Function at 0x450b10
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x5e17b8
mov eax, dword fs:[0]
push eax
sub esp, 0x30
mov eax, dword [0x65fde0]
xor eax, esp
mov dword [esp + 0x28], eax
push esi
push edi
mov eax, dword [0x65fde0]
xor eax, esp
push eax
lea eax, [esp + 0x3c]
mov dword fs:[0], eax
mov eax, dword [esp + 0x4c]
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov dword [esp + 0x24], ecx
mov ecx, dword [eax + 8]
mov dword [esp + 0x28], edx
mov edx, dword [eax + 0xc]
mov dword [esp + 0x2c], ecx
lea ecx, [esp + 0xc]
mov dword [esp + 0x30], edx
call fcn.004035d0
push 0xff00ff
mov dword [esp + 0x48], 0
call fcn.00434460
add esp, 4
push eax
lea ecx, [esp + 0x10]
call fcn.004ba92d
lea ecx, [esp + 0xc]
call fcn.00403630
mov ecx, dword [ebx + 0x4108]
push eax
lea eax, [esp + 0x28]
push eax
push ecx
call fcn.0042edb0
add esp, 0xc
cmp dword [ebx + 0x1e0], 0
je 0x450c07
lea edi, [ebx + 0x4104]
lea eax, [ebx + 0x1dc]
call fcn.0046fa60
mov edx, dword [ebx + 0x1e4]
mov eax, dword [ebx + 0x1ec]
push edx
push eax
push 0
push 0
lea ecx, [esp + 0x24]
call fcn.004146f0
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
sub esp, 0x10
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [esp + 0x2c]
mov dword [eax + 4], edx
mov edx, dword [esp + 0x30]
mov dword [eax + 8], ecx
mov dword [eax + 0xc], edx
mov edx, edi
lea ecx, [ebx + 0x1dc]
call fcn.0046f930
cmp dword [ebx + 0x208], 0
je 0x450c6e
lea edi, [ebx + 0x4104]
lea eax, [ebx + 0x204]
call fcn.0046fa60
mov ecx, dword [ebx + 0x20c]
mov eax, dword [ebx + 0x40fc]
push ecx
push eax
sub eax, dword [ebx + 0x214]
push 0
push eax
lea ecx, [esp + 0x24]
call fcn.004146f0
mov edx, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
sub esp, 0x10
mov eax, esp
mov dword [eax], edx
mov edx, dword [esp + 0x2c]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x30]
mov dword [eax + 8], edx
mov dword [eax + 0xc], ecx
mov edx, edi
lea ecx, [ebx + 0x204]
call fcn.0046f930
cmp dword [ebx + 0x1f4], 0
je 0x450cdb
lea edi, [ebx + 0x4104]
lea eax, [ebx + 0x1f0]
call fcn.0046fa60
mov edx, dword [ebx + 0x1f8]
mov eax, dword [ebx + 0x40fc]
sub eax, dword [ebx + 0x214]
mov ecx, dword [ebx + 0x1ec]
push edx
push eax
push 0
push ecx
lea ecx, [esp + 0x24]
call fcn.004146f0
mov edx, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
sub esp, 0x10
mov eax, esp
mov dword [eax], edx
mov edx, dword [esp + 0x2c]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x30]
mov dword [eax + 8], edx
mov dword [eax + 0xc], ecx
mov edx, edi
lea ecx, [ebx + 0x1f0]
call fcn.0046f930
cmp dword [ebx + 0x21c], 0
je 0x450d44
lea edi, [ebx + 0x4104]
lea eax, [ebx + 0x218]
call fcn.0046fa60
mov eax, dword [ebx + 0x1e4]
mov edx, dword [ebx + 0x220]
mov ecx, dword [ebx + 0x228]
add edx, eax
push edx
push ecx
push eax
push 0
lea ecx, [esp + 0x24]
call fcn.004146f0
mov edx, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
sub esp, 0x10
mov eax, esp
mov dword [eax], edx
mov edx, dword [esp + 0x2c]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x30]
mov dword [eax + 8], edx
mov dword [eax + 0xc], ecx
mov edx, edi
lea ecx, [ebx + 0x218]
call fcn.0046f930
cmp dword [ebx + 0x26c], 0
je 0x450db6
lea edi, [ebx + 0x4104]
lea eax, [ebx + 0x268]
call fcn.0046fa60
mov edx, dword [ebx + 0x4100]
sub edx, dword [ebx + 0x2c0]
mov eax, dword [ebx + 0x40fc]
mov ecx, dword [ebx + 0x20c]
push edx
push eax
sub eax, dword [ebx + 0x278]
push ecx
push eax
lea ecx, [esp + 0x24]
call fcn.004146f0
mov edx, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
sub esp, 0x10
mov eax, esp
mov dword [eax], edx
mov edx, dword [esp + 0x2c]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x30]
mov dword [eax + 8], edx
mov dword [eax + 0xc], ecx
mov edx, edi
lea ecx, [ebx + 0x268]
call fcn.0046f930
cmp dword [ebx + 0x258], 0
je 0x450e2e
lea edi, [ebx + 0x4104]
lea eax, [ebx + 0x254]
call fcn.0046fa60
mov edx, dword [ebx + 0x4100]
sub edx, dword [ebx + 0x2ac]
mov eax, dword [ebx + 0x40fc]
sub eax, dword [ebx + 0x278]
mov ecx, dword [ebx + 0x1e4]
push edx
mov edx, dword [ebx + 0x228]
push eax
push ecx
push edx
lea ecx, [esp + 0x24]
call fcn.004146f0
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
sub esp, 0x10
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [esp + 0x2c]
mov dword [eax + 4], edx
mov edx, dword [esp + 0x30]
mov dword [eax + 8], ecx
mov dword [eax + 0xc], edx
mov edx, edi
lea ecx, [ebx + 0x254]
call fcn.0046f930
cmp dword [ebx + 0x244], 0
je 0x450ea1
lea edi, [ebx + 0x4104]
lea eax, [ebx + 0x240]
call fcn.0046fa60
mov eax, dword [ebx + 0x4100]
sub eax, dword [ebx + 0x298]
mov ecx, dword [ebx + 0x250]
mov edx, dword [ebx + 0x220]
add edx, dword [ebx + 0x1e4]
push eax
push ecx
push edx
push 0
lea ecx, [esp + 0x24]
call fcn.004146f0
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
sub esp, 0x10
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [esp + 0x2c]
mov dword [eax + 4], edx
mov edx, dword [esp + 0x30]
mov dword [eax + 8], ecx
mov dword [eax + 0xc], edx
mov edx, edi
lea ecx, [ebx + 0x240]
call fcn.0046f930
cmp dword [ebx + 0x294], 0
je 0x450f08
lea edi, [ebx + 0x4104]
lea eax, [ebx + 0x290]
call fcn.0046fa60
mov eax, dword [ebx + 0x4100]
mov ecx, dword [ebx + 0x2a0]
push eax
sub eax, dword [ebx + 0x298]
push ecx
push eax
push 0
lea ecx, [esp + 0x24]
call fcn.004146f0
mov edx, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
sub esp, 0x10
mov eax, esp
mov dword [eax], edx
mov edx, dword [esp + 0x2c]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x30]
mov dword [eax + 8], edx
mov dword [eax + 0xc], ecx
mov edx, edi
lea ecx, [ebx + 0x290]
call fcn.0046f930
cmp dword [ebx + 0x2bc], 0
je 0x450f74
lea edi, [ebx + 0x4104]
lea eax, [ebx + 0x2b8]
call fcn.0046fa60
mov eax, dword [ebx + 0x4100]
mov ecx, dword [ebx + 0x40fc]
push eax
sub eax, dword [ebx + 0x2c0]
push ecx
sub ecx, dword [ebx + 0x2c8]
push eax
push ecx
lea ecx, [esp + 0x24]
call fcn.004146f0
mov edx, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
sub esp, 0x10
mov eax, esp
mov dword [eax], edx
mov edx, dword [esp + 0x2c]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x30]
mov dword [eax + 8], edx
mov dword [eax + 0xc], ecx
mov edx, edi
lea ecx, [ebx + 0x2b8]
call fcn.0046f930
cmp dword [ebx + 0x2a8], 0
je 0x450fe6
lea edi, [ebx + 0x4104]
lea eax, [ebx + 0x2a4]
call fcn.0046fa60
mov eax, dword [ebx + 0x4100]
mov edx, dword [ebx + 0x40fc]
sub edx, dword [ebx + 0x2c8]
push eax
sub eax, dword [ebx + 0x2ac]
push edx
push eax
mov eax, dword [ebx + 0x2a0]
push eax
lea ecx, [esp + 0x24]
call fcn.004146f0
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
sub esp, 0x10
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [esp + 0x2c]
mov dword [eax + 4], edx
mov edx, dword [esp + 0x30]
mov dword [eax + 8], ecx
mov dword [eax + 0xc], edx
mov edx, edi
lea ecx, [ebx + 0x2a4]
call fcn.0046f930
mov eax, dword [ebx + 0x37f8]
push eax
call fcn.00435040
add esp, 4
test eax, eax
je 0x451058
mov edx, dword [ebx + 0x37f8]
lea ecx, [esp + 0x14]
push ecx
push edx
call fcn.004345e0
mov ecx, dword [ebx + 0x20]
lea eax, [esp + 0x1c]
push eax
push ecx
call fcn.00434640
mov eax, dword [ebx + 0x20]
lea edx, [esp + 0x2c]
push edx
push eax
call fcn.00434640
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x30]
add esp, 8
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [esp + 0x2c]
mov dword [eax + 4], edx
mov edx, dword [esp + 0x30]
mov dword [eax + 8], ecx
mov dword [eax + 0xc], edx
lea eax, [ebx + 0x37d8]
lea ecx, [ebx + 0x4104]
push eax
call fcn.0043c250
mov ecx, dword [ebx + 0x391c]
push ecx
call fcn.00435040
add esp, 4
test eax, eax
je 0x4510ca
mov eax, dword [ebx + 0x391c]
lea edx, [esp + 0x14]
push edx
push eax
call fcn.004345e0
mov edx, dword [ebx + 0x20]
lea ecx, [esp + 0x1c]
push ecx
push edx
call fcn.00434640
mov ecx, dword [ebx + 0x20]
lea eax, [esp + 0x2c]
push eax
push ecx
call fcn.00434640
mov edx, dword [esp + 0x2c]
mov ecx, dword [esp + 0x30]
add esp, 8
mov eax, esp
mov dword [eax], edx
mov edx, dword [esp + 0x2c]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x30]
mov dword [eax + 8], edx
lea edx, [ebx + 0x38fc]
mov dword [eax + 0xc], ecx
lea ecx, [ebx + 0x4104]
push edx
call fcn.0043c250
mov eax, dword [ebx + 0x3a40]
push eax
call fcn.00435040
add esp, 4
test eax, eax
je 0x45113c
mov edx, dword [ebx + 0x3a40]
lea ecx, [esp + 0x14]
push ecx
push edx
call fcn.004345e0
mov ecx, dword [ebx + 0x20]
lea eax, [esp + 0x1c]
push eax
push ecx
call fcn.00434640
mov eax, dword [ebx + 0x20]
lea edx, [esp + 0x2c]
push edx
push eax
call fcn.00434640
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x30]
add esp, 8
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [esp + 0x2c]
mov dword [eax + 4], edx
mov edx, dword [esp + 0x30]
mov dword [eax + 8], ecx
mov dword [eax + 0xc], edx
lea eax, [ebx + 0x3a20]
lea ecx, [ebx + 0x4104]
push eax
call fcn.0043c250
mov ecx, dword [ebx + 0x3b64]
push ecx
call fcn.00435040
add esp, 4
test eax, eax
je 0x4511ae
mov eax, dword [ebx + 0x3b64]
lea edx, [esp + 0x14]
push edx
push eax
call fcn.004345e0
mov edx, dword [ebx + 0x20]
lea ecx, [esp + 0x1c]
push ecx
push edx
call fcn.00434640
mov ecx, dword [ebx + 0x20]
lea eax, [esp + 0x2c]
push eax
push ecx
call fcn.00434640
mov edx, dword [esp + 0x2c]
mov ecx, dword [esp + 0x30]
add esp, 8
mov eax, esp
mov dword [eax], edx
mov edx, dword [esp + 0x2c]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x30]
mov dword [eax + 8], edx
lea edx, [ebx + 0x3b44]
mov dword [eax + 0xc], ecx
lea ecx, [ebx + 0x4104]
push edx
call fcn.0043c250
mov eax, dword [ebx + 0x3c88]
push eax
call fcn.00435040
add esp, 4
test eax, eax
je 0x451220
mov edx, dword [ebx + 0x3c88]
lea ecx, [esp + 0x14]
push ecx
push edx
call fcn.004345e0
mov ecx, dword [ebx + 0x20]
lea eax, [esp + 0x1c]
push eax
push ecx
call fcn.00434640
mov eax, dword [ebx + 0x20]
lea edx, [esp + 0x2c]
push edx
push eax
call fcn.00434640
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x30]
add esp, 8
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [esp + 0x2c]
mov dword [eax + 4], edx
mov edx, dword [esp + 0x30]
mov dword [eax + 8], ecx
mov dword [eax + 0xc], edx
lea eax, [ebx + 0x3c68]
lea ecx, [ebx + 0x4104]
push eax
call fcn.0043c250
mov ecx, dword [ebx + 0x3dac]
push ecx
call fcn.00435040
add esp, 4
test eax, eax
je 0x451292
mov eax, dword [ebx + 0x3dac]
lea edx, [esp + 0x14]
push edx
push eax
call fcn.004345e0
mov edx, dword [ebx + 0x20]
lea ecx, [esp + 0x1c]
push ecx
push edx
call fcn.00434640
mov ecx, dword [ebx + 0x20]
lea eax, [esp + 0x2c]
push eax
push ecx
call fcn.00434640
mov edx, dword [esp + 0x2c]
mov ecx, dword [esp + 0x30]
add esp, 8
mov eax, esp
mov dword [eax], edx
mov edx, dword [esp + 0x2c]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x30]
mov dword [eax + 8], edx
lea edx, [ebx + 0x3d8c]
mov dword [eax + 0xc], ecx
lea ecx, [ebx + 0x4104]
push edx
call fcn.0043c250
mov eax, dword [ebx + 0x3ed0]
push eax
call fcn.00435040
add esp, 4
test eax, eax
je 0x451304
mov edx, dword [ebx + 0x3ed0]
lea ecx, [esp + 0x14]
push ecx
push edx
call fcn.004345e0
mov ecx, dword [ebx + 0x20]
lea eax, [esp + 0x1c]
push eax
push ecx
call fcn.00434640
mov eax, dword [ebx + 0x20]
lea edx, [esp + 0x2c]
push edx
push eax
call fcn.00434640
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x30]
add esp, 8
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [esp + 0x2c]
mov dword [eax + 4], edx
mov edx, dword [esp + 0x30]
mov dword [eax + 8], ecx
mov dword [eax + 0xc], edx
lea eax, [ebx + 0x3eb0]
lea ecx, [ebx + 0x4104]
push eax
call fcn.0043c250
mov ecx, dword [ebx + 0x97c]
push ecx
call fcn.00435040
add esp, 4
test eax, eax
je 0x451375
mov eax, dword [ebx + 0x97c]
lea edx, [esp + 0x14]
push edx
push eax
call fcn.004345e0
mov edx, dword [ebx + 0x20]
lea ecx, [esp + 0x1c]
push ecx
push edx
call fcn.00434640
mov ecx, dword [ebx + 0x20]
lea eax, [esp + 0x2c]
push eax
push ecx
call fcn.00434640
mov edx, dword [esp + 0x2c]
mov ecx, dword [esp + 0x30]
add esp, 8
mov eax, esp
mov dword [eax], edx
mov edx, dword [esp + 0x2c]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x30]
mov dword [eax + 8], edx
lea esi, [ebx + 0x4104]
lea edi, [ebx + 0x95c]
mov dword [eax + 0xc], ecx
call fcn.0040afa0
mov edx, dword [ebx + 0xb24]
push edx
call fcn.00435040
add esp, 4
test eax, eax
je 0x4513e6
mov ecx, dword [ebx + 0xb24]
lea eax, [esp + 0x14]
push eax
push ecx
call fcn.004345e0
mov eax, dword [ebx + 0x20]
lea edx, [esp + 0x1c]
push edx
push eax
call fcn.00434640
mov edx, dword [ebx + 0x20]
lea ecx, [esp + 0x2c]
push ecx
push edx
call fcn.00434640
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x30]
add esp, 8
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [esp + 0x2c]
mov dword [eax + 4], edx
mov edx, dword [esp + 0x30]
mov dword [eax + 8], ecx
lea esi, [ebx + 0x4104]
lea edi, [ebx + 0xb04]
mov dword [eax + 0xc], edx
call fcn.0040afa0
mov eax, dword [ebx + 0xccc]
push eax
call fcn.00435040
add esp, 4
test eax, eax
je 0x451457
mov edx, dword [ebx + 0xccc]
lea ecx, [esp + 0x14]
push ecx
push edx
call fcn.004345e0
mov ecx, dword [ebx + 0x20]
lea eax, [esp + 0x1c]
push eax
push ecx
call fcn.00434640
mov eax, dword [ebx + 0x20]
lea edx, [esp + 0x2c]
push edx
push eax
call fcn.00434640
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x30]
add esp, 8
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [esp + 0x2c]
mov dword [eax + 4], edx
mov edx, dword [esp + 0x30]
mov dword [eax + 8], ecx
lea esi, [ebx + 0x4104]
lea edi, [ebx + 0xcac]
mov dword [eax + 0xc], edx
call fcn.0040afa0
mov eax, dword [ebx + 0x101c]
push eax
call fcn.00435040
add esp, 4
test eax, eax
je 0x4514c8
mov edx, dword [ebx + 0x101c]
lea ecx, [esp + 0x14]
push ecx
push edx
call fcn.004345e0
mov ecx, dword [ebx + 0x20]
lea eax, [esp + 0x1c]
push eax
push ecx
call fcn.00434640
mov eax, dword [ebx + 0x20]
lea edx, [esp + 0x2c]
push edx
push eax
call fcn.00434640
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x30]
add esp, 8
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [esp + 0x2c]
mov dword [eax + 4], edx
mov edx, dword [esp + 0x30]
mov dword [eax + 8], ecx
lea esi, [ebx + 0x4104]
lea edi, [ebx + 0xffc]
mov dword [eax + 0xc], edx
call fcn.0040afa0
mov eax, dword [ebx + 0x1514]
push eax
call fcn.00435040
add esp, 4
test eax, eax
je 0x451539
mov edx, dword [ebx + 0x1514]
lea ecx, [esp + 0x14]
push ecx
push edx
call fcn.004345e0
mov ecx, dword [ebx + 0x20]
lea eax, [esp + 0x1c]
push eax
push ecx
call fcn.00434640
mov eax, dword [ebx + 0x20]
lea edx, [esp + 0x2c]
push edx
push eax
call fcn.00434640
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x30]
add esp, 8
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [esp + 0x2c]
mov dword [eax + 4], edx
mov edx, dword [esp + 0x30]
mov dword [eax + 8], ecx
lea esi, [ebx + 0x4104]
lea edi, [ebx + 0x14f4]
mov dword [eax + 0xc], edx
call fcn.0040afa0
mov eax, dword [ebx + 0x11c4]
push eax
call fcn.00435040
add esp, 4
test eax, eax
je 0x4515aa
mov edx, dword [ebx + 0x11c4]
lea ecx, [esp + 0x14]
push ecx
push edx
call fcn.004345e0
mov ecx, dword [ebx + 0x20]
lea eax, [esp + 0x1c]
push eax
push ecx
call fcn.00434640
mov eax, dword [ebx + 0x20]
lea edx, [esp + 0x2c]
push edx
push eax
call fcn.00434640
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x30]
add esp, 8
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [esp + 0x2c]
mov dword [eax + 4], edx
mov edx, dword [esp + 0x30]
mov dword [eax + 8], ecx
lea esi, [ebx + 0x4104]
lea edi, [ebx + 0x11a4]
mov dword [eax + 0xc], edx
call fcn.0040afa0
mov eax, dword [ebx + 0x136c]
push eax
call fcn.00435040
add esp, 4
test eax, eax
je 0x45161b
mov edx, dword [ebx + 0x136c]
lea ecx, [esp + 0x14]
push ecx
push edx
call fcn.004345e0
mov ecx, dword [ebx + 0x20]
lea eax, [esp + 0x1c]
push eax
push ecx
call fcn.00434640
mov eax, dword [ebx + 0x20]
lea edx, [esp + 0x2c]
push edx
push eax
call fcn.00434640
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x30]
add esp, 8
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [esp + 0x2c]
mov dword [eax + 4], edx
mov edx, dword [esp + 0x30]
mov dword [eax + 8], ecx
lea esi, [ebx + 0x4104]
lea edi, [ebx + 0x134c]
mov dword [eax + 0xc], edx
call fcn.0040afa0
mov eax, dword [ebx + 0x348c]
push eax
call fcn.00435040
add esp, 4
test eax, eax
je 0x45168d
mov edx, dword [ebx + 0x348c]
lea ecx, [esp + 0x14]
push ecx
push edx
call fcn.004345e0
mov ecx, dword [ebx + 0x20]
lea eax, [esp + 0x1c]
push eax
push ecx
call fcn.00434640
mov eax, dword [ebx + 0x20]
lea edx, [esp + 0x2c]
push edx
push eax
call fcn.00434640
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x30]
add esp, 8
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [esp + 0x2c]
mov dword [eax + 4], edx
mov edx, dword [esp + 0x30]
mov dword [eax + 8], ecx
mov dword [eax + 0xc], edx
lea eax, [ebx + 0x346c]
lea ecx, [ebx + 0x4104]
push eax
call fcn.0043c250
mov ecx, dword [ebx + 0x35b0]
push ecx
call fcn.00435040
add esp, 4
test eax, eax
je 0x4516ff
mov eax, dword [ebx + 0x35b0]
lea edx, [esp + 0x14]
push edx
push eax
call fcn.004345e0
mov edx, dword [ebx + 0x20]
lea ecx, [esp + 0x1c]
push ecx
push edx
call fcn.00434640
mov ecx, dword [ebx + 0x20]
lea eax, [esp + 0x2c]
push eax
push ecx
call fcn.00434640
mov edx, dword [esp + 0x2c]
mov ecx, dword [esp + 0x30]
add esp, 8
mov eax, esp
mov dword [eax], edx
mov edx, dword [esp + 0x2c]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x30]
mov dword [eax + 8], edx
lea edx, [ebx + 0x3590]
mov dword [eax + 0xc], ecx
lea ecx, [ebx + 0x4104]
push edx
call fcn.0043c250
mov eax, dword [ebx + 0x36d4]
push eax
call fcn.00435040
add esp, 4
test eax, eax
je 0x451771
mov edx, dword [ebx + 0x36d4]
lea ecx, [esp + 0x14]
push ecx
push edx
call fcn.004345e0
mov ecx, dword [ebx + 0x20]
lea eax, [esp + 0x1c]
push eax
push ecx
call fcn.00434640
mov eax, dword [ebx + 0x20]
lea edx, [esp + 0x2c]
push edx
push eax
call fcn.00434640
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x30]
add esp, 8
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [esp + 0x2c]
mov dword [eax + 4], edx
mov edx, dword [esp + 0x30]
mov dword [eax + 8], ecx
mov dword [eax + 0xc], edx
lea eax, [ebx + 0x36b4]
lea ecx, [ebx + 0x4104]
push eax
call fcn.0043c250
mov ecx, dword [ebx + 0xe74]
push ecx
call fcn.00435040
add esp, 4
test eax, eax
je 0x4517e2
mov eax, dword [ebx + 0xe74]
lea edx, [esp + 0x14]
push edx
push eax
call fcn.004345e0
mov edx, dword [ebx + 0x20]
lea ecx, [esp + 0x1c]
push ecx
push edx
call fcn.00434640
mov ecx, dword [ebx + 0x20]
lea eax, [esp + 0x2c]
push eax
push ecx
call fcn.00434640
mov edx, dword [esp + 0x2c]
mov ecx, dword [esp + 0x30]
add esp, 8
mov eax, esp
mov dword [eax], edx
mov edx, dword [esp + 0x2c]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x30]
mov dword [eax + 8], edx
lea esi, [ebx + 0x4104]
lea edi, [ebx + 0xe54]
mov dword [eax + 0xc], ecx
call fcn.0040afa0
mov edx, dword [ebx + 0x16bc]
push edx
call fcn.00435040
add esp, 4
test eax, eax
je 0x451853
mov ecx, dword [ebx + 0x16bc]
lea eax, [esp + 0x14]
push eax
push ecx
call fcn.004345e0
mov eax, dword [ebx + 0x20]
lea edx, [esp + 0x1c]
push edx
push eax
call fcn.00434640
mov edx, dword [ebx + 0x20]
lea ecx, [esp + 0x2c]
push ecx
push edx
call fcn.00434640
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x30]
add esp, 8
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [esp + 0x2c]
mov dword [eax + 4], edx
mov edx, dword [esp + 0x30]
mov dword [eax + 8], ecx
lea esi, [ebx + 0x4104]
lea edi, [ebx + 0x169c]
mov dword [eax + 0xc], edx
call fcn.0040afa0
mov eax, dword [ebx + 0x1864]
push eax
call fcn.00435040
add esp, 4
test eax, eax
je 0x4518c4
mov edx, dword [ebx + 0x1864]
lea ecx, [esp + 0x14]
push ecx
push edx
call fcn.004345e0
mov ecx, dword [ebx + 0x20]
lea eax, [esp + 0x1c]
push eax
push ecx
call fcn.00434640
mov eax, dword [ebx + 0x20]
lea edx, [esp + 0x2c]
push edx
push eax
call fcn.00434640
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x30]
add esp, 8
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [esp + 0x2c]
mov dword [eax + 4], edx
mov edx, dword [esp + 0x30]
mov dword [eax + 8], ecx
lea esi, [ebx + 0x4104]
lea edi, [ebx + 0x1844]
mov dword [eax + 0xc], edx
call fcn.0040afa0
mov eax, dword [ebx + 0x1f04]
push eax
call fcn.00435040
add esp, 4
test eax, eax
je 0x451935
mov edx, dword [ebx + 0x1f04]
lea ecx, [esp + 0x14]
push ecx
push edx
call fcn.004345e0
mov ecx, dword [ebx + 0x20]
lea eax, [esp + 0x1c]
push eax
push ecx
call fcn.00434640
mov eax, dword [ebx + 0x20]
lea edx, [esp + 0x2c]
push edx
push eax
call fcn.00434640
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x30]
add esp, 8
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [esp + 0x2c]
mov dword [eax + 4], edx
mov edx, dword [esp + 0x30]
mov dword [eax + 8], ecx
lea esi, [ebx + 0x4104]
lea edi, [ebx + 0x1ee4]
mov dword [eax + 0xc], edx
call fcn.0040afa0
mov eax, dword [ebx + 0x20ac]
push eax
call fcn.00435040
add esp, 4
test eax, eax
je 0x4519a6
mov edx, dword [ebx + 0x20ac]
lea ecx, [esp + 0x14]
push ecx
push edx
call fcn.004345e0
mov ecx, dword [ebx + 0x20]
lea eax, [esp + 0x1c]
push eax
push ecx
call fcn.00434640
mov eax, dword [ebx + 0x20]
lea edx, [esp + 0x2c]
push edx
push eax
call fcn.00434640
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x30]
add esp, 8
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [esp + 0x2c]
mov dword [eax + 4], edx
mov edx, dword [esp + 0x30]
mov dword [eax + 8], ecx
lea esi, [ebx + 0x4104]
lea edi, [ebx + 0x208c]
mov dword [eax + 0xc], edx
call fcn.0040afa0
mov eax, dword [ebx + 0x2254]
push eax
call fcn.00435040
add esp, 4
test eax, eax
je 0x451a17
mov edx, dword [ebx + 0x2254]
lea ecx, [esp + 0x14]
push ecx
push edx
call fcn.004345e0
mov ecx, dword [ebx + 0x20]
lea eax, [esp + 0x1c]
push eax
push ecx
call fcn.00434640
mov eax, dword [ebx + 0x20]
lea edx, [esp + 0x2c]
push edx
push eax
call fcn.00434640
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x30]
add esp, 8
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [esp + 0x2c]
mov dword [eax + 4], edx
mov edx, dword [esp + 0x30]
mov dword [eax + 8], ecx
lea esi, [ebx + 0x4104]
lea edi, [ebx + 0x2234]
mov dword [eax + 0xc], edx
call fcn.0040afa0
mov eax, dword [ebx + 0x2f94]
push eax
call fcn.00435040
add esp, 4
test eax, eax
je 0x451a88
mov edx, dword [ebx + 0x2f94]
lea ecx, [esp + 0x14]
push ecx
push edx
call fcn.004345e0
mov ecx, dword [ebx + 0x20]
lea eax, [esp + 0x1c]
push eax
push ecx
call fcn.00434640
mov eax, dword [ebx + 0x20]
lea edx, [esp + 0x2c]
push edx
push eax
call fcn.00434640
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x30]
add esp, 8
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [esp + 0x2c]
mov dword [eax + 4], edx
mov edx, dword [esp + 0x30]
mov dword [eax + 8], ecx
lea esi, [ebx + 0x4104]
lea edi, [ebx + 0x2f74]
mov dword [eax + 0xc], edx
call fcn.0040afa0
mov eax, dword [ebx + 0x23fc]
push eax
call fcn.00435040
add esp, 4
test eax, eax
je 0x451af9
mov edx, dword [ebx + 0x23fc]
lea ecx, [esp + 0x14]
push ecx
push edx
call fcn.004345e0
mov ecx, dword [ebx + 0x20]
lea eax, [esp + 0x1c]
push eax
push ecx
call fcn.00434640
mov eax, dword [ebx + 0x20]
lea edx, [esp + 0x2c]
push edx
push eax
call fcn.00434640
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x30]
add esp, 8
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [esp + 0x2c]
mov dword [eax + 4], edx
mov edx, dword [esp + 0x30]
mov dword [eax + 8], ecx
lea esi, [ebx + 0x4104]
lea edi, [ebx + 0x23dc]
mov dword [eax + 0xc], edx
call fcn.0040afa0
mov eax, dword [ebx + 0x28f4]
push eax
call fcn.00435040
add esp, 4
test eax, eax
je 0x451b6a
mov edx, dword [ebx + 0x28f4]
lea ecx, [esp + 0x14]
push ecx
push edx
call fcn.004345e0
mov ecx, dword [ebx + 0x20]
lea eax, [esp + 0x1c]
push eax
push ecx
call fcn.00434640
mov eax, dword [ebx + 0x20]
lea edx, [esp + 0x2c]
push edx
push eax
call fcn.00434640
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x30]
add esp, 8
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [esp + 0x2c]
mov dword [eax + 4], edx
mov edx, dword [esp + 0x30]
mov dword [eax + 8], ecx
lea esi, [ebx + 0x4104]
lea edi, [ebx + 0x28d4]
mov dword [eax + 0xc], edx
call fcn.0040afa0
mov eax, dword [ebx + 0x2a9c]
push eax
call fcn.00435040
add esp, 4
test eax, eax
je 0x451bdb
mov edx, dword [ebx + 0x2a9c]
lea ecx, [esp + 0x14]
push ecx
push edx
call fcn.004345e0
mov ecx, dword [ebx + 0x20]
lea eax, [esp + 0x1c]
push eax
push ecx
call fcn.00434640
mov eax, dword [ebx + 0x20]
lea edx, [esp + 0x2c]
push edx
push eax
call fcn.00434640
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x30]
add esp, 8
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [esp + 0x2c]
mov dword [eax + 4], edx
mov edx, dword [esp + 0x30]
mov dword [eax + 8], ecx
lea esi, [ebx + 0x4104]
lea edi, [ebx + 0x2a7c]
mov dword [eax + 0xc], edx
call fcn.0040afa0
mov eax, dword [ebx + 0x1a0c]
push eax
call fcn.00435040
add esp, 4
test eax, eax
je 0x451c4c
mov edx, dword [ebx + 0x1a0c]
lea ecx, [esp + 0x14]
push ecx
push edx
call fcn.004345e0
mov ecx, dword [ebx + 0x20]
lea eax, [esp + 0x1c]
push eax
push ecx
call fcn.00434640
mov eax, dword [ebx + 0x20]
lea edx, [esp + 0x2c]
push edx
push eax
call fcn.00434640
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x30]
add esp, 8
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [esp + 0x2c]
mov dword [eax + 4], edx
mov edx, dword [esp + 0x30]
mov dword [eax + 8], ecx
lea esi, [ebx + 0x4104]
lea edi, [ebx + 0x19ec]
mov dword [eax + 0xc], edx
call fcn.0040afa0
mov eax, dword [ebx + 0x25a4]
push eax
call fcn.00435040
add esp, 4
test eax, eax
je 0x451cbd
mov edx, dword [ebx + 0x25a4]
lea ecx, [esp + 0x14]
push ecx
push edx
call fcn.004345e0
mov ecx, dword [ebx + 0x20]
lea eax, [esp + 0x1c]
push eax
push ecx
call fcn.00434640
mov eax, dword [ebx + 0x20]
lea edx, [esp + 0x2c]
push edx
push eax
call fcn.00434640
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x30]
add esp, 8
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [esp + 0x2c]
mov dword [eax + 4], edx
mov edx, dword [esp + 0x30]
mov dword [eax + 8], ecx
lea esi, [ebx + 0x4104]
lea edi, [ebx + 0x2584]
mov dword [eax + 0xc], edx
call fcn.0040afa0
mov eax, dword [ebx + 0x274c]
push eax
call fcn.00435040
add esp, 4
test eax, eax
je 0x451d2e
mov edx, dword [ebx + 0x274c]
lea ecx, [esp + 0x14]
push ecx
push edx
call fcn.004345e0
mov ecx, dword [ebx + 0x20]
lea eax, [esp + 0x1c]
push eax
push ecx
call fcn.00434640
mov eax, dword [ebx + 0x20]
lea edx, [esp + 0x2c]
push edx
push eax
call fcn.00434640
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x30]
add esp, 8
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [esp + 0x2c]
mov dword [eax + 4], edx
mov edx, dword [esp + 0x30]
mov dword [eax + 8], ecx
lea esi, [ebx + 0x4104]
lea edi, [ebx + 0x272c]
mov dword [eax + 0xc], edx
call fcn.0040afa0
mov eax, dword [ebx + 0x1bb4]
push eax
call fcn.00435040
add esp, 4
test eax, eax
je 0x451d9f
mov edx, dword [ebx + 0x1bb4]
lea ecx, [esp + 0x14]
push ecx
push edx
call fcn.004345e0
mov ecx, dword [ebx + 0x20]
lea eax, [esp + 0x1c]
push eax
push ecx
call fcn.00434640
mov eax, dword [ebx + 0x20]
lea edx, [esp + 0x2c]
push edx
push eax
call fcn.00434640
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x30]
add esp, 8
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [esp + 0x2c]
mov dword [eax + 4], edx
mov edx, dword [esp + 0x30]
mov dword [eax + 8], ecx
lea esi, [ebx + 0x4104]
lea edi, [ebx + 0x1b94]
mov dword [eax + 0xc], edx
call fcn.0040afa0
mov eax, dword [ebx + 0x1d5c]
push eax
call fcn.00435040
add esp, 4
test eax, eax
je 0x451e10
mov edx, dword [ebx + 0x1d5c]
lea ecx, [esp + 0x14]
push ecx
push edx
call fcn.004345e0
mov ecx, dword [ebx + 0x20]
lea eax, [esp + 0x1c]
push eax
push ecx
call fcn.00434640
mov eax, dword [ebx + 0x20]
lea edx, [esp + 0x2c]
push edx
push eax
call fcn.00434640
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x30]
add esp, 8
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [esp + 0x2c]
mov dword [eax + 4], edx
mov edx, dword [esp + 0x30]
mov dword [eax + 8], ecx
lea esi, [ebx + 0x4104]
lea edi, [ebx + 0x1d3c]
mov dword [eax + 0xc], edx
call fcn.0040afa0
mov eax, dword [ebx + 0x2c44]
push eax
call fcn.00435040
add esp, 4
test eax, eax
je 0x451e81
mov edx, dword [ebx + 0x2c44]
lea ecx, [esp + 0x14]
push ecx
push edx
call fcn.004345e0
mov ecx, dword [ebx + 0x20]
lea eax, [esp + 0x1c]
push eax
push ecx
call fcn.00434640
mov eax, dword [ebx + 0x20]
lea edx, [esp + 0x2c]
push edx
push eax
call fcn.00434640
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x30]
add esp, 8
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [esp + 0x2c]
mov dword [eax + 4], edx
mov edx, dword [esp + 0x30]
mov dword [eax + 8], ecx
lea esi, [ebx + 0x4104]
lea edi, [ebx + 0x2c24]
mov dword [eax + 0xc], edx
call fcn.0040afa0
mov eax, dword [ebx + 0x2dec]
push eax
call fcn.00435040
add esp, 4
test eax, eax
je 0x451ef2
mov edx, dword [ebx + 0x2dec]
lea ecx, [esp + 0x14]
push ecx
push edx
call fcn.004345e0
mov ecx, dword [ebx + 0x20]
lea eax, [esp + 0x1c]
push eax
push ecx
call fcn.00434640
mov eax, dword [ebx + 0x20]
lea edx, [esp + 0x2c]
push edx
push eax
call fcn.00434640
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x30]
add esp, 8
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [esp + 0x2c]
mov dword [eax + 4], edx
mov edx, dword [esp + 0x30]
mov dword [eax + 8], ecx
lea esi, [ebx + 0x4104]
lea edi, [ebx + 0x2dcc]
mov dword [eax + 0xc], edx
call fcn.0040afa0
mov eax, dword [ebx + 0x313c]
push eax
call fcn.00435040
add esp, 4
test eax, eax
je 0x451f63
mov edx, dword [ebx + 0x313c]
lea ecx, [esp + 0x14]
push ecx
push edx
call fcn.004345e0
mov ecx, dword [ebx + 0x20]
lea eax, [esp + 0x1c]
push eax
push ecx
call fcn.00434640
mov eax, dword [ebx + 0x20]
lea edx, [esp + 0x2c]
push edx
push eax
call fcn.00434640
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x30]
add esp, 8
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [esp + 0x2c]
mov dword [eax + 4], edx
mov edx, dword [esp + 0x30]
mov dword [eax + 8], ecx
lea esi, [ebx + 0x4104]
lea edi, [ebx + 0x311c]
mov dword [eax + 0xc], edx
call fcn.0040afa0
mov eax, dword [ebx + 0x32e4]
push eax
call fcn.00435040
add esp, 4
test eax, eax
je 0x451fd4
mov edx, dword [ebx + 0x32e4]
lea ecx, [esp + 0x14]
push ecx
push edx
call fcn.004345e0
mov ecx, dword [ebx + 0x20]
lea eax, [esp + 0x1c]
push eax
push ecx
call fcn.00434640
mov eax, dword [ebx + 0x20]
lea edx, [esp + 0x2c]
push edx
push eax
call fcn.00434640
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x30]
add esp, 8
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [esp + 0x2c]
mov dword [eax + 4], edx
mov edx, dword [esp + 0x30]
mov dword [eax + 8], ecx
lea esi, [ebx + 0x4104]
lea edi, [ebx + 0x32c4]
mov dword [eax + 0xc], edx
call fcn.0040afa0
cmp dword [ebx + 0x1c0f8], 0
je 0x452016
mov eax, dword [ebx + 0x88c]
push 1
push 0
push eax
call fcn.00433650
mov ecx, dword [ebx + 0x3ff4]
add esp, 0xc
push 1
push 0
push ecx
call fcn.00433650
mov edx, dword [ebx + 0xe74]
add esp, 0xc
push 1
push 0
push edx
call fcn.00433650
add esp, 0xc
lea ecx, [esp + 0xc]
mov dword [esp + 0x44], 0xffffffff
call fcn.004035a0
mov ecx, dword [esp + 0x3c]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [esp + 0x28]
xor ecx, esp
call fcn.005b6c8b
add esp, 0x3c
ret 4