Function at 0x4616a8
Capabilities:
Parse pe header

Disassembly:
push 8
push 0xcc0
mov eax, 0x5404fa
call fcn.0053de64
mov dword [ebp - 0xa44], ecx
mov edx, dword [ebx + 0x10]
lea edi, [ebp - 0x2a0]
mov eax, dword [ebx + 8]
mov esi, edx
mov ecx, dword [ebx + 0xc]
mov dword [ebp - 0x990], eax
mov eax, dword [ebx + 0x14]
movsd dword es:[edi], dword [esi]
mov dword [ebp - 0xa2c], eax
mov eax, dword [ebx + 0x18]
mov dword [ebp - 0x250], eax
xor eax, eax
movsd dword es:[edi], dword [esi]
mov dword [ebp - 0xa6c], ecx
mov ecx, dword [ecx]
mov dword [ebp - 0xa70], edx
movsd dword es:[edi], dword [esi]
mov dword [ebp - 0x134], eax
mov dword [ebp - 0x98c], ecx
mov dword [ebp - 0x200], eax
movsd dword es:[edi], dword [esi]
mov dword [ebp - 0x1fc], eax
mov dword [ebp - 4], eax
mov esi, edx
mov byte [ebp - 0xa25], al
lea eax, [ebp - 0x200]
push eax
push 0x409888
sub esp, 0x10
mov edi, esp
push 3
movsd dword es:[edi], dword [esi]
pop edx
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.004df9e2
mov esi, eax
test esi, esi
jns 0x461754
mov dword [ebp - 0x134], esi
mov dword [ebp - 4], 1
jmp 0x465b10
xor eax, eax
lea edi, [ebp - 0x178]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor edx, edx
mov byte [ebp - 4], 2
push 6
xor eax, eax
lea edi, [ebp - 0x9d8]
pop ecx
inc edx
rep stosd dword es:[edi], eax
cmp dword [ebp - 0x1fc], eax
jbe 0x4618ea
mov esi, dword [ebp - 0x200]
lea ecx, [ebp - 0x9d8]
mov byte [ebp - 0x1c9], al
mov eax, dword [ebp - 0x98c]
mov eax, dword [eax]
mov dword [ebp - 0x208], ecx
lea ecx, [ebp - 0xa38]
mov dword [ebp - 0x1b0], ecx
lea ecx, [ebp - 0x208]
push ecx
mov eax, dword [eax + 0x4c]
lea ecx, [ebp - 0x1b0]
push ecx
sub esp, 0x10
mov dword [ebp - 0x204], edx
mov edi, esp
mov dword [ebp - 0x1ac], edx
mov dword [ebp - 0xa38], 0x2009
mov ecx, eax
mov dword [ebp - 0x24c], eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call dword [0x5552f8]
mov ecx, dword [ebp - 0x98c]
call dword [ebp - 0x24c]
mov esi, eax
test esi, esi
jns 0x46181c
mov dword [ebp - 0x134], esi
lea ecx, [ebp - 0x178]
mov byte [ebp - 4], 3
call fcn.0044387a
mov dword [ebp - 4], 4
jmp 0x465b10
mov ecx, dword [ebp - 0x9d0]
lea edx, [ebp - 0x178]
call fcn.004f70a9
mov esi, eax
test esi, esi
jns 0x461854
mov dword [ebp - 0x134], esi
lea ecx, [ebp - 0x178]
mov byte [ebp - 4], 5
call fcn.0044387a
mov dword [ebp - 4], 6
jmp 0x465b10
lea eax, [ebp - 0x1c9]
mov edx, 0x408b24
push eax
push fcn.004fafa0
lea ecx, [ebp - 0x178]
call fcn.004f786f
mov esi, eax
test esi, esi
jns 0x461897
mov dword [ebp - 0x134], esi
lea ecx, [ebp - 0x178]
mov byte [ebp - 4], 7
call fcn.0044387a
mov dword [ebp - 4], 8
jmp 0x465b10
cmp byte [ebp - 0x1c9], 0
setne byte [ebp - 0xa25]
mov edi, dword [ebp - 0x98c]
mov eax, dword [edi]
mov esi, dword [eax + 0xc]
lea eax, [ebp - 0x2d8]
push eax
mov ecx, esi
call dword [0x5552f8]
mov ecx, edi
call esi
mov esi, eax
test esi, esi
jns 0x461921
mov dword [ebp - 0x134], esi
lea ecx, [ebp - 0x178]
mov byte [ebp - 4], 0xb
call fcn.0044387a
mov dword [ebp - 4], 0xc
jmp 0x465b10
lea edx, [ebp - 0x178]
mov ecx, 0x408638
call fcn.004f70a9
mov esi, eax
test esi, esi
jns 0x4618a5
mov dword [ebp - 0x134], esi
lea ecx, [ebp - 0x178]
mov byte [ebp - 4], 9
call fcn.0044387a
mov dword [ebp - 4], 0xa
jmp 0x465b10
mov eax, dword [ebp - 0x98c]
lea ecx, [ebp - 0x2c8]
push ecx
sub esp, 0x10
lea esi, [ebp - 0x2d8]
mov edi, esp
mov eax, dword [eax]
movsd dword es:[edi], dword [esi]
mov eax, dword [eax + 8]
mov ecx, eax
mov dword [ebp - 0xa38], eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call dword [0x5552f8]
mov ecx, dword [ebp - 0x98c]
call dword [ebp - 0xa38]
mov esi, eax
test esi, esi
jns 0x461983
mov dword [ebp - 0x134], esi
lea ecx, [ebp - 0x178]
mov byte [ebp - 4], 0xd
call fcn.0044387a
mov dword [ebp - 4], 0xe
jmp 0x465b10
mov eax, dword [ebp - 0xa2c]
lea esi, [ebp - 0x2c8]
sub esp, 0x10
lea ecx, [ebp - 0x220]
mov edi, esp
push dword [eax]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.004dd62d
mov esi, eax
test esi, esi
jns 0x4619cc
mov dword [ebp - 0x134], esi
lea ecx, [ebp - 0x178]
mov byte [ebp - 4], 0xf
call fcn.0044387a
mov dword [ebp - 4], 0x10
jmp 0x465b10
and dword [ebp - 0x140], 0
and dword [ebp - 0x13c], 0
lea eax, [ebp - 0x140]
mov byte [ebp - 4], 0x11
mov ecx, dword [ebp - 0x98c]
lea esi, [ebp - 0x2a0]
push eax
push 0x409810
sub esp, 0x10
mov edi, esp
push 5
movsd dword es:[edi], dword [esi]
pop edx
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.004df9e2
mov esi, eax
test esi, esi
jns 0x461a3d
mov dword [ebp - 0x134], esi
lea ecx, [ebp - 0x140]
mov byte [ebp - 4], 0x12
call fcn.004526ed
lea ecx, [ebp - 0x178]
mov byte [ebp - 4], 0x13
call fcn.0044387a
mov dword [ebp - 4], 0x14
jmp 0x465b10
cmp dword [ebp - 0x13c], 0
ja 0x461a76
mov esi, dword [ebp - 0x134]
lea ecx, [ebp - 0x140]
mov byte [ebp - 4], 0x15
call fcn.004526ed
lea ecx, [ebp - 0x178]
mov byte [ebp - 4], 0x16
call fcn.0044387a
mov dword [ebp - 4], 0x17
jmp 0x465b10
xor eax, eax
lea edi, [ebp - 0x1e8]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
mov byte [ebp - 4], 0x18
lea edx, [ebp - 0x2e4]
mov eax, dword [ebp - 0x250]
test eax, eax
jne 0x461bea
mov ecx, dword [ebp - 0x990]
call fcn.004f6230
mov esi, eax
test esi, esi
jns 0x461ae9
mov dword [ebp - 0x134], esi
lea ecx, [ebp - 0x1e8]
mov byte [ebp - 4], 0x19
call fcn.0044387a
lea ecx, [ebp - 0x140]
mov byte [ebp - 4], 0x1a
call fcn.004526ed
lea ecx, [ebp - 0x178]
mov byte [ebp - 4], 0x1b
call fcn.0044387a
mov dword [ebp - 4], 0x1c
jmp 0x465b10
lea eax, [ebp - 0x364]
push eax
lea eax, [ebp - 0x350]
push eax
push 0x5c
push 0
push 0
push 2
lea edx, [ebp - 0x2e4]
pop ecx
call fcn.004f62ae
mov esi, eax
test esi, esi
jns 0x461b50
mov dword [ebp - 0x134], esi
lea ecx, [ebp - 0x1e8]
mov byte [ebp - 4], 0x1d
call fcn.0044387a
lea ecx, [ebp - 0x140]
mov byte [ebp - 4], 0x1e
call fcn.004526ed
lea ecx, [ebp - 0x178]
mov byte [ebp - 4], 0x1f
call fcn.0044387a
mov dword [ebp - 4], 0x20
jmp 0x465b10
mov esi, 0x408890
lea edi, [ebp - 0xb4]
lea eax, [ebp - 0x1e8]
xor ecx, ecx
push eax
lea eax, [ebp - 0xb4]
movsd dword es:[edi], dword [esi]
push eax
push 4
pop edx
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea esi, [ebp - 0x350]
lea edi, [ebp - 0xa8]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov esi, 0x408fbc
lea edi, [ebp - 0x9c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov esi, 0x40925c
lea edi, [ebp - 0x90]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.004f64bf
mov esi, eax
test esi, esi
jns 0x461ca7
mov dword [ebp - 0x134], esi
lea ecx, [ebp - 0x1e8]
mov byte [ebp - 4], 0x21
call fcn.0044387a
lea ecx, [ebp - 0x140]
mov byte [ebp - 4], 0x22
call fcn.004526ed
lea ecx, [ebp - 0x178]
mov byte [ebp - 4], 0x23
call fcn.0044387a
mov dword [ebp - 4], 0x24
jmp 0x465b10
mov ecx, eax
call fcn.004f6230
mov esi, eax
test esi, esi
jns 0x461c36
mov dword [ebp - 0x134], esi
lea ecx, [ebp - 0x1e8]
mov byte [ebp - 4], 0x25
call fcn.0044387a
lea ecx, [ebp - 0x140]
mov byte [ebp - 4], 0x26
call fcn.004526ed
lea ecx, [ebp - 0x178]
mov byte [ebp - 4], 0x27
call fcn.0044387a
mov dword [ebp - 4], 0x28
jmp 0x465b10
mov esi, 0x408890
lea edi, [ebp - 0x3c]
lea eax, [ebp - 0x1e8]
xor ecx, ecx
push eax
lea eax, [ebp - 0x3c]
movsd dword es:[edi], dword [esi]
push eax
push 2
pop edx
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea esi, [ebp - 0x2e4]
lea edi, [ebp - 0x30]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.004f64bf
mov esi, eax
test esi, esi
jns 0x461ca7
mov dword [ebp - 0x134], esi
lea ecx, [ebp - 0x1e8]
mov byte [ebp - 4], 0x29
call fcn.0044387a
lea ecx, [ebp - 0x140]
mov byte [ebp - 4], 0x2a
call fcn.004526ed
lea ecx, [ebp - 0x178]
mov byte [ebp - 4], 0x2b
call fcn.0044387a
mov dword [ebp - 4], 0x2c
jmp 0x465b10
xor eax, eax
mov dword [ebp - 0x138], eax
mov dword [ebp - 0x1b8], eax
mov dword [ebp - 0x1b4], eax
lea edx, [ebp - 0x1b8]
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0x1e8]
call fcn.004f68b0
mov esi, eax
test esi, esi
jns 0x461d33
mov dword [ebp - 0x134], esi
lea ecx, [ebp - 0x1b8]
mov byte [ebp - 4], 0x2f
call fcn.0046a3dd
lea ecx, [ebp - 0x138]
mov byte [ebp - 4], 0x30
call fcn.00451ecc
lea ecx, [ebp - 0x1e8]
mov byte [ebp - 4], 0x31
call fcn.0044387a
lea ecx, [ebp - 0x140]
mov byte [ebp - 4], 0x32
call fcn.004526ed
lea ecx, [ebp - 0x178]
mov byte [ebp - 4], 0x33
call fcn.0044387a
mov dword [ebp - 4], 0x34
jmp 0x465b10
xor ecx, ecx
mov dword [ebp - 0x9a8], 0x18
push ecx
push ecx
push 1
push 3
push ecx
push 0x80
lea eax, [ebp - 0x1b8]
mov dword [ebp - 0x9a4], ecx
mov dword [ebp - 0x9a0], eax
lea eax, [ebp - 0x358]
push ecx
push eax
lea eax, [ebp - 0x9a8]
mov dword [ebp - 0x99c], 0x40
push eax
push 0xc0000000
lea eax, [ebp - 0x138]
mov dword [ebp - 0x998], ecx
push eax
mov dword [ebp - 0x994], ecx
call dword [sym.imp.NTDLL.dll_NtCreateFile]
mov esi, eax
test esi, esi
jns 0x461df7
mov dword [ebp - 0x134], esi
lea ecx, [ebp - 0x1b8]
mov byte [ebp - 4], 0x35
call fcn.0046a3dd
lea ecx, [ebp - 0x138]
mov byte [ebp - 4], 0x36
call fcn.00451ecc
lea ecx, [ebp - 0x1e8]
mov byte [ebp - 4], 0x37
call fcn.0044387a
lea ecx, [ebp - 0x140]
mov byte [ebp - 4], 0x38
call fcn.004526ed
lea ecx, [ebp - 0x178]
mov byte [ebp - 4], 0x39
call fcn.0044387a
mov dword [ebp - 4], 0x3a
jmp 0x465b10
xor eax, eax
mov dword [ebp - 0x16c], eax
mov dword [ebp - 0x168], eax
mov byte [ebp - 4], 0x3b
lea esi, [ebp - 0x2a0]
mov ecx, dword [ebp - 0x98c]
mov byte [ebp - 0x1ca], al
mov byte [ebp - 0x1cb], al
lea eax, [ebp - 0x16c]
push eax
push 0x409710
sub esp, 0x10
mov edi, esp
push 6
movsd dword es:[edi], dword [esi]
pop edx
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.004df9e2
mov esi, eax
test esi, esi
jns 0x461eb0
mov dword [ebp - 0x134], esi
lea ecx, [ebp - 0x16c]
mov byte [ebp - 4], 0x3c
call fcn.004526ed
lea ecx, [ebp - 0x1b8]
mov byte [ebp - 4], 0x3d
call fcn.0046a3dd
lea ecx, [ebp - 0x138]
mov byte [ebp - 4], 0x3e
call fcn.00451ecc
lea ecx, [ebp - 0x1e8]
mov byte [ebp - 4], 0x3f
call fcn.0044387a
lea ecx, [ebp - 0x140]
mov byte [ebp - 4], 0x40
call fcn.004526ed
lea ecx, [ebp - 0x178]
mov byte [ebp - 4], 0x41
call fcn.0044387a
mov dword [ebp - 4], 0x42
jmp 0x465b10
xor ecx, ecx
mov dword [ebp - 0xa38], ecx
cmp dword [ebp - 0x13c], ecx
jbe 0x464192
or dword [ebp - 0x270], 0xffffffff
lea edx, [ebp - 0x278]
mov eax, dword [ebp - 0x98c]
mov esi, ecx
shl esi, 4
add esi, dword [ebp - 0x140]
push edx
mov eax, dword [eax]
sub esp, 0x10
mov edi, esp
mov eax, dword [eax + 0x2c]
mov ecx, eax
movsd dword es:[edi], dword [esi]
mov dword [ebp - 0xa34], eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call dword [0x5552f8]
mov ecx, dword [ebp - 0x98c]
call dword [ebp - 0xa34]
mov esi, eax
test esi, esi
js 0x465aa9
lea ecx, [ebp - 0x988]
call fcn.0045c9c8
lea ecx, [ebp - 0x988]
mov byte [ebp - 4], 0x4a
call fcn.0051a670
mov esi, eax
test esi, esi
js 0x465a35
and dword [ebp - 0x1b0], 0
and dword [ebp - 0x1ac], 0
lea eax, [ebp - 0x1b0]
mov byte [ebp - 4], 0x52
mov ecx, dword [ebp - 0x98c]
lea esi, [ebp - 0x278]
or dword [ebp - 0x1f0], 0xffffffff
xor edx, edx
or dword [ebp - 0x2f0], 0xffffffff
inc edx
push eax
push 0x4097f4
sub esp, 0x10
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.004df9e2
mov esi, eax
test esi, esi
js 0x4659af
cmp dword [ebp - 0x1ac], 1
ja 0x4658e8
jne 0x461fe0
mov esi, dword [ebp - 0x1b0]
lea ecx, [ebp - 0x2f8]
mov eax, dword [ebp - 0x98c]
push ecx
sub esp, 0x10
mov edi, esp
mov eax, dword [eax]
movsd dword es:[edi], dword [esi]
mov eax, dword [eax + 0x2c]
mov ecx, eax
mov dword [ebp - 0xa34], eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call dword [0x5552f8]
mov ecx, dword [ebp - 0x98c]
call dword [ebp - 0xa34]
mov esi, eax
test esi, esi
js 0x464217
and dword [ebp - 0xa34], 0
cmp dword [0x551340], 0xffff
je 0x4625ae
xor esi, esi
mov dword [ebp - 0xa3c], esi
push 0x10
lea edi, [esi + 0x55132c]
push 0x41d478
push edi
mov dword [ebp - 0xa40], edi
call fcn.0052ccf0
add esp, 0xc
test eax, eax
jne 0x4620d5
push dword [esi + 0x551348]
lea ecx, [ebp - 0x988]
push dword [esi + 0x55133c]
mov esi, edi
sub esp, 0x10
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.0051989c
mov esi, eax
test esi, esi
jns 0x462588
mov dword [ebp - 0x134], esi
lea ecx, [ebp - 0x1b0]
mov byte [ebp - 4], 0x6b
call fcn.004526ed
lea ecx, [ebp - 0x988]
call fcn.00465b28
lea ecx, [ebp - 0x16c]
mov byte [ebp - 4], 0x6c
call fcn.004526ed
lea ecx, [ebp - 0x1b8]
mov byte [ebp - 4], 0x6d
call fcn.0046a3dd
lea ecx, [ebp - 0x138]
mov byte [ebp - 4], 0x6e
call fcn.00451ecc
lea ecx, [ebp - 0x1e8]
mov byte [ebp - 4], 0x6f
call fcn.0044387a
lea ecx, [ebp - 0x140]
mov byte [ebp - 4], 0x70
call fcn.004526ed
lea ecx, [ebp - 0x178]
mov byte [ebp - 4], 0x71
call fcn.0044387a
mov dword [ebp - 4], 0x72
jmp 0x465b10
cmp dword [esi + 0x551348], 0
jne 0x462233
cmp byte [esi + 0x551345], 0
je 0x4621d0
cmp dword [ebp - 0x2f0], 0xffffffff
je 0x4621d0
mov eax, dword [ebp - 0x98c]
lea ecx, [ebp - 0x1f8]
push ecx
push dword [esi + 0x551328]
lea esi, [ebp - 0x2f8]
mov eax, dword [eax]
sub esp, 0x10
mov edi, esp
mov eax, dword [eax + 0x8c]
mov ecx, eax
movsd dword es:[edi], dword [esi]
mov dword [ebp - 0xa24], eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call dword [0x5552f8]
mov ecx, dword [ebp - 0x98c]
call dword [ebp - 0xa24]
mov esi, eax
test esi, esi
jns 0x462227
mov dword [ebp - 0x134], esi
lea ecx, [ebp - 0x1b0]
mov byte [ebp - 4], 0x73
call fcn.004526ed
lea ecx, [ebp - 0x988]
call fcn.00465b28
lea ecx, [ebp - 0x16c]
mov byte [ebp - 4], 0x74
call fcn.004526ed
lea ecx, [ebp - 0x1b8]
mov byte [ebp - 4], 0x75
call fcn.0046a3dd
lea ecx, [ebp - 0x138]
mov byte [ebp - 4], 0x76
call fcn.00451ecc
lea ecx, [ebp - 0x1e8]
mov byte [ebp - 4], 0x77
call fcn.0044387a
lea ecx, [ebp - 0x140]
mov byte [ebp - 4], 0x78
call fcn.004526ed
lea ecx, [ebp - 0x178]
mov byte [ebp - 4], 0x79
call fcn.0044387a
mov dword [ebp - 4], 0x7a
jmp 0x465b10
cmp dword [ebp - 0x270], 0xffffffff
je 0x462233
mov eax, dword [ebp - 0x98c]
lea ecx, [ebp - 0x1f8]
push ecx
push dword [esi + 0x551328]
lea esi, [ebp - 0x278]
mov eax, dword [eax]
sub esp, 0x10
mov edi, esp
mov eax, dword [eax + 0x8c]
mov ecx, eax
movsd dword es:[edi], dword [esi]
mov dword [ebp - 0xa24], eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call dword [0x5552f8]
mov ecx, dword [ebp - 0x98c]
call dword [ebp - 0xa24]
mov esi, eax
test esi, esi
js 0x46429d
mov edi, dword [ebp - 0xa40]
mov esi, dword [ebp - 0xa3c]
cmp dword [ebp - 0x1f0], 0xffffffff
jne 0x46236b
cmp dword [esi + 0x551348], 0
jne 0x46236b
cmp byte [esi + 0x551345], 0
jne 0x46231f
cmp byte [esi + 0x551344], 0
jne 0x462588
and dword [ebp - 0x18], 0
lea ecx, [ebp - 0x24]
mov eax, 0xc000000d
mov dword [ebp - 0x24], 0x41a33c
push eax
mov edx, 0x418290
mov dword [ebp - 0x20], 0x41aa98
mov dword [ebp - 0x1c], 0xc9a
mov dword [ebp - 0x134], eax
call fcn.004f7c89
mov esi, dword [ebp - 0x134]
lea ecx, [ebp - 0x1b0]
mov byte [ebp - 4], 0x83
call fcn.004526ed
lea ecx, [ebp - 0x988]
call fcn.00465b28
lea ecx, [ebp - 0x16c]
mov byte [ebp - 4], 0x84
call fcn.004526ed
lea ecx, [ebp - 0x1b8]
mov byte [ebp - 4], 0x85
call fcn.0046a3dd
lea ecx, [ebp - 0x138]
mov byte [ebp - 4], 0x86
call fcn.00451ecc
lea ecx, [ebp - 0x1e8]
mov byte [ebp - 4], 0x87
call fcn.0044387a
lea ecx, [ebp - 0x140]
mov byte [ebp - 4], 0x88
call fcn.004526ed
lea ecx, [ebp - 0x178]
mov byte [ebp - 4], 0x89
call fcn.0044387a
mov dword [ebp - 4], 0x8a
jmp 0x465b10
cmp dword [ebp - 0x2f0], 0xffffffff
je 0x462588
cmp byte [esi + 0x551344], 0
jne 0x462588
and dword [ebp - 0x18], 0
lea eax, [ebp - 0x24]
mov dword [ebp - 0x24], 0x41a33c
mov dword [ebp - 0x20], 0x41aa98
mov dword [ebp - 0x1c], 0xc9e
push 0xc000000d
push eax
lea ecx, [ebp - 0x134]
call fcn.004438d5
jmp 0x46587e
lea ecx, [ebp - 0x238]
call fcn.00442280
mov byte [ebp - 4], 0x8b
mov eax, dword [esi + 0x551348]
test eax, eax
jne 0x4623de
lea eax, [ebp - 0xb24]
push eax
lea ecx, [ebp - 0x238]
call fcn.004438ad
mov ecx, eax
call fcn.004435d9
mov dl, byte [ebp - 0xa25]
mov ecx, dword [ebp - 0x98c]
push eax
lea eax, [ebp - 0x1f8]
push eax
call fcn.00460e8b
mov ecx, eax
call fcn.00443830
test eax, eax
js 0x46436a
lea eax, [ebp - 0xb28]
push eax
lea ecx, [ebp - 0x238]
call fcn.004438ad
mov ecx, eax
call fcn.004435d9
mov ecx, dword [esi + 0x551340]
cmp ecx, 8
je 0x46254d
cmp ecx, 0xb
je 0x4624e2
cmp ecx, 0x13
je 0x462473
cmp ecx, 0x1f
jne 0x462579
push eax
push dword [esi + 0x55133c]
mov esi, edi
lea ecx, [ebp - 0x988]
sub esp, 0x10
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.00519abc
mov ecx, eax
call fcn.00443830
test eax, eax
jns 0x462579
mov ecx, eax
call fcn.00443830
test eax, eax
jns 0x46432e
push eax
mov dword [ebp - 0x150], 0x41a33c
lea eax, [ebp - 0x150]
mov dword [ebp - 0x14c], 0x41aa98
mov dword [ebp - 0x148], 0xcbc
mov dword [ebp - 0x144], 0x41ad78
jmp 0x4643a4
push eax
push dword [esi + 0x55133c]
mov esi, edi
lea ecx, [ebp - 0x988]
sub esp, 0x10
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.00519d46
mov ecx, eax
call fcn.00443830
test eax, eax
jns 0x462579
mov ecx, eax
call fcn.00443830
test eax, eax
jns 0x46432e
push eax
mov dword [ebp - 0x1a8], 0x41a33c
lea eax, [ebp - 0x1a8]
mov dword [ebp - 0x1a4], 0x41aa98
mov dword [ebp - 0x1a0], 0xcc4
mov dword [ebp - 0x19c], 0x41ae30
jmp 0x4643a4
push eax
push dword [esi + 0x55133c]
mov esi, edi
lea ecx, [ebp - 0x988]
sub esp, 0x10
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.00519bfc
mov ecx, eax
call fcn.00443830
test eax, eax
jns 0x462579
mov ecx, eax
call fcn.00443830
test eax, eax
jns 0x46432e
push eax
mov dword [ebp - 0x164], 0x41a33c
lea eax, [ebp - 0x164]
mov dword [ebp - 0x160], 0x41aa98
mov dword [ebp - 0x15c], 0xcc0
mov dword [ebp - 0x158], 0x41add8
jmp 0x4643a4
push eax
push dword [esi + 0x55133c]
mov esi, edi
lea ecx, [ebp - 0x988]
sub esp, 0x10
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.0051997c
mov ecx, eax
call fcn.00443830
test eax, eax
js 0x464323
lea ecx, [ebp - 0x238]
mov byte [ebp - 4], 0x52
call fcn.004422a0
mov eax, dword [ebp - 0xa34]
inc eax
imul esi, eax, 0x24
mov dword [ebp - 0xa34], eax
mov dword [ebp - 0xa3c], esi
cmp dword [esi + 0x551340], 0xffff
jne 0x461fff
lea ecx, [ebp - 0xc40]
call fcn.004547a1
mov esi, eax
lea edi, [ebp - 0x1f8]
mov eax, dword [ebp - 0x98c]
lea ecx, [ebp - 0x1f8]
push ecx
push 0x408d04
movsd dword es:[edi], dword [esi]
sub esp, 0x10
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov eax, dword [eax]
lea esi, [ebp - 0x278]
mov edi, esp
mov eax, dword [eax + 0x8c]
mov ecx, eax
movsd dword es:[edi], dword [esi]
mov dword [ebp - 0xa24], eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call dword [0x5552f8]
mov ecx, dword [ebp - 0x98c]
call dword [ebp - 0xa24]
mov ecx, eax
call fcn.00443830
test eax, eax
js 0x465834
lea ecx, [ebp - 0xc50]
call fcn.004547a1
mov edx, eax
lea ecx, [ebp - 0x1f8]
call fcn.004547be
test al, al
je 0x4626ee
lea ecx, [ebp - 0x1c4]
call fcn.00442280
lea eax, [ebp - 0xb60]
mov byte [ebp - 4], 0x8c
push eax
lea ecx, [ebp - 0x1c4]
call fcn.004438ad
mov ecx, eax
call fcn.004435d9
mov dl, byte [ebp - 0xa25]
mov ecx, dword [ebp - 0x98c]
push eax
lea eax, [ebp - 0x1f8]
push eax
call fcn.00460e8b
mov ecx, eax
call fcn.00443830
test eax, eax
js 0x4643f3
and dword [ebp - 0x28c], 0
lea eax, [ebp - 0x28c]
push eax
push 0
lea eax, [ebp - 0xb5c]
push eax
lea ecx, [ebp - 0x1c4]
call fcn.004438ad
mov ecx, eax
call fcn.004435d9
mov edx, 0x408ea8
mov ecx, eax
call fcn.004f620d
mov ecx, eax
call fcn.00443830
test eax, eax
js 0x4643c2
cmp dword [ebp - 0x28c], 0
jne 0x4626df
lea ecx, [ebp - 0x988]
call fcn.0045ca7f
lea ecx, [ebp - 0x1c4]
mov byte [ebp - 4], 0x52
call fcn.004422a0
mov eax, dword [ebp - 0x98c]
lea ecx, [ebp - 0x1f8]
push ecx
push fcn.00409010
sub esp, 0x10
lea esi, [ebp - 0x278]
mov eax, dword [eax]
mov edi, esp
mov eax, dword [eax + 0x8c]
mov ecx, eax
movsd dword es:[edi], dword [esi]
mov dword [ebp - 0xa24], eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call dword [0x5552f8]
mov ecx, dword [ebp - 0x98c]
call dword [ebp - 0xa24]
mov ecx, eax
call fcn.00443830
test eax, eax
js 0x4657f4
lea ecx, [ebp - 0xc60]
call fcn.004547a1
mov edx, eax
lea ecx, [ebp - 0x1f8]
call fcn.004547be
test al, al
je 0x462c45
lea ecx, [ebp - 0x214]
call fcn.00442280
lea eax, [ebp - 0xb58]
mov byte [ebp - 4], 0x8d
push eax
lea ecx, [ebp - 0x214]
call fcn.004438ad
mov ecx, eax
call fcn.004435d9
mov dl, byte [ebp - 0xa25]
mov ecx, dword [ebp - 0x98c]
push eax
lea eax, [ebp - 0x1f8]
push eax
call fcn.00460e8b
mov ecx, eax
call fcn.00443830
test eax, eax
js 0x464855
and dword [ebp - 0x288], 0
lea eax, [ebp - 0x288]
push eax
lea ecx, [ebp - 0x214]
call fcn.00443830
push eax
push 1
lea ecx, [ebp - 0x988]
call fcn.00519eb8
mov ecx, eax
call fcn.00443830
test eax, eax
js 0x464815
cmp dword [ebp - 0x288], 2
jne 0x462c36
lea ecx, [ebp - 0x208]
call fcn.00445a57
lea eax, [ebp - 0xb54]
mov byte [ebp - 4], 0x8e
push eax
lea ecx, [ebp - 0x208]
call fcn.004438ad
mov ecx, eax
call fcn.004435d9
mov ecx, dword [ebp - 0x98c]
lea esi, [ebp - 0x278]
push eax
push 0x4097dc
sub esp, 0x10
xor edx, edx
mov edi, esp
inc edx
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.004df9e2
mov ecx, eax
call fcn.00443830
test eax, eax
js 0x4647b9
lea ecx, [ebp - 0x208]
call fcn.0046a3bc
cmp eax, 0xa
ja 0x46476d
lea ecx, [ebp - 0x208]
call fcn.0046a3bc
test eax, eax
je 0x46472d
push fcn.004422a0
push fcn.00442280
push 0xa
push 0xc
lea eax, [ebp - 0x130]
push eax
call fcn.0052b7c2
xor esi, esi
mov byte [ebp - 4], 0x8f
lea ecx, [ebp - 0x208]
mov dword [ebp - 0xa34], esi
call fcn.0046a3bc
test eax, eax
je 0x462bb8
lea ecx, [ebp - 0x338]
call fcn.004547a1
mov eax, dword [ebp - 0x98c]
lea ecx, [ebp - 0x208]
push esi
mov eax, dword [eax]
mov eax, dword [eax + 0x2c]
mov dword [ebp - 0xa24], eax
call fcn.0046a3c6
lea ecx, [ebp - 0x338]
mov esi, eax
push ecx
sub esp, 0x10
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov esi, dword [ebp - 0xa24]
mov ecx, esi
call dword [0x5552f8]
mov ecx, dword [ebp - 0x98c]
call esi
mov ecx, eax
call fcn.00443830
test eax, eax
js 0x464692
mov eax, dword [ebp - 0x98c]
lea ecx, [ebp - 0x1f8]
push ecx
push 0x408b6c
sub esp, 0x10
lea esi, [ebp - 0x338]
mov eax, dword [eax]
mov edi, esp
mov eax, dword [eax + 0x8c]
mov ecx, eax
movsd dword es:[edi], dword [esi]
mov dword [ebp - 0xa24], eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call dword [0x5552f8]
mov ecx, dword [ebp - 0x98c]
call dword [ebp - 0xa24]
mov ecx, eax
call fcn.00443830
test eax, eax
js 0x464661
lea ecx, [ebp - 0xc70]
call fcn.004547a1
mov edx, eax
lea ecx, [ebp - 0x1f8]
call fcn.004547ae
test al, al
jne 0x464624
mov byte [ebp - 0x151], al
lea ecx, [ebp - 0xb34]
mov eax, dword [ebp - 0x98c]
mov eax, dword [eax]
mov eax, dword [eax + 0x44]
mov dword [ebp - 0xa24], eax
lea eax, [ebp - 0x9c0]
push eax
call fcn.00451e7a
lea eax, [ebp - 0xa58]
mov dword [ebp - 0xa58], 0x2009
push eax
lea ecx, [ebp - 0xb40]
call fcn.00451e7a
lea eax, [ebp - 0xb34]
push eax
lea eax, [ebp - 0xb40]
push eax
sub esp, 0x10
lea esi, [ebp - 0x1f8]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov esi, dword [ebp - 0xa24]
mov ecx, esi
call dword [0x5552f8]
mov ecx, dword [ebp - 0x98c]
call esi
mov ecx, eax
call fcn.00443830
test eax, eax
js 0x4645e1
mov ecx, dword [ebp - 0x9b8]
lea eax, [ebp - 0x151]
push eax
lea edx, [ebp - 0x990]
call fcn.0046af07
mov ecx, eax
call fcn.00443830
test eax, eax
js 0x46459e
cmp byte [ebp - 0x151], 0
je 0x46455b
mov eax, dword [ebp - 0x990]
cmp eax, 0xa
jae 0x46455b
imul eax, eax, 0xc
lea ecx, [ebp - 0x130]
add ecx, eax
call fcn.00443817
test eax, eax
jne 0x464518
mov eax, dword [ebp - 0x98c]
lea ecx, [ebp - 0x1f8]
push ecx
push 0x40898c
sub esp, 0x10
lea esi, [ebp - 0x338]
mov eax, dword [eax]
mov edi, esp
mov eax, dword [eax + 0x8c]
mov ecx, eax
movsd dword es:[edi], dword [esi]
mov dword [ebp - 0xa24], eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call dword [0x5552f8]
mov ecx, dword [ebp - 0x98c]
call dword [ebp - 0xa24]
mov ecx, eax
call fcn.00443830
test eax, eax
js 0x4644d5
lea ecx, [ebp - 0xc80]
call fcn.004547a1
mov edx, eax
lea ecx, [ebp - 0x1f8]
call fcn.004547ae
test al, al
jne 0x464492
mov eax, dword [ebp - 0x98c]
lea ecx, [ebp - 0xb48]
mov eax, dword [eax]
mov eax, dword [eax + 0x44]
mov dword [ebp - 0xa24], eax
lea eax, [ebp - 0x9c0]
push eax
call fcn.00451e7a
lea eax, [ebp - 0xa5c]
mov dword [ebp - 0xa5c], 0x2009
push eax
lea ecx, [ebp - 0xb50]
call fcn.00451e7a
lea eax, [ebp - 0xb48]
push eax
lea eax, [ebp - 0xb50]
push eax
sub esp, 0x10
lea esi, [ebp - 0x1f8]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov esi, dword [ebp - 0xa24]
mov ecx, esi
call dword [0x5552f8]
mov ecx, dword [ebp - 0x98c]
call esi
mov ecx, eax
call fcn.00443830
test eax, eax
js 0x46446a
imul eax, dword [ebp - 0x990], 0xc
lea ecx, [ebp - 0x130]
add ecx, eax
lea eax, [ebp - 0x151]
push eax
lea eax, [ebp - 0xb38]
push eax
call fcn.004438ad
mov ecx, eax
call fcn.004435d9
mov ecx, dword [ebp - 0x9b8]
mov edx, eax
call fcn.0046af38
mov ecx, eax
call fcn.00443830
test eax, eax
js 0x464448
mov esi, dword [ebp - 0xa34]
lea ecx, [ebp - 0x208]
inc esi
mov dword [ebp - 0xa34], esi
call fcn.0046a3bc
cmp esi, eax
jb 0x4628ad
xor esi, esi
lea edi, [ebp - 0x130]
mov dword [ebp - 0xa34], esi
mov ecx, edi
call fcn.00443817
test eax, eax
je 0x462c03
mov ecx, edi
call fcn.00443817
mov ecx, edi
mov esi, eax
call fcn.004435d9
push esi
push eax
lea ecx, [ebp - 0x988]
call fcn.0051a0ba
mov ecx, eax
call fcn.00443830
test eax, eax
js 0x4646fc
mov esi, dword [ebp - 0xa34]
inc esi
add edi, 0xc
mov dword [ebp - 0xa34], esi
cmp esi, 0xa
jb 0x462bc6
push fcn.004422a0
push 0xa
push 0xc
lea eax, [ebp - 0x130]
mov byte [ebp - 4], 0x8e
push eax
call fcn.0052b1e4
lea ecx, [ebp - 0x208]
call fcn.00442526
lea ecx, [ebp - 0x214]
mov byte [ebp - 4], 0x52
call fcn.004422a0
lea ecx, [ebp - 0xc90]
call fcn.004547a1
mov esi, eax
lea edi, [ebp - 0x1f8]
mov eax, dword [ebp - 0x98c]
lea ecx, [ebp - 0x1f8]
push ecx
push 0x408c20
movsd dword es:[edi], dword [esi]
sub esp, 0x10
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov eax, dword [eax]
lea esi, [ebp - 0x278]
mov edi, esp
mov eax, dword [eax + 0x8c]
mov ecx, eax
movsd dword es:[edi], dword [esi]
mov dword [ebp - 0xa24], eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call dword [0x5552f8]
mov ecx, dword [ebp - 0x98c]
call dword [ebp - 0xa24]
mov ecx, eax
call fcn.00443830
test eax, eax
js 0x4657b4
lea ecx, [ebp - 0xca0]
call fcn.004547a1
mov edx, eax
lea ecx, [ebp - 0x1f8]
call fcn.004547be
test al, al
je 0x462d53
lea ecx, [ebp - 0x184]
call fcn.00442280
lea eax, [ebp - 0xb20]
mov byte [ebp - 4], 0x90
push eax
lea ecx, [ebp - 0x184]
call fcn.004438ad
mov ecx, eax
call fcn.004435d9
mov dl, byte [ebp - 0xa25]
mov ecx, dword [ebp - 0x98c]
push eax
lea eax, [ebp - 0x1f8]
push eax
call fcn.00460e8b
mov ecx, eax
call fcn.00443830
test eax, eax
js 0x4648dd
lea ecx, [ebp - 0x184]
call fcn.00443830
push eax
lea ecx, [ebp - 0x988]
call fcn.00519788
mov ecx, eax
call fcn.00443830
test eax, eax
js 0x4648ac
lea ecx, [ebp - 0x184]
mov byte [ebp - 4], 0x52
call fcn.004422a0
lea ecx, [ebp - 0xcb0]
call fcn.004547a1
mov esi, eax
lea edi, [ebp - 0x1f8]
mov eax, dword [ebp - 0x98c]
lea ecx, [ebp - 0x1f8]
push ecx
push 0x408848
movsd dword es:[edi], dword [esi]
sub esp, 0x10
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov eax, dword [eax]
lea esi, [ebp - 0x278]
mov edi, esp
mov eax, dword [eax + 0x8c]
mov ecx, eax
movsd dword es:[edi], dword [esi]
mov dword [ebp - 0xa24], eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call dword [0x5552f8]
mov ecx, dword [ebp - 0x98c]
call dword [ebp - 0xa24]
mov ecx, eax
call fcn.00443830
test eax, eax
js 0x46578c
lea ecx, [ebp - 0xcc0]
call fcn.004547a1
mov edx, eax
lea ecx, [ebp - 0x1f8]
call fcn.004547be
test al, al
je 0x462e61
lea ecx, [ebp - 0x194]
call fcn.00442280
lea eax, [ebp - 0xb1c]
mov byte [ebp - 4], 0x91
push eax
lea ecx, [ebp - 0x194]
call fcn.004438ad
mov ecx, eax
call fcn.004435d9
mov dl, byte [ebp - 0xa25]
mov ecx, dword [ebp - 0x98c]
push eax
lea eax, [ebp - 0x1f8]
push eax
call fcn.00460e8b
mov ecx, eax
call fcn.00443830
test eax, eax
js 0x464972
lea ecx, [ebp - 0x194]
call fcn.00443830
push eax
lea ecx, [ebp - 0x988]
call fcn.005196ca
mov ecx, eax
call fcn.00443830
test eax, eax
js 0x464932
lea ecx, [ebp - 0x194]
mov byte [ebp - 4], 0x52
call fcn.004422a0
lea ecx, [ebp - 0xba0]
call fcn.004547a1
mov esi, eax
lea edi, [ebp - 0x1f8]
mov eax, dword [ebp - 0x98c]
lea ecx, [ebp - 0x1f8]
push ecx
push 0x408968
movsd dword es:[edi], dword [esi]
sub esp, 0x10
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov eax, dword [eax]
lea esi, [ebp - 0x278]
mov edi, esp
mov eax, dword [eax + 0x8c]
mov ecx, eax
movsd dword es:[edi], dword [esi]
mov dword [ebp - 0xa24], eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call dword [0x5552f8]
mov ecx, dword [ebp - 0x98c]
call dword [ebp - 0xa24]
mov ecx, eax
call fcn.00443830
test eax, eax
js 0x465749
lea ecx, [ebp - 0xbb0]
call fcn.004547a1
mov edx, eax
lea ecx, [ebp - 0x1f8]
call fcn.004547be
test al, al
je 0x462f6f
lea ecx, [ebp - 0x160]
call fcn.00442280
lea eax, [ebp - 0xb18]
mov byte [ebp - 4], 0x92
push eax
lea ecx, [ebp - 0x160]
call fcn.004438ad
mov ecx, eax
call fcn.004435d9
mov dl, byte [ebp - 0xa25]
mov ecx, dword [ebp - 0x98c]
push eax
lea eax, [ebp - 0x1f8]
push eax
call fcn.00460e8b
mov ecx, eax
call fcn.00443830
test eax, eax
js 0x4649f8
lea ecx, [ebp - 0x160]
call fcn.00443830
push eax
lea ecx, [ebp - 0x988]
call fcn.00519581
mov ecx, eax
call fcn.00443830
test eax, eax
js 0x4649c7
lea ecx, [ebp - 0x160]
mov byte [ebp - 4], 0x52
call fcn.004422a0
lea ecx, [ebp - 0xbc0]
call fcn.004547a1
mov esi, eax
lea edi, [ebp - 0x1f8]
mov eax, dword [ebp - 0x98c]
lea ecx, [ebp - 0x1f8]
push ecx
push 0x408a70
movsd dword es:[edi], dword [esi]
sub esp, 0x10
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov eax, dword [eax]
lea esi, [ebp - 0x278]
mov edi, esp
mov eax, dword [eax + 0x8c]
mov ecx, eax
movsd dword es:[edi], dword [esi]
mov dword [ebp - 0xa24], eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call dword [0x5552f8]
mov ecx, dword [ebp - 0x98c]
call dword [ebp - 0xa24]
mov ecx, eax
call fcn.00443830
test eax, eax
js 0x465706
lea ecx, [ebp - 0xcd0]
call fcn.004547a1
mov edx, eax
lea ecx, [ebp - 0x1f8]
call fcn.004547be
test al, al
je 0x46307d
lea ecx, [ebp - 0x1a4]
call fcn.00442280
lea eax, [ebp - 0xb14]
mov byte [ebp - 4], 0x93
push eax
lea ecx, [ebp - 0x1a4]
call fcn.004438ad
mov ecx, eax
call fcn.004435d9
mov dl, byte [ebp - 0xa25]
mov ecx, dword [ebp - 0x98c]
push eax
lea eax, [ebp - 0x1f8]
push eax
call fcn.00460e8b
mov ecx, eax
call fcn.00443830
test eax, eax
js 0x464a8d
lea ecx, [ebp - 0x1a4]
call fcn.00443830
push eax
lea ecx, [ebp - 0x988]
call fcn.005197ea
mov ecx, eax
call fcn.00443830
test eax, eax
js 0x464a4d
lea ecx, [ebp - 0x1a4]
mov byte [ebp - 4], 0x52
call fcn.004422a0
lea ecx, [ebp - 0xbd0]
call fcn.004547a1
mov esi, eax
lea edi, [ebp - 0x1f8]
mov eax, dword [ebp - 0x98c]
lea ecx, [ebp - 0x1f8]
push ecx
push 0x409250
movsd dword es:[edi], dword [esi]
sub esp, 0x10
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov eax, dword [eax]
lea esi, [ebp - 0x278]
mov edi, esp
mov eax, dword [eax + 0x8c]
mov ecx, eax
movsd dword es:[edi], dword [esi]
mov dword [ebp - 0xa24], eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call dword [0x5552f8]
mov ecx, dword [ebp - 0x98c]
call dword [ebp - 0xa24]
mov ecx, eax
call fcn.00443830
test eax, eax
js 0x4656de
lea ecx, [ebp - 0xbe0]
call fcn.004547a1
mov edx, eax
lea ecx, [ebp - 0x1f8]
call fcn.004547be
test al, al
je 0x46318b
lea ecx, [ebp - 0x14c]
call fcn.00442280
lea eax, [ebp - 0xb10]
mov byte [ebp - 4], 0x94
push eax
lea ecx, [ebp - 0x14c]
call fcn.004438ad
mov ecx, eax
call fcn.004435d9
mov dl, byte [ebp - 0xa25]
mov ecx, dword [ebp - 0x98c]
push eax
lea eax, [ebp - 0x1f8]
push eax
call fcn.00460e8b
mov ecx, eax
call fcn.00443830
test eax, eax
js 0x464b22
lea ecx, [ebp - 0x14c]
call fcn.00443830
push eax
lea ecx, [ebp - 0x988]
call fcn.00519729
mov ecx, eax
call fcn.00443830
test eax, eax
js 0x464ae2
lea ecx, [ebp - 0x14c]
mov byte [ebp - 4], 0x52
call fcn.004422a0
lea ecx, [ebp - 0xbf0]
call fcn.004547a1
mov esi, eax
lea edi, [ebp - 0x1f8]
mov eax, dword [ebp - 0x98c]
lea ecx, [ebp - 0x1f8]
push ecx
push 0x408b9c
movsd dword es:[edi], dword [esi]
sub esp, 0x10
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov eax, dword [eax]
lea esi, [ebp - 0x278]
mov edi, esp
mov eax, dword [eax + 0x8c]
mov ecx, eax
movsd dword es:[edi], dword [esi]
mov dword [ebp - 0xa24], eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call dword [0x5552f8]
mov ecx, dword [ebp - 0x98c]
call dword [ebp - 0xa24]
mov ecx, eax
call fcn.00443830
test eax, eax
js 0x4656b6
lea ecx, [ebp - 0xc00]
call fcn.004547a1
mov edx, eax
lea ecx, [ebp - 0x1f8]
call fcn.004547be
test al, al
je 0x46339d
lea ecx, [ebp - 0x1d8]
call fcn.00442280
lea eax, [ebp - 0xb0c]
mov byte [ebp - 4], 0x95
push eax
lea ecx, [ebp - 0x1d8]
call fcn.004438ad
mov ecx, eax
call fcn.004435d9
mov dl, byte [ebp - 0xa25]
mov ecx, dword [ebp - 0x98c]
push eax
lea eax, [ebp - 0x1f8]
push eax
call fcn.00460e8b
mov ecx, eax
call fcn.00443830
test eax, eax
js 0x464c46
push 3
pop ecx
lea eax, [ebp - 0x250]
mov dword [ebp - 0x250], ecx
push eax
lea eax, [ebp - 0x20]
mov dword [ebp - 0x20], 0x409148
push eax
push ecx
push fcn.004fafa0
lea ecx, [ebp - 0x1d8]
mov dword [ebp - 0x1c], 0x4090dc
mov dword [ebp - 0x18], 0x408e9c
call fcn.00443830
mov edx, eax
xor ecx, ecx
call fcn.004f6c16
mov ecx, eax
call fcn.00443830
test eax, eax
js 0x464c06
mov eax, dword [ebp - 0x250]
sub eax, 0
je 0x463372
sub eax, 1
je 0x463332
sub eax, 1
jne 0x464b77
push 7
lea ecx, [ebp - 0x988]
call fcn.00519530
mov ecx, eax
call fcn.00443830
test eax, eax
jns 0x46338e
mov ecx, eax
call fcn.00443830
test eax, eax
jns 0x46432e
push eax
mov dword [ebp - 0x150], 0x41a33c
lea eax, [ebp - 0x150]
mov dword [ebp - 0x14c], 0x41aa98
mov dword [ebp - 0x148], 0xdd0
mov dword [ebp - 0x144], 0x41b6d4
jmp 0x464c84
push 3
lea ecx, [ebp - 0x988]
call fcn.00519530
mov ecx, eax
call fcn.00443830
test eax, eax
jns 0x46338e
mov ecx, eax
call fcn.00443830
test eax, eax
jns 0x46432e
mov dword [ebp - 0x15c], 0xdcd
mov dword [ebp - 0x158], 0x41b694
jmp 0x464c29
push 1
lea ecx, [ebp - 0x988]
call fcn.00519530
mov ecx, eax
call fcn.00443830
test eax, eax
js 0x464bc6
lea ecx, [ebp - 0x1d8]
mov byte [ebp - 4], 0x52
call fcn.004422a0
lea ecx, [ebp - 0x328]
call fcn.004547a1
mov eax, dword [ebp - 0x98c]
lea ecx, [ebp - 0x328]
push ecx
push 0x409100
sub esp, 0x10
lea esi, [ebp - 0x278]
mov eax, dword [eax]
mov edi, esp
mov eax, dword [eax + 0x8c]
mov ecx, eax
movsd dword es:[edi], dword [esi]
mov dword [ebp - 0xa24], eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call dword [0x5552f8]
mov ecx, dword [ebp - 0x98c]
call dword [ebp - 0xa24]
mov ecx, eax
call fcn.00443830
test eax, eax
js 0x46568e
lea ecx, [ebp - 0xc10]
call fcn.004547a1
mov edx, eax
lea ecx, [ebp - 0x328]
call fcn.004547ae
test al, al
jne 0x46564b
mov eax, dword [ebp - 0x98c]
lea ecx, [ebp - 0xa88]
mov eax, dword [eax]
mov eax, dword [eax + 0x44]
mov dword [ebp - 0xa24], eax
lea eax, [ebp - 0xa08]
push eax
call fcn.00451e7a
lea eax, [ebp - 0xa60]
mov dword [ebp - 0xa60], 0x2009
push eax
lea ecx, [ebp - 0xa90]
call fcn.00451e7a
lea eax, [ebp - 0xa88]
push eax
lea eax, [ebp - 0xa90]
push eax
sub esp, 0x10
lea esi, [ebp - 0x328]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov esi, dword [ebp - 0xa24]
mov ecx, esi
call dword [0x5552f8]
mov ecx, dword [ebp - 0x98c]
call esi
mov ecx, eax
call fcn.00443830
test eax, eax
js 0x465608
lea ecx, [ebp - 0x284]
call fcn.00442280
lea ecx, [ebp - 0x284]
mov byte [ebp - 4], 0x96
call fcn.00443830
mov ecx, dword [ebp - 0xa00]
mov edx, eax
call fcn.004f70a9
mov ecx, eax
call fcn.00443830
test eax, eax
js 0x4655ac
lea ecx, [ebp - 0x318]
call fcn.004547a1
mov eax, dword [ebp - 0x98c]
lea ecx, [ebp - 0x318]
push ecx
push 0x408d88
sub esp, 0x10
lea esi, [ebp - 0x278]
mov eax, dword [eax]
mov edi, esp
mov eax, dword [eax + 0x8c]
mov ecx, eax
movsd dword es:[edi], dword [esi]
mov dword [ebp - 0xa24], eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call dword [0x5552f8]
mov ecx, dword [ebp - 0x98c]
call dword [ebp - 0xa24]
mov ecx, eax
call fcn.00443830
test eax, eax
js 0x46556c
lea ecx, [ebp - 0xc20]
call fcn.004547a1
mov edx, eax
lea ecx, [ebp - 0x318]
call fcn.004547ae
test al, al
jne 0x46551d
mov eax, dword [ebp - 0x98c]
lea ecx, [ebp - 0xa98]
mov eax, dword [eax]
mov eax, dword [eax + 0x44]
mov dword [ebp - 0xa24], eax
lea eax, [ebp - 0x9f0]
push eax
call fcn.00451e7a
lea eax, [ebp - 0xa64]
mov dword [ebp - 0xa64], 0x2009
push eax
lea ecx, [ebp - 0xaa0]
call fcn.00451e7a
lea eax, [ebp - 0xa98]
push eax
lea eax, [ebp - 0xaa0]
push eax
sub esp, 0x10
lea esi, [ebp - 0x318]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov esi, dword [ebp - 0xa24]
mov ecx, esi
call dword [0x5552f8]
mov ecx, dword [ebp - 0x98c]
call esi
mov ecx, eax
call fcn.00443830
test eax, eax
js 0x4654da
lea ecx, [ebp - 0x22c]
call fcn.00442280
lea ecx, [ebp - 0x22c]
mov byte [ebp - 4], 0x97
call fcn.00443830
mov ecx, dword [ebp - 0x9e8]
mov edx, eax
call fcn.004f70a9
mov ecx, eax
call fcn.00443830
test eax, eax
js 0x46547e
lea ecx, [ebp - 0x248]
call fcn.00442280
lea ecx, [ebp - 0x248]
mov byte [ebp - 4], 0x98
call fcn.00443830
lea ecx, [ebp - 0x178]
mov dword [ebp - 0xa24], eax
call fcn.00443830
lea ecx, [ebp - 0x284]
mov edi, eax
call fcn.00443830
lea ecx, [ebp - 0x22c]
mov esi, eax
call fcn.00443830
push dword [ebp - 0xa24]
mov edx, esi
mov ecx, eax
push edi
call fcn.0045cba2
mov ecx, eax
call fcn.00443830
test eax, eax
js 0x465425
mov ecx, dword [ebp - 0xa2c]
lea eax, [ebp - 0xb08]
push eax
call fcn.00444a68
lea ecx, [ebp - 0x21c]
xor edx, edx
push ecx
push 0x408d10
push 0
push dword [eax]
xor ecx, ecx
call fcn.004dc0a7
mov ecx, eax
call fcn.00443830
test eax, eax
js 0x4653e5
mov ecx, dword [ebp - 0xa2c]
lea eax, [ebp - 0xb04]
mov esi, dword [ebp - 0x21c]
mov edi, dword [ebp - 0x220]
push eax
call fcn.00444a68
push esi
push edi
xor edx, edx
xor ecx, ecx
push dword [eax]
call fcn.004dc7c7
mov ecx, eax
call fcn.00443830
test eax, eax
js 0x4653a5
mov edi, dword [ebp - 0xa2c]
lea eax, [ebp - 0xb00]
mov esi, dword [ebp - 0x21c]
mov ecx, edi
push eax
call fcn.00444a68
mov edx, dword [ebp - 0x9e8]
mov ecx, 0x408d88
push esi
push dword [eax]
call fcn.0045caf5
mov ecx, eax
call fcn.00443830
test eax, eax
js 0x465362
mov esi, dword [ebp - 0x21c]
lea eax, [ebp - 0xafc]
push eax
mov ecx, edi
call fcn.00444a68
mov edx, dword [ebp - 0xa00]
mov ecx, 0x408d58
push esi
push dword [eax]
call fcn.0045caf5
mov ecx, eax
call fcn.00443830
test eax, eax
js 0x46532e
lea ecx, [ebp - 0x248]
call fcn.00443830
mov ecx, dword [ebp - 0xa2c]
mov edi, eax
mov esi, dword [ebp - 0x21c]
lea eax, [ebp - 0xaf8]
push eax
call fcn.00444a68
push esi
mov edx, edi
mov ecx, 0x4090e8
push dword [eax]
call fcn.0045caf5
mov ecx, eax
call fcn.00443830
test eax, eax
js 0x46530f
mov ecx, dword [ebp - 0xa2c]
lea eax, [ebp - 0xaf4]
mov esi, dword [ebp - 0x21c]
push eax
call fcn.00444a68
push esi
mov edx, 0x408fa4
mov ecx, 0x408788
push dword [eax]
call fcn.0045caf5
mov ecx, eax
call fcn.00443830
test eax, eax
js 0x4652cc
lea ecx, [ebp - 0x308]
call fcn.004547a1
mov eax, dword [ebp - 0x98c]
lea ecx, [ebp - 0x308]
push ecx
push 0x4091a8
sub esp, 0x10
lea esi, [ebp - 0x278]
mov eax, dword [eax]
mov edi, esp
mov eax, dword [eax + 0x8c]
mov ecx, eax
movsd dword es:[edi], dword [esi]
mov dword [ebp - 0xa24], eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call dword [0x5552f8]
mov ecx, dword [ebp - 0x98c]
call dword [ebp - 0xa24]
mov ecx, eax
call fcn.00443830
test eax, eax
js 0x465289
lea ecx, [ebp - 0xc30]
call fcn.004547a1
mov edx, eax
lea ecx, [ebp - 0x308]
call fcn.004547be
test al, al
je 0x463903
mov eax, dword [ebp - 0x98c]
lea ecx, [ebp - 0xa78]
mov eax, dword [eax]
mov eax, dword [eax + 0x44]
mov dword [ebp - 0xa24], eax
lea eax, [ebp - 0xa20]
push eax
call fcn.00451e7a
lea eax, [ebp - 0xa68]
mov dword [ebp - 0xa68], 0x2009
push eax
lea ecx, [ebp - 0xa4c]
call fcn.00451e7a
lea eax, [ebp - 0xa78]
push eax
lea eax, [ebp - 0xa4c]
push eax
sub esp, 0x10
lea esi, [ebp - 0x308]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov esi, dword [ebp - 0xa24]
mov ecx, esi
call dword [0x5552f8]
mov ecx, dword [ebp - 0x98c]
call esi
mov ecx, eax
call fcn.00443830
test eax, eax
js 0x464cbd
mov ecx, dword [ebp - 0xa2c]
lea eax, [ebp - 0xaf0]
mov esi, dword [ebp - 0x21c]
push eax
call fcn.00444a68
mov edx, dword [ebp - 0xa18]
mov ecx, 0x408644
push esi
push dword [eax]
call fcn.0045caf5
mov ecx, eax
call fcn.00443830
test eax, eax
js 0x464c9b
call fcn.00444a10
mov ecx, dword [ebp - 0xa2c]
mov dword [ebp - 0x2b0], eax
mov al, byte [ebp - 0x1ca]
mov byte [ebp - 0xa2d], al
lea eax, [ebp - 0xaec]
push eax
call fcn.00444a68
lea ecx, [ebp - 0x16c]
mov esi, dword [eax]
call fcn.00443830
lea ecx, [ebp - 0x1ca]
mov edx, dword [ebp - 0x98c]
push ecx
lea ecx, [ebp - 0x2b0]
push ecx
push esi
push eax
push dword [ebp - 0x21c]
lea esi, [ebp - 0x2a0]
sub esp, 0x10
mov edi, esp
push 4
movsd dword es:[edi], dword [esi]
pop ecx
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.00465ffe
mov ecx, eax
call fcn.00443830
test eax, eax
js 0x465246
cmp byte [ebp - 0xa2d], 0
jne 0x463b18
lea eax, [ebp - 0x2a0]
push eax
push dword [ebp - 0xa2c]
lea eax, [ebp - 0x98c]
push eax
mov eax, dword [ebp - 0xa44]
mov ecx, eax
push dword [eax + 0x1b0]
call fcn.00469d7e
mov ecx, eax
call fcn.00443830
test eax, eax
js 0x464da1
lea eax, [ebp - 0xae8]
push eax
lea ecx, [ebp - 0x140]
call fcn.004438ad
mov ecx, eax
call fcn.004435d9
mov ecx, dword [ebp - 0x98c]
lea esi, [ebp - 0x2a0]
push eax
push 0x409810
sub esp, 0x10
mov edi, esp
push 5
movsd dword es:[edi], dword [esi]
pop edx
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.004df9e2
mov ecx, eax
call fcn.00443830
test eax, eax
js 0x464d79
lea eax, [ebp - 0xae4]
push eax
lea ecx, [ebp - 0x16c]
call fcn.004438ad
mov ecx, eax
call fcn.004435d9
mov ecx, dword [ebp - 0x98c]
lea esi, [ebp - 0x2a0]
push eax
push 0x409710
sub esp, 0x10
mov edi, esp
push 6
movsd dword es:[edi], dword [esi]
pop edx
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.004df9e2
mov ecx, eax
call fcn.00443830
test eax, eax
js 0x464d51
mov edi, dword [ebp - 0x98c]
mov eax, dword [edi]
mov esi, dword [eax + 0xc]
lea eax, [ebp - 0x2d8]
push eax
mov ecx, esi
call dword [0x5552f8]
mov ecx, edi
call esi
mov ecx, eax
call fcn.00443830
test eax, eax
js 0x464d2f
mov eax, dword [ebp - 0x98c]
lea ecx, [ebp - 0x2c8]
push ecx
sub esp, 0x10
lea esi, [ebp - 0x2d8]
mov edi, esp
mov eax, dword [eax]
movsd dword es:[edi], dword [esi]
mov eax, dword [eax + 8]
mov ecx, eax
mov dword [ebp - 0xa24], eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call dword [0x5552f8]
mov ecx, dword [ebp - 0x98c]
call dword [ebp - 0xa24]
mov ecx, eax
call fcn.00443830
test eax, eax
js 0x464d07
mov ecx, dword [ebp - 0xa2c]
lea esi, [ebp - 0x2c8]
lea edi, [ebp - 0xb70]
movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0xae0]
push eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.00444a68
sub esp, 0x10
lea esi, [ebp - 0xb70]
mov edi, esp
lea ecx, [ebp - 0x220]
push dword [eax]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.004dc4a0
mov ecx, eax
call fcn.00443830
test eax, eax
js 0x464ce5
mov ecx, dword [ebp - 0xa2c]
lea eax, [ebp - 0xadc]
push eax
call fcn.00444a68
lea ecx, [ebp - 0x24c]
xor edx, edx
push ecx
push 0x4089ec
push 0
push dword [eax]
xor ecx, ecx
call fcn.004dc0a7
mov ecx, eax
call fcn.00443830
test eax, eax
js 0x46521e
mov ecx, dword [ebp - 0xa2c]
lea esi, [ebp - 0x2c8]
lea edi, [ebp - 0xb80]
movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0xac0]
push eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.00444a68
sub esp, 0x10
lea esi, [ebp - 0xb80]
mov edi, esp
lea ecx, [ebp - 0x220]
push dword [eax]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.004dc4a0
mov ecx, eax
call fcn.00443830
test eax, eax
js 0x4651f6
mov ecx, dword [ebp - 0xa2c]
lea eax, [ebp - 0xad8]
mov esi, dword [ebp - 0x24c]
mov edi, dword [ebp - 0x220]
push eax
call fcn.00444a68
push esi
push edi
xor edx, edx
xor ecx, ecx
push dword [eax]
call fcn.004dc7c7
mov ecx, eax
call fcn.00443830
test eax, eax
js 0x4651d1
mov ecx, dword [ebp - 0xa2c]
lea eax, [ebp - 0xad4]
push eax
call fcn.00444a68
lea ecx, [ebp - 0x254]
xor edx, edx
push ecx
push 0x408f44
push 0
push dword [eax]
xor ecx, ecx
call fcn.004dc0a7
mov ecx, eax
call fcn.00443830
test eax, eax
js 0x4651a9
mov ecx, dword [ebp - 0xa2c]
lea eax, [ebp - 0xad0]
mov esi, dword [ebp - 0x254]
mov edi, dword [ebp - 0x24c]
push eax
call fcn.00444a68
push esi
push edi
xor edx, edx
xor ecx, ecx
push dword [eax]
call fcn.004dc7c7
mov ecx, eax
call fcn.00443830
test eax, eax
js 0x465181
mov edi, dword [ebp - 0xa2c]
lea eax, [ebp - 0xacc]
mov esi, dword [ebp - 0x254]
mov ecx, edi
push eax
call fcn.00444a68
push esi
mov edx, 0x4087c4
mov ecx, 0x408da0
push dword [eax]
call fcn.0045caf5
mov ecx, eax
call fcn.00443830
test eax, eax
js 0x465159
lea eax, [ebp - 0xac8]
mov ecx, edi
push eax
call fcn.00444a68
lea ecx, [ebp - 0x258]
xor edx, edx
push ecx
push 0x408bcc
push 0
push dword [eax]
xor ecx, ecx
call fcn.004dc0a7
mov ecx, eax
call fcn.00443830
test eax, eax
js 0x465137
mov ecx, dword [ebp - 0xa2c]
lea eax, [ebp - 0xac4]
mov esi, dword [ebp - 0x258]
mov edi, dword [ebp - 0x254]
push eax
call fcn.00444a68
push esi
push edi
xor edx, edx
xor ecx, ecx
push dword [eax]
call fcn.004dc7c7
mov ecx, eax
call fcn.00443830
test eax, eax
js 0x46510f
lea ecx, [ebp - 0x264]
call fcn.00442280
lea ecx, [ebp - 0x22c]
mov byte [ebp - 4], 0x99
call fcn.00443817
lea ecx, [ebp - 0x22c]
mov esi, eax
call fcn.004435d9
mov dword [ebp - 0xa34], 0x409040
cmp byte [esi + eax - 1], 0x5c
jne 0x463d3a
mov dword [ebp - 0xa34], 0x408638
lea ecx, [ebp - 0x22c]
call fcn.00443830
mov esi, eax
lea edi, [ebp - 0x60]
lea ecx, [ebp - 0x284]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov esi, dword [ebp - 0xa34]
lea edi, [ebp - 0x54]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.00443830
mov esi, eax
lea edi, [ebp - 0x48]
lea ecx, [ebp - 0x264]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.00443830
push eax
lea eax, [ebp - 0x60]
xor ecx, ecx
push eax
push 3
pop edx
call fcn.004f7471
mov ecx, eax
call fcn.00443830
test eax, eax
js 0x4650b3
lea ecx, [ebp - 0x248]
call fcn.00443830
mov ecx, dword [ebp - 0xa2c]
mov edi, eax
mov esi, dword [ebp - 0x258]
lea eax, [ebp - 0xabc]
push eax
call fcn.00444a68
push esi
mov edx, edi
mov ecx, 0x408d58
push dword [eax]
call fcn.0045caf5
mov ecx, eax
call fcn.00443830
test eax, eax
js 0x465073
lea eax, [ebp - 0xab8]
push eax
lea ecx, [ebp - 0x264]
call fcn.004438ad
mov ecx, eax
call fcn.004435d9
mov ecx, dword [ebp - 0xa2c]
mov edi, eax
mov esi, dword [ebp - 0x258]
lea eax, [ebp - 0xab4]
push eax
call fcn.00444a68
push esi
mov edx, edi
mov ecx, 0x408794
push dword [eax]
call fcn.0045caf5
mov ecx, eax
call fcn.00443830
test eax, eax
js 0x465033
mov edi, dword [ebp - 0xa2c]
lea eax, [ebp - 0xab0]
mov esi, dword [ebp - 0x258]
mov ecx, edi
push eax
call fcn.00444a68
push esi
mov edx, 0x408f2c
mov ecx, 0x408704
push dword [eax]
call fcn.0045caf5
mov ecx, eax
call fcn.00443830
test eax, eax
js 0x464ff0
call fcn.00444a10
mov dword [ebp - 0x2b4], eax
mov ecx, edi
mov al, byte [ebp - 0x1cb]
mov byte [ebp - 0xa2d], al
lea eax, [ebp - 0xaac]
push eax
call fcn.00444a68
lea ecx, [ebp - 0x16c]
mov esi, dword [eax]
call fcn.00443830
lea ecx, [ebp - 0x1cb]
mov edx, eax
push ecx
lea ecx, [ebp - 0x2b4]
push ecx
push esi
push dword [ebp - 0x254]
mov ecx, dword [ebp - 0x98c]
lea esi, [ebp - 0x2a0]
sub esp, 0x10
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.00466561
mov ecx, eax
call fcn.00443830
test eax, eax
js 0x464fad
cmp byte [ebp - 0xa2d], 0
jne 0x464073
lea eax, [ebp - 0x2a0]
push eax
push dword [ebp - 0xa2c]
lea eax, [ebp - 0x98c]
push eax
mov eax, dword [ebp - 0xa44]
mov ecx, eax
push dword [eax + 0x1b0]
call fcn.00469d7e
mov ecx, eax
call fcn.00443830
test eax, eax
js 0x464e8e
lea eax, [ebp - 0xaa8]
push eax
lea ecx, [ebp - 0x140]
call fcn.004438ad
mov ecx, eax
call fcn.004435d9
mov ecx, dword [ebp - 0x98c]
lea esi, [ebp - 0x2a0]
push eax
push 0x409810
sub esp, 0x10
mov edi, esp
push 5
movsd dword es:[edi], dword [esi]
pop edx
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.004df9e2
mov ecx, eax
call fcn.00443830
test eax, eax
js 0x464e5a
lea eax, [ebp - 0xaa4]
push eax
lea ecx, [ebp - 0x16c]
call fcn.004438ad
mov ecx, eax
call fcn.004435d9
mov ecx, dword [ebp - 0x98c]
lea esi, [ebp - 0x2a0]
push eax
push 0x409710
sub esp, 0x10
mov edi, esp
push 6
movsd dword es:[edi], dword [esi]
pop edx
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.004df9e2
mov ecx, eax
call fcn.00443830
test eax, eax
js 0x464e3b
mov edi, dword [ebp - 0x98c]
mov eax, dword [edi]
mov esi, dword [eax + 0xc]
lea eax, [ebp - 0x2d8]
push eax
mov ecx, esi
call dword [0x5552f8]
mov ecx, edi
call esi
mov ecx, eax
call fcn.00443830
test eax, eax
js 0x464e13
mov eax, dword [ebp - 0x98c]
lea ecx, [ebp - 0x2c8]
push ecx
sub esp, 0x10
lea esi, [ebp - 0x2d8]
mov edi, esp
mov eax, dword [eax]
movsd dword es:[edi], dword [esi]
mov eax, dword [eax + 8]
mov ecx, eax
mov dword [ebp - 0xa24], eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call dword [0x5552f8]
mov ecx, dword [ebp - 0x98c]
call dword [ebp - 0xa24]
mov ecx, eax
call fcn.00443830
test eax, eax
js 0x464deb
mov ecx, dword [ebp - 0xa2c]
lea esi, [ebp - 0x2c8]
lea edi, [ebp - 0xb90]
movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0xb2c]
push eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.00444a68
sub esp, 0x10
lea esi, [ebp - 0xb90]
mov edi, esp
lea ecx, [ebp - 0x220]
push dword [eax]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.004dc4a0
mov ecx, eax
call fcn.00443830
test eax, eax
js 0x464dc9
lea ecx, [ebp - 0x2ac]
call fcn.00442280
lea ecx, [ebp - 0x248]
mov byte [ebp - 4], 0x9a
call fcn.00443830
lea edx, [ebp - 0x344]
mov ecx, eax
call fcn.004f71cf
mov ecx, eax
call fcn.00443830
test eax, eax
js 0x464f51
lea ecx, [ebp - 0x1e8]
call fcn.00443830
mov esi, eax
lea edi, [ebp - 0x84]
lea ecx, [ebp - 0x2ac]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov esi, 0x408fbc
lea edi, [ebp - 0x78]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea esi, [ebp - 0x344]
lea edi, [ebp - 0x6c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.00443830
push eax
lea eax, [ebp - 0x84]
xor ecx, ecx
push eax
push 3
pop edx
call fcn.004f64bf
mov ecx, eax
call fcn.00443830
test eax, eax
js 0x464f11
lea ecx, [ebp - 0x2ac]
call fcn.00443830
push eax
lea ecx, [ebp - 0x988]
call fcn.0051a15c
mov ecx, eax
call fcn.00443830
test eax, eax
js 0x464ed1
lea ecx, [ebp - 0x2ac]
call fcn.004422a0
lea ecx, [ebp - 0x264]
call fcn.004422a0
lea ecx, [ebp - 0x248]
call fcn.004422a0
lea ecx, [ebp - 0x22c]
call fcn.004422a0
lea ecx, [ebp - 0x284]
call fcn.004422a0
lea ecx, [ebp - 0x1b0]
call fcn.00442526
lea ecx, [ebp - 0x988]
mov byte [ebp - 4], 0x3b
call fcn.00465b28
mov ecx, dword [ebp - 0xa38]
inc ecx
mov dword [ebp - 0xa38], ecx
cmp ecx, dword [ebp - 0x13c]
jb 0x461ec4
mov ecx, dword [ebp - 0xa6c]
lea esi, [ebp - 0x2a0]
mov edi, dword [ebp - 0xa70]
mov eax, dword [ebp - 0x98c]
mov dword [ecx], eax
lea ecx, [ebp - 0x16c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.00442526
lea ecx, [ebp - 0x1b8]
call fcn.0045c617
lea ecx, [ebp - 0x138]
call fcn.004508db
lea ecx, [ebp - 0x1e8]
call fcn.004422a0
lea ecx, [ebp - 0x140]
call fcn.00442526
lea ecx, [ebp - 0x178]
call fcn.004422a0
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x200]
call fcn.00442526
lea ecx, [ebp - 0x134]
call fcn.004435d9
mov ecx, dword [ebp - 0x14]
call fcn.0053de36
ret 0x14
mov dword [ebp - 0x134], esi
lea ecx, [ebp - 0x1b0]
mov byte [ebp - 4], 0x63
call fcn.004526ed
lea ecx, [ebp - 0x988]
call fcn.00465b28
lea ecx, [ebp - 0x16c]
mov byte [ebp - 4], 0x64
call fcn.004526ed
lea ecx, [ebp - 0x1b8]
mov byte [ebp - 4], 0x65
call fcn.0046a3dd
lea ecx, [ebp - 0x138]
mov byte [ebp - 4], 0x66
call fcn.00451ecc
lea ecx, [ebp - 0x1e8]
mov byte [ebp - 4], 0x67
call fcn.0044387a
lea ecx, [ebp - 0x140]
mov byte [ebp - 4], 0x68
call fcn.004526ed
lea ecx, [ebp - 0x178]
mov byte [ebp - 4], 0x69
call fcn.0044387a
mov dword [ebp - 4], 0x6a
jmp 0x465b10
mov dword [ebp - 0x134], esi
lea ecx, [ebp - 0x1b0]
mov byte [ebp - 4], 0x7b
call fcn.004526ed
lea ecx, [ebp - 0x988]
call fcn.00465b28
lea ecx, [ebp - 0x16c]
mov byte [ebp - 4], 0x7c
call fcn.004526ed
lea ecx, [ebp - 0x1b8]
mov byte [ebp - 4], 0x7d
call fcn.0046a3dd
lea ecx, [ebp - 0x138]
mov byte [ebp - 4], 0x7e
call fcn.00451ecc
lea ecx, [ebp - 0x1e8]
mov byte [ebp - 4], 0x7f
call fcn.0044387a
lea ecx, [ebp - 0x140]
mov byte [ebp - 4], 0x80
call fcn.004526ed
lea ecx, [ebp - 0x178]
mov byte [ebp - 4], 0x81
call fcn.0044387a
mov dword [ebp - 4], 0x82
jmp 0x465b10
mov ecx, eax
call fcn.00443830
test eax, eax
js 0x464339
push 0xc00000e5
call dword [fcn.00440b24]
push eax
mov dword [ebp - 0x198], 0x41a33c
lea eax, [ebp - 0x198]
mov dword [ebp - 0x194], 0x41aa98
mov dword [ebp - 0x190], 0xcb8
mov dword [ebp - 0x18c], 0x41ad20
jmp 0x4643a4
mov ecx, eax
call fcn.00443830
test eax, eax
jns 0x46432e
push eax
mov dword [ebp - 0x188], 0x41a33c
lea eax, [ebp - 0x188]
mov dword [ebp - 0x184], 0x41aa98
mov dword [ebp - 0x180], 0xcb1
mov dword [ebp - 0x17c], 0x41acd0
push eax
lea ecx, [ebp - 0x134]
call fcn.004438c1
lea ecx, [ebp - 0x238]
mov esi, eax
call fcn.004422a0
jmp 0x465880
mov ecx, eax
call fcn.00443830
test eax, eax
jns 0x46432e
push eax
mov dword [ebp - 0x24], 0x41a33c
lea eax, [ebp - 0x24]
mov dword [ebp - 0x20], 0x41aa98
mov dword [ebp - 0x1c], 0xcde
mov dword [ebp - 0x18], 0x41af28
jmp 0x464431
mov ecx, eax
call fcn.00443830
test eax, eax
jns 0x46432e
push eax
mov dword [ebp - 0x1dc], 0x41a33c
lea eax, [ebp - 0x1dc]
mov dword [ebp - 0x1d8], 0x41aa98
mov dword [ebp - 0x1d4], 0xcdb
mov dword [ebp - 0x1d0], 0x41aee0
push eax
lea ecx, [ebp - 0x134]
call fcn.004438c1
lea ecx, [ebp - 0x1c4]
jmp 0x4643b6
mov ecx, eax
call fcn.00443830
test eax, eax
jns 0x46432e
mov dword [ebp - 0x1c], 0xd4b
mov dword [ebp - 0x18], 0x41b1f8
jmp 0x464719
mov ecx, eax
call fcn.00443830
test eax, eax
jns 0x46432e
mov dword [ebp - 0x148], 0xd44
mov dword [ebp - 0x144], 0x41a918
jmp 0x4646b5
mov ecx, 0xc000000d
call fcn.00443830
test eax, eax
jns 0x46432e
and dword [ebp - 0x19c], 0
push eax
mov dword [ebp - 0x1a8], 0x41a33c
lea eax, [ebp - 0x1a8]
mov dword [ebp - 0x1a4], 0x41aa98
mov dword [ebp - 0x1a0], 0xd3e
jmp 0x464653
mov ecx, eax
call fcn.00443830
test eax, eax
jns 0x46432e
push eax
mov dword [ebp - 0x164], 0x41a33c
lea eax, [ebp - 0x164]
mov dword [ebp - 0x160], 0x41aa98
mov dword [ebp - 0x15c], 0xd3b
mov dword [ebp - 0x158], 0x41b1b0
jmp 0x4646d0
mov ecx, 0xc00000bd
call fcn.00443830
test eax, eax
jns 0x46432e
and dword [ebp - 0x18c], 0
push eax
mov dword [ebp - 0x198], 0x41a33c
lea eax, [ebp - 0x198]
mov dword [ebp - 0x194], 0x41aa98
mov dword [ebp - 0x190], 0xd38
jmp 0x464653
mov ecx, 0xc000000d
call fcn.00443830
test eax, eax
jns 0x46432e
and dword [ebp - 0x17c], 0
push eax
mov dword [ebp - 0x188], 0x41a33c
lea eax, [ebp - 0x188]
mov dword [ebp - 0x184], 0x41aa98
mov dword [ebp - 0x180], 0xd33
jmp 0x464653
mov ecx, eax
call fcn.00443830
test eax, eax
jns 0x46432e
push eax
mov dword [ebp - 0x1c8], 0x41a33c
lea eax, [ebp - 0x1c8]
mov dword [ebp - 0x1c4], 0x41aa98
mov dword [ebp - 0x1c0], 0xd2f
mov dword [ebp - 0x1bc], 0x41b140
jmp 0x4646d0
mov ecx, eax
call fcn.00443830
test eax, eax
jns 0x46432e
push eax
mov dword [ebp - 0x1dc], 0x41a33c
lea eax, [ebp - 0x1dc]
mov dword [ebp - 0x1d8], 0x41aa98
mov dword [ebp - 0x1d4], 0xd2a
mov dword [ebp - 0x1d0], 0x41a918
jmp 0x4646d0
mov ecx, 0xc000000d
call fcn.00443830
test eax, eax
jns 0x46432e
and dword [ebp - 0x18], 0
push eax
mov dword [ebp - 0x24], 0x41a33c
lea eax, [ebp - 0x24]
mov dword [ebp - 0x20], 0x41aa98
mov dword [ebp - 0x1c], 0xd21
push eax
lea ecx, [ebp - 0x134]
call fcn.004438d5
jmp 0x4646dc
mov ecx, eax
call fcn.00443830
test eax, eax
jns 0x46432e
push eax
mov dword [ebp - 0x24], 0x41a33c
lea eax, [ebp - 0x24]
mov dword [ebp - 0x20], 0x41aa98
mov dword [ebp - 0x1c], 0xd1e
mov dword [ebp - 0x18], 0x41b0f8
jmp 0x4646d0
mov ecx, eax
call fcn.00443830
test eax, eax
jns 0x46432e
mov dword [ebp - 0x148], 0xd1c
mov dword [ebp - 0x144], 0x41b0c8
push eax
lea eax, [ebp - 0x150]
mov dword [ebp - 0x14c], 0x41aa98
mov dword [ebp - 0x150], 0x41a33c
push eax
lea ecx, [ebp - 0x134]
call fcn.004438c1
push fcn.004422a0
push 0xa
mov esi, eax
mov byte [ebp - 4], 0x8e
push 0xc
lea eax, [ebp - 0x130]
push eax
call fcn.0052b1e4
jmp 0x464805
mov ecx, eax
call fcn.00443830
test eax, eax
jns 0x46432e
mov dword [ebp - 0x1c], 0xd51
mov dword [ebp - 0x18], 0x41b268
push eax
lea eax, [ebp - 0x24]
mov dword [ebp - 0x24], 0x41a33c
mov dword [ebp - 0x20], 0x41aa98
jmp 0x4646d0
mov ecx, 0xc000000d
call fcn.00443830
test eax, eax
jns 0x46432e
and dword [ebp - 0x19c], 0
push eax
mov dword [ebp - 0x1a8], 0x41a33c
lea eax, [ebp - 0x1a8]
mov dword [ebp - 0x1a4], 0x41aa98
mov dword [ebp - 0x1a0], 0xd12
jmp 0x4647ab
mov ecx, 0xc0000429
call fcn.00443830
test eax, eax
jns 0x46432e
and dword [ebp - 0x158], 0
push eax
mov dword [ebp - 0x164], 0x41a33c
lea eax, [ebp - 0x164]
mov dword [ebp - 0x160], 0x41aa98
mov dword [ebp - 0x15c], 0xd0d
push eax
lea ecx, [ebp - 0x134]
call fcn.004438d5
jmp 0x464803
mov ecx, eax
call fcn.00443830
test eax, eax
jns 0x46432e
push eax
lea eax, [ebp - 0x198]
mov dword [ebp - 0x198], 0x41a33c
push eax
lea ecx, [ebp - 0x134]
mov dword [ebp - 0x194], 0x41aa98
mov dword [ebp - 0x190], 0xd09
mov dword [ebp - 0x18c], 0x41b040
call fcn.004438c1
mov esi, eax
lea ecx, [ebp - 0x208]
call fcn.00442526
jmp 0x4648a1
mov ecx, eax
call fcn.00443830
test eax, eax
jns 0x46432e
push eax
mov dword [ebp - 0x188], 0x41a33c
lea eax, [ebp - 0x188]
mov dword [ebp - 0x184], 0x41aa98
mov dword [ebp - 0x180], 0xcfa
mov dword [ebp - 0x17c], 0x41afd0
jmp 0x464893
mov ecx, eax
call fcn.00443830
test eax, eax
jns 0x46432e
push eax
mov dword [ebp - 0x1c8], 0x41a33c
lea eax, [ebp - 0x1c8]
mov dword [ebp - 0x1c4], 0x41aa98
mov dword [ebp - 0x1c0], 0xcf2
mov dword [ebp - 0x1bc], 0x41aee0
push eax
lea ecx, [ebp - 0x134]
call fcn.004438c1
mov esi, eax
lea ecx, [ebp - 0x214]
jmp 0x4643b8
mov ecx, eax
call fcn.00443830
test eax, eax
jns 0x46432e
push eax
mov dword [ebp - 0x24], 0x41a33c
lea eax, [ebp - 0x24]
mov dword [ebp - 0x20], 0x41aa98
mov dword [ebp - 0x1c], 0xd64
mov dword [ebp - 0x18], 0x41b310
jmp 0x46491b
mov ecx, eax
call fcn.00443830
test eax, eax
jns 0x46432e
push eax
mov dword [ebp - 0x150], 0x41a33c
lea eax, [ebp - 0x150]
mov dword [ebp - 0x14c], 0x41aa98
mov dword [ebp - 0x148], 0xd62
mov dword [ebp - 0x144], 0x41aee0
push eax
lea ecx, [ebp - 0x134]
call fcn.004438c1
lea ecx, [ebp - 0x184]
jmp 0x4643b6
mov ecx, eax
call fcn.00443830
test eax, eax
jns 0x46432e
push eax
mov dword [ebp - 0x1a8], 0x41a33c
lea eax, [ebp - 0x1a8]
mov dword [ebp - 0x1a4], 0x41aa98
mov dword [ebp - 0x1a0], 0xd74
mov dword [ebp - 0x19c], 0x41b3a0
jmp 0x4649b0
mov ecx, eax
call fcn.00443830
test eax, eax
jns 0x46432e
push eax
mov dword [ebp - 0x1c8], 0x41a33c
lea eax, [ebp - 0x1c8]
mov dword [ebp - 0x1c4], 0x41aa98
mov dword [ebp - 0x1c0], 0xd72
mov dword [ebp - 0x1bc], 0x41aee0
push eax
lea ecx, [ebp - 0x134]
call fcn.004438c1
lea ecx, [ebp - 0x194]
jmp 0x4643b6
mov ecx, eax
call fcn.00443830
test eax, eax
jns 0x46432e
push eax
mov dword [ebp - 0x24], 0x41a33c
lea eax, [ebp - 0x24]
mov dword [ebp - 0x20], 0x41aa98
mov dword [ebp - 0x1c], 0xd84
mov dword [ebp - 0x18], 0x41b42c
jmp 0x464a36
mov ecx, eax
call fcn.00443830
test eax, eax
jns 0x46432e
push eax
mov dword [ebp - 0x1dc], 0x41a33c
lea eax, [ebp - 0x1dc]
mov dword [ebp - 0x1d8], 0x41aa98
mov dword [ebp - 0x1d4], 0xd82
mov dword [ebp - 0x1d0], 0x41aee0
push eax
lea ecx, [ebp - 0x134]
call fcn.004438c1
lea ecx, [ebp - 0x160]
jmp 0x4643b6
mov ecx, eax
call fcn.00443830
test eax, eax
jns 0x46432e
push eax
mov dword [ebp - 0x164], 0x41a33c
lea eax, [ebp - 0x164]
mov dword [ebp - 0x160], 0x41aa98
mov dword [ebp - 0x15c], 0xd94
mov dword [ebp - 0x158], 0x41b4ac
jmp 0x464acb
mov ecx, eax
call fcn.00443830
test eax, eax
jns 0x46432e
push eax
mov dword [ebp - 0x198], 0x41a33c
lea eax, [ebp - 0x198]
mov dword [ebp - 0x194], 0x41aa98
mov dword [ebp - 0x190], 0xd92
mov dword [ebp - 0x18c], 0x41aee0
push eax
lea ecx, [ebp - 0x134]
call fcn.004438c1
lea ecx, [ebp - 0x1a4]
jmp 0x4643b6
mov ecx, eax
call fcn.00443830
test eax, eax
jns 0x46432e
push eax
mov dword [ebp - 0x188], 0x41a33c
lea eax, [ebp - 0x188]
mov dword [ebp - 0x184], 0x41aa98
mov dword [ebp - 0x180], 0xda4
mov dword [ebp - 0x17c], 0x41b534
jmp 0x464b60
mov ecx, eax
call fcn.00443830
test eax, eax
jns 0x46432e
push eax
mov dword [ebp - 0x1c8], 0x41a33c
lea eax, [ebp - 0x1c8]
mov dword [ebp - 0x1c4], 0x41aa98
mov dword [ebp - 0x1c0], 0xda2
mov dword [ebp - 0x1bc], 0x41aee0
push eax
lea ecx, [ebp - 0x134]
call fcn.004438c1
lea ecx, [ebp - 0x14c]
jmp 0x4643b6
mov ecx, 0xc0150006
call fcn.00443830
test eax, eax
jns 0x46432e
and dword [ebp - 0x19c], 0
lea ecx, [ebp - 0x134]
push eax
lea eax, [ebp - 0x1a8]
mov dword [ebp - 0x1a8], 0x41a33c
push eax
mov dword [ebp - 0x1a4], 0x41aa98
mov dword [ebp - 0x1a0], 0xdd4
call fcn.004438d5
jmp 0x464c90
mov ecx, eax
call fcn.00443830
test eax, eax
jns 0x46432e
push eax
mov dword [ebp - 0x198], 0x41a33c
lea eax, [ebp - 0x198]
mov dword [ebp - 0x194], 0x41aa98
mov dword [ebp - 0x190], 0xdca
mov dword [ebp - 0x18c], 0x41b658
jmp 0x464c84
mov ecx, eax
call fcn.00443830
test eax, eax
jns 0x46432e
mov dword [ebp - 0x15c], 0xdc5
mov dword [ebp - 0x158], 0x41b5c0
push eax
mov dword [ebp - 0x160], 0x41aa98
lea eax, [ebp - 0x164]
mov dword [ebp - 0x164], 0x41a33c
jmp 0x464c84
mov ecx, eax
call fcn.00443830
test eax, eax
jns 0x46432e
push eax
mov dword [ebp - 0x23c], 0x41a33c
lea eax, [ebp - 0x23c]
mov dword [ebp - 0x238], 0x41aa98
mov dword [ebp - 0x234], 0xdb3
mov dword [ebp - 0x230], 0x41aee0
push eax
lea ecx, [ebp - 0x134]
call fcn.004438c1
lea ecx, [ebp - 0x1d8]
jmp 0x4643b6
mov ecx, eax
call fcn.00443830
test eax, eax
jns 0x46432e
mov dword [ebp - 0x1c], 0xe50
mov dword [ebp - 0x18], 0x41bd70
jmp 0x46534b
mov ecx, eax
call fcn.00443830
test eax, eax
jns 0x46432e
mov dword [ebp - 0x148], 0xe49
mov dword [ebp - 0x144], 0x41bcf8
jmp 0x465385
mov ecx, eax
call fcn.00443830
test eax, eax
jns 0x46432e
mov dword [ebp - 0x1c], 0xe82
mov dword [ebp - 0x18], 0x41ab20
jmp 0x46534b
mov ecx, eax
call fcn.00443830
test eax, eax
jns 0x46432e
mov dword [ebp - 0x148], 0xe81
mov dword [ebp - 0x144], 0x41aae0
jmp 0x465385
mov ecx, eax
call fcn.00443830
test eax, eax
jns 0x46432e
mov dword [ebp - 0x1c], 0xe80
mov dword [ebp - 0x18], 0x41aab8
jmp 0x46534b
mov ecx, eax
call fcn.00443830
test eax, eax
jns 0x46432e
mov dword [ebp - 0x1a0], 0xe7d
mov dword [ebp - 0x19c], 0x41ac10
jmp 0x4653c8
mov ecx, eax
call fcn.00443830
test eax, eax
jns 0x46432e
mov dword [ebp - 0x15c], 0xe75
mov dword [ebp - 0x158], 0x41ab80
jmp 0x465408
mov ecx, eax
call fcn.00443830
test eax, eax
jns 0x46432e
mov dword [ebp - 0x190], 0xe6a
mov dword [ebp - 0x18c], 0x41a500
jmp 0x465448
mov ecx, eax
call fcn.00443830
test eax, eax
jns 0x46432e
mov dword [ebp - 0x1c], 0xf24
mov dword [ebp - 0x18], 0x41ab20
jmp 0x464e77
mov ecx, eax
call fcn.00443830
test eax, eax
jns 0x46432e
mov dword [ebp - 0x148], 0xf23
mov dword [ebp - 0x144], 0x41aae0
jmp 0x464eb1
mov ecx, eax
call fcn.00443830
test eax, eax
jns 0x46432e
mov dword [ebp - 0x1a0], 0xf22
mov dword [ebp - 0x19c], 0x41aab8
jmp 0x464fd0
mov ecx, eax
call fcn.00443830
test eax, eax
jns 0x46432e
mov dword [ebp - 0x1c], 0xf1f
mov dword [ebp - 0x18], 0x41ac10
jmp 0x464e77
mov ecx, eax
call fcn.00443830
test eax, eax
jns 0x46432e
mov dword [ebp - 0x1c], 0xf17
mov dword [ebp - 0x18], 0x41ab80
push eax
mov dword [ebp - 0x24], 0x41a33c
lea eax, [ebp - 0x24]
mov dword [ebp - 0x20], 0x41aa98
jmp 0x4650f1
mov ecx, eax
call fcn.00443830
test eax, eax
jns 0x46432e
mov dword [ebp - 0x148], 0xf0c
mov dword [ebp - 0x144], 0x41a500
push eax
mov dword [ebp - 0x14c], 0x41aa98
lea eax, [ebp - 0x150]
mov dword [ebp - 0x150], 0x41a33c
jmp 0x4650f1
mov ecx, eax
call fcn.00443830
test eax, eax
jns 0x46432e
push eax
mov dword [ebp - 0x164], 0x41a33c
lea eax, [ebp - 0x164]
mov dword [ebp - 0x160], 0x41aa98
mov dword [ebp - 0x15c], 0xf46
mov dword [ebp - 0x158], 0x41c58c
jmp 0x464f8f
mov ecx, eax
call fcn.00443830
test eax, eax
jns 0x46432e
push eax
mov dword [ebp - 0x198], 0x41a33c
lea eax, [ebp - 0x198]
mov dword [ebp - 0x194], 0x41aa98
mov dword [ebp - 0x190], 0xf44
mov dword [ebp - 0x18c], 0x41c520
jmp 0x464f8f
mov ecx, eax
call fcn.00443830
test eax, eax
jns 0x46432e
push eax
mov dword [ebp - 0x188], 0x41a33c
lea eax, [ebp - 0x188]
mov dword [ebp - 0x184], 0x41aa98
mov dword [ebp - 0x180], 0xf38
mov dword [ebp - 0x17c], 0x41c4c0
push eax
lea ecx, [ebp - 0x134]
call fcn.004438c1
lea ecx, [ebp - 0x2ac]
mov esi, eax
call fcn.004422a0
jmp 0x4650ff
mov ecx, eax
call fcn.00443830
test eax, eax
jns 0x46432e
mov dword [ebp - 0x1a0], 0xf00
mov dword [ebp - 0x19c], 0x41c400
push eax
mov dword [ebp - 0x1a4], 0x41aa98
lea eax, [ebp - 0x1a8]
mov dword [ebp - 0x1a8], 0x41a33c
jmp 0x4650f1
mov ecx, eax
call fcn.00443830
test eax, eax
jns 0x46432e
push eax
mov dword [ebp - 0x164], 0x41a33c
lea eax, [ebp - 0x164]
mov dword [ebp - 0x160], 0x41aa98
mov dword [ebp - 0x15c], 0xef3
mov dword [ebp - 0x158], 0x41c380
jmp 0x4650f1
mov ecx, eax
call fcn.00443830
test eax, eax
jns 0x46432e
push eax
mov dword [ebp - 0x198], 0x41a33c
lea eax, [ebp - 0x198]
mov dword [ebp - 0x194], 0x41aa98
mov dword [ebp - 0x190], 0xeec
mov dword [ebp - 0x18c], 0x41c318
jmp 0x4650f1
mov ecx, eax
call fcn.00443830
test eax, eax
jns 0x46432e
push eax
mov dword [ebp - 0x188], 0x41a33c
lea eax, [ebp - 0x188]
mov dword [ebp - 0x184], 0x41aa98
mov dword [ebp - 0x180], 0xee5
mov dword [ebp - 0x17c], 0x41c2a8
jmp 0x4650f1
mov ecx, eax
call fcn.00443830
test eax, eax
jns 0x46432e
push eax
mov dword [ebp - 0x1c8], 0x41a33c
lea eax, [ebp - 0x1c8]
mov dword [ebp - 0x1c4], 0x41aa98
mov dword [ebp - 0x1c0], 0xede
mov dword [ebp - 0x1bc], 0x41c218
push eax
lea ecx, [ebp - 0x134]
call fcn.004438c1
mov esi, eax
lea ecx, [ebp - 0x264]
call fcn.004422a0
jmp 0x465471
mov ecx, eax
call fcn.00443830
test eax, eax
jns 0x46432e
mov dword [ebp - 0x1d4], 0xec5
mov dword [ebp - 0x1d0], 0x41c1b0
jmp 0x4652ef
mov ecx, eax
call fcn.00443830
test eax, eax
jns 0x46432e
mov dword [ebp - 0x1c], 0xebd
mov dword [ebp - 0x18], 0x41c138
jmp 0x46534b
mov ecx, eax
call fcn.00443830
test eax, eax
jns 0x46432e
mov dword [ebp - 0x1a0], 0xeb3
mov dword [ebp - 0x19c], 0x41c048
jmp 0x4653c8
mov ecx, eax
call fcn.00443830
test eax, eax
jns 0x46432e
mov dword [ebp - 0x15c], 0xeac
mov dword [ebp - 0x158], 0x41bfe0
jmp 0x465408
mov ecx, eax
call fcn.00443830
test eax, eax
jns 0x46432e
mov dword [ebp - 0x190], 0xea4
mov dword [ebp - 0x18c], 0x41bf70
jmp 0x465448
mov ecx, eax
call fcn.00443830
test eax, eax
jns 0x46432e
mov dword [ebp - 0x180], 0xe9a
mov dword [ebp - 0x17c], 0x41bf18
jmp 0x465269
mov ecx, eax
call fcn.00443830
test eax, eax
jns 0x46432e
mov dword [ebp - 0x1c0], 0xe93
mov dword [ebp - 0x1bc], 0x41ab20
jmp 0x4652ac
mov ecx, eax
call fcn.00443830
test eax, eax
jns 0x46432e
mov dword [ebp - 0x1d4], 0xe91
mov dword [ebp - 0x1d0], 0x41bea0
jmp 0x4652ef
mov ecx, eax
call fcn.00443830
test eax, eax
jns 0x46432e
mov dword [ebp - 0x180], 0xe5e
mov dword [ebp - 0x17c], 0x41bde0
push eax
mov dword [ebp - 0x184], 0x41aa98
lea eax, [ebp - 0x188]
mov dword [ebp - 0x188], 0x41a33c
jmp 0x465463
mov ecx, eax
call fcn.00443830
test eax, eax
jns 0x46432e
mov dword [ebp - 0x1c0], 0xe42
mov dword [ebp - 0x1bc], 0x41bc90
push eax
mov dword [ebp - 0x1c4], 0x41aa98
lea eax, [ebp - 0x1c8]
mov dword [ebp - 0x1c8], 0x41a33c
jmp 0x465463
mov ecx, eax
call fcn.00443830
test eax, eax
jns 0x46432e
mov dword [ebp - 0x1d4], 0xe3d
mov dword [ebp - 0x1d0], 0x41bbf8
push eax
mov dword [ebp - 0x1dc], 0x41a33c
lea eax, [ebp - 0x1dc]
mov dword [ebp - 0x1d8], 0x41aa98
jmp 0x465463
mov ecx, eax
call fcn.00443830
test eax, eax
jns 0x46432e
mov dword [ebp - 0x1c], 0xe36
mov dword [ebp - 0x18], 0x41bb88
jmp 0x46534b
mov ecx, eax
call fcn.00443830
test eax, eax
jns 0x46432e
mov dword [ebp - 0x1c], 0xe2f
mov dword [ebp - 0x18], 0x41bb28
push eax
mov dword [ebp - 0x20], 0x41aa98
lea eax, [ebp - 0x24]
mov dword [ebp - 0x24], 0x41a33c
jmp 0x465463
mov ecx, eax
call fcn.00443830
test eax, eax
jns 0x46432e
mov dword [ebp - 0x148], 0xe28
mov dword [ebp - 0x144], 0x41bac0
push eax
mov dword [ebp - 0x150], 0x41a33c
lea eax, [ebp - 0x150]
mov dword [ebp - 0x14c], 0x41aa98
jmp 0x465463
mov ecx, eax
call fcn.00443830
test eax, eax
jns 0x46432e
mov dword [ebp - 0x1a0], 0xe21
mov dword [ebp - 0x19c], 0x41ba70
push eax
mov dword [ebp - 0x1a8], 0x41a33c
lea eax, [ebp - 0x1a8]
mov dword [ebp - 0x1a4], 0x41aa98
jmp 0x465463
mov ecx, eax
call fcn.00443830
test eax, eax
jns 0x46432e
mov dword [ebp - 0x15c], 0xe19
mov dword [ebp - 0x158], 0x41ba08
push eax
mov dword [ebp - 0x164], 0x41a33c
lea eax, [ebp - 0x164]
mov dword [ebp - 0x160], 0x41aa98
jmp 0x465463
mov ecx, eax
call fcn.00443830
test eax, eax
jns 0x46432e
mov dword [ebp - 0x190], 0xe0f
mov dword [ebp - 0x18c], 0x41b968
push eax
mov dword [ebp - 0x198], 0x41a33c
lea eax, [ebp - 0x198]
mov dword [ebp - 0x194], 0x41aa98
push eax
lea ecx, [ebp - 0x134]
call fcn.004438c1
mov esi, eax
lea ecx, [ebp - 0x248]
call fcn.004422a0
jmp 0x4654ca
mov ecx, eax
call fcn.00443830
test eax, eax
jns 0x46432e
push eax
lea eax, [ebp - 0x188]
mov dword [ebp - 0x188], 0x41a33c
push eax
lea ecx, [ebp - 0x134]
mov dword [ebp - 0x184], 0x41aa98
mov dword [ebp - 0x180], 0xe07
mov dword [ebp - 0x17c], 0x41b910
call fcn.004438c1
mov esi, eax
lea ecx, [ebp - 0x22c]
call fcn.004422a0
jmp 0x4655f8
mov ecx, eax
call fcn.00443830
test eax, eax
jns 0x46432e
push eax
mov dword [ebp - 0x1c8], 0x41a33c
lea eax, [ebp - 0x1c8]
mov dword [ebp - 0x1c4], 0x41aa98
mov dword [ebp - 0x1c0], 0xe01
mov dword [ebp - 0x1bc], 0x41b8a8
jmp 0x4655ea
mov ecx, 0xc0150006
call fcn.00443830
test eax, eax
jns 0x46432e
and dword [ebp - 0x1d0], 0
lea ecx, [ebp - 0x134]
push eax
lea eax, [ebp - 0x1dc]
mov dword [ebp - 0x1dc], 0x41a33c
push eax
mov dword [ebp - 0x1d8], 0x41aa98
mov dword [ebp - 0x1d4], 0xdfa
call fcn.004438d5
jmp 0x4655f6
mov ecx, eax
call fcn.00443830
test eax, eax
jns 0x46432e
push eax
mov dword [ebp - 0x150], 0x41a33c
lea eax, [ebp - 0x150]
mov dword [ebp - 0x14c], 0x41aa98
mov dword [ebp - 0x148], 0xdf7
mov dword [ebp - 0x144], 0x41b840
jmp 0x4655ea
mov ecx, eax
call fcn.00443830
test eax, eax
jns 0x46432e
push eax
mov dword [ebp - 0x188], 0x41a33c
lea eax, [ebp - 0x188]
mov dword [ebp - 0x184], 0x41aa98
mov dword [ebp - 0x180], 0xdf2
mov dword [ebp - 0x17c], 0x41b7e8
push eax
lea ecx, [ebp - 0x134]
call fcn.004438c1
mov esi, eax
lea ecx, [ebp - 0x284]
call fcn.004422a0
jmp 0x465880
mov ecx, eax
call fcn.00443830
test eax, eax
jns 0x46432e
push eax
mov dword [ebp - 0x1c8], 0x41a33c
lea eax, [ebp - 0x1c8]
mov dword [ebp - 0x1c4], 0x41aa98
mov dword [ebp - 0x1c0], 0xdec
mov dword [ebp - 0x1bc], 0x41b780
jmp 0x465872
mov ecx, 0xc0150006
call fcn.00443830
test eax, eax
jns 0x46432e
and dword [ebp - 0x230], 0
push eax
mov dword [ebp - 0x23c], 0x41a33c
lea eax, [ebp - 0x23c]
mov dword [ebp - 0x238], 0x41aa98
mov dword [ebp - 0x234], 0xde5
jmp 0x46235a
mov ecx, eax
call fcn.00443830
test eax, eax
jns 0x46432e
mov dword [ebp - 0x210], 0xde2
mov dword [ebp - 0x20c], 0x41b718
jmp 0x465857
mov ecx, eax
call fcn.00443830
test eax, eax
jns 0x46432e
mov dword [ebp - 0x210], 0xda9
mov dword [ebp - 0x20c], 0x41b568
jmp 0x465857
mov ecx, eax
call fcn.00443830
test eax, eax
jns 0x46432e
mov dword [ebp - 0xa4c], 0xd98
mov dword [ebp - 0xa48], 0x41b4d8
jmp 0x4657d7
mov ecx, eax
call fcn.00443830
test eax, eax
jns 0x46432e
push eax
mov dword [ebp - 0xa80], 0x41a33c
lea eax, [ebp - 0xa80]
mov dword [ebp - 0xa7c], 0x41aa98
mov dword [ebp - 0xa78], 0xd88
mov dword [ebp - 0xa74], 0x41b458
jmp 0x465872
mov ecx, eax
call fcn.00443830
test eax, eax
jns 0x46432e
push eax
mov dword [ebp - 0x23c], 0x41a33c
lea eax, [ebp - 0x23c]
mov dword [ebp - 0x238], 0x41aa98
mov dword [ebp - 0x234], 0xd78
mov dword [ebp - 0x230], 0x41b3d8
jmp 0x465872
mov ecx, eax
call fcn.00443830
test eax, eax
jns 0x46432e
mov dword [ebp - 0x210], 0xd68
mov dword [ebp - 0x20c], 0x41b348
jmp 0x465857
mov ecx, eax
call fcn.00443830
test eax, eax
jns 0x46432e
mov dword [ebp - 0xa4c], 0xd58
mov dword [ebp - 0xa48], 0x41b2b8
push eax
mov dword [ebp - 0xa50], 0x41aa98
lea eax, [ebp - 0xa54]
mov dword [ebp - 0xa54], 0x41a33c
jmp 0x465872
mov ecx, eax
call fcn.00443830
test eax, eax
jns 0x46432e
push eax
mov dword [ebp - 0x1dc], 0x41a33c
lea eax, [ebp - 0x1dc]
mov dword [ebp - 0x1d8], 0x41aa98
mov dword [ebp - 0x1d4], 0xce8
mov dword [ebp - 0x1d0], 0x41af78
jmp 0x465872
mov ecx, eax
call fcn.00443830
test eax, eax
jns 0x46432e
mov dword [ebp - 0x210], 0xcd1
mov dword [ebp - 0x20c], 0x41ae88
push eax
mov dword [ebp - 0x214], 0x41aa98
lea eax, [ebp - 0x218]
mov dword [ebp - 0x218], 0x41a33c
push eax
lea ecx, [ebp - 0x134]
call fcn.004438c1
mov esi, eax
lea ecx, [ebp - 0x1b0]
call fcn.00442526
lea ecx, [ebp - 0x988]
call fcn.00465b28
lea ecx, [ebp - 0x16c]
call fcn.00442526
lea ecx, [ebp - 0x1b8]
call fcn.0045c617
lea ecx, [ebp - 0x138]
call fcn.004508db
lea ecx, [ebp - 0x1e8]
call fcn.004422a0
lea ecx, [ebp - 0x140]
call fcn.00442526
lea ecx, [ebp - 0x178]
call fcn.004422a0
lea ecx, [ebp - 0x200]
call fcn.00442526
jmp 0x465b1b
and dword [ebp - 0x144], 0
lea ecx, [ebp - 0x150]
mov eax, 0xc000000d
mov dword [ebp - 0x150], 0x41a33c
push eax
mov edx, 0x418290
mov dword [ebp - 0x14c], 0x41aa98
mov dword [ebp - 0x148], 0xc7b
mov dword [ebp - 0x134], eax
call fcn.004f7c89
mov esi, dword [ebp - 0x134]
lea ecx, [ebp - 0x1b0]
mov byte [ebp - 4], 0x5b
call fcn.004526ed
lea ecx, [ebp - 0x988]
call fcn.00465b28
lea ecx, [ebp - 0x16c]
mov byte [ebp - 4], 0x5c
call fcn.004526ed
lea ecx, [ebp - 0x1b8]
mov byte [ebp - 4], 0x5d
call fcn.0046a3dd
lea ecx, [ebp - 0x138]
mov byte [ebp - 4], 0x5e
call fcn.00451ecc
lea ecx, [ebp - 0x1e8]
mov byte [ebp - 4], 0x5f
call fcn.0044387a
lea ecx, [ebp - 0x140]
mov byte [ebp - 4], 0x60
call fcn.004526ed
lea ecx, [ebp - 0x178]
mov byte [ebp - 4], 0x61
call fcn.0044387a
mov dword [ebp - 4], 0x62
jmp 0x465b10
mov dword [ebp - 0x134], esi
lea ecx, [ebp - 0x1b0]
mov byte [ebp - 4], 0x53
call fcn.004526ed
lea ecx, [ebp - 0x988]
call fcn.00465b28
lea ecx, [ebp - 0x16c]
mov byte [ebp - 4], 0x54
call fcn.004526ed
lea ecx, [ebp - 0x1b8]
mov byte [ebp - 4], 0x55
call fcn.0046a3dd
lea ecx, [ebp - 0x138]
mov byte [ebp - 4], 0x56
call fcn.00451ecc
lea ecx, [ebp - 0x1e8]
mov byte [ebp - 4], 0x57
call fcn.0044387a
lea ecx, [ebp - 0x140]
mov byte [ebp - 4], 0x58
call fcn.004526ed
lea ecx, [ebp - 0x178]
mov byte [ebp - 4], 0x59
call fcn.0044387a
mov dword [ebp - 4], 0x5a
jmp 0x465b10
lea ecx, [ebp - 0x988]
mov dword [ebp - 0x134], esi
call fcn.00465b28
lea ecx, [ebp - 0x16c]
mov byte [ebp - 4], 0x4b
call fcn.004526ed
lea ecx, [ebp - 0x1b8]
mov byte [ebp - 4], 0x4c
call fcn.0046a3dd
lea ecx, [ebp - 0x138]
mov byte [ebp - 4], 0x4d
call fcn.00451ecc
lea ecx, [ebp - 0x1e8]
mov byte [ebp - 4], 0x4e
call fcn.0044387a
lea ecx, [ebp - 0x140]
mov byte [ebp - 4], 0x4f
call fcn.004526ed
lea ecx, [ebp - 0x178]
mov byte [ebp - 4], 0x50
call fcn.0044387a
mov dword [ebp - 4], 0x51
jmp 0x465b10
mov dword [ebp - 0x134], esi
lea ecx, [ebp - 0x16c]
mov byte [ebp - 4], 0x43
call fcn.004526ed
lea ecx, [ebp - 0x1b8]
mov byte [ebp - 4], 0x44
call fcn.0046a3dd
lea ecx, [ebp - 0x138]
mov byte [ebp - 4], 0x45
call fcn.00451ecc
lea ecx, [ebp - 0x1e8]
mov byte [ebp - 4], 0x46
call fcn.0044387a
lea ecx, [ebp - 0x140]
mov byte [ebp - 4], 0x47
call fcn.004526ed
lea ecx, [ebp - 0x178]
mov byte [ebp - 4], 0x48
call fcn.0044387a
mov dword [ebp - 4], 0x49
lea ecx, [ebp - 0x200]
call fcn.004526ed
mov eax, esi
jmp 0x46420c