Function at 0x446e19
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5e6162
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x1f8
mov eax, dword [0x704200]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x1e8], edi
push 1
push 0x678c0c
call fcn.0044dd60
push 1
mov dword [ebp - 0x1ac], eax
lea ecx, [edi + 0x11a4]
mov eax, dword [edi + 0x1f20]
push 0x678c40
mov dword [ebp - 0x1a8], eax
mov dword [edi + 0x1f20], 0
call fcn.00545040
mov esi, dword [edi + 0x14b4]
lea eax, [ebp - 0x10c]
push eax
push dword [ebp - 0x1ac]
mov dword [ebp - 0x1b0], esi
call dword [0x5fd768]
push 0xffffffffffffffff
push 0x5f
push 0xa5
push 0xa
push 0x64
push dword [edi + 0x68]
mov ecx, edi
call fcn.004650a0
movsd xmm1, qword [0x6e32c8]
mov ecx, esi
push 0
push str.Arial
push 1
push 0x320
call fcn.00521600
push 0x37
push 0x50
push 3
push 0xa
mov ecx, edi
call fcn.0044e5a0
push 0x678cac
lea ecx, [edi + 0x1418]
call fcn.005452f0
push 0xffffffffffffffff
push 0x10000001
push 0x2d
push 0x5a
push 0x3c
push 5
lea ecx, [edi + 0x1418]
call fcn.00544f70
push eax
mov ecx, esi
call fcn.0051dd30
push dword [edi + 0x1408]
mov ecx, esi
push 0xffffffffffffffff
call fcn.0051c110
movsd xmm1, qword [0x6e32a0]
mov ecx, esi
push 0
push str.Arial
push 1
push 0x190
call fcn.00521600
push 0xffffffffffffffff
push 0x10000001
push 0x10
push 0x91
push 0x14
push 0x6e
push 0x678ccc
mov ecx, esi
call fcn.0051dd30
push dword [edi + 0x1408]
mov ecx, esi
push 0xffffffffffffffff
call fcn.0051c110
push ecx
push 0xffffffffffffffff
push ecx
push 0
push 0x678cf0
push 1
push ecx
push 0x8c
push 0x32
push 0x73
push 0x678da4
mov ecx, edi
call fcn.0044e2c0
push ecx
push 0xffffffffffffffff
push ecx
push 0
push 0x678dd0
push 0
push ecx
push 0x8c
push 0x4b
push 0x73
push 0x678f04
mov ecx, edi
mov dword [ebp - 0x1f0], eax
call fcn.0044e2c0
push 0
push ecx
mov dword [esp], 0x41500000
mov ecx, edi
push 0x678f30
push 0x5f
push 0x50
push 0xa
push 0x10e
push 0x72
push 0x678fec
mov dword [ebp - 0x1f4], eax
call fcn.0044e4d0
push 0
push ecx
mov dword [esp], 0x41500000
mov ecx, edi
push 0x679008
push 0x5f
push 0x4b
push 0xa
push 0x163
push 0x8b
push 0x6790bc
mov dword [ebp - 0x1a0], eax
call fcn.0044e4d0
push 0
push ecx
mov dword [esp], 0x41500000
mov ecx, edi
push 0x6790e0
push 0x5f
push 0x4b
push 0xa
push 0x1b3
push 0x8b
push 0x67912c
mov dword [ebp - 0x204], eax
call fcn.0044e4d0
push 0
push ecx
mov dword [esp], 0x41500000
mov ecx, edi
push 0x679148
push 0x5f
push 0x4b
push 0xa
push 0x203
push 0xa4
push 0x6791a4
mov dword [ebp - 0x1cc], eax
call fcn.0044e4d0
push 0
push ecx
mov dword [esp], 0x41500000
push 0x672dd4
push 0x5f
mov dword [ebp - 0x1ec], eax
push 0x46
push 0xa
push 0x253
push 0x7d
push 0x672e00
mov ecx, edi
call fcn.0044e4d0
push 0
push ecx
mov dword [esp], 0x41500000
mov ecx, edi
push 0x6791c0
push 0x5f
push 0x4b
push 0xa
push 0x29e
push 0xb3
push 0x672dc8
mov dword [edi + 0x11c4], eax
call fcn.0044e4d0
push 0
push 0x10800080
push 0x19
push 0xb9
push 0x23
push 0x2f3
push 0x679200
mov ecx, esi
mov dword [edi + 0x11c8], eax
call fcn.0051dee0
push 0x909090
push 0xffffffffffffffff
mov ecx, esi
mov dword [ebp - 0x194], eax
call fcn.0051c110
movsd xmm0, qword [0x6e32b0]
sub esp, 0xc
movsd qword [esp + 4], xmm0
push 0
push ecx
push 0x190
push 0xffffffffffffffff
mov ecx, esi
call fcn.0051bfb0
push 0x40
push 0xffffffffffffffff
mov ecx, esi
call fcn.0051a890
push 0
push ecx
mov dword [esp], 0x41500000
mov ecx, edi
push 0x677594
push 0x28
push 0x5a
push 0x41
push 0x2f3
push 0x86
push 0x677594
call fcn.0044e430
push 0
push ecx
mov dword [esp], 0x41500000
mov ecx, edi
push 0x62c690
push 0x28
push 0x5a
push 0x41
push 0x352
push 0x99
push 0x6775a8
mov dword [ebp - 0x184], eax
call fcn.0044e430
push 0
push 0x679230
mov ecx, edi
mov dword [ebp - 0x1c8], eax
call fcn.0044dbb0
mov ecx, edi
call fcn.0044d9e0
xorps xmm0, xmm0
movq qword [ebp - 0x8c], xmm0
sub esp, 8
mov dword [ebp - 0x84], 0
lea ecx, [ebp - 0x8c]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x679250
push 0x62edb8
call fcn.00545300
mov dword [ebp - 4], 0
lea ecx, [ebp - 0xfc]
xorps xmm0, xmm0
mov dword [ebp - 0xf4], 0
movq qword [ebp - 0xfc], xmm0
call fcn.005453c0
push 0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x8c]
push 0xffffffffffffffff
mov dword [ebp - 0x94], 0
call fcn.00544f70
push eax
lea ecx, [ebp - 0x94]
call fcn.0053f8c0
lea eax, [ebp - 0x90]
mov byte [ebp - 4], 2
push eax
push 0x679270
lea ecx, [ebp - 0x94]
call fcn.0053f4f0
test al, al
jne 0x447241
mov dword [ebp - 0x90], 1
movsd xmm1, qword [0x6e32a0]
mov ecx, esi
push 0
push str.Arial
push 1
push 0x190
mov byte [ebp - 0x17d], 0
mov byte [ebp - 0x175], 0
mov dword [ebp - 0x17c], 0
call fcn.00521600
push dword [ebp - 0x1a8]
lea eax, [ebp - 0x17c]
mov ecx, edi
push dword [ebp - 0x90]
push eax
call fcn.00446ba0
push dword [ebp - 0x17c]
mov ecx, esi
call fcn.00522a80
push 0
push 1
mov ecx, edi
mov dword [ebp - 0x174], eax
call fcn.00465b20
push 0x48
call dword [0x5fd6cc]
movsd xmm0, qword [0x6e3260]
mov ecx, eax
comisd xmm0, xmmword [edi + 8]
mov dword [ebp - 0x18c], ecx
jb 0x4472e2
push 4
call dword [0x5fd7f4]
mov ecx, dword [ebp - 0x18c]
or eax, 0xff000000
jmp 0x4472e4
xor eax, eax
push eax
push ecx
push ecx
push 0x8b
mov ecx, edi
mov dword [ebp - 0x198], eax
call fcn.0045e830
push eax
lea ecx, [ebp - 0x154]
call fcn.00523820
mov byte [ebp - 4], 3
mov ecx, esi
push dword [ebp - 0x154]
push 0x679288
push dword [ebp - 0x184]
call fcn.0051e8f0
push 0
push eax
push dword [ebp - 0x184]
mov ecx, esi
mov dword [ebp - 0x1c4], eax
call fcn.00522a30
push eax
call dword [0x5fd7fc]
push dword [ebp - 0x198]
mov eax, dword [ebp - 0x18c]
mov ecx, edi
push eax
push eax
push 0x72
call fcn.0045e830
push eax
lea ecx, [ebp - 0x158]
call fcn.00523820
push 0
mov byte [ebp - 4], 4
mov ecx, esi
push dword [ebp - 0x158]
push 0
push 0x32
push 0x6792c8
push dword [ebp - 0x184]
call fcn.0051d8a0
push dword [ebp - 0x198]
mov dword [ebp - 0x1e4], eax
mov ecx, edi
mov eax, dword [ebp - 0x18c]
push eax
push eax
push 0x81
call fcn.0045e830
push eax
lea ecx, [ebp - 0x15c]
call fcn.00523820
push 0
mov byte [ebp - 4], 5
mov ecx, esi
push dword [ebp - 0x15c]
push 0
push 0x32
push 0x679320
push dword [ebp - 0x184]
call fcn.0051d8a0
push dword [ebp - 0x198]
mov dword [ebp - 0x1dc], eax
mov ecx, edi
mov eax, dword [ebp - 0x18c]
push eax
push eax
push 0x82
call fcn.0045e830
push eax
lea ecx, [ebp - 0x170]
call fcn.00523820
push 0
mov byte [ebp - 4], 6
push dword [ebp - 0x170]
push 0
push 0x32
push 0x679380
push dword [ebp - 0x184]
mov ecx, esi
call fcn.0051d8a0
push 0
push 0
push 8
push 0x32
push 0
push dword [ebp - 0x184]
mov ecx, esi
mov dword [ebp - 0x1d8], eax
call fcn.0051d8a0
push dword [ebp - 0x198]
mov eax, dword [ebp - 0x18c]
mov ecx, edi
push eax
push eax
push 0x7c
call fcn.0045e830
push eax
lea ecx, [ebp - 0x160]
call fcn.00523820
push 0
mov byte [ebp - 4], 7
mov ecx, esi
push dword [ebp - 0x160]
push 0
push 0x32
push 0x6793d0
push dword [ebp - 0x184]
call fcn.0051d8a0
push dword [ebp - 0x198]
mov dword [ebp - 0x1d4], eax
mov ecx, edi
mov eax, dword [ebp - 0x18c]
push eax
push eax
push 0x8a
call fcn.0045e830
push eax
lea ecx, [ebp - 0x164]
call fcn.00523820
push 0
mov byte [ebp - 4], 8
mov ecx, esi
push dword [ebp - 0x164]
push 0
push 0x32
push 0x679410
push dword [ebp - 0x184]
call fcn.0051d8a0
push dword [ebp - 0x198]
mov dword [ebp - 0x1bc], eax
mov ecx, edi
mov eax, dword [ebp - 0x18c]
push eax
push eax
push 0x80
call fcn.0045e830
push eax
lea ecx, [ebp - 0x150]
call fcn.00523820
push 0
mov byte [ebp - 4], 9
mov ecx, esi
push dword [ebp - 0x150]
push 0
push 0x32
push 0x677908
push dword [ebp - 0x184]
call fcn.0051d8a0
push dword [ebp - 0x198]
mov dword [ebp - 0x1d0], eax
mov eax, dword [ebp - 0x18c]
push eax
push eax
push 0xac
mov ecx, edi
call fcn.0045e830
push eax
lea ecx, [ebp - 0x168]
call fcn.00523820
push 0
mov byte [ebp - 4], 0xa
mov ecx, esi
push dword [ebp - 0x168]
push 0
push 0x32
push 0x677940
push dword [ebp - 0x184]
call fcn.0051d8a0
push 0
push dword [ebp - 0x154]
mov ecx, esi
mov dword [ebp - 0x1e0], eax
push 0
push 0x32
push 0x679438
push dword [ebp - 0x184]
call fcn.0051d8a0
push 0
push 0
push 8
push 0x32
push 0
push dword [ebp - 0x184]
mov ecx, esi
mov dword [ebp - 0x1a8], eax
call fcn.0051d8a0
push dword [ebp - 0x198]
mov eax, dword [ebp - 0x18c]
mov ecx, edi
push eax
push eax
push 0x94
call fcn.0045e830
push eax
lea ecx, [ebp - 0x16c]
call fcn.00523820
push 0
mov byte [ebp - 4], 0xb
mov ecx, esi
push dword [ebp - 0x16c]
push 0
push 0x32
push 0x679474
push dword [ebp - 0x184]
call fcn.0051d8a0
push 0
push 0
push 8
push 0x32
push 0
push dword [ebp - 0x184]
mov ecx, esi
mov dword [ebp - 0x1b8], eax
call fcn.0051d8a0
push 0
push dword [ebp - 0x150]
mov ecx, esi
push 0
push 0x32
push 0x6779c4
push dword [ebp - 0x184]
call fcn.0051d8a0
push dword [ebp - 0x198]
mov dword [ebp - 0x1b4], eax
mov ecx, edi
mov eax, dword [ebp - 0x18c]
push eax
push eax
push 0xb1
call fcn.0045e830
push eax
lea ecx, [ebp - 0x14c]
call fcn.00523820
push 0
mov byte [ebp - 4], 0xc
mov ecx, esi
push dword [ebp - 0x14c]
push 0
push 0x32
push 0x6779f8
push dword [ebp - 0x184]
call fcn.0051d8a0
push 0
push dword [ebp - 0x14c]
mov ecx, esi
mov dword [ebp - 0x198], eax
push 0
push 0x32
push 0x679490
push dword [ebp - 0x184]
call fcn.0051d8a0
push 0
mov ecx, edi
mov dword [ebp - 0x1c0], eax
call fcn.0044d850
mov edx, eax
mov cx, word [edi + 0x11c8]
mov eax, 0x74
mov word [ebp - 0x76], cx
mov word [ebp - 0x7e], ax
mov ecx, 0x2e
mov eax, dword [ebp - 0x1cc]
mov word [ebp - 0x7c], ax
mov eax, 0x1b
mov word [ebp - 0x78], ax
mov eax, 0x70
mov word [ebp - 0x72], ax
mov ax, word [edi + 0x11c4]
mov word [ebp - 0x70], ax
mov eax, 0x72
mov word [ebp - 0x6c], ax
mov eax, dword [ebp - 0x1c8]
mov word [ebp - 0x6a], ax
mov eax, 0xd
mov word [ebp - 0x66], ax
mov eax, dword [ebp - 0x1c4]
mov word [ebp - 0x64], ax
mov eax, dword [ebp - 0x1e4]
mov word [ebp - 0x5e], ax
mov eax, dword [ebp - 0x1dc]
mov word [ebp - 0x58], ax
mov eax, dword [ebp - 0x1d8]
mov word [ebp - 0x52], ax
mov eax, 0x47
mov word [ebp - 0x4e], ax
mov eax, dword [ebp - 0x1d4]
mov word [ebp - 0x4c], ax
mov eax, dword [ebp - 0x1bc]
mov word [ebp - 0x46], ax
mov eax, 0x56
mov word [ebp - 0x60], cx
mov word [ebp - 0x5a], cx
mov word [ebp - 0x54], cx
mov ecx, 0x50
mov word [ebp - 0x42], ax
mov eax, dword [ebp - 0x1d0]
mov dword [ebp - 0x200], edx
mov byte [ebp - 0x80], 1
mov byte [ebp - 0x7a], 1
mov byte [ebp - 0x74], 1
mov byte [ebp - 0x6e], 1
mov byte [ebp - 0x68], 9
mov byte [ebp - 0x62], 1
mov byte [ebp - 0x5c], 5
mov byte [ebp - 0x56], 9
mov byte [ebp - 0x50], 9
mov byte [ebp - 0x4a], 0x11
mov word [ebp - 0x48], cx
mov byte [ebp - 0x44], 0x11
mov word [ebp - 0x40], ax
mov byte [ebp - 0x3e], 9
mov eax, 0x4c
mov word [ebp - 0x36], cx
mov word [ebp - 0x3c], ax
lea ecx, [ebp - 0x148]
mov eax, dword [ebp - 0x1e0]
mov word [ebp - 0x3a], ax
mov eax, dword [ebp - 0x1a8]
mov word [ebp - 0x34], ax
mov eax, 0x4d
mov word [ebp - 0x30], ax
mov eax, dword [ebp - 0x1b4]
mov word [ebp - 0x2e], ax
mov eax, 0x55
mov word [ebp - 0x2a], ax
mov eax, dword [ebp - 0x198]
mov word [ebp - 0x28], ax
mov eax, 0x48
mov word [ebp - 0x24], ax
mov eax, dword [ebp - 0x1c0]
mov word [ebp - 0x22], ax
mov eax, 0x46
push 0
mov byte [ebp - 0x38], 9
mov byte [ebp - 0x32], 9
mov byte [ebp - 0x2c], 9
mov byte [ebp - 0x26], 9
mov byte [ebp - 0x20], 9
mov word [ebp - 0x1e], ax
mov word [ebp - 0x1c], dx
call fcn.00539460
push 0x11
lea eax, [ebp - 0x80]
mov ecx, esi
push eax
call fcn.00521af0
push dword [ebp - 0x174]
mov dword [ebp - 0x18c], 0
call dword [0x5fd7ac]
push 0x20
push dword [ebp - 0x194]
mov ecx, esi
call fcn.0051a890
xorps xmm0, xmm0
lea ecx, [ebp - 0xf0]
movups xmmword [ebp - 0xf0], xmm0
movq qword [ebp - 0xe0], xmm0
call fcn.00542180
push dword [ebp - 0x1c8]
mov ecx, esi
mov byte [ebp - 4], 0xd
call fcn.005216c0
push 0
mov ecx, edi
call fcn.005e24f0
test eax, eax
je 0x448a25
mov edx, dword [edi + 0x1478]
mov eax, dword [0x5fd6c8]
mov dword [ebp - 0x190], edx
cmp edx, 0xfffffffa
je 0x448a25
cmp dword [edi + 0x14a8], esi
jne 0x4489e0
cmp edx, dword [edi + 0x11c8]
je 0x448a1e
mov ecx, dword [ebp - 0x194]
cmp edx, 0xffffffb3
jne 0x4478ef
cmp dword [edi + 0x1484], ecx
je 0x4478fb
cmp edx, dword [ebp - 0x200]
jne 0x4479a5
mov ecx, edi
call fcn.005deb80
push 0x80
push dword [ebp - 0x194]
mov ecx, esi
call fcn.0051a890
push dword [ebp - 0x194]
mov ecx, esi
call fcn.005196d0
push eax
lea ecx, [ebp - 0x8c]
call fcn.00544fa0
push 0x679200
lea ecx, [ebp - 0x8c]
call fcn.005452a0
mov ecx, esi
test al, al
je 0x44798c
push 0
push 0
push dword [ebp - 0x194]
call fcn.0051a1d0
push 0
push dword [ebp - 0x194]
mov ecx, esi
call fcn.0051c110
movsd xmm0, qword [0x6e32c8]
sub esp, 0xc
movsd qword [esp + 4], xmm0
push 0
push ecx
push 0x190
push dword [ebp - 0x194]
mov ecx, esi
call fcn.0051bfb0
jmp 0x4489e0
push 0xffffffffffffffff
push 0
push 0xb1
push dword [ebp - 0x194]
call fcn.0051c470
jmp 0x4489e0
cmp edx, 0xffffffb4
jne 0x447a66
cmp dword [edi + 0x1484], ecx
jne 0x447a66
push ecx
mov ecx, esi
call fcn.005196d0
push eax
lea ecx, [ebp - 0x8c]
call fcn.00544fa0
lea ecx, [ebp - 0x8c]
call fcn.00545180
cmp eax, 3
jl 0x447899
cmp dword [ebp - 0x18c], 0
jne 0x447a00
push 0
push 9
push 0x110a
push dword [ebp - 0x174]
call dword [0x5fd6c8]
push ecx
lea ecx, [ebp - 0x8c]
call fcn.00544f70
push eax
push 0
push dword [ebp - 0x17c]
mov ecx, esi
call fcn.00517700
mov dword [ebp - 0x18c], eax
test eax, eax
je 0x4489e0
push eax
push 9
push 0x110b
push dword [ebp - 0x174]
call dword [0x5fd6c8]
push dword [ebp - 0x18c]
push 0
push 0x1114
push dword [ebp - 0x174]
call dword [0x5fd6c8]
mov dword [ebp - 0x18c], 0
jmp 0x4489e0
cmp edx, dword [ebp - 0x1c8]
jne 0x447bb1
push ecx
mov ecx, esi
call fcn.005196d0
push eax
lea ecx, [ebp - 0x8c]
call fcn.00544fa0
push 0x679200
lea ecx, [ebp - 0x8c]
call fcn.005452a0
test al, al
jne 0x447aa9
lea ecx, [ebp - 0x8c]
call fcn.00544c70
test al, al
je 0x447b01
push 0
push 0
push dword [ebp - 0x194]
mov ecx, esi
call fcn.0051a1d0
push 0
push dword [ebp - 0x194]
mov ecx, esi
call fcn.0051c110
movsd xmm0, qword [0x6e32c8]
sub esp, 0xc
movsd qword [esp + 4], xmm0
push 0
push ecx
push 0x190
push dword [ebp - 0x194]
mov ecx, esi
call fcn.0051bfb0
push 0x80
push dword [ebp - 0x194]
mov ecx, esi
call fcn.0051a890
lea ecx, [ebp - 0x8c]
call fcn.00544c70
test al, al
jne 0x447899
push ecx
call fcn.00544f70
push eax
push dword [ebp - 0x18c]
mov ecx, esi
push dword [ebp - 0x17c]
call fcn.00517700
mov dword [ebp - 0x18c], eax
test eax, eax
je 0x447b7c
push eax
push 9
push 0x110b
push dword [ebp - 0x174]
call dword [0x5fd6c8]
push dword [ebp - 0x18c]
push 0
push 0x1114
push dword [ebp - 0x174]
call dword [0x5fd6c8]
push 0x80
push dword [ebp - 0x17c]
mov ecx, esi
call fcn.0051a890
jmp 0x4489e0
push 0x80
push dword [ebp - 0x194]
mov ecx, esi
call fcn.0051a890
sub esp, 8
mov ecx, edi
push 0x8c
push 0x190
push 0
push esi
push 4
push 0x62d680
call fcn.004666e0
jmp 0x4489e0
cmp byte [ebp - 0x17d], 1
jne 0x447bd9
cmp edx, 0xffffff31
jne 0x447bd9
lea ecx, [ebp - 0x148]
call fcn.00539440
mov byte [ebp - 0x17d], 2
jmp 0x447899
mov ecx, dword [ebp - 0x17c]
cmp edx, 0xffffffea
jne 0x447bec
cmp dword [edi + 0x1484], ecx
je 0x447bf8
cmp edx, dword [ebp - 0x184]
jne 0x447ddc
cmp edx, dword [ebp - 0x184]
jne 0x447c49
push dword [ebp - 0x174]
call dword [0x5fd7ac]
cmp byte [ebp - 0x17d], 2
jne 0x447c3d
xorps xmm1, xmm1
lea ecx, [ebp - 0x148]
call fcn.005393f0
movsd xmm1, qword [0x6e3338]
comisd xmm1, xmm0
jbe 0x447c3d
mov byte [ebp - 0x17d], 0
jmp 0x447899
mov eax, dword [0x5fd6c8]
mov byte [ebp - 0x17d], 1
push 0
push 9
push 0x110a
push dword [ebp - 0x174]
call eax
push eax
push 3
push 0x110a
push dword [ebp - 0x174]
mov dword [ebp - 0x1f8], eax
call dword [0x5fd6c8]
mov edx, dword [ebp - 0x1c4]
mov ecx, eax
test ecx, ecx
mov dword [ebp - 0x1fc], ecx
mov ecx, 0x40
mov eax, 0x20
cmove eax, ecx
mov ecx, dword [ebp - 0x1b4]
mov dword [ebp - 0x1a4], eax
cmp edx, ecx
jg 0x447cda
mov edi, edx
mov edx, dword [ebp - 0x1b8]
nop dword [eax]
cmp edi, edx
je 0x447ccf
push eax
push edi
mov ecx, esi
call fcn.0051a890
mov eax, dword [ebp - 0x1a4]
mov ecx, dword [ebp - 0x1b4]
mov edx, dword [ebp - 0x1b8]
inc edi
cmp edi, ecx
jle 0x447cb0
mov edi, dword [ebp - 0x1e8]
push 0
mov ecx, edi
call fcn.0045dad0
mov ecx, dword [ebp - 0x1b0]
test al, al
mov eax, 0x40
mov esi, 0x20
cmovne esi, eax
push esi
push dword [ebp - 0x198]
call fcn.0051a890
push esi
push dword [ebp - 0x1c0]
mov esi, dword [ebp - 0x1b0]
mov ecx, esi
call fcn.0051a890
cmp dword [ebp - 0x1f8], 0
je 0x447d39
cmp dword [ebp - 0x1fc], 0
jne 0x447d39
push 0x20
push dword [ebp - 0x1bc]
mov ecx, esi
call fcn.0051a890
mov eax, dword [ebp - 0x184]
cmp dword [ebp - 0x190], eax
jne 0x447daa
lea ecx, [ebp - 0x10c]
push ecx
push eax
mov ecx, esi
call fcn.00522a80
push eax
call dword [0x5fd730]
test eax, eax
je 0x447da4
mov eax, dword [ebp - 0x10c]
mov ecx, esi
mov edx, dword [ebp - 0x184]
add eax, 0x5a
mov dword [ebp - 0x19c], eax
mov eax, dword [ebp - 0x108]
add eax, 0x2d
mov dword [ebp - 0x1a4], eax
mov eax, 8
push dword [ebp - 0x1a4]
push dword [ebp - 0x19c]
push eax
push edx
call fcn.00519470
jmp 0x4489e0
mov eax, dword [ebp - 0x184]
mov dword [ebp - 0x1a4], 0xffffffff
mov edx, eax
push dword [ebp - 0x1a4]
mov dword [ebp - 0x19c], 0xffffffff
xor eax, eax
push dword [ebp - 0x19c]
mov ecx, esi
push eax
push edx
call fcn.00519470
jmp 0x4489e0
cmp edx, 0xffffffeb
jne 0x447dfc
cmp dword [edi + 0x1484], ecx
jne 0x447dfc
push dword [ebp - 0x194]
push ecx
mov ecx, edi
call fcn.00466680
jmp 0x4489e0
cmp edx, dword [ebp - 0x204]
je 0x448982
cmp edx, dword [ebp - 0x1c4]
je 0x448982
cmp edx, 0xfffffff2
jne 0x447e25
cmp dword [edi + 0x1484], ecx
je 0x448982
cmp edx, dword [ebp - 0x1ec]
jne 0x447eed
push 0xd
push dword [edi + 0x11c4]
xorps xmm0, xmm0
push ecx
push dword [ebp - 0x1a0]
lea ecx, [ebp - 0x12c]
push esi
movups xmmword [ebp - 0x12c], xmm0
movups xmmword [ebp - 0x11c], xmm0
call fcn.00515d70
lea eax, [ebp - 0x90]
mov byte [ebp - 4], 0xf
push eax
mov ecx, edi
call fcn.004453b0
push dword [ebp - 0x1ac]
mov byte [ebp - 0x185], al
call dword [0x5fd7a4]
cmp byte [ebp - 0x185], 0
jne 0x447e9e
lea ecx, [ebp - 0x12c]
mov byte [ebp - 4], 0xd
call fcn.00515d00
jmp 0x447899
push 0
push dword [ebp - 0x90]
lea eax, [ebp - 0x17c]
mov ecx, edi
push eax
call fcn.00446ba0
push dword [ebp - 0x17c]
mov ecx, esi
call fcn.00522a80
push 0
mov dword [ebp - 0x174], eax
lea ecx, [ebp - 0x94]
lea eax, [ebp - 0x90]
push eax
push 4
push 0x679270
call fcn.0053ed80
lea ecx, [ebp - 0x12c]
jmp 0x4489d7
cmp edx, dword [ebp - 0x1e4]
je 0x448872
mov ecx, dword [ebp - 0x1a0]
cmp edx, ecx
jne 0x447f20
push 4
push dword [ebp - 0x1f0]
mov ecx, esi
call fcn.005199a0
test eax, eax
jne 0x44886d
mov ecx, dword [ebp - 0x1a0]
mov eax, dword [edi + 0x1478]
cmp eax, dword [ebp - 0x1dc]
je 0x448720
cmp eax, ecx
jne 0x447f4d
push 4
push dword [ebp - 0x1f4]
mov ecx, esi
call fcn.005199a0
test eax, eax
jne 0x448720
mov eax, dword [edi + 0x1478]
cmp eax, dword [ebp - 0x1d8]
jne 0x44814e
push 0
push 9
push 0x110a
push dword [ebp - 0x174]
call dword [0x5fd6c8]
push eax
push 3
push 0x110a
push dword [ebp - 0x174]
mov dword [ebp - 0x1a4], eax
call dword [0x5fd6c8]
mov ecx, eax
mov eax, dword [ebp - 0x1a4]
mov dword [ebp - 0x19c], ecx
test eax, eax
je 0x447899
test ecx, ecx
je 0x447899
lea ecx, [ebp - 0xf0]
push ecx
lea ecx, [ebp - 0x8c]
push ecx
push eax
push dword [ebp - 0x17c]
mov ecx, edi
call fcn.00445330
test al, al
je 0x447899
push 0xd
push dword [edi + 0x11c4]
xorps xmm0, xmm0
lea ecx, [ebp - 0xc0]
push dword [ebp - 0x17c]
movups xmmword [ebp - 0xc0], xmm0
push dword [ebp - 0x1a0]
movups xmmword [ebp - 0xb0], xmm0
push esi
call fcn.00515d70
sub esp, 8
mov byte [ebp - 4], 0x12
mov ecx, edi
push 0x8c
push 0
push 0
push 0
push 1
push 0x679748
call fcn.004666e0
test eax, eax
jne 0x448039
lea ecx, [ebp - 0xc0]
mov byte [ebp - 4], 0xd
call fcn.00515d00
jmp 0x447899
xorps xmm0, xmm0
mov dword [ebp - 0xd0], 0
lea ecx, [ebp - 0xd8]
movq qword [ebp - 0xd8], xmm0
call fcn.005453c0
lea eax, [ebp - 0xf0]
mov byte [ebp - 4], 0x13
push eax
lea eax, [ebp - 0xd8]
mov byte [ebp - 0x185], 0
push eax
push dword [ebp - 0x19c]
mov ecx, edi
push dword [ebp - 0x17c]
call fcn.00445330
test al, al
je 0x4480be
lea ecx, [ebp - 0xd8]
call fcn.00543e20
mov ecx, eax
call fcn.005296d0
mov byte [ebp - 0x185], al
test al, al
je 0x4480be
push dword [ebp - 0x19c]
push 0
push 0x1101
push dword [ebp - 0x174]
call dword [0x5fd6c8]
push 0
push 0xc
lea ecx, [ebp - 0x8c]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00448b10
cmp eax, 1
jne 0x448103
cmp byte [ebp - 0x185], 0
jne 0x4480fc
push dword [ebp - 0x1a4]
push 0
push 0x1101
push dword [ebp - 0x174]
call dword [0x5fd6c8]
push 0x679570
jmp 0x44810d
cmp eax, 2
jne 0x448118
push 0x6795f0
lea ecx, [ebp - 0x8c]
call fcn.005452f0
sub esp, 8
lea ecx, [ebp - 0x8c]
push 0x8c
push 0x190
push 0
push 0
push 4
call fcn.00544f70
push eax
mov ecx, edi
call fcn.004666e0
lea ecx, [ebp - 0xd8]
call fcn.00545210
jmp 0x4489d1
cmp eax, dword [ebp - 0x1b4]
jne 0x4481d0
push 0
push 9
push 0x110a
push dword [ebp - 0x174]
call dword [0x5fd6c8]
push eax
push 3
push 0x110a
push dword [ebp - 0x174]
mov dword [ebp - 0x190], eax
call dword [0x5fd6c8]
test eax, eax
je 0x447899
lea eax, [ebp - 0xf0]
mov ecx, edi
push eax
lea eax, [ebp - 0x8c]
push eax
push dword [ebp - 0x190]
push dword [ebp - 0x17c]
call fcn.00445330
test al, al
je 0x447899
push 0
lea ecx, [ebp - 0x8c]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.0045ddd0
jmp 0x4489e0
cmp eax, dword [ebp - 0x198]
jne 0x4481fa
push 0
mov ecx, edi
call fcn.0045dad0
test al, al
jne 0x447899
push 0
push ecx
mov ecx, edi
call fcn.0045dc60
or eax, 0x100
jmp 0x448226
cmp eax, dword [ebp - 0x1c0]
jne 0x44826c
push 0
mov ecx, edi
call fcn.0045dad0
test al, al
jne 0x447899
push dword [edi + 0x1f28]
push ecx
mov ecx, edi
call fcn.0045dc60
or eax, 0x80
add esp, 4
push eax
push ecx
mov ecx, dword [ebp - 0x174]
call fcn.00506fb0
mov ecx, dword [edi + 0x30]
mov dword [ebp - 0x190], eax
cmp ecx, 0xffffffff
je 0x448255
test ecx, ecx
je 0x448255
push ecx
call dword [0x5fd3a4]
mov eax, dword [ebp - 0x190]
mov dword [edi + 0x30], eax
test eax, eax
jne 0x4489e0
mov dword [edi + 0x30], 0xffffffff
jmp 0x4489e0
cmp eax, dword [ebp - 0x1d4]
jne 0x4482e4
push 0
push 9
push 0x110a
push dword [ebp - 0x174]
call dword [0x5fd6c8]
push eax
push 3
push 0x110a
push dword [ebp - 0x174]
mov dword [ebp - 0x190], eax
call dword [0x5fd6c8]
test eax, eax
je 0x447899
push dword [ebp - 0x190]
mov ecx, esi
push dword [ebp - 0x17c]
call fcn.005175c0
push eax
lea ecx, [ebp - 0x8c]
call fcn.00544fa0
push 0
lea ecx, [ebp - 0x8c]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.0044d650
jmp 0x4489e0
cmp eax, dword [ebp - 0x1bc]
jne 0x44839a
push 0
push 9
push 0x110a
push dword [ebp - 0x174]
call dword [0x5fd6c8]
push eax
push 3
push 0x110a
push dword [ebp - 0x174]
mov dword [ebp - 0x190], eax
call dword [0x5fd6c8]
test eax, eax
jne 0x448331
mov eax, dword [ebp - 0x190]
test eax, eax
je 0x447899
push 0
push eax
push dword [ebp - 0x17c]
xorps xmm0, xmm0
mov dword [ebp - 0xc4], 0
mov ecx, esi
movq qword [ebp - 0xcc], xmm0
call fcn.005175c0
push eax
lea ecx, [ebp - 0xcc]
call fcn.00545350
push 0
push 1
push 0xffffffffffffffff
push 1
push 0x64d798
lea ecx, [ebp - 0xcc]
mov byte [ebp - 4], 0x14
call fcn.005438b0
lea ecx, [ebp - 0xcc]
test eax, eax
jne 0x4489ee
mov byte [ebp - 4], 0xd
call fcn.00545210
jmp 0x447899
cmp eax, dword [ebp - 0x1d0]
jne 0x4485c9
push 0
push 9
push 0x110a
push dword [ebp - 0x174]
call dword [0x5fd6c8]
push eax
push 3
push 0x110a
push dword [ebp - 0x174]
mov dword [ebp - 0x190], eax
call dword [0x5fd6c8]
test eax, eax
je 0x447899
push 0xd
push dword [edi + 0x11c4]
xorps xmm0, xmm0
lea ecx, [ebp - 0xc0]
push dword [ebp - 0x17c]
movups xmmword [ebp - 0xc0], xmm0
push dword [ebp - 0x1a0]
movups xmmword [ebp - 0xb0], xmm0
push esi
call fcn.00515d70
push dword [ebp - 0x190]
mov byte [ebp - 4], 0x15
mov ecx, esi
push dword [ebp - 0x17c]
call fcn.005175c0
push eax
lea ecx, [ebp - 0x8c]
call fcn.00544fa0
push 8
push 0
push 0x61d050
push 0x679800
lea ecx, [ebp - 0x8c]
call fcn.005424c0
sub esp, 8
mov dword [ebp - 0x98], 0
xorps xmm0, xmm0
lea ecx, [ebp - 0x8c]
movq qword [ebp - 0xa0], xmm0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x62e428
call fcn.00544f70
push eax
push 0x6783c0
lea ecx, [ebp - 0xa0]
call fcn.00545300
lea ecx, [edi + 0x14c0]
mov byte [ebp - 4], 0x16
call fcn.00513840
push eax
mov edx, 0x1f4
lea ecx, [ebp - 0xa0]
call fcn.004ebcc0
push 0
push 0xffffffffffffffc4
sub esp, 8
lea ecx, [ebp - 0xa0]
push 0x46
push 0x258
push 0
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00465e60
mov ecx, eax
call fcn.00513c80
lea ecx, [ebp - 0x8c]
call fcn.00544f70
xor edx, edx
mov ecx, eax
call fcn.004f1b30
push eax
lea ecx, [ebp - 0xa0]
call fcn.00544fa0
lea ecx, [edi + 0x14c0]
call fcn.00513840
push eax
mov edx, 0x1f4
lea ecx, [ebp - 0x8c]
call fcn.004ebcc0
sub esp, 0xc
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x621864
lea ecx, [ebp - 0x8c]
call fcn.00544f70
push eax
lea ecx, [ebp - 0xa0]
call fcn.00543350
lea ecx, [ebp - 0xa0]
call fcn.00544f70
push eax
push 0x64
lea ecx, [edi + 0x14c0]
call fcn.00513c80
push 1
push 0x66f7a0
lea ecx, [edi + 0x14c0]
call fcn.00513a40
push 0
push 0
mov ecx, edi
call fcn.00465b20
test eax, eax
jne 0x448597
nop
push 5
call dword [0x5fd458]
push 0
push 0
mov ecx, edi
call fcn.00465b20
test eax, eax
je 0x448580
push 2
lea ecx, [edi + 0x14c0]
call fcn.00513870
lea ecx, [ebp - 0xa0]
call fcn.00545210
lea ecx, [ebp - 0xc0]
mov byte [ebp - 4], 0xd
call fcn.00515d00
mov esi, dword [ebp - 0x1b0]
jmp 0x4489e0
cmp eax, dword [ebp - 0x1e0]
jne 0x44865d
push 0
push 9
push 0x110a
push dword [ebp - 0x174]
call dword [0x5fd6c8]
push eax
push 3
push 0x110a
push dword [ebp - 0x174]
mov dword [ebp - 0x190], eax
call dword [0x5fd6c8]
test eax, eax
je 0x447899
push dword [ebp - 0x190]
mov ecx, esi
push dword [ebp - 0x17c]
call fcn.005175c0
push eax
lea ecx, [ebp - 0x8c]
call fcn.00544fa0
push 8
push 0
push 0x61d050
push 0x679800
lea ecx, [ebp - 0x8c]
call fcn.005424c0
lea ecx, [ebp - 0x8c]
call fcn.00544f70
xor edx, edx
mov ecx, eax
call fcn.004ee500
jmp 0x4489e0
cmp eax, dword [ebp - 0x1a8]
jne 0x4486de
push 0
push 9
push 0x110a
push dword [ebp - 0x174]
call dword [0x5fd6c8]
push eax
push 3
push 0x110a
push dword [ebp - 0x174]
mov dword [ebp - 0x190], eax
call dword [0x5fd6c8]
test eax, eax
je 0x447899
lea eax, [ebp - 0xf0]
mov ecx, edi
push eax
lea eax, [ebp - 0x8c]
push eax
push dword [ebp - 0x190]
push dword [ebp - 0x17c]
call fcn.00445330
push 0
lea ecx, [ebp - 0x8c]
call fcn.00544f70
push eax
push 2
push dword [ebp - 0x1ac]
call dword [0x5fd660]
jmp 0x4489e0
cmp eax, dword [ebp - 0x1b8]
je 0x4486f2
cmp eax, dword [ebp - 0x1cc]
jne 0x4489e0
push 0
push dword [ebp - 0x90]
lea eax, [ebp - 0x17c]
mov ecx, edi
push eax
call fcn.00446ba0
push dword [ebp - 0x17c]
mov ecx, esi
call fcn.00522a80
mov dword [ebp - 0x174], eax
jmp 0x4489e0
push 0
push 9
push 0x110a
push dword [ebp - 0x174]
call dword [0x5fd6c8]
mov dword [ebp - 0x19c], eax
test eax, eax
je 0x447899
push eax
push 3
push 0x110a
push dword [ebp - 0x174]
call dword [0x5fd6c8]
test eax, eax
je 0x447899
lea eax, [ebp - 0xf0]
mov ecx, edi
push eax
lea eax, [ebp - 0x8c]
push eax
push dword [ebp - 0x19c]
push dword [ebp - 0x17c]
call fcn.00445330
test al, al
je 0x447899
push 0xd
push dword [edi + 0x11c4]
xorps xmm0, xmm0
lea ecx, [ebp - 0xc0]
push dword [ebp - 0x17c]
movups xmmword [ebp - 0xc0], xmm0
push dword [ebp - 0x1a0]
movups xmmword [ebp - 0xb0], xmm0
push esi
call fcn.00515d70
sub esp, 8
mov byte [ebp - 4], 0x11
mov ecx, edi
push 0x8c
push 0
push 0
push 0
push 1
push 0x679660
call fcn.004666e0
test eax, eax
jne 0x4487f1
lea ecx, [ebp - 0xc0]
mov byte [ebp - 4], 0xd
call fcn.00515d00
jmp 0x447899
push 0
push 0xe
lea ecx, [ebp - 0x8c]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00448b10
cmp eax, 1
jne 0x44882d
push dword [ebp - 0x19c]
push 0
push 0x1101
push dword [ebp - 0x174]
call dword [0x5fd6c8]
push 0x6796e8
jmp 0x448837
cmp eax, 2
jne 0x448842
push 0x6795f0
lea ecx, [ebp - 0x8c]
call fcn.005452f0
sub esp, 8
lea ecx, [ebp - 0x8c]
push 0x8c
push 0x190
push 0
push 0
push 4
call fcn.00544f70
push eax
mov ecx, edi
call fcn.004666e0
jmp 0x4489d1
mov eax, dword [0x5fd6c8]
push 0
push 9
push 0x110a
push dword [ebp - 0x174]
call eax
mov dword [ebp - 0x19c], eax
test eax, eax
je 0x447899
push eax
push 3
push 0x110a
push dword [ebp - 0x174]
call dword [0x5fd6c8]
test eax, eax
je 0x447899
lea eax, [ebp - 0xf0]
mov ecx, edi
push eax
lea eax, [ebp - 0x8c]
push eax
push dword [ebp - 0x19c]
push dword [ebp - 0x17c]
call fcn.00445330
test al, al
je 0x447899
push 0xd
push dword [edi + 0x11c4]
xorps xmm0, xmm0
lea ecx, [ebp - 0xc0]
push dword [ebp - 0x17c]
movups xmmword [ebp - 0xc0], xmm0
push dword [ebp - 0x1a0]
movups xmmword [ebp - 0xb0], xmm0
push esi
call fcn.00515d70
sub esp, 8
mov byte [ebp - 4], 0x10
mov ecx, edi
push 0x8c
push 0
push 0
push 0
push 1
push 0x6794e0
call fcn.004666e0
test eax, eax
jne 0x44893f
lea ecx, [ebp - 0xc0]
mov byte [ebp - 4], 0xd
call fcn.00515d00
jmp 0x447899
push 0
push 0xc
lea ecx, [ebp - 0x8c]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00448b10
cmp eax, 1
jne 0x44882d
push dword [ebp - 0x19c]
push 0
push 0x1101
push dword [ebp - 0x174]
call dword [0x5fd6c8]
push 0x679570
jmp 0x448837
push 0xd
push dword [edi + 0x11c4]
xorps xmm0, xmm0
push ecx
push dword [ebp - 0x1a0]
lea ecx, [ebp - 0xc0]
push esi
movups xmmword [ebp - 0xc0], xmm0
movups xmmword [ebp - 0xb0], xmm0
call fcn.00515d70
mov byte [ebp - 4], 0xe
mov ecx, edi
push dword [ebp - 0x17c]
call fcn.00445890
push dword [ebp - 0x1ac]
mov byte [ebp - 0x175], al
call dword [0x5fd7a4]
lea ecx, [ebp - 0xc0]
mov byte [ebp - 4], 0xd
call fcn.00515d00
cmp byte [ebp - 0x175], 0
jne 0x448a25
jmp 0x447899
push 0
add eax, 3
mov byte [ebp - 0x175], 2
push eax
call fcn.00543b50
mov ecx, eax
call fcn.00543e20
lea ecx, [ebp - 0xcc]
mov dword [edi + 0x1f20], eax
mov byte [ebp - 4], 0xd
call fcn.00545210
jmp 0x448a25
mov byte [ebp - 0x175], 1
push 0
push 0x679230
mov ecx, edi
call fcn.0044da60
cmp byte [ebp - 0x175], 0
mov ecx, edi
sete al
movzx eax, al
push eax
call fcn.0044d940
lea ecx, [ebp - 0xf0]
call fcn.005420e0
lea ecx, [ebp - 0x14c]
call fcn.00523800
lea ecx, [ebp - 0x16c]
call fcn.00523800
lea ecx, [ebp - 0x168]
call fcn.00523800
lea ecx, [ebp - 0x150]
call fcn.00523800
lea ecx, [ebp - 0x164]
call fcn.00523800
lea ecx, [ebp - 0x160]
call fcn.00523800
lea ecx, [ebp - 0x170]
call fcn.00523800
lea ecx, [ebp - 0x15c]
call fcn.00523800
lea ecx, [ebp - 0x158]
call fcn.00523800
lea ecx, [ebp - 0x154]
call fcn.00523800
lea ecx, [ebp - 0x94]
call fcn.0053f820
lea ecx, [ebp - 0xfc]
call fcn.00545210
lea ecx, [ebp - 0x8c]
call fcn.00545210
mov al, byte [ebp - 0x175]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0041e465
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret