Function at 0x43dda0
Capabilities:
Contain obfuscated stackstrings
Resolve function by parsing pe exports

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4a6af0
mov eax, dword fs:[0]
push eax
push ebx
mov eax, 0x1508
call fcn.004a0fe0
mov eax, dword [0x4f8008]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x1500], edi
mov esi, dword [ebx + 8]
mov dword [ebp - 0x14e8], esi
cmp dword [esi], 0
jne 0x43de03
or eax, 0xffffffff
jmp 0x442690
xor edx, edx
mov ecx, 0x4d8248
call fcn.00408000
test al, al
je 0x43de24
push 1
mov edx, 0x4d82a8
mov ecx, 0x4d8248
call fcn.00407ae0
xor edx, edx
mov ecx, 0x4d8300
call fcn.00408000
test al, al
je 0x43de45
push 1
mov edx, 0x4d8348
mov ecx, 0x4d8300
call fcn.00407ae0
mov dword [edi + 0x5f8], esi
mov eax, dword [esi + 4]
test eax, eax
je 0x43de5f
mov ecx, dword [eax]
test ecx, ecx
je 0x43de5f
push 0
call fcn.00416860
mov ecx, dword [esi]
call fcn.00417b00
mov esi, dword [esi]
lea ecx, [edi + 0x668]
push eax
mov dword [ebp - 0x14f8], eax
mov dword [ebp - 0x14fc], esi
call fcn.00422230
push dword [ebp - 0x14f8]
lea ecx, [edi + 0x908]
call fcn.00423170
push dword [ebp - 0x14f8]
lea ecx, [edi + 0x378]
call fcn.00417ae0
mov eax, dword [ebp - 0x14e8]
mov ecx, dword [eax + 0x108]
test ecx, ecx
jne 0x43defa
push 0x110
call fcn.00476976
mov esi, eax
add esp, 4
mov dword [ebp - 0x1514], esi
push 0x110
push 0
push esi
mov dword [ebp - 4], 0
call fcn.00491bb0
add esp, 0xc
mov ecx, esi
call fcn.00434440
mov esi, dword [ebp - 0x14fc]
mov ecx, eax
mov eax, dword [ebp - 0x14e8]
mov dword [ebp - 4], 0xffffffff
push dword [ebp - 0x14f8]
lea edx, [edi + 0x668]
mov dword [edi + 0x1c54], ecx
push edx
push dword [eax]
lea eax, [edi + 0x908]
push eax
lea eax, [edi + 0x3c]
push eax
call fcn.004349f0
mov ecx, dword [edi + 0x1c54]
lea eax, [ebp - 0x14b8]
push eax
push 0x473b90
push 0x473b60
mov dword [ebp - 0x14b8], edi
call fcn.00434a80
mov ecx, dword [edi + 0x1c54]
push 1
call fcn.00434ac0
mov ecx, dword [edi + 0x1c54]
push 0
call fcn.00434aa0
mov ecx, dword [edi + 0x1c54]
push 0
call fcn.00435340
push eax
lea ecx, [edi + 0x320]
call fcn.00401a00
mov eax, dword [ebp - 0x14e8]
lea ecx, [ebp - 0x238]
add eax, 0xb8
mov dword [ebp - 0x230], 0
xorps xmm0, xmm0
mov dword [ebp - 0x1510], eax
push eax
movq qword [ebp - 0x238], xmm0
call fcn.00401950
mov dword [ebp - 4], 1
lea ecx, [ebp - 0x298]
xorps xmm0, xmm0
mov dword [ebp - 0x290], 0
movq qword [ebp - 0x298], xmm0
call fcn.00401930
mov ecx, dword [ebp - 0x1510]
push 0
push 1
mov byte [ebp - 4], 2
call fcn.00401c90
push eax
lea ecx, [ebp - 0x238]
call fcn.00401ba0
mov ecx, eax
call fcn.00401f20
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str.Downloads
lea ecx, [ebp - 0x238]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x298]
call fcn.00401bf0
mov ecx, dword [edi + 0x1c54]
lea eax, [ebp - 0x298]
push 0
push 0
push 0
push eax
lea eax, [ebp - 0x238]
push eax
call fcn.00434a50
xorps xmm0, xmm0
mov dword [ebp - 0x218], 0
lea ecx, [ebp - 0x220]
movq qword [ebp - 0x220], xmm0
call fcn.00401930
mov byte [ebp - 4], 3
cmp byte [edi + 0x371], 0
je 0x43e0c4
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4ce328
push ecx
mov ecx, dword [edi + 0x1c54]
push 0
call fcn.00434f60
add esp, 4
lea ecx, [ebp - 0x220]
push eax
call fcn.00401bf0
lea ecx, [ebp - 0x220]
call fcn.00401c90
push eax
call dword [0x4a948c]
test eax, eax
setne al
mov byte [edi + 0x370], al
jmp 0x43e0ca
mov al, byte [edi + 0x370]
test al, al
jne 0x43e121
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4ce328
push ecx
mov ecx, dword [edi + 0x1c54]
push 0
call fcn.00434ec0
add esp, 4
lea ecx, [ebp - 0x220]
push eax
call fcn.00401bf0
lea ecx, [ebp - 0x220]
call fcn.00401c90
push eax
call dword [0x4a948c]
test eax, eax
setne al
mov byte [edi + 0x370], al
mov eax, dword [ebp - 0x14e8]
cmp dword [eax + 0x7c], 5
je 0x43e140
test dword [eax + 0x8c], 0x10
jne 0x43e140
mov dword [eax + 0x7c], 5
movsd xmm0, qword [0x4eaa28]
mov ecx, 0x4d83a4
comisd xmm0, xmmword [edi + 0x368]
mov eax, str.Arial
push 5
push str.Arial
push 0
push 0x190
movsd xmm1, qword [0x4eaa58]
cmovbe eax, ecx
mov ecx, esi
mov dword [ebp - 0x1c4], eax
call fcn.00417b10
push 0
mov ecx, esi
call fcn.00417980
mov eax, dword [ebp - 0x14e8]
mov ecx, esi
push 0xffffffffffffffff
push 0xffffffffffffffff
push dword [eax + 8]
call fcn.00417770
push 0
mov ecx, esi
call fcn.00416860
movaps xmm0, xmmword [0x4eab90]
mov edi, eax
push 0
push 0xfffffffffffffff0
push edi
mov dword [ebp - 0x150c], edi
movups xmmword [ebp - 0x1464], xmm0
call dword [0x4a9554]
push eax
lea eax, [ebp - 0x1464]
push eax
call dword [0x4a9614]
mov eax, dword [ebp - 0x1458]
mov ecx, dword [ebp - 0x145c]
sub eax, dword [ebp - 0x1460]
sub ecx, dword [ebp - 0x1464]
push 0
push 0
push eax
mov dword [ebp - 0x145c], ecx
push ecx
mov ecx, esi
mov dword [ebp - 0x1458], eax
call fcn.00417ce0
lea eax, [ebp - 0x1464]
push eax
push edi
call dword [0x4a9618]
or eax, 0xffffffff
lea edi, [ebp - 0x148]
mov ecx, 0x4b
rep stosd dword es:[edi], eax
mov edi, dword [ebp - 0x14fc]
xor eax, eax
mov dword [ebp - 0x1510], eax
mov ecx, edi
mov eax, dword [ebp - 0x145c]
mov dword [ebp - 0x1504], eax
mov eax, dword [ebp - 0x1458]
push 0x400
mov dword [ebp - 0x14f0], eax
call fcn.00417ab0
movsd xmm1, qword [0x4eaa58]
mov ecx, edi
push 5
push str.Arial
push 0
push 0x190
call fcn.00417b10
mov esi, dword [ebp - 0x14e8]
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x40
push 0x40
push 8
push 5
push dword [esi + 0xc]
mov ecx, edi
call fcn.0041aea0
lea ecx, [esi + 0xc4]
mov dword [ebp - 0x148], eax
call fcn.00401b50
cmp eax, 5
jle 0x43e2b2
lea ecx, [esi + 0xc4]
call fcn.00401c90
jmp 0x43e2b7
mov eax, 0x4d83b8
mov esi, dword [ebp - 0x1500]
push eax
lea ecx, [esi + 0x32c]
call fcn.00401a00
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x19
push 0xc8
push 0xa
push 0x50
lea ecx, [esi + 0x32c]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.0041a9d0
mov eax, dword [esi + 0x5f8]
mov ecx, edi
push dword [eax + 0x100]
push 0xffffffffffffffff
call fcn.0041c3e0
movsd xmm0, qword [0x4eaa78]
sub esp, 8
mov ecx, edi
movsd qword [esp], xmm0
push 0
push 0
push 0
push 0x320
push 0xffffffffffffffff
call fcn.0041c570
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x14
push 0x6e
push 0x28
push 0x50
push 0x4d83e0
mov ecx, edi
call fcn.0041a9d0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x14
push 0xb4
push 0x3c
push 0x50
push 0x4d8404
mov ecx, edi
call fcn.0041aa90
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x4b
mov dword [ebp - 0x144], eax
mov ecx, edi
mov eax, dword [ebp - 0x1504]
push 0x1bd
push 5
add eax, 0xfffffe3e
push eax
call fcn.0041b270
push 0x402
push 0xffffffffffffffff
mov ecx, edi
mov dword [ebp - 0x1508], eax
call fcn.0041d270
push 0x10
call dword [0x4a97c0]
mov esi, eax
mov dword [ebp - 0x1c8], esi
test esi, esi
je 0x43e3e6
lea eax, [ebp - 0x144c]
mov dword [ebp - 0x144c], 0
push eax
push 0
push 0x26200a
push 0
xorps xmm0, xmm0
push 0x4b
movups xmmword [esi], xmm0
push 0x1bd
mov dword [esi], 0x4d29a8
call dword [0x4a9758]
mov dword [esi + 8], eax
mov eax, dword [ebp - 0x144c]
mov dword [esi + 4], eax
jmp 0x43e3f0
mov dword [ebp - 0x1c8], 0
push 8
call dword [0x4a97c0]
mov esi, eax
mov dword [ebp - 0x144c], eax
test esi, esi
je 0x43e43a
mov eax, dword [ebp - 0x1c8]
xor ecx, ecx
mov dword [ebp - 0x1444], ecx
xorps xmm0, xmm0
movq qword [esi], xmm0
test eax, eax
je 0x43e436
lea ecx, [ebp - 0x1444]
push ecx
push dword [eax + 4]
call dword [0x4a9744]
mov ecx, dword [ebp - 0x1444]
mov dword [esi + 4], eax
mov dword [esi], ecx
jmp 0x43e442
xor esi, esi
mov dword [ebp - 0x144c], esi
mov eax, dword [ebp - 0x14e8]
mov eax, dword [eax + 8]
test eax, eax
je 0x43e46c
push 0x4b
push 0x1bd
push 0
push 0
push dword [eax + 4]
push dword [esi]
call dword [0x4a96f8]
test eax, eax
je 0x43e46c
mov dword [esi + 4], eax
mov ecx, dword [ebp - 0x1c8]
xor edx, edx
push 2
push 4
push 0xfff8f8ff
push 0xff000008
push 0x4b
push 0x1bd
push 0
call fcn.00410e30
push 8
call dword [0x4a97c0]
mov dword [ebp - 0x1444], eax
test eax, eax
je 0x43e4d2
push eax
push 0
push ecx
xorps xmm0, xmm0
mov dword [esp], 0x40800000
movq qword [eax], xmm0
push 0xff909090
mov dword [eax], 0
call dword [0x4a9798]
mov ecx, dword [ebp - 0x1444]
mov dword [ecx + 4], eax
mov eax, ecx
jmp 0x43e4da
xor eax, eax
mov dword [ebp - 0x1444], eax
push 0x46
push 0xe6
push 5
push 0xe6
push dword [eax]
push dword [esi]
call dword [0x4a972c]
test eax, eax
je 0x43e4f9
mov dword [esi + 4], eax
mov ecx, dword [ebp - 0x1444]
push 0x46
push 0x172
push 5
push 0x172
push dword [ecx]
push dword [esi]
call dword [0x4a972c]
test eax, eax
je 0x43e51e
mov dword [esi + 4], eax
mov esi, dword [ebp - 0x1444]
push dword [esi]
call dword [0x4a9794]
push esi
mov esi, dword [0x4a97c4]
call esi
mov eax, dword [ebp - 0x144c]
push dword [eax]
call dword [0x4a9740]
push dword [ebp - 0x144c]
call esi
mov ecx, dword [ebp - 0x1c8]
mov dl, 1
call fcn.00410400
push eax
push dword [ebp - 0x1508]
mov ecx, edi
call fcn.0041c1f0
push 0xfff8f8
mov ecx, edi
call fcn.00417970
mov esi, dword [ebp - 0x1500]
mov edx, 0x4d8498
mov ecx, edi
mov eax, dword [esi + 0x5f8]
add eax, 0xdc
push eax
mov eax, dword [ebp - 0x14e8]
push 0x4d8448
push 0x41
push 0x3c
push 5
push 5
push dword [eax + 0x10]
call fcn.00414d00
push 0xffffffffffffffff
mov ecx, edi
mov dword [ebp - 0x11c], eax
call fcn.00417990
mov eax, dword [esi + 0x5f8]
mov edx, 0x4d84d0
add eax, 0xdc
mov ecx, edi
push eax
mov eax, dword [ebp - 0x14e8]
push 0x4d84a4
push 0x41
push 0x3c
push 5
push 5
push dword [eax + 0x14]
call fcn.00414d00
push 1
push 0xffffffffffffffff
mov ecx, edi
mov dword [ebp - 0x118], eax
call fcn.0041d420
mov eax, dword [esi + 0x5f8]
mov edx, 0x4cb690
add eax, 0xdc
mov ecx, edi
push eax
mov eax, dword [ebp - 0x14e8]
push 0x4d84e0
push 0x41
push 0x3c
push 5
push 5
push dword [eax + 0x18]
call fcn.00414d00
movsd xmm1, qword [0x4eaa50]
mov ecx, edi
push 5
push str.Arial
push 0
push 0x190
mov dword [ebp - 0x108], eax
call fcn.00417b10
push 0xaf5030
push 0
push 8
push 0xe
push 0x96
push 6
push 0x46
push dword [esi + 0x1c4c]
mov ecx, edi
push dword [esi + 0x1c48]
push 0x4d8524
call fcn.0041a560
mov dword [ebp - 0x120], eax
mov eax, dword [ebp - 0x14e8]
test dword [eax + 0x8c], 0x200
jne 0x43e694
push 4
push 0xffffffffffffffff
mov ecx, edi
call fcn.0041d420
push 0x186a0
push 0
push 0x4d8548
push 0xffffffffffffffff
mov ecx, edi
call fcn.0041dee0
push 0xaf5030
push 0
push 8
push 0xe
push 0x96
push 0x18
push 0x46
push dword [esi + 0x1c4c]
mov ecx, edi
push dword [esi + 0x1c48]
push 0x4d85c0
call fcn.0041a560
mov dword [ebp - 0xfc], eax
mov eax, dword [ebp - 0x14e8]
test byte [eax + 0x8c], 0x40
je 0x43e6f5
push 4
push 0xffffffffffffffff
mov ecx, edi
call fcn.0041d420
push 0x186a0
push 0
push 0x4d85e8
push 0xffffffffffffffff
mov ecx, edi
call fcn.0041dee0
push 0xaf5030
push 0
push 8
push 0xe
push 0x96
push 6
push 0x46
push dword [esi + 0x1c4c]
mov ecx, edi
push dword [esi + 0x1c48]
push 0x4d86d8
call fcn.0041a560
mov dword [ebp - 0x10c], eax
mov eax, dword [ebp - 0x14e8]
test dword [eax + 0x8c], 0x20
jne 0x43e759
push 4
push 0xffffffffffffffff
mov ecx, edi
call fcn.0041d420
push 0x186a0
push 0
push 0x4d8708
push 0xffffffffffffffff
mov ecx, edi
call fcn.0041dee0
push 0xaf5030
push 0
push 8
push 0xe
push 0x96
push 0x18
push 0x46
push dword [esi + 0x1c4c]
mov ecx, edi
push dword [esi + 0x1c48]
push 0x4d8794
call fcn.0041a560
mov dword [ebp - 0xf8], eax
mov eax, dword [ebp - 0x14e8]
test byte [eax + 0x8c], 0x80
je 0x43e7ba
push 4
push 0xffffffffffffffff
mov ecx, edi
call fcn.0041d420
push 0x186a0
push 0
push 0x4d87c8
push 0xffffffffffffffff
mov ecx, edi
call fcn.0041dee0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 6
push 0x91
push 0x2f
push 0x46
mov ecx, edi
call fcn.0041b100
push 0x186a0
push 0
push 0x4d88c0
push 0xffffffffffffffff
mov ecx, edi
mov dword [ebp - 0x114], eax
call fcn.0041dee0
push 0x4c975c
push 0x4c975c
push 0xffffffffffffffff
mov ecx, edi
call fcn.0041dea0
push 0xff2020
push 0xffffffffffffffff
mov ecx, edi
call fcn.0041c3e0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 6
push 0x91
push 0x2f
push 0x46
mov ecx, edi
call fcn.0041b100
push 0x186a0
push 0
push 0x4d88ec
push 0xffffffffffffffff
mov ecx, edi
mov dword [ebp - 0x104], eax
call fcn.0041dee0
push 0x4c975c
push 0x4c975c
push 0xffffffffffffffff
mov ecx, edi
call fcn.0041dea0
push 0xff2020
push 0xffffffffffffffff
mov ecx, edi
call fcn.0041c3e0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x10
push 0x9b
push 0x39
push 0x46
push 0x4d8924
mov ecx, edi
call fcn.0041a9d0
movsd xmm0, qword [0x4eaa40]
sub esp, 8
mov ecx, edi
mov dword [ebp - 0x110], eax
movsd qword [esp], xmm0
push 0
push 0
push 0
push 0x190
push 0xffffffffffffffff
call fcn.0041c570
movsd xmm1, qword [0x4eaa50]
push 5
push str.Arial
push 0
push 0x190
mov ecx, edi
call fcn.00417b10
mov eax, dword [ebp - 0x14e8]
mov ecx, edi
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x14
push 0x14
push 0xa
push 0xf0
push dword [eax + 0x20]
call fcn.0041aea0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x12
push 0x64
push 0xc
push 0x109
push 0x4d8944
mov ecx, edi
call fcn.0041aa90
push 0x186a0
push 0
push 0x4d8974
push 0xffffffffffffffff
mov ecx, edi
mov dword [ebp - 0x13c], eax
call fcn.0041dee0
mov eax, dword [ebp - 0x14e8]
push 0x60
push 0
mov dword [ebp - 0x1440], 3
mov eax, dword [eax + 0x8c]
mov dword [esi + 0x34], eax
lea eax, [ebp - 0x1430]
push eax
mov dword [ebp - 0x143c], 0
mov dword [ebp - 0x1438], 0x10
mov dword [ebp - 0x1434], 0x10
call fcn.00491bb0
add esp, 0xc
xor eax, eax
mov word [ebp - 0x13d0], ax
push 0x1046
push eax
lea eax, [ebp - 0x13ce]
push eax
call fcn.00491bb0
mov eax, dword [ebp - 0x14e8]
add esp, 0xc
mov ecx, edi
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x14
push 0x14
push 0x28
push 0xf0
push dword [eax + 0x24]
call fcn.0041aea0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x12
push 0x64
push 0x2a
push 0x109
push 0x4d89ac
mov ecx, edi
call fcn.0041aa90
push 0x186a0
push 0
push 0x4d89d8
push 0xffffffffffffffff
mov ecx, edi
mov dword [ebp - 0x138], eax
call fcn.0041dee0
lea eax, [ebp - 0x1440]
mov ecx, edi
push eax
push 0
push 0x702
push dword [ebp - 0x144]
call fcn.0041c1a0
lea eax, [ebp - 0x1440]
mov ecx, edi
push eax
push 0
push 0x702
push dword [ebp - 0x13c]
call fcn.0041c1a0
lea eax, [ebp - 0x1440]
mov ecx, edi
push eax
push 0
push 0x702
push dword [ebp - 0x138]
call fcn.0041c1a0
mov eax, dword [esi + 0x5f8]
mov edx, 0x4d8ab0
mov esi, dword [ebp - 0x14e8]
add eax, 0xdc
push eax
push 0x4d8a38
push 0x41
push 0x3c
push 5
push 0x17c
push dword [esi + 0x38]
mov ecx, edi
call fcn.00414d00
mov dword [ebp - 0x100], eax
mov esi, 0xf
nop dword [eax + eax]
push 1
push dword [ebp + esi*4 - 0x148]
mov ecx, edi
call fcn.0041d420
inc esi
cmp esi, 0x12
jl 0x43ea80
push 1
push dword [ebp - 0xf8]
mov ecx, edi
call fcn.0041d420
push 0x833
mov ecx, edi
call fcn.00417ab0
push 0
mov ecx, edi
call fcn.00417e30
movsd xmm1, qword [0x4eaa58]
mov ecx, edi
push 0
push str.Arial
push 1
push 0x190
call fcn.00417b10
push 0xffffffffffffffff
mov ecx, edi
call fcn.00417980
push 0xffffffffffffffff
mov ecx, edi
call fcn.00417970
mov eax, dword [ebp - 0x14f0]
mov ecx, edi
push 0xffffffffffffffff
push 0xffffffffffffffff
add eax, 0xffffffab
push eax
push dword [ebp - 0x1504]
push 0x55
push 0
call fcn.0041b3d0
push 0x433
mov ecx, edi
mov dword [ebp - 0xe4], eax
call fcn.00417ab0
xorps xmm0, xmm0
mov dword [ebp - 0x314], 0
lea ecx, [ebp - 0x31c]
movq qword [ebp - 0x31c], xmm0
call fcn.00401930
push str.Programs
push 0
mov byte [ebp - 4], 4
mov ecx, edi
push dword [ebp - 0xe4]
call fcn.0041b4a0
mov esi, dword [ebp - 0x14e8]
mov ecx, edi
push 0x12
push 0x12
mov dword [ebp - 0xd0], eax
push dword [esi + 0x50]
push 0xffffffffffffffff
push 0xffffffffffffffff
call fcn.0041cb70
push 0x4d8abc
push 1
push dword [ebp - 0xe4]
mov ecx, edi
call fcn.0041b4a0
push 0x12
push 0x12
push dword [esi + 0x54]
mov ecx, edi
mov dword [ebp - 0xcc], eax
push 0xffffffffffffffff
push 0xffffffffffffffff
call fcn.0041cb70
push 0x4d8ad0
push 2
push dword [ebp - 0xe4]
mov ecx, edi
call fcn.0041b4a0
push 0x12
push 0x12
push dword [esi + 0x6c]
mov dword [ebp - 0xc8], eax
push 0xffffffffffffffff
push 0xffffffffffffffff
mov ecx, edi
call fcn.0041cb70
push 0x4d8af4
push 3
push dword [ebp - 0xe4]
mov ecx, edi
call fcn.0041b4a0
push 0x12
push 0x12
push dword [esi + 0x68]
mov ecx, edi
mov dword [ebp - 0xb8], eax
push 0xffffffffffffffff
push 0xffffffffffffffff
call fcn.0041cb70
push dword [ebp - 0xe4]
mov ecx, edi
call fcn.00416860
lea ecx, [ebp - 0x1464]
push ecx
push eax
call dword [0x4a9618]
lea eax, [ebp - 0x1464]
mov ecx, edi
push eax
push 0
push 0x1328
push dword [ebp - 0xe4]
call fcn.0041c1a0
mov esi, dword [ebp - 0x145c]
mov edi, dword [ebp - 0x1458]
sub esi, dword [ebp - 0x1464]
sub edi, dword [ebp - 0x1460]
movsd xmm1, qword [0x4eaa48]
mov ecx, dword [ebp - 0x14fc]
push 0
push dword [ebp - 0x1c4]
mov dword [ebp - 0x1444], esi
push 1
push 0x190
mov dword [ebp - 0x1508], edi
call fcn.00417b10
push dword [ebp - 0xd0]
mov ecx, dword [ebp - 0x14fc]
call fcn.00417e30
mov ecx, dword [ebp - 0x14fc]
push 0x10024
push 0x1000000d
push edi
push esi
push 0
push 0
push 0x4ca9d0
push 0x4d8b04
call fcn.0041ab40
mov ecx, dword [ebp - 0x14fc]
push eax
mov dword [ebp - 0xa8], eax
call fcn.00416860
mov ecx, dword [ebp - 0x1444]
mov esi, eax
add ecx, 0xffffff06
movzx ecx, cx
push ecx
push 0
push 0x101e
push esi
call dword [0x4a94c8]
push 0x82
push 1
push 0x101e
push esi
call dword [0x4a94c8]
push 0x64
push 2
push 0x101e
push esi
call dword [0x4a94c8]
xorps xmm0, xmm0
movq qword [ebp - 0x244], xmm0
lea ecx, [ebp - 0x244]
mov dword [ebp - 0x23c], 0
call fcn.00401930
push 0x104
push 0
push 0
push 0x104
lea ecx, [ebp - 0x244]
mov byte [ebp - 4], 5
call fcn.00402200
push eax
call dword [0x4a93b4]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4d8b38
lea ecx, [ebp - 0x244]
call fcn.00402f30
push 0x10
push 0
lea ecx, [ebp - 0x244]
call fcn.00401c90
mov esi, dword [ebp - 0x14fc]
mov ecx, esi
push eax
push 1
push dword [ebp - 0xa8]
call fcn.0041c610
push dword [ebp - 0xcc]
mov ecx, esi
call fcn.00417e30
push 0x10024
push 0x1000000d
push edi
push dword [ebp - 0x1444]
mov ecx, esi
push 0
push 0
push 0x4ca9d0
push 0x4d8b54
call fcn.0041ab40
push eax
mov ecx, esi
mov dword [ebp - 0xa4], eax
call fcn.00416860
push 0xc8
push 0
mov esi, eax
push 0x101e
push esi
call dword [0x4a94c8]
push 0x64
push 1
push 0x101e
push esi
call dword [0x4a94c8]
push 0x1f4
push 2
push 0x101e
push esi
call dword [0x4a94c8]
mov eax, dword [ebp - 0x14e8]
mov edx, 0x10
mov ecx, dword [eax + 0x54]
call fcn.00410480
push eax
lea ecx, [ebp - 0x1490]
call fcn.00415c10
push 0
mov byte [ebp - 4], 6
push dword [ebp - 0x1490]
mov esi, dword [ebp - 0x14fc]
mov ecx, esi
push 1
push dword [ebp - 0xa4]
call fcn.0041c6a0
push 0xffffffffffffffff
push 0
push 0
push 0xffffffffffffffff
push 0
push 0x4d8b7c
push 0xb
push dword [ebp - 0xa4]
mov ecx, esi
call fcn.0041ebe0
push 0xffffffffffffffff
push 0
push 0
push 0xffffffffffffffff
push 0
push 0x4d8bb4
push 0xc
push dword [ebp - 0xa4]
mov ecx, esi
call fcn.0041ebe0
push 0xffffffffffffffff
push 0
push 0
push 0xffffffffffffffff
push 0
push 0x4d8be0
push 0xd
push dword [ebp - 0xa4]
mov ecx, esi
call fcn.0041ebe0
push 0xffffffffffffffff
push 0
push 0
push 0xffffffffffffffff
push 0
push 0x4d8c28
push 0xe
push dword [ebp - 0xa4]
mov ecx, esi
call fcn.0041ebe0
push 0xffffffffffffffff
push 0
push 0
push 0xffffffffffffffff
push 0
push 0x4d8c44
push 0xf
push dword [ebp - 0xa4]
mov ecx, esi
call fcn.0041ebe0
push 1
push dword [ebp - 0xa4]
mov ecx, esi
call fcn.0041f020
push dword [ebp - 0xc8]
mov ecx, esi
call fcn.00417e30
push 0x10024
push 0x1000000d
push edi
push dword [ebp - 0x1444]
mov ecx, esi
push 0
push 0
push 0x4ca9d0
push 0x4d8c60
call fcn.0041ab40
push eax
mov ecx, esi
mov dword [ebp - 0xa0], eax
call fcn.00416860
push 0xc8
push 0
mov esi, eax
push 0x101e
push esi
mov edi, dword [0x4a94c8]
call edi
push 0x64
push 1
push 0x101e
push esi
call edi
push 0x1f4
push 2
push 0x101e
push esi
call edi
mov edi, dword [ebp - 0x14e8]
mov edx, 0x10
mov ecx, dword [edi + 0x58]
call fcn.00410480
push eax
lea ecx, [ebp - 0x147c]
call fcn.00415c10
mov byte [ebp - 4], 7
mov edx, 0x10
mov ecx, dword [edi + 0x5c]
call fcn.00410480
push eax
lea ecx, [ebp - 0x1480]
call fcn.00415c10
mov byte [ebp - 4], 8
mov edx, 0x10
mov ecx, dword [edi + 0x60]
call fcn.00410480
push eax
lea ecx, [ebp - 0x1484]
call fcn.00415c10
mov byte [ebp - 4], 9
mov edx, 0x10
mov ecx, dword [edi + 0x64]
call fcn.00410480
push eax
lea ecx, [ebp - 0x1488]
call fcn.00415c10
mov byte [ebp - 4], 0xa
mov edx, 0x10
mov ecx, dword [edi + 0x70]
call fcn.00410480
push eax
lea ecx, [ebp - 0x148c]
call fcn.00415c10
mov byte [ebp - 4], 0xb
mov edx, 0x10
mov ecx, dword [edi + 0x6c]
call fcn.00410480
push eax
lea ecx, [ebp - 0x1494]
call fcn.00415c10
mov ecx, dword [ebp - 0x14fc]
push 0
mov byte [ebp - 4], 0xc
push dword [ebp - 0x147c]
push 1
push dword [ebp - 0xa0]
call fcn.0041c6a0
push 0
push 1
push 0x1002
push esi
call dword [0x4a94c8]
push dword [ebp - 0x1480]
mov esi, dword [0x4a9118]
mov edi, eax
push 0xffffffffffffffff
push edi
call esi
push dword [ebp - 0x1484]
push 0xffffffffffffffff
push edi
call esi
push dword [ebp - 0x1488]
push 0xffffffffffffffff
push edi
call esi
push dword [ebp - 0x148c]
push 0xffffffffffffffff
push edi
call esi
push dword [ebp - 0x1494]
push 0xffffffffffffffff
push edi
call esi
mov edi, dword [ebp - 0x14fc]
mov ecx, edi
push 0xffffffffffffffff
push 0
push 0
push 0xffffffffffffffff
push 0
push 0x4d8c90
push 0x16
push dword [ebp - 0xa0]
call fcn.0041ebe0
push 0xffffffffffffffff
push 0
push 0
push 0xffffffffffffffff
push 0
push 0x4d8cd4
push 0x17
push dword [ebp - 0xa0]
mov ecx, edi
call fcn.0041ebe0
push 0xffffffffffffffff
push 0
push 0
push 0xffffffffffffffff
push 0
push 0x4d8d10
push 0x19
push dword [ebp - 0xa0]
mov ecx, edi
call fcn.0041ebe0
push 0xffffffffffffffff
push 0
push 0
push 0xffffffffffffffff
push 0
push 0x4d8d54
push 0x18
push dword [ebp - 0xa0]
mov ecx, edi
call fcn.0041ebe0
push 0xffffffffffffffff
push 0
push 0
push 0xffffffffffffffff
push 0
push 0x4d8d80
push 0x1b
push dword [ebp - 0xa0]
mov ecx, edi
call fcn.0041ebe0
push 0xffffffffffffffff
push 0
push 0
push 0xffffffffffffffff
push 0
push 0x4d8db4
push 0x1a
push dword [ebp - 0xa0]
mov ecx, edi
call fcn.0041ebe0
push 0xffffffffffffffff
push 0
push 0
push 0xffffffffffffffff
push 0
push 0x4d8de8
push 0x6f
push dword [ebp - 0xa0]
mov ecx, edi
call fcn.0041ebe0
push 0xffffffffffffffff
push 0
push 0
push 0xffffffffffffffff
push 0
push 0x4d8e2c
push 0x70
push dword [ebp - 0xa0]
mov ecx, edi
call fcn.0041ebe0
push 0xffffffffffffffff
push 0
push 0
push 0xffffffffffffffff
push 0
push 0x4d8e68
push 0x72
push dword [ebp - 0xa0]
mov ecx, edi
call fcn.0041ebe0
push 0xffffffffffffffff
push 0
push 0
push 0xffffffffffffffff
push 0
push 0x4d8eac
push 0x71
push dword [ebp - 0xa0]
mov ecx, edi
call fcn.0041ebe0
push 0xffffffffffffffff
push 0
push 0
push 0xffffffffffffffff
push 0
push 0x4d8ed8
push 0x74
push dword [ebp - 0xa0]
mov ecx, edi
call fcn.0041ebe0
push 0xffffffffffffffff
push 0
push 0
push 0xffffffffffffffff
push 0
push 0x4d8f0c
push 0x73
push dword [ebp - 0xa0]
mov ecx, edi
call fcn.0041ebe0
push 1
push dword [ebp - 0xa0]
mov ecx, edi
call fcn.0041f020
push 0xffffffffffffffff
push 0
push 0
push 0xffffffffffffffff
push 0
push 0x4d8f40
push 0x1f
push dword [ebp - 0xa0]
mov ecx, edi
call fcn.0041ebe0
push 0xffffffffffffffff
push 0
push 0
push 0xffffffffffffffff
push 0
push 0x4d8f90
push 0x20
push dword [ebp - 0xa0]
mov ecx, edi
call fcn.0041ebe0
push 0xffffffffffffffff
push 0
push 0
push 0xffffffffffffffff
push 0
push 0x4d8fd8
push 0x21
push dword [ebp - 0xa0]
mov ecx, edi
call fcn.0041ebe0
push 0xffffffffffffffff
push 0
push 0
push 0xffffffffffffffff
push 0
push 0x4d9010
push 0x23
push dword [ebp - 0xa0]
mov ecx, edi
call fcn.0041ebe0
push 0xffffffffffffffff
push 0
push 0
push 0xffffffffffffffff
push 0
push 0x4d9068
push 0x25
push dword [ebp - 0xa0]
mov ecx, edi
call fcn.0041ebe0
push 0xffffffffffffffff
push 0
push 0
push 0xffffffffffffffff
push 0
push 0x4d90b0
push 0x24
push dword [ebp - 0xa0]
mov ecx, edi
call fcn.0041ebe0
push 0xffffffffffffffff
push 0
push 0
push 0xffffffffffffffff
push 0
push 0x4d9108
push 0x2a
push dword [ebp - 0xa0]
mov ecx, edi
call fcn.0041ebe0
push 0xffffffffffffffff
push 0
push 0
push 0xffffffffffffffff
push 0
push 0x4d9148
push 0x2b
push dword [ebp - 0xa0]
mov ecx, edi
call fcn.0041ebe0
push 0xffffffffffffffff
push 0
push 0
push 0xffffffffffffffff
push 0
push 0x4d9180
push 0x2d
push dword [ebp - 0xa0]
mov ecx, edi
call fcn.0041ebe0
push 0xffffffffffffffff
push 0
push 0
push 0xffffffffffffffff
push 0
push 0x4d91c0
push 0x2c
push dword [ebp - 0xa0]
mov ecx, edi
call fcn.0041ebe0
push 0xffffffffffffffff
push 0
push 0
push 0xffffffffffffffff
push 0
push 0x4d91e4
push 0x2f
push dword [ebp - 0xa0]
mov ecx, edi
call fcn.0041ebe0
push 0xffffffffffffffff
push 0
push 0
push 0xffffffffffffffff
push 0
push 0x4d9214
push 0x2e
push dword [ebp - 0xa0]
mov ecx, edi
call fcn.0041ebe0
push 0xffffffffffffffff
push 0
push 0
push 0xffffffffffffffff
push 0
push 0x4d9240
push 0x33
push dword [ebp - 0xa0]
mov ecx, edi
call fcn.0041ebe0
push 0xffffffffffffffff
push 0
push 0
push 0xffffffffffffffff
push 0
push 0x4d926c
push 0x34
push dword [ebp - 0xa0]
mov ecx, edi
call fcn.0041ebe0
push 0xffffffffffffffff
push 0
push 0
push 0xffffffffffffffff
push 0
push 0x4d929c
push 0x35
push dword [ebp - 0xa0]
mov ecx, edi
call fcn.0041ebe0
push 0xffffffffffffffff
push 0
push 0
push 0xffffffffffffffff
push 0
push 0x4d92c4
push 0x37
push dword [ebp - 0xa0]
mov ecx, edi
call fcn.0041ebe0
push 0xffffffffffffffff
push 0
push 0
push 0xffffffffffffffff
push 0
push 0x4d9304
push 0x38
push dword [ebp - 0xa0]
mov ecx, edi
call fcn.0041ebe0
push 0xffffffffffffffff
push 0
push 0
push 0xffffffffffffffff
push 0
push 0x4d9330
push 0x3e
push dword [ebp - 0xa0]
mov ecx, edi
call fcn.0041ebe0
push 0xffffffffffffffff
push 0
push 0
push 0xffffffffffffffff
push 0
push 0x4d9390
push 0x3f
push dword [ebp - 0xa0]
mov ecx, edi
call fcn.0041ebe0
push 0xffffffffffffffff
push 0
push 0
push 0xffffffffffffffff
push 0
push 0x4d93e8
push 0x41
push dword [ebp - 0xa0]
mov ecx, edi
call fcn.0041ebe0
push 0xffffffffffffffff
push 0
push 0
push 0xffffffffffffffff
push 0
push 0x4d9448
push 0x40
push dword [ebp - 0xa0]
mov ecx, edi
call fcn.0041ebe0
push 0xffffffffffffffff
push 0
push 0
push 0xffffffffffffffff
push 0
push 0x4d9490
push 0x43
push dword [ebp - 0xa0]
mov ecx, edi
call fcn.0041ebe0
push 0xffffffffffffffff
push 0
push 0
push 0xffffffffffffffff
push 0
push 0x4d94e0
push 0x42
push dword [ebp - 0xa0]
mov ecx, edi
call fcn.0041ebe0
push 0xffffffffffffffff
push 0
push 0
push 0xffffffffffffffff
push 0
push 0x4d9530
push 0x47
push dword [ebp - 0xa0]
mov ecx, edi
call fcn.0041ebe0
push 0xffffffffffffffff
push 0
push 0
push 0xffffffffffffffff
push 0
push 0x4d9580
push 0x48
push dword [ebp - 0xa0]
mov ecx, edi
call fcn.0041ebe0
push 0xffffffffffffffff
push 0
push 0
push 0xffffffffffffffff
push 0
push 0x4d95d0
push 0x49
push dword [ebp - 0xa0]
mov ecx, edi
call fcn.0041ebe0
push 0xffffffffffffffff
push 0
push 0
push 0xffffffffffffffff
push 0
push 0x4d9618
push 0x4b
push dword [ebp - 0xa0]
mov ecx, edi
call fcn.0041ebe0
push 0xffffffffffffffff
push 0
push 0
push 0xffffffffffffffff
push 0
push 0x4d9678
push 0x4c
push dword [ebp - 0xa0]
mov ecx, edi
call fcn.0041ebe0
push dword [ebp - 0xb8]
mov ecx, edi
call fcn.00417e30
push 0x10024
push 0x1000000d
push dword [ebp - 0x1508]
mov ecx, edi
push dword [ebp - 0x1444]
push 0
push 0
push 0x4ca9d0
push 0x4d96c8
call fcn.0041ab40
push eax
mov ecx, edi
mov dword [ebp - 0x90], eax
call fcn.00416860
push 0x1a4
push 0
mov esi, eax
push 0x101e
push esi
call dword [0x4a94c8]
push 0x50
push 1
push 0x101e
push esi
call dword [0x4a94c8]
push 0x6e
push 2
push 0x101e
push esi
call dword [0x4a94c8]
push 0x78
push 3
push 0x101e
push esi
call dword [0x4a94c8]
mov eax, dword [ebp - 0x14e8]
mov edx, 0x10
mov ecx, dword [eax + 0x68]
call fcn.00410480
push eax
lea ecx, [ebp - 0x1498]
call fcn.00415c10
push 0
mov byte [ebp - 4], 0xd
mov ecx, edi
push dword [ebp - 0x1498]
push 1
push dword [ebp - 0x90]
call fcn.0041c6a0
push 0xffffffffffffffff
push 0
push 0
push 0xffffffffffffffff
push 0
push 0x4d9720
push 0x51
push dword [ebp - 0x90]
mov ecx, edi
call fcn.0041ebe0
push 0xffffffffffffffff
push 0
push 0
push 0xffffffffffffffff
push 0
push 0x4d974c
push 0x52
push dword [ebp - 0x90]
mov ecx, edi
call fcn.0041ebe0
push 0xffffffffffffffff
push 0
push 0
push 0xffffffffffffffff
push 0
push 0x4d9780
push 0x53
push dword [ebp - 0x90]
mov ecx, edi
call fcn.0041ebe0
push 1
push dword [ebp - 0x90]
mov ecx, edi
call fcn.0041f020
movaps xmm0, xmmword [0x4eab00]
lea eax, [ebp - 0x14e4]
push eax
push 1
push 0x1060
push dword [ebp - 0x90]
movups xmmword [ebp - 0x14e0], xmm0
mov dword [ebp - 0x14e4], 1
mov ecx, edi
xorps xmm0, xmm0
mov dword [ebp - 0x14d0], 0
movups xmmword [ebp - 0x14cc], xmm0
mov dword [ebp - 0x14bc], 0
call fcn.0041c1a0
mov esi, 0x28
mov eax, dword [ebp + esi*4 - 0x148]
test eax, eax
jle 0x43f6d7
push 1
push eax
mov ecx, edi
call fcn.0041feb0
inc esi
cmp esi, 0x2f
jl 0x43f6c2
push 0
mov ecx, edi
call fcn.00417e30
mov esi, dword [ebp - 0x1500]
mov eax, dword [ebp - 0x14f8]
push 3
mov ecx, dword [esi + 0x1c54]
mov dword [esi], eax
lea eax, [ebp - 0x148]
mov dword [esi + 4], edi
mov dword [esi + 8], eax
call fcn.0043acd0
mov ecx, dword [ebp - 0x14e8]
mov eax, dword [ecx + 0xc]
mov dword [esi + 0x18], eax
mov eax, dword [ecx + 0x2c]
mov dword [esi + 0x1c], eax
mov eax, dword [ecx + 0x88]
mov dword [esi + 0x20], eax
mov dword [esi + 0x24], 0
mov dword [esi + 0x28], 0
mov dword [esi + 0x2c], 0
mov eax, dword [ecx + 0x8c]
mov dword [esi + 0x34], eax
lea eax, [ecx + 0xb8]
push eax
lea ecx, [esi + 0x134]
mov dword [esi + 0x30], 0
mov dword [esi + 0x38], 0
call fcn.00401a10
mov dword [ebp - 0x1450], 0xffffffff
mov dword [ebp - 0x1468], 0xffffffff
mov dword [ebp - 0x1454], 0xffffffff
mov eax, dword [ebp - 0x14e8]
mov byte [ebp - 4], 0x10
mov dword [ebp - 0x1cc], 0
test byte [eax + 0x8c], 4
je 0x43f7ae
cmp dword [eax + 0x7c], 0
mov byte [ebp - 0x14f1], 1
je 0x43f7b5
mov byte [ebp - 0x14f1], 0
push 0x48
call dword [0x4a94dc]
movsd xmm0, qword [0x4eaa28]
comisd xmm0, xmmword [esi + 0x368]
mov dword [ebp - 0x1c8], eax
jb 0x43f7ed
push 4
call dword [0x4a95dc]
mov ecx, eax
mov eax, dword [ebp - 0x1c8]
or ecx, 0xff000000
jmp 0x43f7ef
xor ecx, ecx
push ecx
push eax
mov edx, eax
mov dword [ebp - 0x1444], ecx
mov eax, dword [ebp - 0x14e8]
mov dword [ebp - 0x1448], 0
mov ecx, dword [eax + 0x10]
call fcn.00411ae0
mov dword [ebp - 0x1448], eax
push eax
lea ecx, [ebp - 0x149c]
mov byte [ebp - 4], 0x11
call fcn.00415c50
mov byte [ebp - 4], 0x12
mov ecx, edi
push dword [ebp - 0x149c]
push 0x4d97ac
push dword [ebp - 0xe4]
call fcn.0041a480
push dword [ebp - 0x1444]
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x1c8]
mov edx, eax
push eax
mov eax, dword [ebp - 0x14e8]
mov ecx, dword [eax + 0x34]
call fcn.00411ae0
mov ecx, dword [ebp - 0x1448]
mov dword [ebp - 0x1c4], eax
test ecx, ecx
je 0x43f87f
mov edx, dword [ecx]
push 1
call dword [edx]
mov eax, dword [ebp - 0x1c4]
push eax
lea ecx, [ebp - 0x14b4]
mov dword [ebp - 0x1448], eax
call fcn.00415c50
push 0
mov byte [ebp - 4], 0x13
mov ecx, edi
push dword [ebp - 0x14b4]
push 0
push 0x64
push 0x4d97cc
push dword [ebp - 0xe4]
call fcn.0041acc0
push dword [ebp - 0x1444]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x1c8]
mov edx, eax
push eax
mov eax, dword [ebp - 0x14e8]
mov ecx, dword [eax + 0x30]
call fcn.00411ae0
mov ecx, dword [ebp - 0x1448]
mov dword [ebp - 0x1c4], eax
test ecx, ecx
je 0x43f8ef
mov edx, dword [ecx]
push 1
call dword [edx]
mov eax, dword [ebp - 0x1c4]
push eax
lea ecx, [ebp - 0x1478]
mov dword [ebp - 0x1448], eax
call fcn.00415c50
push 0
mov byte [ebp - 4], 0x14
mov ecx, edi
push dword [ebp - 0x1478]
push 0
push 0x64
push 0x4d97f0
push dword [ebp - 0xe4]
call fcn.0041acc0
push dword [ebp - 0x1444]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x1c8]
mov edx, eax
push eax
mov eax, dword [ebp - 0x14e8]
mov ecx, dword [eax + 0x28]
call fcn.00411ae0
mov ecx, dword [ebp - 0x1448]
mov dword [ebp - 0x1c4], eax
test ecx, ecx
je 0x43f95f
mov edx, dword [ecx]
push 1
call dword [edx]
mov eax, dword [ebp - 0x1c4]
push eax
lea ecx, [ebp - 0x1474]
mov dword [ebp - 0x1448], eax
call fcn.00415c50
push 0
mov byte [ebp - 4], 0x15
mov ecx, edi
push dword [ebp - 0x1474]
push 0
push 0x64
push 0x4d9834
push dword [ebp - 0xe4]
call fcn.0041acc0
push 0
push dword [ebp - 0x1474]
mov ecx, edi
mov dword [ebp - 0x54], eax
push 0
push 0x64
push 0x4d9868
push dword [ebp - 0xe4]
call fcn.0041acc0
mov dword [ebp - 0x50], eax
mov esi, 0x3d
nop dword [eax]
push 0x40
push dword [ebp + esi*4 - 0x148]
mov ecx, edi
call fcn.0041d420
inc esi
cmp esi, 0x3f
jl 0x43f9c0
mov ecx, dword [ebp - 0x14e8]
push dword [ebp - 0x1444]
mov eax, dword [ebp - 0x1c8]
add ecx, 0x48
mov dword [ebp - 0x1514], ecx
mov edx, eax
push eax
mov ecx, dword [ecx]
call fcn.00411ae0
mov ecx, dword [ebp - 0x1448]
mov esi, dword [ebp - 0x1500]
mov dword [ebp - 0x1c4], eax
test ecx, ecx
je 0x43fa1d
mov edx, dword [ecx]
push 1
call dword [edx]
mov eax, dword [ebp - 0x1c4]
push eax
lea ecx, [ebp - 0x1470]
mov dword [ebp - 0x1448], eax
call fcn.00415c50
push 0
mov byte [ebp - 4], 0x16
mov ecx, edi
push dword [ebp - 0x1470]
push 0
push 0x64
push 0x4d98a0
push dword [ebp - 0xe4]
call fcn.0041acc0
push dword [ebp - 0x1444]
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x1c8]
mov edx, eax
push eax
mov eax, dword [ebp - 0x14e8]
mov ecx, dword [eax + 0x50]
call fcn.00411ae0
mov ecx, dword [ebp - 0x1448]
mov dword [ebp - 0x1c4], eax
test ecx, ecx
je 0x43fa8d
mov edx, dword [ecx]
push 1
call dword [edx]
mov eax, dword [ebp - 0x1c4]
push eax
lea ecx, [ebp - 0x14a0]
mov dword [ebp - 0x1448], eax
call fcn.00415c50
push 0
mov byte [ebp - 4], 0x17
mov ecx, edi
push dword [ebp - 0x14a0]
push 0
push 0x64
push 0x4d98d0
push dword [ebp - 0xe4]
call fcn.0041acc0
push dword [ebp - 0x1444]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x1c8]
mov edx, eax
push eax
mov eax, dword [ebp - 0x14e8]
mov ecx, dword [eax + 0x3c]
call fcn.00411ae0
mov ecx, dword [ebp - 0x1448]
mov dword [ebp - 0x1c4], eax
test ecx, ecx
je 0x43fafd
mov edx, dword [ecx]
push 1
call dword [edx]
mov eax, dword [ebp - 0x1c4]
push eax
lea ecx, [ebp - 0x146c]
mov dword [ebp - 0x1448], eax
call fcn.00415c50
push 0
push 0
push 8
push 0x64
push 0
mov byte [ebp - 4], 0x18
mov ecx, edi
push dword [ebp - 0xe4]
call fcn.0041acc0
push dword [ebp - 0x1444]
mov eax, dword [ebp - 0x1c8]
mov edx, eax
push eax
mov eax, dword [ebp - 0x14e8]
mov ecx, dword [eax + 0x4c]
call fcn.00411ae0
mov ecx, dword [ebp - 0x1448]
mov dword [ebp - 0x1c4], eax
test ecx, ecx
je 0x43fb63
mov edx, dword [ecx]
push 1
call dword [edx]
mov eax, dword [ebp - 0x1c4]
push eax
lea ecx, [ebp - 0x14a4]
mov dword [ebp - 0x1448], eax
call fcn.00415c50
push 0
mov byte [ebp - 4], 0x19
mov ecx, edi
push dword [ebp - 0x14a4]
push 0
push 0x64
push 0x4d98f8
push dword [ebp - 0xe4]
call fcn.0041acc0
push 0
push dword [ebp - 0x1470]
mov ecx, edi
mov dword [ebp - 0x7c], eax
push 0
push 0x64
push 0x4d993c
push dword [ebp - 0xe4]
call fcn.0041acc0
push dword [ebp - 0x1444]
mov dword [ebp - 0x78], eax
mov eax, dword [ebp - 0x1c8]
mov edx, eax
push eax
mov eax, dword [ebp - 0x14e8]
mov ecx, dword [eax + 0x1c]
call fcn.00411ae0
mov ecx, dword [ebp - 0x1448]
mov dword [ebp - 0x1c4], eax
test ecx, ecx
je 0x43fbf4
mov edx, dword [ecx]
push 1
call dword [edx]
mov eax, dword [ebp - 0x1c4]
push eax
lea ecx, [ebp - 0x14a8]
mov dword [ebp - 0x1448], eax
call fcn.00415c50
push 0
mov byte [ebp - 4], 0x1a
mov ecx, edi
push dword [ebp - 0x14a8]
push 0
push 0x64
push 0x4d9978
push dword [ebp - 0xe4]
call fcn.0041acc0
mov ecx, dword [ebp - 0x1c8]
mov edx, 1
push 0xffffffffffffffff
push 0xff000000
push 0xff005f00
mov dword [ebp - 0xc4], eax
call fcn.00410a00
push eax
lea ecx, [ebp - 0x14ac]
call fcn.00415c10
push 0xffffffffffffffff
push 0xff000000
mov byte [ebp - 4], 0x1b
xor edx, edx
mov ecx, dword [ebp - 0x1c8]
push 0xff005f00
call fcn.00410a00
push eax
lea ecx, [ebp - 0x14b0]
call fcn.00415c10
push 0
mov byte [ebp - 4], 0x1c
mov ecx, edi
push dword [ebp - 0x14ac]
push 0
push 0x64
push 0x4d99b4
push dword [ebp - 0xe4]
call fcn.0041acc0
push 0
push dword [ebp - 0x14b0]
mov ecx, edi
mov dword [ebp - 0x74], eax
push 0
push 0x64
push 0x4d99d8
push dword [ebp - 0xe4]
call fcn.0041acc0
push 0
push 0
push 8
push 0x64
push 0
push dword [ebp - 0xe4]
mov ecx, edi
mov dword [ebp - 0x70], eax
call fcn.0041acc0
push 0
push dword [ebp - 0x146c]
mov ecx, edi
push 0
push 0x64
push 0x4d9a00
push dword [ebp - 0xe4]
call fcn.0041acc0
push 0
push dword [ebp - 0x1470]
mov ecx, edi
mov dword [ebp - 0x6c], eax
push 0
push 0x64
push 0x4d9a44
push dword [ebp - 0xe4]
call fcn.0041acc0
mov dword [ebp - 0x30], eax
push 0
push dword [ebp - 0x146c]
mov ecx, edi
push 0
push 0x64
push 0x4d9a80
push dword [ebp - 0xe4]
call fcn.0041acc0
push 0
push dword [ebp - 0x146c]
mov ecx, edi
mov dword [ebp - 0x40], eax
push 0
push 0x64
push 0x4d9ac0
push dword [ebp - 0xe4]
call fcn.0041acc0
push 0
push dword [ebp - 0x146c]
mov ecx, edi
mov dword [ebp - 0x3c], eax
push 0
push 0x64
push 0x4d9b08
push dword [ebp - 0xe4]
call fcn.0041acc0
push 0
push 0
push 8
push 0x64
push 0
push dword [ebp - 0xe4]
mov ecx, edi
mov dword [ebp - 0x44], eax
call fcn.0041acc0
push 0
push dword [ebp - 0x1478]
mov ecx, edi
push 0
push 0x64
push 0x4d9b3c
push dword [ebp - 0xe4]
call fcn.0041acc0
push 0
push dword [ebp - 0x7c]
mov ecx, edi
mov dword [ebp - 0x38], eax
push dword [ebp - 0xe4]
call fcn.004168b0
push eax
call dword [0x4a95ac]
mov eax, 0x70
mov byte [ebp - 0x1c0], 1
mov word [ebp - 0x1be], ax
movzx eax, word [ebp - 0x13c]
mov word [ebp - 0x1bc], ax
mov eax, 0x4e
mov word [ebp - 0x1b8], ax
movzx eax, word [ebp - 0x58]
mov word [ebp - 0x1b6], ax
mov eax, 0x46
mov word [ebp - 0x1b2], ax
movzx eax, word [ebp - 0x34]
mov word [ebp - 0x1b0], ax
mov eax, 0x4d
mov word [ebp - 0x1ac], ax
movzx eax, word [ebp - 0x2c]
mov word [ebp - 0x1aa], ax
mov eax, 0x53
mov word [ebp - 0x1a6], ax
movzx eax, word [ebp - 0x54]
mov word [ebp - 0x1a4], ax
mov eax, 0x43
mov word [ebp - 0x1a0], ax
movzx eax, word [ebp - 0x50]
mov byte [ebp - 0x1ba], 0x11
mov byte [ebp - 0x1b4], 0x11
mov byte [ebp - 0x1ae], 0x11
mov byte [ebp - 0x1a8], 0x11
mov byte [ebp - 0x1a2], 0x11
mov word [ebp - 0x19e], ax
mov eax, 0x4c
mov byte [ebp - 0x19c], 9
mov word [ebp - 0x19a], ax
mov ecx, 0xd
movzx eax, word [ebp - 0x4c]
mov edx, 0x41
mov word [ebp - 0x198], ax
movzx eax, word [ebp - 0x7c]
mov word [ebp - 0x192], ax
movzx eax, word [ebp - 0x78]
mov word [ebp - 0x18c], ax
movzx eax, word [ebp - 0x74]
mov word [ebp - 0x186], ax
mov eax, 0x4e
mov word [ebp - 0x182], ax
movzx eax, word [ebp - 0x70]
mov word [ebp - 0x180], ax
movzx eax, word [ebp - 0x6c]
mov word [ebp - 0x17a], ax
mov eax, 0x4d
mov word [ebp - 0x176], ax
movzx eax, word [ebp - 0x44]
mov word [ebp - 0x174], ax
movzx eax, word [ebp - 0x40]
mov word [ebp - 0x16e], ax
movzx eax, word [ebp - 0x3c]
mov word [ebp - 0x168], ax
mov eax, 0x52
mov word [ebp - 0x164], ax
movzx eax, word [ebp - 0xc4]
mov word [ebp - 0x162], ax
mov eax, 0x50
mov word [ebp - 0x15e], ax
movzx eax, word [ebp - 0x30]
mov word [ebp - 0x15c], ax
mov eax, 0x53
mov word [ebp - 0x158], ax
movzx eax, word [ebp - 0x38]
mov word [ebp - 0x156], ax
mov eax, 0x55
mov word [ebp - 0x152], ax
movzx eax, word [ebp - 0x48]
mov word [ebp - 0x194], cx
mov word [ebp - 0x18e], cx
mov ecx, 0x57
mov word [ebp - 0x150], ax
lea eax, [ebp - 0x1c0]
push 0x13
mov word [ebp - 0x17c], cx
mov word [ebp - 0x170], cx
mov ecx, edi
push eax
mov byte [ebp - 0x196], 9
mov byte [ebp - 0x190], 0x11
mov byte [ebp - 0x18a], 9
mov word [ebp - 0x188], dx
mov byte [ebp - 0x184], 9
mov byte [ebp - 0x17e], 9
mov byte [ebp - 0x178], 9
mov byte [ebp - 0x172], 0x11
mov byte [ebp - 0x16c], 0x11
mov word [ebp - 0x16a], dx
mov byte [ebp - 0x166], 9
mov byte [ebp - 0x160], 0x11
mov byte [ebp - 0x15a], 9
mov byte [ebp - 0x154], 9
call fcn.00417720
push 0
lea ecx, [ebp - 0x338]
call fcn.00411ea0
push 0
lea ecx, [ebp - 0x350]
call fcn.00411ea0
push 0
lea ecx, [ebp - 0x388]
call fcn.00411ea0
xorps xmm0, xmm0
mov dword [ebp - 0x284], 0
push 0
movq qword [ebp - 0x28c], xmm0
push 0
mov ecx, dword [esi + 0x1c54]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4d9b7c
push 0
call fcn.00434b20
push eax
lea ecx, [ebp - 0x28c]
call fcn.004019c0
lea ecx, [esi + 0x134]
mov byte [ebp - 4], 0x1d
call fcn.00401f90
test al, al
je 0x4400c9
mov ecx, dword [esi + 0x1c54]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4d9b98
push 0
call fcn.00434c10
push eax
push 0x4c9784
lea ecx, [esi + 0x134]
call fcn.00401bf0
lea ecx, [esi + 0x134]
call fcn.00401c90
or edx, 0xffffffff
mov ecx, eax
call fcn.0040e830
xorps xmm0, xmm0
mov dword [ebp - 0x2cc], 0
lea ecx, [ebp - 0x2d4]
movq qword [ebp - 0x2d4], xmm0
call fcn.00401930
push 0x104
push 0
push 0
push 0x104
lea ecx, [ebp - 0x2d4]
mov byte [ebp - 4], 0x1e
call fcn.00402200
push eax
call dword [0x4a93b0]
mov eax, dword [ebp - 0x14e8]
lea ecx, [esi + 0x14c]
add eax, 0xd0
push eax
call fcn.00401a10
push 0
push 1
lea ecx, [esi + 0x320]
call fcn.00401c90
push eax
lea ecx, [esi + 0x14c]
call fcn.00401ba0
mov ecx, eax
call fcn.00401f20
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4d9bc4
lea ecx, [esi + 0x14c]
call fcn.00402f30
mov ecx, eax
call fcn.00401c90
push eax
call dword [0x4a948c]
test eax, eax
jne 0x44019e
lea ecx, [esi + 0x14c]
call fcn.00401ae0
lea ecx, [esi + 0x14c]
call fcn.00401f90
test al, al
je 0x44021a
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4d9bec
lea ecx, [esi + 0x134]
call fcn.00401c90
push eax
lea ecx, [esi + 0x14c]
call fcn.00401bf0
lea ecx, [esi + 0x14c]
call fcn.00401c90
mov edx, 2
mov ecx, eax
call fcn.0040e830
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4d9c00
lea ecx, [esi + 0x14c]
call fcn.00402f30
lea ecx, [esi + 0x320]
call fcn.00401c90
mov ecx, eax
call fcn.0042f0e0
lea ecx, [esi + 0x14c]
mov byte [ebp - 0x14ea], 0
mov byte [ebp - 0x14e9], 0
call fcn.00401c90
push eax
call dword [0x4a948c]
lea ecx, [esi + 0x14c]
test eax, eax
jne 0x440288
xorps xmm0, xmm0
push eax
push 0x21
movups xmmword [ebp - 0x2f4], xmm0
movups xmmword [ebp - 0x2e4], xmm0
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2f4]
call fcn.0040c4b0
lea ecx, [ebp - 0x2f4]
call fcn.0040ed40
jmp 0x440295
call fcn.00401c90
push eax
mov ecx, esi
call fcn.0046b8d0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
xorps xmm0, xmm0
mov dword [ebp - 0x1d0], 0
push 0x4d9c20
lea ecx, [esi + 0x134]
movq qword [ebp - 0x1d8], xmm0
call fcn.00401c90
push eax
lea ecx, [ebp - 0x1d8]
call fcn.004019c0
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x1e4]
xorps xmm0, xmm0
mov dword [ebp - 0x1dc], 0
movq qword [ebp - 0x1e4], xmm0
call fcn.00401930
lea ecx, [ebp - 0x1d8]
mov byte [ebp - 4], 0x20
call fcn.00401c90
push eax
call dword [0x4a948c]
test eax, eax
jne 0x44034e
xorps xmm0, xmm0
lea ecx, [ebp - 0x1d8]
push eax
push 0x2a
movups xmmword [ebp - 0x2f4], xmm0
movups xmmword [ebp - 0x2e4], xmm0
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2f4]
call fcn.0040c4b0
lea ecx, [ebp - 0x2f4]
call fcn.0040ed40
push 0x80
push 0x4c9814
push 0x4d9c50
push 0x4d9c64
lea ecx, [ebp - 0x1d8]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x1e4]
call fcn.004028b0
mov ecx, eax
call fcn.00402ac0
mov dword [ebp - 0x1c8], eax
test eax, eax
jne 0x4404a9
push 0x80
push 0x4c9814
push 0x4d9c6c
push 0x4d9c64
lea ecx, [ebp - 0x1d8]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x1e4]
call fcn.004028b0
mov ecx, eax
call fcn.00402ac0
push 0x80
push 0x4c9814
push 0x4d9c80
push 0x4d9c64
lea ecx, [ebp - 0x1d8]
mov dword [ebp - 0x1c4], eax
call fcn.00401c90
push eax
lea ecx, [ebp - 0x1e4]
call fcn.004028b0
mov ecx, eax
call fcn.00402ac0
push 0
mov dword [ebp - 0x1508], eax
call dword [0x4a94d4]
mov esi, dword [0x4a91c4]
mov edi, eax
push 8
push edi
call esi
push 0xa
push edi
mov dword [ebp - 0x1444], eax
call esi
push edi
push 0
mov dword [ebp - 0x144c], eax
call dword [0x4a94d8]
mov esi, dword [ebp - 0x1504]
mov eax, dword [ebp - 0x1c4]
cmp eax, esi
jle 0x440446
cmp eax, dword [ebp - 0x1444]
cmovle esi, eax
mov edi, dword [ebp - 0x14f0]
mov eax, dword [ebp - 0x1508]
mov ecx, dword [ebp - 0x144c]
cmp eax, edi
jle 0x440461
cmp eax, ecx
cmovle edi, eax
mov eax, ecx
cdq
sub eax, edx
mov ecx, eax
mov eax, edi
cdq
sub eax, edx
sar ecx, 1
sar eax, 1
sub ecx, eax
mov eax, dword [ebp - 0x1444]
push 0x10
push edi
cdq
push esi
push ecx
sub eax, edx
mov ecx, eax
mov eax, esi
cdq
sub eax, edx
sar ecx, 1
sar eax, 1
sub ecx, eax
push ecx
push 0
push dword [ebp - 0x150c]
call dword [0x4a9594]
mov edi, dword [ebp - 0x14fc]
mov esi, dword [ebp - 0x1500]
mov eax, dword [ebp - 0x14e8]
mov eax, dword [eax + 0x90]
test eax, eax
je 0x4404c1
mov dword [esi + 0x1c28], eax
jmp 0x44050d
push 0x80
push 0x4d9c94
push 0x4d9c9c
push 0x4d9cb8
lea ecx, [ebp - 0x1d8]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x1e4]
call fcn.004028b0
mov ecx, eax
call fcn.00402ac0
mov dword [esi + 0x1c28], eax
cmp eax, 0xa
je 0x44050d
cmp eax, 0xe
je 0x44050d
mov dword [esi + 0x1c28], 0xc
mov ecx, edi
call fcn.00415710
push 0x3c
push 0
push dword [ebp - 0x14f8]
call fcn.00491bb0
add esp, 0xc
mov ecx, edi
push dword [ebp - 0x150c]
call fcn.00419f70
mov eax, dword [ebp - 0x14e8]
mov ecx, edi
push 7
push dword [eax + 0x7c]
call fcn.00417d50
call fcn.004042f0
cmp dword [ebp - 0x1c8], 0
je 0x44056a
mov eax, dword [ebp - 0x14e8]
cmp dword [eax + 0x7c], 0
je 0x44056a
push 1
push 3
mov ecx, edi
call fcn.00417d50
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4d9cc8
xorps xmm0, xmm0
mov dword [ebp - 0x248], 0
push 0x4d9d10
lea ecx, [esi + 0x32c]
movq qword [ebp - 0x250], xmm0
call fcn.00401c90
push eax
lea ecx, [ebp - 0x250]
call fcn.004019c0
mov eax, dword [ebp - 0x14e8]
mov byte [ebp - 4], 0x21
test byte [eax + 0x8c], 1
je 0x4406c8
lea eax, [ebp - 0x1c4]
push eax
push 0
push esi
push 0x46a2f0
push 0
push 0
call dword [0x4a93c0]
push eax
lea ecx, [ebp - 0x1450]
call fcn.00401220
mov eax, dword [ebp - 0x10c]
test eax, eax
jle 0x440602
push 0x40
push eax
mov ecx, edi
call fcn.0041d420
push 0x22
push dword [ebp - 0x118]
mov ecx, edi
call fcn.0041d420
push 1
push dword [ebp - 0x11c]
mov ecx, edi
call fcn.0041d420
push 0x40
push dword [ebp - 0x120]
mov ecx, edi
call fcn.0041d420
push 0x40
push dword [ebp - 0xfc]
mov ecx, edi
call fcn.0041d420
push 0x40
push dword [ebp - 0x58]
mov ecx, edi
call fcn.0041d420
push 0x40
push dword [ebp - 0x54]
mov ecx, edi
call fcn.0041d420
lea eax, [ebp - 0x1464]
mov ecx, edi
push eax
push dword [ebp - 0x114]
call fcn.00416860
push eax
call dword [0x4a9598]
test eax, eax
je 0x4406bb
push 2
lea eax, [ebp - 0x1464]
push eax
push dword [ebp - 0x150c]
push 0
call dword [0x4a94f0]
mov eax, dword [ebp - 0x1460]
lea ecx, [ebp - 0x250]
push 0
add eax, 2
push eax
mov eax, dword [ebp - 0x1464]
add eax, 0x78
push eax
push 0xffffffffffffffff
push 0xffffffffffffffff
push 4
call fcn.00401c90
push eax
mov ecx, esi
call fcn.00470650
lea ecx, [ebp - 0x338]
call fcn.00411ef0
jmp 0x4406e3
push 0
push 0
push esi
push 0x46a380
push 0
push 0
call dword [0x4a93c0]
push eax
call dword [0x4a940c]
xorps xmm0, xmm0
lea ecx, [ebp - 0x370]
movups xmmword [ebp - 0x370], xmm0
movups xmmword [ebp - 0x360], xmm0
call fcn.00421050
push 1
mov ecx, edi
mov byte [ebp - 4], 0x22
call fcn.00415fd0
push 0
mov ecx, esi
call fcn.00442c40
test eax, eax
je 0x442349
nop dword [eax]
cmp byte [ebp - 0x14e9], 1
jne 0x440757
nop dword [eax]
push 1
mov ecx, esi
call fcn.00442c40
test eax, eax
jne 0x440730
mov ecx, dword [ebp - 0x14f8]
mov byte [ebp - 0x14e9], 2
mov dword [ecx + 0x30], edi
mov eax, dword [ebp - 0x108]
mov dword [ecx], eax
jmp 0x44075d
mov ecx, dword [ebp - 0x14f8]
mov ecx, dword [ecx]
cmp ecx, 0xfffffffa
je 0x442293
cmp ecx, 0xffffffe1
je 0x442293
mov eax, dword [ebp - 0x14f8]
cmp dword [eax + 0x30], edi
jne 0x4414fa
cmp byte [ebp - 0x14ea], 1
jne 0x4407a8
cmp ecx, 0xffffff31
jne 0x4407a8
lea ecx, [ebp - 0x350]
call fcn.00411ef0
mov byte [ebp - 0x14ea], 2
jmp 0x44238f
mov edx, dword [ebp - 0x100]
cmp ecx, 0xffffffea
jne 0x4407d6
mov eax, dword [eax + 0xc]
cmp eax, dword [ebp - 0xa8]
je 0x4407de
cmp eax, dword [ebp - 0xa4]
je 0x4407de
cmp eax, dword [ebp - 0xa0]
je 0x4407de
cmp eax, dword [ebp - 0x90]
je 0x4407de
cmp ecx, edx
jne 0x440a6c
cmp ecx, edx
sete byte [ebp - 0x14eb]
cmp dword [esi + 0x1c20], 0
je 0x4407f7
mov ecx, esi
call fcn.0046b090
push 0
push 0
push 0x130b
push dword [ebp - 0xe4]
mov ecx, edi
call fcn.00416860
push eax
call dword [0x4a94c8]
push eax
mov ecx, esi
mov dword [ebp - 0x14f0], eax
call fcn.00472e80
push eax
mov ecx, edi
call fcn.00416860
cmp byte [ebp - 0x14eb], 0
mov dword [ebp - 0x1504], eax
je 0x44087e
push eax
call dword [0x4a9564]
cmp byte [ebp - 0x14ea], 2
jne 0x440871
xorps xmm1, xmm1
lea ecx, [ebp - 0x350]
call fcn.00411f10
movsd xmm1, qword [0x4eaab8]
comisd xmm1, xmm0
jbe 0x440871
mov byte [ebp - 0x14ea], 0
jmp 0x44238f
mov eax, dword [ebp - 0x1504]
mov byte [ebp - 0x14ea], 1
cmp dword [ebp - 0x14f0], 7
ja 0x44099a
push 0
push 0
push 0x1004
push eax
call dword [0x4a94c8]
test eax, eax
jne 0x4408bf
mov esi, 0x33
push 0x40
push dword [ebp + esi*4 - 0x148]
mov ecx, edi
call fcn.0041d420
inc esi
cmp esi, 0x38
jl 0x4408a4
jmp 0x4409b6
push 2
push 0xffffffffffffffff
push 0x100c
push dword [ebp - 0x1504]
call dword [0x4a94c8]
mov ecx, eax
mov eax, 0x20
cmp ecx, 0xffffffff
mov dword [ebp - 0x1c4], ecx
mov ecx, 0x40
cmove eax, ecx
mov ecx, edi
push eax
push dword [ebp - 0x6c]
mov dword [ebp - 0x1444], eax
call fcn.0041d420
push dword [ebp - 0x1444]
mov ecx, edi
push dword [ebp - 0x7c]
call fcn.0041d420
push dword [ebp - 0x1444]
mov ecx, edi
push dword [ebp - 0x78]
call fcn.0041d420
push 0x20
push dword [ebp - 0x74]
mov ecx, edi
call fcn.0041d420
push 0x20
push dword [ebp - 0x70]
mov ecx, edi
call fcn.0041d420
push 0x20
push dword [ebp - 0x40]
mov ecx, edi
call fcn.0041d420
cmp dword [ebp - 0x14f0], 3
je 0x440951
mov ecx, 0x40
jmp 0x44097e
mov ecx, dword [ebp - 0x1444]
cmp ecx, 0x20
jne 0x440984
mov edx, dword [ebp - 0x1c4]
mov ecx, dword [ebp - 0x1504]
call fcn.00413e40
mov ecx, dword [ebp - 0x1444]
cmp eax, 0x51
mov eax, 0x40
cmovne ecx, eax
mov dword [ebp - 0x1444], ecx
push ecx
push dword [ebp - 0xc4]
mov ecx, edi
call fcn.0041d420
push dword [ebp - 0x1444]
jmp 0x4409d9
mov esi, 0x33
nop
push 0x40
push dword [ebp + esi*4 - 0x148]
mov ecx, edi
call fcn.0041d420
inc esi
cmp esi, 0x38
jl 0x4409a0
mov esi, dword [ebp - 0x1500]
mov ecx, edi
push 0x40
push dword [ebp - 0x40]
call fcn.0041d420
push 0x40
push dword [ebp - 0xc4]
mov ecx, edi
call fcn.0041d420
push 0x40
push dword [ebp - 0x30]
mov ecx, edi
call fcn.0041d420
lea ecx, [esi + 0x128]
call fcn.00401f90
test al, al
mov ecx, 0x20
mov eax, 0x40
cmovne ecx, eax
push ecx
push dword [ebp - 0x50]
mov ecx, edi
call fcn.0041d420
cmp byte [ebp - 0x14eb], 0
je 0x440a54
lea eax, [ebp - 0x1464]
mov ecx, edi
push eax
push dword [ebp - 0x100]
call fcn.00416860
push eax
call dword [0x4a9598]
test eax, eax
je 0x440a54
mov eax, dword [ebp - 0x1458]
mov ecx, edi
inc eax
push eax
mov eax, dword [ebp - 0x145c]
inc eax
push eax
push 8
push dword [ebp - 0xe4]
call fcn.0041ea80
jmp 0x440ae2
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push dword [ebp - 0xe4]
mov ecx, edi
call fcn.0041ea80
jmp 0x440ae2
mov eax, dword [ebp - 0x120]
cmp ecx, eax
jne 0x440a96
push 4
push eax
mov ecx, edi
call fcn.0041e410
test eax, eax
je 0x440a8d
and dword [esi + 0x34], 0xfffffdff
jmp 0x440ae2
or dword [esi + 0x34], 0x200
jmp 0x440ae2
mov eax, dword [ebp - 0xfc]
cmp ecx, eax
jne 0x440aba
push 4
push eax
mov ecx, edi
call fcn.0041e410
test eax, eax
je 0x440ab4
or dword [esi + 0x34], 0x40
jmp 0x440ae2
and dword [esi + 0x34], 0xffffffbf
jmp 0x440ae2
mov eax, dword [ebp - 0xf8]
cmp ecx, eax
jne 0x440ae2
push 4
push eax
mov ecx, edi
call fcn.0041e410
test eax, eax
je 0x440adb
or dword [esi + 0x34], 0x80
jmp 0x440ae2
and dword [esi + 0x34], 0xffffff7f
mov ecx, dword [ebp - 0x14f8]
mov eax, dword [ecx]
mov ecx, dword [ebp - 0x11c]
cmp eax, ecx
jne 0x440ca7
cmp dword [esi + 0x1c20], 0
je 0x440b08
mov ecx, esi
call fcn.0046b090
mov ecx, dword [ebp - 0x1454]
cmp ecx, 0xffffffff
je 0x440b3b
test ecx, ecx
je 0x440b3b
xor edx, edx
call fcn.00413360
test al, al
je 0x440b3b
push 0
push dword [ebp - 0x1454]
call dword [0x4a92a8]
lea ecx, [ebp - 0x1454]
call fcn.00401270
mov ecx, dword [esi + 0x1c54]
push 1
call fcn.0043acd0
lea ecx, [esi + 0x164]
mov dword [esi + 0x24], 0
mov dword [esi + 0x28], 0
call fcn.00401ae0
lea eax, [ebp - 0x1c8]
push eax
push 0
push esi
push 0x46a2f0
push 0
push 0
call dword [0x4a93c0]
push eax
lea ecx, [ebp - 0x1450]
call fcn.00401220
mov eax, 0xf
mov dword [ebp - 0x14f0], eax
mov ecx, dword [ebp + eax*4 - 0x148]
test ecx, ecx
jle 0x440bac
push 0x40
push ecx
mov ecx, edi
call fcn.0041d420
mov eax, dword [ebp - 0x14f0]
inc eax
mov dword [ebp - 0x14f0], eax
cmp eax, 0x11
jl 0x440b91
push 0x22
push dword [ebp - 0x118]
mov ecx, edi
call fcn.0041d420
mov ecx, dword [esi + 4]
push 0x186a0
push 0
push 0x4d84a4
push dword [ebp - 0x118]
call fcn.0041dee0
push 1
push dword [ebp - 0x11c]
mov ecx, edi
call fcn.0041d420
push 0x40
push dword [ebp - 0x120]
mov ecx, edi
call fcn.0041d420
push 0x40
push dword [ebp - 0xfc]
mov ecx, edi
call fcn.0041d420
push 0x40
push dword [ebp - 0x58]
mov ecx, edi
call fcn.0041d420
push 0x40
push dword [ebp - 0x54]
mov ecx, edi
call fcn.0041d420
push 0x40
push dword [ebp - 0x34]
mov ecx, edi
call fcn.0041d420
lea eax, [ebp - 0x1464]
mov ecx, edi
push eax
push dword [ebp - 0x114]
call fcn.00416860
push eax
call dword [0x4a9598]
test eax, eax
je 0x440c97
push 2
lea eax, [ebp - 0x1464]
push eax
push dword [ebp - 0x150c]
push 0
call dword [0x4a94f0]
mov eax, dword [ebp - 0x1460]
lea ecx, [ebp - 0x250]
push 0
add eax, 2
push eax
mov eax, dword [ebp - 0x1464]
add eax, 0x78
push eax
push 0xffffffffffffffff
push 0xffffffffffffffff
push 4
call fcn.00401c90
push eax
mov ecx, esi
call fcn.00470650
lea ecx, [ebp - 0x338]
call fcn.00411ef0
jmp 0x44238f
cmp eax, dword [ebp - 0x34]
je 0x4417ca
cmp eax, 0xfffffffb
je 0x4417ca
cmp eax, dword [ebp - 0x2c]
jne 0x440d2b
cmp dword [esi + 0x1c20], 0
je 0x440cd4
mov ecx, esi
call fcn.0046b090
mov ecx, dword [ebp - 0x11c]
push 0xd
push dword [ebp - 0x13c]
xorps xmm0, xmm0
push dword [ebp - 0xe4]
movups xmmword [ebp - 0x2f4], xmm0
push ecx
push edi
lea ecx, [ebp - 0x2f4]
movups xmmword [ebp - 0x2e4], xmm0
call fcn.00421090
lea ecx, [ebp - 0x1d8]
mov byte [ebp - 4], 0x27
call fcn.00401c90
push eax
mov ecx, esi
call fcn.0046f9f0
lea ecx, [ebp - 0x2f4]
mov byte [ebp - 4], 0x22
call fcn.00421120
jmp 0x4414fa
cmp eax, dword [ebp - 0x118]
jne 0x440d3c
mov byte [esi + 0x40], 1
jmp 0x4414fa
cmp eax, dword [ebp - 0x108]
jne 0x440e58
cmp dword [esi + 0x1c20], 0
je 0x440d58
mov ecx, esi
call fcn.0046b090
mov cl, byte [ebp - 0x14e9]
test cl, cl
jne 0x440d87
push 0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0xb4
push 1
push 0x4d9dd8
mov ecx, esi
call fcn.00470650
test eax, eax
je 0x44238f
jmp 0x440d9b
movzx eax, cl
cmp cl, 1
mov ecx, 3
cmova eax, ecx
mov byte [ebp - 0x14e9], al
push 0x40
push dword [ebp - 0x10c]
mov ecx, edi
call fcn.0041d420
push 0x40
push dword [ebp - 0x108]
mov ecx, edi
call fcn.0041d420
push 0x40
push dword [ebp - 0x100]
mov ecx, edi
call fcn.0041d420
push 0x40
push dword [ebp - 0xf8]
mov ecx, edi
call fcn.0041d420
push 0x40
push dword [ebp - 0x34]
mov ecx, edi
call fcn.0041d420
push 0
push str.Cancel
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xfa
push 0x2a8
push edi
push 0x4d9ea8
lea ecx, [esi + 0x908]
call fcn.00422b50
mov ecx, eax
call fcn.00422f20
cmp byte [ebp - 0x14f1], 0
jne 0x440e33
push 1
push 5
push 0
push 0xffffffffffffffb0
lea ecx, [esi + 0x908]
call fcn.00422ed0
mov ecx, eax
call fcn.00423090
push 0
push 0
push esi
push 0x44e740
push 0
push 0
call dword [0x4a93c0]
push eax
lea ecx, [ebp - 0x1468]
call fcn.00401220
jmp 0x4414fa
cmp eax, dword [ebp - 0x6c]
jne 0x440ecd
cmp dword [esi + 0x1c20], 0
je 0x440e6d
mov ecx, esi
call fcn.0046b090
push 0
push 0
push 0x130b
push dword [ebp - 0xe4]
mov ecx, edi
call fcn.0041c1a0
push eax
mov ecx, esi
call fcn.00472e80
mov dword [ebp - 0x1c4], eax
test eax, eax
je 0x44238f
push 2
push 0xffffffffffffffff
push 0x100c
push eax
mov ecx, edi
call fcn.00416860
push eax
call dword [0x4a94c8]
cmp eax, 0xffffffff
je 0x44238f
push eax
push dword [ebp - 0x1c4]
mov ecx, esi
call fcn.00472fa0
jmp 0x4414fa
cmp eax, dword [ebp - 0x30]
jne 0x441005
cmp dword [esi + 0x1c20], 0
je 0x440ee6
mov ecx, esi
call fcn.0046b090
push 0
push 0
push 0x130b
push dword [ebp - 0xe4]
mov ecx, edi
call fcn.0041c1a0
push eax
mov ecx, esi
call fcn.00472e80
mov dword [ebp - 0x1504], eax
test eax, eax
je 0x44238f
push 2
push 0xffffffffffffffff
push 0x100c
push eax
mov ecx, edi
call fcn.00416860
push eax
call dword [0x4a94c8]
mov dword [ebp - 0x14f0], eax
cmp eax, 0xffffffff
je 0x44238f
mov ecx, dword [esi + 4]
push eax
push dword [ebp - 0x1504]
call fcn.0041f270
cmp eax, 0x51
jne 0x44238f
mov ecx, dword [esi + 4]
xorps xmm0, xmm0
push 0
push 0
push dword [ebp - 0x14f0]
movq qword [ebp - 0x268], xmm0
push dword [ebp - 0x1504]
mov dword [ebp - 0x260], 0
call fcn.0041f360
push eax
lea ecx, [ebp - 0x268]
call fcn.00401980
push 0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0x96
push 1
push 0x4d9ef0
mov ecx, esi
mov byte [ebp - 4], 0x28
call fcn.00470650
lea ecx, [ebp - 0x268]
test eax, eax
jne 0x440fc1
mov byte [ebp - 4], 0x22
call fcn.00401ad0
jmp 0x44238f
push 1
call fcn.00401f20
mov ecx, eax
call fcn.00401c90
push eax
mov ecx, esi
call fcn.0046b760
test al, al
je 0x440ff1
mov ecx, dword [esi + 4]
push 0
push dword [ebp - 0x14f0]
push dword [ebp - 0x1504]
call fcn.0041efa0
lea ecx, [ebp - 0x268]
mov byte [ebp - 4], 0x22
call fcn.00401ad0
jmp 0x4414fa
cmp eax, dword [ebp - 0x40]
jne 0x44104d
cmp dword [esi + 0x1c20], 0
je 0x44101a
mov ecx, esi
call fcn.0046b090
push 0
push 0
push 0x130b
push dword [ebp - 0xe4]
mov ecx, edi
call fcn.0041c1a0
push eax
mov ecx, esi
call fcn.00472e80
test eax, eax
je 0x4414fa
push eax
mov ecx, esi
call fcn.00472ee0
jmp 0x4414fa
cmp eax, dword [ebp - 0x3c]
jne 0x441070
cmp dword [esi + 0x1c20], 0
je 0x441062
mov ecx, esi
call fcn.0046b090
push 0xffffffffffffffff
mov ecx, esi
call fcn.00472ee0
jmp 0x4414fa
cmp eax, dword [ebp - 0x38]
jne 0x441091
cmp dword [esi + 0x1c20], 0
je 0x441085
mov ecx, esi
call fcn.0046b090
mov ecx, esi
call fcn.00471df0
jmp 0x4414fa
cmp eax, dword [ebp - 0x58]
jne 0x441160
mov esi, 0x28
nop
push 0
push 0
push 0x1009
push dword [ebp + esi*4 - 0x148]
mov ecx, edi
call fcn.0041c1a0
inc esi
cmp esi, 0x2f
jl 0x4410a0
mov esi, 0xf
push 1
push dword [ebp + esi*4 - 0x148]
mov ecx, edi
call fcn.0041d420
inc esi
cmp esi, 0x12
jl 0x4410c2
mov esi, dword [ebp - 0x1500]
mov ecx, edi
push 0x22
push dword [ebp - 0x120]
call fcn.0041d420
push 0x22
push dword [ebp - 0x11c]
mov ecx, edi
call fcn.0041d420
push 0x22
push dword [ebp - 0x114]
mov ecx, edi
call fcn.0041d420
push 0x22
push dword [ebp - 0xfc]
mov ecx, edi
call fcn.0041d420
push 1
push dword [ebp - 0x118]
mov ecx, edi
call fcn.0041d420
push 1
push dword [ebp - 0xf8]
mov ecx, edi
call fcn.0041d420
push 0
push dword [ebp - 0x114]
mov ecx, edi
call fcn.0041ff10
push 0
push 0x4d8924
push dword [ebp - 0x110]
mov ecx, edi
call fcn.0041d990
jmp 0x4414fa
cmp eax, dword [ebp - 0x54]
jne 0x441210
cmp dword [esi + 0x1c20], 0
je 0x441179
mov ecx, esi
call fcn.0046b090
lea ecx, [esi + 0x11c]
call fcn.00401f90
test al, al
jne 0x44238f
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
xorps xmm0, xmm0
mov dword [ebp - 0x2b4], 0
push 0x4ca048
lea ecx, [esi + 0x11c]
movq qword [ebp - 0x2bc], xmm0
call fcn.00401c90
push eax
push 0x4cb2d8
lea ecx, [ebp - 0x28c]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2bc]
call fcn.004019c0
push 2
push 5
push 0
lea ecx, [ebp - 0x2bc]
mov byte [ebp - 4], 0x29
call fcn.00401c90
mov edx, eax
xor ecx, ecx
call fcn.0040dde0
lea ecx, [ebp - 0x2bc]
mov byte [ebp - 4], 0x22
call fcn.00401ad0
jmp 0x4414fa
cmp eax, dword [ebp - 0x50]
jne 0x4412c0
cmp dword [esi + 0x1c20], 0
je 0x441229
mov ecx, esi
call fcn.0046b090
lea ecx, [esi + 0x128]
call fcn.00401f90
test al, al
jne 0x44238f
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
xorps xmm0, xmm0
mov dword [ebp - 0x2c0], 0
push 0x4ca048
lea ecx, [esi + 0x128]
movq qword [ebp - 0x2c8], xmm0
call fcn.00401c90
push eax
push 0x4cb2d8
lea ecx, [ebp - 0x28c]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2c8]
call fcn.004019c0
push 2
push 5
push 0
lea ecx, [ebp - 0x2c8]
mov byte [ebp - 4], 0x2a
call fcn.00401c90
mov edx, eax
xor ecx, ecx
call fcn.0040dde0
lea ecx, [ebp - 0x2c8]
mov byte [ebp - 4], 0x22
call fcn.00401ad0
jmp 0x4414fa
cmp eax, dword [ebp - 0x4c]
jne 0x44135b
cmp dword [esi + 0x1c20], 0
je 0x4412d9
mov ecx, esi
call fcn.0046b090
lea eax, [esi + 0x134]
mov dword [ebp - 0x254], 0
xorps xmm0, xmm0
lea ecx, [ebp - 0x25c]
push eax
movq qword [ebp - 0x25c], xmm0
call fcn.00401950
push 4
push 1
push 1
push 1
push 0x4c9784
lea ecx, [ebp - 0x25c]
mov byte [ebp - 4], 0x2b
call fcn.00402c80
test eax, eax
je 0x44132d
push 4
lea ecx, [ebp - 0x25c]
call fcn.00402bd0
push 0
push 5
push 0
lea ecx, [ebp - 0x25c]
call fcn.00401c90
xor edx, edx
mov ecx, eax
call fcn.0040dea0
lea ecx, [ebp - 0x25c]
mov byte [ebp - 4], 0x22
call fcn.00401ad0
jmp 0x4414fa
cmp eax, dword [ebp - 0x48]
jne 0x441449
cmp dword [esi + 0x1c20], 0
je 0x441374
mov ecx, esi
call fcn.0046b090
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
xorps xmm0, xmm0
mov dword [ebp - 0x26c], 0
push 0x4c980c
lea ecx, [esi + 0x32c]
movq qword [ebp - 0x274], xmm0
call fcn.00401c90
push eax
push 0x4da008
lea ecx, [ebp - 0x274]
call fcn.004019c0
push 0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0xb4
push 1
lea ecx, [ebp - 0x274]
mov byte [ebp - 4], 0x2c
call fcn.00401c90
push eax
mov ecx, esi
call fcn.00470650
cmp eax, 1
je 0x4413fb
lea ecx, [ebp - 0x274]
mov byte [ebp - 4], 0x22
call fcn.00401ad0
jmp 0x44238f
lea ecx, [esi + 0x134]
call fcn.00401c90
mov edx, 3
mov ecx, eax
call fcn.0040bdc0
xor edx, edx
mov ecx, 0x4d8348
call fcn.00407780
xor edx, edx
mov ecx, 0x4d82a8
call fcn.00407780
push 5
mov dl, 1
xor ecx, ecx
call fcn.0040da00
lea ecx, [ebp - 0x274]
mov byte [ebp - 4], 0x22
call fcn.00401ad0
jmp 0x4414fa
cmp eax, dword [ebp - 0x44]
jne 0x441479
cmp dword [esi + 0x1c20], 0
je 0x44145e
mov ecx, esi
call fcn.0046b090
mov eax, dword [ebp - 0x14e8]
mov ecx, esi
push dword [eax + 0x3c]
push dword [ebp - 0x1514]
call fcn.00470df0
jmp 0x4414fa
cmp eax, 0xfffffff2
je 0x4417a3
cmp eax, dword [ebp - 0x7c]
je 0x4417a3
cmp eax, dword [ebp - 0x78]
je 0x4417a3
cmp eax, dword [ebp - 0xc4]
jne 0x4416d3
push 0
push 0
push 0x130b
push dword [ebp - 0xe4]
mov ecx, edi
call fcn.0041c1a0
push eax
mov ecx, esi
call fcn.00472e80
mov ecx, dword [ebp - 0x90]
cmp ecx, eax
jne 0x44238f
push 0
push ecx
mov ecx, esi
call fcn.00473610
push 0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
movzx eax, al
mov ecx, esi
push 0
push 4
cmp eax, 1
jne 0x4416ba
push 0x4da078
call fcn.00470650
mov eax, dword [ebp - 0x1450]
cmp eax, 0xffffffff
je 0x442093
test eax, eax
je 0x442093
xorps xmm1, xmm1
lea ecx, [ebp - 0x338]
call fcn.00411f10
comisd xmm0, xmmword [0x4eaae0]
ja 0x441580
mov eax, dword [ebp - 0x14f8]
mov eax, dword [eax]
test eax, eax
jg 0x441580
cmp eax, 0xffffffe5
jle 0x441580
cmp eax, 0xfffffffe
je 0x441580
cmp eax, 0xfffffff9
je 0x441580
cmp eax, 0xfffffff8
je 0x441580
cmp eax, 0xfffffff6
je 0x441580
cmp eax, 0xfffffff3
je 0x441580
cmp eax, 0xfffffff2
je 0x441580
cmp eax, 0xffffffee
je 0x441580
cmp eax, 0xffffffed
je 0x441580
cmp eax, 0xffffffe3
je 0x441580
cmp eax, 0xffffffe4
je 0x441580
cmp eax, 0xffffffec
je 0x441580
cmp eax, 0xffffffe7
je 0x441580
cmp eax, 0xfffffff5
je 0x441580
cmp eax, 0xffffffea
jne 0x441596
lea ecx, [esi + 0x668]
call fcn.00422160
lea ecx, [ebp - 0x338]
call fcn.00411ef0
mov ecx, dword [ebp - 0x1450]
xor edx, edx
call fcn.00413360
test al, al
jne 0x44238f
lea eax, [ebp - 0x1cc]
push eax
push dword [ebp - 0x1450]
call dword [0x4a93bc]
lea ecx, [ebp - 0x1450]
call fcn.00401270
lea ecx, [esi + 0x668]
call fcn.00422160
lea ecx, [esi + 0xbf0]
call fcn.0042ec90
push 0
push 0
push esi
push 0x46a340
push 0
push 0
mov dword [ebp - 0x144c], 0
call dword [0x4a93c0]
test eax, eax
mov ecx, 0xffffffff
cmove eax, ecx
mov dword [ebp - 0x144c], eax
push 0
push 0
push esi
push 0x46a310
push 0
push 0
mov byte [ebp - 4], 0x2e
call dword [0x4a93c0]
push eax
lea ecx, [ebp - 0x1454]
call fcn.00401220
xorps xmm0, xmm0
mov dword [ebp - 0x1e8], 0
lea ecx, [ebp - 0x1f0]
movq qword [ebp - 0x1f0], xmm0
call fcn.00401930
mov byte [ebp - 4], 0x2f
mov eax, dword [ebp - 0x1cc]
mov dword [ebp - 0x1444], 0x96
cmp eax, 1
jne 0x441be8
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4da1e0
push 0x4da258
lea ecx, [ebp - 0x1f0]
call fcn.00401bf0
push 0
push 0x4da2d4
push dword [ebp - 0x110]
mov ecx, edi
mov dword [ebp - 0x1444], 0xc8
call fcn.0041d990
jmp 0x441e61
cmp eax, 3
jne 0x4416c9
push 0x4da128
jmp 0x4414f5
push 0x4da190
jmp 0x4414f5
mov ecx, dword [ebp - 0x74]
cmp eax, ecx
je 0x4416e5
cmp eax, dword [ebp - 0x70]
jne 0x4414fa
cmp eax, ecx
push 0
push 0
push 0x130b
push dword [ebp - 0xe4]
mov ecx, edi
sete byte [ebp - 0x14eb]
call fcn.00416860
push eax
call dword [0x4a94c8]
push eax
mov ecx, esi
call fcn.00472e80
test eax, eax
je 0x44238f
push eax
mov ecx, edi
call fcn.00416860
push 0
push 0
push 0x1004
push eax
mov dword [ebp - 0x1508], eax
call dword [0x4a94c8]
mov dword [ebp - 0x14f0], eax
mov dword [ebp - 0x1c4], 0
test eax, eax
jle 0x4414fa
movzx esi, byte [ebp - 0x14eb]
mov edi, dword [ebp - 0x1c4]
inc esi
shl esi, 0xc
lea eax, [ebp - 0x310]
mov dword [ebp - 0x300], 0xf000
push eax
push edi
push 0x102b
push dword [ebp - 0x1508]
mov dword [ebp - 0x304], esi
call dword [0x4a94c8]
inc edi
cmp edi, dword [ebp - 0x14f0]
jl 0x441760
mov edi, dword [ebp - 0x14fc]
mov esi, dword [ebp - 0x1500]
jmp 0x4414fa
cmp dword [esi + 0x1c20], 0
je 0x4417b3
mov ecx, esi
call fcn.0046b090
mov eax, dword [ebp - 0x14f8]
mov ecx, esi
push dword [eax + 0xc]
push dword [eax]
call fcn.0046a750
jmp 0x4414fa
xorps xmm0, xmm0
mov dword [ebp - 0x1f4], 0
lea ecx, [ebp - 0x1fc]
movq qword [ebp - 0x1fc], xmm0
call fcn.00401930
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x280]
xorps xmm0, xmm0
mov dword [ebp - 0x278], 0
movq qword [ebp - 0x280], xmm0
call fcn.00401930
mov eax, dword [ebp - 0x14f8]
mov byte [ebp - 4], 0x24
cmp dword [eax], 0xfffffffb
jne 0x441960
mov ecx, edi
call fcn.004167c0
push eax
lea ecx, [ebp - 0x1fc]
call fcn.00401c50
xorps xmm0, xmm0
lea ecx, [ebp - 0x1fc]
push 1
push 0x4ca980
movups xmmword [ebp - 0x2b0], xmm0
movq qword [ebp - 0x2a0], xmm0
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2b0]
call fcn.00404060
push 0
lea ecx, [ebp - 0x2b0]
mov byte [ebp - 4], 0x25
call fcn.00404150
push eax
call dword [0x4a94a8]
lea ecx, [ebp - 0x2b0]
test eax, eax
je 0x44189e
push 0
call fcn.00404150
push eax
lea ecx, [ebp - 0x1fc]
call fcn.00401a00
jmp 0x441951
call fcn.00404160
cmp eax, 1
jbe 0x441951
push 0
push 1
push 0
lea ecx, [ebp - 0x2b0]
call fcn.00404150
push eax
lea ecx, [ebp - 0x1fc]
call fcn.00401ba0
mov ecx, eax
call fcn.00401f20
lea ecx, [ebp - 0x2b0]
mov dword [ebp - 0x1c4], 0
call fcn.00404160
test eax, eax
je 0x441951
mov esi, dword [ebp - 0x1c4]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5c
push 1
push esi
lea ecx, [ebp - 0x2b0]
call fcn.00404150
push eax
lea ecx, [ebp - 0x280]
call fcn.00401ba0
mov ecx, eax
call fcn.00401e10
push eax
push 0x4c97ec
lea ecx, [ebp - 0x1fc]
call fcn.00402f30
lea ecx, [ebp - 0x2b0]
inc esi
call fcn.00404160
cmp esi, eax
jb 0x4418f3
mov esi, dword [ebp - 0x1500]
lea ecx, [ebp - 0x2b0]
mov byte [ebp - 4], 0x24
call fcn.004040e0
cmp dword [esi + 0x1c20], 0
je 0x441970
mov ecx, esi
call fcn.0046b090
push 0xd
push dword [ebp - 0x13c]
xorps xmm0, xmm0
lea ecx, [ebp - 0x2f4]
push dword [ebp - 0xe4]
movups xmmword [ebp - 0x2f4], xmm0
push dword [ebp - 0x11c]
movups xmmword [ebp - 0x2e4], xmm0
push edi
call fcn.00421090
lea ecx, [ebp - 0x1fc]
mov byte [ebp - 4], 0x26
call fcn.00401c90
push eax
mov ecx, esi
call fcn.0046fdd0
cmp eax, 0xffffffff
jne 0x4419e7
lea ecx, [ebp - 0x2f4]
call fcn.00421120
lea ecx, [ebp - 0x280]
call fcn.00401ad0
lea ecx, [ebp - 0x1fc]
mov byte [ebp - 4], 0x22
call fcn.00401ad0
jmp 0x44238f
push 0
push 3
push 0x1330
push dword [ebp - 0xe4]
mov ecx, edi
call fcn.0041c1a0
mov ecx, dword [ebp - 0x1454]
cmp ecx, 0xffffffff
je 0x441a30
test ecx, ecx
je 0x441a30
xor edx, edx
call fcn.00413360
test al, al
je 0x441a30
push 0
push dword [ebp - 0x1454]
call dword [0x4a92a8]
lea ecx, [ebp - 0x1454]
call fcn.00401270
mov ecx, dword [esi + 0x1c54]
push 1
call fcn.0043acd0
lea eax, [ebp - 0x320]
mov dword [esi + 0x24], 0
push eax
push 0
push esi
push 0x46a3a0
push 0
push 0
mov dword [esi + 0x28], 0
call dword [0x4a93c0]
push eax
lea ecx, [ebp - 0x1450]
call fcn.00401220
mov eax, 0xf
mov dword [ebp - 0x14f0], eax
nop dword [eax + eax]
mov ecx, dword [ebp + eax*4 - 0x148]
test ecx, ecx
jle 0x441a9b
push 0x40
push ecx
mov ecx, edi
call fcn.0041d420
mov eax, dword [ebp - 0x14f0]
inc eax
mov dword [ebp - 0x14f0], eax
cmp eax, 0x11
jl 0x441a80
push 0x22
push dword [ebp - 0x118]
mov ecx, edi
call fcn.0041d420
push 0x22
push dword [ebp - 0x114]
mov ecx, edi
call fcn.0041d420
mov ecx, dword [esi + 4]
push 0x186a0
push 0
push 0x4d84a4
push dword [ebp - 0x118]
call fcn.0041dee0
push 1
push dword [ebp - 0x11c]
mov ecx, edi
call fcn.0041d420
push 1
push dword [ebp - 0x108]
mov ecx, edi
call fcn.0041d420
push 1
push dword [ebp - 0x104]
mov ecx, edi
call fcn.0041d420
push 0x40
push dword [ebp - 0x120]
mov ecx, edi
call fcn.0041d420
push 0x40
push dword [ebp - 0xfc]
mov ecx, edi
call fcn.0041d420
push 0x40
push dword [ebp - 0x58]
mov ecx, edi
call fcn.0041d420
push 0x40
push dword [ebp - 0x54]
mov ecx, edi
call fcn.0041d420
push 0x40
push dword [ebp - 0x34]
mov ecx, edi
call fcn.0041d420
lea eax, [ebp - 0x1464]
mov ecx, edi
push eax
push dword [ebp - 0x114]
call fcn.00416860
push eax
call dword [0x4a9598]
test eax, eax
je 0x441bb3
push 2
lea eax, [ebp - 0x1464]
push eax
push dword [ebp - 0x150c]
push 0
call dword [0x4a94f0]
mov eax, dword [ebp - 0x1460]
lea ecx, [ebp - 0x250]
push 0
add eax, 2
push eax
mov eax, dword [ebp - 0x1464]
add eax, 0x78
push eax
push 0xffffffffffffffff
push 0xffffffffffffffff
push 4
call fcn.00401c90
push eax
mov ecx, esi
call fcn.00470650
lea ecx, [ebp - 0x338]
call fcn.00411ef0
lea ecx, [ebp - 0x2f4]
call fcn.00421120
lea ecx, [ebp - 0x280]
call fcn.00401ad0
lea ecx, [ebp - 0x1fc]
mov byte [ebp - 4], 0x22
call fcn.00401ad0
jmp 0x44238f
cmp eax, 3
jne 0x441c3c
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4da300
push 0x4da3a8
push 0x4da418
lea ecx, [ebp - 0x1f0]
call fcn.00401bf0
push 0
push 0x4da4a4
push dword [ebp - 0x110]
mov ecx, edi
mov dword [ebp - 0x1444], 0xfa
call fcn.0041d990
jmp 0x441e61
cmp dword [esi + 0x28], 0
jne 0x441cc7
cmp dword [esi + 0x24], 0
jne 0x441cc7
mov ecx, esi
call fcn.0046f9d0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
test al, al
jne 0x441ca0
push 0x4da8f0
push 0x4da940
lea ecx, [esi + 0x32c]
call fcn.00401c90
push eax
push 0x4da994
lea ecx, [ebp - 0x1f0]
call fcn.00401bf0
mov dword [ebp - 0x1444], 0xdc
jmp 0x441e61
xor ecx, ecx
mov eax, 0x4da9c0
cmp dword [esi + 0x24], ecx
push 0
push 0
cmovne eax, ecx
lea ecx, [ebp - 0x1f0]
push eax
push 0x4da9f8
call fcn.00401bf0
jmp 0x441e61
xorps xmm0, xmm0
mov dword [ebp - 0x20c], 0
lea ecx, [ebp - 0x214]
movq qword [ebp - 0x214], xmm0
call fcn.00401930
mov byte [ebp - 4], 0x30
lea ecx, [ebp - 0x208]
xorps xmm0, xmm0
mov dword [ebp - 0x200], 0
movq qword [ebp - 0x208], xmm0
call fcn.00401930
mov byte [ebp - 4], 0x31
lea ecx, [ebp - 0x214]
push dword [esi + 0x28]
call fcn.00402820
mov eax, dword [esi + 0x28]
lea ecx, [ebp - 0x214]
test eax, eax
jne 0x441d31
call fcn.00401ae0
jmp 0x441d63
cmp eax, 1
jne 0x441d43
push eax
push 0x4da4e0
call fcn.00401ba0
jmp 0x441d63
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4da550
call fcn.00402f30
mov eax, dword [esi + 0x24]
lea ecx, [ebp - 0x208]
sub eax, dword [esi + 0x28]
push eax
mov dword [ebp - 0x1c4], eax
call fcn.00402820
cmp dword [esi + 0x24], 0
lea ecx, [ebp - 0x208]
jne 0x441d93
push 0x4da5b8
call fcn.00401a00
jmp 0x441dda
mov eax, dword [ebp - 0x1c4]
test eax, eax
jne 0x441da9
push 0x4da5e4
call fcn.00401a00
jmp 0x441dda
cmp eax, 1
jne 0x441dba
push 0x4da608
call fcn.00401a00
jmp 0x441dda
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4da62c
call fcn.00402f30
push 0
push 0
push 0
push 0
push 0
push 0x4da650
lea ecx, [esi + 0x164]
call fcn.00401b50
test eax, eax
mov ecx, 0x4da874
mov eax, 0x4da894
cmove ecx, eax
push ecx
push 0x4da8b0
lea ecx, [ebp - 0x208]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x214]
call fcn.00401c90
push eax
push 0x4da8dc
lea ecx, [esi + 0x32c]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x1f0]
call fcn.00401bf0
lea ecx, [ebp - 0x208]
mov dword [ebp - 0x1444], 0xfa
call fcn.00401ad0
lea ecx, [ebp - 0x214]
mov byte [ebp - 4], 0x2f
call fcn.00401ad0
mov eax, dword [ebp - 0x14e8]
test byte [eax + 0x8c], 0x10
je 0x441e91
mov ecx, esi
call fcn.0046f9d0
test al, al
jne 0x441e91
cmp dword [esi + 0x28], 0
je 0x4423a2
mov byte [ebp - 0x14e9], 1
jmp 0x441f05
cmp dword [esi + 0x28], 0
jne 0x441ec2
cmp dword [esi + 0x24], 0
jne 0x441ec2
push 0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push dword [ebp - 0x1444]
lea ecx, [ebp - 0x1f0]
push 0
call fcn.00401c90
push eax
mov ecx, esi
call fcn.00470650
jmp 0x441f05
push 0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x1c2
push dword [ebp - 0x1444]
lea ecx, [ebp - 0x1f0]
push 1
call fcn.00401c90
push eax
mov ecx, esi
call fcn.00470650
cmp eax, 1
jne 0x441f05
cmp dword [esi + 0x1c20], 0
jne 0x441f05
cmp dword [esi + 0x1c24], 0
jne 0x441f05
mov dword [esi + 0x1c24], eax
cmp dword [esi + 0x24], 0
mov esi, 0xf
je 0x441f80
push 0x22
push dword [ebp + esi*4 - 0x148]
mov ecx, edi
call fcn.0041d420
inc esi
cmp esi, 0x12
jl 0x441f14
mov esi, 0xa
nop
push 1
push dword [ebp + esi*4 - 0x148]
mov ecx, edi
call fcn.0041d420
inc esi
cmp esi, 0xe
jl 0x441f30
mov esi, dword [ebp - 0x1500]
mov ecx, edi
push 0x22
push dword [ebp - 0xf8]
call fcn.0041d420
push 1
push dword [ebp - 0xfc]
mov ecx, edi
call fcn.0041d420
push 0
push 0x4daa30
jmp 0x44200c
push 1
push dword [ebp + esi*4 - 0x148]
mov ecx, edi
call fcn.0041d420
inc esi
cmp esi, 0x12
jl 0x441f80
mov esi, dword [ebp - 0x1500]
mov ecx, edi
push 0x22
push dword [ebp - 0x120]
call fcn.0041d420
push 0x22
push dword [ebp - 0x11c]
mov ecx, edi
call fcn.0041d420
push 0x22
push dword [ebp - 0x114]
mov ecx, edi
call fcn.0041d420
push 0x22
push dword [ebp - 0xf8]
mov ecx, edi
call fcn.0041d420
push 1
push dword [ebp - 0x118]
mov ecx, edi
call fcn.0041d420
push 1
push dword [ebp - 0xfc]
mov ecx, edi
call fcn.0041d420
push 0
push dword [ebp - 0x114]
mov ecx, edi
call fcn.0041ff10
push 0
push 0x4daa54
push dword [ebp - 0x110]
mov ecx, edi
call fcn.0041d990
mov ecx, dword [esi + 0x5f8]
mov eax, dword [esi + 0x28]
push 0x20
mov dword [ecx + 0x80], eax
mov ecx, edi
push dword [ebp - 0x58]
call fcn.0041d420
push 0x20
push dword [ebp - 0x54]
mov ecx, edi
call fcn.0041d420
push 0x20
push dword [ebp - 0x34]
mov ecx, edi
call fcn.0041d420
lea ecx, [esi + 0x11c]
call fcn.00401b50
test eax, eax
je 0x442067
push 0x20
push dword [ebp - 0x54]
mov ecx, edi
call fcn.0041d420
mov ecx, dword [esi + 0x1c54]
push 1
call fcn.0043acd0
lea ecx, [ebp - 0x1f0]
call fcn.00401ad0
lea ecx, [ebp - 0x144c]
mov byte [ebp - 4], 0x22
call fcn.00401200
jmp 0x44238f
mov ecx, dword [ebp - 0x1468]
cmp ecx, 0xffffffff
je 0x44238f
test ecx, ecx
je 0x44238f
xor edx, edx
call fcn.00413360
test al, al
jne 0x44238f
lea eax, [ebp - 0x1cc]
push eax
push dword [ebp - 0x1468]
call dword [0x4a93bc]
lea ecx, [ebp - 0x1468]
call fcn.00401270
push 0
push 0x4daa94
push dword [ebp - 0x110]
mov ecx, edi
call fcn.0041d990
cmp byte [ebp - 0x14e9], 3
je 0x4423dc
cmp byte [ebp - 0x14f1], 0
jne 0x44217d
push 0x4cab68
push 1
lea ecx, [esi + 0x908]
call fcn.00423140
push 1
lea ecx, [esi + 0x908]
call fcn.00422ab0
lea ecx, [esi + 0x908]
mov dword [ebp - 0x1508], eax
call fcn.00422a90
push 0
mov ecx, esi
mov dword [ebp - 0x1c4], eax
call fcn.00442c40
test eax, eax
je 0x44217d
mov edi, dword [ebp - 0x14f8]
nop
mov ecx, dword [edi]
cmp ecx, 0xfffffffa
je 0x442177
mov eax, dword [ebp - 0x1c4]
cmp dword [edi + 0x30], eax
jne 0x44216a
cmp ecx, dword [ebp - 0x1508]
je 0x442177
push 0
mov ecx, esi
call fcn.00442c40
test eax, eax
jne 0x442150
mov edi, dword [ebp - 0x14fc]
lea ecx, [esi + 0x908]
call fcn.00422ae0
push 0x20
push dword [ebp - 0x10c]
mov ecx, edi
call fcn.0041d420
push 0x20
push dword [ebp - 0x108]
mov ecx, edi
call fcn.0041d420
push 0x20
push dword [ebp - 0x100]
mov ecx, edi
call fcn.0041d420
push 0x20
push dword [ebp - 0xf8]
mov ecx, edi
call fcn.0041d420
push 0x20
push dword [ebp - 0x50]
mov ecx, edi
call fcn.0041d420
push 0x20
push dword [ebp - 0x50]
mov ecx, edi
call fcn.0041d420
push 0x20
push dword [ebp - 0x34]
mov ecx, edi
call fcn.0041d420
mov ecx, dword [esi + 0x1c54]
push 1
call fcn.0043acd0
xorps xmm0, xmm0
mov dword [ebp - 0x224], 0
lea ecx, [ebp - 0x22c]
movq qword [ebp - 0x22c], xmm0
call fcn.00401930
mov byte [ebp - 4], 0x32
test byte [ebp - 0x1cc], 2
je 0x44227f
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4daab8
lea ecx, [esi + 0x32c]
call fcn.00401c90
push eax
push 0x4dab68
lea ecx, [ebp - 0x22c]
call fcn.00401bf0
push 0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0xfa
push 1
lea ecx, [ebp - 0x22c]
call fcn.00401c90
push eax
mov ecx, esi
call fcn.00470650
test eax, eax
jne 0x4423be
lea ecx, [ebp - 0x22c]
mov byte [ebp - 4], 0x22
call fcn.00401ad0
jmp 0x44238f
cmp dword [esi + 0x1c20], 0
je 0x4422ab
mov ecx, esi
call fcn.0046b090
mov eax, dword [ebp - 0x14f8]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x1450]
cmp eax, 0xffffffff
je 0x44237c
test eax, eax
je 0x44237c
cmp ecx, 0xfffffffa
jne 0x44237c
push 0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0xb4
push 1
push 0x4d9d48
mov ecx, esi
call fcn.00470650
test eax, eax
je 0x44238f
mov ecx, dword [ebp - 0x1450]
xor edx, edx
mov byte [esi + 0x41], 1
call fcn.00413360
test al, al
je 0x442329
push 1
mov ecx, esi
call fcn.00442c40
test eax, eax
jne 0x442318
push 0xa
call dword [0x4a9344]
mov ecx, dword [ebp - 0x1450]
xor edx, edx
call fcn.00413360
test al, al
jne 0x442303
lea ecx, [ebp - 0x1450]
call fcn.00401270
push 1
push 0
mov ecx, edi
call fcn.00417d50
mov dword [ebp - 0x1510], 1
mov edi, dword [ebp - 0x150c]
push 0xfffffffffffffff0
push edi
mov byte [esi + 0x170], 1
call dword [0x4a9554]
lea ecx, [ebp - 0x1e4]
push 1
test eax, 0x1000000
je 0x44240f
push 0x4cb078
jmp 0x442414
mov eax, dword [ebp - 0x1468]
cmp eax, 0xffffffff
je 0x442334
test eax, eax
je 0x442334
mov byte [esi + 0x40], 1
push 0
mov ecx, esi
call fcn.00442c40
test eax, eax
jne 0x440720
jmp 0x442349
lea ecx, [ebp - 0x1f0]
call fcn.00401ad0
lea ecx, [ebp - 0x144c]
mov byte [ebp - 4], 0x22
call fcn.00401200
jmp 0x442349
push 0
push 0x12
call dword [0x4a95cc]
lea ecx, [ebp - 0x22c]
mov byte [ebp - 4], 0x22
call fcn.00401ad0
jmp 0x442349
push 4
push dword [ebp - 0xf8]
mov ecx, edi
call fcn.0041e410
test eax, eax
je 0x442349
test byte [ebp - 0x1cc], 2
je 0x442349
push 0
push 0x12
call dword [0x4a95cc]
jmp 0x442349
push 0x4c9814
call fcn.00401ba0
push 0x4d9c50
push 0x4d9c64
lea ecx, [ebp - 0x1d8]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x1e4]
call fcn.00402960
lea eax, [ebp - 0x1464]
push eax
push edi
call dword [0x4a9598]
push 0x4d9c6c
push 0x4d9c64
lea ecx, [ebp - 0x1d8]
call fcn.00401c90
push eax
mov eax, dword [ebp - 0x145c]
lea ecx, [ebp - 0x1e4]
sub eax, dword [ebp - 0x1464]
push eax
call fcn.00402760
mov ecx, eax
call fcn.00402960
push 0x4d9c80
push 0x4d9c64
lea ecx, [ebp - 0x1d8]
call fcn.00401c90
push eax
mov eax, dword [ebp - 0x1458]
lea ecx, [ebp - 0x1e4]
sub eax, dword [ebp - 0x1460]
push eax
call fcn.00402760
mov ecx, eax
call fcn.00402960
mov eax, dword [ebp - 0x14e8]
test byte [eax + 0x8c], 2
je 0x4424c6
mov edi, dword [esi + 0x2c]
jmp 0x4424cc
mov edi, dword [ebp - 0x1510]
mov ecx, dword [ebp - 0x1454]
cmp ecx, 0xffffffff
je 0x4424f4
test ecx, ecx
je 0x4424f4
xor edx, edx
call fcn.00413360
test al, al
je 0x4424f4
push 0
push dword [ebp - 0x1454]
call dword [0x4a92a8]
cmp dword [esi + 0x10], 1
jne 0x44250e
nop word [eax + eax]
push 0x14
call dword [0x4a9344]
cmp dword [esi + 0x10], 1
je 0x442500
push edi
mov ecx, esi
call fcn.00442a80
lea ecx, [ebp - 0x370]
mov esi, eax
call fcn.00421120
lea ecx, [ebp - 0x250]
call fcn.00401ad0
lea ecx, [ebp - 0x1e4]
call fcn.00401ad0
lea ecx, [ebp - 0x1d8]
call fcn.00401ad0
lea ecx, [ebp - 0x2d4]
call fcn.00401ad0
lea ecx, [ebp - 0x28c]
call fcn.00401ad0
lea ecx, [ebp - 0x14b0]
call fcn.00415c80
lea ecx, [ebp - 0x14ac]
call fcn.00415c80
lea ecx, [ebp - 0x14a8]
call fcn.00415c80
lea ecx, [ebp - 0x14a4]
call fcn.00415c80
lea ecx, [ebp - 0x146c]
call fcn.00415c80
lea ecx, [ebp - 0x14a0]
call fcn.00415c80
lea ecx, [ebp - 0x1470]
call fcn.00415c80
lea ecx, [ebp - 0x1474]
call fcn.00415c80
lea ecx, [ebp - 0x1478]
call fcn.00415c80
lea ecx, [ebp - 0x14b4]
call fcn.00415c80
lea ecx, [ebp - 0x149c]
call fcn.00415c80
lea ecx, [ebp - 0x1448]
call fcn.00475cc0
lea ecx, [ebp - 0x1454]
call fcn.00401200
lea ecx, [ebp - 0x1468]
call fcn.00401200
lea ecx, [ebp - 0x1450]
call fcn.00401200
lea ecx, [ebp - 0x1498]
call fcn.00415c20
lea ecx, [ebp - 0x1494]
call fcn.00415c20
lea ecx, [ebp - 0x148c]
call fcn.00415c20
lea ecx, [ebp - 0x1488]
call fcn.00415c20
lea ecx, [ebp - 0x1484]
call fcn.00415c20
lea ecx, [ebp - 0x1480]
call fcn.00415c20
lea ecx, [ebp - 0x147c]
call fcn.00415c20
lea ecx, [ebp - 0x1490]
call fcn.00415c20
lea ecx, [ebp - 0x244]
call fcn.00401ad0
lea ecx, [ebp - 0x31c]
call fcn.00401ad0
lea ecx, [ebp - 0x220]
call fcn.00401ad0
lea ecx, [ebp - 0x298]
call fcn.00401ad0
lea ecx, [ebp - 0x238]
call fcn.00401ad0
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.00476957
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 4