Function at 0x433eb0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5c96e7
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x520
mov eax, dword [0x6dd1e4]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x4c0], edi
push 3
push 0x64c2d0
call fcn.0044fc50
mov dword [ebp - 0x4bc], eax
mov ecx, edi
mov eax, dword [edi + 0x1f20]
mov dword [ebp - 0x4b8], eax
mov dword [edi + 0x1f20], 0
call fcn.00487c90
test al, al
je 0x43669a
push 1
push 0x64c2f0
lea ecx, [edi + 0x12b4]
call fcn.0051de00
mov esi, dword [edi + 0x14d4]
lea eax, [ebp - 0x440]
push 0x260
push 0
push eax
mov dword [ebp - 0x4a0], esi
call fcn.00420580
add esp, 0xc
lea ecx, [edi + 0x1498]
push ecx
lea ecx, [ebp - 0x440]
call fcn.004fd600
push 0xffffffffffffffff
lea ecx, [ebp - 0x440]
mov dword [ebp - 4], 0
call fcn.004fbb30
movsd xmm1, qword [0x6be540]
mov ecx, esi
push 0
push str.Arial
push 1
push 0x320
call fcn.004fb6d0
push 0x37
push 0x50
push 3
push 0xa
mov ecx, edi
call fcn.00450470
push 0x64c2d0
lea ecx, [edi + 0x1414]
call fcn.0051e0b0
push 0xffffffffffffffff
push 0x10000001
push 0x2d
push 0x5f
push 0x3c
push 5
lea ecx, [edi + 0x1414]
call fcn.0051dd30
push eax
mov ecx, esi
call fcn.004f7f60
push dword [edi + 0x1404]
mov ecx, esi
push 0xffffffffffffffff
call fcn.004f6320
movsd xmm1, qword [0x6be518]
mov ecx, esi
push 0
push str.Arial
push 1
push 0x190
call fcn.004fb6d0
push 0
push ecx
mov dword [esp], 0x41500000
mov ecx, edi
push 0x64c360
push 0x5f
push 0x73
push 0xa
push 0x69
push 0x72
push 0x64c428
call fcn.004503a0
push eax
mov ecx, esi
mov dword [ebp - 0x4ac], eax
call fcn.004fcac0
push eax
lea ecx, [ebp - 0x440]
call fcn.004fd380
mov ecx, dword [edi + 0x13d0]
push 0xfffffffffffffffe
push ecx
push ecx
lea eax, [ebp - 0x440]
mov ecx, edi
push eax
push 0x64c450
push 0
push 0x10
push 0x6e
push 0x49
push 5
push 0x649214
call fcn.00450210
push 0
push ecx
mov dword [esp], 0x41500000
mov ecx, edi
push 0x64c500
push 0x5f
push 0x50
push 0xa
push 0xe1
push 0x8b
push 0x64c5c8
mov dword [ebp - 0x530], eax
call fcn.004503a0
push 0
push ecx
mov dword [esp], 0x41500000
mov ecx, edi
push 0x64c5f0
push 0x23
push 0x23
push 0xf
push 0x136
push 0x9d
push 0
mov dword [ebp - 0x518], eax
call fcn.004503a0
push 0
push ecx
mov dword [esp], 0x41500000
mov ecx, edi
push 0x64c610
push 0x23
push 0x23
push 0xf
push 0x15e
push 0x9b
push 0
mov dword [ebp - 0x51c], eax
call fcn.004503a0
push 0
push ecx
mov dword [esp], 0x41500000
mov ecx, edi
push 0x64c634
push 0x23
push 0x23
push 0xf
push 0x186
push 0x89
push 0
mov dword [ebp - 0x500], eax
call fcn.004503a0
push 0
push ecx
mov dword [esp], 0x41500000
mov ecx, edi
push 0x64c658
push 0x23
push 0x23
push 0x41
push 0x136
push 0x96
push 0
mov dword [ebp - 0x4f8], eax
call fcn.004503a0
push 0
push ecx
mov dword [ebp - 0x514], eax
mov dword [esp], 0x41500000
push 0x64c67c
push 0x23
push 0x23
push 0x41
push 0x15e
push 0xa0
push 0
mov ecx, edi
call fcn.004503a0
mov ecx, eax
mov eax, dword [ebp - 0x4ac]
mov dword [ebp - 0x4b4], ecx
cmp eax, ecx
jg 0x4341c9
mov edi, eax
nop word [eax + eax]
push 0x40
push edi
mov ecx, esi
call fcn.004f4b70
inc edi
cmp edi, dword [ebp - 0x4b4]
jle 0x4341b0
mov edi, dword [ebp - 0x4c0]
push 0
push ecx
mov dword [esp], 0x41500000
mov ecx, edi
push 0x64948c
push 0x23
push 0x23
push 0x41
push 0x186
push 0x8d
push 0
call fcn.004503a0
push 0
push ecx
mov dword [esp], 0x41500000
mov ecx, edi
push 0x649330
push 0x5f
push 0x4b
push 0xa
push 0x1ae
push 0xa4
push 0x6482e4
mov dword [ebp - 0x504], eax
call fcn.004503a0
push 0
push ecx
mov dword [esp], 0x41500000
mov ecx, edi
push 0x6493d0
push 0x5f
push 0x4b
push 0xa
push 0x1fe
push 0x81
push 0x64c6a0
mov dword [ebp - 0x528], eax
call fcn.004503a0
push 0
push ecx
mov dword [esp], 0x41500000
mov ecx, edi
push 0x64197c
push 0x5f
push 0x4b
push 0xa
push 0x24e
push 0x7d
push 0x6419a8
mov dword [ebp - 0x52c], eax
call fcn.004503a0
push 0
push ecx
mov dword [esp], 0x41500000
mov ecx, edi
push 0x645ad4
push 0x5f
push 0x4b
push 0xa
push 0x29e
push 0xb3
push 0x641970
mov dword [edi + 0x12d4], eax
call fcn.004503a0
push 0
push 0x10800080
push 0x19
push 0xb9
push 0x23
push 0x2f3
push 0x64c6c8
mov ecx, esi
mov dword [edi + 0x12d8], eax
call fcn.004f8120
push 0x909090
push 0xffffffffffffffff
mov ecx, esi
mov dword [ebp - 0x4a4], eax
call fcn.004f6320
movsd xmm0, qword [0x6be528]
sub esp, 8
movsd qword [esp], xmm0
mov ecx, esi
push 0
push 0
push 0
push 0x190
push 0xffffffffffffffff
call fcn.004f61c0
push 0x40
push 0xffffffffffffffff
mov ecx, esi
call fcn.004f4b70
push 0
push ecx
mov dword [esp], 0x41500000
mov ecx, edi
push 0x645b44
push 0x28
push 0x5a
push 0x41
push 0x2f3
push 0x86
push 0x645b44
call fcn.00450300
push 0
push ecx
mov dword [esp], 0x41500000
mov ecx, edi
push 0x645b58
push 0x28
push 0x5a
push 0x41
push 0x352
push 0x99
push 0x645b78
mov dword [ebp - 0x488], eax
call fcn.00450300
push 0
push 0x64c6f8
mov ecx, edi
mov dword [ebp - 0x4e0], eax
call fcn.0044faa0
mov ecx, edi
call fcn.0044f8d0
push 0
lea ecx, [ebp - 0x1a0]
mov byte [ebp - 0x481], 0
mov byte [ebp - 0x482], 0
call fcn.00512430
movsd xmm1, qword [0x6be518]
mov ecx, esi
push 0
push str.Arial
push 1
push 0x190
mov dword [ebp - 0x444], 0xffffffff
call fcn.004fb6d0
push dword [ebp - 0x4b8]
lea eax, [ebp - 0x444]
mov ecx, edi
push eax
call fcn.00433a80
push dword [ebp - 0x444]
mov ecx, esi
call fcn.004fcac0
push 0x48
mov dword [ebp - 0x4b0], eax
call dword [0x5de7f8]
movsd xmm0, qword [0x6be4d8]
mov ecx, eax
comisd xmm0, xmmword [edi + 8]
mov dword [ebp - 0x480], ecx
jb 0x434430
push 4
call dword [0x5de754]
mov ecx, dword [ebp - 0x480]
or eax, 0xff000000
jmp 0x434432
xor eax, eax
push eax
push ecx
push ecx
push 0x8b
mov ecx, edi
mov dword [ebp - 0x494], eax
call fcn.00477830
push eax
lea ecx, [ebp - 0x448]
call fcn.004fd7f0
mov byte [ebp - 4], 1
mov ecx, esi
push dword [ebp - 0x448]
push 0x64c720
push dword [ebp - 0x488]
call fcn.004f8b00
push 0
push eax
push dword [ebp - 0x488]
mov ecx, esi
mov dword [ebp - 0x4dc], eax
call fcn.004fca70
push eax
call dword [0x5de75c]
push dword [ebp - 0x494]
mov eax, dword [ebp - 0x480]
mov ecx, edi
push eax
push eax
push 0x72
call fcn.00477830
push eax
lea ecx, [ebp - 0x470]
call fcn.004fd7f0
push 0
mov byte [ebp - 4], 2
mov ecx, esi
push dword [ebp - 0x470]
push 0
push 0x32
push 0x64c75c
push dword [ebp - 0x488]
call fcn.004f7b00
push dword [ebp - 0x494]
mov dword [ebp - 0x4f0], eax
mov ecx, edi
mov eax, dword [ebp - 0x480]
push eax
push eax
push 0x81
call fcn.00477830
push eax
lea ecx, [ebp - 0x474]
call fcn.004fd7f0
push 0
mov byte [ebp - 4], 3
mov ecx, esi
push dword [ebp - 0x474]
push 0
push 0x32
push 0x64c788
push dword [ebp - 0x488]
call fcn.004f7b00
push dword [ebp - 0x494]
mov dword [ebp - 0x4c8], eax
mov ecx, edi
mov eax, dword [ebp - 0x480]
push eax
push eax
push 0x80
call fcn.00477830
push eax
lea ecx, [ebp - 0x44c]
call fcn.004fd7f0
push 0
mov byte [ebp - 4], 4
push dword [ebp - 0x44c]
push 0
push 0x32
push 0x645ed8
push dword [ebp - 0x488]
mov ecx, esi
call fcn.004f7b00
push 0
push 0
push 8
push 0x32
push 0
push dword [ebp - 0x488]
mov ecx, esi
mov dword [ebp - 0x510], eax
call fcn.004f7b00
push dword [ebp - 0x494]
mov eax, dword [ebp - 0x480]
mov ecx, edi
push eax
push eax
push 0x75
call fcn.00477830
push eax
lea ecx, [ebp - 0x478]
call fcn.004fd7f0
push 0
mov byte [ebp - 4], 5
mov ecx, esi
push dword [ebp - 0x478]
push 4
push 0x32
push 0x64c7cc
push dword [ebp - 0x488]
call fcn.004f7b00
push dword [ebp - 0x494]
mov esi, eax
mov ecx, edi
mov eax, dword [ebp - 0x480]
push eax
push eax
push 0x9d
call fcn.00477830
push eax
lea ecx, [ebp - 0x458]
call fcn.004fd7f0
mov ecx, dword [ebp - 0x4a0]
push 0
mov byte [ebp - 4], 6
push dword [ebp - 0x458]
push 0
push 0x32
push 0x64c7fc
push esi
call fcn.004f7b00
push dword [ebp - 0x494]
mov dword [ebp - 0x520], eax
mov ecx, edi
mov eax, dword [ebp - 0x480]
push eax
push eax
push 0x9b
call fcn.00477830
push eax
lea ecx, [ebp - 0x454]
call fcn.004fd7f0
mov ecx, dword [ebp - 0x4a0]
push 0
mov byte [ebp - 4], 7
push dword [ebp - 0x454]
push 0
push 0x32
push 0x64c818
push esi
call fcn.004f7b00
push dword [ebp - 0x494]
mov dword [ebp - 0x4fc], eax
mov eax, dword [ebp - 0x480]
push eax
push eax
push 0x89
mov ecx, edi
call fcn.00477830
push eax
lea ecx, [ebp - 0x45c]
call fcn.004fd7f0
mov ecx, dword [ebp - 0x4a0]
push 0
mov byte [ebp - 4], 8
push dword [ebp - 0x45c]
push 0
push 0x32
push 0x64c834
push esi
call fcn.004f7b00
push dword [ebp - 0x494]
mov dword [ebp - 0x4f4], eax
mov ecx, edi
mov eax, dword [ebp - 0x480]
push eax
push eax
push 0x96
call fcn.00477830
push eax
lea ecx, [ebp - 0x460]
call fcn.004fd7f0
mov ecx, dword [ebp - 0x4a0]
push 0
mov byte [ebp - 4], 9
push dword [ebp - 0x460]
push 0
push 0x32
push 0x64c850
push esi
call fcn.004f7b00
push dword [ebp - 0x494]
mov dword [ebp - 0x4c4], eax
mov ecx, edi
mov eax, dword [ebp - 0x480]
push eax
push eax
push 0xa0
call fcn.00477830
push eax
lea ecx, [ebp - 0x464]
call fcn.004fd7f0
push 0
mov byte [ebp - 4], 0xa
push dword [ebp - 0x464]
push 0
push 0x32
push 0x64c67c
push esi
mov esi, dword [ebp - 0x4a0]
mov ecx, esi
call fcn.004f7b00
push 0
push 0
push 8
push 0x32
push 0
push dword [ebp - 0x488]
mov ecx, esi
mov dword [ebp - 0x524], eax
call fcn.004f7b00
push dword [ebp - 0x494]
mov eax, dword [ebp - 0x480]
mov ecx, edi
push eax
push eax
push 0x7c
call fcn.00477830
push eax
lea ecx, [ebp - 0x47c]
call fcn.004fd7f0
mov byte [ebp - 4], 0xb
push 0
push dword [ebp - 0x47c]
mov ecx, esi
push 0
push 0x32
push 0x645e80
push dword [ebp - 0x488]
call fcn.004f7b00
push dword [ebp - 0x494]
mov dword [ebp - 0x4e4], eax
mov ecx, edi
mov eax, dword [ebp - 0x480]
push eax
push eax
push 0xac
call fcn.00477830
push eax
lea ecx, [ebp - 0x468]
call fcn.004fd7f0
push 0
mov byte [ebp - 4], 0xc
mov ecx, esi
push dword [ebp - 0x468]
push 0
push 0x32
push 0x645f10
push dword [ebp - 0x488]
call fcn.004f7b00
push 0
push dword [ebp - 0x448]
mov ecx, esi
mov dword [ebp - 0x50c], eax
push 0
push 0x32
push 0x645f44
push dword [ebp - 0x488]
call fcn.004f7b00
push dword [ebp - 0x494]
mov dword [ebp - 0x508], eax
mov ecx, edi
mov eax, dword [ebp - 0x480]
push eax
push eax
push 0x94
call fcn.00477830
push eax
lea ecx, [ebp - 0x46c]
call fcn.004fd7f0
push 0
mov byte [ebp - 4], 0xd
mov ecx, esi
push dword [ebp - 0x46c]
push 0
push 0x32
push 0x6485b4
push dword [ebp - 0x488]
call fcn.004f7b00
push 0
push 0
push 8
push 0x32
push 0
push dword [ebp - 0x488]
mov ecx, esi
mov dword [ebp - 0x4cc], eax
call fcn.004f7b00
push 0
push dword [ebp - 0x44c]
mov ecx, esi
push 0
push 0x32
push 0x645f94
push dword [ebp - 0x488]
call fcn.004f7b00
push dword [ebp - 0x494]
mov dword [ebp - 0x4d8], eax
mov eax, dword [ebp - 0x480]
push eax
push eax
push 0xb1
mov ecx, edi
call fcn.00477830
push eax
lea ecx, [ebp - 0x450]
call fcn.004fd7f0
push 0
mov byte [ebp - 4], 0xe
mov ecx, esi
push dword [ebp - 0x450]
push 0
push 0x32
push 0x645fc8
push dword [ebp - 0x488]
call fcn.004f7b00
push 0
push dword [ebp - 0x450]
mov ecx, esi
mov dword [ebp - 0x4d4], eax
push 0
push 0x32
push 0x6485d0
push dword [ebp - 0x488]
call fcn.004f7b00
push 0
mov ecx, edi
mov dword [ebp - 0x4d0], eax
call fcn.0044f730
mov edx, eax
mov cx, word [edi + 0x12d8]
mov eax, 0x74
mov word [ebp - 0x6e], cx
mov word [ebp - 0x76], ax
mov ecx, 0x2e
mov eax, dword [ebp - 0x504]
mov word [ebp - 0x74], ax
mov eax, 0x1b
mov word [ebp - 0x70], ax
mov eax, 0x70
mov word [ebp - 0x6a], ax
mov ax, word [edi + 0x12d4]
mov word [ebp - 0x68], ax
mov eax, 0x72
mov word [ebp - 0x64], ax
mov eax, dword [ebp - 0x4e0]
mov word [ebp - 0x62], ax
mov eax, 0x46
mov word [ebp - 0x5e], ax
mov eax, 0xd
mov word [ebp - 0x58], ax
mov eax, dword [ebp - 0x4dc]
mov word [ebp - 0x56], ax
mov eax, dword [ebp - 0x4f0]
mov word [ebp - 0x50], ax
mov eax, dword [ebp - 0x4c8]
mov word [ebp - 0x4a], ax
mov eax, 0x47
mov word [ebp - 0x46], ax
mov eax, dword [ebp - 0x4e4]
mov word [ebp - 0x44], ax
mov eax, 0x56
mov word [ebp - 0x40], ax
mov eax, dword [ebp - 0x510]
mov word [ebp - 0x3e], ax
mov eax, 0x4c
mov dword [ebp - 0x4ec], edx
mov byte [ebp - 0x78], 1
mov byte [ebp - 0x72], 1
mov byte [ebp - 0x6c], 1
mov byte [ebp - 0x66], 1
mov byte [ebp - 0x60], 9
mov word [ebp - 0x5c], dx
mov byte [ebp - 0x5a], 9
mov byte [ebp - 0x54], 1
mov word [ebp - 0x52], cx
mov byte [ebp - 0x4e], 9
mov word [ebp - 0x4c], cx
mov byte [ebp - 0x48], 9
mov byte [ebp - 0x42], 0x11
mov byte [ebp - 0x3c], 9
mov word [ebp - 0x3a], ax
mov ecx, esi
mov eax, dword [ebp - 0x50c]
mov word [ebp - 0x38], ax
mov eax, 0x50
mov word [ebp - 0x34], ax
mov eax, dword [ebp - 0x508]
mov word [ebp - 0x32], ax
mov eax, 0x4d
mov word [ebp - 0x2e], ax
mov eax, dword [ebp - 0x4d8]
mov word [ebp - 0x2c], ax
mov eax, 0x55
mov word [ebp - 0x28], ax
mov eax, dword [ebp - 0x4d4]
mov word [ebp - 0x26], ax
mov eax, 0x48
mov word [ebp - 0x22], ax
mov eax, dword [ebp - 0x4d0]
mov word [ebp - 0x20], ax
lea eax, [ebp - 0x78]
push 0xf
push eax
mov byte [ebp - 0x36], 9
mov byte [ebp - 0x30], 9
mov byte [ebp - 0x2a], 9
mov byte [ebp - 0x24], 9
call fcn.004fbbb0
push dword [ebp - 0x4b0]
call dword [0x5de730]
push 0x20
push dword [ebp - 0x4a4]
mov ecx, esi
call fcn.004f4b70
xorps xmm0, xmm0
mov dword [ebp - 0x4e8], 0xffffffff
lea ecx, [ebp - 0x8c]
movq qword [ebp - 0x8c], xmm0
mov dword [ebp - 0x84], 0
call fcn.0051e180
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x11c]
xorps xmm0, xmm0
mov dword [ebp - 0x114], 0
movq qword [ebp - 0x11c], xmm0
call fcn.0051e180
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x128]
xorps xmm0, xmm0
mov dword [ebp - 0x120], 0
movq qword [ebp - 0x128], xmm0
call fcn.0051e180
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x110]
xorps xmm0, xmm0
mov dword [ebp - 0x108], 0
movq qword [ebp - 0x110], xmm0
call fcn.0051e180
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0xc8]
mov dword [ebp - 0xc8], 0
call fcn.00518880
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0xcc]
mov dword [ebp - 0xcc], 0
call fcn.00518880
push dword [ebp - 0x4e0]
mov ecx, esi
mov byte [ebp - 4], 0x14
call fcn.004fb790
push dword [ebp - 0x4b4]
mov ecx, edi
push dword [ebp - 0x4ac]
push dword [ebp - 0x444]
call fcn.005c13e0
push 0
mov ecx, edi
call fcn.005c4c60
test eax, eax
je 0x436578
nop
mov ecx, dword [edi + 0x14c8]
lea eax, [ebp - 0x440]
mov edx, dword [ebp - 0x4ac]
cmp ecx, eax
lea eax, [edi + 0x1498]
jne 0x434bdb
cmp dword [eax], 0xfffffff5
jne 0x434bdb
mov dword [edi + 0x14c8], esi
mov ecx, esi
mov dword [eax], edx
mov eax, dword [eax]
cmp eax, 0xfffffffa
je 0x436578
cmp ecx, esi
jne 0x436555
cmp eax, dword [edi + 0x12d8]
je 0x436571
cmp byte [ebp - 0x481], 1
jne 0x434c21
cmp eax, 0xffffff31
jne 0x434c21
lea ecx, [ebp - 0x1a0]
call fcn.00512410
mov byte [ebp - 0x481], 2
jmp 0x43655e
mov ecx, dword [ebp - 0x444]
cmp eax, 0xffffffea
jne 0x434c34
cmp dword [edi + 0x14a4], ecx
je 0x434c40
cmp eax, dword [ebp - 0x488]
jne 0x434da2
cmp eax, dword [ebp - 0x488]
sete byte [ebp - 0x48d]
jne 0x434c93
push dword [ebp - 0x4b0]
call dword [0x5de730]
cmp byte [ebp - 0x481], 2
jne 0x434c8c
xorps xmm1, xmm1
lea ecx, [ebp - 0x1a0]
call fcn.005123c0
movsd xmm1, qword [0x6be5b0]
comisd xmm1, xmm0
jbe 0x434c8c
mov byte [ebp - 0x481], 0
jmp 0x43655e
mov byte [ebp - 0x481], 1
push 2
push 0xffffffffffffffff
push 0x100c
push dword [ebp - 0x4b0]
call dword [0x5de7fc]
cmp eax, 0xffffffff
mov ecx, 0x20
mov eax, 0x40
cmove ecx, eax
mov eax, dword [ebp - 0x4dc]
mov dword [ebp - 0x48c], ecx
cmp eax, dword [ebp - 0x4cc]
jge 0x434cee
mov edi, eax
nop
push ecx
push edi
mov ecx, esi
call fcn.004f4b70
mov ecx, dword [ebp - 0x48c]
inc edi
cmp edi, dword [ebp - 0x4cc]
jl 0x434cd0
mov edi, dword [ebp - 0x4c0]
push ecx
push dword [ebp - 0x4d8]
mov ecx, esi
call fcn.004f4b70
push 0
mov ecx, edi
call fcn.00461860
mov ecx, dword [ebp - 0x4a0]
test al, al
mov eax, 0x40
mov esi, 0x20
cmovne esi, eax
push esi
push dword [ebp - 0x4d4]
call fcn.004f4b70
push esi
push dword [ebp - 0x4d0]
mov esi, dword [ebp - 0x4a0]
mov ecx, esi
call fcn.004f4b70
cmp byte [ebp - 0x48d], 0
je 0x434d8a
lea eax, [ebp - 0x144]
mov ecx, esi
push eax
push dword [ebp - 0x488]
call fcn.004fcac0
push eax
call dword [0x5de6b0]
test eax, eax
je 0x434d8a
mov eax, dword [ebp - 0x140]
mov ecx, esi
add eax, 0x2d
push eax
mov eax, dword [ebp - 0x144]
add eax, 0x5a
push eax
push 8
push dword [ebp - 0x488]
call fcn.004f3760
jmp 0x436555
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push dword [ebp - 0x488]
mov ecx, esi
call fcn.004f3760
jmp 0x436555
cmp eax, 0xffffffb3
jne 0x434dbb
mov esi, dword [ebp - 0x4a4]
cmp dword [edi + 0x14a4], esi
mov esi, dword [ebp - 0x4a0]
je 0x434dc7
cmp eax, dword [ebp - 0x4ec]
jne 0x434e73
mov ecx, edi
call fcn.005c1c90
push 0x80
push dword [ebp - 0x4a4]
mov ecx, esi
call fcn.004f4b70
push dword [ebp - 0x4a4]
mov ecx, esi
call fcn.004f39c0
push eax
lea ecx, [ebp - 0x8c]
call fcn.0051dd60
push 0x64c6c8
lea ecx, [ebp - 0x8c]
call fcn.0051e060
mov ecx, esi
test al, al
je 0x434e5a
push 0
push 0
push dword [ebp - 0x4a4]
call fcn.004f44b0
push 0
push dword [ebp - 0x4a4]
mov ecx, esi
call fcn.004f6320
movsd xmm0, qword [0x6be540]
sub esp, 8
mov ecx, esi
movsd qword [esp], xmm0
push 0
push 0
push 0
push 0x190
push dword [ebp - 0x4a4]
call fcn.004f61c0
jmp 0x436555
push 0xffffffffffffffff
push 0
push 0xb1
push dword [ebp - 0x4a4]
call fcn.004f6680
jmp 0x436555
cmp eax, 0xffffffb4
jne 0x434edc
mov esi, dword [ebp - 0x4a4]
cmp dword [edi + 0x14a4], esi
mov esi, dword [ebp - 0x4a0]
jne 0x434edc
push dword [ebp - 0x4a4]
mov ecx, esi
call fcn.004f39c0
push eax
lea ecx, [ebp - 0x8c]
call fcn.0051dd60
lea ecx, [ebp - 0x8c]
call fcn.0051df40
cmp eax, 3
jl 0x43655e
push 0xffffffffffffffff
push 6
push 0xffffffffffffffff
lea ecx, [ebp - 0x8c]
call fcn.0051dd30
mov ecx, dword [ebp - 0x4b0]
mov edx, eax
call fcn.00500ac0
jmp 0x436555
cmp eax, dword [ebp - 0x4e0]
jne 0x434fa3
push dword [ebp - 0x4a4]
mov ecx, esi
call fcn.004f39c0
push eax
lea ecx, [ebp - 0x8c]
call fcn.0051dd60
push 0x64c6c8
lea ecx, [ebp - 0x8c]
call fcn.0051e060
test al, al
je 0x434f30
push 0
push 0
push 0x201
push dword [ebp - 0x4ec]
mov ecx, esi
call fcn.004f6680
jmp 0x43655e
push dword [ebp - 0x4e8]
lea ecx, [ebp - 0x8c]
push 0x1e
push 0xffffffffffffffff
call fcn.0051dd30
mov ecx, dword [ebp - 0x4b0]
mov edx, eax
call fcn.00500ac0
mov dword [ebp - 0x4e8], eax
mov ecx, esi
push 0x80
cmp eax, 0xffffffff
je 0x434f74
push dword [ebp - 0x444]
call fcn.004f4b70
jmp 0x436555
push dword [ebp - 0x4a4]
call fcn.004f4b70
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x8c
push 0x190
push 0
push esi
push 4
push 0x646010
mov ecx, edi
call fcn.00487a40
jmp 0x436555
cmp eax, 0xffffffeb
jne 0x434fc3
cmp dword [edi + 0x14a4], ecx
jne 0x434fd5
push dword [ebp - 0x4a4]
push ecx
mov ecx, edi
call fcn.004879e0
jmp 0x436555
cmp eax, 0xffffffd3
je 0x436546
cmp eax, 0xffffffd2
je 0x436546
cmp eax, dword [ebp - 0x518]
je 0x4364eb
cmp eax, dword [ebp - 0x4dc]
je 0x4364eb
cmp eax, 0xfffffff2
jne 0x434ffe
cmp dword [edi + 0x14a4], ecx
je 0x4364eb
cmp eax, dword [ebp - 0x51c]
je 0x435fac
cmp eax, dword [ebp - 0x500]
je 0x435fac
cmp eax, dword [ebp - 0x4f8]
je 0x435fac
cmp eax, dword [ebp - 0x514]
je 0x435fac
cmp eax, dword [ebp - 0x4fc]
je 0x435fac
cmp eax, dword [ebp - 0x520]
je 0x435fac
cmp eax, dword [ebp - 0x4f4]
je 0x435fac
cmp eax, dword [ebp - 0x4c4]
je 0x435fac
cmp eax, dword [ebp - 0x4b4]
je 0x435b5d
cmp eax, dword [ebp - 0x524]
je 0x435b5d
cmp eax, dword [ebp - 0x528]
jne 0x43510e
push 0xd
push dword [edi + 0x12d4]
xorps xmm0, xmm0
push ecx
push edx
push esi
lea ecx, [ebp - 0x184]
movups xmmword [ebp - 0x184], xmm0
movups xmmword [ebp - 0x174], xmm0
call fcn.004f0200
mov ecx, edi
mov byte [ebp - 4], 0x1f
call fcn.00430f50
test al, al
jne 0x4350c1
cmp dword [ebp - 0x4b8], 0
je 0x4350e4
push 0
lea eax, [ebp - 0x444]
mov ecx, edi
push eax
call fcn.00433a80
push dword [ebp - 0x444]
mov ecx, esi
call fcn.004fcac0
mov dword [ebp - 0x4b0], eax
push dword [ebp - 0x4bc]
call dword [0x5de728]
lea ecx, [ebp - 0x184]
mov dword [ebp - 0x4b8], 0
mov byte [ebp - 4], 0x14
call fcn.004f0190
jmp 0x436555
cmp eax, dword [ebp - 0x52c]
jne 0x43519d
push 0xd
push dword [edi + 0x12d4]
xorps xmm0, xmm0
push ecx
push edx
push esi
lea ecx, [ebp - 0x164]
movups xmmword [ebp - 0x164], xmm0
movups xmmword [ebp - 0x154], xmm0
call fcn.004f0200
mov ecx, edi
mov byte [ebp - 4], 0x20
call fcn.00430360
test al, al
je 0x435173
push 0
lea eax, [ebp - 0x444]
mov ecx, edi
push eax
call fcn.00433a80
push dword [ebp - 0x444]
mov ecx, esi
call fcn.004fcac0
mov dword [ebp - 0x4b0], eax
push dword [ebp - 0x4bc]
call dword [0x5de728]
lea ecx, [ebp - 0x164]
mov dword [ebp - 0x4b8], 0
mov byte [ebp - 4], 0x14
call fcn.004f0190
jmp 0x436555
cmp eax, dword [ebp - 0x4f0]
je 0x4356ee
cmp eax, dword [ebp - 0x4c8]
je 0x4356ee
cmp eax, edx
je 0x4356ee
cmp eax, dword [ebp - 0x4e4]
jne 0x435269
xorps xmm0, xmm0
push ecx
mov ecx, esi
movlpd qword [ebp - 0x80], xmm0
call fcn.004f2c90
mov ecx, eax
mov dword [ebp - 0x80], ecx
mov byte [ebp - 4], 0x25
mov edx, dword [ecx]
test edx, edx
jne 0x4351fa
push ecx
mov byte [ebp - 4], 0x14
call fcn.0041e896
add esp, 4
jmp 0x43655e
mov eax, 1
mov dword [ebp - 0x48c], eax
cmp edx, eax
jl 0x435257
nop dword [eax]
push 1
push dword [ecx + eax*4]
mov ecx, esi
push dword [ebp - 0x444]
call fcn.004f2da0
push eax
lea ecx, [ebp - 0x8c]
call fcn.0051dd60
push 2
lea ecx, [ebp - 0x8c]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.0044f580
mov eax, dword [ebp - 0x48c]
mov ecx, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x48c], eax
cmp eax, dword [ecx]
jle 0x435210
push ecx
mov byte [ebp - 4], 0x14
call fcn.0041e896
add esp, 4
jmp 0x436555
cmp eax, dword [ebp - 0x510]
jne 0x4354ff
xorps xmm0, xmm0
push ecx
mov ecx, esi
movlpd qword [ebp - 0x80], xmm0
call fcn.004f2c90
mov dword [ebp - 0x80], eax
mov byte [ebp - 4], 0x26
cmp dword [eax], 0
jne 0x4352a3
push eax
mov byte [ebp - 4], 0x14
call fcn.0041e896
add esp, 4
jmp 0x43655e
push 0xd
push dword [edi + 0x12d4]
xorps xmm0, xmm0
lea ecx, [ebp - 0xf8]
push dword [ebp - 0x444]
movups xmmword [ebp - 0xf8], xmm0
push dword [ebp - 0x4ac]
movups xmmword [ebp - 0xe8], xmm0
push esi
call fcn.004f0200
push 0
push str.Cancel
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x50
push 0x258
push 0
push 0x5fe50c
mov ecx, edi
mov byte [ebp - 4], 0x27
call fcn.004871d0
mov ecx, eax
call fcn.004edf50
push 1
lea ecx, [edi + 0x14e0]
push 0x64cd18
call fcn.004edf50
xorps xmm0, xmm0
mov dword [ebp - 0xd0], 0
lea ecx, [ebp - 0xd8]
movq qword [ebp - 0xd8], xmm0
call fcn.0051e180
mov byte [ebp - 4], 0x28
mov eax, 1
mov ecx, dword [ebp - 0x80]
mov dword [ebp - 0x498], eax
mov ecx, dword [ecx]
cmp ecx, eax
jl 0x4354c8
mov dword [ebp - 0x4a8], 0x64
cmp eax, ecx
jne 0x435382
push 2
push 2
lea ecx, [edi + 0x14e0]
call fcn.004edcf0
push 0x63dd80
push 1
lea ecx, [edi + 0x14e0]
call fcn.004edc80
mov eax, dword [ebp - 0x498]
mov ecx, dword [ebp - 0x80]
push 1
push dword [ecx + eax*4]
mov ecx, esi
push dword [ebp - 0x444]
call fcn.004f2da0
push eax
lea ecx, [ebp - 0x8c]
call fcn.0051dd60
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x628fc4
lea ecx, [ebp - 0x8c]
call fcn.0051dd30
push eax
push 0x6469e8
lea ecx, [ebp - 0xd8]
call fcn.0051dda0
lea ecx, [ebp - 0xd8]
call fcn.0051dd30
mov ecx, dword [ebp - 0x80]
push eax
mov eax, dword [ebp - 0x4a8]
cdq
idiv dword [ecx]
lea ecx, [edi + 0x14e0]
push eax
call fcn.004ee190
push 0
push 1
mov ecx, edi
call fcn.00486e80
lea ecx, [ebp - 0x8c]
call fcn.0051dd30
xor edx, edx
mov ecx, eax
call fcn.004ccc80
push eax
lea ecx, [ebp - 0xd8]
call fcn.0051dd60
lea ecx, [edi + 0x14e0]
call fcn.004edd50
push eax
mov edx, 0x1f4
lea ecx, [ebp - 0x8c]
call fcn.0048a1a0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x60477c
lea ecx, [ebp - 0x8c]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0xd8]
call fcn.0051c280
lea ecx, [ebp - 0xd8]
call fcn.0051dd30
push eax
push 0xffffffffffffffff
lea ecx, [edi + 0x14e0]
call fcn.004ee190
push 3
mov ecx, edi
call fcn.00487050
push 0
push 0
mov ecx, edi
call fcn.00486e80
test eax, eax
je 0x435493
cmp eax, 1
jg 0x4354c8
mov ecx, dword [ebp - 0x80]
mov eax, dword [ebp - 0x498]
add dword [ebp - 0x4a8], 0x64
inc eax
mov dword [ebp - 0x498], eax
mov ecx, dword [ecx]
cmp eax, ecx
jle 0x435359
push 2
lea ecx, [edi + 0x14e0]
call fcn.004edd80
lea ecx, [ebp - 0xd8]
call fcn.0051dfd0
lea ecx, [ebp - 0xf8]
call fcn.004f0190
mov byte [ebp - 4], 0x14
push dword [ebp - 0x80]
call fcn.0041e896
add esp, 4
jmp 0x436555
cmp eax, dword [ebp - 0x50c]
jne 0x435592
xorps xmm0, xmm0
push ecx
mov ecx, esi
movlpd qword [ebp - 0x80], xmm0
call fcn.004f2c90
mov dword [ebp - 0x80], eax
mov byte [ebp - 4], 0x29
mov ecx, dword [eax]
test ecx, ecx
jne 0x43553a
push eax
mov byte [ebp - 4], 0x14
call fcn.0041e896
add esp, 4
jmp 0x43655e
mov dword [ebp - 0x48c], 1
cmp ecx, 1
jl 0x43562a
mov edi, dword [ebp - 0x48c]
push 1
push dword [eax + edi*4]
mov ecx, esi
push dword [ebp - 0x444]
call fcn.004f2da0
push eax
lea ecx, [ebp - 0x8c]
call fcn.0051dd60
lea ecx, [ebp - 0x8c]
call fcn.0051dd30
xor edx, edx
mov ecx, eax
call fcn.004c9ab0
mov eax, dword [ebp - 0x80]
inc edi
cmp edi, dword [eax]
jle 0x435553
jmp 0x435624
cmp eax, dword [ebp - 0x508]
jne 0x43563c
xorps xmm0, xmm0
push ecx
mov ecx, esi
movlpd qword [ebp - 0x80], xmm0
call fcn.004f2c90
mov dword [ebp - 0x80], eax
mov byte [ebp - 4], 0x2a
mov ecx, dword [eax]
test ecx, ecx
jne 0x4355cd
push eax
mov byte [ebp - 4], 0x14
call fcn.0041e896
add esp, 4
jmp 0x43655e
mov dword [ebp - 0x48c], 1
cmp ecx, 1
jl 0x43562a
mov edi, dword [ebp - 0x48c]
push 1
push dword [eax + edi*4]
mov ecx, esi
push dword [ebp - 0x444]
call fcn.004f2da0
push eax
lea ecx, [ebp - 0x8c]
call fcn.0051dd60
push 0
lea ecx, [ebp - 0x8c]
call fcn.0051dd30
push eax
push 2
push dword [ebp - 0x4bc]
call dword [0x5de5ac]
mov eax, dword [ebp - 0x80]
inc edi
cmp edi, dword [eax]
jle 0x4355e2
mov edi, dword [ebp - 0x4c0]
push eax
mov byte [ebp - 4], 0x14
call fcn.0041e896
add esp, 4
jmp 0x436555
cmp eax, dword [ebp - 0x4d8]
jne 0x435658
push 1
push dword [ebp - 0x4b0]
mov ecx, edi
call fcn.00461bd0
jmp 0x436555
cmp eax, dword [ebp - 0x4d4]
jne 0x43567a
push 4
push 0x20
push 7
push 1
push dword [ebp - 0x4b0]
mov ecx, edi
call fcn.004618b0
jmp 0x436555
cmp eax, dword [ebp - 0x4d0]
jne 0x43569c
push 4
push 0
push 7
push 1
push dword [ebp - 0x4b0]
mov ecx, edi
call fcn.004618b0
jmp 0x436555
cmp eax, dword [ebp - 0x4cc]
je 0x4356b0
cmp eax, dword [ebp - 0x504]
jne 0x436555
push dword [ebp - 0x4b8]
lea eax, [ebp - 0x444]
mov ecx, edi
push eax
call fcn.00433a80
push dword [ebp - 0x444]
mov ecx, esi
call fcn.004fcac0
push dword [ebp - 0x4b4]
mov dword [ebp - 0x4b0], eax
push dword [ebp - 0x4ac]
push dword [ebp - 0x444]
jmp 0x43654e
xorps xmm0, xmm0
push ecx
mov ecx, esi
movlpd qword [ebp - 0xac], xmm0
call fcn.004f2c90
mov dword [ebp - 0xac], eax
mov byte [ebp - 4], 0x21
cmp dword [eax], 1
jge 0x435722
push eax
mov byte [ebp - 4], 0x14
call fcn.0041e896
add esp, 4
jmp 0x43655e
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, 0x630678
mov byte [ebp - 0x499], 0
push 0
mov eax, 0x5fe50c
cmovne eax, ecx
lea ecx, [ebp - 0x8c]
push eax
push 0x64cbb8
call fcn.0051dda0
mov eax, dword [edi + 0x1498]
cmp eax, dword [ebp - 0x4c8]
je 0x4357b0
cmp eax, dword [ebp - 0x4ac]
jne 0x435788
push 4
push dword [ebp - 0x530]
lea ecx, [ebp - 0x440]
call fcn.004f3c80
test eax, eax
jne 0x4357b0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5fe668
lea ecx, [ebp - 0x8c]
call fcn.0051c4c0
jmp 0x4357dd
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x64962c
lea ecx, [ebp - 0x8c]
call fcn.0051c4c0
mov byte [ebp - 0x499], 1
push 0xd
push dword [edi + 0x12d4]
xorps xmm0, xmm0
lea ecx, [ebp - 0xf8]
push dword [ebp - 0x444]
movups xmmword [ebp - 0xf8], xmm0
push dword [ebp - 0x4ac]
movups xmmword [ebp - 0xe8], xmm0
push esi
call fcn.004f0200
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x8c
push 0x8c
push 0
push 0
push 1
lea ecx, [ebp - 0x8c]
mov byte [ebp - 4], 0x22
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.00487a40
test eax, eax
jne 0x435860
lea ecx, [ebp - 0xf8]
call fcn.004f0190
mov byte [ebp - 4], 0x14
mov ecx, dword [ebp - 0xac]
push ecx
call fcn.0041e896
add esp, 4
jmp 0x43655e
xorps xmm0, xmm0
mov dword [ebp - 0xb0], 0
movq qword [ebp - 0xb8], xmm0
mov dword [ebp - 0xb0], 0
mov dword [ebp - 0xb8], 0
mov dword [ebp - 0xb4], 0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x50
push 0x1c2
push 0
push 0x649660
mov ecx, edi
mov byte [ebp - 4], 0x23
call fcn.004871d0
push 1
push str.Cancel
push 0
lea ecx, [edi + 0x14e0]
push 0xffffffffffffffb0
call fcn.004ee190
mov ecx, eax
call fcn.004edf50
mov ecx, dword [ebp - 0xac]
mov dword [ebp - 0x4a8], 0
mov eax, dword [ecx]
mov dword [ebp - 0x498], eax
test eax, eax
je 0x435a85
jmp 0x4358f6
mov ecx, dword [ebp - 0xac]
lea edx, [ebp - 0xb8]
push edx
push dword [ecx + eax*4]
mov ecx, edi
push dword [ebp - 0x444]
push esi
call fcn.0044b9c0
cmp eax, 6
jbe 0x435a70
mov eax, dword [ebp - 0xb8]
mov ecx, 1
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
test eax, eax
push 0
cmove eax, ecx
mov ecx, dword [ebp - 0xb0]
push 0x64cc24
mov dword [ebp - 0xb8], eax
call fcn.0051dd30
push eax
push 0x64cc40
lea ecx, [ebp - 0x8c]
call fcn.0051dda0
lea ecx, [ebp - 0x8c]
call fcn.0051dd30
push eax
push 0xffffffffffffffff
lea ecx, [edi + 0x14e0]
call fcn.004ee190
push 0
push 1
mov ecx, edi
call fcn.00486e80
test eax, eax
jne 0x435a85
cmp byte [ebp - 0x499], al
je 0x4359cd
mov eax, dword [ebp - 0xb8]
mov ecx, 2
cmp eax, 1
push 0
cmovbe eax, ecx
mov ecx, dword [ebp - 0xb0]
push 0xc
mov dword [ebp - 0xb8], eax
lea ecx, [ecx + 0xc]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.0044ab80
mov byte [ebp - 0x48d], al
jmp 0x4359d4
mov byte [ebp - 0x48d], 1
mov eax, dword [ebp - 0xb8]
mov ecx, 1
test eax, eax
cmove eax, ecx
mov ecx, dword [ebp - 0xb0]
mov dword [ebp - 0xb8], eax
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.0047e130
movzx ecx, byte [ebp - 0x48d]
xorps xmm0, xmm0
movzx eax, al
imul eax, ecx
lea ecx, [ebp - 0x134]
movq qword [ebp - 0x134], xmm0
mov dword [ebp - 0x12c], 0
mov dword [ebp - 0x48c], eax
call fcn.0051e180
cmp byte [ebp - 0x48c], 0
mov byte [ebp - 4], 0x24
je 0x435a61
mov eax, dword [ebp - 0x498]
mov ecx, dword [ebp - 0xac]
inc dword [ebp - 0x4a8]
push 0
push dword [ecx + eax*4]
mov ecx, esi
push dword [ebp - 0x444]
call fcn.004f31f0
lea ecx, [ebp - 0x134]
mov byte [ebp - 4], 0x23
call fcn.0051dfd0
mov eax, dword [ebp - 0x498]
sub eax, 1
mov dword [ebp - 0x498], eax
jne 0x4358f0
push 2
lea ecx, [edi + 0x14e0]
call fcn.004edd80
cmp byte [ebp - 0x499], 0
je 0x435b06
mov eax, dword [ebp - 0xac]
mov ecx, dword [ebp - 0x4a8]
cmp ecx, dword [eax]
jne 0x435b06
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
cmp ecx, 1
lea ecx, [ebp - 0x8c]
push 0x64a61c
jne 0x435ad6
push 0x64cc60
jmp 0x435adb
push 0x64ccc0
call fcn.0051dda0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x8c
push 0x190
push 0
push esi
push 4
lea ecx, [ebp - 0x8c]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.00487a40
lea ecx, [ebp - 0xf8]
call fcn.004f0000
push dword [ebp - 0x4b4]
mov ecx, edi
push dword [ebp - 0x4ac]
push dword [ebp - 0x444]
call fcn.005c13e0
mov ecx, dword [ebp - 0xb0]
test ecx, ecx
je 0x435b3b
push 3
call fcn.00401ff0
lea ecx, [ebp - 0xf8]
call fcn.004f0190
mov byte [ebp - 4], 0x14
push dword [ebp - 0xac]
call fcn.0041e896
add esp, 4
jmp 0x436555
xorps xmm0, xmm0
push ecx
mov ecx, esi
movlpd qword [ebp - 0x80], xmm0
call fcn.004f2c90
mov dword [ebp - 0x80], eax
mov byte [ebp - 4], 0x1a
cmp dword [eax], 1
jge 0x435b8b
push eax
mov byte [ebp - 4], 0x14
call fcn.0041e896
add esp, 4
jmp 0x43655e
push 0xd
push dword [edi + 0x12d4]
xorps xmm0, xmm0
lea ecx, [ebp - 0x1c0]
push dword [ebp - 0x444]
movups xmmword [ebp - 0x1c0], xmm0
push dword [ebp - 0x4ac]
movups xmmword [ebp - 0x1b0], xmm0
push esi
call fcn.004f0200
xorps xmm0, xmm0
mov dword [ebp - 0x90], 0
movq qword [ebp - 0x98], xmm0
mov dword [ebp - 0x90], 0
mov dword [ebp - 0x98], 0
mov dword [ebp - 0x94], 0
push 0
push 0x604a10
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0xf0]
push 0x64ca40
movups xmmword [ebp - 0xf0], xmm0
movq qword [ebp - 0xe0], xmm0
call fcn.0051b070
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x104]
xorps xmm0, xmm0
mov dword [ebp - 0xfc], 0
movq qword [ebp - 0x104], xmm0
call fcn.0051e180
mov byte [ebp - 4], 0x1e
mov eax, 1
mov ecx, dword [ebp - 0x80]
mov dword [ebp - 0x498], eax
cmp dword [ecx], eax
jl 0x435f65
nop word [eax + eax]
lea edx, [ebp - 0x98]
push edx
push dword [ecx + eax*4]
mov ecx, edi
push dword [ebp - 0x444]
push esi
call fcn.0044b9c0
cmp eax, 6
jbe 0x435f4d
lea ecx, [ebp - 0xf0]
mov dword [ebp - 0x48c], 0
mov dword [ebp - 0x480], 0
call fcn.0051afe0
test eax, eax
je 0x435d0f
mov eax, dword [ebp - 0x98]
mov ecx, 6
push dword [ebp - 0x480]
mov esi, dword [ebp - 0x90]
cmp eax, 5
cmovbe eax, ecx
lea ecx, [ebp - 0xf0]
mov dword [ebp - 0x98], eax
call fcn.0051aff0
push eax
lea ecx, [esi + 0x3c]
call fcn.0051e060
test al, al
jne 0x435cfd
mov esi, dword [ebp - 0x480]
lea ecx, [ebp - 0xf0]
inc esi
mov dword [ebp - 0x480], esi
call fcn.0051afe0
cmp esi, eax
jb 0x435ca4
jmp 0x435d09
mov eax, dword [ebp - 0x480]
mov dword [ebp - 0x48c], eax
mov esi, dword [ebp - 0x4a0]
mov eax, dword [ebp - 0x98]
mov ecx, 1
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
test eax, eax
push 0
cmove eax, ecx
mov ecx, dword [ebp - 0x90]
push 0x64cab4
mov dword [ebp - 0x98], eax
call fcn.0051dd30
push eax
push 0x64cac8
lea ecx, [ebp - 0x8c]
call fcn.0051dda0
push 0x96
push 0x190
push esi
lea ecx, [ebp - 0x8c]
call fcn.0051dd30
push eax
push dword [ebp - 0x48c]
mov ecx, edi
push 0x64ca40
call fcn.00486b50
mov dword [ebp - 0x48c], eax
test eax, eax
js 0x435f4d
lea ecx, [ebp - 0xf0]
call fcn.0051afe0
mov ecx, dword [ebp - 0x48c]
cmp ecx, eax
jge 0x435f4d
xor edx, edx
mov eax, 2
mov dword [ebp - 0x480], eax
cmp ecx, 1
jne 0x435dbe
mov edx, ecx
jmp 0x435e0c
cmp ecx, eax
jne 0x435dd3
mov dword [ebp - 0x480], 3
mov ecx, 1
jmp 0x435e0c
cmp ecx, 3
jne 0x435de9
mov dword [ebp - 0x480], 4
mov ecx, 1
jmp 0x435e0c
cmp ecx, 4
jne 0x435dfb
mov dword [ebp - 0x480], edx
mov ecx, 1
jmp 0x435e0c
cmp ecx, 5
mov ecx, 1
cmove eax, ecx
mov dword [ebp - 0x480], eax
mov eax, dword [ebp - 0x98]
test eax, eax
push edx
cmove eax, ecx
mov ecx, dword [ebp - 0x90]
mov dword [ebp - 0x98], eax
call fcn.0051dd30
movsd xmm3, qword [edi + 8]
mov ecx, eax
mov edx, dword [ebp - 0x480]
call fcn.004c8520
test al, al
mov eax, dword [ebp - 0x98]
je 0x435ee4
test eax, eax
je 0x435e52
cmp eax, 5
ja 0x435e5c
mov dword [ebp - 0x98], 6
mov ecx, dword [ebp - 0x90]
lea esi, [ecx + 0x3c]
call fcn.0051dd30
movsd xmm1, qword [edi + 8]
mov ecx, eax
call fcn.004c8640
push eax
mov ecx, esi
call fcn.0051dd60
mov eax, dword [ebp - 0x98]
mov ecx, 6
cmp eax, 5
push 5
cmovbe eax, ecx
mov ecx, dword [ebp - 0x90]
mov dword [ebp - 0x98], eax
lea ecx, [ecx + 0x3c]
call fcn.0051dd30
mov ecx, dword [ebp - 0x80]
mov esi, dword [ebp - 0x4a0]
push eax
mov eax, dword [ebp - 0x498]
push dword [ecx + eax*4]
mov ecx, esi
push dword [ebp - 0x444]
call fcn.004f1f20
mov eax, dword [ebp - 0x98]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x64cb20
jmp 0x435efb
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x64cb70
test eax, eax
mov ecx, 1
cmove eax, ecx
mov ecx, dword [ebp - 0x90]
mov dword [ebp - 0x98], eax
call fcn.0051dd30
push eax
push 0x64c9b8
lea ecx, [ebp - 0x104]
call fcn.0051dda0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x8c
push 0x190
push 0
push esi
push 4
lea ecx, [ebp - 0x104]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.00487a40
mov eax, dword [ebp - 0x498]
mov ecx, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x498], eax
cmp eax, dword [ecx]
jle 0x435c60
lea ecx, [ebp - 0x104]
call fcn.0051dfd0
lea ecx, [ebp - 0xf0]
call fcn.0051b050
mov ecx, dword [ebp - 0x90]
test ecx, ecx
je 0x435f8c
push 3
call fcn.00401ff0
lea ecx, [ebp - 0x1c0]
call fcn.004f0190
mov byte [ebp - 4], 0x14
mov ecx, dword [ebp - 0x80]
push ecx
call fcn.0041e896
add esp, 4
jmp 0x436555
xorps xmm0, xmm0
push ecx
mov ecx, esi
movlpd qword [ebp - 0x80], xmm0
call fcn.004f2c90
mov dword [ebp - 0x80], eax
mov byte [ebp - 4], 0x16
cmp dword [eax], 1
jge 0x435fda
push eax
mov byte [ebp - 4], 0x14
call fcn.0041e896
add esp, 4
jmp 0x43655e
mov eax, dword [edi + 0x1498]
mov dword [ebp - 0x480], 0x64c870
mov dword [ebp - 0x494], 0x64c880
mov dword [ebp - 0x4a8], 1
mov dword [ebp - 0xa8], 1
cmp eax, dword [ebp - 0x500]
je 0x436082
cmp eax, dword [ebp - 0x4fc]
je 0x436082
cmp eax, dword [ebp - 0x4f8]
je 0x436058
cmp eax, dword [ebp - 0x4f4]
je 0x436058
cmp eax, dword [ebp - 0x514]
je 0x436038
cmp eax, dword [ebp - 0x4c4]
jne 0x4360aa
mov dword [ebp - 0x480], 0x64c8d8
mov dword [ebp - 0x494], 0x64c8e8
mov dword [ebp - 0x4a8], 3
jmp 0x4360a0
mov dword [ebp - 0x480], 0x64c8b8
mov dword [ebp - 0x494], 0x64c8c8
mov dword [ebp - 0x4a8], 2
mov dword [ebp - 0xa8], 7
jmp 0x4360aa
mov dword [ebp - 0x480], 0x64c894
mov dword [ebp - 0x494], 0x64c8a4
mov dword [ebp - 0x4a8], 0x80
mov dword [ebp - 0xa8], 4
push 0xd
push dword [edi + 0x12d4]
xorps xmm0, xmm0
lea ecx, [ebp - 0xf8]
push dword [ebp - 0x444]
movups xmmword [ebp - 0xf8], xmm0
push dword [ebp - 0x4ac]
movups xmmword [ebp - 0xe8], xmm0
push esi
call fcn.004f0200
push 1
push str.Cancel
push 0
push 0xffffffffffffffb0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x50
push 0x1c2
push 0
push 0x5fe50c
mov ecx, edi
mov byte [ebp - 4], 0x17
call fcn.004871d0
mov ecx, eax
call fcn.004ee190
mov ecx, eax
call fcn.004edf50
xorps xmm0, xmm0
mov dword [ebp - 0xbc], 0
lea ecx, [ebp - 0xc4]
movq qword [ebp - 0xc4], xmm0
call fcn.0051e180
xorps xmm0, xmm0
mov dword [ebp - 0x9c], 0
movq qword [ebp - 0xa4], xmm0
mov dword [ebp - 0x498], 0
mov dword [ebp - 0x9c], 0
mov dword [ebp - 0xa4], 0
mov dword [ebp - 0xa0], 0
mov byte [ebp - 4], 0x19
mov eax, 1
mov ecx, dword [ebp - 0x80]
mov dword [ebp - 0x48c], eax
cmp dword [ecx], eax
jl 0x436382
nop dword [eax + eax]
lea edx, [ebp - 0xa4]
push edx
push dword [ecx + eax*4]
mov ecx, edi
push dword [ebp - 0x444]
push esi
call fcn.0044b9c0
cmp eax, 6
jbe 0x43636a
mov eax, dword [ebp - 0xa4]
mov ecx, 1
push 0
push 0
push 0
push 0
push 0
push 0
push 0
test eax, eax
push 0
cmove eax, ecx
mov ecx, dword [ebp - 0x9c]
push 0x64c8fc
mov dword [ebp - 0xa4], eax
call fcn.0051dd30
push eax
push 0x64c918
push dword [ebp - 0x494]
lea ecx, [ebp - 0xc4]
call fcn.0051dda0
lea ecx, [ebp - 0xc4]
call fcn.0051dd30
push eax
push 0xffffffffffffffff
lea ecx, [edi + 0x14e0]
call fcn.004ee190
push 0
push 1
mov ecx, edi
call fcn.00486e80
test eax, eax
jne 0x436382
mov eax, dword [ebp - 0xa4]
mov ecx, 1
push dword [ebp - 0xa8]
test eax, eax
push dword [ebp - 0x4a8]
cmove eax, ecx
mov ecx, dword [ebp - 0x9c]
mov dword [ebp - 0xa4], eax
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.0047e3e0
cmp eax, 1
jne 0x43626c
inc dword [ebp - 0x498]
jmp 0x4362de
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x8c
mov eax, dword [ebp - 0xa4]
mov ecx, 1
push 0x190
push 0
push esi
push 4
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x64c928
push dword [ebp - 0x480]
test eax, eax
push 0x64c988
cmove eax, ecx
mov ecx, dword [ebp - 0x9c]
mov dword [ebp - 0xa4], eax
call fcn.0051dd30
push eax
push 0x64c9b8
lea ecx, [ebp - 0x8c]
call fcn.0051dda0
mov ecx, eax
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.00487a40
mov eax, dword [ebp - 0xa4]
test eax, eax
je 0x4362ed
cmp eax, 3
ja 0x4362f7
mov dword [ebp - 0xa4], 4
mov ecx, dword [ebp - 0x9c]
lea esi, [ecx + 0x24]
call fcn.0051dd30
mov ecx, eax
call fcn.004c8930
push eax
mov ecx, esi
call fcn.0051dd60
mov eax, dword [ebp - 0xa4]
mov ecx, 4
cmp eax, 3
push 3
cmovbe eax, ecx
mov ecx, dword [ebp - 0x9c]
mov dword [ebp - 0xa4], eax
lea ecx, [ecx + 0x24]
call fcn.0051dd30
mov ecx, dword [ebp - 0x80]
mov esi, dword [ebp - 0x4a0]
push eax
mov eax, dword [ebp - 0x48c]
push dword [ecx + eax*4]
mov ecx, esi
push dword [ebp - 0x444]
call fcn.004f1f20
push 0
push 1
mov ecx, edi
call fcn.00486e80
test eax, eax
jne 0x436382
mov eax, dword [ebp - 0x48c]
mov ecx, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x48c], eax
cmp eax, dword [ecx]
jle 0x436190
push 2
lea ecx, [edi + 0x14e0]
call fcn.004edd80
mov eax, dword [ebp - 0x80]
mov eax, dword [eax]
cmp eax, 1
jne 0x4363ec
cmp dword [ebp - 0x498], 0
je 0x4363e9
mov eax, dword [ebp - 0xa4]
mov ecx, 1
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5fe508
push dword [ebp - 0x480]
test eax, eax
push 0x64c9c4
cmove eax, ecx
mov ecx, dword [ebp - 0x9c]
mov dword [ebp - 0xa4], eax
call fcn.0051dd30
push eax
push 0x64c9b8
jmp 0x436447
cmp eax, 1
jle 0x4364b3
push eax
lea ecx, [ebp - 0xc4]
call fcn.0051cfb0
push 0
push 0
push 0
push 0
push 0
push 0x5fe508
push dword [ebp - 0x480]
lea ecx, [ebp - 0xc4]
push 0x64c9fc
call fcn.0051dd30
push eax
push 0x646ee0
push dword [ebp - 0x498]
lea ecx, [ebp - 0x8c]
call fcn.0051cfb0
mov ecx, eax
call fcn.0051dd30
push eax
push 0x64ca14
lea ecx, [ebp - 0xc4]
call fcn.0051dda0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x8c
push 0x190
push 0
push esi
push 4
lea ecx, [ebp - 0xc4]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.00487a40
mov ecx, dword [ebp - 0x9c]
test ecx, ecx
je 0x436489
push 3
call fcn.00401ff0
lea ecx, [ebp - 0xc4]
call fcn.0051dfd0
lea ecx, [ebp - 0xf8]
call fcn.004f0190
mov byte [ebp - 4], 0x14
push dword [ebp - 0x80]
call fcn.0041e896
add esp, 4
jmp 0x436555
mov ecx, dword [ebp - 0x9c]
test ecx, ecx
je 0x4364c4
push 3
call fcn.00401ff0
lea ecx, [ebp - 0xc4]
call fcn.0051dfd0
lea ecx, [ebp - 0xf8]
call fcn.004f0190
mov byte [ebp - 4], 0x14
push dword [ebp - 0x80]
call fcn.0041e896
add esp, 4
jmp 0x43655e
push 0xd
push dword [edi + 0x12d4]
xorps xmm0, xmm0
push ecx
push edx
push esi
lea ecx, [ebp - 0x1e0]
movups xmmword [ebp - 0x1e0], xmm0
movups xmmword [ebp - 0x1d0], xmm0
call fcn.004f0200
mov byte [ebp - 4], 0x15
mov ecx, edi
push dword [ebp - 0x444]
call fcn.00431520
push dword [ebp - 0x4bc]
mov byte [ebp - 0x482], al
call dword [0x5de728]
lea ecx, [ebp - 0x1e0]
mov byte [ebp - 4], 0x14
call fcn.004f0190
jmp 0x436555
push dword [ebp - 0x4b4]
push edx
push ecx
mov ecx, edi
call fcn.005c13e0
cmp byte [ebp - 0x482], 0
jne 0x436578
push 0
mov ecx, edi
call fcn.005c4c60
test eax, eax
jne 0x434bb0
jmp 0x436578
mov byte [ebp - 0x482], 1
push dword [ebp - 0x4b0]
mov ecx, edi
push 0x64c6f8
call fcn.0044ba50
push 0
push 0x64c6f8
mov ecx, edi
call fcn.0044f950
cmp byte [ebp - 0x482], 0
mov ecx, edi
sete al
movzx eax, al
push eax
call fcn.0044f830
lea ecx, [ebp - 0xcc]
call fcn.005187c0
lea ecx, [ebp - 0xc8]
call fcn.005187c0
lea ecx, [ebp - 0x110]
call fcn.0051dfd0
lea ecx, [ebp - 0x128]
call fcn.0051dfd0
lea ecx, [ebp - 0x11c]
call fcn.0051dfd0
lea ecx, [ebp - 0x8c]
call fcn.0051dfd0
lea ecx, [ebp - 0x450]
call fcn.004fd7d0
lea ecx, [ebp - 0x46c]
call fcn.004fd7d0
lea ecx, [ebp - 0x468]
call fcn.004fd7d0
lea ecx, [ebp - 0x47c]
call fcn.004fd7d0
lea ecx, [ebp - 0x464]
call fcn.004fd7d0
lea ecx, [ebp - 0x460]
call fcn.004fd7d0
lea ecx, [ebp - 0x45c]
call fcn.004fd7d0
lea ecx, [ebp - 0x454]
call fcn.004fd7d0
lea ecx, [ebp - 0x458]
call fcn.004fd7d0
lea ecx, [ebp - 0x478]
call fcn.004fd7d0
lea ecx, [ebp - 0x44c]
call fcn.004fd7d0
lea ecx, [ebp - 0x474]
call fcn.004fd7d0
lea ecx, [ebp - 0x470]
call fcn.004fd7d0
lea ecx, [ebp - 0x448]
call fcn.004fd7d0
lea ecx, [ebp - 0x440]
call fcn.004f92f0
mov al, byte [ebp - 0x482]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0041e885
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret