Function at 0x46bd60
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x553cff
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x98
push ebx
push ebp
push esi
mov esi, dword [esp + 0xc0]
push edi
mov edi, ecx
push esi
mov dword [esp + 0x6c], edi
call fcn.004ce7b0
add esp, 4
test eax, eax
jne 0x46cee5
mov ebp, dword [esi + 1]
inc esi
push ebp
call fcn.004d7430
add esp, 4
cmp eax, 0x5000000
jne 0x46ced5
cmp ebp, 0x500fffe
je 0x46ced5
lea eax, [edi + 0xc0]
add esi, 4
push eax
lea ecx, [esp + 0x20]
mov dword [esp + 0xc8], esi
call fcn.0040d7d0
mov dword [esp + 0x1c], 0x55fab8
xor esi, esi
push ebp
mov dword [esp + 0xb4], esi
mov dword [esp + 0x94], esi
call fcn.004d7410
mov ebx, eax
mov eax, dword [esp + 0xc4]
add esp, 4
cmp ebx, esi
je 0x46be92
cmp ebx, 0x10000000
je 0x46be33
cmp ebx, 0x20000000
jne 0x46c022
cmp eax, esi
je 0x46c022
lea esi, [eax + 0x18]
mov edi, 1
jmp 0x46bea1
cmp eax, esi
je 0x46c022
mov edx, dword [eax + 0xc]
lea ecx, [esp + 0x94]
push esi
push ecx
push edx
lea ecx, [edi + 0x2cc]
call fcn.004d7d40
test eax, eax
je 0x46c022
mov ecx, dword [esp + 0x94]
cmp dword [ecx + 0x44], esi
je 0x46be88
lea eax, [esp + 0x1c]
push esi
push eax
call fcn.004d37c0
lea esi, [esp + 0x1c]
mov dword [esp + 0x90], 1
mov edi, 3
jmp 0x46bea1
lea esi, [ecx + 0xc]
mov edi, 3
jmp 0x46bea1
mov ecx, dword [esp + 0x68]
mov edi, 4
lea esi, [ecx + 0x290]
lea edx, [esp + 0x14]
mov ecx, esi
push edx
push 0
push ebp
call fcn.004d75d0
test eax, eax
mov dword [esp + 0x3c], eax
jne 0x46beff
cmp ebx, 0x20000000
jne 0x46bee6
mov eax, dword [esp + 0xc0]
lea ecx, [esp + 0x14]
push ecx
push 0
lea esi, [eax + 0x38]
push ebp
mov ecx, esi
call fcn.004d75d0
test eax, eax
mov dword [esp + 0x3c], eax
mov edi, 2
jne 0x46beff
mov edx, dword [esp + 0x68]
push 0x5a313c
lea ecx, [edx + 0x968]
call fcn.005281a8
jmp 0x46c022
lea ecx, [esp + 0x40]
call fcn.00477df0
mov eax, dword [esp + 0x90]
mov ebx, dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
mov byte [esp + 0xb0], 1
je 0x46c03b
mov ecx, dword [esp + 0xbc]
mov ebp, dword [esp + 0x68]
push 0
lea eax, [esp + 0x14]
mov edx, dword [ebp + 0x4ac]
push 4
add ecx, 8
push eax
push ecx
push edx
call ebx
test eax, eax
je 0x46c009
mov eax, dword [esp + 0x10]
test eax, eax
je 0x46c009
mov edx, dword [0x5b16bc]
push 0
lea ecx, [esp + 0x14]
push 4
push ecx
push eax
push edx
call ebx
test eax, eax
je 0x46c009
mov eax, dword [esp + 0x10]
test eax, eax
je 0x46c009
mov ecx, eax
mov eax, dword [esp + 0x14]
add ecx, 4
xor ebx, ebx
test eax, eax
mov dword [esp + 0x10], ecx
jle 0x46bfdd
push 0
push ebx
mov ecx, esi
call fcn.004d74e0
mov edi, eax
mov eax, dword [esi]
push edi
mov ecx, esi
call dword [eax + 0x14]
push eax
call fcn.00478c40
add esp, 4
test eax, eax
jne 0x46bfd4
mov eax, dword [edi]
test eax, eax
jne 0x46bfc0
mov eax, 0x80000301
add edi, 6
lea ecx, [ebp + 0xc0]
push edi
push eax
call fcn.004127a0
add dword [esp + 0x10], eax
mov eax, dword [esp + 0x14]
inc ebx
cmp ebx, eax
jl 0x46bf94
mov eax, dword [esp + 0x3c]
lea ecx, [esp + 0x18]
lea edx, [esp + 0x40]
push ecx
mov ecx, dword [eax]
push edx
mov edx, dword [esp + 0x18]
push ecx
add eax, 6
push edx
push eax
call fcn.004ce550
add esp, 4
mov ecx, ebp
push eax
call fcn.0046bc50
jmp 0x46c070
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], 0x55f890
call fcn.00477ff0
lea ecx, [esp + 0x1c]
mov dword [esp + 0xb0], 0xffffffff
call fcn.00401e70
jmp 0x46cee5
mov edx, dword [esp + 0x3c]
lea eax, [esp + 0x18]
lea ecx, [esp + 0x40]
push eax
mov eax, dword [esp + 0xc0]
push ecx
mov ecx, dword [esp + 0xc8]
push edx
mov edx, dword [esp + 0xc4]
push ebp
push eax
push ecx
mov ecx, dword [esp + 0x80]
push edx
push edi
call fcn.0046ba90
lea ecx, [esp + 0x54]
mov dword [esp + 0x10], eax
call fcn.00477df0
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
call fcn.00477df0
xor eax, eax
mov dword [esp + 0x6c], eax
mov dword [esp + 0x78], eax
mov ecx, dword [esp + 0x10]
mov byte [esp + 0xb0], 3
cmp ecx, eax
mov eax, dword [esp + 0x50]
je 0x46c624
mov edx, dword [esp + 0xc4]
mov bl, byte [edx]
cmp bl, 0x37
je 0x46c624
mov ebp, dword [esp + 0x68]
xor edi, edi
push edi
lea eax, [esp + 0x14]
push 4
push eax
mov esi, ecx
push ecx
mov ecx, dword [ebp + 0x4ac]
push ecx
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
je 0x46ce57
cmp dword [esp + 0x10], edi
je 0x46ce57
mov eax, dword [esp + 0x50]
mov edx, dword [esp + 0x48]
neg eax
sbb eax, eax
and eax, edx
push eax
mov dword [esp + 0x40], eax
call fcn.004ce550
add esp, 4
cmp bl, 0x39
jne 0x46c38f
cmp eax, edi
jne 0x46c6e2
mov edx, dword [esp + 0x18]
push edx
call fcn.004e5910
mov esi, eax
mov eax, dword [esp + 0x1c]
push eax
call fcn.004e4ad0
add esp, 8
cmp esi, 2
mov edi, eax
jne 0x46c14d
cmp edi, 1
je 0x46c14d
cmp edi, 3
je 0x46c14d
mov esi, 1
mov ecx, dword [esp + 0xc4]
cmp esi, 2
mov ebx, dword [ecx + 1]
jne 0x46c2b2
push 1
lea edx, [esp + 0x1c]
push 1
push edx
lea ecx, [ebp + 0xc0]
call fcn.0044c1b0
cmp edi, 1
push 0
jne 0x46c1a7
mov ecx, dword [esp + 0x1c]
lea eax, [esp + 0x98]
push eax
push ecx
lea ecx, [ebp + 0x274]
call fcn.004d7d40
test eax, eax
je 0x46c74e
mov edx, dword [esp + 0x94]
lea edi, [edx + 0xc]
jmp 0x46c1fa
mov ecx, dword [esp + 0x1c]
lea eax, [esp + 0x9c]
push eax
push ecx
lea ecx, [ebp + 0x2cc]
call fcn.004d7d40
test eax, eax
je 0x46c74e
lea ecx, [esp + 0x24]
mov dword [esp + 0x20], 0
call fcn.00477ff0
mov ecx, dword [esp + 0x98]
lea edx, [esp + 0x1c]
push 0
push edx
call fcn.004d37c0
mov eax, dword [esp + 0x10]
lea edi, [esp + 0x1c]
add eax, 4
mov dword [esp + 0x10], eax
test edi, edi
je 0x46c74e
lea eax, [esp + 0x14]
mov ecx, edi
push eax
push 0
push ebx
call fcn.004d75d0
mov ecx, dword [esp + 0x14]
xor ebx, ebx
test ecx, ecx
mov dword [esp + 0x3c], eax
jle 0x46c26c
push 0
push ebx
mov ecx, edi
call fcn.004d74e0
mov edx, dword [edi]
mov esi, eax
push esi
mov ecx, edi
call dword [edx + 0x14]
push eax
call fcn.00478c40
add esp, 4
test eax, eax
jne 0x46c25f
mov eax, dword [esi]
test eax, eax
jne 0x46c24b
mov eax, 0x80000301
add esi, 6
lea ecx, [ebp + 0xc0]
push esi
push eax
call fcn.004127a0
add dword [esp + 0x10], eax
mov eax, dword [esp + 0x14]
inc ebx
cmp ebx, eax
jl 0x46c21f
mov eax, dword [esp + 0x3c]
lea ecx, [esp + 0x18]
lea edx, [esp + 0x40]
push ecx
mov ecx, dword [eax]
push edx
mov edx, dword [esp + 0x18]
push ecx
add eax, 6
push edx
push eax
call fcn.004ce550
add esp, 4
mov ecx, ebp
push eax
call fcn.0046bc50
mov ecx, eax
mov eax, dword [esp + 0xc4]
add eax, 9
mov dword [esp + 0x10], ecx
mov dword [esp + 0xc4], eax
mov eax, dword [esp + 0x50]
jmp 0x46c61c
cmp esi, 3
jne 0x46c88a
mov eax, dword [esp + 0x18]
xor edi, edi
push edi
push eax
lea ecx, [ebp + 0xc0]
call fcn.004544c0
cmp eax, edi
je 0x46c82e
cmp dword [eax + 0x30], edi
jle 0x46c82e
test dword [eax + 0x14], 0x800000
jne 0x46c82e
mov esi, dword [eax + 0x34]
lea edx, [ebx - 1]
mov dword [esp + 0x14], edx
mov ecx, dword [eax + 0x30]
cmp edx, ecx
jge 0x46c7c2
mov ecx, dword [esp + 0x10]
cmp edx, edi
jl 0x46c375
mov eax, dword [esi]
mov ebx, eax
shr ebx, 0x10
jne 0x46c323
mov ebx, dword [esp + 0x18]
and eax, 0xffff
shr ebx, 0x10
shl ebx, 0x10
or eax, ebx
cmp edi, edx
jne 0x46c34f
lea edx, [esp + 0x18]
push edx
lea edx, [esp + 0x44]
push edx
push eax
mov eax, dword [esi + 4]
push ecx
push eax
call fcn.004ce550
add esp, 4
mov ecx, ebp
push eax
call fcn.0046bc50
mov ecx, eax
mov dword [esp + 0x10], ecx
jmp 0x46c36c
mov ecx, dword [esi + 4]
push ecx
push eax
lea ecx, [ebp + 0xc0]
call fcn.004127a0
mov ecx, dword [esp + 0x10]
add ecx, eax
add esi, 0x1c
mov dword [esp + 0x10], ecx
mov edx, dword [esp + 0x14]
inc edi
cmp edi, edx
jle 0x46c309
mov eax, dword [esp + 0xc4]
add eax, 9
mov dword [esp + 0xc4], eax
mov eax, dword [esp + 0x50]
jmp 0x46c61c
cmp bl, 0x3a
jne 0x46cdfe
cmp eax, edi
jne 0x46c3d9
cmp dword [esp + 0x18], 0x80000005
jne 0x46c8ee
lea edx, [esp + 0x40]
mov ecx, ebp
push edx
push esi
call fcn.0046bcb0
test eax, eax
je 0x46c95a
mov eax, dword [esp + 0x50]
mov ecx, dword [esp + 0x48]
neg eax
sbb eax, eax
mov dword [esp + 0x18], 0x80000101
and eax, ecx
mov dword [esp + 0x3c], eax
mov ecx, dword [esp + 0xc4]
xor eax, eax
mov dword [esp + 0x64], eax
cmp byte [ecx], 0x3a
jne 0x46c513
mov edi, dword [esp + 0xc0]
mov esi, dword [esp + 0xb8]
mov ebx, ecx
mov al, byte [ebx + 1]
inc ebx
cmp al, 0x21
je 0x46c46c
cmp al, 0x38
je 0x46c42f
cmp al, 0x3b
jne 0x46c9b6
mov edx, dword [ebx + 1]
lea ecx, [esp + 0x54]
push edx
call fcn.004780b0
add ebx, 5
mov dword [esp + 0xc4], ebx
jmp 0x46c500
xor eax, eax
lea ecx, [esp + 0x7c]
mov dword [esp + 0x6c], eax
mov dword [esp + 0x78], eax
call fcn.00477ff0
mov ecx, dword [esp + 0xbc]
lea eax, [esp + 0x6c]
push eax
push ebx
push edi
push ecx
push esi
mov ecx, ebp
call fcn.0046cf10
test eax, eax
je 0x46ca1a
push ebx
call fcn.004ce570
add esp, 4
jmp 0x46c4a6
xor eax, eax
lea ecx, [esp + 0x7c]
mov dword [esp + 0x6c], eax
mov dword [esp + 0x78], eax
call fcn.00477ff0
mov eax, dword [esp + 0xbc]
lea edx, [esp + 0x6c]
inc ebx
push edx
push ebx
push edi
push eax
push esi
mov ecx, ebp
call fcn.0046b580
test eax, eax
je 0x46ca7e
mov ecx, ebx
call fcn.004cee70
add ebx, eax
mov eax, dword [esp + 0x6c]
test eax, eax
mov dword [esp + 0xc4], ebx
jne 0x46cae2
mov ecx, dword [esp + 0x78]
push ecx
call fcn.004d7480
add esp, 4
test eax, eax
je 0x46cae2
mov ecx, dword [esp + 0x78]
lea edx, [esp + 0xa0]
lea eax, [esp + 0x70]
push edx
push eax
push 0x80000301
push ecx
call fcn.004e6e20
mov edx, dword [esp + 0xb0]
add esp, 0x10
lea ecx, [esp + 0x54]
push edx
call fcn.004780b0
cmp byte [ebx], 0x3a
je 0x46c3ff
mov eax, dword [esp + 0x64]
xor ebx, ebx
cmp eax, ebx
jne 0x46c519
xor ebx, ebx
xor edx, edx
jmp 0x46c51d
mov edx, dword [esp + 0x5c]
shr eax, 2
mov edi, eax
je 0x46cd8e
cmp edi, 0x7f
jge 0x46cd8e
cmp edi, 1
je 0x46c5a2
mov ecx, dword [esp + 0x3c]
xor eax, eax
mov al, byte [ecx]
cmp edi, eax
jne 0x46cb56
cmp edi, 1
mov dword [esp + 0x14], ebx
mov dword [esp + 0x90], 1
jl 0x46c5eb
lea ebx, [edi - 1]
lea esi, [ecx + 5]
mov eax, dword [edx]
add edx, 4
dec eax
mov dword [esp + 0x9c], edx
test eax, eax
jle 0x46c5ca
cmp eax, dword [esi - 4]
mov ecx, esi
jge 0x46cca6
test ebx, ebx
jle 0x46c59c
mov edx, ebx
mov ebp, dword [ecx]
add ecx, 4
imul eax, ebp
dec edx
jne 0x46c586
mov edx, dword [esp + 0x9c]
mov ebp, dword [esp + 0x68]
add dword [esp + 0x14], eax
jmp 0x46c5d0
mov edx, dword [edx]
dec edx
mov dword [esp + 0x14], edx
js 0x46cbc6
mov eax, dword [esp + 0x3c]
push eax
call fcn.004ce510
mov ecx, dword [esp + 0x18]
add esp, 4
cmp ecx, eax
jge 0x46cc36
jmp 0x46c5eb
jl 0x46cd1a
mov eax, dword [esp + 0x90]
add esi, 4
inc eax
dec ebx
cmp eax, edi
mov dword [esp + 0x90], eax
jle 0x46c564
mov edx, dword [esp + 0x18]
lea ecx, [ebp + 0xc0]
push edx
call fcn.004127d0
imul eax, dword [esp + 0x14]
mov edx, dword [esp + 0x3c]
xor ecx, ecx
mov cl, byte [edx]
mov edx, dword [esp + 0x10]
add eax, edx
lea ecx, [eax + ecx*4 + 4]
xor eax, eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x50], eax
test ecx, ecx
jne 0x46c0b0
mov edx, dword [esp + 0xc8]
test edx, edx
je 0x46c635
mov esi, dword [esp + 0x18]
mov dword [edx], esi
mov esi, dword [esp + 0xcc]
test esi, esi
je 0x46c659
mov edi, dword [esp + 0x48]
neg eax
sbb eax, eax
and eax, edi
push eax
call fcn.004ce550
mov ecx, dword [esp + 0x14]
add esp, 4
mov dword [esi], eax
mov edi, ecx
mov esi, 0x55f890
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.00477ff0
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.00477ff0
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.00477ff0
mov dword [esp + 0x1c], 0x55f894
lea ecx, [esp + 0x24]
mov dword [esp + 0xb0], 0x19
mov dword [esp + 0x20], 0
call fcn.00477ff0
lea ecx, [esp + 0x24]
mov dword [esp + 0xb0], 0xffffffff
mov dword [esp + 0x24], esi
call fcn.00477ff0
mov eax, edi
jmp 0x46cee7
push 0x5a312c
lea ecx, [ebp + 0x968]
call fcn.005281a8
mov esi, 0x55f890
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.00477ff0
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.00477ff0
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.00477ff0
mov dword [esp + 0x1c], 0x55f894
mov dword [esp + 0xb0], 5
jmp 0x46ceae
push 0x5a310c
lea ecx, [ebp + 0x968]
call fcn.005281a8
mov esi, 0x55f890
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.00477ff0
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.00477ff0
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.00477ff0
mov dword [esp + 0x1c], 0x55f894
mov dword [esp + 0xb0], 7
mov dword [esp + 0x20], 0
jmp 0x46ceb2
push 0x5a312c
lea ecx, [ebp + 0x968]
call fcn.005281a8
mov esi, 0x55f890
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.00477ff0
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.00477ff0
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.00477ff0
mov dword [esp + 0x1c], 0x55f894
mov dword [esp + 0xb0], 9
jmp 0x46ceae
mov esi, 0x55f890
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.00477ff0
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.00477ff0
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.00477ff0
mov dword [esp + 0x1c], 0x55f894
mov dword [esp + 0xb0], 0xa
jmp 0x46ceae
mov esi, 0x55f890
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.00477ff0
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.00477ff0
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.00477ff0
mov dword [esp + 0x1c], 0x55f894
mov dword [esp + 0xb0], 0xb
mov dword [esp + 0x20], 0
jmp 0x46ceb2
push 0x5a30f8
lea ecx, [ebp + 0x968]
call fcn.005281a8
mov esi, 0x55f890
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.00477ff0
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.00477ff0
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.00477ff0
mov dword [esp + 0x1c], 0x55f894
mov dword [esp + 0xb0], 0xc
jmp 0x46ceae
mov esi, 0x55f890
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.00477ff0
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.00477ff0
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.00477ff0
mov dword [esp + 0x1c], 0x55f894
mov dword [esp + 0xb0], 0xd
jmp 0x46ceae
mov esi, 0x55f890
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.00477ff0
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.00477ff0
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.00477ff0
mov dword [esp + 0x1c], 0x55f894
mov dword [esp + 0xb0], 0x10
mov dword [esp + 0x20], 0
jmp 0x46ceb2
mov esi, 0x55f890
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.00477ff0
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.00477ff0
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.00477ff0
mov dword [esp + 0x1c], 0x55f894
mov dword [esp + 0xb0], 0xe
mov dword [esp + 0x20], 0
jmp 0x46ceb2
mov esi, 0x55f890
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.00477ff0
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.00477ff0
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.00477ff0
mov dword [esp + 0x1c], 0x55f894
mov dword [esp + 0xb0], 0xf
mov dword [esp + 0x20], 0
jmp 0x46ceb2
push 0x5a30d4
lea ecx, [ebp + 0x968]
call fcn.005281a8
mov esi, 0x55f890
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.00477ff0
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.00477ff0
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.00477ff0
mov dword [esp + 0x1c], 0x55f894
mov dword [esp + 0xb0], 0x11
mov dword [esp + 0x20], 0
jmp 0x46ceb2
push 0x5a30b4
lea ecx, [ebp + 0x968]
call fcn.005281a8
mov esi, 0x55f890
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.00477ff0
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.00477ff0
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.00477ff0
mov dword [esp + 0x1c], 0x55f894
mov dword [esp + 0xb0], 0x13
mov dword [esp + 0x20], ebx
jmp 0x46ceb2
push 0x5a3094
lea ecx, [ebp + 0x968]
call fcn.005281a8
mov esi, 0x55f890
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.00477ff0
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.00477ff0
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.00477ff0
mov dword [esp + 0x1c], 0x55f894
mov dword [esp + 0xb0], 0x14
mov dword [esp + 0x20], ebx
jmp 0x46ceb2
push 0x5a307c
lea ecx, [ebp + 0x968]
call fcn.005281a8
mov esi, 0x55f890
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.00477ff0
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.00477ff0
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.00477ff0
mov dword [esp + 0x1c], 0x55f894
mov dword [esp + 0xb0], 0x15
mov dword [esp + 0x20], ebx
jmp 0x46ceb2
push 0x5a307c
lea ecx, [ebp + 0x968]
call fcn.005281a8
mov esi, 0x55f890
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.00477ff0
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.00477ff0
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.00477ff0
mov dword [esp + 0x1c], 0x55f894
mov dword [esp + 0xb0], 0x16
mov dword [esp + 0x20], 0
jmp 0x46ceb2
push 0x5a3094
lea ecx, [ebp + 0x968]
call fcn.005281a8
mov esi, 0x55f890
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.00477ff0
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.00477ff0
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.00477ff0
mov dword [esp + 0x1c], 0x55f894
mov dword [esp + 0xb0], 0x17
mov dword [esp + 0x20], 0
jmp 0x46ceb2
push 0x5a306c
lea ecx, [ebp + 0x968]
call fcn.005281a8
mov esi, 0x55f890
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.00477ff0
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.00477ff0
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.00477ff0
mov dword [esp + 0x1c], 0x55f894
mov dword [esp + 0xb0], 0x12
mov dword [esp + 0x20], ebx
jmp 0x46ceb2
mov esi, 0x55f890
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.00477ff0
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.00477ff0
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.00477ff0
mov dword [esp + 0x1c], 0x55f894
mov dword [esp + 0xb0], 0x18
jmp 0x46ceae
mov esi, 0x55f890
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.00477ff0
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.00477ff0
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.00477ff0
mov dword [esp + 0x1c], 0x55f894
mov dword [esp + 0xb0], 4
mov dword [esp + 0x20], edi
lea ecx, [esp + 0x24]
call fcn.00477ff0
lea ecx, [esp + 0x24]
mov dword [esp + 0xb0], 0xffffffff
mov dword [esp + 0x24], esi
call fcn.00477ff0
jmp 0x46cee5
push 0x5a3058
lea ecx, [edi + 0x968]
call fcn.005281a8
xor eax, eax
mov ecx, dword [esp + 0xa8]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0xa4
ret 0x18