Function at 0x467e40
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x542d1f
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x98
push ebx
push ebp
push esi
mov esi, dword [esp + 0xc0]
push edi
mov edi, ecx
push esi
mov dword [esp + 0x6c], edi
call fcn.004c9e20
add esp, 4
test eax, eax
jne 0x468fc5
mov ebp, dword [esi + 1]
inc esi
push ebp
call fcn.004d2530
add esp, 4
cmp eax, 0x5000000
jne 0x468fb5
cmp ebp, 0x500fffe
je 0x468fb5
lea eax, [edi + 0xc0]
add esi, 4
push eax
lea ecx, [esp + 0x20]
mov dword [esp + 0xc8], esi
call fcn.0040bf10
mov dword [esp + 0x1c], 0x54d958
xor esi, esi
push ebp
mov dword [esp + 0xb4], esi
mov dword [esp + 0x94], esi
call fcn.004d2510
mov ebx, eax
mov eax, dword [esp + 0xc4]
add esp, 4
cmp ebx, esi
je 0x467f72
cmp ebx, 0x10000000
je 0x467f13
cmp ebx, 0x20000000
jne 0x468102
cmp eax, esi
je 0x468102
lea esi, [eax + 0x14]
mov edi, 1
jmp 0x467f81
cmp eax, esi
je 0x468102
mov edx, dword [eax + 8]
lea ecx, [esp + 0x94]
push esi
push ecx
push edx
lea ecx, [edi + 0x2cc]
call fcn.004d2df0
test eax, eax
je 0x468102
mov ecx, dword [esp + 0x94]
cmp dword [ecx + 0x44], esi
je 0x467f68
lea eax, [esp + 0x1c]
push esi
push eax
call fcn.004ce8d0
lea esi, [esp + 0x1c]
mov dword [esp + 0x90], 1
mov edi, 3
jmp 0x467f81
lea esi, [ecx + 0xc]
mov edi, 3
jmp 0x467f81
mov ecx, dword [esp + 0x68]
mov edi, 4
lea esi, [ecx + 0x290]
lea edx, [esp + 0x14]
mov ecx, esi
push edx
push 0
push ebp
call fcn.004d26d0
test eax, eax
mov dword [esp + 0x3c], eax
jne 0x467fdf
cmp ebx, 0x20000000
jne 0x467fc6
mov eax, dword [esp + 0xc0]
lea ecx, [esp + 0x14]
push ecx
push 0
lea esi, [eax + 0x34]
push ebp
mov ecx, esi
call fcn.004d26d0
test eax, eax
mov dword [esp + 0x3c], eax
mov edi, 2
jne 0x467fdf
mov edx, dword [esp + 0x68]
push 0x58c540
lea ecx, [edx + 0x964]
call fcn.00519ab3
jmp 0x468102
lea ecx, [esp + 0x40]
call fcn.00473490
mov eax, dword [esp + 0x90]
mov ebx, dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
mov byte [esp + 0xb0], 1
je 0x46811b
mov ecx, dword [esp + 0xbc]
mov ebp, dword [esp + 0x68]
push 0
lea eax, [esp + 0x14]
mov edx, dword [ebp + 0x4ac]
push 4
add ecx, 8
push eax
push ecx
push edx
call ebx
test eax, eax
je 0x4680e9
mov eax, dword [esp + 0x10]
test eax, eax
je 0x4680e9
mov edx, dword [0x599f8c]
push 0
lea ecx, [esp + 0x14]
push 4
push ecx
push eax
push edx
call ebx
test eax, eax
je 0x4680e9
mov eax, dword [esp + 0x10]
test eax, eax
je 0x4680e9
mov ecx, eax
mov eax, dword [esp + 0x14]
add ecx, 4
xor ebx, ebx
test eax, eax
mov dword [esp + 0x10], ecx
jle 0x4680bd
push 0
push ebx
mov ecx, esi
call fcn.004d25e0
mov edi, eax
mov eax, dword [esi]
push edi
mov ecx, esi
call dword [eax + 0x14]
push eax
call fcn.004742e0
add esp, 4
test eax, eax
jne 0x4680b4
mov eax, dword [edi]
test eax, eax
jne 0x4680a0
mov eax, 0x80000301
add edi, 6
lea ecx, [ebp + 0xc0]
push edi
push eax
call fcn.00410780
add dword [esp + 0x10], eax
mov eax, dword [esp + 0x14]
inc ebx
cmp ebx, eax
jl 0x468074
mov eax, dword [esp + 0x3c]
lea ecx, [esp + 0x18]
lea edx, [esp + 0x40]
push ecx
mov ecx, dword [eax]
push edx
mov edx, dword [esp + 0x18]
push ecx
add eax, 6
push edx
push eax
call fcn.004c9bc0
add esp, 4
mov ecx, ebp
push eax
call fcn.00467d30
jmp 0x468150
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], 0x54d7d0
call fcn.00473690
lea ecx, [esp + 0x1c]
mov dword [esp + 0xb0], 0xffffffff
call fcn.00401e70
jmp 0x468fc5
mov edx, dword [esp + 0x3c]
lea eax, [esp + 0x18]
lea ecx, [esp + 0x40]
push eax
mov eax, dword [esp + 0xc0]
push ecx
mov ecx, dword [esp + 0xc8]
push edx
mov edx, dword [esp + 0xc4]
push ebp
push eax
push ecx
mov ecx, dword [esp + 0x80]
push edx
push edi
call fcn.00467b70
lea ecx, [esp + 0x54]
mov dword [esp + 0x10], eax
call fcn.00473490
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
call fcn.00473490
xor eax, eax
mov dword [esp + 0x6c], eax
mov dword [esp + 0x78], eax
mov ecx, dword [esp + 0x10]
mov byte [esp + 0xb0], 3
cmp ecx, eax
mov eax, dword [esp + 0x50]
je 0x468704
mov edx, dword [esp + 0xc4]
mov bl, byte [edx]
cmp bl, 0x37
je 0x468704
mov ebp, dword [esp + 0x68]
xor edi, edi
push edi
lea eax, [esp + 0x14]
push 4
push eax
mov esi, ecx
push ecx
mov ecx, dword [ebp + 0x4ac]
push ecx
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
je 0x468f37
cmp dword [esp + 0x10], edi
je 0x468f37
mov eax, dword [esp + 0x50]
mov edx, dword [esp + 0x48]
neg eax
sbb eax, eax
and eax, edx
push eax
mov dword [esp + 0x40], eax
call fcn.004c9bc0
add esp, 4
cmp bl, 0x39
jne 0x46846f
cmp eax, edi
jne 0x4687c2
mov edx, dword [esp + 0x18]
push edx
call fcn.004dec70
mov esi, eax
mov eax, dword [esp + 0x1c]
push eax
call fcn.004dde30
add esp, 8
cmp esi, 2
mov edi, eax
jne 0x46822d
cmp edi, 1
je 0x46822d
cmp edi, 3
je 0x46822d
mov esi, 1
mov ecx, dword [esp + 0xc4]
cmp esi, 2
mov ebx, dword [ecx + 1]
jne 0x468392
push 1
lea edx, [esp + 0x1c]
push 1
push edx
lea ecx, [ebp + 0xc0]
call fcn.00448870
cmp edi, 1
push 0
jne 0x468287
mov ecx, dword [esp + 0x1c]
lea eax, [esp + 0x98]
push eax
push ecx
lea ecx, [ebp + 0x274]
call fcn.004d2df0
test eax, eax
je 0x46882e
mov edx, dword [esp + 0x94]
lea edi, [edx + 0xc]
jmp 0x4682da
mov ecx, dword [esp + 0x1c]
lea eax, [esp + 0x9c]
push eax
push ecx
lea ecx, [ebp + 0x2cc]
call fcn.004d2df0
test eax, eax
je 0x46882e
lea ecx, [esp + 0x24]
mov dword [esp + 0x20], 0
call fcn.00473690
mov ecx, dword [esp + 0x98]
lea edx, [esp + 0x1c]
push 0
push edx
call fcn.004ce8d0
mov eax, dword [esp + 0x10]
lea edi, [esp + 0x1c]
add eax, 4
mov dword [esp + 0x10], eax
test edi, edi
je 0x46882e
lea eax, [esp + 0x14]
mov ecx, edi
push eax
push 0
push ebx
call fcn.004d26d0
mov ecx, dword [esp + 0x14]
xor ebx, ebx
test ecx, ecx
mov dword [esp + 0x3c], eax
jle 0x46834c
push 0
push ebx
mov ecx, edi
call fcn.004d25e0
mov edx, dword [edi]
mov esi, eax
push esi
mov ecx, edi
call dword [edx + 0x14]
push eax
call fcn.004742e0
add esp, 4
test eax, eax
jne 0x46833f
mov eax, dword [esi]
test eax, eax
jne 0x46832b
mov eax, 0x80000301
add esi, 6
lea ecx, [ebp + 0xc0]
push esi
push eax
call fcn.00410780
add dword [esp + 0x10], eax
mov eax, dword [esp + 0x14]
inc ebx
cmp ebx, eax
jl 0x4682ff
mov eax, dword [esp + 0x3c]
lea ecx, [esp + 0x18]
lea edx, [esp + 0x40]
push ecx
mov ecx, dword [eax]
push edx
mov edx, dword [esp + 0x18]
push ecx
add eax, 6
push edx
push eax
call fcn.004c9bc0
add esp, 4
mov ecx, ebp
push eax
call fcn.00467d30
mov ecx, eax
mov eax, dword [esp + 0xc4]
add eax, 9
mov dword [esp + 0x10], ecx
mov dword [esp + 0xc4], eax
mov eax, dword [esp + 0x50]
jmp 0x4686fc
cmp esi, 3
jne 0x46896a
mov eax, dword [esp + 0x18]
xor edi, edi
push edi
push eax
lea ecx, [ebp + 0xc0]
call fcn.00450af0
cmp eax, edi
je 0x46890e
cmp dword [eax + 0x30], edi
jle 0x46890e
test dword [eax + 0x14], 0x800000
jne 0x46890e
mov esi, dword [eax + 0x34]
lea edx, [ebx - 1]
mov dword [esp + 0x14], edx
mov ecx, dword [eax + 0x30]
cmp edx, ecx
jge 0x4688a2
mov ecx, dword [esp + 0x10]
cmp edx, edi
jl 0x468455
mov eax, dword [esi]
mov ebx, eax
shr ebx, 0x10
jne 0x468403
mov ebx, dword [esp + 0x18]
and eax, 0xffff
shr ebx, 0x10
shl ebx, 0x10
or eax, ebx
cmp edi, edx
jne 0x46842f
lea edx, [esp + 0x18]
push edx
lea edx, [esp + 0x44]
push edx
push eax
mov eax, dword [esi + 4]
push ecx
push eax
call fcn.004c9bc0
add esp, 4
mov ecx, ebp
push eax
call fcn.00467d30
mov ecx, eax
mov dword [esp + 0x10], ecx
jmp 0x46844c
mov ecx, dword [esi + 4]
push ecx
push eax
lea ecx, [ebp + 0xc0]
call fcn.00410780
mov ecx, dword [esp + 0x10]
add ecx, eax
add esi, 0x1c
mov dword [esp + 0x10], ecx
mov edx, dword [esp + 0x14]
inc edi
cmp edi, edx
jle 0x4683e9
mov eax, dword [esp + 0xc4]
add eax, 9
mov dword [esp + 0xc4], eax
mov eax, dword [esp + 0x50]
jmp 0x4686fc
cmp bl, 0x3a
jne 0x468ede
cmp eax, edi
jne 0x4684b9
cmp dword [esp + 0x18], 0x80000005
jne 0x4689ce
lea edx, [esp + 0x40]
mov ecx, ebp
push edx
push esi
call fcn.00467d90
test eax, eax
je 0x468a3a
mov eax, dword [esp + 0x50]
mov ecx, dword [esp + 0x48]
neg eax
sbb eax, eax
mov dword [esp + 0x18], 0x80000101
and eax, ecx
mov dword [esp + 0x3c], eax
mov ecx, dword [esp + 0xc4]
xor eax, eax
mov dword [esp + 0x64], eax
cmp byte [ecx], 0x3a
jne 0x4685f3
mov edi, dword [esp + 0xc0]
mov esi, dword [esp + 0xb8]
mov ebx, ecx
mov al, byte [ebx + 1]
inc ebx
cmp al, 0x21
je 0x46854c
cmp al, 0x38
je 0x46850f
cmp al, 0x3b
jne 0x468a96
mov edx, dword [ebx + 1]
lea ecx, [esp + 0x54]
push edx
call fcn.00473750
add ebx, 5
mov dword [esp + 0xc4], ebx
jmp 0x4685e0
xor eax, eax
lea ecx, [esp + 0x7c]
mov dword [esp + 0x6c], eax
mov dword [esp + 0x78], eax
call fcn.00473690
mov ecx, dword [esp + 0xbc]
lea eax, [esp + 0x6c]
push eax
push ebx
push edi
push ecx
push esi
mov ecx, ebp
call fcn.00468ff0
test eax, eax
je 0x468afa
push ebx
call fcn.004c9be0
add esp, 4
jmp 0x468586
xor eax, eax
lea ecx, [esp + 0x7c]
mov dword [esp + 0x6c], eax
mov dword [esp + 0x78], eax
call fcn.00473690
mov eax, dword [esp + 0xbc]
lea edx, [esp + 0x6c]
inc ebx
push edx
push ebx
push edi
push eax
push esi
mov ecx, ebp
call fcn.00467660
test eax, eax
je 0x468b5e
mov ecx, ebx
call fcn.004ca4e0
add ebx, eax
mov eax, dword [esp + 0x6c]
test eax, eax
mov dword [esp + 0xc4], ebx
jne 0x468bc2
mov ecx, dword [esp + 0x78]
push ecx
call fcn.004d2580
add esp, 4
test eax, eax
je 0x468bc2
mov ecx, dword [esp + 0x78]
lea edx, [esp + 0xa0]
lea eax, [esp + 0x70]
push edx
push eax
push 0x80000301
push ecx
call fcn.004e0180
mov edx, dword [esp + 0xb0]
add esp, 0x10
lea ecx, [esp + 0x54]
push edx
call fcn.00473750
cmp byte [ebx], 0x3a
je 0x4684df
mov eax, dword [esp + 0x64]
xor ebx, ebx
cmp eax, ebx
jne 0x4685f9
xor ebx, ebx
xor edx, edx
jmp 0x4685fd
mov edx, dword [esp + 0x5c]
shr eax, 2
mov edi, eax
je 0x468e6e
cmp edi, 0x7f
jge 0x468e6e
cmp edi, 1
je 0x468682
mov ecx, dword [esp + 0x3c]
xor eax, eax
mov al, byte [ecx]
cmp edi, eax
jne 0x468c36
cmp edi, 1
mov dword [esp + 0x14], ebx
mov dword [esp + 0x90], 1
jl 0x4686cb
lea ebx, [edi - 1]
lea esi, [ecx + 5]
mov eax, dword [edx]
add edx, 4
dec eax
mov dword [esp + 0x9c], edx
test eax, eax
jle 0x4686aa
cmp eax, dword [esi - 4]
mov ecx, esi
jge 0x468d86
test ebx, ebx
jle 0x46867c
mov edx, ebx
mov ebp, dword [ecx]
add ecx, 4
imul eax, ebp
dec edx
jne 0x468666
mov edx, dword [esp + 0x9c]
mov ebp, dword [esp + 0x68]
add dword [esp + 0x14], eax
jmp 0x4686b0
mov edx, dword [edx]
dec edx
mov dword [esp + 0x14], edx
js 0x468ca6
mov eax, dword [esp + 0x3c]
push eax
call fcn.004c9b80
mov ecx, dword [esp + 0x18]
add esp, 4
cmp ecx, eax
jge 0x468d16
jmp 0x4686cb
jl 0x468dfa
mov eax, dword [esp + 0x90]
add esi, 4
inc eax
dec ebx
cmp eax, edi
mov dword [esp + 0x90], eax
jle 0x468644
mov edx, dword [esp + 0x18]
lea ecx, [ebp + 0xc0]
push edx
call fcn.004107b0
imul eax, dword [esp + 0x14]
mov edx, dword [esp + 0x3c]
xor ecx, ecx
mov cl, byte [edx]
mov edx, dword [esp + 0x10]
add eax, edx
lea ecx, [eax + ecx*4 + 4]
xor eax, eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x50], eax
test ecx, ecx
jne 0x468190
mov edx, dword [esp + 0xc8]
test edx, edx
je 0x468715
mov esi, dword [esp + 0x18]
mov dword [edx], esi
mov esi, dword [esp + 0xcc]
test esi, esi
je 0x468739
mov edi, dword [esp + 0x48]
neg eax
sbb eax, eax
and eax, edi
push eax
call fcn.004c9bc0
mov ecx, dword [esp + 0x14]
add esp, 4
mov dword [esi], eax
mov edi, ecx
mov esi, 0x54d7d0
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.00473690
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.00473690
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.00473690
mov dword [esp + 0x1c], 0x54d7d4
lea ecx, [esp + 0x24]
mov dword [esp + 0xb0], 0x19
mov dword [esp + 0x20], 0
call fcn.00473690
lea ecx, [esp + 0x24]
mov dword [esp + 0xb0], 0xffffffff
mov dword [esp + 0x24], esi
call fcn.00473690
mov eax, edi
jmp 0x468fc7
push 0x58c530
lea ecx, [ebp + 0x964]
call fcn.00519ab3
mov esi, 0x54d7d0
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.00473690
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.00473690
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.00473690
mov dword [esp + 0x1c], 0x54d7d4
mov dword [esp + 0xb0], 5
jmp 0x468f8e
push 0x58c510
lea ecx, [ebp + 0x964]
call fcn.00519ab3
mov esi, 0x54d7d0
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.00473690
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.00473690
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.00473690
mov dword [esp + 0x1c], 0x54d7d4
mov dword [esp + 0xb0], 7
mov dword [esp + 0x20], 0
jmp 0x468f92
push 0x58c530
lea ecx, [ebp + 0x964]
call fcn.00519ab3
mov esi, 0x54d7d0
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.00473690
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.00473690
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.00473690
mov dword [esp + 0x1c], 0x54d7d4
mov dword [esp + 0xb0], 9
jmp 0x468f8e
mov esi, 0x54d7d0
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.00473690
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.00473690
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.00473690
mov dword [esp + 0x1c], 0x54d7d4
mov dword [esp + 0xb0], 0xa
jmp 0x468f8e
mov esi, 0x54d7d0
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.00473690
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.00473690
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.00473690
mov dword [esp + 0x1c], 0x54d7d4
mov dword [esp + 0xb0], 0xb
mov dword [esp + 0x20], 0
jmp 0x468f92
push 0x58c4fc
lea ecx, [ebp + 0x964]
call fcn.00519ab3
mov esi, 0x54d7d0
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.00473690
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.00473690
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.00473690
mov dword [esp + 0x1c], 0x54d7d4
mov dword [esp + 0xb0], 0xc
jmp 0x468f8e
mov esi, 0x54d7d0
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.00473690
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.00473690
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.00473690
mov dword [esp + 0x1c], 0x54d7d4
mov dword [esp + 0xb0], 0xd
jmp 0x468f8e
mov esi, 0x54d7d0
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.00473690
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.00473690
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.00473690
mov dword [esp + 0x1c], 0x54d7d4
mov dword [esp + 0xb0], 0x10
mov dword [esp + 0x20], 0
jmp 0x468f92
mov esi, 0x54d7d0
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.00473690
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.00473690
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.00473690
mov dword [esp + 0x1c], 0x54d7d4
mov dword [esp + 0xb0], 0xe
mov dword [esp + 0x20], 0
jmp 0x468f92
mov esi, 0x54d7d0
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.00473690
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.00473690
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.00473690
mov dword [esp + 0x1c], 0x54d7d4
mov dword [esp + 0xb0], 0xf
mov dword [esp + 0x20], 0
jmp 0x468f92
push 0x58c4d8
lea ecx, [ebp + 0x964]
call fcn.00519ab3
mov esi, 0x54d7d0
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.00473690
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.00473690
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.00473690
mov dword [esp + 0x1c], 0x54d7d4
mov dword [esp + 0xb0], 0x11
mov dword [esp + 0x20], 0
jmp 0x468f92
push 0x58c4b8
lea ecx, [ebp + 0x964]
call fcn.00519ab3
mov esi, 0x54d7d0
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.00473690
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.00473690
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.00473690
mov dword [esp + 0x1c], 0x54d7d4
mov dword [esp + 0xb0], 0x13
mov dword [esp + 0x20], ebx
jmp 0x468f92
push 0x58c498
lea ecx, [ebp + 0x964]
call fcn.00519ab3
mov esi, 0x54d7d0
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.00473690
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.00473690
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.00473690
mov dword [esp + 0x1c], 0x54d7d4
mov dword [esp + 0xb0], 0x14
mov dword [esp + 0x20], ebx
jmp 0x468f92
push 0x58c480
lea ecx, [ebp + 0x964]
call fcn.00519ab3
mov esi, 0x54d7d0
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.00473690
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.00473690
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.00473690
mov dword [esp + 0x1c], 0x54d7d4
mov dword [esp + 0xb0], 0x15
mov dword [esp + 0x20], ebx
jmp 0x468f92
push 0x58c480
lea ecx, [ebp + 0x964]
call fcn.00519ab3
mov esi, 0x54d7d0
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.00473690
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.00473690
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.00473690
mov dword [esp + 0x1c], 0x54d7d4
mov dword [esp + 0xb0], 0x16
mov dword [esp + 0x20], 0
jmp 0x468f92
push 0x58c498
lea ecx, [ebp + 0x964]
call fcn.00519ab3
mov esi, 0x54d7d0
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.00473690
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.00473690
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.00473690
mov dword [esp + 0x1c], 0x54d7d4
mov dword [esp + 0xb0], 0x17
mov dword [esp + 0x20], 0
jmp 0x468f92
push 0x58c470
lea ecx, [ebp + 0x964]
call fcn.00519ab3
mov esi, 0x54d7d0
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.00473690
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.00473690
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.00473690
mov dword [esp + 0x1c], 0x54d7d4
mov dword [esp + 0xb0], 0x12
mov dword [esp + 0x20], ebx
jmp 0x468f92
mov esi, 0x54d7d0
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.00473690
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.00473690
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.00473690
mov dword [esp + 0x1c], 0x54d7d4
mov dword [esp + 0xb0], 0x18
jmp 0x468f8e
mov esi, 0x54d7d0
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.00473690
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.00473690
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.00473690
mov dword [esp + 0x1c], 0x54d7d4
mov dword [esp + 0xb0], 4
mov dword [esp + 0x20], edi
lea ecx, [esp + 0x24]
call fcn.00473690
lea ecx, [esp + 0x24]
mov dword [esp + 0xb0], 0xffffffff
mov dword [esp + 0x24], esi
call fcn.00473690
jmp 0x468fc5
push 0x58c45c
lea ecx, [edi + 0x964]
call fcn.00519ab3
xor eax, eax
mov ecx, dword [esp + 0xa8]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0xa4
ret 0x18