Function at 0x45ae50
Capabilities:
Create process on windows

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff0
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4c76c0
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x420
mov eax, dword [0x5df148]
xor eax, ebp
mov dword [ebp - 0x14], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0xd0], ecx
mov eax, dword [0x5e5180]
mov ecx, dword fs:[0x2c]
mov edx, dword [ecx + eax*4]
mov eax, dword [0x5e398c]
cmp eax, dword [edx + 4]
jle 0x45aefe
push 0x5e398c
call fcn.004996c4
add esp, 4
cmp dword [0x5e398c], 0xffffffff
jne 0x45aefe
mov dword [ebp - 4], 0
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
mov ecx, 0x5e3984
call fcn.0041b1d0
mov dword [ebp - 4], 0xffffffff
push 0x5e398c
call fcn.0049967a
add esp, 4
mov ecx, dword [0x5e5180]
mov edx, dword fs:[0x2c]
mov eax, dword [edx + ecx*4]
mov ecx, dword [0x5e39a0]
cmp ecx, dword [eax + 4]
jle 0x45af7b
push 0x5e39a0
call fcn.004996c4
add esp, 4
cmp dword [0x5e39a0], 0xffffffff
jne 0x45af7b
mov dword [ebp - 4], 1
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
mov ecx, 0x5e3990
call fcn.0041b280
mov dword [ebp - 4], 0xffffffff
push 0x5e39a0
call fcn.0049967a
add esp, 4
call fcn.00449500
call fcn.0044a990
call fcn.0042b6a0
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
lea ecx, [ebp - 0x25c]
call fcn.0041b1d0
push eax
push 0
push 0x5e3984
call fcn.0042fc80
add esp, 0xc
lea edx, [ebp - 0x98]
push edx
mov eax, dword [ebp - 0xd0]
mov ecx, dword [eax + 0x10]
push ecx
call dword [sym.imp.USER32.dll_GetClientRect]
test eax, eax
je 0x45c9bb
cvtsi2ss xmm0, dword [ebp - 0x90]
cvtsi2ss xmm1, dword [ebp - 0x98]
subss xmm0, xmm1
movss dword [ebp - 0x1b4], xmm0
cvtsi2ss xmm0, dword [ebp - 0x8c]
cvtsi2ss xmm1, dword [ebp - 0x94]
subss xmm0, xmm1
movss dword [ebp - 0x130], xmm0
call fcn.00424d00
mov dword [ebp - 0x11c], eax
push 0
push ecx
movss xmm0, dword [ebp - 0x130]
movss dword [esp], xmm0
push ecx
movss xmm0, dword [ebp - 0x1b4]
movss dword [esp], xmm0
lea ecx, [ebp - 0x264]
call fcn.0041b1d0
push eax
call fcn.0042fd00
add esp, 8
push 0x243e
push 0
mov ecx, 0x5e3968
call fcn.0040bed0
push eax
call fcn.0041bf90
add esp, 0xc
movzx edx, al
test edx, edx
je 0x45c9bb
call fcn.0044c270
movzx eax, al
test eax, eax
je 0x45b2b1
call fcn.00425020
fstp dword [ebp - 0x1b8]
movss xmm0, dword [ebp - 0x1b8]
push ecx
movss xmm1, dword [0x4ce290]
movss dword [esp], xmm1
push 0
push 0
mov ecx, 0x5e38d8
movss dword [ebp - 0x1bc], xmm0
call fcn.0040bed0
push eax
lea ecx, [ebp - 0x1fc]
push ecx
call fcn.004203c0
add esp, 0x14
movss xmm0, dword [ebp - 0x1bc]
subss xmm0, dword [eax]
mov edx, dword [ebp - 0x11c]
movss xmm1, dword [edx + 0x38]
mulss xmm1, dword [0x4ce238]
subss xmm0, xmm1
movss dword [ebp - 0x118], xmm0
push 1
push 0
push 0
mov ecx, 0x5e3890
call fcn.0040bed0
push eax
call fcn.0044eee0
add esp, 0x10
movzx eax, al
test eax, eax
je 0x45b162
movzx ecx, byte [0x5e3980]
test ecx, ecx
jne 0x45b162
mov edx, dword [ebp - 0xd0]
mov dword [ebp - 0x1c0], edx
lea eax, [ebp - 0x1c0]
push eax
push 0x45cab0
lea ecx, [ebp - 0x58]
call fcn.00451b90
mov dword [ebp - 4], 2
lea ecx, [ebp - 0x58]
call fcn.004546e0
mov byte [0x5e3980], 1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x58]
call fcn.004534f0
push 1
push 0
push 0
mov ecx, 0x5e3740
call fcn.0040bed0
push eax
call fcn.0044eee0
add esp, 0x10
movzx ecx, al
test ecx, ecx
je 0x45b1cd
movzx edx, byte [0x5e3981]
test edx, edx
jne 0x45b1cd
mov byte [ebp - 0xe8], 1
lea eax, [ebp - 0xe8]
push eax
push 0x45aa80
lea ecx, [ebp - 0x50]
call fcn.00455930
mov dword [ebp - 4], 3
lea ecx, [ebp - 0x50]
call fcn.004546e0
mov byte [0x5e3981], 1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x50]
call fcn.004534f0
push ecx
movss xmm0, dword [ebp - 0x118]
movss dword [esp], xmm0
call fcn.0042f8a0
add esp, 4
push 1
push 0
push 0
mov ecx, 0x5e38d8
call fcn.0040bed0
push eax
call fcn.0044eee0
add esp, 0x10
movzx ecx, al
test ecx, ecx
je 0x45b20d
mov edx, dword [ebx + 8]
mov dword [edx + 4], 0x12
push ecx
movss xmm0, dword [0x4ce290]
movss dword [esp], xmm0
push 0
push 0
mov ecx, 0x5e3950
call fcn.0040bed0
push eax
lea eax, [ebp - 0x204]
push eax
call fcn.004203c0
add esp, 0x14
movss xmm0, dword [ebp - 0x118]
subss xmm0, dword [eax]
mov ecx, dword [ebp - 0x11c]
movss xmm1, dword [ecx + 0x38]
mulss xmm1, dword [0x4ce238]
subss xmm0, xmm1
movss dword [ebp - 0x1c4], xmm0
push ecx
movss xmm0, dword [ebp - 0x1c4]
movss dword [esp], xmm0
call fcn.0042f8a0
add esp, 4
push 1
push 0
push 0
mov ecx, 0x5e3950
call fcn.0040bed0
push eax
call fcn.0044eee0
add esp, 0x10
movzx edx, al
test edx, edx
je 0x45b2ac
push 6
mov eax, dword [ebp - 0xd0]
mov ecx, dword [eax + 0x10]
push ecx
call dword [sym.imp.USER32.dll_ShowWindow]
call fcn.0044e540
lea edx, [ebp - 0x60]
push edx
call fcn.00424000
add esp, 4
movss xmm0, dword [ebp - 0x60]
movss dword [ebp - 0x114], xmm0
movss xmm0, dword [ebp - 0x5c]
movss dword [ebp - 0x19c], xmm0
movss xmm0, dword [ebp - 0x114]
divss xmm0, dword [0x4ce238]
movss dword [ebp - 0xd8], xmm0
call fcn.00424d00
mov dword [ebp - 0xd4], eax
push 0
push 0
push 2
call fcn.0044de00
add esp, 0xc
mov eax, dword [ebp - 0xd0]
mov ecx, dword [eax + 0xc]
call fcn.004166a0
mov dword [ebp - 0x1dc], eax
mov ecx, dword [ebp - 0xd0]
movss xmm0, dword [0x571a88]
mulss xmm0, dword [ecx + 4]
movss dword [ebp - 0x10c], xmm0
movss xmm0, dword [ebp - 0x10c]
divss xmm0, dword [0x4ce228]
movss xmm1, dword [ebp - 0xd8]
subss xmm1, xmm0
push ecx
movss dword [esp], xmm1
call fcn.0042f8a0
add esp, 4
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
lea ecx, [ebp - 0x350]
call fcn.0041b280
mov dword [ebp - 0x1c8], eax
push ecx
movss xmm0, dword [0x4ce214]
movss dword [esp], xmm0
push ecx
movss xmm0, dword [0x4ce214]
movss dword [esp], xmm0
push ecx
movss xmm0, dword [0x4ce214]
movss dword [esp], xmm0
push ecx
movss xmm0, dword [0x4ce214]
movss dword [esp], xmm0
lea ecx, [ebp - 0x360]
call fcn.0041b280
mov dword [ebp - 0x1cc], eax
push ecx
movss xmm0, dword [0x4ce214]
movss dword [esp], xmm0
push ecx
movss xmm0, dword [0x4ce214]
movss dword [esp], xmm0
lea ecx, [ebp - 0x20c]
call fcn.0041b1d0
mov dword [ebp - 0x1d0], eax
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
lea ecx, [ebp - 0x214]
call fcn.0041b1d0
mov dword [ebp - 0x1d4], eax
push ecx
movss xmm0, dword [ebp - 0x10c]
movss dword [esp], xmm0
push ecx
movss xmm0, dword [ebp - 0x10c]
movss dword [esp], xmm0
lea ecx, [ebp - 0x21c]
call fcn.0041b1d0
mov dword [ebp - 0x1d8], eax
mov edx, dword [ebp - 0x1c8]
push edx
mov eax, dword [ebp - 0x1cc]
push eax
mov ecx, dword [ebp - 0x1d0]
push ecx
mov edx, dword [ebp - 0x1d4]
push edx
mov eax, dword [ebp - 0x1d8]
push eax
mov ecx, dword [ebp - 0x1dc]
push ecx
call fcn.0044ecc0
add esp, 0x18
push ecx
movss xmm0, dword [0x4ce290]
movss dword [esp], xmm0
push 0
push 0
mov ecx, 0x5e3710
call fcn.0040bed0
push eax
lea edx, [ebp - 0x224]
push edx
call fcn.004203c0
add esp, 0x14
movss xmm0, dword [eax]
divss xmm0, dword [0x4ce228]
movss xmm1, dword [ebp - 0xd8]
subss xmm1, xmm0
push ecx
movss dword [esp], xmm1
call fcn.0042f8a0
add esp, 4
mov ecx, 0x5e3710
call fcn.0040bed0
push eax
call fcn.00451270
movss xmm0, dword [0x4ce290]
movss dword [esp], xmm0
push 0
push 0
mov ecx, 0x5e3848
call fcn.0040bed0
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.004203c0
add esp, 0x14
mov ecx, dword [ebp - 0xd4]
movss xmm0, dword [ecx + 0x38]
mulss xmm0, dword [0x4ce228]
addss xmm0, dword [ebp - 0x28]
movss dword [ebp - 0x28], xmm0
mov edx, dword [ebp - 0xd4]
movss xmm0, dword [edx + 0x3c]
mulss xmm0, dword [0x4ce228]
addss xmm0, dword [ebp - 0x24]
movss dword [ebp - 0x24], xmm0
lea ecx, [ebp - 0x88]
call fcn.00458d50
mov dword [ebp - 4], 4
mov byte [ebp - 0x15], 0
mov byte [ebp - 0x16], 0
mov byte [ebp - 0x17], 0
mov eax, dword [ebp - 0xd0]
mov cl, byte [eax + 0x68]
mov byte [ebp - 0x110], cl
cmp byte [ebp - 0x110], 1
je 0x45b59c
cmp byte [ebp - 0x110], 2
je 0x45b5b7
cmp byte [ebp - 0x110], 3
je 0x45b5d2
jmp 0x45b5eb
mov edx, dword [ebp - 0xd0]
add edx, 0x14
push edx
lea ecx, [ebp - 0x88]
call fcn.004099d0
mov byte [ebp - 0x15], 1
jmp 0x45b5eb
mov eax, dword [ebp - 0xd0]
add eax, 0x2c
push eax
lea ecx, [ebp - 0x88]
call fcn.004099d0
mov byte [ebp - 0x16], 1
jmp 0x45b5eb
mov ecx, dword [ebp - 0xd0]
add ecx, 0x44
push ecx
lea ecx, [ebp - 0x88]
call fcn.004099d0
mov byte [ebp - 0x17], 1
call fcn.00424270
fstp dword [ebp - 0x120]
mov edx, dword [ebp - 0xd4]
movss xmm0, dword [edx + 0x50]
movss dword [ebp - 0x124], xmm0
push ecx
movss xmm0, dword [0x4ce290]
movss dword [esp], xmm0
push 0
push 0
mov ecx, 0x5e3758
call fcn.0040bed0
push eax
lea eax, [ebp - 0xa0]
push eax
call fcn.004203c0
add esp, 0x10
movss xmm0, dword [0x4ce290]
movss dword [esp], xmm0
push 0
push 0
mov ecx, 0x5e37d0
call fcn.0040bed0
push eax
lea ecx, [ebp - 0x38]
push ecx
call fcn.004203c0
add esp, 0x10
movss xmm0, dword [0x4ce290]
movss dword [esp], xmm0
push 0
push 0
mov ecx, 0x5e36e0
call fcn.0040bed0
push eax
lea edx, [ebp - 0xa8]
push edx
call fcn.004203c0
add esp, 0x14
mov eax, dword [ebp - 0xd4]
movss xmm0, dword [eax + 0x48]
mulss xmm0, dword [0x4ce228]
movss xmm1, dword [ebp - 0x120]
addss xmm1, dword [ebp - 0x124]
mulss xmm1, dword [0x4ce230]
addss xmm0, xmm1
addss xmm0, dword [ebp - 0xa0]
addss xmm0, dword [ebp - 0x38]
addss xmm0, dword [ebp - 0xa8]
movss dword [ebp - 0x1e0], xmm0
movss xmm0, dword [ebp - 0x1e0]
divss xmm0, dword [0x4ce228]
movss xmm1, dword [ebp - 0xd8]
subss xmm1, xmm0
push ecx
movss dword [esp], xmm1
call fcn.0042f8a0
add esp, 4
lea ecx, [ebp - 0x15]
push ecx
mov ecx, 0x5e3758
call fcn.0040bed0
push eax
call fcn.0044d1f0
add esp, 8
movzx edx, al
test edx, edx
je 0x45b729
push 1
mov ecx, dword [ebp - 0xd0]
call fcn.0045e810
push ecx
movss xmm0, dword [0x4ce290]
movss dword [esp], xmm0
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
call fcn.0042ef10
add esp, 8
lea eax, [ebp - 0x16]
push eax
mov ecx, 0x5e37d0
call fcn.0040bed0
push eax
call fcn.0044d1f0
add esp, 8
movzx ecx, al
test ecx, ecx
je 0x45b773
push 2
mov ecx, dword [ebp - 0xd0]
call fcn.0045e810
push ecx
movss xmm0, dword [0x4ce290]
movss dword [esp], xmm0
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
call fcn.0042ef10
add esp, 8
lea edx, [ebp - 0x17]
push edx
mov ecx, 0x5e36e0
call fcn.0040bed0
push eax
call fcn.0044d1f0
add esp, 8
movzx eax, al
test eax, eax
je 0x45b7bd
push 3
mov ecx, dword [ebp - 0xd0]
call fcn.0045e810
push ecx
movss xmm0, dword [0x4ce290]
movss dword [esp], xmm0
push 0
push 0
mov ecx, 0x5e37a0
call fcn.0040bed0
push eax
lea ecx, [ebp - 0x22c]
push ecx
call fcn.004203c0
add esp, 0x14
movss xmm0, dword [eax]
addss xmm0, dword [ebp - 0x120]
addss xmm0, dword [ebp - 0x124]
divss xmm0, dword [0x4ce228]
movss xmm1, dword [ebp - 0xd8]
subss xmm1, xmm0
push ecx
movss dword [esp], xmm1
call fcn.0042f8a0
add esp, 4
mov edx, dword [ebp - 0xd0]
add edx, 0x70
push edx
mov ecx, 0x5e37a0
call fcn.0040bed0
push eax
call fcn.0044d1f0
add esp, 8
movzx eax, al
test eax, eax
je 0x45b859
mov ecx, dword [ebp - 0xd0]
movzx edx, byte [ecx + 0x70]
push edx
mov ecx, dword [ebp - 0xd0]
call fcn.0045e750
lea ecx, [ebp - 0x88]
call fcn.00454740
movzx eax, al
test eax, eax
je 0x45b8d0
push ecx
movss xmm0, dword [0x4ce290]
movss dword [esp], xmm0
push 0
push 0
mov ecx, 0x5e3860
call fcn.0040bed0
push eax
lea ecx, [ebp - 0x234]
push ecx
call fcn.004203c0
add esp, 0x14
movss xmm0, dword [eax]
divss xmm0, dword [0x4ce228]
movss xmm1, dword [ebp - 0xd8]
subss xmm1, xmm0
push ecx
movss dword [esp], xmm1
call fcn.0042f8a0
add esp, 4
mov ecx, 0x5e3860
call fcn.0040bed0
push eax
call fcn.00451270
add esp, 4
movss xmm0, dword [ebp - 0x28]
divss xmm0, dword [0x4ce228]
movss xmm1, dword [ebp - 0xd8]
subss xmm1, xmm0
push ecx
movss dword [esp], xmm1
call fcn.0042f8a0
add esp, 4
mov byte [ebp - 0xd9], 0
lea ecx, [ebp - 0x88]
call fcn.00454740
movzx edx, al
test edx, edx
jne 0x45b91b
movzx eax, byte [0x5e3982]
test eax, eax
je 0x45b94f
push 1
push 4
call fcn.0042c860
add esp, 8
call fcn.00424d00
movss xmm0, dword [eax]
mulss xmm0, dword [0x4cb9f8]
push ecx
movss dword [esp], xmm0
push 0
call fcn.0042ca90
add esp, 8
mov byte [ebp - 0xd9], 1
lea ecx, [ebp - 0x28]
push ecx
mov ecx, 0x5e3848
call fcn.0040bed0
push eax
call fcn.0044c6b0
add esp, 8
movzx edx, al
test edx, edx
je 0x45b9bb
lea ecx, [ebp - 0x88]
call fcn.00454430
mov dword [ebp - 0x1e4], eax
mov eax, dword [ebp - 0xd0]
add eax, 0x70
push eax
lea ecx, [ebp - 0x1e4]
push ecx
push 0x45e8f0
lea ecx, [ebp - 0x68]
call fcn.004557b0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x68]
call fcn.004546e0
mov byte [0x5e3982], 1
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x68]
call fcn.004534f0
lea ecx, [ebp - 0x88]
call fcn.00454740
movzx edx, al
test edx, edx
jne 0x45b9d8
movzx eax, byte [0x5e3982]
test eax, eax
je 0x45b9f2
movzx ecx, byte [ebp - 0xd9]
test ecx, ecx
je 0x45b9f2
push 1
call fcn.0042c550
add esp, 4
call fcn.0042c410
lea edx, [ebp - 0x38]
push edx
call fcn.0044dfe0
add esp, 4
lea eax, [ebp - 0x38]
push eax
call fcn.0044dfe0
movss xmm0, dword [0x4ce290]
movss dword [esp], xmm0
push 0
push 0
mov ecx, 0x5e3728
call fcn.0040bed0
push eax
lea ecx, [ebp - 0x40]
push ecx
call fcn.004203c0
add esp, 0x14
movss xmm0, dword [ebp - 0x40]
divss xmm0, dword [0x4ce228]
movss xmm1, dword [ebp - 0xd8]
subss xmm1, xmm0
push ecx
movss dword [esp], xmm1
call fcn.0042f8a0
add esp, 4
mov ecx, 0x5e3728
call fcn.0040bed0
push eax
call fcn.00451270
add esp, 4
mov edx, dword [0x5e5180]
mov eax, dword fs:[0x2c]
mov ecx, dword [eax + edx*4]
mov edx, dword [0x5e39bc]
cmp edx, dword [ecx + 4]
jle 0x45bacd
push 0x5e39bc
call fcn.004996c4
add esp, 4
cmp dword [0x5e39bc], 0xffffffff
jne 0x45bacd
mov byte [ebp - 4], 6
push 0x5e3818
mov ecx, 0x5e39a4
call fcn.00408650
push 0x4ca260
call fcn.00498f5e
add esp, 4
mov byte [ebp - 4], 4
push 0x5e39bc
call fcn.0049967a
add esp, 4
movss xmm0, dword [ebp - 0x40]
mulss xmm0, dword [0x4d2b14]
push ecx
movss dword [esp], xmm0
call fcn.0042c8d0
add esp, 4
movss xmm0, dword [ebp - 0x40]
mulss xmm0, dword [0x4d2b14]
divss xmm0, dword [0x4ce228]
movss xmm1, dword [ebp - 0xd8]
subss xmm1, xmm0
push ecx
movss dword [esp], xmm1
call fcn.0042f8a0
add esp, 4
mov ecx, 0x5e39a4
call fcn.0040bed0
mov dword [ebp - 0x1e8], eax
mov ecx, 0x5e37b8
call fcn.0040bed0
mov dword [ebp - 0x1ec], eax
push 0
mov eax, dword [ebp - 0x1e8]
push eax
mov ecx, dword [ebp - 0x1ec]
push ecx
call fcn.0044b920
add esp, 0xc
movzx edx, al
test edx, edx
je 0x45be6d
push 8
lea ecx, [ebp - 0x48]
call fcn.0040ba90
lea eax, [ebp - 0x48]
push eax
call fcn.00467550
add esp, 4
mov byte [ebp - 4], 7
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
lea ecx, [ebp - 0x23c]
call fcn.0041b1d0
mov dword [ebp - 0x1f0], eax
mov ecx, dword [ebp - 0xd0]
cmp dword [ecx + 0x6c], 0
jne 0x45bbac
mov byte [ebp - 0xda], 1
jmp 0x45bbb3
mov byte [ebp - 0xda], 0
mov ecx, 0x5e3818
call fcn.0040bed0
mov dword [ebp - 0x138], eax
mov edx, dword [ebp - 0x1f0]
push edx
push 0
movzx eax, byte [ebp - 0xda]
push eax
mov ecx, dword [ebp - 0x138]
push ecx
call fcn.00450590
add esp, 0x10
movzx edx, al
test edx, edx
je 0x45bc0c
mov eax, dword [ebp - 0xd0]
mov dword [eax + 0x6c], 0
mov ecx, 0x5e3818
call fcn.0040bed0
push eax
mov ecx, 0x5e39a4
call fcn.0045a0a0
lea ecx, [ebp - 0x48]
mov dword [ebp - 0x128], ecx
push 4
lea ecx, [ebp - 0x20]
call fcn.0040ba90
lea edx, [ebp - 0x20]
push edx
mov ecx, dword [ebp - 0x128]
call fcn.0040b9f0
lea eax, [ebp - 0x18]
push eax
mov ecx, dword [ebp - 0x128]
call fcn.0040ba20
jmp 0x45bc47
lea ecx, [ebp - 0x20]
call fcn.00409e10
movzx ecx, byte [ebp - 0x18]
push ecx
lea ecx, [ebp - 0x20]
call fcn.00409ba0
movzx edx, al
test edx, edx
je 0x45be5c
lea ecx, [ebp - 0x20]
call fcn.00409d80
mov dword [ebp - 0x104], eax
push 0x5e3680
lea ecx, [ebp - 0x2ac]
call fcn.00408650
mov dword [ebp - 0x13c], eax
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0x140], eax
mov byte [ebp - 4], 8
mov ecx, dword [ebp - 0x140]
mov dword [ebp - 0x150], ecx
mov edx, dword [ebp - 0x104]
mov eax, dword [edx]
push eax
lea ecx, [ebp - 0x294]
push ecx
call fcn.00462510
add esp, 8
mov dword [ebp - 0x144], eax
mov edx, dword [ebp - 0x144]
mov dword [ebp - 0x148], edx
mov byte [ebp - 4], 9
mov eax, dword [ebp - 0x148]
mov dword [ebp - 0x14c], eax
mov ecx, dword [ebp - 0x14c]
push ecx
mov ecx, dword [ebp - 0x150]
call fcn.0040bbf0
mov dword [ebp - 0x154], eax
push 0x5e3800
mov ecx, dword [ebp - 0x154]
call fcn.0040bbf0
mov dword [ebp - 0x164], eax
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1f4], esp
mov edx, dword [ebp - 0x104]
add edx, 4
push edx
call fcn.00458a90
lea eax, [ebp - 0x27c]
push eax
call fcn.0047cda0
add esp, 0x1c
mov dword [ebp - 0x158], eax
mov ecx, dword [ebp - 0x158]
mov dword [ebp - 0x15c], ecx
mov byte [ebp - 4], 0xa
mov edx, dword [ebp - 0x15c]
mov dword [ebp - 0x160], edx
mov eax, dword [ebp - 0x160]
push eax
mov ecx, dword [ebp - 0x164]
call fcn.0040bbf0
push eax
lea ecx, [ebp - 0xc0]
call fcn.00408650
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x27c]
call fcn.004095e0
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x294]
call fcn.004095e0
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x2ac]
call fcn.004095e0
mov ecx, dword [ebp - 0xd0]
mov edx, dword [ebp - 0x104]
mov eax, dword [ecx + 0x6c]
cmp eax, dword [edx]
jne 0x45bdbc
mov dword [ebp - 0x12c], 1
jmp 0x45bdc6
mov dword [ebp - 0x12c], 0
mov cl, byte [ebp - 0x12c]
mov byte [ebp - 0x19], cl
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
lea ecx, [ebp - 0x244]
call fcn.0041b1d0
mov dword [ebp - 0x168], eax
lea ecx, [ebp - 0xc0]
call fcn.0040bed0
mov dword [ebp - 0x16c], eax
mov edx, dword [ebp - 0x168]
push edx
push 0
lea eax, [ebp - 0x19]
push eax
mov ecx, dword [ebp - 0x16c]
push ecx
call fcn.00450530
add esp, 0x10
movzx edx, al
test edx, edx
je 0x45be48
mov eax, dword [ebp - 0xd0]
mov ecx, dword [ebp - 0x104]
mov edx, dword [ecx]
mov dword [eax + 0x6c], edx
lea eax, [ebp - 0xc0]
push eax
mov ecx, 0x5e39a4
call fcn.00409990
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xc0]
call fcn.004095e0
jmp 0x45bc3f
call fcn.0044e530
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x48]
call fcn.00459bb0
call fcn.0042c470
mov ecx, dword [ebp - 0xd0]
cmp dword [ecx + 0x6c], 0
jne 0x45beab
push 1
push 4
call fcn.0042c860
add esp, 8
call fcn.00424d00
movss xmm0, dword [eax]
mulss xmm0, dword [0x4cb9f8]
push ecx
movss dword [esp], xmm0
push 0
call fcn.0042ca90
add esp, 8
movss xmm0, dword [ebp - 0x28]
divss xmm0, dword [0x4ce228]
movss xmm1, dword [ebp - 0xd8]
subss xmm1, xmm0
push ecx
movss dword [esp], xmm1
call fcn.0042f8a0
add esp, 4
lea edx, [ebp - 0x28]
push edx
mov ecx, 0x5e3878
call fcn.0040bed0
push eax
call fcn.0044c6b0
add esp, 8
movzx eax, al
test eax, eax
je 0x45c0d4
xor ecx, ecx
mov byte [ebp - 0xe7], cl
xor edx, edx
mov byte [ebp - 0xe9], dl
xor eax, eax
mov byte [ebp - 0xeb], al
mov ecx, dword [ebp - 0xd0]
mov dl, byte [ecx + 0x70]
mov byte [ebp - 0xec], dl
mov eax, dword [ebp - 0xd0]
mov ecx, dword [eax + 0x6c]
mov dword [ebp - 0x170], ecx
movzx edx, byte [ebp - 0xe7]
push edx
movzx eax, byte [ebp - 0xe9]
push eax
movzx ecx, byte [ebp - 0xeb]
push ecx
lea ecx, [ebp - 0x370]
call fcn.00455ca0
mov ecx, eax
call fcn.0045ffb0
mov dword [ebp - 0x174], eax
movzx edx, byte [ebp - 0xec]
push edx
mov eax, dword [ebp - 0x170]
push eax
mov ecx, dword [ebp - 0x174]
push ecx
call fcn.00465250
add esp, 0xc
cmp eax, 0xffffffff
jne 0x45c02e
xor edx, edx
mov byte [ebp - 0xed], dl
xor eax, eax
mov byte [ebp - 0xee], al
xor ecx, ecx
mov byte [ebp - 0xef], cl
xor edx, edx
mov byte [ebp - 0xf0], dl
xor eax, eax
mov byte [ebp - 0xf1], al
xor ecx, ecx
mov byte [ebp - 0xf2], cl
movzx edx, byte [ebp - 0xed]
push edx
movzx eax, byte [ebp - 0xee]
push eax
movzx ecx, byte [ebp - 0xef]
push ecx
lea ecx, [ebp - 0x380]
call fcn.00455de0
mov ecx, eax
call fcn.0045ffb0
mov dword [ebp - 0x178], eax
movzx edx, byte [ebp - 0xf0]
push edx
movzx eax, byte [ebp - 0xf1]
push eax
movzx ecx, byte [ebp - 0xf2]
push ecx
lea ecx, [ebp - 0x3b0]
call fcn.00455ea0
mov ecx, eax
call fcn.00460080
mov dword [ebp - 0x17c], eax
push 0x10
mov edx, dword [ebp - 0x178]
push edx
mov eax, dword [ebp - 0x17c]
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x45c0d4
xor ecx, ecx
mov byte [ebp - 0xf3], cl
xor edx, edx
mov byte [ebp - 0xea], dl
xor eax, eax
mov byte [ebp - 0xf4], al
xor ecx, ecx
mov byte [ebp - 0xf5], cl
xor edx, edx
mov byte [ebp - 0xf7], dl
xor eax, eax
mov byte [ebp - 0xf8], al
movzx ecx, byte [ebp - 0xf3]
push ecx
movzx edx, byte [ebp - 0xea]
push edx
movzx eax, byte [ebp - 0xf4]
push eax
lea ecx, [ebp - 0x390]
call fcn.00455de0
mov ecx, eax
call fcn.0045ffb0
mov dword [ebp - 0x180], eax
movzx ecx, byte [ebp - 0xf5]
push ecx
movzx edx, byte [ebp - 0xf7]
push edx
movzx eax, byte [ebp - 0xf8]
push eax
lea ecx, [ebp - 0x2c0]
call fcn.00456570
mov ecx, eax
call fcn.0045ffb0
mov dword [ebp - 0x184], eax
mov ecx, dword [ebp - 0x180]
push ecx
mov edx, dword [ebp - 0x184]
push edx
call fcn.0045e8d0
add esp, 8
mov eax, dword [ebp - 0xd0]
cmp dword [eax + 0x6c], 0
jne 0x45c0ef
push 1
call fcn.0042c550
add esp, 4
call fcn.0042c410
push ecx
movss xmm0, dword [0x4ce290]
movss dword [esp], xmm0
push 0
push 0
mov ecx, 0x5e3788
call fcn.0040bed0
push eax
lea ecx, [ebp - 0x30]
push ecx
call fcn.004203c0
add esp, 0x14
mov edx, dword [ebp - 0xd4]
movss xmm0, dword [edx + 0x38]
mulss xmm0, dword [0x4ce228]
addss xmm0, dword [ebp - 0x30]
movss dword [ebp - 0x30], xmm0
mov eax, dword [ebp - 0xd4]
movss xmm0, dword [eax + 0x3c]
mulss xmm0, dword [0x4ce228]
addss xmm0, dword [ebp - 0x2c]
movss dword [ebp - 0x2c], xmm0
push ecx
movss xmm0, dword [0x4ce290]
movss dword [esp], xmm0
push 0
push 0
mov ecx, 0x5e37e8
call fcn.0040bed0
push eax
lea ecx, [ebp - 0x70]
push ecx
call fcn.004203c0
add esp, 0x14
movss xmm0, dword [ebp - 0x130]
subss xmm0, dword [ebp - 0x6c]
subss xmm0, dword [ebp - 0x2c]
mov edx, dword [ebp - 0xd4]
movss xmm1, dword [edx + 0x4c]
mulss xmm1, dword [0x4ce230]
subss xmm0, xmm1
push ecx
movss dword [esp], xmm0
call fcn.0042f910
add esp, 4
movss xmm0, dword [ebp - 0x30]
divss xmm0, dword [0x4ce228]
movss xmm1, dword [ebp - 0xd8]
subss xmm1, xmm0
push ecx
movss dword [esp], xmm1
call fcn.0042f8a0
add esp, 4
lea eax, [ebp - 0x30]
push eax
mov ecx, 0x5e3788
call fcn.0040bed0
push eax
call fcn.0044c6b0
add esp, 8
movzx ecx, al
test ecx, ecx
je 0x45c2a7
xor edx, edx
mov byte [ebp - 0xf9], dl
xor eax, eax
mov byte [ebp - 0xfa], al
xor ecx, ecx
mov byte [ebp - 0xfb], cl
xor edx, edx
mov byte [ebp - 0xfc], dl
xor eax, eax
mov byte [ebp - 0xfd], al
xor ecx, ecx
mov byte [ebp - 0xe1], cl
movzx edx, byte [ebp - 0xf9]
push edx
movzx eax, byte [ebp - 0xfa]
push eax
movzx ecx, byte [ebp - 0xfb]
push ecx
lea ecx, [ebp - 0x3d0]
call fcn.00456920
mov ecx, eax
call fcn.00460080
mov dword [ebp - 0x188], eax
movzx edx, byte [ebp - 0xfc]
push edx
movzx eax, byte [ebp - 0xfd]
push eax
movzx ecx, byte [ebp - 0xe1]
push ecx
lea ecx, [ebp - 0x2d0]
call fcn.004562d0
mov ecx, eax
call fcn.0045ffb0
mov dword [ebp - 0x18c], eax
push 1
push 0
push 0
mov edx, dword [ebp - 0x188]
push edx
mov eax, dword [ebp - 0x18c]
push eax
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push ecx
movss xmm0, dword [0x4ce290]
movss dword [esp], xmm0
push 0
push 0
mov ecx, 0x5e38c0
call fcn.0040bed0
push eax
lea ecx, [ebp - 0x24c]
push ecx
call fcn.004203c0
add esp, 0x14
movss xmm0, dword [eax]
movss dword [ebp - 0x190], xmm0
movss xmm0, dword [ebp - 0x70]
addss xmm0, dword [ebp - 0x190]
mov edx, dword [ebp - 0xd4]
movss xmm1, dword [edx + 0x48]
mulss xmm1, dword [0x4ce228]
addss xmm0, xmm1
divss xmm0, dword [0x4ce228]
movss xmm1, dword [ebp - 0xd8]
subss xmm1, xmm0
push ecx
movss dword [esp], xmm1
call fcn.0042f8a0
add esp, 4
mov ecx, 0x5e37e8
call fcn.0040bed0
push eax
call fcn.00451270
movss xmm0, dword [0x4ce290]
movss dword [esp], xmm0
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
call fcn.0042ef10
add esp, 8
mov ecx, 0x5e38c0
call fcn.0040bed0
push eax
call fcn.004511f0
add esp, 4
movzx eax, al
test eax, eax
je 0x45c41d
xor ecx, ecx
mov byte [ebp - 0xe2], cl
xor edx, edx
mov byte [ebp - 0xe3], dl
xor eax, eax
mov byte [ebp - 0xe4], al
xor ecx, ecx
mov byte [ebp - 0xe5], cl
xor edx, edx
mov byte [ebp - 0xe6], dl
xor eax, eax
mov byte [ebp - 0xf6], al
movzx ecx, byte [ebp - 0xe2]
push ecx
movzx edx, byte [ebp - 0xe3]
push edx
movzx eax, byte [ebp - 0xe4]
push eax
lea ecx, [ebp - 0x430]
call fcn.00455f00
mov ecx, eax
call fcn.00460450
mov dword [ebp - 0x194], eax
movzx ecx, byte [ebp - 0xe5]
push ecx
movzx edx, byte [ebp - 0xe6]
push edx
movzx eax, byte [ebp - 0xf6]
push eax
lea ecx, [ebp - 0x2e0]
call fcn.004562d0
mov ecx, eax
call fcn.0045ffb0
mov dword [ebp - 0x198], eax
push 1
push 0
push 0
mov ecx, dword [ebp - 0x194]
push ecx
mov edx, dword [ebp - 0x198]
push edx
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x88]
call fcn.00409600
call fcn.0044f420
mov eax, dword [ebp - 0xd0]
mov ecx, dword [eax + 0x5c]
push ecx
call fcn.0042c730
movss xmm0, dword [0x4ce290]
movss dword [esp], xmm0
push 0
push 0
mov ecx, 0x5e3698
call fcn.0040bed0
push eax
lea edx, [ebp - 0xc8]
push edx
call fcn.004203c0
add esp, 0x14
mov eax, dword [ebp - 0xd4]
movss xmm0, dword [eax + 0x3c]
mulss xmm0, dword [0x4ce228]
addss xmm0, dword [ebp - 0xc4]
movss dword [ebp - 0xc4], xmm0
mov ecx, dword [ebp - 0xd4]
movss xmm0, dword [ecx + 0x48]
divss xmm0, dword [0x4ce228]
movss xmm1, dword [ebp - 0xd8]
subss xmm1, xmm0
mov edx, dword [ebp - 0xd4]
movss xmm0, dword [edx + 0x38]
divss xmm0, dword [0x4ce238]
subss xmm1, xmm0
movss dword [ebp - 0xc8], xmm1
movss xmm0, dword [ebp - 0x114]
divss xmm0, dword [0x4ce228]
movss xmm1, dword [ebp - 0x114]
subss xmm1, xmm0
mov eax, dword [ebp - 0xd4]
addss xmm1, dword [eax + 0x48]
mov ecx, dword [ebp - 0xd4]
addss xmm1, dword [ecx + 0x38]
mov edx, dword [ebp - 0xd4]
movss xmm0, dword [edx + 0x50]
divss xmm0, dword [0x4ce228]
addss xmm1, xmm0
push ecx
movss dword [esp], xmm1
call fcn.0042f8a0
add esp, 4
mov dword [ebp - 0xe0], 0
movzx eax, byte [0x5df034]
test eax, eax
je 0x45c638
push ecx
movss xmm0, dword [0x4ce214]
movss dword [esp], xmm0
push ecx
movss xmm0, dword [0x571a80]
movss dword [esp], xmm0
push ecx
movss xmm0, dword [0x4ce1c0]
movss dword [esp], xmm0
push ecx
movss xmm0, dword [0x571a70]
movss dword [esp], xmm0
lea ecx, [ebp - 0x2f0]
call fcn.0041b280
push eax
push 0x15
call fcn.0042c960
add esp, 8
push ecx
movss xmm0, dword [0x4ce214]
movss dword [esp], xmm0
push ecx
movss xmm0, dword [0x571a80]
movss dword [esp], xmm0
push ecx
movss xmm0, dword [0x4ce1c0]
movss dword [esp], xmm0
push ecx
movss xmm0, dword [0x571a70]
movss dword [esp], xmm0
lea ecx, [ebp - 0x300]
call fcn.0041b280
push eax
push 0x16
call fcn.0042c960
add esp, 8
push ecx
movss xmm0, dword [0x4ce214]
movss dword [esp], xmm0
push ecx
movss xmm0, dword [0x571a80]
movss dword [esp], xmm0
push ecx
movss xmm0, dword [0x4ce1c0]
movss dword [esp], xmm0
push ecx
movss xmm0, dword [0x571a70]
movss dword [esp], xmm0
lea ecx, [ebp - 0x310]
call fcn.0041b280
push eax
push 0x17
call fcn.0042c960
add esp, 8
mov ecx, dword [ebp - 0xe0]
add ecx, 3
mov dword [ebp - 0xe0], ecx
lea edx, [ebp - 0xc8]
push edx
mov ecx, 0x5e3698
call fcn.0040bed0
push eax
call fcn.0044c6b0
add esp, 8
movzx eax, al
test eax, eax
je 0x45c679
movzx ecx, byte [0x5df034]
test ecx, ecx
jne 0x45c672
mov byte [0x5e39c0], 1
mov byte [0x5e39c1], 0
mov byte [0x5df034], 1
cmp dword [ebp - 0xe0], 0
je 0x45c691
mov edx, dword [ebp - 0xe0]
push edx
call fcn.0042c4e0
add esp, 4
mov dword [ebp - 0xe0], 0
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
call fcn.0042ef10
add esp, 8
movzx eax, byte [0x5df034]
test eax, eax
jne 0x45c7bd
push ecx
movss xmm0, dword [0x4ce214]
movss dword [esp], xmm0
push ecx
movss xmm0, dword [0x571a80]
movss dword [esp], xmm0
push ecx
movss xmm0, dword [0x4ce1c0]
movss dword [esp], xmm0
push ecx
movss xmm0, dword [0x571a70]
movss dword [esp], xmm0
lea ecx, [ebp - 0x320]
call fcn.0041b280
push eax
push 0x15
call fcn.0042c960
add esp, 8
push ecx
movss xmm0, dword [0x4ce214]
movss dword [esp], xmm0
push ecx
movss xmm0, dword [0x571a80]
movss dword [esp], xmm0
push ecx
movss xmm0, dword [0x4ce1c0]
movss dword [esp], xmm0
push ecx
movss xmm0, dword [0x571a70]
movss dword [esp], xmm0
lea ecx, [ebp - 0x330]
call fcn.0041b280
push eax
push 0x16
call fcn.0042c960
add esp, 8
push ecx
movss xmm0, dword [0x4ce214]
movss dword [esp], xmm0
push ecx
movss xmm0, dword [0x571a80]
movss dword [esp], xmm0
push ecx
movss xmm0, dword [0x4ce1c0]
movss dword [esp], xmm0
push ecx
movss xmm0, dword [0x571a70]
movss dword [esp], xmm0
lea ecx, [ebp - 0x340]
call fcn.0041b280
push eax
push 0x17
call fcn.0042c960
add esp, 8
mov ecx, dword [ebp - 0xe0]
add ecx, 3
mov dword [ebp - 0xe0], ecx
lea edx, [ebp - 0xc8]
push edx
mov ecx, 0x5e38f0
call fcn.0040bed0
push eax
call fcn.0044c6b0
add esp, 8
movzx eax, al
test eax, eax
je 0x45c7fe
movzx ecx, byte [0x5df034]
test ecx, ecx
je 0x45c7f7
mov byte [0x5e39c0], 1
mov byte [0x5e39c1], 0
mov byte [0x5df034], 0
cmp dword [ebp - 0xe0], 0
je 0x45c816
mov edx, dword [ebp - 0xe0]
push edx
call fcn.0042c4e0
add esp, 4
call fcn.0042c360
push ecx
movss xmm0, dword [0x4ce290]
movss dword [esp], xmm0
call fcn.0042c8d0
add esp, 4
mov eax, dword [ebp - 0xd4]
push ecx
movss xmm0, dword [eax + 0x40]
movss dword [esp], xmm0
push 6
call fcn.0042ca90
add esp, 8
mov ecx, dword [ebp - 0xd4]
push ecx
movss xmm0, dword [ecx + 0x44]
movss dword [esp], xmm0
push 7
call fcn.0042ca90
add esp, 8
mov edx, dword [ebp - 0xd4]
add edx, 0x38
push edx
push 1
call fcn.0042ca00
add esp, 8
movss xmm0, dword [ebp - 0x19c]
subss xmm0, dword [ebp - 0xc4]
mov eax, dword [ebp - 0xd4]
movss xmm1, dword [eax + 0x4c]
mulss xmm1, dword [0x4ce228]
subss xmm0, xmm1
push ecx
movss dword [esp], xmm0
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
lea ecx, [ebp - 0x254]
call fcn.0041b1d0
mov dword [ebp - 0x1a0], eax
mov ecx, 0x5e36c8
call fcn.0040bed0
mov dword [ebp - 0x1a4], eax
push 0x10000
push 0
mov ecx, dword [ebp - 0x1a0]
push ecx
mov edx, dword [ebp - 0x1a4]
push edx
call fcn.0041f4a0
add esp, 0x10
movzx eax, al
test eax, eax
je 0x45c9ac
movzx ecx, byte [0x5e39c0]
test ecx, ecx
je 0x45c957
movzx edx, byte [0x5e39c1]
test edx, edx
jne 0x45c957
movzx eax, byte [0x5df034]
test eax, eax
je 0x45c933
push ecx
movss xmm0, dword [0x5e39c4]
movss dword [esp], xmm0
call fcn.0042fea0
add esp, 4
jmp 0x45c949
push ecx
movss xmm0, dword [0x5e39c8]
movss dword [esp], xmm0
call fcn.0042fea0
add esp, 4
mov byte [0x5e39c0], 0
mov byte [0x5e39c1], 1
movzx ecx, byte [0x5df034]
test ecx, ecx
je 0x45c987
mov edx, dword [ebp - 0xd0]
add edx, 0x8c
push edx
mov ecx, dword [ebp - 0xd0]
call fcn.0045ddd0
call fcn.00424c90
fstp dword [0x5e39c4]
jmp 0x45c9a7
mov eax, dword [ebp - 0xd0]
add eax, 0x74
push eax
mov ecx, dword [ebp - 0xd0]
call fcn.0045ddd0
call fcn.00424c90
fstp dword [0x5e39c8]
call fcn.00421fa0
push 3
call fcn.0042c550
add esp, 4
call fcn.00421ec0
call fcn.00422200
call fcn.0042cbc0
mov ecx, dword [ebp - 0xd0]
mov ecx, dword [ecx + 0xc]
call fcn.0040ce20
mov dword [ebp - 0x108], eax
mov edx, dword [ebp - 0xd0]
mov ecx, dword [edx + 0xc]
call fcn.00413f90
mov dword [ebp - 0xcc], eax
mov eax, dword [ebp - 0x108]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x84]
mov dword [ebp - 0x1a8], edx
push 0
lea eax, [ebp - 0xcc]
push eax
push 1
mov ecx, dword [ebp - 0x108]
push ecx
call dword [ebp - 0x1a8]
mov edx, dword [ebp - 0x108]
mov eax, dword [edx]
mov ecx, dword [eax + 0xc8]
mov dword [ebp - 0x1ac], ecx
push 0x5e3990
mov edx, dword [ebp - 0xcc]
push edx
mov eax, dword [ebp - 0x108]
push eax
call dword [ebp - 0x1ac]
call fcn.00424170
push eax
call fcn.00449520
add esp, 4
mov ecx, dword [ebp - 0xd0]
mov ecx, dword [ecx + 0xc]
call fcn.004187e0
mov dword [ebp - 0x134], eax
mov edx, dword [ebp - 0x134]
mov eax, dword [edx]
mov ecx, dword [eax + 0x20]
mov dword [ebp - 0x1b0], ecx
push 0
push 0
mov edx, dword [ebp - 0x134]
push edx
call dword [ebp - 0x1b0]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.00498f73
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 4