
push ebx
push dword [ebp + 0x10]
push dword [ebp + 0xc]
mov ecx, edi
call fcn.004b1d40
jmp 0x46916c
test ebx, ebx
je case.default.0x4677cd
cmp dword [ebp + 0x1c], 4
jb case.default.0x4677cd
push dword [ebx]
call fcn.004b1d20
jmp 0x46916c
push dword [ebp + 0x1c]
push ebx
push ecx
mov ecx, edi
call fcn.004a87e0
neg eax
sbb eax, eax
and eax, 0xfffffff2
add eax, 0xe
jmp 0x46916c
test ebx, ebx
je case.default.0x4677cd
cmp dword [ebp + 0x1c], 0x18
jb case.default.0x4677cd
mov edx, dword [ebx + 8]
cmp edx, 0x2000
jb 0x4664d2
cmp edx, 0x2e00
jb 0x4664f2
cmp edx, 0x20000
jb 0x4664e2
cmp edx, 0x2ffff
jbe 0x4664f2
cmp edx, 0x40000
jb 0x46651f
cmp edx, 0x4ffff
ja 0x46651f
push dword [ebx + 0xc]
mov ecx, dword [ebp - 0xc3c]
push ecx
push dword [ebp + 0x24]
push esi
push dword [ebx + 0x14]
mov eax, dword [ebx + 0x10]
add eax, ebx
push eax
push edx
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push dword [ebx + 4]
mov ecx, edi
call fcn.00497fa0
jmp 0x46916c
push dword [ebx + 4]
mov ecx, edi
call fcn.004a8130
mov edx, eax
test edx, edx
je case.default.0x4677cd
mov ecx, dword [ebp - 0xc3c]
push ecx
push dword [ebp + 0x24]
push esi
push dword [ebx + 0x14]
mov eax, dword [ebx + 0x10]
add eax, ebx
push eax
push dword [ebx + 8]
push dword [ebp + 0x10]
push dword [ebp + 0xc]
mov ecx, edx
call fcn.004a7bf0
jmp 0x46916c
test ebx, ebx
je case.default.0x4677cd
cmp dword [ebp + 0x1c], 4
jb case.default.0x4677cd
test esi, esi
je 0x46846b
cmp dword [ebp + 0x24], 0x10
jb 0x46846b
mov ecx, dword [ebp - 0xc3c]
test ecx, ecx
je 0x46846b
mov dword [ecx], 0x10
xor edi, edi
xor eax, eax
mov dword [esi], eax
mov dword [esi + 4], eax
mov dword [esi + 8], eax
mov dword [esi + 0xc], eax
mov dword [esi], 0x10
call fcn.004a13a0
mov dword [ebp - 0xc40], eax
test eax, eax
je 0x4665dc
push ecx
lea ecx, [esi + 4]
push ecx
push 0x538ae
mov edx, dword [ebx]
mov ecx, eax
call fcn.004a0610
add esp, 0xc
mov dword [ebp - 0xc4c], eax
mov eax, dword [ebp - 0xc40]
jmp 0x4665e6
mov dword [ebp - 0xc4c], 0xc1d
mov ecx, eax
call fcn.004a13d0
cmp dword [ebp - 0xc4c], edi
je 0x4665fa
mov edi, 0xe
call fcn.004a13a0
mov dword [ebp - 0xc40], eax
test eax, eax
je 0x46662d
push ecx
lea ecx, [esi + 8]
push ecx
push 0x538af
mov edx, dword [ebx]
mov ecx, eax
call fcn.004a0610
add esp, 0xc
mov dword [ebp - 0xc4c], eax
mov eax, dword [ebp - 0xc40]
jmp 0x466637
mov dword [ebp - 0xc4c], 0xc1d
mov ecx, eax
call fcn.004a13d0
cmp dword [ebp - 0xc4c], 0
je 0x46664c
mov edi, 0xe
call fcn.004a13a0
mov dword [ebp - 0xc40], eax
test eax, eax
je 0x46667b
push ecx
lea ecx, [esi + 0xc]
push ecx
push 0x538b0
mov edx, dword [ebx]
mov ecx, eax
call fcn.004a0610
add esp, 0xc
mov esi, eax
mov eax, dword [ebp - 0xc40]
jmp 0x466680
mov esi, 0xc1d
mov ecx, eax
call fcn.004a13d0
test esi, esi
je 0x466690
mov edi, 0xe
mov eax, edi
jmp 0x46916c
test ebx, ebx
je case.default.0x4677cd
cmp dword [ebp + 0x1c], 0x10
jb case.default.0x4677cd
call fcn.004a13a0
mov edi, eax
test edi, edi
je 0x464aaf
mov eax, dword [edi + 0x58]
mov eax, dword [eax + 8]
test eax, eax
je 0x464aa8
push dword [ebx + 0xc]
push dword [ebx + 8]
push dword [ebx + 4]
push dword [ebx]
push 0xfe6
call eax
add esp, 0x14
mov esi, eax
jmp 0x464ab4
test ebx, ebx
je case.default.0x4677cd
cmp dword [ebp + 0x1c], 4
jb case.default.0x4677cd
xor esi, esi
mov dword [ebp - 0xd14], esi
cmp esi, dword [edi + 0x21f8]
jge case.0x4648b8.22
push 0
push 0
push 0
push 4
push ebx
push 0x1001d
push 0
push 0
mov ecx, dword [edi + 0x21f4]
mov ecx, dword [ecx + esi*4]
call fcn.004a7bf0
inc esi
jmp 0x4666f6
test ebx, ebx
je case.default.0x4677cd
mov eax, dword [ebp + 0x1c]
cmp eax, 0xc
jb case.default.0x4677cd
xor esi, esi
mov dword [ebp - 0xcfc], esi
cmp esi, dword [edi + 0x21f8]
jge 0x466774
push 0
push 0
push 0
push eax
push ebx
push 0x10020
push 0
push 0
mov ecx, dword [edi + 0x21f4]
mov ecx, dword [ecx + esi*4]
call fcn.004a7bf0
inc esi
mov eax, dword [ebp + 0x1c]
jmp 0x466741
test byte [edi + 0x9e58], 8
jne case.0x4648b8.22
push 2
push 0
push 0
push 0
push eax
push ebx
push 0x200d
jmp 0x468301
mov ecx, dword [edi + 0x1db0]
test ecx, ecx
jne 0x4667b0
mov eax, 0xa
neg eax
sbb eax, eax
and eax, 0xe
jmp 0x46916c
mov eax, dword [ecx]
call dword [eax + 0x14]
neg eax
sbb eax, eax
and eax, 0xe
jmp 0x46916c
test ebx, ebx
je case.default.0x4677cd
cmp dword [ebp + 0x1c], 0x2c
jb case.default.0x4677cd
push dword [ebx + 0x24]
mov eax, dword [ebx + 0x20]
add eax, ebx
push eax
mov eax, dword [ebx + 0x1c]
add eax, ebx
push eax
push ecx
mov eax, dword [ebx + 0x14]
add eax, ebx
push eax
mov eax, dword [ebx + 0x10]
add eax, ebx
push eax
push dword [ebx + 0xc]
push dword [ebx + 8]
mov eax, dword [ebx + 4]
add eax, ebx
push eax
mov eax, dword [ebp - 0xc44]
push eax
mov ecx, edi
call fcn.0046b810
movzx eax, al
neg eax
sbb eax, eax
and eax, 0xfffffff2
add eax, 0xe
jmp 0x46916c
test ebx, ebx
je case.default.0x4677cd
cmp dword [ebp + 0x1c], 8
jb case.default.0x4677cd
mov eax, dword [ebx + 4]
add eax, ebx
push eax
mov ecx, edi
call fcn.0046b8f0
movzx eax, al
neg eax
sbb eax, eax
and eax, 0xfffffff2
add eax, 0xe
jmp 0x46916c
test esi, esi
je 0x46846b
cmp dword [ebp + 0x24], 4
jb 0x46846b
mov ecx, dword [ebp - 0xc3c]
test ecx, ecx
je 0x46846b
mov dword [ecx], 4
mov eax, dword [0x5c6a8c]
mov dword [esi], eax
xor eax, eax
jmp 0x46916c
push 0
push 0
mov ecx, edi
call fcn.0049b110
mov edx, 0x3c
mov ecx, dword [0x5c6138]
mov ecx, dword [ecx + 0x1db0]
call fcn.00513500
mov edx, 4
mov ecx, dword [0x5c6138]
mov ecx, dword [ecx + 0x1db0]
call fcn.00513500
mov ecx, edi
call fcn.0049be40
xor eax, eax
jmp 0x46916c
test ebx, ebx
je case.default.0x4677cd
mov eax, dword [ebp + 0x1c]
cmp eax, 0x1d
jb case.default.0x4677cd
mov ecx, dword [ebx]
cmp ecx, 0x1d
jb case.default.0x4677cd
cmp eax, ecx
jb case.default.0x4677cd
mov eax, dword [ebx + 9]
add eax, ebx
mov dword [ebp - 0xc40], eax
mov eax, dword [ebx + 0xd]
add eax, ebx
mov dword [ebp - 0xc6c], eax
mov eax, dword [ebx + 0x11]
add eax, ebx
mov dword [ebp - 0xc84], eax
mov edx, 0x574c4c
mov esi, edx
cmp ecx, 0x2d
jb 0x466923
mov edx, dword [ebx + 0x1d]
add edx, ebx
mov esi, dword [ebx + 0x25]
add esi, ebx
mov eax, dword [ebp - 0xc44]
mov dword [ebp - 0xd64], eax
mov eax, dword [ebp - 0xc40]
mov dword [ebp - 0xd60], eax
mov al, byte [ebx + 4]
mov byte [ebp - 0xd5c], al
mov ax, word [ebx + 5]
mov word [ebp - 0xd5a], ax
mov al, byte [ebx + 7]
mov byte [ebp - 0xd58], al
mov al, byte [ebx + 8]
mov byte [ebp - 0xd57], al
mov eax, dword [ebp - 0xc6c]
mov dword [ebp - 0xd54], eax
mov eax, dword [ebp - 0xc84]
mov dword [ebp - 0xd50], eax
mov eax, dword [ebx + 0x15]
add eax, ebx
mov dword [ebp - 0xd4c], eax
mov eax, dword [ebx + 0x19]
mov dword [ebp - 0xd48], eax
mov dword [ebp - 0xd44], edx
mov dword [ebp - 0xd3c], esi
mov dword [ebp - 0xd40], 0
mov dword [ebp - 0xd38], 0
cmp ecx, 0x2d
jb 0x4669c4
mov eax, dword [ebx + 0x21]
mov dword [ebp - 0xd40], eax
mov eax, dword [ebx + 0x29]
mov dword [ebp - 0xd38], eax
lea eax, [ebp - 0xd64]
push eax
lea ecx, [edi + 0x9624]
call fcn.00505d60
movzx eax, al
neg eax
sbb eax, eax
and eax, 0xfffffff2
add eax, 0xe
jmp 0x46916c
test ebx, ebx
je case.default.0x4677cd
cmp dword [ebp + 0x1c], 5
jb case.default.0x4677cd
cmp dword [ebx], 5
jne case.default.0x4677cd
movzx eax, byte [ebx + 4]
push eax
mov eax, dword [ebp - 0xc44]
push eax
lea ecx, [edi + 0x9624]
call fcn.005062f0
movzx eax, al
neg eax
sbb eax, eax
and eax, 0xfffffff2
add eax, 0xe
jmp 0x46916c
test ebx, ebx
je case.default.0x4677cd
cmp dword [ebp + 0x1c], 8
jb case.default.0x4677cd
cmp dword [ebx], 8
jne case.default.0x4677cd
cmp dword [ebx + 4], 0
setne al
movzx eax, al
push eax
mov ecx, edi
call fcn.00476560
xor eax, eax
jmp 0x46916c
test ebx, ebx
je case.default.0x4677cd
cmp dword [ebp + 0x1c], 8
jb case.default.0x4677cd
test esi, esi
je 0x46846b
cmp dword [ebp + 0x24], 8
jb 0x46846b
mov ecx, dword [ebp - 0xc3c]
test ecx, ecx
je 0x46846b
mov dword [ecx], 8
push esi
push ebx
lea ecx, [edi + 0xa088]
call fcn.004bdb20
xor eax, eax
jmp 0x46916c
lea ecx, [edi + 0xa088]
call fcn.004bcc30
xor eax, eax
jmp 0x46916c
test esi, esi
je 0x46846b
cmp dword [ebp + 0x24], 0x100
jb 0x46846b
mov ecx, dword [ebp - 0xc3c]
test ecx, ecx
je 0x46846b
mov dword [ecx], 0x100
push esi
lea ecx, [edi + 0xa088]
call fcn.004bcc70
jmp 0x46916c
test ebx, ebx
je case.default.0x4677cd
cmp dword [ebp + 0x1c], 0xa
jb case.default.0x4677cd
cmp dword [ebx], 0xa
jne case.default.0x4677cd
lea eax, [ebx + 8]
push eax
push dword [ebx + 4]
mov eax, dword [ebp - 0xc44]
push eax
lea ecx, [edi + 0x985c]
call fcn.004a8c50
movzx eax, al
neg eax
sbb eax, eax
and eax, 0xfffffff2
add eax, 0xe
jmp 0x46916c
test ebx, ebx
je case.default.0x4677cd
cmp dword [ebp + 0x1c], 8
jb case.default.0x4677cd
cmp dword [ebx], 8
jne case.default.0x4677cd
push dword [ebx + 4]
mov eax, dword [ebp - 0xc44]
push eax
lea ecx, [edi + 0x985c]
call fcn.004a8f60
movzx eax, al
neg eax
sbb eax, eax
and eax, 0xfffffff2
add eax, 0xe
jmp 0x46916c
test ebx, ebx
je case.default.0x4677cd
cmp dword [ebp + 0x1c], 0x1c
jb case.default.0x4677cd
mov byte [ebp - 0xc46], 0
push 0x2c
call dword [sym.imp.MSVCR120.dll_void____cdecl_operator_new_unsigned_int_]
add esp, 4
mov esi, eax
mov dword [ebp - 0xc4c], esi
mov dword [ebp - 0xd9c], esi
mov byte [ebp - 4], 4
test esi, esi
je 0x466bf2
mov dword [esi], 0
mov dword [esi + 4], 0
mov dword [esi + 8], 0
mov dword [esi + 0xc], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
mov dword [esi + 0x28], 0
xor eax, eax
mov word [esi + 0x18], ax
jmp 0x466bfa
xor esi, esi
mov dword [ebp - 0xc4c], esi
mov dword [ebp - 0xcb0], esi
mov byte [ebp - 4], 0
test esi, esi
je 0x466cb0
mov byte [ebp - 4], 5
mov eax, dword [ebx + 0x18]
add eax, ebx
push eax
mov eax, dword [ebx + 0x14]
add eax, ebx
push eax
mov eax, dword [ebx + 0x10]
add eax, ebx
push eax
mov eax, dword [ebx + 0xc]
add eax, ebx
push eax
push dword [ebx + 8]
push dword [ebx + 4]
push dword [ebp - 0xc40]
mov ecx, esi
call fcn.00481780
mov byte [ebp - 0xc46], al
mov dword [ebp - 4], 0
test al, al
je 0x466c9f
mov esi, dword [edi + 0x9a48]
push ecx
lea eax, [esi + 1]
push eax
lea ecx, [edi + 0x9a40]
call fcn.00433880
mov eax, dword [edi + 0x9a44]
mov ecx, dword [ebp - 0xc4c]
mov dword [eax + esi*4], ecx
xor eax, eax
cmp byte [ebp - 0xc46], al
setne al
dec eax
and eax, 0xe
jmp 0x46916c
mov ecx, esi
call fcn.00481700
push esi
call dword [sym.imp.MSVCR120.dll_void___cdecl_operator_delete_void__]
add esp, 4
xor eax, eax
cmp byte [ebp - 0xc46], al
setne al
dec eax
and eax, 0xe
jmp 0x46916c
test esi, esi
je 0x46846b
cmp dword [ebp + 0x24], 1
jb 0x46846b
mov ebx, dword [ebp - 0xc3c]
test ebx, ebx
je 0x46846b
mov dword [ebx], 1
mov eax, dword [edi + 0x9a58]
test eax, eax
jne 0x466d09
mov ecx, edi
call fcn.0046dfb0
mov eax, dword [edi + 0x9a58]
test eax, eax
je 0x469167
mov ecx, dword [edi + 0x9a5c]
cmp dword [ebp + 0x24], ecx
jb 0x46846b
push ecx
push eax
push esi
call sub.MSVCR120.dll_memcpy
add esp, 0xc
mov eax, dword [edi + 0x9a5c]
mov dword [ebx], eax
xor eax, eax
jmp 0x46916c
test ebx, ebx
je case.default.0x4677cd
cmp dword [ebp + 0x1c], 0xc
jb case.default.0x4677cd
test esi, esi
je 0x46846b
cmp dword [ebp + 0x24], 4
jb 0x46846b
mov ecx, dword [ebp - 0xc3c]
test ecx, ecx
je 0x46846b
mov dword [ecx], 4
mov eax, 0xe
mov dword [ebp - 0xc88], eax
mov ecx, dword [edi + 0x95f0]
test ecx, ecx
je 0x46916c
mov eax, dword [ebx + 8]
test eax, eax
je 0x466d8e
add eax, ebx
jmp 0x466d90
xor eax, eax
push eax
push dword [ebx + 4]
call fcn.004b54e0
test eax, eax
je 0x466dac
mov dword [esi], eax
xor eax, eax
mov dword [ebp - 0xc88], eax
jmp 0x46916c
mov eax, dword [ebp - 0xc88]
jmp 0x46916c
test ebx, ebx
je case.default.0x4677cd
cmp dword [ebp + 0x1c], 4
jb case.default.0x4677cd
cmp dword [edi + 0x95f0], 0
je 0x469167
mov ecx, dword [ebx]
call fcn.004b4980
xor eax, eax
jmp 0x46916c
test ebx, ebx
je case.default.0x4677cd
cmp dword [ebp + 0x1c], 8
jb case.default.0x4677cd
mov eax, dword [ebx + 4]
push ecx
cmp dword [ebx], 0
je 0x466e37
mov dword [ebp - 0xd98], 6
mov dword [ebp - 0xd94], 1
mov dword [ebp - 0xd90], eax
lea eax, [ebp - 0xd98]
push eax
call fcn.0043f490
movzx eax, al
neg eax
sbb eax, eax
and eax, 0xfffffff2
add eax, 0xe
jmp 0x46916c
mov dword [ebp - 0xd88], 6
mov dword [ebp - 0xd84], 0
mov dword [ebp - 0xd80], eax
lea eax, [ebp - 0xd88]
jmp 0x466e1f
test ebx, ebx
je case.default.0x4677cd
cmp dword [ebp + 0x1c], 0x14
jb case.default.0x4677cd
mov eax, dword [ebx + 0xc]
test eax, eax
je 0x466e77
lea ecx, [eax + ebx]
jmp 0x466e79
xor ecx, ecx
mov eax, dword [ebx + 8]
test eax, eax
je 0x466e94
add eax, ebx
push dword [ebx + 0x10]
push ecx
push eax
push dword [ebx + 4]
call fcn.004ae910
jmp 0x46916c
xor eax, eax
push dword [ebx + 0x10]
push ecx
push eax
push dword [ebx + 4]
call fcn.004ae910
jmp 0x46916c
test ebx, ebx
je case.default.0x4677cd
cmp dword [ebp + 0x1c], 0xc
jb case.default.0x4677cd
call fcn.004a13a0
mov edi, eax
test edi, edi
je 0x464aaf
mov ecx, dword [edi + 0x58]
mov ecx, dword [ecx + 8]
test ecx, ecx
je 0x464aa8
push dword [ebx + 8]
lea eax, [ebx + 0xc]
push eax
push dword [ebx + 4]
push dword [ebx]
push 0xfe5
call ecx
add esp, 0x14
mov esi, eax
jmp 0x464ab4
test ebx, ebx
je case.default.0x4677cd
cmp dword [ebp + 0x1c], 2
jb case.default.0x4677cd
call fcn.004a13a0
mov edi, eax
test edi, edi
je 0x464aaf
mov dx, word [ebx]
mov ecx, edi
call fcn.004a07e0
mov esi, eax
jmp 0x464ab4
test ebx, ebx
je case.default.0x4677cd
cmp dword [ebp + 0x1c], 4
jb case.default.0x4677cd
mov ecx, dword [ebp + 0x24]
mov eax, ecx
shr eax, 1
mov dword [ebp - 0xca4], eax
xor edi, edi
mov dword [ebp - 0xcac], edi
test esi, esi
jne 0x466f59
test ecx, ecx
jne case.default.0x4677cd
call fcn.004a13a0
mov dword [ebp - 0xc40], eax
test eax, eax
je 0x466f86
lea ecx, [ebp - 0xca4]
push ecx
push esi
mov edx, dword [ebx]
mov ecx, eax
call fcn.004a0800
add esp, 8
mov ebx, eax
mov eax, dword [ebp - 0xc40]
jmp 0x466f8b
mov ebx, 0xc1d
mov ecx, eax
call fcn.004a13d0
test ebx, ebx
jne 0x466fc0
lea ecx, [esi + 2]
lea esp, [esp]
mov ax, word [esi]
add esi, 2
test ax, ax
jne 0x466fa0
sub esi, ecx
sar esi, 1
lea edi, [esi*2 + 2]
mov dword [ebp - 0xcac], edi
xor eax, eax
jmp 0x466ff4
cmp ebx, 0x4652
jne 0x466fef
cmp dword [ebp + 0x24], 4
jb 0x466fe8
mov eax, dword [ebp - 0xca4]
add eax, eax
mov dword [esi], eax
mov edi, 4
mov dword [ebp - 0xcac], edi
lea eax, [edi + 1]
jmp 0x466ff4
mov eax, 8
jmp 0x466ff4
mov eax, 0xe
mov ecx, dword [ebp - 0xc3c]
test ecx, ecx
je 0x46916c
mov dword [ecx], edi
jmp 0x46916c
test ebx, ebx
je case.default.0x4677cd
cmp dword [ebp + 0x1c], 4
jb case.default.0x4677cd
mov eax, dword [ebp + 0x24]
mov dword [ebp - 0xc44], eax
xor edi, edi
mov dword [ebp - 0xcb4], edi
test esi, esi
jne 0x467038
test eax, eax
jne case.default.0x4677cd
call fcn.004a13a0
mov dword [ebp - 0xc40], eax
test eax, eax
je 0x467076
mov ecx, dword [eax + 0x58]
mov ecx, dword [ecx + 8]
test ecx, ecx
je 0x46706f
lea eax, [ebp - 0xc44]
push eax
push esi
push dword [ebx]
push 0x4652
call ecx
add esp, 0x10
mov ebx, eax
mov eax, dword [ebp - 0xc40]
jmp 0x46707b
mov ebx, 0x1b67
jmp 0x46707b
mov ebx, 0xc1d
mov ecx, eax
call fcn.004a13d0
test ebx, ebx
jne 0x467099
mov edi, dword [ebp - 0xc44]
mov dword [ebp - 0xcb4], edi
xor eax, eax
jmp 0x466ff4
cmp ebx, 0x4652
jne 0x466fef
cmp dword [ebp + 0x24], 4
jb 0x466fe8
mov eax, dword [ebp - 0xc44]
mov dword [esi], eax
mov edi, 4
mov dword [ebp - 0xcb4], edi
lea eax, [edi + 1]
jmp 0x466ff4
test ebx, ebx
je case.default.0x4677cd
cmp dword [ebp + 0x1c], 6
jb case.default.0x4677cd
mov ecx, dword [ebp + 0x24]
mov eax, ecx
shr eax, 1
mov dword [ebp - 0xcbc], eax
xor edi, edi
mov dword [ebp - 0xcb8], edi
test esi, esi
jne 0x4670fd
test ecx, ecx
jne case.default.0x4677cd
call fcn.004a13a0
mov dword [ebp - 0xc40], eax
test eax, eax
je 0x46712f
movzx ecx, word [ebx + 4]
push ecx
lea ecx, [ebp - 0xcbc]
push ecx
push esi
mov edx, dword [ebx]
mov ecx, eax
call fcn.004a0830
add esp, 0xc
mov ebx, eax
mov eax, dword [ebp - 0xc40]
jmp 0x467134
mov ebx, 0xc1d
mov ecx, eax
call fcn.004a13d0
test ebx, ebx
jne 0x467165
lea ecx, [esi + 2]
mov ax, word [esi]
add esi, 2
test ax, ax
jne 0x467142
sub esi, ecx
sar esi, 1
lea edi, [esi*2 + 2]
mov dword [ebp - 0xcb8], edi
xor eax, eax
jmp 0x466ff4
cmp ebx, 0x4652
jne 0x466fef
cmp dword [ebp + 0x24], 4
jb 0x466fe8
mov eax, dword [ebp - 0xcbc]
add eax, eax
mov dword [esi], eax
mov edi, 4
mov dword [ebp - 0xcb8], edi
lea eax, [edi + 1]
jmp 0x466ff4
test ebx, ebx
je case.default.0x4677cd
cmp dword [ebp + 0x1c], 6
jb case.default.0x4677cd
mov eax, dword [ebp + 0x24]
mov dword [ebp - 0xc74], eax
xor edi, edi
mov dword [ebp - 0xca8], edi
test esi, esi
jne 0x4671c7
test eax, eax
jne case.default.0x4677cd
call fcn.004a13a0
mov dword [ebp - 0xc40], eax
test eax, eax
je 0x46720a
movzx edx, word [ebx + 4]
mov ecx, dword [eax + 0x58]
mov ecx, dword [ecx + 8]
test ecx, ecx
je 0x467203
push edx
lea eax, [ebp - 0xc74]
push eax
push esi
push dword [ebx]
push 0x4654
call ecx
add esp, 0x14
mov ebx, eax
mov eax, dword [ebp - 0xc40]
jmp 0x46720f
mov ebx, 0x1b67
jmp 0x46720f
mov ebx, 0xc1d
mov ecx, eax
call fcn.004a13d0
test ebx, ebx
jne 0x46722d
mov edi, dword [ebp - 0xc74]
mov dword [ebp - 0xca8], edi
xor eax, eax
jmp 0x466ff4
cmp ebx, 0x4652
jne 0x466fef
cmp dword [ebp + 0x24], 4
jb 0x466fe8
mov eax, dword [ebp - 0xc74]
mov dword [esi], eax
mov edi, 4
mov dword [ebp - 0xca8], edi
lea eax, [edi + 1]
jmp 0x466ff4
test ebx, ebx
je case.default.0x4677cd
cmp dword [ebp + 0x1c], 0x14
jb case.default.0x4677cd
test esi, esi
je case.default.0x4677cd
mov edi, dword [ebp + 0x24]
cmp edi, 0x10
jb case.default.0x4677cd
call fcn.004a13a0
mov ecx, eax
mov dword [ebp - 0xc40], ecx
test ecx, ecx
je 0x4672b8
push edi
push esi
push dword [ebx + 0x10]
push dword [ebx + 0xc]
mov eax, dword [ebx + 8]
add eax, ebx
push eax
mov edx, dword [ebx + 4]
call fcn.004a0860
add esp, 0x14
mov edi, eax
mov ecx, dword [ebp - 0xc40]
jmp 0x4672bd
mov edi, 0xc1d
call fcn.004a13d0
test edi, edi
jne 0x4672ca
mov eax, dword [esi]
jmp 0x4672db
cmp edi, 0x4652
jne 0x4672d9
mov eax, 0x10
jmp 0x4672db
xor eax, eax
mov ecx, dword [ebp - 0xc3c]
test ecx, ecx
je 0x4672e7
mov dword [ecx], eax
test edi, edi
jne 0x4672f2
mov eax, edi
jmp 0x46916c
sub edi, 0x4652
neg edi
sbb edi, edi
and edi, 9
add edi, 5
mov eax, edi
jmp 0x46916c
test ebx, ebx
je case.default.0x4677cd
cmp dword [ebp + 0x1c], 0x18
jb case.default.0x4677cd
test esi, esi
je case.default.0x4677cd
mov edi, dword [ebp + 0x24]
cmp edi, 0x10
jb case.default.0x4677cd
call fcn.004a13a0
mov ecx, eax
mov dword [ebp - 0xc40], ecx
test ecx, ecx
je 0x467379
mov edx, dword [ebx + 8]
add edx, ebx
mov eax, dword [ecx + 0x58]
mov eax, dword [eax + 8]
test eax, eax
je 0x467372
push dword [ebx + 0x14]
push edi
push esi
push dword [ebx + 0x10]
push dword [ebx + 0xc]
push edx
push dword [ebx + 4]
push 0x4657
call eax
add esp, 0x20
mov edi, eax
mov ecx, dword [ebp - 0xc40]
jmp 0x46737e
mov edi, 0x1b67
jmp 0x46737e
mov edi, 0xc1d
call fcn.004a13d0
test edi, edi
jne 0x46738b
mov eax, dword [esi]
jmp 0x46739c
cmp edi, 0x4652
jne 0x46739a
mov eax, 0x10
jmp 0x46739c
xor eax, eax
mov ecx, dword [ebp - 0xc3c]
test ecx, ecx
je 0x4673a8
mov dword [ecx], eax
test edi, edi
jne 0x4672f2
mov eax, edi
jmp 0x46916c
test ebx, ebx
je case.default.0x4677cd
cmp dword [ebp + 0x1c], 8
jb case.default.0x4677cd
mov ecx, dword [ebp + 0x24]
mov eax, ecx
shr eax, 1
mov dword [ebp - 0xc8c], eax
xor edi, edi
mov dword [ebp - 0xc90], edi
test esi, esi
jne 0x4673ea
test ecx, ecx
jne case.default.0x4677cd
call fcn.004a13a0
mov dword [ebp - 0xc40], eax
test eax, eax
je 0x46742b
mov ecx, dword [eax + 0x58]
mov ecx, dword [ecx + 8]
test ecx, ecx
je 0x467424
lea eax, [ebp - 0xc8c]
push eax
push esi
push dword [ebx + 4]
push dword [ebx]
push 0x4656
call ecx
add esp, 0x14
mov ebx, eax
mov eax, dword [ebp - 0xc40]
jmp 0x467430
mov ebx, 0x1b67
jmp 0x467430
mov ebx, 0xc1d
mov ecx, eax
call fcn.004a13d0
test ebx, ebx
jne 0x467463
lea ecx, [esi + 2]
mov edi, edi
mov ax, word [esi]
add esi, 2
test ax, ax
jne 0x467440
sub esi, ecx
sar esi, 1
lea edi, [esi*2 + 2]
mov dword [ebp - 0xc90], edi
xor eax, eax
jmp 0x466ff4
cmp ebx, 0x4652
jne 0x466fef
cmp dword [ebp + 0x24], 4
jb 0x466fe8
mov eax, dword [ebp - 0xc8c]
add eax, eax
mov dword [esi], eax
mov edi, 4
mov dword [ebp - 0xc90], edi
lea eax, [edi + 1]
jmp 0x466ff4
test ebx, ebx
je case.default.0x4677cd
cmp dword [ebp + 0x1c], 0xc
jb case.default.0x4677cd
mov ecx, dword [ebp + 0x24]
mov eax, ecx
shr eax, 1
mov dword [ebp - 0xca0], eax
xor edi, edi
mov dword [ebp - 0xc94], edi
test esi, esi
jne 0x4674c9
test ecx, ecx
jne case.default.0x4677cd
call fcn.004a13a0
mov dword [ebp - 0xc40], eax
test eax, eax
je 0x4674fc
push dword [ebx + 8]
lea ecx, [ebp - 0xca0]
push ecx
push esi
push dword [ebx + 4]
mov edx, dword [ebx]
mov ecx, eax
call fcn.004a0890
add esp, 0x10
mov ebx, eax
mov eax, dword [ebp - 0xc40]
jmp 0x467501
mov ebx, 0xc1d
mov ecx, eax
call fcn.004a13d0
test ebx, ebx
jne 0x467533
lea ecx, [esi + 2]
nop
mov ax, word [esi]
add esi, 2
test ax, ax
jne 0x467510
sub esi, ecx
sar esi, 1
lea edi, [esi*2 + 2]
mov dword [ebp - 0xc94], edi
xor eax, eax
jmp 0x466ff4
cmp ebx, 0x4652
jne 0x466fef
cmp dword [ebp + 0x24], 4
jb 0x466fe8
mov eax, dword [ebp - 0xca0]
add eax, eax
mov dword [esi], eax
mov edi, 4
mov dword [ebp - 0xc94], edi
lea eax, [edi + 1]
jmp 0x466ff4
mov ecx, dword [ebp + 0x24]
mov eax, ecx
shr eax, 1
mov dword [ebp - 0xc5c], eax
xor edi, edi
mov dword [ebp - 0xc98], edi
test esi, esi
jne 0x467587
test ecx, ecx
jne case.default.0x4677cd
call fcn.004a13a0
mov dword [ebp - 0xc40], eax
test eax, eax
je 0x4675c3
mov ecx, dword [eax + 0x58]
mov ecx, dword [ecx + 8]
test ecx, ecx
je 0x4675bc
lea eax, [ebp - 0xc5c]
push eax
push esi
push 0x4659
call ecx
add esp, 0xc
mov ebx, eax
mov eax, dword [ebp - 0xc40]
jmp 0x4675c8
mov ebx, 0x1b67
jmp 0x4675c8
mov ebx, 0xc1d
mov ecx, eax
call fcn.004a13d0
test ebx, ebx
jne 0x4675e9
mov eax, dword [ebp - 0xc5c]
lea edi, [eax + eax]
mov dword [ebp - 0xc98], edi
xor eax, eax
jmp 0x466ff4
cmp ebx, 0x4652
jne 0x466fef
cmp dword [ebp + 0x24], 4
jb 0x466fe8
mov eax, dword [ebp - 0xc5c]
add eax, eax
mov dword [esi], eax
mov edi, 4
mov dword [ebp - 0xc98], edi
lea eax, [edi + 1]
jmp 0x466ff4
test ebx, ebx
je case.default.0x4677cd
mov ecx, dword [ebp + 0x1c]
cmp ecx, 0x30
jb case.default.0x4677cd
test esi, esi
je 0x46846b
mov edx, dword [ebp + 0x24]
cmp edx, 0x20
jb 0x46846b
mov eax, dword [ebp - 0xc3c]
test eax, eax
je 0x46846b
mov dword [eax], 0x20
test byte [ebx + 4], 1
jne case.default.0x4677cd
push eax
push edx
push esi
push ecx
push ebx
push dword [ebp + 0x10]
push dword [ebp + 0xc]
mov ecx, edi
call fcn.0046e220
jmp 0x46916c
mov ecx, dword [ebp - 0xc3c]
push ecx
push dword [ebp + 0x24]
push esi
mov ecx, edi
call fcn.0046e340
jmp 0x46916c
test ebx, ebx
je case.default.0x4677cd
cmp dword [ebp + 0x1c], 8
jb case.default.0x4677cd
test esi, esi
je 0x46846b
cmp dword [ebp + 0x24], 0xc
jb 0x46846b
mov edx, dword [ebp - 0xc3c]
test edx, edx
je 0x46846b
mov dword [edx], 0xc
cmp dword [ebx], 8
jb case.default.0x4677cd
movzx eax, word [ebx + 6]
movzx ecx, word [ebx + 4]
push edx
push esi
push eax
call fcn.0046ef00
jmp 0x46916c
test ebx, ebx
je case.default.0x4677cd
cmp dword [ebp + 0x1c], 8
jb case.default.0x4677cd
cmp dword [ebx], 8
jb case.default.0x4677cd
mov ecx, dword [ebp - 0xc3c]
test ecx, ecx
je 0x467711
mov dword [ecx], 0
mov ecx, dword [ebx + 4]
call fcn.004a13d0
xor eax, eax
jmp 0x46916c
mov ebx, dword [ebp - 0xc3c]
test ebx, ebx
je 0x467730
mov dword [ebx], 0
test esi, esi
je case.default.0x4677cd
mov eax, dword [ebp + 0x24]
cmp eax, 0x22
jb case.default.0x4677cd
lea ecx, [ebp - 0xc9c]
push ecx
push eax
push esi
lea ecx, [edi + 0x9b08]
call fcn.004cdb20
test eax, eax
je 0x46777e
cmp eax, 0x1b61
je 0x46776c
mov eax, 0xe
xor ecx, ecx
jmp 0x467786
mov eax, dword [ebp - 0xc9c]
mov dword [esi], eax
mov ecx, 4
lea eax, [ecx + 1]
jmp 0x467786
mov ecx, dword [ebp - 0xc9c]
xor eax, eax
test ebx, ebx
je 0x46916c
mov dword [ebx], ecx
jmp 0x46916c
test ebx, ebx
je case.default.0x4677cd
cmp dword [ebp + 0x1c], 4
jb case.default.0x4677cd
test esi, esi
je 0x46846b
cmp dword [ebp + 0x24], 4
jb 0x46846b
mov ecx, dword [ebp - 0xc3c]
test ecx, ecx
je 0x46846b
mov dword [ecx], 4
mov eax, dword [ebx]
dec eax
cmp eax, 3
ja case.default.0x4677cd
jmp dword [eax*4 + 0x469578]
mov dword [esi], fcn.00508e60
xor eax, eax
jmp 0x46916c
mov dword [esi], 0x4366a0
xor eax, eax
jmp 0x46916c
mov dword [esi], 0x436750
xor eax, eax
jmp 0x46916c
mov dword [esi], 0x4a1410
mov eax, 8
jmp 0x46916c
test ebx, ebx
je case.default.0x4677cd
cmp dword [ebp + 0x1c], 0xc
jb case.default.0x4677cd
test esi, esi
je 0x46846b
cmp dword [ebp + 0x24], 0x20
jb 0x46846b
mov ecx, dword [ebp - 0xc3c]
test ecx, ecx
je 0x46846b
mov dword [ecx], 0x20
mov ecx, dword [edi + 0x9da4]
test ecx, ecx
jne 0x46784f
mov eax, 0x15
jmp 0x46916c
mov eax, dword [ebx + 4]
test al, 1
je 0x467871
push eax
push dword [ebx + 8]
call fcn.0042c290
test al, al
jne case.0x4648b8.22
mov eax, 0xd
jmp 0x46916c
lea ecx, [ebp - 0xcec]
call fcn.004d2200
mov byte [ebp - 4], 7
cmp dword [edi + 0x9da4], 0
je 0x467964
lea eax, [esi + 4]
push eax
mov eax, ecx
push eax
push ebx
mov ecx, edi
call fcn.00473400
test al, al
je 0x467964
mov ecx, dword [ebp - 0xcdc]
xor eax, eax
mov dword [esi], eax
mov dword [esi + 4], eax
mov dword [esi + 8], eax
mov dword [esi + 0xc], eax
mov dword [esi + 0x10], eax
mov dword [esi + 0x14], eax
mov dword [esi + 0x18], eax
mov dword [esi + 0x1c], eax
mov dword [esi], 1
lea eax, [ecx + 0x20]
mov dword [esi + 0x10], eax
mov dword [esi + 0x14], ecx
mov eax, dword [ebp + 0x24]
push ecx
cmp dword [esi + 0x10], eax
jbe 0x46792a
push ecx
lea ecx, [ebp - 0xcec]
call fcn.004d2310
push eax
push esi
mov ecx, dword [edi + 0x9da4]
call fcn.00428680
mov dword [esi + 8], eax
mov dword [esi + 0xc], edx
or eax, edx
jne 0x467911
mov byte [ebp - 4], al
lea ecx, [ebp - 0xcec]
call fcn.004d2270
jmp 0x469167
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xcec]
call fcn.004d2270
mov eax, 0x14
jmp 0x46916c
mov dword [esi + 0x18], 0x20
mov eax, dword [ebp - 0xcdc]
neg eax
sbb eax, eax
and eax, dword [ebp - 0xce4]
push eax
lea eax, [esi + 0x20]
push eax
call sub.MSVCR120.dll_memcpy
add esp, 0xc
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xcec]
call fcn.004d2270
xor eax, eax
jmp 0x46916c
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xcec]
call fcn.004d2270
mov eax, 0xc
jmp 0x46916c
test ebx, ebx
je case.default.0x4677cd
cmp dword [ebp + 0x1c], 4
jb case.default.0x4677cd
push dword [ebx]
mov ecx, dword [edi + 0x9da4]
call fcn.0048c7e0
xor eax, eax
jmp 0x46916c
test ebx, ebx
je case.default.0x4677cd
cmp dword [ebp + 0x1c], 0x24
jb case.default.0x4677cd
test esi, esi
je 0x46846b
cmp dword [ebp + 0x24], 0xc
jb 0x46846b
mov ecx, dword [ebp - 0xc3c]
test ecx, ecx
je 0x46846b
mov dword [ecx], 0xc
push esi
push ebx
call fcn.004887d0
jmp 0x46916c
test ebx, ebx
je case.default.0x4677cd
cmp dword [ebp + 0x1c], 0x2c
jb case.default.0x4677cd
push ebx
call fcn.00488a40
jmp 0x46916c
test ebx, ebx
je case.default.0x4677cd
cmp dword [ebp + 0x1c], 0x28
jb case.default.0x4677cd
push ebx
call fcn.00488ca0
jmp 0x46916c
test ebx, ebx
je case.default.0x4677cd
cmp dword [ebp + 0x1c], 8
jb case.default.0x4677cd
test esi, esi
je 0x46846b
cmp dword [ebp + 0x24], 0x1c
jb 0x46846b
mov eax, dword [ebp - 0xc3c]
test eax, eax
je 0x46846b
mov dword [eax], 0x1c
push eax
push ecx
push esi
push ebx
call fcn.00488f00
jmp 0x46916c
test ebx, ebx
je case.default.0x4677cd
cmp dword [ebp + 0x1c], 0x28
jb case.default.0x4677cd
push ebx
call fcn.004890f0
jmp 0x46916c
test ebx, ebx
je case.default.0x4677cd
cmp dword [ebp + 0x1c], 0x28
jb case.default.0x4677cd
push ebx
call fcn.00489320
jmp 0x46916c
test ebx, ebx
je case.default.0x4677cd
cmp dword [ebp + 0x1c], 0x30
jb case.default.0x4677cd
push ebx
call fcn.00489d50
jmp 0x46916c
test esi, esi
je 0x46846b
cmp dword [ebp + 0x24], 8
jb 0x46846b
mov ecx, dword [ebp - 0xc3c]
test ecx, ecx
je 0x46846b
mov dword [ecx], 8
push esi
call fcn.0048ae80
jmp 0x46916c
test ebx, ebx
je case.default.0x4677cd
cmp dword [ebp + 0x1c], 8
jb case.default.0x4677cd
push dword [ebx + 4]
push dword [ebx]
call fcn.0048af10
jmp 0x46916c
test ebx, ebx
je case.default.0x4677cd
cmp dword [ebp + 0x1c], 8
jb case.default.0x4677cd
push dword [ebx + 4]
push dword [ebx]
call fcn.0048afb0
jmp 0x46916c
test ebx, ebx
je case.default.0x4677cd
cmp dword [ebp + 0x1c], 4
jb case.default.0x4677cd
test esi, esi
je 0x46846b
cmp dword [ebp + 0x24], 0x1c
jb 0x46846b
mov ecx, dword [ebp - 0xc3c]
test ecx, ecx
je 0x46846b
mov dword [ecx], 0x1c
push esi
push dword [ebx]
call fcn.0048be40
jmp 0x46916c
test ebx, ebx
je case.default.0x4677cd
cmp dword [ebp + 0x1c], 0x14
jb case.default.0x4677cd
cmp dword [ebx], 0x14
jb 0x469167
mov eax, dword [ebx + 0x10]
test eax, eax
je 0x467b9d
lea ecx, [eax + ebx]
jmp 0x467b9f
xor ecx, ecx
mov eax, dword [ebx + 8]
test eax, eax
je 0x467bbc
add eax, ebx
push ecx
push dword [ebx + 0xc]
push dword [ebx + 4]
push eax
mov ecx, edi
call fcn.0046f9d0
jmp 0x46916c
xor eax, eax
push ecx
push dword [ebx + 0xc]
push dword [ebx + 4]
push eax
mov ecx, edi
call fcn.0046f9d0
jmp 0x46916c
test ebx, ebx
je case.default.0x4677cd
cmp dword [ebp + 0x1c], 0x10
jb case.default.0x4677cd
test esi, esi
je 0x46846b
mov edi, dword [ebp + 0x24]
cmp edi, 0x10
jb 0x46846b
mov ecx, dword [ebp - 0xc3c]
test ecx, ecx
je 0x46846b
mov dword [ecx], 0x10
lea ecx, [ebp - 0xd08]
call fcn.0049fed0
mov byte [ebp - 4], 9
push edi
push esi
push ebx
mov ecx, eax
call fcn.0049ffc0
mov esi, eax
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xd08]
call fcn.0049ff10
test esi, esi
jne 0x468b78
xor eax, eax
jmp 0x46916c
test ebx, ebx
je case.default.0x4677cd
cmp dword [ebp + 0x1c], 0x10
jb case.default.0x4677cd
lea ecx, [ebp - 0xd10]
call fcn.0049fed0
mov byte [ebp - 4], 0xa
push ebx
mov ecx, eax
call fcn.004a01a0
test eax, eax
sete bl
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xd10]
call fcn.0049ff10
test bl, bl
je 0x469167
xor eax, eax
jmp 0x46916c
test ebx, ebx
je case.default.0x4677cd
cmp dword [ebp + 0x1c], 0x10
jb case.default.0x4677cd
lea ecx, [ebp - 0xd18]
call fcn.0049fed0
mov byte [ebp - 4], 0xb
push ebx
mov ecx, eax
call fcn.004a0240
test eax, eax
sete bl
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xd18]
call fcn.0049ff10
test bl, bl
je 0x469167
xor eax, eax
jmp 0x46916c
test ebx, ebx
je case.default.0x4677cd
cmp dword [ebp + 0x1c], 0x10
jb case.default.0x4677cd
lea ecx, [ebp - 0xd20]
call fcn.0049fed0
mov byte [ebp - 4], 0xc
push ebx
mov ecx, eax
call fcn.004a0320
test eax, eax
sete bl
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xd20]
call fcn.0049ff10
test bl, bl
je 0x469167
xor eax, eax
jmp 0x46916c
test ebx, ebx
je case.default.0x4677cd
cmp dword [ebp + 0x1c], 0x54
jb case.default.0x4677cd
test esi, esi
je 0x46846b
cmp dword [ebp + 0x24], 0xc
jb 0x46846b
mov edi, dword [ebp - 0xc3c]
test edi, edi
je 0x46846b
mov dword [edi], 0xc
lea ecx, [ebp - 0xcf0]
call fcn.0049fed0
mov byte [ebp - 4], 0xd
cmp dword [eax], 0
jne 0x467d7c
mov ebx, 0x1b65
jmp 0x467d87
push esi
push ebx
mov ecx, eax
call fcn.004a03c0
mov ebx, eax
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xcf0]
call fcn.0049ff10
test ebx, ebx
jne 0x467da6
mov eax, dword [esi + 4]
mov dword [edi], eax
xor eax, eax
jmp 0x46916c
cmp ebx, 0x1b61
jne 0x469167
mov dword [edi], 0
mov eax, 5
jmp 0x46916c
test ebx, ebx
je case.default.0x4677cd
cmp dword [ebp + 0x1c], 0xc
jb case.default.0x4677cd
test esi, esi
je 0x46846b
cmp dword [ebp + 0x24], 0xc
jb 0x46846b
mov ecx, dword [ebp - 0xc3c]
test ecx, ecx
je 0x46846b
mov dword [ecx], 0xc
cmp dword [ebx], 0xc
jb case.default.0x4677cd
push 0x184
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov dword [ebp - 0xc40], eax
test eax, eax
je 0x465cce
push 0x184
push 0
push eax
call sub.MSVCR120.dll_memset
add esp, 0xc
mov ecx, dword [ebx + 4]
test ecx, ecx
jne 0x467e3c
lea ecx, [edi + 0x1fd4]
sub esp, 0x14
push dword [ebx + 8]
mov edi, dword [ebp - 0xc40]
mov edx, edi
call fcn.004f5750
add esp, 0x18
test eax, eax
jne 0x467e6f
mov dword [esi], 0xc
mov dword [esi + 4], edi
mov eax, dword [edi + 0x58]
mov eax, dword [eax + 8]
mov dword [esi + 8], eax
xor eax, eax
jmp 0x46916c
push edi
call dword [sym.imp.MSVCR120.dll_free]
add esp, 4
mov eax, 1
jmp 0x46916c
test ebx, ebx
je case.default.0x4677cd
cmp dword [ebp + 0x1c], 4
jb case.default.0x4677cd
mov ecx, dword [ebx]
call fcn.004f5900
test eax, eax
jne 0x469167
push dword [ebx]
call dword [sym.imp.MSVCR120.dll_free]
add esp, 4
xor eax, eax
jmp 0x46916c
test esi, esi
je 0x46846b
cmp dword [ebp + 0x24], 4
jb 0x46846b
mov ecx, dword [ebp - 0xc3c]
test ecx, ecx
je 0x46846b
mov dword [ecx], 4
add edi, 0x947c
push edi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov ecx, dword [ebp - 0xc54]
mov esi, dword [ecx + 0x9468]
push edi
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov eax, dword [ebp - 0xc7c]
mov dword [eax], esi
xor eax, eax
jmp 0x46916c
mov dword [ebp - 0xc80], 0xe
push 0
push 0x80
push 3
push 0
push 3
push closesocket
push ebx
call dword [0x5c008c]
mov ebx, eax
cmp ebx, 0xffffffff
je 0x467fb9
push 0
push ebx
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov esi, eax
cmp esi, 0xffffffff
je 0x467fb2
test esi, esi
je 0x467fb2
push esi
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov dword [ebp - 0xc5c], eax
test eax, eax
je 0x467fb2
push 0
lea ecx, [ebp - 0xc70]
push ecx
push esi
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x467fa2
cmp dword [ebp - 0xc70], esi
jne 0x467fa2
push esi
mov esi, dword [ebp - 0xc5c]
push esi
push 2
mov ecx, edi
call fcn.00485240
neg eax
sbb eax, eax
and eax, dword [ebp - 0xc80]
mov dword [ebp - 0xc80], eax
jmp 0x467fa8
mov esi, dword [ebp - 0xc5c]
push esi
call dword [sym.imp.MSVCR120.dll_free]
add esp, 4
push ebx
call dword [0x5c001c]
mov eax, dword [ebp - 0xc80]
jmp 0x46916c
cmp edx, 0x1000
ja 0x4682bb
je 0x468288
lea eax, [edx - 0xf01]
cmp eax, 7
ja case.0x4683eb.16777234
jmp dword [eax*4 + 0x469588]
test ebx, ebx
je case.default.0x4677cd
cmp dword [ebp + 0x1c], 4
jb case.default.0x4677cd
push dword [ebx]
mov ecx, edi
call fcn.0046a080
xor eax, eax
jmp 0x46916c
test ebx, ebx
je case.default.0x4677cd
cmp dword [ebp + 0x1c], 4
jb case.default.0x4677cd
push dword [ebx]
mov ecx, edi
call fcn.0046a030
xor eax, eax
jmp 0x46916c
mov edx, 0x28
mov ecx, dword [edi + 0x1db0]
call fcn.00513500
mov edx, 4
mov ecx, dword [edi + 0x1db0]
call fcn.00513500
test ebx, ebx
je 0x468064
cmp dword [ebp + 0x1c], 8
jb 0x468064
cmp dword [ebx + 4], 0
jne case.0x4648b8.22
mov ecx, edi
call fcn.0049c4a0
xor eax, eax
jmp 0x46916c
mov edx, 0x2c
mov ecx, dword [edi + 0x1db0]
call fcn.00513500
mov edx, 4
mov ecx, dword [edi + 0x1db0]
call fcn.00513500
xor eax, eax
jmp 0x46916c
mov ecx, edi
call fcn.0049a780
lea ecx, [edi + 0x98c4]
call fcn.004c9930
push 0
mov ecx, edi
call fcn.0046db80
xor eax, eax
jmp 0x46916c
test esi, esi
je 0x46846b
cmp dword [ebp + 0x24], 4
jb 0x46846b
mov ecx, dword [ebp - 0xc3c]
test ecx, ecx
je 0x46846b
mov dword [ecx], 4
cmp byte [edi + 0x2209], 0
je 0x4680f3
xor eax, eax
mov dword [esi], eax
jmp 0x46916c
call fcn.00439c70
mov dword [esi], eax
xor eax, eax
jmp 0x46916c
test esi, esi
je 0x46846b
cmp dword [ebp + 0x24], 4
jb 0x46846b
mov ecx, dword [ebp - 0xc3c]
test ecx, ecx
je 0x46846b
mov dword [ecx], 4
mov dword [esi], 0
call fcn.0043a040
mov byte [ebp - 0xc45], al
test al, al
je 0x468167
call dword [0x5c00ec]
test eax, eax
je 0x468153
mov dword [esi], 0xffffffff
xor eax, eax
jmp 0x46916c
cmp byte [edi + 0x2209], 0
je 0x468160
xor eax, eax
jmp 0x468165
call fcn.00439c70
mov dword [esi], eax
cmp dword [esi], 0
jne case.0x4648b8.22
lea eax, [edi + 0x9e68]
mov dword [ebp - 0xc70], eax
lea ecx, [ebp - 0xc58]
push ecx
mov ecx, eax
call fcn.00493520
test al, al
je 0x469167
push 0
push 0
push 0
push 0
push 4
lea eax, [ebp - 0xc58]
push eax
push 0x2011
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push 0x1000600
mov ecx, edi
call fcn.00497fa0
mov ebx, eax
mov dword [ebp - 0xd0c], ebx
test ebx, ebx
jne 0x468216
push esi
lea esi, [edi + 0x9e68]
mov ecx, esi
call fcn.00493800
test al, al
jne 0x4681e3
mov ebx, 0xe
mov dword [ebp - 0xd0c], ebx
cmp byte [ebp - 0xc45], 0
jne 0x46821c
test ebx, ebx
jne 0x46821c
cmp byte [edi + 0x2209], bl
jne 0x46821c
call fcn.00439c70
test eax, eax
je 0x46821c
push eax
call dword [0x5c001c]
mov ecx, esi
call fcn.004935e0
mov eax, ebx
jmp 0x46916c
mov esi, dword [ebp - 0xc70]
mov ecx, esi
call fcn.004935e0
mov eax, ebx
jmp 0x46916c
test ebx, ebx
je case.default.0x4677cd
cmp dword [ebp + 0x1c], 4
jb case.default.0x4677cd
mov eax, dword [ebx]
cmp eax, 0xffffffff
jne 0x468257
mov eax, 1
neg eax
sbb eax, eax
and eax, 0xfffffff2
add eax, 0xe
jmp 0x46916c
test eax, eax
je 0x468273
push eax
call fcn.00439c40
add esp, 4
neg eax
sbb eax, eax
and eax, 0xfffffff2
add eax, 0xe
jmp 0x46916c
call dword [sym.imp.ADVAPI32.dll_RevertToSelf]
neg eax
sbb eax, eax
and eax, 0xfffffff2
add eax, 0xe
jmp 0x46916c
test esi, esi
je 0x46846b
cmp dword [ebp + 0x24], 4
jb 0x46846b
mov ecx, dword [ebp - 0xc3c]
test ecx, ecx
je 0x46846b
mov dword [ecx], 4
mov dword [esi], 0x30000
xor eax, eax
jmp 0x46916c
cmp edx, 0x1000002
ja 0x4683c1
je case.0x4648b8.2
cmp edx, 0x2001
ja 0x468341
je 0x46831a
cmp edx, 0x1001
je 0x468fe4
cmp edx, 0x2000
jne case.0x4683eb.16777234
push 0
mov ecx, dword [ebp - 0xc3c]
push ecx
push dword [ebp + 0x24]
push esi
push dword [ebp + 0x1c]
push ebx
push edx
push dword [ebp + 0x10]
push dword [ebp + 0xc]
mov eax, dword [ebp - 0xc44]
push eax
mov ecx, edi
call fcn.00497fa0
jmp 0x46916c
push dword [ebp + 0x24]
push esi
push ecx
mov ecx, edi
call fcn.004a89a0
mov ecx, dword [ebp - 0xc3c]
test ecx, ecx
je 0x468332
mov dword [ecx], eax
neg eax
sbb eax, eax
and eax, 0xfffffff2
add eax, 0xe
jmp 0x46916c
mov eax, edx
sub eax, 0x2002
je 0x468361
sub eax, 0xe
jne case.0x4683eb.16777234
mov ecx, edi
call fcn.004b81d0
xor eax, eax
jmp 0x46916c
test ebx, ebx
je case.default.0x4677cd
cmp dword [ebp + 0x1c], 0xc
jb case.default.0x4677cd
mov ecx, dword [ebx + 4]
add ecx, ebx
mov edx, dword [ebx + 8]
call fcn.004f3d00
test eax, eax
js 0x469167
jmp 0x4649c5
test ebx, ebx
je case.default.0x4677cd
mov eax, dword [ebp + 0x1c]
cmp eax, 1
jb case.default.0x4677cd
mov ecx, dword [ebp - 0xc3c]
push ecx
push dword [ebp + 0x24]
push esi
push eax
push ebx
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push ecx
mov ecx, edi
call fcn.0046a590
jmp 0x46916c
cmp edx, 0x1001001
ja case.0x4683eb.16777234
je 0x468fe4
lea eax, [edx - 0x1000011]
cmp eax, 0x8a
ja case.0x4683eb.16777234
movzx eax, byte [eax + 0x469630]
jmp dword [eax*4 + 0x4695a8]
call dword [0x5c00ec]
test eax, eax
jne 0x468406
mov eax, 0x17
jmp 0x46916c
push 0x21
mov ecx, edi
call fcn.0046a080
xor eax, eax
jmp 0x46916c
test esi, esi
je 0x46846b
cmp dword [ebp + 0x24], 4
jb 0x46846b
mov ebx, dword [ebp - 0xc3c]
test ebx, ebx
je 0x46846b
mov dword [ebx], 4
lea eax, [edi + 0x9494]
mov dword [ebp - 0xc58], eax
push eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov ecx, dword [edi + 0x95dc]
lea eax, [ecx*4 + 4]
cmp dword [ebp + 0x24], eax
jae 0x468475
lea eax, [ecx*4 + 4]
mov dword [esi], eax
mov eax, dword [ebp - 0xc58]
push eax
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov eax, 5
jmp 0x46916c
mov dword [esi], ecx
mov eax, dword [edi + 0x95dc]
shl eax, 2
push eax
push dword [edi + 0x95d8]
lea eax, [esi + 4]
push eax
call sub.MSVCR120.dll_memcpy
add esp, 0xc
mov eax, dword [edi + 0x95dc]
lea eax, [eax*4 + 4]
mov dword [ebx], eax
lea eax, [edi + 0x9494]
push eax
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
xor eax, eax
jmp 0x46916c
test ebx, ebx
je case.default.0x4677cd
mov eax, dword [ebp + 0x1c]
cmp eax, 0x18
jb case.default.0x4677cd
cmp dword [ebx], 0x18
jne case.default.0x4677cd
mov ecx, dword [ebx + 0xc]
cmp ecx, eax
jae case.default.0x4677cd
mov edx, dword [ebx + 0x10]
sub eax, ecx
cmp edx, eax
setbe al
test al, al
je case.default.0x4677cd
mov eax, dword [ebx + 0x14]
cmp eax, 0xffffffff
je case.0x4648b8.22
push 0
push eax
push edx
lea eax, [ecx + ebx]
push eax
push dword [ebx + 8]
push dword [ebx + 4]
mov ecx, edi
call fcn.0049ec60
neg eax
sbb eax, eax
and eax, 0xe
jmp 0x46916c
test ebx, ebx
je case.default.0x4677cd
cmp dword [ebp + 0x1c], 8
jb case.default.0x4677cd
test esi, esi
je 0x46846b
cmp dword [ebp + 0x24], 2
jb 0x46846b
mov eax, dword [ebp - 0xc3c]
test eax, eax
je 0x46846b
mov dword [eax], 2
push dword [ebx]
mov ecx, edi
call fcn.0049eb40
test eax, eax
je case.default.0x4677cd
push dword [eax]
mov ecx, edi
call fcn.004a8130
test eax, eax
je case.default.0x4677cd
mov ecx, dword [ebp - 0xc3c]
push ecx
push dword [ebp + 0x24]
push esi
push dword [ebp + 0x1c]
push ebx
push 0x10013
push dword [ebp + 0x10]
push dword [ebp + 0xc]
mov ecx, eax
call fcn.004a7bf0
jmp 0x46916c
test ebx, ebx
je case.default.0x4677cd
cmp dword [ebp + 0x1c], 0x18
jb case.default.0x4677cd
push dword [ebx + 4]
mov ecx, edi
call fcn.0049eb40
test eax, eax
je case.default.0x4677cd
push dword [eax]
mov ecx, edi
call fcn.004a8130
test eax, eax
je case.default.0x4677cd
mov ecx, dword [ebp - 0xc3c]
push ecx
push dword [ebp + 0x24]
push esi
push dword [ebp + 0x1c]
push ebx
push 0x10014
push dword [ebp + 0x10]
push dword [ebp + 0xc]
mov ecx, eax
call fcn.004a7bf0
jmp 0x46916c
xor edi, edi
mov eax, dword [ebp + 0x1c]
test eax, eax
je 0x468615
test ebx, ebx
je case.default.0x4677cd
cmp eax, 8
jb case.default.0x4677cd
mov edi, dword [ebx + 4]
mov edx, 0x80
lea ecx, [ebp - 0x114]
call fcn.0050da70
mov ecx, dword [ebp - 0xc3c]
push ecx
push dword [ebp + 0x24]
push esi
lea eax, [ebp - 0x114]
push eax
mov ecx, edi
call fcn.004853c0
jmp 0x46916c
test ebx, ebx
je case.default.0x4677cd
mov edx, dword [ebp + 0x1c]
cmp edx, 8
jb case.default.0x4677cd
cmp dword [ebx], 8
jb case.default.0x4677cd
push dword [ebx + 4]
mov ecx, ebx
call fcn.004602b0
add esp, 4
test al, al
je case.default.0x4677cd
lea ecx, [ebp - 0xd34]
call fcn.004d2200
mov byte [ebp - 4], 1
push 0x80
call fcn.004d2430
mov edi, eax
test edi, edi
je 0x4686bb
mov edx, 0x80
mov ecx, edi
call fcn.0050da70
lea ecx, [edi + 1]
mov al, byte [edi]
inc edi
test al, al
jne 0x4686a3
sub edi, ecx
lea eax, [edi + 1]
push eax
lea ecx, [ebp - 0xd34]
call fcn.004d24c0
mov eax, dword [ebx + 4]
test eax, eax
je 0x468787
add eax, ebx
je 0x468787
lea ecx, [ebp - 0xd78]
call fcn.004d2200
mov byte [ebp - 4], 2
mov eax, dword [ebx + 4]
test eax, eax
je 0x4686e9
lea ecx, [eax + ebx]
jmp 0x4686eb
xor ecx, ecx
call fcn.0052fdc0
inc eax
mov dword [ebp - 0xc58], eax
jne 0x468701
mov edi, dword [ebp - 0xd70]
jmp 0x468715
push eax
lea ecx, [ebp - 0xd78]
call fcn.004d2430
mov edi, eax
mov eax, dword [ebp - 0xc58]
test edi, edi
je 0x468778
mov ecx, dword [ebx + 4]
test ecx, ecx
je 0x468724
add ecx, ebx
jmp 0x468726
xor ecx, ecx
push eax
mov edx, edi
call fcn.0052fcb0
add esp, 4
lea ecx, [edi + 1]
mov al, byte [edi]
inc edi
test al, al
jne 0x468734
sub edi, ecx
lea eax, [edi + 1]
push eax
lea ecx, [ebp - 0xd78]
call fcn.004d24c0
push 0x586a78
lea ecx, [ebp - 0xd34]
call fcn.004d2570
mov eax, dword [ebp - 0xd68]
neg eax
sbb eax, eax
and eax, dword [ebp - 0xd70]
push eax
lea ecx, [ebp - 0xd34]
call fcn.004d2570
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xd78]
call fcn.004d2270
xor edx, edx
cmp dword [ebx], 0xc
jb 0x468791
mov edx, dword [ebx + 8]
cmp dword [ebp - 0xd24], 0
je 0x4687cf
mov eax, dword [ebp - 0xd2c]
test eax, eax
je 0x4687cf
mov ecx, dword [ebp - 0xc3c]
push ecx
push dword [ebp + 0x24]
push esi
push eax
mov ecx, edx
call fcn.004853c0
mov esi, eax
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xd34]
call fcn.004d2270
mov eax, esi
jmp 0x46916c
mov esi, 8
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xd34]
call fcn.004d2270
mov eax, esi
jmp 0x46916c
test ebx, ebx
je case.default.0x4677cd
mov esi, dword [ebp + 0x1c]
cmp esi, 0x10
jb case.default.0x4677cd
mov ecx, dword [ebx + 8]
test ecx, ecx
je case.default.0x4677cd
cmp ecx, esi
jae case.default.0x4677cd
mov edx, dword [ebx + 0xc]
mov eax, esi
sub eax, ecx
cmp edx, eax
setbe al
test al, al
je case.default.0x4677cd
push edx
lea eax, [ecx + ebx]
push eax
push dword [ebx + 4]
mov ecx, edi
call fcn.00485240
test eax, eax
je case.0x4648b8.22
cmp eax, 0x54cf
je 0x468880
test ebx, ebx
je case.default.0x4677cd
cmp esi, 0x10
jb case.default.0x4677cd
mov eax, dword [ebx + 0xc]
add eax, ebx
push eax
mov eax, dword [ebx + 8]
add eax, ebx
push eax
push dword [ebx + 4]
lea ecx, [edi + 0x94f8]
call fcn.0054dfa0
movzx eax, al
neg eax
sbb eax, eax
and eax, 0xfffffff2
add eax, 0xe
jmp 0x46916c
mov eax, 0x13
jmp 0x46916c
test esi, esi
je 0x46846b
mov eax, dword [ebp + 0x24]
cmp eax, 1
jb 0x46846b
mov ebx, dword [ebp - 0xc3c]
test ebx, ebx
je 0x46846b
mov dword [ebx], 1
mov ecx, dword [edi + 0x9e28]
test ecx, ecx
je 0x469167
mov dword [ebp - 0xc3c], eax
lea edx, [ebp - 0xc3c]
push edx
push eax
push esi
call fcn.0045d160
test al, al
mov eax, dword [ebp - 0xc3c]
jne 0x468be8
neg eax
sbb eax, eax
and eax, 0xfffffff7
add eax, 0xe
jmp 0x46916c
test esi, esi
je 0x46846b
cmp dword [ebp + 0x24], 0xc
jb 0x46846b
mov ebx, dword [ebp - 0xc3c]
test ebx, ebx
je 0x46846b
mov dword [ebx], 0xc
cmp dword [edi + 0x9e28], 0
je 0x469167
mov dword [ebp - 0x424], 0
mov dword [ebp - 0x420], 0
mov dword [ebp - 0x420], 0xf
mov dword [ebp - 0x424], 0
mov byte [ebp - 0x434], 0
mov byte [ebp - 4], 3
lea eax, [ebp - 0x434]
push eax
mov ecx, dword [edi + 0x9e28]
call fcn.0045d350
mov dword [esi], 0xc
mov ecx, dword [ebp - 0x424]
inc ecx
mov dword [esi + 4], ecx
mov eax, dword [ebp + 0x24]
add eax, 0xfffffff4
cmp ecx, eax
jbe 0x4689a2
mov dword [ebx], 0xc
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x434]
call fcn.0041d380
mov eax, 5
jmp 0x46916c
mov dword [esi + 8], 0xc
lea edi, [esi + 0xc]
cmp dword [ebp - 0x420], 0x10
mov eax, dword [ebp - 0x434]
jae 0x4689c1
lea eax, [ebp - 0x434]
push dword [ebp - 0x424]
push eax
push edi
call sub.MSVCR120.dll_memcpy
add esp, 0xc
mov eax, dword [ebp - 0x424]
mov byte [edi + eax], 0
mov eax, dword [esi + 4]
add eax, 0xc
mov dword [ebx], eax
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x434]
call fcn.0041d380
xor eax, eax
jmp 0x46916c
test esi, esi
je 0x46846b
mov ecx, dword [ebp + 0x24]
cmp ecx, 1
jb 0x46846b
mov eax, dword [ebp - 0xc3c]
test eax, eax
je 0x46846b
mov dword [eax], 1
push eax
push ecx
push esi
mov ecx, edi
call fcn.004854e0
jmp 0x46916c
test esi, esi
je 0x46846b
mov ecx, dword [ebp + 0x24]
cmp ecx, 0xc
jb 0x46846b
mov eax, dword [ebp - 0xc3c]
test eax, eax
je 0x46846b
mov dword [eax], 0xc
push eax
push ecx
push esi
mov ecx, edi
call fcn.0049eda0
jmp 0x46916c
test ebx, ebx
je case.default.0x4677cd
mov ecx, dword [ebp + 0x1c]
shr ecx, 1
cmp ecx, 2
jb case.default.0x4677cd
mov eax, 1
mov dword [ebp - 0xcf8], eax
cmp eax, ecx
jae case.default.0x4677cd
cmp word [ebx + eax*2 - 2], 0
jne 0x468abb
cmp word [ebx + eax*2], 0
jne 0x468abb
shr edx, 0x18
not dl
and dl, 1
movzx eax, dl
push eax
push ebx
push dword [ebp + 0xc]
mov ecx, edi
call fcn.0046bab0
jmp 0x46916c
inc eax
jmp 0x468a82
test ebx, ebx
je case.default.0x4677cd
cmp dword [ebp + 0x1c], 4
jb case.default.0x4677cd
push dword [ebx]
mov ecx, edi
call fcn.0046c890
movzx eax, al
neg eax
sbb eax, eax
and eax, 0xfffffff2
add eax, 0xe
jmp 0x46916c
test ebx, ebx
je case.default.0x4677cd
cmp dword [ebp + 0x1c], 8
jb case.default.0x4677cd
test esi, esi
je 0x46846b
cmp dword [ebp + 0x24], 8
jb 0x46846b
mov edi, dword [ebp - 0xc3c]
test edi, edi
je 0x46846b
mov dword [edi], 8
test edx, 0x1000000
je 0x468b35
cmp dword [ebx + 4], 0x11
jne case.default.0x4677cd
call fcn.004a13a0
mov dword [ebp - 0xc58], eax
test eax, eax
je 0x468b64
push edi
push dword [ebp + 0x24]
push esi
push dword [ebp + 0x1c]
push ebx
mov edx, dword [ebx + 4]
mov ecx, eax
call fcn.004a0640
add esp, 0x14
mov esi, eax
mov eax, dword [ebp - 0xc58]
jmp 0x468b69
mov esi, 0xc1d
mov ecx, eax
call fcn.004a13d0
test esi, esi
je case.0x4648b8.22
cmp esi, 0x1b61
jne 0x469167
mov eax, 5
jmp 0x46916c
test esi, esi
je 0x46846b
mov eax, dword [ebp + 0x24]
cmp eax, 0x2c
jb 0x46846b
mov ebx, dword [ebp - 0xc3c]
test ebx, ebx
je 0x46846b
mov dword [ebx], 0x2c
mov dword [ebp - 0xc68], eax
lea eax, [ebp - 0xc68]
push eax
push esi
lea ecx, [edi + 0x9590]
call fcn.004c6f20
cmp eax, 0x1b61
je 0x46846b
test eax, eax
jne 0x469167
mov eax, dword [ebp - 0xc68]
mov dword [ebx], eax
xor eax, eax
jmp 0x46916c
test esi, esi
je 0x46846b
mov ecx, dword [ebp + 0x24]
cmp ecx, 1
jb 0x46846b
mov eax, dword [ebp - 0xc3c]
test eax, eax
je 0x46846b
mov dword [eax], 1
push eax
push ecx
push esi
mov ecx, edi
call fcn.00485870
jmp 0x46916c
test ebx, ebx
je case.default.0x4677cd
mov eax, dword [ebp + 0x1c]
cmp eax, 0x10
jb case.default.0x4677cd
cmp dword [ebx], 0x10
jb case.default.0x4677cd
mov ecx, dword [ebp - 0xc3c]
push ecx
push dword [ebp + 0x24]
push esi
push eax
push ebx
push edx
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push ecx
mov ecx, edi
call fcn.00464020
jmp 0x46916c
test ebx, ebx
je case.default.0x4677cd
mov esi, dword [ebp + 0x1c]
cmp esi, 0xc
jb case.default.0x4677cd
cmp dword [ebx], 0xc
jne case.default.0x4677cd
lea eax, [esi + 0x84]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
test eax, eax
je 0x465cce
push eax
push esi
push ebx
push dword [ebp + 0x10]
push dword [ebp + 0xc]
mov ecx, edi
call fcn.004ccae0
jmp 0x46916c
push dword [ebp + 0x10]
push dword [ebp + 0xc]
mov ecx, edi
call fcn.004b0380
jmp 0x46916c
test ebx, ebx
je case.default.0x4677cd
cmp dword [ebp + 0x1c], 0xc
jb case.default.0x4677cd
test esi, esi
je 0x46846b
mov ecx, dword [ebp + 0x24]
cmp ecx, 8
jb 0x46846b
mov eax, dword [ebp - 0xc3c]
test eax, eax
je 0x46846b
mov dword [eax], 8
cmp dword [ebx], 0xc
jb case.default.0x4677cd
push eax
push ecx
push esi
push ecx
push ebx
sub esp, 0x10
mov ecx, edi
call fcn.004cbbc0
jmp 0x46916c
test ebx, ebx
je case.default.0x4677cd
mov edi, dword [ebp + 0x1c]
cmp edi, 8
jb case.default.0x4677cd
cmp dword [ebx], 8
jb case.default.0x4677cd
mov eax, dword [ebx + 4]
lea eax, [eax*4 + 8]
cmp eax, edi
ja case.default.0x4677cd
xor esi, esi
mov dword [ebp - 0xcd8], esi
cmp esi, dword [ebx + 4]
jae 0x468d70
push dword [ebx + esi*4 + 8]
mov edx, edi
mov ecx, ebx
call fcn.00460280
add esp, 4
test al, al
je case.default.0x4677cd
inc esi
jmp 0x468d4a
sub esp, 0x10
push ebx
sub esp, 0x10
mov ecx, dword [ebp - 0xc54]
call fcn.004cc750
jmp 0x46916c
test esi, esi
je 0x46846b
mov ecx, dword [ebp + 0x24]
cmp ecx, 0x24
jb 0x46846b
mov eax, dword [ebp - 0xc3c]
test eax, eax
je 0x46846b
mov dword [eax], 0x24
test byte [edi + 0x9e58], 8
je 0x464b5b
push eax
push ecx
push esi
call fcn.004cd130
jmp 0x46916c
test ebx, ebx
je case.default.0x4677cd
cmp dword [ebp + 0x1c], 4
jb case.default.0x4677cd
push dword [ebx]
mov ecx, edi
call fcn.0046d090
xor eax, eax
jmp 0x46916c
test ebx, ebx
je case.default.0x4677cd
cmp dword [ebp + 0x1c], 4
jb case.default.0x4677cd
push dword [ebx]
mov ecx, edi
call fcn.0046d210
movzx eax, al
neg eax
sbb eax, eax
and eax, 0xfffffff2
add eax, 0xe
jmp 0x46916c
mov ecx, edi
call fcn.0046d290
xor eax, eax
jmp 0x46916c
mov ecx, edi
call fcn.0046d360
xor eax, eax
jmp 0x46916c
test ebx, ebx
je case.default.0x4677cd
cmp dword [ebp + 0x1c], 8
jb case.default.0x4677cd
mov eax, dword [ebx + 4]
mov dword [edi + 0x98c0], eax
push 0
push 0x3e8
push 0x95d
push dword [edi + 0x1c98]
call dword [sym.imp.USER32.dll_SetTimer]
xor eax, eax
jmp 0x46916c
test ebx, ebx
je case.default.0x4677cd
cmp dword [ebp + 0x1c], 8
jb case.default.0x4677cd
mov eax, dword [ebx + 4]
mov dword [edi + 0x98bc], eax
push 0
push 0x3e8
push 0x95a
push dword [edi + 0x1c98]
call dword [sym.imp.USER32.dll_SetTimer]
xor eax, eax
jmp 0x46916c
test ebx, ebx
je case.default.0x4677cd
cmp dword [ebp + 0x1c], 0x20c
jb case.default.0x4677cd
cmp dword [ebx], 0x20c
jb case.default.0x4677cd
add ebx, 4
push 0x104
push ebx
call dword [sym.imp.MSVCR120.dll_wcsnlen]
add esp, 8
cmp eax, 0x104
je case.default.0x4677cd
push ebx
mov ecx, edi
call fcn.00498420
test al, al
je 0x469167
xor eax, eax
jmp 0x46916c
test ebx, ebx
je case.default.0x4677cd
cmp dword [ebp + 0x1c], 4
jb case.default.0x4677cd
test esi, esi
je 0x46846b
cmp dword [ebp + 0x24], 4
jb 0x46846b
mov eax, dword [ebp - 0xc3c]
test eax, eax
je 0x46846b
mov dword [eax], 4
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
xor ecx, ecx
cmp dword [ebx], eax
sete cl
mov dword [esi], ecx
xor eax, eax
jmp 0x46916c
test esi, esi
je 0x46846b
cmp dword [ebp + 0x24], 0x1bf0
jb 0x46846b
mov eax, dword [ebp - 0xc3c]
test eax, eax
je 0x46846b
mov dword [eax], 0x1bf0
push 1
push esi
mov ecx, edi
call fcn.0049a970
neg eax
sbb eax, eax
and eax, 0xffffffee
add eax, 0x12
jmp 0x46916c
test ebx, ebx
je case.default.0x4677cd
mov ecx, dword [ebp + 0x1c]
cmp ecx, 0x19c
jb case.default.0x4677cd
test esi, esi
je 0x46846b
cmp dword [ebp + 0x24], 4
jb 0x46846b
mov eax, dword [ebp - 0xc3c]
test eax, eax
je 0x46846b
mov dword [eax], 4
push esi
push ecx
push ebx
push 0x473680
push dword [ebp + 0x10]
push dword [ebp + 0xc]
mov ecx, edi
call fcn.00473470
jmp 0x46916c
test ebx, ebx
je case.default.0x4677cd
mov esi, dword [ebp + 0x1c]
cmp esi, 0x24
jb case.default.0x4677cd
cmp dword [ebx], 0x24
jne case.default.0x4677cd
mov eax, dword [ebx + 0xc]
test eax, eax
je case.default.0x4677cd
cmp eax, esi
jae case.default.0x4677cd
sub esi, eax
shr esi, 1
add eax, ebx
push esi
push eax
call dword [sym.imp.MSVCR120.dll_wcsnlen]
add esp, 8
cmp eax, esi
setne al
test al, al
je case.default.0x4677cd
push dword [ebx + 0x10]
mov esi, dword [ebp + 0x1c]
mov edx, esi
mov ecx, ebx
call fcn.004602b0
add esp, 4
test al, al
je case.default.0x4677cd
push dword [ebx + 0x14]
mov edx, esi
mov ecx, ebx
call fcn.004602b0
add esp, 4
test al, al
je case.default.0x4677cd
push dword [ebx + 0x18]
mov edx, esi
mov ecx, ebx
call fcn.004602b0
add esp, 4
test al, al
je case.default.0x4677cd
push dword [ebx + 0x1c]
mov edx, esi
mov ecx, ebx
call fcn.004602b0
add esp, 4
test al, al
je case.default.0x4677cd
push dword [ebx + 0x20]
mov edx, esi
mov ecx, ebx
call fcn.004602b0
add esp, 4
test al, al
je case.default.0x4677cd
push ecx
push esi
push ebx
push dword [ebp + 0x10]
push dword [ebp + 0xc]
mov eax, dword [ebp - 0xc44]
push eax
mov ecx, edi
call fcn.004ad180
xor eax, eax
jmp 0x46916c
mov eax, edx
and eax, 0xffffff
cmp eax, 0x40000
jb 0x4690db
cmp eax, 0x4ffff
jbe 0x4690f5
cmp eax, 0x2000
jb 0x4690e9
cmp eax, 0x2fff
jbe 0x4690f5
add eax, 0xfffe0000
cmp eax, 0xffff
ja 0x46910c
push 0
mov ecx, dword [ebp - 0xc3c]
push ecx
push dword [ebp + 0x24]
push esi
push dword [ebp + 0x1c]
push ebx
push edx
jmp 0x468301
test edx, 0x1000000
je 0x469153
push edx
push str.Message_not_handled_from_untrusted_source:_ID_08X
push 0xffffffffffffffff
push 0x80
lea eax, [ebp - 0x214]
push eax
call dword [sym.imp.MSVCR120.dll__snwprintf_s]
add esp, 0x14
push 0
push 0
push 0
push ecx
push 5
lea eax, [ebp - 0x214]
push eax
push 0
push 0
push 0
push 0x1000600
mov ecx, edi
call fcn.004ada60
mov eax, 7
jmp 0x46916c
mov eax, 0xe
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.00553510
mov esp, ebp
pop ebp
ret 0x24