Function at 0x46c280
Capabilities:
Check for peb ntglobalflag flag
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x5d6780
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x70
push ebx
push ebp
push esi
push edi
mov esi, ecx
mov eax, dword [0x666d08]
xor ebx, ebx
mov ebp, 1
mov dword [esp + 0x88], ebx
mov dword [esp + 0x10], ebp
mov dword [esp + 0x2c], eax
mov dword [esp + 0x30], eax
lea ecx, [esp + 0x34]
mov byte [esp + 0x88], 2
call fcn.0046dff0
push 0xa
lea ecx, [esp + 0x68]
mov byte [esp + 0x8c], 3
call fcn.0046e1e0
push ebx
lea ecx, [esp + 0x2c]
mov byte [esp + 0x8c], 4
mov dword [esp + 0x2c], 0x5ed0bc
call fcn.00487bb0
mov eax, dword [esp + 0x90]
lea ecx, [esp + 0x28]
push eax
mov byte [esp + 0x8c], 5
call fcn.00487bb0
test al, al
je 0x46d946
push 0x63f67c
lea ecx, [esp + 0x2c]
call fcn.00487fb0
test al, al
je 0x46d93f
mov ecx, dword [esp + 0x4c]
mov edx, dword [esp + 0x48]
push ebx
push ecx
push edx
lea ecx, [esp + 0x34]
call fcn.0046e6d0
push 0x63f674
lea ecx, [esp + 0x2c]
call fcn.00488010
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0x48]
push ebx
push eax
push ecx
lea ecx, [esp + 0x34]
call fcn.0046e6d0
push 0x63f66c
lea ecx, [esp + 0x2c]
call fcn.00488010
test al, al
je 0x46c39f
lea edx, [esp + 0x14]
lea ecx, [esp + 0x28]
push edx
call fcn.0046e690
mov eax, dword [eax]
push eax
call 0x60478e
add esp, 4
lea ecx, [esp + 0x14]
mov dword [esi + 4], eax
call 0x620be8
push 0x63f664
lea ecx, [esp + 0x2c]
call fcn.00488010
test al, al
je 0x46c63d
lea ecx, [esp + 0x28]
call fcn.004882c0
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0x48]
push ebx
push eax
push ecx
lea ecx, [esp + 0x34]
call fcn.0046e6d0
push 0x63f65c
lea ecx, [esp + 0x2c]
call fcn.00488010
test al, al
je 0x46c414
lea edx, [esp + 0x14]
lea ecx, [esp + 0x28]
push edx
call fcn.0046e690
push eax
lea ecx, [esi + 8]
mov byte [esp + 0x8c], 6
call 0x620d21
lea ecx, [esp + 0x14]
mov byte [esp + 0x88], 5
call 0x620be8
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0x48]
push ebx
push eax
push ecx
lea ecx, [esp + 0x34]
call fcn.0046e6d0
push 0x63f654
lea ecx, [esp + 0x2c]
call fcn.00488010
test al, al
je 0x46c46a
lea edx, [esp + 0x14]
lea ecx, [esp + 0x28]
push edx
call fcn.0046e690
push eax
lea ecx, [esi + 0xc]
mov byte [esp + 0x8c], 7
call 0x620d21
lea ecx, [esp + 0x14]
mov byte [esp + 0x88], 5
call 0x620be8
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0x48]
push ebx
push eax
push ecx
lea ecx, [esp + 0x34]
call fcn.0046e6d0
push 0x63f64c
lea ecx, [esp + 0x2c]
call fcn.00488010
test al, al
je 0x46c4c0
lea edx, [esp + 0x14]
lea ecx, [esp + 0x28]
push edx
call fcn.0046e690
push eax
lea ecx, [esi + 0x10]
mov byte [esp + 0x8c], 8
call 0x620d21
lea ecx, [esp + 0x14]
mov byte [esp + 0x88], 5
call 0x620be8
mov edi, dword [esp + 0x4c]
xor eax, eax
cmp edi, ebx
push 0x63f640
setne al
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x5c], eax
call fcn.00488010
test al, al
je 0x46c51d
lea ecx, [esp + 0x14]
push ecx
lea ecx, [esp + 0x2c]
call fcn.0046e690
push eax
lea ecx, [esi + 0x14]
mov byte [esp + 0x8c], 9
call 0x620d21
lea ecx, [esp + 0x14]
mov byte [esp + 0x88], 5
call 0x620be8
mov edi, dword [esp + 0x4c]
xor edx, edx
cmp edi, ebx
push 0x63f63c
setne dl
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x5c], edx
call fcn.00488010
test al, al
je 0x46c57a
lea eax, [esp + 0x14]
lea ecx, [esp + 0x28]
push eax
call fcn.0046e690
push eax
lea ecx, [esi + 0x18]
mov byte [esp + 0x8c], 0xa
call 0x620d21
lea ecx, [esp + 0x14]
mov byte [esp + 0x88], 5
call 0x620be8
mov edi, dword [esp + 0x4c]
xor ecx, ecx
cmp edi, ebx
push 0x63f634
setne cl
mov dword [esp + 0x5c], ecx
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
call fcn.00488010
test al, al
je 0x46c5d7
lea edx, [esp + 0x14]
lea ecx, [esp + 0x28]
push edx
call fcn.0046e690
push eax
lea ecx, [esi + 0x1c]
mov byte [esp + 0x8c], 0xb
call 0x620d21
lea ecx, [esp + 0x14]
mov byte [esp + 0x88], 5
call 0x620be8
mov edi, dword [esp + 0x4c]
xor eax, eax
cmp edi, ebx
push 0x63f62c
setne al
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x5c], eax
call fcn.00488010
test al, al
je 0x46c634
lea ecx, [esp + 0x14]
push ecx
lea ecx, [esp + 0x2c]
call fcn.0046e690
push eax
lea ecx, [esi + 0x20]
mov byte [esp + 0x8c], 0xc
call 0x620d21
lea ecx, [esp + 0x14]
mov byte [esp + 0x88], 5
call 0x620be8
lea ecx, [esp + 0x28]
call fcn.00488300
mov edi, dword [esp + 0x4c]
xor edx, edx
cmp edi, ebx
push 0x63f61c
setne dl
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x5c], edx
call fcn.00488010
test al, al
je 0x46c68f
lea eax, [esp + 0x14]
lea ecx, [esp + 0x28]
push eax
call fcn.0046e690
mov eax, dword [eax]
push eax
call 0x60478e
add esp, 4
lea ecx, [esp + 0x14]
mov dword [esi + 0x24], eax
call 0x620be8
mov edi, dword [esp + 0x4c]
xor ecx, ecx
cmp edi, ebx
push 0x63f614
setne cl
mov dword [esp + 0x5c], ecx
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
call fcn.00488010
test al, al
je 0x46ca5f
lea ecx, [esp + 0x28]
call fcn.004882c0
mov edi, dword [esp + 0x4c]
xor edx, edx
cmp edi, ebx
push 0x63f60c
setne dl
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x5c], edx
call fcn.00488010
test al, al
je 0x46c726
lea eax, [esp + 0x14]
lea ecx, [esp + 0x28]
push eax
call fcn.0046e690
push eax
lea ecx, [esi + 0x28]
mov byte [esp + 0x8c], 0xd
call 0x620d21
lea ecx, [esp + 0x14]
mov byte [esp + 0x88], 5
call 0x620be8
mov edi, dword [esp + 0x4c]
xor ecx, ecx
cmp edi, ebx
push 0x63f604
setne cl
mov dword [esp + 0x5c], ecx
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
call fcn.00488010
test al, al
je 0x46c9b2
lea ecx, [esp + 0x28]
call fcn.004882c0
mov edi, dword [esp + 0x4c]
xor edx, edx
cmp edi, ebx
push 0x63f5fc
setne dl
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x5c], edx
call fcn.00488010
test al, al
je 0x46c7bd
lea eax, [esp + 0x14]
lea ecx, [esp + 0x28]
push eax
call fcn.0046e690
push eax
lea ecx, [esi + 0x2c]
mov byte [esp + 0x8c], 0xe
call 0x620d21
lea ecx, [esp + 0x14]
mov byte [esp + 0x88], 5
call 0x620be8
mov edi, dword [esp + 0x4c]
xor ecx, ecx
cmp edi, ebx
push 0x63f5f4
setne cl
mov dword [esp + 0x5c], ecx
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
call fcn.00488010
test al, al
je 0x46c80f
lea edx, [esp + 0x14]
lea ecx, [esp + 0x28]
push edx
call fcn.0046e690
mov eax, dword [eax]
push eax
call 0x60478e
add esp, 4
lea ecx, [esp + 0x14]
mov dword [esi + 0x30], eax
call 0x620be8
mov edi, dword [esp + 0x4c]
xor eax, eax
cmp edi, ebx
push 0x63f5ec
setne al
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x5c], eax
call fcn.00488010
test al, al
je 0x46c861
lea ecx, [esp + 0x14]
push ecx
lea ecx, [esp + 0x2c]
call fcn.0046e690
mov eax, dword [eax]
push eax
call 0x60478e
add esp, 4
lea ecx, [esp + 0x14]
mov dword [esi + 0x34], eax
call 0x620be8
mov edi, dword [esp + 0x4c]
xor edx, edx
cmp edi, ebx
push 0x63f5e4
setne dl
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x5c], edx
call fcn.00488010
test al, al
je 0x46c8b3
lea eax, [esp + 0x14]
lea ecx, [esp + 0x28]
push eax
call fcn.0046e690
mov eax, dword [eax]
push eax
call 0x60478e
add esp, 4
lea ecx, [esp + 0x14]
mov dword [esi + 0x38], eax
call 0x620be8
mov edi, dword [esp + 0x4c]
xor ecx, ecx
cmp edi, ebx
push 0x63f5dc
setne cl
mov dword [esp + 0x5c], ecx
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
call fcn.00488010
test al, al
je 0x46c905
lea edx, [esp + 0x14]
lea ecx, [esp + 0x28]
push edx
call fcn.0046e690
mov eax, dword [eax]
push eax
call 0x60478e
add esp, 4
lea ecx, [esp + 0x14]
mov dword [esi + 0x3c], eax
call 0x620be8
mov edi, dword [esp + 0x4c]
xor eax, eax
cmp edi, ebx
push 0x63f5d0
setne al
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x5c], eax
call fcn.00488010
test al, al
je 0x46c957
lea ecx, [esp + 0x14]
push ecx
lea ecx, [esp + 0x2c]
call fcn.0046e690
mov eax, dword [eax]
push eax
call 0x60478e
add esp, 4
lea ecx, [esp + 0x14]
mov dword [esi + 0x40], eax
call 0x620be8
mov edi, dword [esp + 0x4c]
xor edx, edx
cmp edi, ebx
push 0x63f5c4
setne dl
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x5c], edx
call fcn.00488010
test al, al
je 0x46c9a9
lea eax, [esp + 0x14]
lea ecx, [esp + 0x28]
push eax
call fcn.0046e690
mov eax, dword [eax]
push eax
call 0x60478e
add esp, 4
lea ecx, [esp + 0x14]
mov dword [esi + 0x44], eax
call 0x620be8
lea ecx, [esp + 0x28]
call fcn.00488300
mov edi, dword [esp + 0x4c]
xor ecx, ecx
cmp edi, ebx
push 0x63f5bc
setne cl
mov dword [esp + 0x5c], ecx
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
call fcn.00488010
test al, al
je 0x46ca04
lea edx, [esp + 0x14]
lea ecx, [esp + 0x28]
push edx
call fcn.0046e690
mov eax, dword [eax]
push eax
call 0x60478e
add esp, 4
lea ecx, [esp + 0x14]
mov dword [esi + 0x48], eax
call 0x620be8
mov edi, dword [esp + 0x4c]
xor eax, eax
cmp edi, ebx
push 0x63f5b4
setne al
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x5c], eax
call fcn.00488010
test al, al
je 0x46ca56
lea ecx, [esp + 0x14]
push ecx
lea ecx, [esp + 0x2c]
call fcn.0046e690
mov eax, dword [eax]
push eax
call 0x60478e
add esp, 4
lea ecx, [esp + 0x14]
mov dword [esi + 0x4c], eax
call 0x620be8
lea ecx, [esp + 0x28]
call fcn.00488300
mov edi, dword [esp + 0x4c]
xor edx, edx
cmp edi, ebx
push 0x63f5b0
setne dl
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x5c], edx
call fcn.00488010
test al, al
je 0x46d28b
lea ecx, [esp + 0x28]
call fcn.004882c0
mov edi, dword [esp + 0x4c]
xor eax, eax
cmp edi, ebx
push 0x63f5a8
setne al
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x5c], eax
call fcn.00488010
test al, al
je 0x46ccdc
lea ecx, [esp + 0x28]
call fcn.004882c0
mov edi, dword [esp + 0x4c]
xor ecx, ecx
cmp edi, ebx
push 0x63f5a0
setne cl
mov dword [esp + 0x5c], ecx
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
call fcn.00488010
test al, al
je 0x46cb32
lea edx, [esp + 0x14]
lea ecx, [esp + 0x28]
push edx
call fcn.0046e690
push eax
lea ecx, [esi + 0x50]
mov byte [esp + 0x8c], 0xf
call 0x620d21
lea ecx, [esp + 0x14]
mov byte [esp + 0x88], 5
call 0x620be8
jmp 0x46cb48
push 0x63f574
lea ecx, [esi + 0xe0]
call 0x620d71
xor ebp, ebp
mov dword [esp + 0x10], ebp
mov edi, dword [esp + 0x4c]
xor eax, eax
cmp edi, ebx
push 0x63f568
setne al
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x5c], eax
call fcn.00488010
test al, al
je 0x46cc2d
lea ecx, [esp + 0x24]
push ecx
lea ecx, [esp + 0x2c]
call fcn.0046e690
mov edi, dword [eax]
lea edx, [esp + 0x20]
push edx
lea ecx, [esp + 0x2c]
mov byte [esp + 0x8c], 0x10
call fcn.0046e690
mov ebp, dword [eax]
lea eax, [esp + 0x1c]
push eax
lea ecx, [esp + 0x2c]
mov byte [esp + 0x8c], 0x11
call fcn.0046e690
mov ecx, dword [eax]
push 0x10
push ebx
push ebp
mov dword [esp + 0x24], ecx
call 0x6053b5
xor ecx, ecx
xor edx, edx
mov cl, ah
push 0x10
mov dh, cl
push ebx
push edi
mov ebx, edx
call 0x6053b5
push 0x10
shr eax, 0x10
mov bl, al
mov eax, dword [esp + 0x34]
push 0
push eax
call 0x6053b5
and eax, 0xff
add esp, 0x24
shl eax, 0x10
or ebx, eax
lea ecx, [esp + 0x1c]
mov dword [esi + 0x54], ebx
call 0x620be8
lea ecx, [esp + 0x20]
mov byte [esp + 0x88], 0x10
call 0x620be8
lea ecx, [esp + 0x24]
mov byte [esp + 0x88], 5
call 0x620be8
mov ebp, dword [esp + 0x10]
xor ebx, ebx
mov edi, dword [esp + 0x4c]
xor ecx, ecx
cmp edi, ebx
push 0x63f560
setne cl
mov dword [esp + 0x5c], ecx
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
call fcn.00488010
test al, al
je 0x46cc7f
lea edx, [esp + 0x24]
lea ecx, [esp + 0x28]
push edx
call fcn.0046e690
mov eax, dword [eax]
push eax
call 0x60478e
add esp, 4
lea ecx, [esp + 0x24]
mov dword [esi + 0x58], eax
call 0x620be8
mov edi, dword [esp + 0x4c]
xor eax, eax
cmp edi, ebx
push 0x63f558
setne al
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x5c], eax
call fcn.00488010
test al, al
je 0x46ccd1
lea ecx, [esp + 0x24]
push ecx
lea ecx, [esp + 0x2c]
call fcn.0046e690
mov eax, dword [eax]
push eax
call 0x60478e
add esp, 4
lea ecx, [esp + 0x24]
mov dword [esi + 0x5c], eax
call 0x620be8
lea ecx, [esp + 0x28]
call fcn.00488300
jmp 0x46ccf2
push 0x63f534
lea ecx, [esi + 0xe0]
call 0x620d71
xor ebp, ebp
mov dword [esp + 0x10], ebp
mov edi, dword [esp + 0x4c]
xor edx, edx
cmp edi, ebx
push 0x63f528
setne dl
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x5c], edx
call fcn.00488010
test al, al
je 0x46cf35
lea ecx, [esp + 0x28]
call fcn.004882c0
mov edi, dword [esp + 0x4c]
xor eax, eax
cmp edi, ebx
push 0x63f5a0
setne al
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x5c], eax
call fcn.00488010
test al, al
je 0x46cd8b
lea ecx, [esp + 0x24]
push ecx
lea ecx, [esp + 0x2c]
call fcn.0046e690
push eax
lea ecx, [esi + 0x60]
mov byte [esp + 0x8c], 0x12
call 0x620d21
lea ecx, [esp + 0x24]
mov byte [esp + 0x88], 5
call 0x620be8
jmp 0x46cda1
push 0x63f4f8
lea ecx, [esi + 0xe0]
call 0x620d71
xor ebp, ebp
mov dword [esp + 0x10], ebp
mov edi, dword [esp + 0x4c]
xor edx, edx
cmp edi, ebx
push 0x63f568
setne dl
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x5c], edx
call fcn.00488010
test al, al
je 0x46ce86
lea eax, [esp + 0x14]
lea ecx, [esp + 0x28]
push eax
call fcn.0046e690
mov edi, dword [eax]
lea ecx, [esp + 0x18]
push ecx
lea ecx, [esp + 0x2c]
mov byte [esp + 0x8c], 0x13
call fcn.0046e690
mov ebp, dword [eax]
lea edx, [esp + 0x1c]
push edx
lea ecx, [esp + 0x2c]
mov byte [esp + 0x8c], 0x14
call fcn.0046e690
mov eax, dword [eax]
push 0x10
push ebx
push ebp
mov dword [esp + 0x2c], eax
call 0x6053b5
xor ecx, ecx
xor edx, edx
mov cl, ah
push 0x10
mov dh, cl
push ebx
push edi
mov ebx, edx
call 0x6053b5
mov edx, dword [esp + 0x38]
push 0x10
push 0
shr eax, 0x10
push edx
mov bl, al
call 0x6053b5
and eax, 0xff
add esp, 0x24
shl eax, 0x10
or ebx, eax
lea ecx, [esp + 0x1c]
mov dword [esi + 0x64], ebx
call 0x620be8
lea ecx, [esp + 0x18]
mov byte [esp + 0x88], 0x13
call 0x620be8
lea ecx, [esp + 0x14]
mov byte [esp + 0x88], 5
call 0x620be8
mov ebp, dword [esp + 0x10]
xor ebx, ebx
mov edi, dword [esp + 0x4c]
xor eax, eax
cmp edi, ebx
push 0x63f560
setne al
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x5c], eax
call fcn.00488010
test al, al
je 0x46ced8
lea ecx, [esp + 0x24]
push ecx
lea ecx, [esp + 0x2c]
call fcn.0046e690
mov eax, dword [eax]
push eax
call 0x60478e
add esp, 4
lea ecx, [esp + 0x24]
mov dword [esi + 0x68], eax
call 0x620be8
mov edi, dword [esp + 0x4c]
xor edx, edx
cmp edi, ebx
push 0x63f558
setne dl
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x5c], edx
call fcn.00488010
test al, al
je 0x46cf2a
lea eax, [esp + 0x24]
lea ecx, [esp + 0x28]
push eax
call fcn.0046e690
mov eax, dword [eax]
push eax
call 0x60478e
add esp, 4
lea ecx, [esp + 0x24]
mov dword [esi + 0x6c], eax
call 0x620be8
lea ecx, [esp + 0x28]
call fcn.00488300
jmp 0x46cf4b
push 0x63f4d0
lea ecx, [esi + 0xe0]
call 0x620d71
xor ebp, ebp
mov dword [esp + 0x10], ebp
mov edi, dword [esp + 0x4c]
xor ecx, ecx
cmp edi, ebx
push 0x63f4c4
setne cl
mov dword [esp + 0x5c], ecx
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
call fcn.00488010
test al, al
je 0x46d18e
lea ecx, [esp + 0x28]
call fcn.004882c0
mov edi, dword [esp + 0x4c]
xor edx, edx
cmp edi, ebx
push 0x63f5a0
setne dl
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x5c], edx
call fcn.00488010
test al, al
je 0x46cfe4
lea eax, [esp + 0x24]
lea ecx, [esp + 0x28]
push eax
call fcn.0046e690
push eax
lea ecx, [esi + 0x70]
mov byte [esp + 0x8c], 0x15
call 0x620d21
lea ecx, [esp + 0x24]
mov byte [esp + 0x88], 5
call 0x620be8
jmp 0x46cffa
push 0x63f498
lea ecx, [esi + 0xe0]
call 0x620d71
xor ebp, ebp
mov dword [esp + 0x10], ebp
mov edi, dword [esp + 0x4c]
xor ecx, ecx
cmp edi, ebx
push 0x63f568
setne cl
mov dword [esp + 0x5c], ecx
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
call fcn.00488010
test al, al
je 0x46d0df
lea edx, [esp + 0x14]
lea ecx, [esp + 0x28]
push edx
call fcn.0046e690
mov edi, dword [eax]
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x2c]
mov byte [esp + 0x8c], 0x16
call fcn.0046e690
mov ebp, dword [eax]
lea ecx, [esp + 0x1c]
push ecx
lea ecx, [esp + 0x2c]
mov byte [esp + 0x8c], 0x17
call fcn.0046e690
mov edx, dword [eax]
push 0x10
push ebx
push ebp
mov dword [esp + 0x2c], edx
call 0x6053b5
xor ecx, ecx
xor edx, edx
mov cl, ah
push 0x10
mov dh, cl
push ebx
push edi
mov ebx, edx
call 0x6053b5
mov edx, dword [esp + 0x38]
push 0x10
push 0
shr eax, 0x10
push edx
mov bl, al
call 0x6053b5
and eax, 0xff
add esp, 0x24
shl eax, 0x10
or ebx, eax
lea ecx, [esp + 0x1c]
mov dword [esi + 0x74], ebx
call 0x620be8
lea ecx, [esp + 0x18]
mov byte [esp + 0x88], 0x16
call 0x620be8
lea ecx, [esp + 0x14]
mov byte [esp + 0x88], 5
call 0x620be8
mov ebp, dword [esp + 0x10]
xor ebx, ebx
mov edi, dword [esp + 0x4c]
xor eax, eax
cmp edi, ebx
push 0x63f560
setne al
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x5c], eax
call fcn.00488010
test al, al
je 0x46d131
lea ecx, [esp + 0x24]
push ecx
lea ecx, [esp + 0x2c]
call fcn.0046e690
mov eax, dword [eax]
push eax
call 0x60478e
add esp, 4
lea ecx, [esp + 0x24]
mov dword [esi + 0x78], eax
call 0x620be8
mov edi, dword [esp + 0x4c]
xor edx, edx
cmp edi, ebx
push 0x63f558
setne dl
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x5c], edx
call fcn.00488010
test al, al
je 0x46d183
lea eax, [esp + 0x24]
lea ecx, [esp + 0x28]
push eax
call fcn.0046e690
mov eax, dword [eax]
push eax
call 0x60478e
add esp, 4
lea ecx, [esp + 0x24]
mov dword [esi + 0x7c], eax
call 0x620be8
lea ecx, [esp + 0x28]
call fcn.00488300
jmp 0x46d1a4
push 0x63f470
lea ecx, [esi + 0xe0]
call 0x620d71
xor ebp, ebp
mov dword [esp + 0x10], ebp
lea ecx, [esp + 0x28]
call fcn.00488300
cmp ebp, ebx
je 0x46d958
mov edi, dword [esp + 0x4c]
xor ecx, ecx
cmp edi, ebx
push 0x63f468
setne cl
mov dword [esp + 0x5c], ecx
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
call fcn.00488010
test al, al
je 0x46d938
lea ecx, [esp + 0x28]
call fcn.004882c0
mov edi, dword [esp + 0x4c]
xor edx, edx
cmp edi, ebx
push 0x63f5a8
setne dl
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x5c], edx
call fcn.00488010
test al, al
je 0x46d448
lea ecx, [esp + 0x28]
call fcn.004882c0
mov edi, dword [esp + 0x4c]
xor eax, eax
cmp edi, ebx
push 0x63f5a0
setne al
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x5c], eax
call fcn.00488010
test al, al
je 0x46d295
lea ecx, [esp + 0x24]
push ecx
lea ecx, [esp + 0x2c]
call fcn.0046e690
push eax
lea ecx, [esi + 0x80]
mov byte [esp + 0x8c], 0x18
call 0x620d21
lea ecx, [esp + 0x24]
mov byte [esp + 0x88], 5
call 0x620be8
jmp 0x46d2ab
push 0x63f448
jmp 0x46d94b
push 0x63f41c
lea ecx, [esi + 0xe0]
call 0x620d71
xor ebp, ebp
mov dword [esp + 0x10], ebp
mov edi, dword [esp + 0x4c]
xor edx, edx
cmp edi, ebx
push 0x63f568
setne dl
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x5c], edx
call fcn.00488010
test al, al
je 0x46d393
lea eax, [esp + 0x14]
lea ecx, [esp + 0x28]
push eax
call fcn.0046e690
mov edi, dword [eax]
lea ecx, [esp + 0x18]
push ecx
lea ecx, [esp + 0x2c]
mov byte [esp + 0x8c], 0x19
call fcn.0046e690
mov ebp, dword [eax]
lea edx, [esp + 0x1c]
push edx
lea ecx, [esp + 0x2c]
mov byte [esp + 0x8c], 0x1a
call fcn.0046e690
mov eax, dword [eax]
push 0x10
push ebx
push ebp
mov dword [esp + 0x2c], eax
call 0x6053b5
xor ecx, ecx
xor edx, edx
mov cl, ah
push 0x10
mov dh, cl
push ebx
push edi
mov ebx, edx
call 0x6053b5
mov edx, dword [esp + 0x38]
push 0x10
push 0
shr eax, 0x10
push edx
mov bl, al
call 0x6053b5
and eax, 0xff
add esp, 0x24
shl eax, 0x10
or ebx, eax
lea ecx, [esp + 0x1c]
mov dword [esi + 0x84], ebx
call 0x620be8
lea ecx, [esp + 0x18]
mov byte [esp + 0x88], 0x19
call 0x620be8
lea ecx, [esp + 0x14]
mov byte [esp + 0x88], 5
call 0x620be8
mov ebp, dword [esp + 0x10]
xor ebx, ebx
mov edi, dword [esp + 0x4c]
xor eax, eax
cmp edi, ebx
push 0x63f560
setne al
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x5c], eax
call fcn.00488010
test al, al
je 0x46d3e8
lea ecx, [esp + 0x24]
push ecx
lea ecx, [esp + 0x2c]
call fcn.0046e690
mov eax, dword [eax]
push eax
call 0x60478e
add esp, 4
lea ecx, [esp + 0x24]
mov dword [esi + 0x88], eax
call 0x620be8
mov edi, dword [esp + 0x4c]
xor edx, edx
cmp edi, ebx
push 0x63f558
setne dl
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x5c], edx
call fcn.00488010
test al, al
je 0x46d43d
lea eax, [esp + 0x24]
lea ecx, [esp + 0x28]
push eax
call fcn.0046e690
mov eax, dword [eax]
push eax
call 0x60478e
add esp, 4
lea ecx, [esp + 0x24]
mov dword [esi + 0x8c], eax
call 0x620be8
lea ecx, [esp + 0x28]
call fcn.00488300
jmp 0x46d45e
push 0x63f3f4
lea ecx, [esi + 0xe0]
call 0x620d71
xor ebp, ebp
mov dword [esp + 0x10], ebp
mov edi, dword [esp + 0x4c]
xor ecx, ecx
cmp edi, ebx
push 0x63f528
setne cl
mov dword [esp + 0x5c], ecx
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
call fcn.00488010
test al, al
je 0x46d6ad
lea ecx, [esp + 0x28]
call fcn.004882c0
mov edi, dword [esp + 0x4c]
xor edx, edx
cmp edi, ebx
push 0x63f5a0
setne dl
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x5c], edx
call fcn.00488010
test al, al
je 0x46d4fa
lea eax, [esp + 0x24]
lea ecx, [esp + 0x28]
push eax
call fcn.0046e690
push eax
lea ecx, [esi + 0x90]
mov byte [esp + 0x8c], 0x1b
call 0x620d21
lea ecx, [esp + 0x24]
mov byte [esp + 0x88], 5
call 0x620be8
jmp 0x46d510
push 0x63f3c4
lea ecx, [esi + 0xe0]
call 0x620d71
xor ebp, ebp
mov dword [esp + 0x10], ebp
mov edi, dword [esp + 0x4c]
xor ecx, ecx
cmp edi, ebx
push 0x63f568
setne cl
mov dword [esp + 0x5c], ecx
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
call fcn.00488010
test al, al
je 0x46d5f8
lea edx, [esp + 0x14]
lea ecx, [esp + 0x28]
push edx
call fcn.0046e690
mov edi, dword [eax]
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x2c]
mov byte [esp + 0x8c], 0x1c
call fcn.0046e690
mov ebp, dword [eax]
lea ecx, [esp + 0x1c]
push ecx
lea ecx, [esp + 0x2c]
mov byte [esp + 0x8c], 0x1d
call fcn.0046e690
mov edx, dword [eax]
push 0x10
push ebx
push ebp
mov dword [esp + 0x2c], edx
call 0x6053b5
xor ecx, ecx
xor edx, edx
mov cl, ah
push 0x10
mov dh, cl
push ebx
push edi
mov ebx, edx
call 0x6053b5
mov edx, dword [esp + 0x38]
push 0x10
push 0
shr eax, 0x10
push edx
mov bl, al
call 0x6053b5
and eax, 0xff
add esp, 0x24
shl eax, 0x10
or ebx, eax
lea ecx, [esp + 0x1c]
mov dword [esi + 0x94], ebx
call 0x620be8
lea ecx, [esp + 0x18]
mov byte [esp + 0x88], 0x1c
call 0x620be8
lea ecx, [esp + 0x14]
mov byte [esp + 0x88], 5
call 0x620be8
mov ebp, dword [esp + 0x10]
xor ebx, ebx
mov edi, dword [esp + 0x4c]
xor eax, eax
cmp edi, ebx
push 0x63f560
setne al
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x5c], eax
call fcn.00488010
test al, al
je 0x46d64d
lea ecx, [esp + 0x24]
push ecx
lea ecx, [esp + 0x2c]
call fcn.0046e690
mov eax, dword [eax]
push eax
call 0x60478e
add esp, 4
lea ecx, [esp + 0x24]
mov dword [esi + 0x98], eax
call 0x620be8
mov edi, dword [esp + 0x4c]
xor edx, edx
cmp edi, ebx
push 0x63f558
setne dl
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x5c], edx
call fcn.00488010
test al, al
je 0x46d6a2
lea eax, [esp + 0x24]
lea ecx, [esp + 0x28]
push eax
call fcn.0046e690
mov eax, dword [eax]
push eax
call 0x60478e
add esp, 4
lea ecx, [esp + 0x24]
mov dword [esi + 0x9c], eax
call 0x620be8
lea ecx, [esp + 0x28]
call fcn.00488300
jmp 0x46d6c3
push 0x63f398
lea ecx, [esi + 0xe0]
call 0x620d71
xor ebp, ebp
mov dword [esp + 0x10], ebp
mov edi, dword [esp + 0x4c]
xor ecx, ecx
cmp edi, ebx
push 0x63f4c4
setne cl
mov dword [esp + 0x5c], ecx
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
call fcn.00488010
test al, al
je 0x46d91b
lea ecx, [esp + 0x28]
call fcn.004882c0
mov edi, dword [esp + 0x4c]
xor edx, edx
cmp edi, ebx
push 0x63f5a0
setne dl
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x5c], edx
call fcn.00488010
test al, al
je 0x46d75f
lea eax, [esp + 0x24]
lea ecx, [esp + 0x28]
push eax
call fcn.0046e690
push eax
lea ecx, [esi + 0xa0]
mov byte [esp + 0x8c], 0x1e
call 0x620d21
lea ecx, [esp + 0x24]
mov byte [esp + 0x88], 5
call 0x620be8
jmp 0x46d775
push 0x63f368
lea ecx, [esi + 0xe0]
call 0x620d71
xor ebp, ebp
mov dword [esp + 0x10], ebp
mov edi, dword [esp + 0x4c]
xor ecx, ecx
cmp edi, ebx
push 0x63f568
setne cl
mov dword [esp + 0x5c], ecx
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
call fcn.00488010
test al, al
je 0x46d85d
lea edx, [esp + 0x14]
lea ecx, [esp + 0x28]
push edx
call fcn.0046e690
mov edi, dword [eax]
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x2c]
mov byte [esp + 0x8c], 0x1f
call fcn.0046e690
mov ebp, dword [eax]
lea ecx, [esp + 0x1c]
push ecx
lea ecx, [esp + 0x2c]
mov byte [esp + 0x8c], 0x20
call fcn.0046e690
mov edx, dword [eax]
push 0x10
push ebx
push ebp
mov dword [esp + 0x2c], edx
call 0x6053b5
xor ecx, ecx
xor edx, edx
mov cl, ah
push 0x10
mov dh, cl
push ebx
push edi
mov ebx, edx
call 0x6053b5
mov edx, dword [esp + 0x38]
push 0x10
push 0
shr eax, 0x10
push edx
mov bl, al
call 0x6053b5
and eax, 0xff
add esp, 0x24
shl eax, 0x10
or ebx, eax
lea ecx, [esp + 0x1c]
mov dword [esi + 0xa4], ebx
call 0x620be8
lea ecx, [esp + 0x18]
mov byte [esp + 0x88], 0x1f
call 0x620be8
lea ecx, [esp + 0x14]
mov byte [esp + 0x88], 5
call 0x620be8
mov ebp, dword [esp + 0x10]
xor ebx, ebx
mov edi, dword [esp + 0x4c]
xor eax, eax
cmp edi, ebx
push 0x63f560
setne al
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x5c], eax
call fcn.00488010
test al, al
je 0x46d8b2
lea ecx, [esp + 0x24]
push ecx
lea ecx, [esp + 0x2c]
call fcn.0046e690
mov eax, dword [eax]
push eax
call 0x60478e
add esp, 4
lea ecx, [esp + 0x24]
mov dword [esi + 0xa8], eax
call 0x620be8
mov edi, dword [esp + 0x4c]
xor edx, edx
cmp edi, ebx
push 0x63f558
setne dl
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x5c], edx
call fcn.00488010
test al, al
je 0x46d907
lea eax, [esp + 0x24]
lea ecx, [esp + 0x28]
push eax
call fcn.0046e690
mov eax, dword [eax]
push eax
call 0x60478e
add esp, 4
lea ecx, [esp + 0x24]
mov dword [esi + 0xac], eax
call 0x620be8
lea ecx, [esp + 0x28]
call fcn.00488300
lea ecx, [esp + 0x28]
call fcn.00488300
jmp 0x46d958
push 0x63f340
lea ecx, [esi + 0xe0]
call 0x620d71
lea ecx, [esp + 0x28]
xor ebp, ebp
call fcn.00488300
jmp 0x46d958
push 0x63f320
jmp 0x46d94b
push 0x63f2fc
jmp 0x46d94b
push 0x63f2e4
lea ecx, [esi + 0xe0]
call 0x620d71
xor ebp, ebp
mov dword [esp + 0x28], 0x5ed0bc
lea ecx, [esp + 0x64]
mov dword [esp + 0x64], 0x5ed0ac
mov dword [esp + 0x20], ecx
mov eax, dword [esp + 0x68]
mov byte [esp + 0x88], 0x24
cmp eax, ebx
je 0x46d9af
mov ecx, dword [esp + 0x6c]
xor edi, edi
cmp ecx, ebx
jbe 0x46d9af
mov esi, dword [eax + edi*4]
cmp esi, ebx
je 0x46d9a6
lea edx, [esi + 8]
push 1
push edx
call 0x61d4b6
mov esi, dword [esi]
cmp esi, ebx
jne 0x46d991
mov eax, dword [esp + 0x68]
mov ecx, dword [esp + 0x6c]
inc edi
cmp edi, ecx
jb 0x46d98a
push eax
call 0x620952
mov ecx, dword [esp + 0x7c]
add esp, 4
mov dword [esp + 0x68], ebx
mov dword [esp + 0x70], ebx
mov dword [esp + 0x74], ebx
call 0x61f6c5
lea eax, [esp + 0x34]
mov dword [esp + 0x78], ebx
mov dword [esp + 0x20], eax
mov dword [esp + 0x34], 0x5ed0c4
mov eax, dword [esp + 0x38]
mov byte [esp + 0x88], 0x25
cmp eax, ebx
je 0x46d9fa
push eax
call 0x620952
add esp, 4
lea ecx, [esp + 0x30]
mov byte [esp + 0x88], 0x21
call 0x620be8
lea ecx, [esp + 0x2c]
mov byte [esp + 0x88], bl
call 0x620be8
lea ecx, [esp + 0x90]
mov dword [esp + 0x88], 0xffffffff
call 0x620be8
mov ecx, dword [esp + 0x80]
pop edi
mov eax, ebp
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x7c
ret 4