Function at 0x468030
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x542dcf
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x98
push ebx
push ebp
push esi
mov esi, dword [esp + 0xc0]
push edi
mov edi, ecx
push esi
mov dword [esp + 0x6c], edi
call fcn.004c9eb0
add esp, 4
test eax, eax
jne 0x4691b5
mov ebp, dword [esi + 1]
inc esi
push ebp
call fcn.004d25c0
add esp, 4
cmp eax, 0x5000000
jne 0x4691a5
cmp ebp, 0x500fffe
je 0x4691a5
lea eax, [edi + 0xc0]
add esi, 4
push eax
lea ecx, [esp + 0x20]
mov dword [esp + 0xc8], esi
call fcn.0040c140
mov dword [esp + 0x1c], 0x54d958
xor esi, esi
push ebp
mov dword [esp + 0xb4], esi
mov dword [esp + 0x94], esi
call fcn.004d25a0
mov ebx, eax
mov eax, dword [esp + 0xc4]
add esp, 4
cmp ebx, esi
je 0x468162
cmp ebx, 0x10000000
je 0x468103
cmp ebx, 0x20000000
jne 0x4682f2
cmp eax, esi
je 0x4682f2
lea esi, [eax + 0x14]
mov edi, 1
jmp 0x468171
cmp eax, esi
je 0x4682f2
mov edx, dword [eax + 8]
lea ecx, [esp + 0x94]
push esi
push ecx
push edx
lea ecx, [edi + 0x2cc]
call fcn.004d2e80
test eax, eax
je 0x4682f2
mov ecx, dword [esp + 0x94]
cmp dword [ecx + 0x44], esi
je 0x468158
lea eax, [esp + 0x1c]
push esi
push eax
call fcn.004ce960
lea esi, [esp + 0x1c]
mov dword [esp + 0x90], 1
mov edi, 3
jmp 0x468171
lea esi, [ecx + 0xc]
mov edi, 3
jmp 0x468171
mov ecx, dword [esp + 0x68]
mov edi, 4
lea esi, [ecx + 0x290]
lea edx, [esp + 0x14]
mov ecx, esi
push edx
push 0
push ebp
call fcn.004d2760
test eax, eax
mov dword [esp + 0x3c], eax
jne 0x4681cf
cmp ebx, 0x20000000
jne 0x4681b6
mov eax, dword [esp + 0xc0]
lea ecx, [esp + 0x14]
push ecx
push 0
lea esi, [eax + 0x34]
push ebp
mov ecx, esi
call fcn.004d2760
test eax, eax
mov dword [esp + 0x3c], eax
mov edi, 2
jne 0x4681cf
mov edx, dword [esp + 0x68]
push 0x58c598
lea ecx, [edx + 0x964]
call fcn.00519b43
jmp 0x4682f2
lea ecx, [esp + 0x40]
call fcn.004733a0
mov eax, dword [esp + 0x90]
mov ebx, dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
mov byte [esp + 0xb0], 1
je 0x46830b
mov ecx, dword [esp + 0xbc]
mov ebp, dword [esp + 0x68]
push 0
lea eax, [esp + 0x14]
mov edx, dword [ebp + 0x4ac]
push 4
add ecx, 8
push eax
push ecx
push edx
call ebx
test eax, eax
je 0x4682d9
mov eax, dword [esp + 0x10]
test eax, eax
je 0x4682d9
mov edx, dword [0x599fdc]
push 0
lea ecx, [esp + 0x14]
push 4
push ecx
push eax
push edx
call ebx
test eax, eax
je 0x4682d9
mov eax, dword [esp + 0x10]
test eax, eax
je 0x4682d9
mov ecx, eax
mov eax, dword [esp + 0x14]
add ecx, 4
xor ebx, ebx
test eax, eax
mov dword [esp + 0x10], ecx
jle 0x4682ad
push 0
push ebx
mov ecx, esi
call fcn.004d2670
mov edi, eax
mov eax, dword [esi]
push edi
mov ecx, esi
call dword [eax + 0x14]
push eax
call fcn.004741f0
add esp, 4
test eax, eax
jne 0x4682a4
mov eax, dword [edi]
test eax, eax
jne 0x468290
mov eax, 0x80000301
add edi, 6
lea ecx, [ebp + 0xc0]
push edi
push eax
call fcn.00410970
add dword [esp + 0x10], eax
mov eax, dword [esp + 0x14]
inc ebx
cmp ebx, eax
jl 0x468264
mov eax, dword [esp + 0x3c]
lea ecx, [esp + 0x18]
lea edx, [esp + 0x40]
push ecx
mov ecx, dword [eax]
push edx
mov edx, dword [esp + 0x18]
push ecx
add eax, 6
push edx
push eax
call fcn.004c9c50
add esp, 4
mov ecx, ebp
push eax
call fcn.00467f20
jmp 0x468340
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], 0x54d7d0
call fcn.004735a0
lea ecx, [esp + 0x1c]
mov dword [esp + 0xb0], 0xffffffff
call fcn.00401e70
jmp 0x4691b5
mov edx, dword [esp + 0x3c]
lea eax, [esp + 0x18]
lea ecx, [esp + 0x40]
push eax
mov eax, dword [esp + 0xc0]
push ecx
mov ecx, dword [esp + 0xc8]
push edx
mov edx, dword [esp + 0xc4]
push ebp
push eax
push ecx
mov ecx, dword [esp + 0x80]
push edx
push edi
call fcn.00467d60
lea ecx, [esp + 0x54]
mov dword [esp + 0x10], eax
call fcn.004733a0
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
call fcn.004733a0
xor eax, eax
mov dword [esp + 0x6c], eax
mov dword [esp + 0x78], eax
mov ecx, dword [esp + 0x10]
mov byte [esp + 0xb0], 3
cmp ecx, eax
mov eax, dword [esp + 0x50]
je 0x4688f4
mov edx, dword [esp + 0xc4]
mov bl, byte [edx]
cmp bl, 0x37
je 0x4688f4
mov ebp, dword [esp + 0x68]
xor edi, edi
push edi
lea eax, [esp + 0x14]
push 4
push eax
mov esi, ecx
push ecx
mov ecx, dword [ebp + 0x4ac]
push ecx
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
je 0x469127
cmp dword [esp + 0x10], edi
je 0x469127
mov eax, dword [esp + 0x50]
mov edx, dword [esp + 0x48]
neg eax
sbb eax, eax
and eax, edx
push eax
mov dword [esp + 0x40], eax
call fcn.004c9c50
add esp, 4
cmp bl, 0x39
jne 0x46865f
cmp eax, edi
jne 0x4689b2
mov edx, dword [esp + 0x18]
push edx
call fcn.004ded00
mov esi, eax
mov eax, dword [esp + 0x1c]
push eax
call fcn.004ddec0
add esp, 8
cmp esi, 2
mov edi, eax
jne 0x46841d
cmp edi, 1
je 0x46841d
cmp edi, 3
je 0x46841d
mov esi, 1
mov ecx, dword [esp + 0xc4]
cmp esi, 2
mov ebx, dword [ecx + 1]
jne 0x468582
push 1
lea edx, [esp + 0x1c]
push 1
push edx
lea ecx, [ebp + 0xc0]
call fcn.00448a50
cmp edi, 1
push 0
jne 0x468477
mov ecx, dword [esp + 0x1c]
lea eax, [esp + 0x98]
push eax
push ecx
lea ecx, [ebp + 0x274]
call fcn.004d2e80
test eax, eax
je 0x468a1e
mov edx, dword [esp + 0x94]
lea edi, [edx + 0xc]
jmp 0x4684ca
mov ecx, dword [esp + 0x1c]
lea eax, [esp + 0x9c]
push eax
push ecx
lea ecx, [ebp + 0x2cc]
call fcn.004d2e80
test eax, eax
je 0x468a1e
lea ecx, [esp + 0x24]
mov dword [esp + 0x20], 0
call fcn.004735a0
mov ecx, dword [esp + 0x98]
lea edx, [esp + 0x1c]
push 0
push edx
call fcn.004ce960
mov eax, dword [esp + 0x10]
lea edi, [esp + 0x1c]
add eax, 4
mov dword [esp + 0x10], eax
test edi, edi
je 0x468a1e
lea eax, [esp + 0x14]
mov ecx, edi
push eax
push 0
push ebx
call fcn.004d2760
mov ecx, dword [esp + 0x14]
xor ebx, ebx
test ecx, ecx
mov dword [esp + 0x3c], eax
jle 0x46853c
push 0
push ebx
mov ecx, edi
call fcn.004d2670
mov edx, dword [edi]
mov esi, eax
push esi
mov ecx, edi
call dword [edx + 0x14]
push eax
call fcn.004741f0
add esp, 4
test eax, eax
jne 0x46852f
mov eax, dword [esi]
test eax, eax
jne 0x46851b
mov eax, 0x80000301
add esi, 6
lea ecx, [ebp + 0xc0]
push esi
push eax
call fcn.00410970
add dword [esp + 0x10], eax
mov eax, dword [esp + 0x14]
inc ebx
cmp ebx, eax
jl 0x4684ef
mov eax, dword [esp + 0x3c]
lea ecx, [esp + 0x18]
lea edx, [esp + 0x40]
push ecx
mov ecx, dword [eax]
push edx
mov edx, dword [esp + 0x18]
push ecx
add eax, 6
push edx
push eax
call fcn.004c9c50
add esp, 4
mov ecx, ebp
push eax
call fcn.00467f20
mov ecx, eax
mov eax, dword [esp + 0xc4]
add eax, 9
mov dword [esp + 0x10], ecx
mov dword [esp + 0xc4], eax
mov eax, dword [esp + 0x50]
jmp 0x4688ec
cmp esi, 3
jne 0x468b5a
mov eax, dword [esp + 0x18]
xor edi, edi
push edi
push eax
lea ecx, [ebp + 0xc0]
call fcn.00450cd0
cmp eax, edi
je 0x468afe
cmp dword [eax + 0x30], edi
jle 0x468afe
test dword [eax + 0x14], 0x800000
jne 0x468afe
mov esi, dword [eax + 0x34]
lea edx, [ebx - 1]
mov dword [esp + 0x14], edx
mov ecx, dword [eax + 0x30]
cmp edx, ecx
jge 0x468a92
mov ecx, dword [esp + 0x10]
cmp edx, edi
jl 0x468645
mov eax, dword [esi]
mov ebx, eax
shr ebx, 0x10
jne 0x4685f3
mov ebx, dword [esp + 0x18]
and eax, 0xffff
shr ebx, 0x10
shl ebx, 0x10
or eax, ebx
cmp edi, edx
jne 0x46861f
lea edx, [esp + 0x18]
push edx
lea edx, [esp + 0x44]
push edx
push eax
mov eax, dword [esi + 4]
push ecx
push eax
call fcn.004c9c50
add esp, 4
mov ecx, ebp
push eax
call fcn.00467f20
mov ecx, eax
mov dword [esp + 0x10], ecx
jmp 0x46863c
mov ecx, dword [esi + 4]
push ecx
push eax
lea ecx, [ebp + 0xc0]
call fcn.00410970
mov ecx, dword [esp + 0x10]
add ecx, eax
add esi, 0x1c
mov dword [esp + 0x10], ecx
mov edx, dword [esp + 0x14]
inc edi
cmp edi, edx
jle 0x4685d9
mov eax, dword [esp + 0xc4]
add eax, 9
mov dword [esp + 0xc4], eax
mov eax, dword [esp + 0x50]
jmp 0x4688ec
cmp bl, 0x3a
jne 0x4690ce
cmp eax, edi
jne 0x4686a9
cmp dword [esp + 0x18], 0x80000005
jne 0x468bbe
lea edx, [esp + 0x40]
mov ecx, ebp
push edx
push esi
call fcn.00467f80
test eax, eax
je 0x468c2a
mov eax, dword [esp + 0x50]
mov ecx, dword [esp + 0x48]
neg eax
sbb eax, eax
mov dword [esp + 0x18], 0x80000101
and eax, ecx
mov dword [esp + 0x3c], eax
mov ecx, dword [esp + 0xc4]
xor eax, eax
mov dword [esp + 0x64], eax
cmp byte [ecx], 0x3a
jne 0x4687e3
mov edi, dword [esp + 0xc0]
mov esi, dword [esp + 0xb8]
mov ebx, ecx
mov al, byte [ebx + 1]
inc ebx
cmp al, 0x21
je 0x46873c
cmp al, 0x38
je 0x4686ff
cmp al, 0x3b
jne 0x468c86
mov edx, dword [ebx + 1]
lea ecx, [esp + 0x54]
push edx
call fcn.00473660
add ebx, 5
mov dword [esp + 0xc4], ebx
jmp 0x4687d0
xor eax, eax
lea ecx, [esp + 0x7c]
mov dword [esp + 0x6c], eax
mov dword [esp + 0x78], eax
call fcn.004735a0
mov ecx, dword [esp + 0xbc]
lea eax, [esp + 0x6c]
push eax
push ebx
push edi
push ecx
push esi
mov ecx, ebp
call fcn.004691e0
test eax, eax
je 0x468cea
push ebx
call fcn.004c9c70
add esp, 4
jmp 0x468776
xor eax, eax
lea ecx, [esp + 0x7c]
mov dword [esp + 0x6c], eax
mov dword [esp + 0x78], eax
call fcn.004735a0
mov eax, dword [esp + 0xbc]
lea edx, [esp + 0x6c]
inc ebx
push edx
push ebx
push edi
push eax
push esi
mov ecx, ebp
call fcn.00467850
test eax, eax
je 0x468d4e
mov ecx, ebx
call fcn.004ca570
add ebx, eax
mov eax, dword [esp + 0x6c]
test eax, eax
mov dword [esp + 0xc4], ebx
jne 0x468db2
mov ecx, dword [esp + 0x78]
push ecx
call fcn.004d2610
add esp, 4
test eax, eax
je 0x468db2
mov ecx, dword [esp + 0x78]
lea edx, [esp + 0xa0]
lea eax, [esp + 0x70]
push edx
push eax
push 0x80000301
push ecx
call fcn.004e0210
mov edx, dword [esp + 0xb0]
add esp, 0x10
lea ecx, [esp + 0x54]
push edx
call fcn.00473660
cmp byte [ebx], 0x3a
je 0x4686cf
mov eax, dword [esp + 0x64]
xor ebx, ebx
cmp eax, ebx
jne 0x4687e9
xor ebx, ebx
xor edx, edx
jmp 0x4687ed
mov edx, dword [esp + 0x5c]
shr eax, 2
mov edi, eax
je 0x46905e
cmp edi, 0x7f
jge 0x46905e
cmp edi, 1
je 0x468872
mov ecx, dword [esp + 0x3c]
xor eax, eax
mov al, byte [ecx]
cmp edi, eax
jne 0x468e26
cmp edi, 1
mov dword [esp + 0x14], ebx
mov dword [esp + 0x90], 1
jl 0x4688bb
lea ebx, [edi - 1]
lea esi, [ecx + 5]
mov eax, dword [edx]
add edx, 4
dec eax
mov dword [esp + 0x9c], edx
test eax, eax
jle 0x46889a
cmp eax, dword [esi - 4]
mov ecx, esi
jge 0x468f76
test ebx, ebx
jle 0x46886c
mov edx, ebx
mov ebp, dword [ecx]
add ecx, 4
imul eax, ebp
dec edx
jne 0x468856
mov edx, dword [esp + 0x9c]
mov ebp, dword [esp + 0x68]
add dword [esp + 0x14], eax
jmp 0x4688a0
mov edx, dword [edx]
dec edx
mov dword [esp + 0x14], edx
js 0x468e96
mov eax, dword [esp + 0x3c]
push eax
call fcn.004c9c10
mov ecx, dword [esp + 0x18]
add esp, 4
cmp ecx, eax
jge 0x468f06
jmp 0x4688bb
jl 0x468fea
mov eax, dword [esp + 0x90]
add esi, 4
inc eax
dec ebx
cmp eax, edi
mov dword [esp + 0x90], eax
jle 0x468834
mov edx, dword [esp + 0x18]
lea ecx, [ebp + 0xc0]
push edx
call fcn.004109a0
imul eax, dword [esp + 0x14]
mov edx, dword [esp + 0x3c]
xor ecx, ecx
mov cl, byte [edx]
mov edx, dword [esp + 0x10]
add eax, edx
lea ecx, [eax + ecx*4 + 4]
xor eax, eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x50], eax
test ecx, ecx
jne 0x468380
mov edx, dword [esp + 0xc8]
test edx, edx
je 0x468905
mov esi, dword [esp + 0x18]
mov dword [edx], esi
mov esi, dword [esp + 0xcc]
test esi, esi
je 0x468929
mov edi, dword [esp + 0x48]
neg eax
sbb eax, eax
and eax, edi
push eax
call fcn.004c9c50
mov ecx, dword [esp + 0x14]
add esp, 4
mov dword [esi], eax
mov edi, ecx
mov esi, 0x54d7d0
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.004735a0
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.004735a0
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.004735a0
mov dword [esp + 0x1c], 0x54d7d4
lea ecx, [esp + 0x24]
mov dword [esp + 0xb0], 0x19
mov dword [esp + 0x20], 0
call fcn.004735a0
lea ecx, [esp + 0x24]
mov dword [esp + 0xb0], 0xffffffff
mov dword [esp + 0x24], esi
call fcn.004735a0
mov eax, edi
jmp 0x4691b7
push 0x58c588
lea ecx, [ebp + 0x964]
call fcn.00519b43
mov esi, 0x54d7d0
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.004735a0
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.004735a0
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.004735a0
mov dword [esp + 0x1c], 0x54d7d4
mov dword [esp + 0xb0], 5
jmp 0x46917e
push 0x58c568
lea ecx, [ebp + 0x964]
call fcn.00519b43
mov esi, 0x54d7d0
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.004735a0
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.004735a0
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.004735a0
mov dword [esp + 0x1c], 0x54d7d4
mov dword [esp + 0xb0], 7
mov dword [esp + 0x20], 0
jmp 0x469182
push 0x58c588
lea ecx, [ebp + 0x964]
call fcn.00519b43
mov esi, 0x54d7d0
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.004735a0
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.004735a0
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.004735a0
mov dword [esp + 0x1c], 0x54d7d4
mov dword [esp + 0xb0], 9
jmp 0x46917e
mov esi, 0x54d7d0
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.004735a0
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.004735a0
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.004735a0
mov dword [esp + 0x1c], 0x54d7d4
mov dword [esp + 0xb0], 0xa
jmp 0x46917e
mov esi, 0x54d7d0
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.004735a0
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.004735a0
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.004735a0
mov dword [esp + 0x1c], 0x54d7d4
mov dword [esp + 0xb0], 0xb
mov dword [esp + 0x20], 0
jmp 0x469182
push 0x58c554
lea ecx, [ebp + 0x964]
call fcn.00519b43
mov esi, 0x54d7d0
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.004735a0
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.004735a0
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.004735a0
mov dword [esp + 0x1c], 0x54d7d4
mov dword [esp + 0xb0], 0xc
jmp 0x46917e
mov esi, 0x54d7d0
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.004735a0
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.004735a0
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.004735a0
mov dword [esp + 0x1c], 0x54d7d4
mov dword [esp + 0xb0], 0xd
jmp 0x46917e
mov esi, 0x54d7d0
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.004735a0
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.004735a0
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.004735a0
mov dword [esp + 0x1c], 0x54d7d4
mov dword [esp + 0xb0], 0x10
mov dword [esp + 0x20], 0
jmp 0x469182
mov esi, 0x54d7d0
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.004735a0
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.004735a0
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.004735a0
mov dword [esp + 0x1c], 0x54d7d4
mov dword [esp + 0xb0], 0xe
mov dword [esp + 0x20], 0
jmp 0x469182
mov esi, 0x54d7d0
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.004735a0
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.004735a0
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.004735a0
mov dword [esp + 0x1c], 0x54d7d4
mov dword [esp + 0xb0], 0xf
mov dword [esp + 0x20], 0
jmp 0x469182
push 0x58c530
lea ecx, [ebp + 0x964]
call fcn.00519b43
mov esi, 0x54d7d0
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.004735a0
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.004735a0
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.004735a0
mov dword [esp + 0x1c], 0x54d7d4
mov dword [esp + 0xb0], 0x11
mov dword [esp + 0x20], 0
jmp 0x469182
push 0x58c510
lea ecx, [ebp + 0x964]
call fcn.00519b43
mov esi, 0x54d7d0
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.004735a0
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.004735a0
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.004735a0
mov dword [esp + 0x1c], 0x54d7d4
mov dword [esp + 0xb0], 0x13
mov dword [esp + 0x20], ebx
jmp 0x469182
push 0x58c4f0
lea ecx, [ebp + 0x964]
call fcn.00519b43
mov esi, 0x54d7d0
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.004735a0
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.004735a0
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.004735a0
mov dword [esp + 0x1c], 0x54d7d4
mov dword [esp + 0xb0], 0x14
mov dword [esp + 0x20], ebx
jmp 0x469182
push 0x58c4d8
lea ecx, [ebp + 0x964]
call fcn.00519b43
mov esi, 0x54d7d0
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.004735a0
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.004735a0
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.004735a0
mov dword [esp + 0x1c], 0x54d7d4
mov dword [esp + 0xb0], 0x15
mov dword [esp + 0x20], ebx
jmp 0x469182
push 0x58c4d8
lea ecx, [ebp + 0x964]
call fcn.00519b43
mov esi, 0x54d7d0
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.004735a0
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.004735a0
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.004735a0
mov dword [esp + 0x1c], 0x54d7d4
mov dword [esp + 0xb0], 0x16
mov dword [esp + 0x20], 0
jmp 0x469182
push 0x58c4f0
lea ecx, [ebp + 0x964]
call fcn.00519b43
mov esi, 0x54d7d0
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.004735a0
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.004735a0
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.004735a0
mov dword [esp + 0x1c], 0x54d7d4
mov dword [esp + 0xb0], 0x17
mov dword [esp + 0x20], 0
jmp 0x469182
push 0x58c4c8
lea ecx, [ebp + 0x964]
call fcn.00519b43
mov esi, 0x54d7d0
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.004735a0
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.004735a0
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.004735a0
mov dword [esp + 0x1c], 0x54d7d4
mov dword [esp + 0xb0], 0x12
mov dword [esp + 0x20], ebx
jmp 0x469182
mov esi, 0x54d7d0
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.004735a0
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.004735a0
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.004735a0
mov dword [esp + 0x1c], 0x54d7d4
mov dword [esp + 0xb0], 0x18
jmp 0x46917e
mov esi, 0x54d7d0
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.004735a0
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.004735a0
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.004735a0
mov dword [esp + 0x1c], 0x54d7d4
mov dword [esp + 0xb0], 4
mov dword [esp + 0x20], edi
lea ecx, [esp + 0x24]
call fcn.004735a0
lea ecx, [esp + 0x24]
mov dword [esp + 0xb0], 0xffffffff
mov dword [esp + 0x24], esi
call fcn.004735a0
jmp 0x4691b5
push 0x58c4b4
lea ecx, [edi + 0x964]
call fcn.00519b43
xor eax, eax
mov ecx, dword [esp + 0xa8]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0xa4
ret 0x18