Function at 0x469e60
Capabilities:
Set registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x616bc4
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x14
push ebx
push esi
push edi
push 0x12
push 0x1af
push 0x1e1
push 0x54
mov esi, ecx
push 0x9f
mov dword [ebp - 0x20], esi
call fcn.005ec2f0
xor ebx, ebx
mov byte [esi + 0x48], bl
mov dword [esi], 0x628cc8
mov dword [0x6796a8], esi
mov eax, dword [esi + 0x34]
add esi, 0x30
cmp eax, ebx
mov dword [ebp - 4], ebx
je 0x468ef6
mov ecx, dword [esi + 0xc]
sub ecx, eax
sar ecx, 2
cmp ecx, 0x2e
jae 0x468f6a
push 0xb8
call fcn.00604401
mov edi, dword [esi + 4]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], eax
mov eax, dword [esi + 8]
add esp, 4
cmp edi, eax
mov dword [ebp - 0x14], eax
je 0x468f33
mov ecx, dword [ebp - 0x10]
mov edx, edi
call fcn.00404ba0
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x14]
add edx, 4
add edi, 4
cmp edi, eax
mov dword [ebp - 0x10], edx
jne 0x468f16
mov edx, dword [esi + 8]
mov eax, dword [esi + 4]
push edx
push eax
mov ecx, esi
call fcn.00404190
mov eax, dword [esi + 4]
push eax
call fcn.005f8040
mov edi, dword [ebp - 0x18]
lea ecx, [edi + 0xb8]
mov dword [esi + 0xc], ecx
add esp, 4
mov ecx, esi
call fcn.00509c00
lea edx, [edi + eax*4]
mov dword [esi + 8], edx
mov dword [esi + 4], edi
push 0x30
call fcn.00604401
add esp, 4
mov dword [ebp - 0x1c], eax
cmp eax, ebx
mov byte [ebp - 4], 1
je 0x468fa5
push 0x800
push 0x65604c
push 0xc8
push 0x1af
push 0x1e1
push ebx
push ebx
mov ecx, eax
call fcn.0044e690
mov edi, eax
jmp 0x468fa7
xor edi, edi
mov eax, dword [0x67d890]
mov ecx, dword [eax + 0x132bc]
mov edx, dword [eax + ecx*4 + 0x54a8]
push edx
mov ecx, edi
mov byte [ebp - 4], bl
call fcn.0044e8a0
mov eax, dword [esi + 8]
lea ecx, [ebp - 0x18]
push ecx
push 1
push eax
mov ecx, esi
mov dword [ebp - 0x18], edi
call fcn.004f9e20
push 0x64
call fcn.00604401
add esp, 4
mov dword [ebp - 0x1c], eax
cmp eax, ebx
mov byte [ebp - 4], 2
je 0x469015
push 2
push ebx
push ebx
push ebx
push 1
push 0x65603c
push 0xc9
push 0x30
push 0x64
push 0x167
push 0xf6
mov ecx, eax
call fcn.00454210
jmp 0x469017
xor eax, eax
lea edx, [ebp - 0x18]
push edx
mov dword [ebp - 0x18], eax
mov eax, dword [esi + 8]
push 1
push eax
mov ecx, esi
mov byte [ebp - 4], bl
call fcn.004f9e20
push 0x64
call fcn.00604401
add esp, 4
mov dword [ebp - 0x1c], eax
cmp eax, ebx
mov byte [ebp - 4], 3
je 0x46906e
push 2
push 0x1c
push ebx
push ebx
push 1
push str.SgCsWa62.pcx
push 0x7802
push 0x30
push 0x64
push 0x167
push 0x165
mov ecx, eax
call fcn.00454210
mov edi, eax
jmp 0x469070
xor edi, edi
mov eax, dword [edi + 0x4c]
lea edx, [ebp - 0x18]
push edx
lea ecx, [edi + 0x44]
push 1
push eax
mov byte [ebp - 4], bl
mov dword [ebp - 0x18], 1
call fcn.004f9e20
mov eax, dword [esi + 8]
lea ecx, [ebp - 0x18]
push ecx
push 1
push eax
mov ecx, esi
mov dword [ebp - 0x18], edi
call fcn.004f9e20
mov dword [ebp - 0x10], ebx
mov edi, 0x1d
push 0x44
call fcn.00604401
add esp, 4
mov dword [ebp - 0x1c], eax
cmp eax, ebx
mov byte [ebp - 4], 4
je 0x4690e5
mov edx, dword [ebp - 0x10]
push 0x10
push ebx
push ebx
push ebx
push ebx
push 0x656024
add edx, 0xca
push edx
push 0x24
push 0x12
push 0x12f
push edi
mov ecx, eax
call fcn.004de6f0
jmp 0x4690e7
xor eax, eax
lea ecx, [ebp - 0x18]
push ecx
mov dword [ebp - 0x18], eax
mov eax, dword [esi + 8]
push 1
push eax
mov ecx, esi
mov byte [ebp - 4], bl
call fcn.004f9e20
mov edx, dword [ebp - 0x10]
inc edx
add edi, 0x13
cmp edi, 0xdb
mov dword [ebp - 0x10], edx
jl 0x4690a8
mov dword [ebp - 0x10], ebx
mov edi, 0x1d
push 0x44
call fcn.00604401
add esp, 4
mov dword [ebp - 0x1c], eax
cmp eax, ebx
mov byte [ebp - 4], 5
je 0x469155
mov edx, dword [ebp - 0x10]
push 0x10
push ebx
push ebx
push ebx
push ebx
push 0x656024
add edx, 0xd4
push edx
push 0x24
push 0x12
push 0x171
push edi
mov ecx, eax
call fcn.004de6f0
jmp 0x469157
xor eax, eax
lea ecx, [ebp - 0x18]
push ecx
mov dword [ebp - 0x18], eax
mov eax, dword [esi + 8]
push 1
push eax
mov ecx, esi
mov byte [ebp - 4], bl
call fcn.004f9e20
mov edx, dword [ebp - 0x10]
inc edx
add edi, 0x13
cmp edi, 0xdb
mov dword [ebp - 0x10], edx
jl 0x469118
push 0x64
call fcn.00604401
add esp, 4
mov dword [ebp - 0x1c], eax
cmp eax, ebx
mov byte [ebp - 4], 6
je 0x4691ba
push 2
push ebx
push ebx
push 1
push ebx
push 0x656018
push 0xe6
push 0x20
push 0x3e
push 0xe1
push 0x1c
mov ecx, eax
call fcn.00454210
jmp 0x4691bc
xor eax, eax
lea edx, [ebp - 0x18]
push edx
mov dword [ebp - 0x18], eax
mov eax, dword [esi + 8]
push 1
push eax
mov ecx, esi
mov byte [ebp - 4], bl
call fcn.004f9e20
push 0x64
call fcn.00604401
add esp, 4
mov dword [ebp - 0x1c], eax
cmp eax, ebx
mov byte [ebp - 4], 7
je 0x46920d
push 2
push ebx
push ebx
push 1
push ebx
push 0x65600c
push 0xe7
push 0x20
push 0x3e
push 0xe1
push 0x5c
mov ecx, eax
call fcn.00454210
jmp 0x46920f
xor eax, eax
lea ecx, [ebp - 0x18]
push ecx
mov dword [ebp - 0x18], eax
mov eax, dword [esi + 8]
push 1
push eax
mov ecx, esi
mov byte [ebp - 4], bl
call fcn.004f9e20
push 0x64
call fcn.00604401
add esp, 4
mov dword [ebp - 0x1c], eax
cmp eax, ebx
mov byte [ebp - 4], 8
je 0x469263
push 2
push ebx
push ebx
push 1
push ebx
push 0x656000
push 0xe8
push 0x20
push 0x3e
push 0xe1
push 0x9c
mov ecx, eax
call fcn.00454210
jmp 0x469265
xor eax, eax
lea edx, [ebp - 0x18]
push edx
mov dword [ebp - 0x18], eax
mov eax, dword [esi + 8]
push 1
push eax
mov ecx, esi
mov byte [ebp - 4], bl
call fcn.004f9e20
push 0x44
call fcn.00604401
add esp, 4
mov dword [ebp - 0x1c], eax
cmp eax, ebx
mov byte [ebp - 4], 9
je 0x4692b5
push 0x10
push ebx
push ebx
push ebx
push ebx
push 0x655ff0
push 0xe1
push 0x18
push 0x20
push 0x54
push 0xf6
mov ecx, eax
call fcn.004de6f0
jmp 0x4692b7
xor eax, eax
lea ecx, [ebp - 0x18]
push ecx
mov dword [ebp - 0x18], eax
mov eax, dword [esi + 8]
push 1
push eax
mov ecx, esi
mov byte [ebp - 4], bl
call fcn.004f9e20
push 0x44
call fcn.00604401
add esp, 4
mov dword [ebp - 0x1c], eax
cmp eax, ebx
mov byte [ebp - 4], 0xa
je 0x469307
push 0x10
push ebx
push ebx
push ebx
push ebx
push 0x655ff0
push 0xe2
push 0x18
push 0x20
push 0x72
push 0xf6
mov ecx, eax
call fcn.004de6f0
jmp 0x469309
xor eax, eax
lea edx, [ebp - 0x18]
push edx
mov dword [ebp - 0x18], eax
mov eax, dword [esi + 8]
push 1
push eax
mov ecx, esi
mov byte [ebp - 4], bl
call fcn.004f9e20
push 0x44
call fcn.00604401
add esp, 4
mov dword [ebp - 0x1c], eax
cmp eax, ebx
mov byte [ebp - 4], 0xb
je 0x46935c
push 0x10
push ebx
push ebx
push ebx
push ebx
push 0x655ff0
push 0xe3
push 0x18
push 0x20
push 0x90
push 0xf6
mov ecx, eax
call fcn.004de6f0
jmp 0x46935e
xor eax, eax
lea ecx, [ebp - 0x18]
push ecx
mov dword [ebp - 0x18], eax
mov eax, dword [esi + 8]
push 1
push eax
mov ecx, esi
mov byte [ebp - 4], bl
call fcn.004f9e20
push 0x44
call fcn.00604401
add esp, 4
mov dword [ebp - 0x1c], eax
cmp eax, ebx
mov byte [ebp - 4], 0xc
je 0x4693b1
push 0x10
push ebx
push ebx
push ebx
push ebx
push 0x655ff0
push 0xe4
push 0x18
push 0x20
push 0xae
push 0xf6
mov ecx, eax
call fcn.004de6f0
jmp 0x4693b3
xor eax, eax
lea edx, [ebp - 0x18]
push edx
mov dword [ebp - 0x18], eax
mov eax, dword [esi + 8]
push 1
push eax
mov ecx, esi
mov byte [ebp - 4], bl
call fcn.004f9e20
push 0x44
call fcn.00604401
add esp, 4
mov dword [ebp - 0x1c], eax
cmp eax, ebx
mov byte [ebp - 4], 0xd
je 0x469406
push 0x10
push ebx
push ebx
push ebx
push ebx
push 0x655ff0
push 0xe5
push 0x18
push 0x20
push 0xcc
push 0xf6
mov ecx, eax
call fcn.004de6f0
jmp 0x469408
xor eax, eax
lea ecx, [ebp - 0x18]
push ecx
mov dword [ebp - 0x18], eax
mov eax, dword [esi + 8]
push 1
push eax
mov ecx, esi
mov byte [ebp - 4], bl
call fcn.004f9e20
push 0x44
call fcn.00604401
add esp, 4
mov dword [ebp - 0x1c], eax
cmp eax, ebx
mov byte [ebp - 4], 0xe
je 0x46945b
push 0x10
push ebx
push ebx
push ebx
push ebx
push 0x655ff0
push 0xe9
push 0x18
push 0x20
push 0x11b
push 0xf6
mov ecx, eax
call fcn.004de6f0
jmp 0x46945d
xor eax, eax
lea edx, [ebp - 0x18]
push edx
mov dword [ebp - 0x18], eax
mov eax, dword [esi + 8]
push 1
push eax
mov ecx, esi
mov byte [ebp - 4], bl
call fcn.004f9e20
push 0x44
call fcn.00604401
add esp, 4
mov dword [ebp - 0x1c], eax
cmp eax, ebx
mov byte [ebp - 4], 0xf
je 0x4694b0
push 0x10
push ebx
push ebx
push ebx
push ebx
push 0x655ff0
push 0xea
push 0x18
push 0x20
push 0x139
push 0xf6
mov ecx, eax
call fcn.004de6f0
jmp 0x4694b2
xor eax, eax
lea ecx, [ebp - 0x18]
push ecx
mov dword [ebp - 0x18], eax
mov eax, dword [esi + 8]
push 1
push eax
mov ecx, esi
mov byte [ebp - 4], bl
call fcn.004f9e20
push 0x44
call fcn.00604401
add esp, 4
mov dword [ebp - 0x1c], eax
cmp eax, ebx
mov byte [ebp - 4], 0x10
je 0x4694ff
push 0x10
push ebx
push ebx
push ebx
push ebx
push 0x655ff0
push 0xeb
push 0x18
push 0x20
push 0x37
push 0x18
mov ecx, eax
call fcn.004de6f0
jmp 0x469501
xor eax, eax
lea edx, [ebp - 0x18]
push edx
mov dword [ebp - 0x18], eax
mov eax, dword [esi + 8]
push 1
push eax
mov ecx, esi
mov byte [ebp - 4], bl
call fcn.004f9e20
push 0x44
call fcn.00604401
add esp, 4
mov dword [ebp - 0x1c], eax
cmp eax, ebx
mov byte [ebp - 4], 0x11
je 0x46954e
push 0x10
push ebx
push ebx
push ebx
push ebx
push 0x655ff0
push 0xec
push 0x18
push 0x20
push 0x58
push 0x18
mov ecx, eax
call fcn.004de6f0
jmp 0x469550
xor eax, eax
lea ecx, [ebp - 0x18]
push ecx
mov dword [ebp - 0x18], eax
mov eax, dword [esi + 8]
push 1
push eax
mov ecx, esi
mov byte [ebp - 4], bl
call fcn.004f9e20
push 0x44
call fcn.00604401
add esp, 4
mov dword [ebp - 0x1c], eax
cmp eax, ebx
mov byte [ebp - 4], 0x12
je 0x46959d
push 0x10
push ebx
push ebx
push ebx
push ebx
push 0x655ff0
push 0xed
push 0x18
push 0x20
push 0x7a
push 0x18
mov ecx, eax
call fcn.004de6f0
jmp 0x46959f
xor eax, eax
lea edx, [ebp - 0x18]
push edx
mov dword [ebp - 0x18], eax
mov eax, dword [esi + 8]
push 1
push eax
mov ecx, esi
mov byte [ebp - 4], bl
call fcn.004f9e20
push 0x44
call fcn.00604401
add esp, 4
mov dword [ebp - 0x1c], eax
cmp eax, ebx
mov byte [ebp - 4], 0x13
je 0x4695ef
push 0x10
push ebx
push ebx
push ebx
push ebx
push 0x655ff0
push 0xee
push 0x18
push 0x20
push 0x9a
push 0x18
mov ecx, eax
call fcn.004de6f0
jmp 0x4695f1
xor eax, eax
lea ecx, [ebp - 0x18]
push ecx
mov dword [ebp - 0x18], eax
mov eax, dword [esi + 8]
push 1
push eax
mov ecx, esi
mov byte [ebp - 4], bl
call fcn.004f9e20
push 0x4c
call fcn.00604401
add esp, 4
mov dword [ebp - 0x1c], eax
cmp eax, ebx
mov byte [ebp - 4], 0x14
je 0x46964f
mov edx, dword [0x68ba40]
mov ecx, dword [edx + 0x20]
mov ecx, dword [ecx + 0x624]
push 8
push ebx
push 5
push 0xffffffffffffffff
push 7
push 0x64ba9c
push ecx
push 0x1c
push 0x1b0
push 0x13
push 0x1a
mov ecx, eax
call fcn.005aa840
jmp 0x469651
xor eax, eax
lea ecx, [ebp - 0x18]
push ecx
mov dword [ebp - 0x18], eax
mov eax, dword [esi + 8]
push 1
push eax
mov ecx, esi
mov byte [ebp - 4], bl
call fcn.004f9e20
push 0x4c
call fcn.00604401
add esp, 4
mov dword [ebp - 0x1c], eax
cmp eax, ebx
mov byte [ebp - 4], 0x15
je 0x4696b2
mov edx, dword [0x68ba40]
mov ecx, dword [edx + 0x20]
mov ecx, dword [ecx + 0x628]
push 8
push ebx
push 5
push 0xffffffffffffffff
push 7
push 0x64a16c
push ecx
push 0x14
push 0xc1
push 0xcc
push 0x1a
mov ecx, eax
call fcn.005aa840
jmp 0x4696b4
xor eax, eax
lea ecx, [ebp - 0x18]
push ecx
mov dword [ebp - 0x18], eax
mov eax, dword [esi + 8]
push 1
push eax
mov ecx, esi
mov byte [ebp - 4], bl
call fcn.004f9e20
push 0x4c
call fcn.00604401
add esp, 4
mov dword [ebp - 0x1c], eax
cmp eax, ebx
mov byte [ebp - 4], 0x16
je 0x469715
mov edx, dword [0x68ba40]
mov edx, dword [edx + 0x20]
mov edx, dword [edx + 0x62c]
push 8
push ebx
push 5
push 0xffffffffffffffff
push 7
push 0x64a16c
push edx
push 0x14
push 0xc1
push 0x11b
push 0x1a
mov ecx, eax
call fcn.005aa840
jmp 0x469717
xor eax, eax
lea ecx, [ebp - 0x18]
push ecx
mov dword [ebp - 0x18], eax
mov eax, dword [esi + 8]
push 1
push eax
mov ecx, esi
mov byte [ebp - 4], bl
call fcn.004f9e20
push 0x4c
call fcn.00604401
add esp, 4
mov dword [ebp - 0x1c], eax
cmp eax, ebx
mov byte [ebp - 4], 0x17
je 0x469778
mov edx, dword [0x68ba40]
mov ecx, dword [edx + 0x20]
mov ecx, dword [ecx + 0x630]
push 8
push ebx
push 5
push 0xffffffffffffffff
push 7
push 0x64a16c
push ecx
push 0x14
push 0xc1
push 0x15d
push 0x1a
mov ecx, eax
call fcn.005aa840
jmp 0x46977a
xor eax, eax
lea ecx, [ebp - 0x18]
push ecx
mov dword [ebp - 0x18], eax
mov eax, dword [esi + 8]
push 1
push eax
mov ecx, esi
mov byte [ebp - 4], bl
call fcn.004f9e20
push 0x4c
call fcn.00604401
add esp, 4
mov dword [ebp - 0x1c], eax
cmp eax, ebx
mov byte [ebp - 4], 0x18
je 0x4697db
mov edx, dword [0x68ba40]
mov ecx, dword [edx + 0x20]
mov ecx, dword [ecx + 0x634]
push 8
push ebx
push 5
push 0xffffffffffffffff
push 7
push 0x64a16c
push ecx
push 0x14
push 0xd3
push 0x38
push 0xf8
mov ecx, eax
call fcn.005aa840
jmp 0x4697dd
xor eax, eax
lea ecx, [ebp - 0x18]
push ecx
mov dword [ebp - 0x18], eax
mov eax, dword [esi + 8]
push 1
push eax
mov ecx, esi
mov byte [ebp - 4], bl
call fcn.004f9e20
push 0x4c
call fcn.00604401
add esp, 4
mov dword [ebp - 0x1c], eax
cmp eax, ebx
mov byte [ebp - 4], 0x19
je 0x469841
mov edx, dword [0x68ba40]
mov ecx, dword [edx + 0x20]
mov ecx, dword [ecx + 0x638]
push 8
push ebx
push 5
push 0xffffffffffffffff
push 7
push 0x64a16c
push ecx
push 0x14
push 0xd3
push 0xff
push 0xf8
mov ecx, eax
call fcn.005aa840
jmp 0x469843
xor eax, eax
lea ecx, [ebp - 0x18]
push ecx
mov dword [ebp - 0x18], eax
mov eax, dword [esi + 8]
push 1
push eax
mov ecx, esi
mov byte [ebp - 4], bl
call fcn.004f9e20
push 0x4c
call fcn.00604401
add esp, 4
mov dword [ebp - 0x1c], eax
cmp eax, ebx
mov byte [ebp - 4], 0x1a
je 0x4698a4
mov edx, dword [0x68ba40]
mov ecx, dword [edx + 0x20]
mov ecx, dword [ecx + 0x63c]
push 8
push ebx
push 4
push 0xffffffffffffffff
push 1
push 0x64a16c
push ecx
push 0x18
push 0xb6
push 0x54
push 0x11b
mov ecx, eax
call fcn.005aa840
jmp 0x4698a6
xor eax, eax
lea ecx, [ebp - 0x18]
push ecx
mov dword [ebp - 0x18], eax
mov eax, dword [esi + 8]
push 1
push eax
mov ecx, esi
mov byte [ebp - 4], bl
call fcn.004f9e20
push 0x4c
call fcn.00604401
add esp, 4
mov dword [ebp - 0x1c], eax
cmp eax, ebx
mov byte [ebp - 4], 0x1b
je 0x469907
mov edx, dword [0x68ba40]
mov edx, dword [edx + 0x20]
mov edx, dword [edx + 0x640]
push 8
push ebx
push 4
push 0xffffffffffffffff
push 1
push 0x64a16c
push edx
push 0x18
push 0xb6
push 0x72
push 0x11b
mov ecx, eax
call fcn.005aa840
jmp 0x469909
xor eax, eax
lea ecx, [ebp - 0x18]
push ecx
mov dword [ebp - 0x18], eax
mov eax, dword [esi + 8]
push 1
push eax
mov ecx, esi
mov byte [ebp - 4], bl
call fcn.004f9e20
push 0x4c
call fcn.00604401
add esp, 4
mov dword [ebp - 0x1c], eax
cmp eax, ebx
mov byte [ebp - 4], 0x1c
je 0x46996d
mov edx, dword [0x68ba40]
mov ecx, dword [edx + 0x20]
mov ecx, dword [ecx + 0x644]
push 8
push ebx
push 4
push 0xffffffffffffffff
push 1
push 0x64a16c
push ecx
push 0x18
push 0xb6
push 0x90
push 0x11b
mov ecx, eax
call fcn.005aa840
jmp 0x46996f
xor eax, eax
lea ecx, [ebp - 0x18]
push ecx
mov dword [ebp - 0x18], eax
mov eax, dword [esi + 8]
push 1
push eax
mov ecx, esi
mov byte [ebp - 4], bl
call fcn.004f9e20
push 0x4c
call fcn.00604401
add esp, 4
mov dword [ebp - 0x1c], eax
cmp eax, ebx
mov byte [ebp - 4], 0x1d
je 0x4699d3
mov edx, dword [0x68ba40]
mov ecx, dword [edx + 0x20]
mov ecx, dword [ecx + 0x260]
push 8
push ebx
push 4
push 0xffffffffffffffff
push 1
push 0x64a16c
push ecx
push 0x18
push 0xb6
push 0xae
push 0x11b
mov ecx, eax
call fcn.005aa840
jmp 0x4699d5
xor eax, eax
lea ecx, [ebp - 0x18]
push ecx
mov dword [ebp - 0x18], eax
mov eax, dword [esi + 8]
push 1
push eax
mov ecx, esi
mov byte [ebp - 4], bl
call fcn.004f9e20
push 0x4c
call fcn.00604401
add esp, 4
mov dword [ebp - 0x1c], eax
cmp eax, ebx
mov byte [ebp - 4], 0x1e
je 0x469a39
mov edx, dword [0x68ba40]
mov edx, dword [edx + 0x20]
mov edx, dword [edx + 0x648]
push 8
push ebx
push 4
push 0xffffffffffffffff
push 1
push 0x64a16c
push edx
push 0x18
push 0xb6
push 0xcc
push 0x11b
mov ecx, eax
call fcn.005aa840
jmp 0x469a3b
xor eax, eax
lea ecx, [ebp - 0x18]
push ecx
mov dword [ebp - 0x18], eax
mov eax, dword [esi + 8]
push 1
push eax
mov ecx, esi
mov byte [ebp - 4], bl
call fcn.004f9e20
push 0x4c
call fcn.00604401
add esp, 4
mov dword [ebp - 0x1c], eax
cmp eax, ebx
mov byte [ebp - 4], 0x1f
je 0x469a9f
mov edx, dword [0x68ba40]
mov ecx, dword [edx + 0x20]
mov ecx, dword [ecx + 0x64c]
push 8
push ebx
push 4
push 0xffffffffffffffff
push 1
push 0x64a16c
push ecx
push 0x18
push 0xb6
push 0x11b
push 0x11b
mov ecx, eax
call fcn.005aa840
jmp 0x469aa1
xor eax, eax
lea ecx, [ebp - 0x18]
push ecx
mov dword [ebp - 0x18], eax
mov eax, dword [esi + 8]
push 1
push eax
mov ecx, esi
mov byte [ebp - 4], bl
call fcn.004f9e20
push 0x4c
call fcn.00604401
add esp, 4
mov dword [ebp - 0x1c], eax
cmp eax, ebx
mov byte [ebp - 4], 0x20
je 0x469b05
mov edx, dword [0x68ba40]
mov ecx, dword [edx + 0x20]
mov ecx, dword [ecx + 0x650]
push 8
push ebx
push 4
push 0xffffffffffffffff
push 1
push 0x64a16c
push ecx
push 0x18
push 0xb6
push 0x139
push 0x11b
mov ecx, eax
call fcn.005aa840
jmp 0x469b07
xor eax, eax
lea ecx, [ebp - 0x18]
push ecx
mov dword [ebp - 0x18], eax
mov eax, dword [esi + 8]
push 1
push eax
mov ecx, esi
mov byte [ebp - 4], bl
call fcn.004f9e20
push 0x4c
call fcn.00604401
add esp, 4
mov dword [ebp - 0x1c], eax
cmp eax, ebx
mov byte [ebp - 4], 0x21
je 0x469b65
mov edx, dword [0x68ba40]
mov ecx, dword [edx + 0x20]
mov ecx, dword [ecx + 0x654]
push 8
push ebx
push 4
push 0xffffffffffffffff
push 1
push 0x64a16c
push ecx
push 0x18
push 0xa8
push 0x37
push 0x3d
mov ecx, eax
call fcn.005aa840
jmp 0x469b67
xor eax, eax
lea ecx, [ebp - 0x18]
push ecx
mov dword [ebp - 0x18], eax
mov eax, dword [esi + 8]
push 1
push eax
mov ecx, esi
mov byte [ebp - 4], bl
call fcn.004f9e20
push 0x4c
call fcn.00604401
add esp, 4
mov dword [ebp - 0x1c], eax
cmp eax, ebx
mov byte [ebp - 4], 0x22
je 0x469bc5
mov edx, dword [0x68ba40]
mov edx, dword [edx + 0x20]
mov edx, dword [edx + 0x658]
push 8
push ebx
push 4
push 0xffffffffffffffff
push 1
push 0x64a16c
push edx
push 0x18
push 0xa8
push 0x58
push 0x3d
mov ecx, eax
call fcn.005aa840
jmp 0x469bc7
xor eax, eax
lea ecx, [ebp - 0x18]
push ecx
mov dword [ebp - 0x18], eax
mov eax, dword [esi + 8]
push 1
push eax
mov ecx, esi
mov byte [ebp - 4], bl
call fcn.004f9e20
push 0x4c
call fcn.00604401
add esp, 4
mov dword [ebp - 0x1c], eax
cmp eax, ebx
mov byte [ebp - 4], 0x23
je 0x469c25
mov edx, dword [0x68ba40]
mov edx, dword [edx + 0x20]
mov edx, dword [edx + 0x65c]
push 8
push ebx
push 4
push 0xffffffffffffffff
push 1
push 0x64a16c
push edx
push 0x18
push 0xa8
push 0x7a
push 0x3d
mov ecx, eax
call fcn.005aa840
jmp 0x469c27
xor eax, eax
mov edi, dword [esi + 8]
mov dword [ebp - 0x10], eax
mov eax, dword [esi + 0xc]
sub eax, edi
sar eax, 2
cmp eax, 1
mov byte [ebp - 4], bl
jae 0x469cf2
mov ecx, esi
call fcn.00509c00
cmp eax, 1
jbe 0x469c59
mov ecx, esi
call fcn.00509c00
mov dword [ebp - 0x14], eax
jmp 0x469c60
mov dword [ebp - 0x14], 1
mov ecx, esi
call fcn.00509c00
add eax, dword [ebp - 0x14]
mov dword [ebp - 0x1c], eax
jns 0x469c71
xor eax, eax
lea ecx, [eax*4]
push ecx
call fcn.00604401
mov edx, dword [esi + 4]
add esp, 4
push eax
push edi
push edx
mov ecx, esi
mov dword [ebp - 0x14], eax
call fcn.00423010
lea ecx, [ebp - 0x10]
push ecx
push 1
push eax
mov ecx, esi
mov dword [ebp - 0x18], eax
call fcn.00488030
mov edx, dword [ebp - 0x18]
mov eax, dword [esi + 8]
add edx, 4
push edx
push eax
push edi
mov ecx, esi
call fcn.00423010
mov ecx, dword [esi + 8]
mov edx, dword [esi + 4]
push ecx
push edx
mov ecx, esi
call fcn.00404190
mov eax, dword [esi + 4]
push eax
call fcn.005f8040
mov eax, dword [ebp - 0x1c]
mov edi, dword [ebp - 0x14]
lea ecx, [edi + eax*4]
mov dword [esi + 0xc], ecx
add esp, 4
mov ecx, esi
call fcn.00509c00
lea edx, [edi + eax*4 + 4]
mov dword [esi + 8], edx
mov dword [esi + 4], edi
jmp 0x469d7d
mov eax, edi
sub eax, edi
sar eax, 2
cmp eax, 1
jae 0x469d40
lea ecx, [edi + 4]
push ecx
push edi
push edi
mov ecx, esi
call fcn.00423010
mov eax, dword [esi + 8]
mov ecx, eax
lea edx, [ebp - 0x10]
push edx
sub ecx, edi
sar ecx, 2
mov edx, 1
sub edx, ecx
push edx
push eax
mov ecx, esi
call fcn.00488030
mov ecx, dword [esi + 8]
cmp edi, ecx
mov eax, edi
je 0x469d79
mov edx, dword [ebp - 0x10]
mov dword [eax], edx
add eax, 4
cmp eax, ecx
jne 0x469d32
jmp 0x469d79
push edi
push edi
lea eax, [edi - 4]
push eax
mov ecx, esi
call fcn.00423010
mov ecx, dword [esi + 8]
lea eax, [ecx - 4]
cmp edi, eax
je 0x469d66
mov edx, dword [eax - 4]
sub eax, 4
sub ecx, 4
cmp eax, edi
mov dword [ecx], edx
jne 0x469d57
lea eax, [edi + 4]
cmp edi, eax
je 0x469d79
mov ecx, dword [ebp - 0x10]
mov dword [edi], ecx
add edi, 4
cmp edi, eax
jne 0x469d6d
add dword [esi + 8], 4
push 0x4c
call fcn.00604401
add esp, 4
mov dword [ebp - 0x1c], eax
cmp eax, ebx
mov byte [ebp - 4], 0x24
je 0x469dc7
mov edx, dword [0x68ba40]
mov edx, dword [edx + 0x20]
mov edx, dword [edx + 0x908]
push 8
push ebx
push 4
push 0xffffffffffffffff
push 1
push 0x64a16c
push edx
push 0x18
push 0xa8
push 0x9a
push 0x3d
mov ecx, eax
call fcn.005aa840
jmp 0x469dc9
xor eax, eax
mov ecx, dword [esi + 0xc]
mov dword [ebp - 0x10], eax
mov eax, dword [esi + 8]
sub ecx, eax
sar ecx, 2
cmp ecx, 1
mov byte [ebp - 4], bl
mov edi, eax
jae 0x469e9b
mov ecx, dword [esi + 4]
cmp ecx, ebx
je 0x469e02
sub eax, ecx
sar eax, 2
cmp eax, 1
jbe 0x469e02
mov ecx, esi
call fcn.00509c00
mov dword [ebp - 0x14], eax
jmp 0x469e09
mov dword [ebp - 0x14], 1
mov ecx, esi
call fcn.00509c00
add eax, dword [ebp - 0x14]
mov dword [ebp - 0x14], eax
jns 0x469e1a
xor eax, eax
lea edx, [eax*4]
push edx
call fcn.00604401
add esp, 4
push eax
mov dword [ebp - 0x18], eax
mov eax, dword [esi + 4]
push edi
push eax
mov ecx, esi
call fcn.00423010
lea ecx, [ebp - 0x10]
push ecx
push 1
push eax
mov ecx, esi
mov dword [ebp - 0x1c], eax
call fcn.00488030
mov edx, dword [ebp - 0x1c]
mov eax, dword [esi + 8]
add edx, 4
push edx
push eax
push edi
mov ecx, esi
call fcn.00423010
mov ecx, dword [esi + 8]
mov edx, dword [esi + 4]
push ecx
push edx
mov ecx, esi
call fcn.00404190
mov eax, dword [esi + 4]
push eax
call fcn.005f8040
mov ecx, dword [ebp - 0x14]
mov edi, dword [ebp - 0x18]
lea edx, [edi + ecx*4]
add esp, 4
mov ecx, esi
mov dword [esi + 0xc], edx
call fcn.00509c00
lea eax, [edi + eax*4 + 4]
mov dword [esi + 8], eax
mov dword [esi + 4], edi
jmp 0x469f26
mov ecx, eax
sub ecx, edi
sar ecx, 2
cmp ecx, 1
jae 0x469ee9
lea edx, [edi + 4]
push edx
push eax
push edi
mov ecx, esi
call fcn.00423010
mov eax, dword [esi + 8]
mov edx, eax
lea ecx, [ebp - 0x10]
push ecx
sub edx, edi
sar edx, 2
mov ecx, 1
sub ecx, edx
push ecx
push eax
mov ecx, esi
call fcn.00488030
mov ecx, dword [esi + 8]
cmp edi, ecx
mov eax, edi
je 0x469f22
mov edx, dword [ebp - 0x10]
mov dword [eax], edx
add eax, 4
cmp eax, ecx
jne 0x469edb
jmp 0x469f22
push eax
push eax
add eax, 0xfffffffc
push eax
mov ecx, esi
call fcn.00423010
mov ecx, dword [esi + 8]
lea eax, [ecx - 4]
cmp edi, eax
je 0x469f0f
mov edx, dword [eax - 4]
sub eax, 4
sub ecx, 4
cmp eax, edi
mov dword [ecx], edx
jne 0x469f00
lea eax, [edi + 4]
cmp edi, eax
je 0x469f22
mov ecx, dword [ebp - 0x10]
mov dword [edi], ecx
add edi, 4
cmp edi, eax
jne 0x469f16
add dword [esi + 8], 4
mov esi, dword [ebp - 0x20]
mov edi, dword [esi + 0x34]
cmp edi, dword [esi + 0x38]
je 0x469f52
mov eax, dword [edi]
cmp eax, ebx
je 0x469f43
push 0xffffffffffffffff
push eax
mov ecx, esi
call fcn.005ec5b0
jmp 0x469f48
call fcn.004e7fe0
mov eax, dword [esi + 0x38]
add edi, 4
cmp edi, eax
jne 0x469f31
mov edi, 0xca
push 4
push 6
push edi
mov ecx, esi
call fcn.005ec8f0
mov ecx, eax
call fcn.005ec0d0
inc edi
cmp edi, 0xd3
jle 0x469f57
mov edx, dword [0x67cb38]
push 4
push 5
add edx, 0xca
push edx
mov ecx, esi
call fcn.005ec8f0
mov ecx, eax
call fcn.005ec0d0
mov eax, dword [0x67cb38]
push eax
push 4
add eax, 0xca
push eax
mov ecx, esi
call fcn.005ec8f0
mov ecx, eax
call fcn.005ec0d0
mov edi, 0xd4
push 4
push 6
push edi
mov ecx, esi
call fcn.005ec8f0
mov ecx, eax
call fcn.005ec0d0
inc edi
cmp edi, 0xdd
jle 0x469fb3
mov eax, dword [0x67cb3c]
push 4
push 5
add eax, 0xd4
push eax
mov ecx, esi
call fcn.005ec8f0
mov ecx, eax
call fcn.005ec0d0
mov eax, dword [0x67cb3c]
push eax
push 4
add eax, 0xd4
push eax
mov ecx, esi
call fcn.005ec8f0
mov ecx, eax
call fcn.005ec0d0
mov edi, 0xe6
push 0x1000
push 6
push edi
mov ecx, esi
call fcn.005ec8f0
mov ecx, eax
call fcn.005ec0d0
inc edi
cmp edi, 0xe8
jle 0x46a00d
mov ecx, dword [0x67cbc4]
push 0x1000
add ecx, 0xe6
push 5
push ecx
mov ecx, esi
call fcn.005ec8f0
mov ecx, eax
call fcn.005ec0d0
mov edx, dword [0x67cb94]
push edx
push 4
push 0xeb
mov ecx, esi
call fcn.005ec8f0
mov ecx, eax
call fcn.005ec0d0
mov eax, dword [0x67cb9c]
push eax
push 4
push 0xec
mov ecx, esi
call fcn.005ec8f0
mov ecx, eax
call fcn.005ec0d0
mov ecx, dword [0x67cb98]
push ecx
push 4
push 0xed
mov ecx, esi
call fcn.005ec8f0
mov ecx, eax
call fcn.005ec0d0
mov edx, dword [0x67cb6c]
push edx
push 4
push 0xe1
mov ecx, esi
call fcn.005ec8f0
mov ecx, eax
call fcn.005ec0d0
mov eax, dword [0x67cb70]
push eax
push 4
push 0xe2
mov ecx, esi
call fcn.005ec8f0
mov ecx, eax
call fcn.005ec0d0
mov ecx, dword [0x67cb74]
push ecx
push 4
push 0xe3
mov ecx, esi
call fcn.005ec8f0
mov ecx, eax
call fcn.005ec0d0
mov edx, dword [0x67cb78]
push edx
push 4
push 0xe4
mov ecx, esi
call fcn.005ec8f0
mov ecx, eax
call fcn.005ec0d0
mov eax, dword [0x67cb7c]
push eax
push 4
push 0xe5
mov ecx, esi
call fcn.005ec8f0
mov ecx, eax
call fcn.005ec0d0
mov edx, dword [0x67cba0]
xor ecx, ecx
cmp edx, 1
sete cl
push ecx
push 4
push 0xe9
mov ecx, esi
call fcn.005ec8f0
mov ecx, eax
call fcn.005ec0d0
mov ecx, dword [0x67cba0]
xor edx, edx
cmp ecx, 2
sete dl
mov ecx, esi
push edx
push 4
push 0xea
call fcn.005ec8f0
mov ecx, eax
call fcn.005ec0d0
mov eax, dword [0x67cb60]
push eax
push 4
push 0xee
mov ecx, esi
call fcn.005ec8f0
mov ecx, eax
call fcn.005ec0d0
mov ecx, dword [0x67d8a8]
push ebx
push ebx
call fcn.004ffe00
mov ecx, dword [ebp - 0xc]
pop edi
mov eax, esi
pop esi
pop ebx
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret