Function at 0x52bdf0
Capabilities:
Check http status code

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5c61fa
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x478
mov eax, dword [0x6c21e4]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x3f4], edi
push 0x63c1cc
lea ecx, [edi + 0x13e8]
call fcn.00516e30
push 2
push 0x62ef48
mov ecx, edi
call fcn.0044fbd0
mov ecx, edi
mov dword [ebp - 0x408], eax
call fcn.00482e60
test al, al
je 0x532fc4
mov esi, dword [edi + 0x14a8]
lea ecx, [edi + 0x12b4]
push 1
push 0x648f20
mov dword [ebp - 0x3d0], esi
call fcn.00516b80
push 0x2e
push 0x78
push 2
push 5
mov ecx, edi
call fcn.00450560
movsd xmm1, qword [0x6a4118]
mov ecx, esi
push 0
push str.Arial
push 1
push 0x320
call fcn.004f4680
push dword [edi + 0x13d8]
mov ecx, esi
call fcn.004f4860
push 0
mov ecx, esi
call fcn.004f4710
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x1e
push 0xc8
push 0xa
push 0x82
push 0x62ef48
mov ecx, esi
call fcn.004f10a0
push 0
push ecx
mov dword [esp], 0x41500000
mov ecx, edi
push 0x62e274
push 0x1e
push 0x50
push 0xa
push 0x21c
push 0x7d
push 0x62e2a0
call fcn.00450270
push 0
push ecx
mov dword [esp], 0x41500000
mov ecx, edi
push 0x6338c0
push 0x1e
push 0x64
push 0xa
push 0x276
push 0xb3
push 0x62e268
mov dword [edi + 0x12d4], eax
call fcn.00450270
xorps xmm0, xmm0
mov dword [ebp - 0x420], eax
lea ecx, [ebp - 0x3c]
movq qword [ebp - 0x3c], xmm0
mov dword [ebp - 0x34], 0
call fcn.00516ef0
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x68]
xorps xmm0, xmm0
mov dword [ebp - 0x60], 0
movq qword [ebp - 0x68], xmm0
call fcn.00516ef0
push 0
push 0xffffffffffffffff
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x84]
push 0x648f90
mov dword [ebp - 0x84], 0
call fcn.00511740
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xfc]
xorps xmm0, xmm0
mov dword [ebp - 0xf4], 0
movq qword [ebp - 0xfc], xmm0
call fcn.00511780
push 0
push str.Arial
push 1
mov byte [ebp - 4], 3
mov ecx, esi
movsd xmm1, qword [0x6a40e0]
push 0x190
call fcn.004f4680
push 0xffffffffffffffff
mov ecx, esi
call fcn.004f4860
push 0x400
mov ecx, esi
call fcn.004f4710
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x1ef
push 0x2e4
push 0x32
push 5
mov ecx, esi
call fcn.004f04b0
push 0
mov ecx, esi
mov dword [ebp - 0x3f8], eax
call fcn.004f4710
push 0x648ff4
push 0
push dword [ebp - 0x3f8]
mov ecx, esi
call fcn.004f0340
push 0x10
push 0x10
push 0
push 0
push 0
push 0x97
mov ecx, edi
call fcn.00473950
push eax
push 0xffffffffffffffff
push 0xffffffffffffffff
mov ecx, esi
call fcn.004eeae0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x6e
push 0x2d0
push 0xa
push 5
push 0x649008
mov ecx, esi
call fcn.004f1160
push 0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x14
push 0x29e
push 0x28
push 0x1e
push 0
mov ecx, esi
call fcn.004f1cf0
movsd xmm0, qword [0x6a40e0]
sub esp, 8
mov ecx, esi
mov dword [ebp - 0x3e0], eax
movsd qword [esp], xmm0
push 0
push 0
push 0
push 0x190
push 0xffffffffffffffff
call fcn.004ef2f0
push dword [ebp - 0x3e0]
mov ecx, esi
call fcn.004f5a60
mov dword [ebp - 0x3e8], eax
xor esi, esi
mov edi, eax
nop
push esi
lea ecx, [ebp - 0x3c]
call fcn.00515d60
lea eax, [ebp - 0x68]
push eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x649098
lea ecx, [ebp - 0x3c]
call fcn.005150b0
mov ecx, eax
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x84]
call fcn.00511410
test al, al
je 0x52c140
lea ecx, [ebp - 0x68]
call fcn.00516cc0
test eax, eax
je 0x52c13a
lea ecx, [ebp - 0x68]
call fcn.00516ab0
push eax
push 0
push 0x143
push edi
call dword [0x5cd800]
inc esi
cmp esi, 0x1e
jl 0x52c0d0
mov edi, dword [ebp - 0x3f4]
push 0
push ecx
mov dword [esp], 0x41500000
mov ecx, edi
push 0x6490a0
push 0x1c
push 0x87
push 0x50
push 0x3c
push 0x72
push 0x6490ec
call fcn.00450270
push 0
push ecx
mov dword [esp], 0x41500000
mov ecx, edi
push 0x649110
push 0x1c
push 0x87
push 0x50
push 0xd7
push 0x78
push 0x63b420
mov dword [ebp - 0x478], eax
call fcn.00450270
push 0
push ecx
mov dword [esp], 0x41500000
mov ecx, edi
push 0x649158
push 0x1c
push 0x87
push 0x50
push 0x172
push 0x9c
push 0x6491e0
mov dword [ebp - 0x470], eax
call fcn.00450270
push 0
push ecx
mov dword [esp], 0x41500000
mov ecx, edi
push 0x6491f8
push 0x1c
push 0x87
push 0x50
push 0x20d
push 0x7c
push 0x64924c
mov dword [ebp - 0x424], eax
call fcn.00450270
mov esi, dword [ebp - 0x3d0]
mov ecx, esi
push 0x10020
push 0x1000000d
push 0x14a
push 0x2d0
push 0x82
push 5
push 0x5f3998
push 0x649268
mov dword [ebp - 0x474], eax
call fcn.004f0e40
movsd xmm0, qword [0x6a40e0]
sub esp, 8
mov ecx, esi
mov dword [ebp - 0x40c], eax
movsd qword [esp], xmm0
push 0
push 0
push 0
push 0x190
push 0xffffffffffffffff
call fcn.004ef2f0
push 0
push 0x649298
push 0xffffffffffffffff
mov ecx, edi
call fcn.0044bcf0
push dword [ebp - 0x40c]
mov ecx, esi
call fcn.004f5a60
push 0
push 0
push 0x108e
push eax
call dword [0x5cd800]
movsd xmm0, qword [edi + 8]
xor eax, eax
comisd xmm0, xmmword [0x6a40a0]
push 0
mov ecx, 8
cmovae eax, ecx
mov ecx, esi
push eax
push 0xffffffffffffffff
push 0
push 0x649310
push 0
push dword [ebp - 0x40c]
call fcn.004ec730
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0xffffffffffffffff
push 0
push 0x649364
mov ecx, esi
call fcn.004ec540
push 0
push 0x20
push 0x20
push 0xbd
mov ecx, edi
mov esi, eax
call fcn.00473950
mov ecx, dword [ebp - 0x3d0]
push eax
push eax
push esi
push 0xffffffffffffffff
call fcn.004eb4a0
mov ecx, dword [ebp - 0x3d0]
push 1
push 0x649380
push esi
push 0xffffffffffffffff
call fcn.004eb080
mov ecx, dword [ebp - 0x3d0]
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0xffffffffffffffff
push 0
push 0x649398
call fcn.004ec540
push 0
push 0x20
push 0x20
push 0xe9
mov ecx, edi
mov esi, eax
call fcn.00473950
mov ecx, dword [ebp - 0x3d0]
push eax
push eax
push esi
push 0xffffffffffffffff
call fcn.004eb4a0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6493b4
push 0x5ed514
push dword [edi + 0x24]
lea ecx, [ebp - 0x3c]
call fcn.00516b20
push 1
lea ecx, [ebp - 0x3c]
call fcn.00516ab0
mov ecx, dword [ebp - 0x3d0]
push eax
push esi
push 0xffffffffffffffff
call fcn.004eb080
mov ecx, dword [ebp - 0x3d0]
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0xffffffffffffffff
push 0
push 0x6493e4
call fcn.004ec540
push 0
push 0x20
push 0x20
push 0xef
mov ecx, edi
mov esi, eax
call fcn.00473950
mov ecx, dword [ebp - 0x3d0]
push eax
push eax
push esi
push 0xffffffffffffffff
call fcn.004eb4a0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [edi + 0x1424]
push 0x649410
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x3c]
call fcn.00516b20
push 1
lea ecx, [ebp - 0x3c]
call fcn.00516ab0
mov ecx, dword [ebp - 0x3d0]
push eax
push esi
push 0xffffffffffffffff
call fcn.004eb080
mov ecx, dword [ebp - 0x3d0]
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0xffffffffffffffff
push 0
push 0x64946c
call fcn.004ec540
push 0
push 0x20
push 0x20
push 0xbc
mov ecx, edi
mov esi, eax
call fcn.00473950
mov ecx, dword [ebp - 0x3d0]
push eax
push eax
push esi
push 0xffffffffffffffff
call fcn.004eb4a0
mov ecx, dword [ebp - 0x3d0]
push 1
push 0x649494
push esi
push 0xffffffffffffffff
call fcn.004eb080
mov ecx, dword [ebp - 0x3d0]
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0xffffffffffffffff
push 0
push 0x6494ac
call fcn.004ec540
push 0
push 0x20
push 0x20
push 0xb8
mov ecx, edi
mov esi, eax
call fcn.00473950
mov ecx, dword [ebp - 0x3d0]
push eax
push eax
push esi
push 0xffffffffffffffff
call fcn.004eb4a0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6494d8
push str._rundll32.exe
push dword [edi + 0x24]
lea ecx, [ebp - 0x3c]
call fcn.00516b20
push 1
lea ecx, [ebp - 0x3c]
call fcn.00516ab0
mov ecx, dword [ebp - 0x3d0]
push eax
push esi
push 0xffffffffffffffff
call fcn.004eb080
mov ecx, dword [ebp - 0x3d0]
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0xffffffffffffffff
push 0
push 0x64950c
call fcn.004ec540
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [edi + 0x154]
mov esi, eax
push 0x649538
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x3c]
call fcn.00516b20
push 0x20
push 0x20
push 0
lea ecx, [ebp - 0x3c]
call fcn.00516ab0
mov ecx, dword [ebp - 0x3d0]
push eax
push esi
push 0xffffffffffffffff
call fcn.004eba30
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x649538
lea ecx, [edi + 0x154]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x3c]
call fcn.00516b20
push 1
lea ecx, [ebp - 0x3c]
call fcn.00516ab0
mov ecx, dword [ebp - 0x3d0]
push eax
push esi
push 0xffffffffffffffff
call fcn.004eb080
mov ecx, dword [ebp - 0x3d0]
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0xffffffffffffffff
push 0
push 0x649580
call fcn.004ec540
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6495a8
push dword [edi + 0x24]
lea ecx, [ebp - 0x3c]
mov esi, eax
call fcn.00516b20
push 0x20
push 0x20
push 0
lea ecx, [ebp - 0x3c]
call fcn.00516ab0
mov ecx, dword [ebp - 0x3d0]
push eax
push esi
push 0xffffffffffffffff
call fcn.004eba30
mov ecx, dword [ebp - 0x3d0]
push 1
push 0x649580
push esi
push 0xffffffffffffffff
call fcn.004eb080
mov ecx, dword [ebp - 0x3d0]
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0xffffffffffffffff
push 0
push 0x6495c4
call fcn.004ec540
push 0
push 0x20
push 0x20
push 0xbb
mov ecx, edi
mov esi, eax
call fcn.00473950
mov ecx, dword [ebp - 0x3d0]
push eax
push eax
push esi
push 0xffffffffffffffff
call fcn.004eb4a0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6495f0
push dword [edi + 0x24]
lea ecx, [ebp - 0x3c]
call fcn.00516b20
push 1
lea ecx, [ebp - 0x3c]
call fcn.00516ab0
mov ecx, dword [ebp - 0x3d0]
push eax
push esi
push 0xffffffffffffffff
call fcn.004eb080
mov ecx, dword [ebp - 0x3d0]
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0xffffffffffffffff
push 0
push 0x649630
call fcn.004ec540
push 0
push 0x20
push 0x20
push 0xb4
mov ecx, edi
mov esi, eax
call fcn.00473950
mov ecx, dword [ebp - 0x3d0]
push eax
push eax
push esi
push 0xffffffffffffffff
call fcn.004eb4a0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x611214
push dword [edi + 0x24]
lea ecx, [ebp - 0x3c]
call fcn.00516b20
push 1
lea ecx, [ebp - 0x3c]
call fcn.00516ab0
mov ecx, dword [ebp - 0x3d0]
push eax
push esi
push 0xffffffffffffffff
call fcn.004eb080
mov ecx, dword [ebp - 0x3d0]
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0xffffffffffffffff
push 0
push 0x649650
call fcn.004ec540
push 0
push 0x20
push 0x20
push 0xba
mov ecx, edi
mov esi, eax
call fcn.00473950
mov ecx, dword [ebp - 0x3d0]
push eax
push eax
push esi
push 0xffffffffffffffff
call fcn.004eb4a0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x649678
push dword [edi + 0x24]
lea ecx, [ebp - 0x3c]
call fcn.00516b20
push 1
lea ecx, [ebp - 0x3c]
call fcn.00516ab0
mov ecx, dword [ebp - 0x3d0]
push eax
push esi
push 0xffffffffffffffff
call fcn.004eb080
mov ecx, dword [ebp - 0x3d0]
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0xffffffffffffffff
push 0
push 0x6496ac
call fcn.004ec540
push 0
push 0x20
push 0x20
push 0xb5
mov ecx, edi
mov esi, eax
call fcn.00473950
mov ecx, dword [ebp - 0x3d0]
push eax
push eax
push esi
push 0xffffffffffffffff
call fcn.004eb4a0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6496c8
push 0x649700
push dword [edi + 0x24]
lea ecx, [ebp - 0x3c]
call fcn.00516b20
push 1
lea ecx, [ebp - 0x3c]
call fcn.00516ab0
mov ecx, dword [ebp - 0x3d0]
push eax
push esi
push 0xffffffffffffffff
call fcn.004eb080
mov ecx, dword [ebp - 0x3d0]
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0xffffffffffffffff
push 0
push 0x649720
call fcn.004ec540
mov esi, eax
push 0
push 0x20
push 0x20
push 0xe1
mov ecx, edi
call fcn.00473950
mov ecx, dword [ebp - 0x3d0]
push eax
push eax
push esi
push 0xffffffffffffffff
call fcn.004eb4a0
mov ecx, dword [ebp - 0x3d0]
push 1
push 0x64973c
push esi
push 0xffffffffffffffff
call fcn.004eb080
mov ecx, dword [ebp - 0x3d0]
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0xffffffffffffffff
push 0
push 0x649760
call fcn.004ec540
push 0
push 0x20
push 0x20
push 0xe2
mov ecx, edi
mov esi, eax
call fcn.00473950
mov ecx, dword [ebp - 0x3d0]
push eax
push eax
push esi
push 0xffffffffffffffff
call fcn.004eb4a0
mov ecx, dword [ebp - 0x3d0]
push 1
push 0x64978c
push esi
push 0xffffffffffffffff
call fcn.004eb080
mov ecx, dword [ebp - 0x3d0]
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0xffffffffffffffff
push 0
push 0x6497a8
call fcn.004ec540
push 0
push 0x20
push 0x20
push 0xb9
mov ecx, edi
mov esi, eax
call fcn.00473950
mov ecx, dword [ebp - 0x3d0]
push eax
push eax
push esi
push 0xffffffffffffffff
call fcn.004eb4a0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6497c8
push 0x6497e4
push dword [edi + 0x24]
lea ecx, [ebp - 0x3c]
call fcn.00516b20
push 1
lea ecx, [ebp - 0x3c]
call fcn.00516ab0
mov ecx, dword [ebp - 0x3d0]
push eax
push esi
push 0xffffffffffffffff
call fcn.004eb080
mov ecx, dword [ebp - 0x3d0]
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0xffffffffffffffff
push 0
push 0x6497f8
call fcn.004ec540
push 0
push 0x20
push 0x20
push 0xc3
mov ecx, edi
mov esi, eax
call fcn.00473950
mov ecx, dword [ebp - 0x3d0]
push eax
push eax
push esi
push 0xffffffffffffffff
call fcn.004eb4a0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [edi + 0x1c]
lea ecx, [ebp - 0x3c]
push 0x62135c
push dword [edi + 0x24]
call fcn.00516b20
push 1
lea ecx, [ebp - 0x3c]
call fcn.00516ab0
push eax
push esi
mov esi, dword [ebp - 0x3d0]
mov ecx, esi
push 0xffffffffffffffff
call fcn.004eb080
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0xffffffffffffffff
push 0
push 0x649814
mov ecx, esi
call fcn.004ec540
push 0
push 0x20
push 0x20
push 0x71
mov ecx, edi
mov dword [ebp - 0x3ac], eax
call fcn.00473950
push eax
push eax
push dword [ebp - 0x3ac]
mov ecx, esi
push 0xffffffffffffffff
call fcn.004eb4a0
movsd xmm0, qword [0x6a40a8]
lea ecx, [ebp - 0x3c]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
comisd xmm0, xmmword [edi + 8]
push 0
push 0
jbe 0x52c9ff
push 0x649838
jmp 0x52ca04
push 0x6283f4
push dword [edi + 0x24]
call fcn.00516b20
push 1
lea ecx, [ebp - 0x3c]
call fcn.00516ab0
push eax
push dword [ebp - 0x3ac]
mov ecx, esi
push 0xffffffffffffffff
call fcn.004eb080
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0xffffffffffffffff
push 0
push 0x64985c
mov ecx, esi
call fcn.004ec540
push 0
push 0x20
push 0x20
push 0xf6
mov ecx, edi
mov esi, eax
call fcn.00473950
mov ecx, dword [ebp - 0x3d0]
push eax
push eax
push esi
push 0xffffffffffffffff
call fcn.004eb4a0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x64987c
push dword [edi + 0x24]
lea ecx, [ebp - 0x3c]
call fcn.00516b20
push 1
lea ecx, [ebp - 0x3c]
call fcn.00516ab0
mov ecx, dword [ebp - 0x3d0]
push eax
push esi
push 0xffffffffffffffff
call fcn.004eb080
mov ecx, dword [ebp - 0x3d0]
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0xffffffffffffffff
push 0
push 0x6498a8
call fcn.004ec540
push 0
push 0x20
push 0x20
push 0xb4
mov ecx, edi
mov esi, eax
call fcn.00473950
mov ecx, dword [ebp - 0x3d0]
push eax
push eax
push esi
push 0xffffffffffffffff
call fcn.004eb4a0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6498bc
push 0x611214
push dword [edi + 0x24]
lea ecx, [ebp - 0x3c]
call fcn.00516b20
push 1
lea ecx, [ebp - 0x3c]
call fcn.00516ab0
mov ecx, dword [ebp - 0x3d0]
push eax
push esi
push 0xffffffffffffffff
call fcn.004eb080
mov ecx, dword [ebp - 0x3d0]
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0xffffffffffffffff
push 0
push 0x6498d8
call fcn.004ec540
push 0
push 0x20
push 0x20
push 0xee
mov ecx, edi
mov esi, eax
call fcn.00473950
mov ecx, dword [ebp - 0x3d0]
push eax
push eax
push esi
push 0xffffffffffffffff
call fcn.004eb4a0
mov ecx, dword [ebp - 0x3d0]
push 1
push 0x6498fc
push esi
push 0xffffffffffffffff
call fcn.004eb080
mov ecx, dword [ebp - 0x3d0]
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0xffffffffffffffff
push 0
push 0x649910
call fcn.004ec540
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x649948
push dword [edi + 0x24]
lea ecx, [ebp - 0x3c]
mov esi, eax
call fcn.00516b20
push 0x20
push 0x20
push 0
lea ecx, [ebp - 0x3c]
call fcn.00516ab0
mov ecx, dword [ebp - 0x3d0]
push eax
push esi
push 0xffffffffffffffff
call fcn.004eba30
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x649964
push dword [edi + 0x24]
lea ecx, [ebp - 0x3c]
call fcn.00516b20
push 1
lea ecx, [ebp - 0x3c]
call fcn.00516ab0
mov ecx, dword [ebp - 0x3d0]
push eax
push esi
push 0xffffffffffffffff
call fcn.004eb080
mov ecx, dword [ebp - 0x3d0]
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0xffffffffffffffff
push 0
push 0x649980
call fcn.004ec540
push 0
push 0x20
push 0x20
push 0xc0
mov ecx, edi
mov esi, eax
call fcn.00473950
mov ecx, dword [ebp - 0x3d0]
push eax
push eax
push esi
push 0xffffffffffffffff
call fcn.004eb4a0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x64999c
push dword [edi + 0x24]
lea ecx, [ebp - 0x3c]
call fcn.00516b20
push 1
lea ecx, [ebp - 0x3c]
call fcn.00516ab0
mov ecx, dword [ebp - 0x3d0]
push eax
push esi
push 0xffffffffffffffff
call fcn.004eb080
mov ecx, dword [ebp - 0x3d0]
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0xffffffffffffffff
push 0
push 0x6499d0
call fcn.004ec540
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str.explorer.exe
push dword [edi + 0x20]
mov esi, eax
lea ecx, [ebp - 0x3c]
call fcn.00516b20
push 0x20
push 0x20
push 0
lea ecx, [ebp - 0x3c]
call fcn.00516ab0
mov ecx, dword [ebp - 0x3d0]
push eax
push esi
push 0xffffffffffffffff
call fcn.004eba30
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6499f0
push str._rundll32.exe
push dword [edi + 0x24]
lea ecx, [ebp - 0x3c]
call fcn.00516b20
push 1
lea ecx, [ebp - 0x3c]
call fcn.00516ab0
mov ecx, dword [ebp - 0x3d0]
push eax
push esi
push 0xffffffffffffffff
call fcn.004eb080
mov ecx, dword [ebp - 0x3d0]
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0xffffffffffffffff
push 0
push 0x649a28
call fcn.004ec540
push 0
push 0x20
push 0x20
push 0xf3
mov ecx, edi
mov esi, eax
call fcn.00473950
mov ecx, dword [ebp - 0x3d0]
push eax
push eax
push esi
push 0xffffffffffffffff
call fcn.004eb4a0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x649a38
lea ecx, [edi + 0x1424]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x3c]
call fcn.00516b20
push 1
lea ecx, [ebp - 0x3c]
call fcn.00516ab0
mov ecx, dword [ebp - 0x3d0]
push eax
push esi
push 0xffffffffffffffff
call fcn.004eb080
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
mov ecx, dword [ebp - 0x3d0]
push 0xffffffffffffffff
push 0
push 0x649aac
call fcn.004ec540
push 0
push 0x20
push 0x20
push 0xf1
mov ecx, edi
mov esi, eax
call fcn.00473950
mov ecx, dword [ebp - 0x3d0]
push eax
push eax
push esi
push 0xffffffffffffffff
call fcn.004eb4a0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x649ae8
lea ecx, [edi + 0x1424]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x3c]
call fcn.00516b20
push 1
lea ecx, [ebp - 0x3c]
call fcn.00516ab0
mov ecx, dword [ebp - 0x3d0]
push eax
push esi
push 0xffffffffffffffff
call fcn.004eb080
mov ecx, dword [ebp - 0x3d0]
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0xffffffffffffffff
push 0
push 0x649b44
call fcn.004ec540
push 0
push 0x20
push 0x20
push 0xb5
mov ecx, edi
mov esi, eax
call fcn.00473950
mov ecx, dword [ebp - 0x3d0]
push eax
push eax
push esi
push 0xffffffffffffffff
call fcn.004eb4a0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [edi + 0x28c]
push 0x649b58
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x3c]
call fcn.00516b20
push 1
lea ecx, [ebp - 0x3c]
call fcn.00516ab0
mov ecx, dword [ebp - 0x3d0]
push eax
push esi
push 0xffffffffffffffff
call fcn.004eb080
mov ecx, dword [ebp - 0x3d0]
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0xffffffffffffffff
push 0
push 0x649bb8
call fcn.004ec540
push 0
push 0x20
push 0x20
push 0xc8
mov ecx, edi
mov esi, eax
call fcn.00473950
mov ecx, dword [ebp - 0x3d0]
push eax
push eax
push esi
push 0xffffffffffffffff
call fcn.004eb4a0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x649be0
push dword [edi + 0x24]
lea ecx, [ebp - 0x3c]
call fcn.00516b20
push 1
lea ecx, [ebp - 0x3c]
call fcn.00516ab0
mov ecx, dword [ebp - 0x3d0]
push eax
push esi
push 0xffffffffffffffff
call fcn.004eb080
mov ecx, dword [ebp - 0x3d0]
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0xffffffffffffffff
push 0
push 0x649c10
call fcn.004ec540
push 0
push 0x20
push 0x20
push 0xc2
mov ecx, edi
mov esi, eax
call fcn.00473950
mov ecx, dword [ebp - 0x3d0]
push eax
push eax
push esi
push 0xffffffffffffffff
call fcn.004eb4a0
mov ecx, dword [ebp - 0x3d0]
push 1
push 0x649c34
push esi
push 0xffffffffffffffff
call fcn.004eb080
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0xffffffffffffffff
push 0
mov ecx, dword [ebp - 0x3d0]
push 0x649c50
call fcn.004ec540
push 0
push 0x20
push 0x20
push 0xe4
mov ecx, edi
mov esi, eax
call fcn.00473950
mov ecx, dword [ebp - 0x3d0]
push eax
push eax
push esi
push 0xffffffffffffffff
call fcn.004eb4a0
mov ecx, dword [ebp - 0x3d0]
push 1
push 0x649c78
push esi
push 0xffffffffffffffff
call fcn.004eb080
mov ecx, dword [ebp - 0x3d0]
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0xffffffffffffffff
push 0
push 0x649c94
call fcn.004ec540
push 0
push 0x20
push 0x20
push 0xd2
mov ecx, edi
mov esi, eax
call fcn.00473950
mov ecx, dword [ebp - 0x3d0]
push eax
push eax
push esi
push 0xffffffffffffffff
call fcn.004eb4a0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x649ca8
push dword [edi + 0x24]
lea ecx, [ebp - 0x3c]
call fcn.00516b20
push 1
lea ecx, [ebp - 0x3c]
call fcn.00516ab0
mov ecx, dword [ebp - 0x3d0]
push eax
push esi
push 0xffffffffffffffff
call fcn.004eb080
mov ecx, dword [ebp - 0x3d0]
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0xffffffffffffffff
push 0
push 0x649cc4
call fcn.004ec540
push 0
push 0x20
push 0x20
push 0xd3
mov ecx, edi
mov esi, eax
call fcn.00473950
push eax
mov ecx, dword [ebp - 0x3d0]
push eax
push esi
push 0xffffffffffffffff
call fcn.004eb4a0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [edi + 0x1a8]
push 0x649ce8
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x3c]
call fcn.00516b20
push 1
lea ecx, [ebp - 0x3c]
call fcn.00516ab0
mov ecx, dword [ebp - 0x3d0]
push eax
push esi
push 0xffffffffffffffff
call fcn.004eb080
mov ecx, dword [ebp - 0x3d0]
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0xffffffffffffffff
push 0
push 0x649d40
call fcn.004ec540
push 0
push 0x20
push 0x20
push 0xe5
mov ecx, edi
mov esi, eax
call fcn.00473950
mov ecx, dword [ebp - 0x3d0]
push eax
push eax
push esi
push 0xffffffffffffffff
call fcn.004eb4a0
mov ecx, dword [ebp - 0x3d0]
push 1
push 0x649d64
push esi
push 0xffffffffffffffff
call fcn.004eb080
mov ecx, dword [ebp - 0x3d0]
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0xffffffffffffffff
push 0
push 0x649d80
call fcn.004ec540
push 0
push 0x20
push 0x20
push 0xe6
mov ecx, edi
mov esi, eax
call fcn.00473950
mov ecx, dword [ebp - 0x3d0]
push eax
push eax
push esi
push 0xffffffffffffffff
call fcn.004eb4a0
push 1
push 0x649da8
push esi
push 0xffffffffffffffff
mov ecx, dword [ebp - 0x3d0]
call fcn.004eb080
mov ecx, dword [ebp - 0x3d0]
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0xffffffffffffffff
push 0
push 0x649dbc
call fcn.004ec540
push 0
push 0x20
push 0x20
push 0xf0
mov ecx, edi
mov esi, eax
call fcn.00473950
mov ecx, dword [ebp - 0x3d0]
push eax
push eax
push esi
push 0xffffffffffffffff
call fcn.004eb4a0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x649de8
lea ecx, [edi + 0x1424]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x3c]
call fcn.00516b20
push 1
lea ecx, [ebp - 0x3c]
call fcn.00516ab0
mov ecx, dword [ebp - 0x3d0]
push eax
push esi
push 0xffffffffffffffff
call fcn.004eb080
mov ecx, dword [ebp - 0x3d0]
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0xffffffffffffffff
push 0
push 0x649e40
call fcn.004ec540
push 0
push 0x20
push 0x20
push 0xd4
mov ecx, edi
mov esi, eax
call fcn.00473950
mov ecx, dword [ebp - 0x3d0]
push eax
push eax
push esi
push 0xffffffffffffffff
call fcn.004eb4a0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x649e68
lea ecx, [edi + 0x1424]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x3c]
call fcn.00516b20
push 1
lea ecx, [ebp - 0x3c]
call fcn.00516ab0
mov ecx, dword [ebp - 0x3d0]
push eax
push esi
push 0xffffffffffffffff
call fcn.004eb080
mov ecx, dword [ebp - 0x3d0]
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0xffffffffffffffff
push 0
push 0x649e7c
call fcn.004ec540
push 0
push 0x20
push 0x20
push 0xc6
mov ecx, edi
mov esi, eax
call fcn.00473950
mov ecx, dword [ebp - 0x3d0]
push eax
push eax
push esi
push 0xffffffffffffffff
call fcn.004eb4a0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x649ea0
push str._rundll32.exe
push dword [edi + 0x24]
lea ecx, [ebp - 0x3c]
call fcn.00516b20
push 1
lea ecx, [ebp - 0x3c]
call fcn.00516ab0
mov ecx, dword [ebp - 0x3d0]
push eax
push esi
push 0xffffffffffffffff
call fcn.004eb080
mov ecx, dword [ebp - 0x3d0]
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0xffffffffffffffff
push 0
push 0x649ed4
call fcn.004ec540
push 0
push 0x20
push 0x20
push 0xa1
mov ecx, edi
mov esi, eax
call fcn.00473950
mov ecx, dword [ebp - 0x3d0]
push eax
push eax
push esi
push 0xffffffffffffffff
call fcn.004eb4a0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x649efc
push dword [edi + 0x24]
lea ecx, [ebp - 0x3c]
call fcn.00516b20
push 1
lea ecx, [ebp - 0x3c]
call fcn.00516ab0
mov ecx, dword [ebp - 0x3d0]
push eax
push esi
push 0xffffffffffffffff
call fcn.004eb080
mov ecx, dword [ebp - 0x3d0]
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0xffffffffffffffff
push 0
push 0x649f28
call fcn.004ec540
push 0
push 0x20
push 0x20
push 0xed
mov ecx, edi
mov esi, eax
call fcn.00473950
mov ecx, dword [ebp - 0x3d0]
push eax
push eax
push esi
push 0xffffffffffffffff
call fcn.004eb4a0
mov ecx, dword [ebp - 0x3d0]
push 1
push 0x649f48
push esi
push 0xffffffffffffffff
call fcn.004eb080
mov ecx, dword [ebp - 0x3d0]
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0xffffffffffffffff
push 0
push 0x649f64
call fcn.004ec540
push 0
push 0x20
push 0x20
push 0xe7
mov ecx, edi
mov esi, eax
call fcn.00473950
mov ecx, dword [ebp - 0x3d0]
push eax
push eax
push esi
push 0xffffffffffffffff
call fcn.004eb4a0
mov ecx, dword [ebp - 0x3d0]
push 1
push 0x649f80
push esi
push 0xffffffffffffffff
call fcn.004eb080
mov ecx, dword [ebp - 0x3d0]
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0xffffffffffffffff
push 0
push 0x649f9c
call fcn.004ec540
push 0
mov esi, eax
push 0x20
push 0x20
push 0xc4
mov ecx, edi
call fcn.00473950
mov ecx, dword [ebp - 0x3d0]
push eax
push eax
push esi
push 0xffffffffffffffff
call fcn.004eb4a0
mov ecx, dword [ebp - 0x3d0]
push 1
push 0x649fb4
push esi
push 0xffffffffffffffff
call fcn.004eb080
mov ecx, dword [ebp - 0x3d0]
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0xffffffffffffffff
push 0
push 0x649fd4
call fcn.004ec540
push 0
push 0x20
push 0x20
push 0xf2
mov ecx, edi
mov esi, eax
call fcn.00473950
mov ecx, dword [ebp - 0x3d0]
push eax
push eax
push esi
push 0xffffffffffffffff
call fcn.004eb4a0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x649fe8
lea ecx, [edi + 0x1424]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x3c]
call fcn.00516b20
push 1
lea ecx, [ebp - 0x3c]
call fcn.00516ab0
mov ecx, dword [ebp - 0x3d0]
push eax
push esi
push 0xffffffffffffffff
call fcn.004eb080
mov ecx, dword [ebp - 0x3d0]
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0xffffffffffffffff
push 0
push 0x64a060
call fcn.004ec540
push 0
push 0x20
push 0x20
push 0xc5
mov ecx, edi
mov esi, eax
call fcn.00473950
mov ecx, dword [ebp - 0x3d0]
push eax
push eax
push esi
push 0xffffffffffffffff
call fcn.004eb4a0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x64a090
lea ecx, [edi + 0x1424]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x3c]
call fcn.00516b20
push 1
lea ecx, [ebp - 0x3c]
call fcn.00516ab0
mov ecx, dword [ebp - 0x3d0]
push eax
push esi
push 0xffffffffffffffff
call fcn.004eb080
mov ecx, dword [ebp - 0x3d0]
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0xffffffffffffffff
push 0
push 0x64a0a4
call fcn.004ec540
push 0
push 0x20
push 0x20
push 0xde
mov ecx, edi
mov esi, eax
call fcn.00473950
mov ecx, dword [ebp - 0x3d0]
push eax
push eax
push esi
push 0xffffffffffffffff
call fcn.004eb4a0
mov ecx, dword [ebp - 0x3d0]
push 1
push 0x64a0d0
push esi
push 0xffffffffffffffff
call fcn.004eb080
mov ecx, dword [ebp - 0x3d0]
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0xffffffffffffffff
push 0
push 0x64a0f0
call fcn.004ec540
push 0
push 0x20
push 0x20
push 0xd6
mov ecx, edi
mov esi, eax
call fcn.00473950
mov ecx, dword [ebp - 0x3d0]
push eax
push eax
push esi
push 0xffffffffffffffff
call fcn.004eb4a0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x64a10c
push dword [edi + 0x24]
lea ecx, [ebp - 0x3c]
call fcn.00516b20
push 1
lea ecx, [ebp - 0x3c]
call fcn.00516ab0
mov ecx, dword [ebp - 0x3d0]
push eax
push esi
push 0xffffffffffffffff
call fcn.004eb080
mov ecx, dword [ebp - 0x3d0]
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0xffffffffffffffff
push 0
push 0x64a130
call fcn.004ec540
push 0
push 0x20
push 0x20
push 0xe8
mov ecx, edi
mov esi, eax
call fcn.00473950
mov ecx, dword [ebp - 0x3d0]
push eax
push eax
push esi
push 0xffffffffffffffff
call fcn.004eb4a0
mov ecx, dword [ebp - 0x3d0]
push 1
push 0x64a140
push esi
push 0xffffffffffffffff
call fcn.004eb080
mov ecx, dword [ebp - 0x3d0]
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0xffffffffffffffff
push 0
push 0x64a15c
call fcn.004ec540
push 0
push 0x20
push 0x20
push 0x8e
mov ecx, edi
mov esi, eax
call fcn.00473950
mov ecx, dword [ebp - 0x3d0]
push eax
push eax
push esi
push 0xffffffffffffffff
call fcn.004eb4a0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x64a17c
push dword [edi + 0x20]
lea ecx, [ebp - 0x3c]
call fcn.00516b20
push 1
lea ecx, [ebp - 0x3c]
call fcn.00516ab0
push eax
push esi
mov ecx, dword [ebp - 0x3d0]
push 0xffffffffffffffff
call fcn.004eb080
mov ecx, dword [ebp - 0x3d0]
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0xffffffffffffffff
push 0
push 0x64a198
call fcn.004ec540
push 0
push 0x20
push 0x20
push 0xa1
mov ecx, edi
mov esi, eax
call fcn.00473950
mov ecx, dword [ebp - 0x3d0]
push eax
push eax
push esi
push 0xffffffffffffffff
call fcn.004eb4a0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x64a1c0
push dword [edi + 0x24]
lea ecx, [ebp - 0x3c]
call fcn.00516b20
push 1
lea ecx, [ebp - 0x3c]
call fcn.00516ab0
mov ecx, dword [ebp - 0x3d0]
push eax
push esi
push 0xffffffffffffffff
call fcn.004eb080
mov ecx, dword [ebp - 0x3d0]
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0xffffffffffffffff
push 0
push 0x64a1e4
call fcn.004ec540
push 0
push 0x20
push 0x20
push 0xa1
mov ecx, edi
mov esi, eax
call fcn.00473950
mov ecx, dword [ebp - 0x3d0]
push eax
push eax
push esi
push 0xffffffffffffffff
call fcn.004eb4a0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x64a208
push dword [edi + 0x24]
lea ecx, [ebp - 0x3c]
call fcn.00516b20
push 1
lea ecx, [ebp - 0x3c]
call fcn.00516ab0
mov ecx, dword [ebp - 0x3d0]
push eax
push esi
push 0xffffffffffffffff
call fcn.004eb080
mov ecx, dword [ebp - 0x3d0]
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0xffffffffffffffff
push 0
push 0x64a22c
call fcn.004ec540
push 0
push 0x20
push 0x20
push 0xea
mov ecx, edi
mov esi, eax
call fcn.00473950
mov ecx, dword [ebp - 0x3d0]
push eax
push eax
push esi
push 0xffffffffffffffff
call fcn.004eb4a0
mov ecx, dword [ebp - 0x3d0]
push 1
push 0x64a25c
push esi
push 0xffffffffffffffff
call fcn.004eb080
mov ecx, dword [ebp - 0x3d0]
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0xffffffffffffffff
push 0
push 0x64a278
call fcn.004ec540
push 0
push 0x20
push 0x20
push 0xec
mov ecx, edi
mov esi, eax
call fcn.00473950
mov ecx, dword [ebp - 0x3d0]
push eax
push eax
push esi
push 0xffffffffffffffff
call fcn.004eb4a0
mov ecx, dword [ebp - 0x3d0]
push 1
push 0x649380
push esi
push 0xffffffffffffffff
call fcn.004eb080
mov ecx, dword [ebp - 0x3d0]
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0xffffffffffffffff
push 0
push 0x64a2ac
call fcn.004ec540
push 0
push 0x20
push 0x20
push 0xd1
mov ecx, edi
mov esi, eax
call fcn.00473950
push eax
push eax
push esi
push 0xffffffffffffffff
mov ecx, dword [ebp - 0x3d0]
call fcn.004eb4a0
mov eax, dword [edi + 0x24]
lea ecx, [ebp - 0x3c]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x64a2dc
push eax
push 0x64a2f8
push eax
call fcn.00516b20
push 1
lea ecx, [ebp - 0x3c]
call fcn.00516ab0
mov ecx, dword [ebp - 0x3d0]
push eax
push esi
push 0xffffffffffffffff
call fcn.004eb080
mov ecx, dword [ebp - 0x3d0]
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0xffffffffffffffff
push 0
push 0x62e9a4
call fcn.004ec540
push 0
push 0x20
push 0x20
push 0xc7
mov ecx, edi
mov esi, eax
call fcn.00473950
mov ecx, dword [ebp - 0x3d0]
push eax
push eax
push esi
push 0xffffffffffffffff
call fcn.004eb4a0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x64a310
push dword [edi + 0x24]
lea ecx, [ebp - 0x3c]
call fcn.00516b20
push 1
lea ecx, [ebp - 0x3c]
call fcn.00516ab0
mov ecx, dword [ebp - 0x3d0]
push eax
push esi
push 0xffffffffffffffff
call fcn.004eb080
mov ecx, dword [ebp - 0x3d0]
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0xffffffffffffffff
push 0
push 0x64a33c
call fcn.004ec540
push 0
push 0x20
push 0x20
mov esi, eax
push 0xe3
mov ecx, edi
call fcn.00473950
mov ecx, dword [ebp - 0x3d0]
push eax
push eax
push esi
push 0xffffffffffffffff
call fcn.004eb4a0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x64a358
lea ecx, [edi + 0x1424]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x3c]
call fcn.00516b20
push 1
lea ecx, [ebp - 0x3c]
call fcn.00516ab0
push eax
push esi
mov esi, dword [ebp - 0x3d0]
mov ecx, esi
push 0xffffffffffffffff
call fcn.004eb080
movsd xmm0, qword [edi + 8]
comisd xmm0, xmmword [0x6a40b0]
jbe 0x52da8b
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0xffffffffffffffff
push 0
push 0x64a384
mov ecx, esi
call fcn.004ec540
push 0
push 0x20
push 0x20
push 0x106
mov ecx, edi
mov esi, eax
call fcn.00473950
mov ecx, dword [ebp - 0x3d0]
push eax
push eax
push esi
push 0xffffffffffffffff
call fcn.004eb4a0
push 1
push 0x64a398
push esi
mov esi, dword [ebp - 0x3d0]
mov ecx, esi
push 0xffffffffffffffff
call fcn.004eb080
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0xffffffffffffffff
push 0
push 0x64a3b4
mov ecx, esi
call fcn.004ec540
push 0
push 0x20
push 0x20
push 0xd0
mov ecx, edi
mov esi, eax
call fcn.00473950
mov ecx, dword [ebp - 0x3d0]
push eax
push eax
push esi
push 0xffffffffffffffff
call fcn.004eb4a0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x64a3ec
push dword [edi + 0x24]
lea ecx, [ebp - 0x3c]
call fcn.00516b20
push 1
lea ecx, [ebp - 0x3c]
call fcn.00516ab0
mov ecx, dword [ebp - 0x3d0]
push eax
push esi
push 0xffffffffffffffff
call fcn.004eb080
mov ecx, dword [ebp - 0x3d0]
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0xffffffffffffffff
push 0
push 0x64a408
call fcn.004ec540
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x649948
push dword [edi + 0x24]
lea ecx, [ebp - 0x3c]
mov esi, eax
call fcn.00516b20
push 0x20
push 0x20
push 0
lea ecx, [ebp - 0x3c]
call fcn.00516ab0
mov ecx, dword [ebp - 0x3d0]
push eax
push esi
push 0xffffffffffffffff
call fcn.004eba30
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x64a428
lea ecx, [edi + 0x154]
call fcn.00516ab0
push eax
push 0x64a468
push dword [edi + 0x24]
lea ecx, [ebp - 0x3c]
call fcn.00516b20
push 1
lea ecx, [ebp - 0x3c]
call fcn.00516ab0
push eax
push esi
mov esi, dword [ebp - 0x3d0]
mov ecx, esi
push 0xffffffffffffffff
call fcn.004eb080
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0xffffffffffffffff
push 0
push 0x64a484
mov ecx, esi
call fcn.004ec540
push 0
push 0x20
push 0x20
push 0xd7
mov ecx, edi
mov dword [ebp - 0x3ac], eax
call fcn.00473950
push eax
push eax
push dword [ebp - 0x3ac]
mov ecx, esi
push 0xffffffffffffffff
call fcn.004eb4a0
movsd xmm0, qword [0x6a4108]
lea ecx, [ebp - 0x3c]
comisd xmm0, xmmword [edi + 8]
jbe 0x52dc1f
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x64a4a0
push dword [edi + 0x24]
call fcn.00516b20
jmp 0x52dc2b
push 1
push 0x64a4c4
call fcn.00516b80
push 1
lea ecx, [ebp - 0x3c]
call fcn.00516ab0
push eax
push dword [ebp - 0x3ac]
mov ecx, esi
push 0xffffffffffffffff
call fcn.004eb080
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0xffffffffffffffff
push 0
push 0x64a4e8
mov ecx, esi
call fcn.004ec540
push 0
push 0x20
push 0x20
push 0xe0
mov ecx, edi
mov esi, eax
call fcn.00473950
mov ecx, dword [ebp - 0x3d0]
push eax
push eax
push esi
push 0xffffffffffffffff
call fcn.004eb4a0
mov ecx, dword [ebp - 0x3d0]
push 1
push 0x64a510
push esi
push 0xffffffffffffffff
call fcn.004eb080
mov ecx, dword [ebp - 0x3d0]
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0xffffffffffffffff
push 0
push 0x64a52c
call fcn.004ec540
push 0
push 0x20
push 0x20
push 0xdf
mov ecx, edi
mov esi, eax
call fcn.00473950
mov ecx, dword [ebp - 0x3d0]
push eax
push eax
push esi
push 0xffffffffffffffff
call fcn.004eb4a0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x64a558
lea ecx, [edi + 0x1424]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x3c]
call fcn.00516b20
push 1
lea ecx, [ebp - 0x3c]
call fcn.00516ab0
push eax
push esi
mov esi, dword [ebp - 0x3d0]
mov ecx, esi
push 0xffffffffffffffff
call fcn.004eb080
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0xffffffffffffffff
push 0
push 0x64a5b0
mov ecx, esi
call fcn.004ec540
push 0
push 0x20
push 0x20
push 0xb7
mov ecx, edi
mov dword [ebp - 0x3ac], eax
call fcn.00473950
push eax
push eax
push dword [ebp - 0x3ac]
mov ecx, esi
push 0xffffffffffffffff
call fcn.004eb4a0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x64a5f0
push dword [edi + 0x24]
lea ecx, [ebp - 0x3c]
call fcn.00516b20
lea ecx, [ebp - 0x3c]
call fcn.00516ab0
push eax
call dword [0x5cd624]
test eax, eax
jne 0x52de46
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x64a610
push dword [edi + 0x20]
lea ecx, [ebp - 0x3c]
call fcn.00516b20
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x64a660
lea ecx, [edi + 0x2b0]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x68]
call fcn.00516b20
push 0
push 0xffffffffffffffff
lea ecx, [ebp - 0x68]
mov dword [ebp - 0x5c], 0
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x5c]
call fcn.00511740
push 0
push 0xffffffffffffffff
push 0x64a6b8
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 4
call fcn.005116f0
movsd xmm0, qword [0x6a40a0]
comisd xmm0, xmmword [edi + 8]
jbe 0x52de3a
push 0
lea ecx, [ebp - 0x3c]
call fcn.00516ab0
push eax
push 1
push 0x5ed51c
push 0x64a718
lea ecx, [ebp - 0x5c]
call fcn.00510b50
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 3
call fcn.005116a0
push 1
lea ecx, [ebp - 0x3c]
call fcn.00516ab0
push eax
push dword [ebp - 0x3ac]
mov ecx, esi
push 0xffffffffffffffff
call fcn.004eb080
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0xffffffffffffffff
push 0
push 0x64a7a4
mov ecx, esi
call fcn.004ec540
push 0
push 0x20
push 0x20
push 0xbf
mov ecx, edi
mov dword [ebp - 0x3ac], eax
call fcn.00473950
push eax
push eax
push dword [ebp - 0x3ac]
mov ecx, esi
push 0xffffffffffffffff
call fcn.004eb4a0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x64a7cc
push dword [edi + 0x24]
lea ecx, [ebp - 0x3c]
call fcn.00516b20
lea ecx, [ebp - 0x3c]
call fcn.00516ab0
push eax
call dword [0x5cd624]
test eax, eax
jne 0x52def9
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x64a7e8
lea ecx, [edi + 0x1a8]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x3c]
call fcn.00516b20
push 1
lea ecx, [ebp - 0x3c]
call fcn.00516ab0
push eax
push dword [ebp - 0x3ac]
mov ecx, esi
push 0xffffffffffffffff
call fcn.004eb080
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0xffffffffffffffff
push 0
push 0x64a850
mov ecx, esi
call fcn.004ec540
push 0
push 0x20
push 0x20
push 0xc1
mov ecx, edi
mov esi, eax
call fcn.00473950
mov ecx, dword [ebp - 0x3d0]
push eax
push eax
push esi
push 0xffffffffffffffff
call fcn.004eb4a0
push 1
push 0x64a874
push esi
mov esi, dword [ebp - 0x3d0]
mov ecx, esi
push 0xffffffffffffffff
call fcn.004eb080
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0xffffffffffffffff
push 0
push 0x64a88c
mov ecx, esi
call fcn.004ec540
push 0
push 0x20
push 0x20
push 0xa2
mov ecx, edi
mov dword [ebp - 0x3ac], eax
call fcn.00473950
push eax
push eax
push dword [ebp - 0x3ac]
mov ecx, esi
push 0xffffffffffffffff
call fcn.004eb4a0
movsd xmm0, qword [edi + 8]
lea ecx, [ebp - 0x3c]
comisd xmm0, xmmword [0x6a40a0]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
jb 0x52dfd0
push 0
push 0x64a8ac
jmp 0x52dfda
push 0x64a8ac
push 0x64a8c4
push dword [edi + 0x24]
call fcn.00516b20
push 1
lea ecx, [ebp - 0x3c]
call fcn.00516ab0
push eax
push dword [ebp - 0x3ac]
mov ecx, esi
push 0xffffffffffffffff
call fcn.004eb080
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0xffffffffffffffff
push 0
push 0x64a8d8
mov ecx, esi
call fcn.004ec540
push 0
push 0x20
push 0x20
push 0xdd
mov ecx, edi
mov esi, eax
call fcn.00473950
mov ecx, dword [ebp - 0x3d0]
push eax
push eax
push esi
push 0xffffffffffffffff
call fcn.004eb4a0
mov ecx, dword [ebp - 0x3d0]
push 1
push 0x64a900
push esi
push 0xffffffffffffffff
call fcn.004eb080
mov ecx, dword [ebp - 0x3d0]
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0xffffffffffffffff
push 0
push 0x64a924
call fcn.004ec540
push 0
push 0x20
push 0x20
push 0xdf
mov ecx, edi
mov esi, eax
call fcn.00473950
mov ecx, dword [ebp - 0x3d0]
push eax
push eax
push esi
push 0xffffffffffffffff
call fcn.004eb4a0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x64a948
lea ecx, [edi + 0x1424]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x3c]
call fcn.00516b20
push 1
lea ecx, [ebp - 0x3c]
call fcn.00516ab0
mov ecx, dword [ebp - 0x3d0]
push eax
push esi
push 0xffffffffffffffff
call fcn.004eb080
mov ecx, dword [ebp - 0x3d0]
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0xffffffffffffffff
push 0
push 0x64a9a0
call fcn.004ec540
push 0
push 0x20
push 0x20
push 0xb6
mov ecx, edi
mov esi, eax
call fcn.00473950
mov ecx, dword [ebp - 0x3d0]
push eax
push eax
push esi
push 0xffffffffffffffff
call fcn.004eb4a0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x64a9bc
push dword [edi + 0x24]
lea ecx, [ebp - 0x3c]
call fcn.00516b20
push 1
lea ecx, [ebp - 0x3c]
call fcn.00516ab0
mov ecx, dword [ebp - 0x3d0]
push eax
push esi
push 0xffffffffffffffff
call fcn.004eb080
mov ecx, dword [ebp - 0x3d0]
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0xffffffffffffffff
push 0
push 0x64a9d8
call fcn.004ec540
push 0
push 0x20
push 0x20
push 0xd8
mov ecx, edi
mov esi, eax
call fcn.00473950
mov ecx, dword [ebp - 0x3d0]
push eax
push eax
push esi
push 0xffffffffffffffff
call fcn.004eb4a0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x64a9f8
lea ecx, [edi + 0x1424]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x3c]
call fcn.00516b20
push 1
lea ecx, [ebp - 0x3c]
call fcn.00516ab0
mov ecx, dword [ebp - 0x3d0]
push eax
push esi
push 0xffffffffffffffff
call fcn.004eb080
mov ecx, dword [ebp - 0x3d0]
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0xffffffffffffffff
push 0
push 0x64aa14
call fcn.004ec540
push 0
push 0x20
push 0x20
push 0xeb
mov ecx, edi
mov esi, eax
call fcn.00473950
mov ecx, dword [ebp - 0x3d0]
push eax
push eax
push esi
push 0xffffffffffffffff
call fcn.004eb4a0
mov ecx, dword [ebp - 0x3d0]
push 1
push 0x64aa30
push esi
push 0xffffffffffffffff
call fcn.004eb080
mov ecx, dword [ebp - 0x3d0]
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0xffffffffffffffff
push 0
push 0x64aa4c
call fcn.004ec540
push 0
push 0x20
push 0x20
push 0xde
mov ecx, edi
mov esi, eax
call fcn.00473950
mov ecx, dword [ebp - 0x3d0]
push eax
push eax
push esi
push 0xffffffffffffffff
call fcn.004eb4a0
mov ecx, dword [ebp - 0x3d0]
push 1
push 0x64aa70
push esi
push 0xffffffffffffffff
call fcn.004eb080
mov ecx, dword [ebp - 0x3d0]
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0xffffffffffffffff
push 0
push 0x64aa90
call fcn.004ec540
push 0
push 0x20
push 0x20
push 0xcf
mov ecx, edi
mov esi, eax
call fcn.00473950
push eax
push eax
push esi
push 0xffffffffffffffff
mov ecx, dword [ebp - 0x3d0]
call fcn.004eb4a0
mov ecx, dword [ebp - 0x3d0]
push 1
push 0x64aab4
push esi
push 0xffffffffffffffff
call fcn.004eb080
mov ecx, dword [ebp - 0x3d0]
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0xffffffffffffffff
push 0
push 0x64aad0
call fcn.004ec540
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x64ab04
lea ecx, [edi + 0x154]
mov esi, eax
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x3c]
call fcn.00516b20
push 0x20
push 0x20
push 0
lea ecx, [ebp - 0x3c]
call fcn.00516ab0
mov ecx, dword [ebp - 0x3d0]
push eax
push esi
push 0xffffffffffffffff
call fcn.004eba30
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x64ab04
lea ecx, [edi + 0x154]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x3c]
call fcn.00516b20
push 1
lea ecx, [ebp - 0x3c]
call fcn.00516ab0
mov ecx, dword [ebp - 0x3d0]
push eax
push esi
push 0xffffffffffffffff
call fcn.004eb080
mov ecx, dword [ebp - 0x3d0]
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0xffffffffffffffff
push 0
push 0x64ab38
call fcn.004ec540
push 0
push 0x20
push 0x20
mov esi, eax
mov ecx, edi
push 0xd5
call fcn.00473950
mov ecx, dword [ebp - 0x3d0]
push eax
push eax
push esi
push 0xffffffffffffffff
call fcn.004eb4a0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x64ab64
push dword [edi + 0x24]
lea ecx, [ebp - 0x3c]
call fcn.00516b20
push 1
lea ecx, [ebp - 0x3c]
call fcn.00516ab0
mov ecx, dword [ebp - 0x3d0]
push eax
push esi
push 0xffffffffffffffff
call fcn.004eb080
mov ecx, dword [ebp - 0x3d0]
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0xffffffffffffffff
push 0
push 0x64ab84
call fcn.004ec540
push 0
push 0x20
push 0x20
push 0xbe
mov ecx, edi
mov esi, eax
call fcn.00473950
mov ecx, dword [ebp - 0x3d0]
push eax
push eax
push esi
push 0xffffffffffffffff
call fcn.004eb4a0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x64abb4
push 0x64abe8
push dword [edi + 0x24]
lea ecx, [ebp - 0x3c]
call fcn.00516b20
push 1
lea ecx, [ebp - 0x3c]
call fcn.00516ab0
mov ecx, dword [ebp - 0x3d0]
push eax
push esi
push 0xffffffffffffffff
call fcn.004eb080
mov ecx, dword [ebp - 0x3d0]
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0xffffffffffffffff
push 0
push 0x64ac10
call fcn.004ec540
mov esi, eax
push 0
push 0x20
push 0x20
push 0xd9
mov ecx, edi
call fcn.00473950
mov ecx, dword [ebp - 0x3d0]
push eax
push eax
push esi
push 0xffffffffffffffff
call fcn.004eb4a0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x64ac20
lea ecx, [edi + 0x1a8]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x3c]
call fcn.00516b20
push 1
lea ecx, [ebp - 0x3c]
call fcn.00516ab0
mov ecx, dword [ebp - 0x3d0]
push eax
push esi
push 0xffffffffffffffff
call fcn.004eb080
mov ecx, dword [ebp - 0x3d0]
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0xffffffffffffffff
push 0
push 0x64ac68
call fcn.004ec540
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x64aca0
lea ecx, [edi + 0x154]
mov esi, eax
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x3c]
call fcn.00516b20
push 0x20
push 0x20
push 0
lea ecx, [ebp - 0x3c]
call fcn.00516ab0
push eax
push esi
mov esi, dword [ebp - 0x3d0]
mov ecx, esi
push 0xffffffffffffffff
call fcn.004eba30
push 1
push 0xffffffffffffffff
mov ecx, esi
call fcn.004ec300
push 0x64acd4
push 1
push dword [ebp - 0x3f8]
mov ecx, esi
call fcn.004f0340
push 0x10
push 0x10
push 0
push 0
push 0
push 0x78
mov ecx, edi
call fcn.00473950
push eax
push 0xffffffffffffffff
push 0xffffffffffffffff
mov ecx, esi
call fcn.004eeae0
movsd xmm1, qword [0x6a40e0]
mov ecx, esi
push 0
push str.Arial
push 1
push 0x190
call fcn.004f4680
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x78
push 0x2d0
push 0x14
push 5
push 0x64acf0
mov ecx, esi
call fcn.004f1160
movsd xmm0, qword [0x6a40e0]
sub esp, 8
mov ecx, esi
movsd qword [esp], xmm0
push 0
push 0
push 0
push 0x190
push 0xffffffffffffffff
call fcn.004ef2f0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x12
push 0x32
push 0x39
push 0x14
push 0x64ad40
mov ecx, esi
call fcn.004f10a0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x16
push 0x1fe
push 0x36
push 0x46
push 0
mov ecx, esi
call fcn.004f1260
push esi
push ecx
mov dword [esp], 0x41500000
mov ecx, edi
push 0x64ad50
push 0x1a
push 0x7d
push 0x34
push 0x249
push 0x78
push 0x6372c4
mov dword [ebp - 0x5c], eax
call fcn.00450270
push esi
push ecx
mov dword [esp], 0x41500000
push 0x64adb0
push 0x1c
push 0xa0
push 0x60
push 0x23
push 0x80
mov dword [ebp - 0x46c], eax
push 0x64adfc
mov ecx, edi
call fcn.00450270
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x12
push 0x5a
push 0x68
push 0xe6
push 0x64ae20
mov ecx, esi
mov dword [ebp - 0x468], eax
call fcn.004f10a0
push 0
push 0xffffffffffffffff
push 0x10000043
push 0x19
push 0xdc
push 0x63
push 0x145
push 0x64ae40
mov ecx, esi
call fcn.004f1c00
push 0x48
mov dword [ebp - 0x3f0], eax
call dword [0x5cd7fc]
push eax
push eax
push 0x5f3954
push 0xb1
push dword [edi + 4]
mov ecx, esi
mov dword [ebp - 0x44], eax
push 0
push dword [ebp - 0x3f0]
call fcn.004eea60
mov eax, dword [ebp - 0x44]
mov ecx, esi
push eax
push eax
push 0x5f3954
push 0x7c
push dword [edi + 4]
push 1
push dword [ebp - 0x3f0]
call fcn.004eea60
mov eax, dword [ebp - 0x44]
mov ecx, esi
push eax
push eax
push 0x5f3954
push 0x83
push dword [edi + 4]
push 2
push dword [ebp - 0x3f0]
call fcn.004eea60
mov eax, dword [ebp - 0x44]
mov ecx, esi
push eax
push eax
push 0x5f3954
push 0xa8
push dword [edi + 4]
push 3
push dword [ebp - 0x3f0]
call fcn.004eea60
mov eax, dword [ebp - 0x44]
mov ecx, esi
push eax
push eax
push 0x5f3954
push 0x72
push dword [edi + 4]
push 4
push dword [ebp - 0x3f0]
call fcn.004eea60
mov eax, dword [ebp - 0x44]
push eax
push eax
push 0x5f3954
push 0x99
push dword [edi + 4]
push 5
push dword [ebp - 0x3f0]
mov ecx, esi
call fcn.004eea60
push 0
push ecx
mov dword [esp], 0x41500000
mov ecx, edi
push 0x64af60
push 0x1c
push 0x96
push 0x60
push 0x230
push 0x97
push 0x64afc8
call fcn.00450270
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x78
push 0x2d0
push 0xaa
push 5
push 0x64afe8
mov ecx, esi
mov dword [ebp - 0x41c], eax
call fcn.004f1160
movsd xmm0, qword [0x6a40e0]
sub esp, 8
mov ecx, esi
movsd qword [esp], xmm0
push 0
push 0
push 0
push 0x190
push 0xffffffffffffffff
call fcn.004ef2f0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x12
push 0x32
push 0xcf
push 0x14
push 0x64ad40
mov ecx, esi
call fcn.004f10a0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x16
push 0x1fe
push 0xcc
push 0x46
push 0
mov ecx, esi
call fcn.004f1260
push esi
push ecx
mov dword [esp], 0x41500000
mov ecx, edi
push 0x64b048
push 0x1a
push 0x7d
push 0xca
push 0x249
push 0x78
push 0x6372c4
mov dword [ebp - 0x404], eax
call fcn.00450270
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x12
push 0x208
push 0xff
push 0x23
push 0x64b0b0
mov ecx, esi
mov dword [ebp - 0x460], eax
call fcn.004f10a0
push 0
push ecx
mov dword [esp], 0x41500000
push 0x64b170
push 0x1c
push 0x96
push 0xf6
push 0x230
push 0xa8
push 0x64b1c0
mov ecx, edi
call fcn.00450270
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x50
push 0x2d0
push 0x140
push 5
push 0x64b1e0
mov ecx, esi
mov dword [ebp - 0x438], eax
call fcn.004f1160
movsd xmm0, qword [0x6a40e0]
sub esp, 8
mov ecx, esi
movsd qword [esp], xmm0
push 0
push 0
push 0
push 0x190
push 0xffffffffffffffff
call fcn.004ef2f0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x12
push 0x46
push 0x168
push 0x1e
push 0x64b244
mov ecx, esi
call fcn.004f10a0
push 0
push 0xffffffffffffffff
push 0x10000043
push 0x19
push 0x50
push 0x164
push 0x64
push 0x64b260
mov ecx, esi
call fcn.004f1cf0
push 0
push 0
push 0x14e
push 0xffffffffffffffff
mov ecx, esi
mov dword [ebp - 0x450], eax
call fcn.004ef7c0
push 0x20
push 0x53
mov ecx, edi
call fcn.00473850
push 0x10
mov dword [ebp - 0x414], eax
mov dword [ebp - 0x3bc], 0
call dword [0x5cd940]
mov dword [ebp - 0x3d8], eax
test eax, eax
je 0x52e9c4
xorps xmm0, xmm0
mov dword [ebp - 0x3ac], 0
movups xmmword [eax], xmm0
mov dword [eax], 0x608ee8
lea eax, [ebp - 0x3ac]
push eax
push dword [ebp - 0x414]
call dword [0x5cd9ac]
mov ecx, dword [ebp - 0x3d8]
mov dword [ecx + 8], eax
mov eax, dword [ebp - 0x3ac]
mov dword [ecx + 4], eax
jmp 0x52e9c6
xor ecx, ecx
mov dword [ebp - 0x3bc], ecx
push esi
push ecx
mov byte [ebp - 4], 5
mov dword [esp], 0x41500000
push 0x64b2b0
push 0x1a
push 0x91
push 0x162
push 0xc8
push ecx
push 0x64b2f8
mov ecx, edi
call fcn.00450220
push 0
push ecx
mov dword [esp], 0x41500000
mov ecx, edi
push 0x64b320
push 0x1a
push 0x9b
push 0x162
push 0x177
push 0x83
push 0x64b384
mov dword [ebp - 0x43c], eax
call fcn.00450270
push 0
push ecx
mov dword [esp], 0x41500000
mov ecx, edi
push 0x64b3a8
push 0x1a
push 0x9b
push 0x162
push 0x226
push 0xa8
push 0x64b400
mov dword [ebp - 0x45c], eax
call fcn.00450270
push 0x64b424
push 2
push dword [ebp - 0x3f8]
mov ecx, esi
mov dword [ebp - 0x464], eax
call fcn.004f0340
push 0x10
push 0x10
push 0
push 0
push 0
push 0x8e
mov ecx, edi
call fcn.00473950
push eax
push 0xffffffffffffffff
push 0xffffffffffffffff
mov ecx, esi
call fcn.004eeae0
movsd xmm1, qword [0x6a40e0]
mov ecx, esi
push 0
push str.Arial
push 1
push 0x190
call fcn.004f4680
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x69
push 0x2d0
push 0xa
push 5
push 0x64b444
mov ecx, esi
call fcn.004f1160
movsd xmm0, qword [0x6a40e0]
sub esp, 8
movsd qword [esp], xmm0
push 0
push 0
push 0
push 0x190
push 0xffffffffffffffff
mov ecx, esi
call fcn.004ef2f0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x12
push 0x28
push 0x2a
push 0x14
push 0x64b470
mov ecx, esi
call fcn.004f10a0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x14
push 0x208
push 0x28
push 0x3c
push 0
mov ecx, esi
call fcn.004f1260
push 0
push ecx
mov dword [esp], 0x41500000
mov ecx, edi
push 0x64b480
push 0x1a
push 0x7d
push 0x25
push 0x249
push 0x78
push 0x64b4d4
mov dword [ebp - 0x418], eax
call fcn.00450270
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x12
push 0x96
push 0x55
push 0xa0
push 0x64b4ec
mov ecx, esi
mov dword [ebp - 0x454], eax
call fcn.004f10a0
push 0
push 0xffffffffffffffff
push 0x10000043
push 0x19
push 0xdc
push 0x4f
push 0x136
push 0x64b520
mov ecx, esi
call fcn.004f1c00
mov ecx, eax
mov eax, dword [ebp - 0x44]
push eax
push eax
push 0x5f3954
push 0x7c
push dword [edi + 4]
mov dword [ebp - 0x410], ecx
push 0
push ecx
mov ecx, esi
call fcn.004eea60
mov eax, dword [ebp - 0x44]
mov ecx, esi
push eax
push eax
push 0x5f3954
push 0x83
push dword [edi + 4]
push 1
push dword [ebp - 0x410]
call fcn.004eea60
mov eax, dword [ebp - 0x44]
push eax
push eax
push 0x5f3954
push 0xa8
push dword [edi + 4]
mov ecx, esi
push 2
push dword [ebp - 0x410]
call fcn.004eea60
mov eax, dword [ebp - 0x44]
mov ecx, esi
push eax
push eax
push 0x5f3954
push 0x72
push dword [edi + 4]
push 3
push dword [ebp - 0x410]
call fcn.004eea60
push 0
push ecx
mov dword [esp], 0x41500000
mov ecx, edi
push 0x64b5d8
push 0x1c
push 0x96
push 0x4c
push 0x230
push 0x97
push 0x64afc8
call fcn.00450270
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x154
push 0x2d0
push 0x7d
push 5
push 0x64b650
mov ecx, esi
mov dword [ebp - 0x414], eax
call fcn.004f1160
movsd xmm0, qword [0x6a40e0]
sub esp, 8
mov ecx, esi
movsd qword [esp], xmm0
push 0
push 0
push 0
push 0x190
push 0xffffffffffffffff
call fcn.004ef2f0
push 0x10024
push 0x1000010d
push 0xff
push 0x2c1
push 0x91
push 0xf
push 0x5f3998
push 0x64b6ec
mov ecx, esi
call fcn.004f0e40
push eax
mov ecx, esi
mov dword [ebp - 0x3d4], eax
call fcn.004f5a60
movsd xmm0, qword [0x6a4098]
xor ecx, ecx
comisd xmm0, xmmword [edi + 8]
push 0
mov dword [ebp - 0x430], eax
setbe cl
add ecx, 3
push ecx
push 0x108e
push eax
call dword [0x5cd800]
movsd xmm0, qword [edi + 8]
comisd xmm0, xmmword [0x6a4098]
jbe 0x52ed75
movaps xmm0, xmmword [0x6a4250]
lea eax, [ebp - 0xdc]
push eax
push 0
push 0x10a2
push dword [ebp - 0x430]
mov dword [ebp - 0xdc], 0x28
mov dword [ebp - 0xd8], 7
mov dword [ebp - 0xd4], 3
movups xmmword [ebp - 0xd0], xmm0
mov dword [ebp - 0xc0], 1
mov dword [ebp - 0xbc], 0
mov dword [ebp - 0xb8], 1
call dword [0x5cd800]
movsd xmm0, qword [0x6a40e0]
sub esp, 8
mov ecx, esi
movsd qword [esp], xmm0
push 0
push 0
push 0
push 0x190
push 0xffffffffffffffff
call fcn.004ef2f0
push 0
push 0x64b718
push 0xffffffffffffffff
mov ecx, edi
call fcn.0044bcf0
push 0xff203000
push 0
push 0x12
push 0xffffffffffffffff
mov ecx, esi
call fcn.004eaf90
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x40], 0
call fcn.00511760
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0x64b788
mov ecx, esi
mov byte [ebp - 4], 6
call fcn.004ec540
mov dword [ebp - 0x3d8], eax
lea ecx, [ebp - 0x40]
lea eax, [ebp - 0x30]
push eax
push 0x5faacc
push 0x6262e0
call fcn.00511250
test al, al
je 0x52ee25
cmp dword [ebp - 0x30], 0
je 0x52ee25
lea eax, [ebp - 0x30]
push eax
push 0x5faab8
lea ecx, [ebp - 0x40]
call fcn.00511380
test al, al
je 0x52ee25
cmp dword [ebp - 0x30], 0
jne 0x52ee3c
push 0
push dword [ebp - 0x3d8]
mov ecx, esi
push 1
push dword [ebp - 0x3d4]
call fcn.004ec410
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0x64b7d8
mov ecx, esi
call fcn.004ec540
mov ecx, edi
mov dword [ebp - 0x3d8], eax
call fcn.00461620
test eax, eax
je 0x52ee7a
push 0
push dword [ebp - 0x3d8]
mov ecx, esi
push 1
push dword [ebp - 0x3d4]
call fcn.004ec410
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0x64b830
mov ecx, esi
call fcn.004ec540
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [edi + 0x2b0]
mov dword [ebp - 0x3d8], eax
push 0x61f460
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x3c]
call fcn.00516b20
push 0
push 0x20019
lea ecx, [ebp - 0x3c]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x40]
call fcn.005116f0
lea eax, [ebp - 0x30]
push eax
push 0x611c4c
lea ecx, [ebp - 0x40]
call fcn.00511380
test al, al
je 0x52ef0d
cmp dword [ebp - 0x30], 1
jne 0x52ef0d
push 0
push dword [ebp - 0x3d8]
mov ecx, esi
push 1
push dword [ebp - 0x3d4]
call fcn.004ec410
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0x64b87c
mov ecx, esi
call fcn.004ec540
mov dword [ebp - 0x3d8], eax
lea ecx, [ebp - 0x40]
lea eax, [ebp - 0x30]
push eax
push 0x64b8b0
call fcn.00511380
test al, al
je 0x52ef5b
cmp dword [ebp - 0x30], 0
je 0x52ef5b
push 0
push dword [ebp - 0x3d8]
mov ecx, esi
push 1
push dword [ebp - 0x3d4]
call fcn.004ec410
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0x64b8d0
mov ecx, esi
call fcn.004ec540
mov dword [ebp - 0x3d8], eax
lea ecx, [ebp - 0x40]
lea eax, [ebp - 0x30]
push eax
push 0x64b914
call fcn.00511380
test al, al
je 0x52ef92
cmp dword [ebp - 0x30], 0
jne 0x52efa9
push 0
push dword [ebp - 0x3d8]
mov ecx, esi
push 1
push dword [ebp - 0x3d4]
call fcn.004ec410
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0x64b930
mov ecx, esi
call fcn.004ec540
mov dword [ebp - 0x3d8], eax
lea ecx, [ebp - 0x40]
lea eax, [ebp - 0x30]
push eax
push 0x64b974
call fcn.00511380
test al, al
je 0x52efe0
cmp dword [ebp - 0x30], 0
jne 0x52eff7
push 0
push dword [ebp - 0x3d8]
mov ecx, esi
push 1
push dword [ebp - 0x3d4]
call fcn.004ec410
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0x64b990
mov ecx, esi
call fcn.004ec540
mov dword [ebp - 0x3d8], eax
lea ecx, [ebp - 0x40]
lea eax, [ebp - 0x30]
push eax
push 0x64b9d4
call fcn.00511380
test al, al
je 0x52f045
cmp dword [ebp - 0x30], 0
jne 0x52f045
push 0
push dword [ebp - 0x3d8]
mov ecx, esi
push 1
push dword [ebp - 0x3d4]
call fcn.004ec410
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0x64b9f8
mov ecx, esi
call fcn.004ec540
mov dword [ebp - 0x3ac], eax
lea ecx, [ebp - 0x40]
lea eax, [ebp - 0x30]
push eax
push 0x61f4dc
call fcn.00511380
test al, al
je 0x52f093
cmp dword [ebp - 0x30], 1
jne 0x52f093
push 0
push dword [ebp - 0x3ac]
mov ecx, esi
push 1
push dword [ebp - 0x3d4]
call fcn.004ec410
push 1
push 0x64ba40
push dword [ebp - 0x3ac]
mov ecx, esi
push dword [ebp - 0x3d4]
call fcn.004eb080
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0x64baa8
mov ecx, esi
call fcn.004ec540
mov dword [ebp - 0x3ac], eax
lea ecx, [ebp - 0x40]
lea eax, [ebp - 0x30]
push eax
push 0x64bae8
call fcn.00511380
test al, al
je 0x52f0fb
cmp dword [ebp - 0x30], 1
jne 0x52f0fb
push 0
push dword [ebp - 0x3ac]
mov ecx, esi
push 1
push dword [ebp - 0x3d4]
call fcn.004ec410
push 1
push 0x64ba40
push dword [ebp - 0x3ac]
mov ecx, esi
push dword [ebp - 0x3d4]
call fcn.004eb080
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x64bb10
push 0x64bb54
lea ecx, [edi + 0x2b0]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x3c]
call fcn.00516b20
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0x64bb90
mov ecx, esi
call fcn.004ec540
mov dword [ebp - 0x3ac], eax
lea ecx, [ebp - 0x3c]
lea eax, [ebp - 0x30]
push eax
push 0x64bbcc
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x40]
call fcn.00511250
test al, al
je 0x52f19c
cmp dword [ebp - 0x30], 0
jne 0x52f19c
push 0
push dword [ebp - 0x3ac]
mov ecx, esi
push 1
push dword [ebp - 0x3d4]
call fcn.004ec410
push 1
push 0x64ba40
push dword [ebp - 0x3ac]
mov ecx, esi
push dword [ebp - 0x3d4]
call fcn.004eb080
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0x64bbf4
mov ecx, esi
call fcn.004ec540
push 0x4c
mov dword [ebp - 0x3ac], eax
lea eax, [ebp - 0x150]
push 0
push eax
call fcn.00420570
add esp, 0xc
lea eax, [ebp - 0x150]
push 0x4c
push eax
push 0
push 0
push 4
call dword [0x5cd56c]
test eax, eax
jne 0x52f21c
cmp byte [ebp - 0x148], al
jne 0x52f21c
push eax
push dword [ebp - 0x3ac]
mov ecx, esi
push 1
push dword [ebp - 0x3d4]
call fcn.004ec410
lea eax, [ebp - 0x30]
push eax
push 0x64bc1c
push 0x64bc40
lea ecx, [ebp - 0x40]
call fcn.00511250
test al, al
je 0x52f253
cmp dword [ebp - 0x30], 0
jne 0x52f253
push 0
push dword [ebp - 0x3ac]
mov ecx, esi
push 1
push dword [ebp - 0x3d4]
call fcn.004ec410
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0x64bc98
mov ecx, esi
call fcn.004ec540
mov dword [ebp - 0x3d8], eax
lea ecx, [ebp - 0x40]
lea eax, [ebp - 0x30]
push eax
push 0x62fca0
push 0x62fcc8
call fcn.00511250
test al, al
je 0x52f28f
cmp dword [ebp - 0x30], 0
jne 0x52f2a6
push 0
push dword [ebp - 0x3d8]
mov ecx, esi
push 1
push dword [ebp - 0x3d4]
call fcn.004ec410
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0x64bcc8
mov ecx, esi
call fcn.004ec540
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x610408
lea ecx, [edi + 0x2b0]
mov dword [ebp - 0x3d8], eax
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x3c]
call fcn.00516b20
lea eax, [ebp - 0x68]
push eax
push 0x610438
lea ecx, [ebp - 0x3c]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x40]
call fcn.005112a0
test al, al
je 0x52f330
lea ecx, [ebp - 0x68]
call fcn.00515a90
test eax, eax
je 0x52f330
push 0
push dword [ebp - 0x3d8]
mov ecx, esi
push 1
push dword [ebp - 0x3d4]
call fcn.004ec410
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0x64bd0c
mov ecx, esi
call fcn.004ec540
mov dword [ebp - 0x3ac], eax
lea ecx, [ebp - 0x40]
lea eax, [ebp - 0x68]
push eax
push 0x64bd3c
call fcn.00511410
test al, al
je 0x52f387
lea ecx, [ebp - 0x68]
call fcn.00515a90
cmp eax, 0xc8
ja 0x52f387
push 0
push dword [ebp - 0x3ac]
mov ecx, esi
push 1
push dword [ebp - 0x3d4]
call fcn.004ec410
push 1
push 0x64ba40
push dword [ebp - 0x3ac]
mov ecx, esi
push dword [ebp - 0x3d4]
call fcn.004eb080
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0x64bd58
mov ecx, esi
call fcn.004ec540
mov dword [ebp - 0x3d8], eax
lea ecx, [ebp - 0x40]
lea eax, [ebp - 0x68]
push eax
push 0x64bd88
call fcn.00511410
test al, al
je 0x52f3f5
lea ecx, [ebp - 0x68]
call fcn.00515a90
test eax, eax
je 0x52f3f5
push 0
push dword [ebp - 0x3d8]
mov ecx, esi
push 1
push dword [ebp - 0x3d4]
call fcn.004ec410
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0x64bdb0
mov ecx, esi
call fcn.004ec540
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x605210
lea ecx, [edi + 0x2b0]
mov dword [ebp - 0x3ac], eax
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x3c]
call fcn.00516b20
lea eax, [ebp - 0x30]
push eax
push 0x64bdf8
lea ecx, [ebp - 0x3c]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x40]
call fcn.00511250
test al, al
jne 0x52f479
test byte [ebp - 0x30], 1
je 0x52f479
push 0
push dword [ebp - 0x3ac]
mov ecx, esi
push 1
push dword [ebp - 0x3d4]
call fcn.004ec410
push 1
push 0x64ba40
push dword [ebp - 0x3ac]
mov ecx, esi
push dword [ebp - 0x3d4]
call fcn.004eb080
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0x64be20
mov ecx, esi
call fcn.004ec540
movsd xmm0, qword [edi + 8]
comisd xmm0, xmmword [0x6a40b0]
mov dword [ebp - 0x3d8], eax
jb 0x52f4f5
lea eax, [ebp - 0x30]
push eax
push 0x64be64
push 0x64be80
lea ecx, [ebp - 0x40]
call fcn.00511250
test al, al
je 0x52f4f5
cmp dword [ebp - 0x30], 0
je 0x52f4f5
push 0
push dword [ebp - 0x3d8]
mov ecx, esi
push 1
push dword [ebp - 0x3d4]
call fcn.004ec410
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0x64bef8
mov ecx, esi
call fcn.004ec540
mov dword [ebp - 0x3ac], eax
lea ecx, [ebp - 0x40]
lea eax, [ebp - 0x30]
push eax
push 0x64bf40
push 0x64bf60
call fcn.00511250
test al, al
je 0x52f54e
cmp dword [ebp - 0x30], 0
jne 0x52f5b1
push 0
push dword [ebp - 0x3ac]
mov ecx, esi
push 1
push dword [ebp - 0x3d4]
call fcn.004ec410
jmp 0x52f5b1
mov dword [ebp - 0x48], 0
lea edx, [ebp - 0x48]
mov byte [ebp - 4], 7
xor ecx, ecx
call fcn.00486940
mov edx, dword [ebp - 0x48]
lea eax, [ebp - 0x30]
push eax
push 0x5cdc90
push 0x5cdbf0
xor ecx, ecx
mov dword [ebp - 0x30], 0
call fcn.004869f0
cmp dword [ebp - 0x30], 0
jne 0x52f59f
push 0
push dword [ebp - 0x3ac]
mov ecx, esi
push 1
push dword [ebp - 0x3d4]
call fcn.004ec410
mov byte [ebp - 4], 6
mov eax, dword [ebp - 0x48]
test eax, eax
je 0x52f5b1
push eax
call dword [0x5cd34c]
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0x64c014
mov ecx, esi
call fcn.004ec540
mov dword [ebp - 0x3d8], eax
lea ecx, [ebp - 0x40]
lea eax, [ebp - 0x30]
push eax
push 0x64c048
push 0x64c070
call fcn.00511250
test al, al
je 0x52f604
cmp dword [ebp - 0x30], 0
je 0x52f604
push 0
push dword [ebp - 0x3d8]
mov ecx, esi
push 1
push dword [ebp - 0x3d4]
call fcn.004ec410
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0x64c0d8
mov ecx, esi
call fcn.004ec540
mov dword [ebp - 0x3d8], eax
lea ecx, [ebp - 0x40]
lea eax, [ebp - 0x30]
push eax
push 0x64c124
push 0x64c140
call fcn.00511250
test al, al
je 0x52f657
cmp dword [ebp - 0x30], 0
je 0x52f657
push 0
push dword [ebp - 0x3d8]
mov ecx, esi
push 1
push dword [ebp - 0x3d4]
call fcn.004ec410
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0x64c1b8
mov ecx, esi
call fcn.004ec540
mov dword [ebp - 0x3d8], eax
lea ecx, [ebp - 0x40]
lea eax, [ebp - 0x30]
push eax
push 0x64c1dc
push 0x64c200
call fcn.00511250
test al, al
je 0x52f6aa
cmp dword [ebp - 0x30], 0
je 0x52f6aa
push 0
push dword [ebp - 0x3d8]
mov ecx, esi
push 1
push dword [ebp - 0x3d4]
call fcn.004ec410
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0x64c268
mov ecx, esi
call fcn.004ec540
mov dword [ebp - 0x3d8], eax
lea ecx, [ebp - 0x40]
lea eax, [ebp - 0x30]
push eax
push 0x64c2b0
push 0x64c2f0
call fcn.00511250
test al, al
je 0x52f6fd
cmp dword [ebp - 0x30], 0
je 0x52f6fd
push 0
push dword [ebp - 0x3d8]
mov ecx, esi
push 1
push dword [ebp - 0x3d4]
call fcn.004ec410
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0x64c368
mov ecx, esi
call fcn.004ec540
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x61f530
lea ecx, [edi + 0x2b0]
mov dword [ebp - 0x3ac], eax
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x3c]
call fcn.00516b20
xorps xmm0, xmm0
lea ecx, [ebp - 0x3cc]
movups xmmword [ebp - 0x3cc], xmm0
call fcn.005117d0
lea eax, [ebp - 0x3cc]
mov byte [ebp - 4], 8
push eax
push 0x64c3c8
lea ecx, [ebp - 0x3c]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x40]
call fcn.00511550
cmp dword [ebp - 0x3c4], 3
jne 0x52f7a7
mov eax, dword [ebp - 0x3cc]
cmp byte [eax], 0x1e
je 0x52f7a7
push 0
push dword [ebp - 0x3ac]
mov ecx, esi
push 1
push dword [ebp - 0x3d4]
call fcn.004ec410
push 1
push 0x64ba40
push dword [ebp - 0x3ac]
mov ecx, esi
push dword [ebp - 0x3d4]
call fcn.004eb080
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0x64c3d8
mov ecx, esi
call fcn.004ec540
push 0x64c420
mov ecx, edi
mov dword [ebp - 0x3d8], eax
call fcn.00480af0
test al, al
je 0x52f804
push 0
push dword [ebp - 0x3d8]
mov ecx, esi
push 1
push dword [ebp - 0x3d4]
call fcn.004ec410
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0x64c508
mov ecx, esi
call fcn.004ec540
push 0x64c550
mov ecx, edi
mov dword [ebp - 0x3d8], eax
call fcn.00480af0
test al, al
je 0x52f847
push 0
push dword [ebp - 0x3d8]
mov ecx, esi
push 1
push dword [ebp - 0x3d4]
call fcn.004ec410
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0x64c638
mov ecx, esi
call fcn.004ec540
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x64c688
push 0x64bb54
lea ecx, [edi + 0x2b0]
mov dword [ebp - 0x3d8], eax
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x3c]
call fcn.00516b20
lea eax, [ebp - 0x30]
push eax
push 0x64c6f8
lea ecx, [ebp - 0x3c]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x40]
call fcn.00511250
test al, al
je 0x52f8ce
cmp dword [ebp - 0x30], 0
jne 0x52f8ce
push 0
push dword [ebp - 0x3d8]
mov ecx, esi
push 1
push dword [ebp - 0x3d4]
call fcn.004ec410
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0x64c748
mov ecx, esi
call fcn.004ec540
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x64c688
push 0x64bb54
lea ecx, [edi + 0x2b0]
mov dword [ebp - 0x3d8], eax
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x3c]
call fcn.00516b20
lea eax, [ebp - 0x30]
push eax
push 0x64c798
lea ecx, [ebp - 0x3c]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x40]
call fcn.00511250
test al, al
je 0x52f955
cmp dword [ebp - 0x30], 0
jne 0x52f955
push 0
push dword [ebp - 0x3d8]
mov ecx, esi
push 1
push dword [ebp - 0x3d4]
call fcn.004ec410
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0x64c7e8
mov ecx, esi
call fcn.004ec540
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x64c688
push 0x64bb54
lea ecx, [edi + 0x2b0]
mov dword [ebp - 0x3d8], eax
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x3c]
call fcn.00516b20
lea eax, [ebp - 0x30]
push eax
push 0x64c838
lea ecx, [ebp - 0x3c]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x40]
call fcn.00511250
test al, al
je 0x52f9dc
cmp dword [ebp - 0x30], 0
jne 0x52f9dc
push 0
push dword [ebp - 0x3d8]
mov ecx, esi
push 1
push dword [ebp - 0x3d4]
call fcn.004ec410
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0x64c888
mov ecx, esi
call fcn.004ec540
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x64c688
push 0x64bb54
lea ecx, [edi + 0x2b0]
mov dword [ebp - 0x3d8], eax
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x3c]
call fcn.00516b20
lea eax, [ebp - 0x30]
push eax
push 0x64c8e0
lea ecx, [ebp - 0x3c]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x40]
call fcn.00511250
test al, al
je 0x52fa4c
cmp dword [ebp - 0x30], 0
jne 0x52fa63
push 0
push dword [ebp - 0x3d8]
mov ecx, esi
push 1
push dword [ebp - 0x3d4]
call fcn.004ec410
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0x64c930
mov ecx, esi
call fcn.004ec540
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x64c688
push 0x64bb54
lea ecx, [edi + 0x2b0]
mov dword [ebp - 0x3d8], eax
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x3c]
call fcn.00516b20
lea eax, [ebp - 0x30]
push eax
push 0x64c988
lea ecx, [ebp - 0x3c]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x40]
call fcn.00511250
test al, al
je 0x52faea
cmp dword [ebp - 0x30], 0
jne 0x52faea
push 0
push dword [ebp - 0x3d8]
mov ecx, esi
push 1
push dword [ebp - 0x3d4]
call fcn.004ec410
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0x64c9d8
mov ecx, esi
call fcn.004ec540
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x64c688
push 0x64bb54
lea ecx, [edi + 0x2b0]
mov dword [ebp - 0x3d8], eax
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x3c]
call fcn.00516b20
lea eax, [ebp - 0x30]
push eax
push 0x64ca28
lea ecx, [ebp - 0x3c]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x40]
call fcn.00511250
test al, al
je 0x52fb71
cmp dword [ebp - 0x30], 0
jne 0x52fb71
push 0
push dword [ebp - 0x3d8]
mov ecx, esi
push 1
push dword [ebp - 0x3d4]
call fcn.004ec410
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0x64ca78
mov ecx, esi
call fcn.004ec540
mov dword [ebp - 0x3d8], eax
lea ecx, [ebp - 0x40]
lea eax, [ebp - 0x3c]
push eax
push 0x625840
push 0x64cac8
call fcn.005112a0
test al, al
je 0x52fbcf
push 0x61a578
lea ecx, [ebp - 0x3c]
call fcn.00516de0
test al, al
je 0x52fbcf
push 0
push dword [ebp - 0x3d8]
mov ecx, esi
push 1
push dword [ebp - 0x3d4]
call fcn.004ec410
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0x64cb10
mov ecx, esi
call fcn.004ec540
mov edx, 0x64cb60
mov dword [ebp - 0x3ac], eax
mov ecx, 0x64cbb0
call fcn.0050e4c0
test al, al
je 0x52fc15
push 0
push dword [ebp - 0x3ac]
mov ecx, esi
push 1
push dword [ebp - 0x3d4]
call fcn.004ec410
push 1
push 0x64ba40
push dword [ebp - 0x3ac]
mov ecx, esi
push dword [ebp - 0x3d4]
call fcn.004eb080
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0x64cc48
mov ecx, esi
call fcn.004ec540
lea ecx, [ebp - 0x3c]
mov dword [ebp - 0x48], eax
call fcn.00516d20
push eax
push 0x5ed51c
push 0x64cc98
lea ecx, [ebp - 0x40]
call fcn.005112a0
test al, al
je 0x52fc87
lea ecx, [ebp - 0x3c]
call fcn.005167b0
test al, al
je 0x52fc87
push 0
push dword [ebp - 0x48]
mov ecx, esi
push 1
push dword [ebp - 0x3d4]
call fcn.004ec410
push 1
push 0x64ba40
push dword [ebp - 0x48]
mov ecx, esi
push dword [ebp - 0x3d4]
call fcn.004eb080
push 1
push 0x64ba40
push dword [ebp - 0x48]
mov ecx, esi
push dword [ebp - 0x3d4]
call fcn.004eb080
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0x64cd1c
mov ecx, esi
call fcn.004ec540
mov dword [ebp - 0x3ac], eax
lea ecx, [ebp - 0x40]
lea eax, [ebp - 0x30]
push eax
push 0x64cd5c
push 0x64cd78
call fcn.00511250
test al, al
je 0x52fd08
cmp dword [ebp - 0x30], 2
jne 0x52fd08
push 0
push dword [ebp - 0x3ac]
mov ecx, esi
push 1
push dword [ebp - 0x3d4]
call fcn.004ec410
push 1
push 0x64ce10
push dword [ebp - 0x3ac]
mov ecx, esi
push dword [ebp - 0x3d4]
call fcn.004eb080
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0x64ce90
mov ecx, esi
call fcn.004ec540
mov dword [ebp - 0x3d8], eax
lea ecx, [ebp - 0x40]
lea eax, [ebp - 0x30]
push eax
push 0x6267b4
push 0x6262e0
call fcn.00511250
test al, al
je 0x52fd75
cmp dword [ebp - 0x30], 1
jne 0x52fd75
push 0
push dword [ebp - 0x3d8]
mov ecx, esi
push 1
push dword [ebp - 0x3d4]
call fcn.004ec410
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0x64ced8
mov ecx, esi
call fcn.004ec540
mov dword [ebp - 0x3d8], eax
lea ecx, [ebp - 0x40]
lea eax, [ebp - 0x30]
push eax
push 0x64cd5c
push 0x64cf28
call fcn.00511250
test al, al
je 0x52fdc8
cmp dword [ebp - 0x30], 2
jne 0x52fdc8
push 0
push dword [ebp - 0x3d8]
mov ecx, esi
push 1
push dword [ebp - 0x3d4]
call fcn.004ec410
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0x64cf88
mov ecx, esi
call fcn.004ec540
mov dword [ebp - 0x3d8], eax
lea ecx, [ebp - 0x40]
lea eax, [ebp - 0x30]
push eax
push 0x5fa6f8
push 0x64cfe0
call fcn.00511250
test al, al
je 0x52fe1b
cmp dword [ebp - 0x30], 4
jne 0x52fe1b
push 0
push dword [ebp - 0x3d8]
mov ecx, esi
push 1
push dword [ebp - 0x3d4]
call fcn.004ec410
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0x64d048
mov ecx, esi
call fcn.004ec540
mov dword [ebp - 0x3d8], eax
lea ecx, [ebp - 0x40]
lea eax, [ebp - 0x30]
push eax
push 0x5fa6f8
push 0x64d098
call fcn.00511250
test al, al
je 0x52fe6e
cmp dword [ebp - 0x30], 4
jne 0x52fe6e
push 0
push dword [ebp - 0x3d8]
mov ecx, esi
push 1
push dword [ebp - 0x3d4]
call fcn.004ec410
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0x64d0f8
mov ecx, esi
call fcn.004ec540
mov dword [ebp - 0x3d8], eax
lea ecx, [ebp - 0x40]
lea eax, [ebp - 0x30]
push eax
push 0x5fa6f8
push 0x64d138
call fcn.00511250
test al, al
je 0x52fec1
cmp dword [ebp - 0x30], 4
jne 0x52fec1
push 0
push dword [ebp - 0x3d8]
mov ecx, esi
push 1
push dword [ebp - 0x3d4]
call fcn.004ec410
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0x64d198
mov ecx, esi
call fcn.004ec540
mov dword [ebp - 0x3d8], eax
lea ecx, [ebp - 0x40]
lea eax, [ebp - 0x30]
push eax
push 0x64d1cc
push 0x64d1e8
call fcn.00511250
test al, al
je 0x52ff14
cmp dword [ebp - 0x30], 0
jne 0x52ff14
push 0
push dword [ebp - 0x3d8]
mov ecx, esi
push 1
push dword [ebp - 0x3d4]
call fcn.004ec410
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0x64d258
mov ecx, esi
call fcn.004ec540
mov dword [ebp - 0x3d8], eax
lea ecx, [ebp - 0x40]
lea eax, [ebp - 0x30]
push eax
push 0x64d294
push 0x627ab0
call fcn.00511250
test al, al
je 0x52ff67
cmp dword [ebp - 0x30], 1
jne 0x52ff67
push 0
push dword [ebp - 0x3d8]
mov ecx, esi
push 1
push dword [ebp - 0x3d4]
call fcn.004ec410
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0x64d2c0
mov ecx, esi
call fcn.004ec540
mov dword [ebp - 0x3d8], eax
lea ecx, [ebp - 0x40]
lea eax, [ebp - 0x3c]
push eax
push 0x5ed51c
push 0x64d310
call fcn.005112a0
lea eax, [ebp - 0x68]
push eax
push 0x5ed51c
push 0x64d398
lea ecx, [ebp - 0x40]
call fcn.005112a0
push 0x64d41c
lea ecx, [ebp - 0x3c]
call fcn.00516de0
test al, al
je 0x52ffe8
push 0x64d41c
lea ecx, [ebp - 0x68]
call fcn.00516de0
test al, al
je 0x52ffe8
push 0
push dword [ebp - 0x3d8]
mov ecx, esi
push 1
push dword [ebp - 0x3d4]
call fcn.004ec410
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0x64d430
mov ecx, esi
call fcn.004ec540
movsd xmm1, qword [edi + 8]
mov ecx, 0x64d47c
mov dword [ebp - 0x3d8], eax
call fcn.004c23b0
push eax
lea ecx, [ebp - 0x3c]
call fcn.00516e30
push 0x5fae60
lea ecx, [ebp - 0x3c]
call fcn.00516de0
test al, al
je 0x530044
push 0
push dword [ebp - 0x3d8]
mov ecx, esi
push 1
push dword [ebp - 0x3d4]
call fcn.004ec410
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0x64d498
mov ecx, esi
call fcn.004ec540
mov dword [ebp - 0x3d8], eax
lea ecx, [ebp - 0x40]
lea eax, [ebp - 0x30]
push eax
push 0x64d4e0
push 0x64d508
call fcn.00511250
test al, al
je 0x530097
cmp dword [ebp - 0x30], 0
jne 0x530097
push 0
push dword [ebp - 0x3d8]
mov ecx, esi
push 1
push dword [ebp - 0x3d4]
call fcn.004ec410
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0x64d588
mov ecx, esi
call fcn.004ec540
mov ecx, edi
mov dword [ebp - 0x3d8], eax
call fcn.005a9a30
cmp eax, 0x3aab
mov edx, 0x64d5e0
lea eax, [ebp - 0x30]
mov ecx, 0x627ab0
push eax
cmovbe ecx, edx
push 0x64d658
push ecx
lea ecx, [ebp - 0x40]
call fcn.00511250
test al, al
je 0x5300ff
cmp dword [ebp - 0x30], 0
je 0x5300ff
push 0
push dword [ebp - 0x3d8]
mov ecx, esi
push 1
push dword [ebp - 0x3d4]
call fcn.004ec410
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0x64d698
mov ecx, esi
call fcn.004ec540
mov dword [ebp - 0x3d8], eax
lea ecx, [ebp - 0x40]
lea eax, [ebp - 0x30]
push eax
push 0x64d6dc
push 0x64d708
call fcn.00511250
test al, al
je 0x530152
cmp dword [ebp - 0x30], 0
jne 0x530152
push 0
push dword [ebp - 0x3d8]
mov ecx, esi
push 1
push dword [ebp - 0x3d4]
call fcn.004ec410
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0x64d78c
mov ecx, esi
call fcn.004ec540
mov dword [ebp - 0x3d8], eax
lea ecx, [ebp - 0x40]
lea eax, [ebp - 0x30]
push eax
push 0x64d7c4
push 0x64d7e0
call fcn.00511250
test al, al
je 0x5301a5
cmp dword [ebp - 0x30], 0
je 0x5301a5
push 0
push dword [ebp - 0x3d8]
mov ecx, esi
push 1
push dword [ebp - 0x3d4]
call fcn.004ec410
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0x64d848
mov ecx, esi
call fcn.004ec540
mov dword [ebp - 0x3d8], eax
lea ecx, [ebp - 0x40]
lea eax, [ebp - 0x30]
push eax
push 0x64d890
push 0x64d7e0
call fcn.00511250
test al, al
je 0x5301f8
cmp dword [ebp - 0x30], 0
jne 0x5301f8
push 0
push dword [ebp - 0x3d8]
mov ecx, esi
push 1
push dword [ebp - 0x3d4]
call fcn.004ec410
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0x64d8b4
mov ecx, esi
call fcn.004ec540
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x64d8f8
push 0x64d93c
lea ecx, [edi + 0x2b0]
mov dword [ebp - 0x3d8], eax
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x3c]
call fcn.00516b20
lea eax, [ebp - 0x30]
push eax
push 0x64d974
lea ecx, [ebp - 0x3c]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x40]
call fcn.00511250
test al, al
je 0x53027f
cmp dword [ebp - 0x30], 0
je 0x53027f
push 0
push dword [ebp - 0x3d8]
mov ecx, esi
push 1
push dword [ebp - 0x3d4]
call fcn.004ec410
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0x64d9a8
mov ecx, esi
call fcn.004ec540
mov dword [ebp - 0x3ac], eax
lea ecx, [ebp - 0x40]
lea eax, [ebp - 0x30]
push eax
push 0x61a1e0
push 0x64c2f0
call fcn.00511250
test al, al
je 0x5302bb
cmp dword [ebp - 0x30], 0
jne 0x5302db
lea eax, [ebp - 0x30]
push eax
push 0x5fa6f8
push 0x64d9f0
lea ecx, [ebp - 0x40]
call fcn.00511250
test al, al
je 0x5302f2
cmp dword [ebp - 0x30], 4
jne 0x5302f2
push 0
push dword [ebp - 0x3ac]
mov ecx, esi
push 1
push dword [ebp - 0x3d4]
call fcn.004ec410
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0x64da50
mov ecx, esi
call fcn.004ec540
mov dword [ebp - 0x3d8], eax
lea ecx, [ebp - 0x40]
lea eax, [ebp - 0x30]
push eax
push 0x64da8c
push 0x64dab0
call fcn.00511250
test al, al
je 0x530345
cmp dword [ebp - 0x30], 0
jne 0x530345
push 0
push dword [ebp - 0x3d8]
mov ecx, esi
push 1
push dword [ebp - 0x3d4]
call fcn.004ec410
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0x64db38
mov ecx, esi
call fcn.004ec540
mov dword [ebp - 0x48], eax
lea ecx, [ebp - 0x40]
lea eax, [ebp - 0x30]
push eax
push 0x626c90
push 0x64db88
call fcn.00511250
test al, al
je 0x53037e
cmp dword [ebp - 0x30], 0
je 0x5303c5
lea eax, [ebp - 0x30]
push eax
push 0x5fa6f8
push 0x64dbf8
lea ecx, [ebp - 0x40]
call fcn.00511250
test al, al
je 0x53039e
cmp dword [ebp - 0x30], 4
je 0x5303c5
lea eax, [ebp - 0x3c]
push eax
push str.Debugger
push 0x64dc60
lea ecx, [ebp - 0x40]
call fcn.005112a0
test al, al
je 0x5303d9
lea ecx, [ebp - 0x3c]
call fcn.00516cc0
cmp eax, 0xa
jle 0x5303d9
push 0
push dword [ebp - 0x48]
mov ecx, esi
push 1
push dword [ebp - 0x3d4]
call fcn.004ec410
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0x64dd28
mov ecx, esi
call fcn.004ec540
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x64dd80
push 0x64d93c
lea ecx, [edi + 0x2b0]
mov dword [ebp - 0x3ac], eax
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x3c]
call fcn.00516b20
lea eax, [ebp - 0x30]
push eax
push 0x64ddc4
lea ecx, [ebp - 0x3c]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x40]
call fcn.00511250
test al, al
je 0x530460
cmp dword [ebp - 0x30], 1
jne 0x530460
push 0
push dword [ebp - 0x3ac]
mov ecx, esi
push 1
push dword [ebp - 0x3d4]
call fcn.004ec410
push 1
push 0x64ba40
push dword [ebp - 0x3ac]
mov ecx, esi
push dword [ebp - 0x3d4]
call fcn.004eb080
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0x64ddf0
mov ecx, esi
call fcn.004ec540
push 1
push 0x64de30
lea ecx, [ebp - 0x3c]
mov dword [ebp - 0x3ac], eax
call fcn.00516b80
lea eax, [ebp - 0x30]
push eax
push 0x64de90
lea ecx, [ebp - 0x3c]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x40]
call fcn.00511250
test al, al
je 0x5304e0
cmp dword [ebp - 0x30], 0
jne 0x5304e0
push 0
push dword [ebp - 0x3ac]
mov ecx, esi
push 1
push dword [ebp - 0x3d4]
call fcn.004ec410
push 1
push 0x64ce10
push dword [ebp - 0x3ac]
mov ecx, esi
push dword [ebp - 0x3d4]
call fcn.004eb080
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0x64deb8
mov ecx, esi
call fcn.004ec540
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x610408
lea ecx, [edi + 0x2b0]
mov dword [ebp - 0x3ac], eax
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x3c]
call fcn.00516b20
lea eax, [ebp - 0x30]
push eax
push 0x64df00
lea ecx, [ebp - 0x3c]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x40]
call fcn.00511250
test al, al
je 0x530567
cmp dword [ebp - 0x30], 2
je 0x53057e
push 0
push dword [ebp - 0x3ac]
mov ecx, esi
push 1
push dword [ebp - 0x3d4]
call fcn.004ec410
push 1
push 0x64ba40
push dword [ebp - 0x3ac]
mov ecx, esi
push dword [ebp - 0x3d4]
call fcn.004eb080
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x12
push 0x140
push 0x19a
push 0xf
push 0
mov ecx, esi
call fcn.004f10a0
push 0xf0e0d0
push 0xffffffffffffffff
mov ecx, esi
mov dword [ebp - 0x440], eax
call fcn.004ef5b0
push 0
push 0x10800080
push 0x16
push 0x127
push 0x198
push 0x154
push 0x64df24
mov ecx, esi
call fcn.004f1260
push 0x909090
push 0xffffffffffffffff
mov ecx, esi
mov dword [ebp - 0x3ec], eax
call fcn.004ef460
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x17
push 0x50
push 0x197
push 0x280
push 0x6310f8
mov ecx, esi
call fcn.004f20e0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x12
push 0x46
push 0x1b8
push 0x14
push 0x64df50
mov ecx, esi
mov dword [ebp - 0x428], eax
call fcn.004f10a0
push 0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x19
push 0x1c2
push 0x1b3
push 0x5a
push 0x64df68
mov ecx, esi
call fcn.004f1cf0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x19
push 0x50
push 0x1b2
push 0x22b
push 0x64df84
mov ecx, esi
mov dword [ebp - 0x400], eax
call fcn.004f20e0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x19
push 0x50
push 0x1b2
push 0x280
mov dword [ebp - 0x480], eax
push 0x64dfa0
mov ecx, esi
call fcn.004f20e0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
mov dword [ebp - 0x47c], eax
lea eax, [edi + 0x178]
push 0
push 0x64dfb8
mov ecx, eax
mov dword [ebp - 0x3ac], eax
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x3c]
call fcn.00516b20
push 0x258
lea eax, [ebp - 0x3a8]
push 0
push eax
call fcn.00420570
add esp, 0xc
lea ecx, [ebp - 0x3c]
push 3
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x3a8]
call fcn.00401660
mov byte [ebp - 4], 9
cmp dword [ebp - 0x158], 0xffffffff
je 0x53077b
mov edi, dword [ebp - 0x3ac]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea eax, [ebp - 0x37c]
mov ecx, edi
push eax
push 0x5ed514
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x3c]
call fcn.00516b20
push 1
lea ecx, [ebp - 0x3c]
call fcn.00516ab0
push eax
push dword [ebp - 0x400]
mov ecx, esi
call fcn.004ed600
lea ecx, [ebp - 0x3a8]
call fcn.00401760
test al, al
jne 0x530720
mov edi, dword [ebp - 0x3f4]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x64dfb8
lea ecx, [edi + 0x16c]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x3c]
call fcn.00516b20
push 3
lea ecx, [ebp - 0x3c]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x3a8]
call fcn.004017b0
test al, al
je 0x530823
mov edi, dword [ebp - 0x3ac]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea eax, [ebp - 0x37c]
mov ecx, edi
push eax
push 0x5ed514
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x3c]
call fcn.00516b20
push 1
lea ecx, [ebp - 0x3c]
call fcn.00516ab0
push eax
push dword [ebp - 0x400]
mov ecx, esi
call fcn.004ed600
lea ecx, [ebp - 0x3a8]
call fcn.00401760
test al, al
jne 0x5307c8
mov edi, dword [ebp - 0x3f4]
mov eax, dword [ebp - 0x158]
cmp eax, 0xffffffff
je 0x530835
push eax
call dword [0x5cd484]
push 0x64dfd4
push 3
push dword [ebp - 0x3f8]
mov ecx, esi
mov dword [ebp - 0x158], 0xffffffff
call fcn.004f0340
push 0x10
push 0x10
push 0
push 0
push 0
push 0xa2
mov ecx, edi
call fcn.00473950
push eax
push 0xffffffffffffffff
push 0xffffffffffffffff
mov ecx, esi
call fcn.004eeae0
movsd xmm1, qword [0x6a4110]
mov ecx, esi
push 0
push str.Arial
push 1
push 0x190
call fcn.004f4680
push 0xffffffffffffffff
push 0x10000101
push 0x14
push 0x1f4
push 0xa0
push 0x78
push 0x64e000
mov ecx, esi
call fcn.004f10a0
movsd xmm1, qword [0x6a40e0]
mov ecx, esi
push 0
push str.Arial
push 1
push 0x190
mov dword [ebp - 0x3d8], eax
call fcn.004f4680
push 0x10024
push 0x800009
push 0x186
push 0x2d0
push 0x14
push 5
push 0x5ed650
push 0x64e048
mov ecx, esi
call fcn.004f0e40
push eax
mov ecx, esi
mov dword [ebp - 0x3e4], eax
call fcn.004f5a60
push 0x46
push 0
mov esi, eax
push 0x101e
push esi
call dword [0x5cd800]
push 0x1db
push 1
push 0x101e
push esi
call dword [0x5cd800]
push 0x87
push 2
push 0x101e
push esi
call dword [0x5cd800]
push 0x20
push 0x20
push 0x12
push 0x12
push 0x5f3954
push 0xa2
push dword [edi + 4]
push 0xffffffffffffffff
push dword [ebp - 0x3e4]
mov esi, dword [ebp - 0x3d0]
mov ecx, esi
call fcn.004eb510
push 1
push dword [ebp - 0x3e4]
mov ecx, esi
call fcn.004eaf30
push 0xff203000
push 0
push 0x12
push 0xffffffffffffffff
mov ecx, esi
call fcn.004eaf90
movsd xmm1, qword [0x6a40e0]
mov ecx, esi
push 0
push str.Arial
push 1
push 0x190
call fcn.004f4680
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x12
push 0x6e
push 0x1a9
push 0x32
push 0x64e0b8
mov ecx, esi
call fcn.004f2030
push esi
push 0x64e0d8
push 0xffffffffffffffff
mov ecx, edi
mov dword [ebp - 0x484], eax
call fcn.0044bcf0
push 0
push ecx
mov dword [esp], 0x41500000
mov ecx, edi
push 0x64e150
push 0x1c
push 0x96
push 0x1a4
push 0xaa
push 0x72
push 0x60fc24
call fcn.00450270
push 0
push ecx
mov dword [esp], 0x41500000
mov ecx, edi
push 0x64e198
push 0x1c
push 0x96
push 0x1a4
push 0x159
push 0xa2
push 0x64e1dc
mov dword [ebp - 0x42c], eax
call fcn.00450270
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x12
push 0xbe
push 0x1a9
push 0x208
push 0x64e1f4
mov ecx, esi
mov dword [ebp - 0x434], eax
call fcn.004f2030
push esi
push 0x64e230
push 0xffffffffffffffff
mov ecx, edi
mov dword [ebp - 0x3fc], eax
call fcn.0044bcf0
mov ecx, edi
call fcn.00461240
test eax, eax
je 0x530a94
push 4
push 0xffffffffffffffff
mov ecx, esi
call fcn.004edcc0
push 0
mov ecx, edi
call fcn.0044f6b0
push 0
mov ecx, edi
mov dword [ebp - 0x44c], eax
call fcn.0044f6b0
mov ecx, 0x70
mov dword [ebp - 0x444], eax
mov word [ebp - 0x2a], cx
mov cx, word [edi + 0x12d4]
mov word [ebp - 0x28], cx
mov ecx, 0x1b
mov word [ebp - 0x1c], ax
mov eax, 0x72
mov word [ebp - 0x24], cx
mov ecx, dword [ebp - 0x44c]
mov word [ebp - 0x18], ax
mov eax, dword [ebp - 0x428]
mov word [ebp - 0x22], cx
mov ecx, 0x46
mov word [ebp - 0x16], ax
lea eax, [ebp - 0x2c]
push 4
mov word [ebp - 0x1e], cx
mov ecx, esi
push eax
mov byte [ebp - 0x2c], 1
mov byte [ebp - 0x26], 1
mov byte [ebp - 0x20], 9
mov byte [ebp - 0x1a], 1
call fcn.004f4b60
push dword [ebp - 0x424]
mov ecx, esi
call fcn.004f4740
mov ecx, edi
call fcn.0044f850
push 0
push 1
mov ecx, edi
call fcn.00482050
push 0x80
push dword [ebp - 0x3e0]
mov ecx, esi
call fcn.004edcc0
xorps xmm0, xmm0
mov byte [ebp - 0x3d9], 0
lea ecx, [ebp - 0x58]
mov byte [ebp - 0x3da], 0
movq qword [ebp - 0x58], xmm0
mov dword [ebp - 0x50], 0
call fcn.00516ef0
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x74]
xorps xmm0, xmm0
mov dword [ebp - 0x6c], 0
movq qword [ebp - 0x74], xmm0
call fcn.00516ef0
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0xa8]
xorps xmm0, xmm0
mov dword [ebp - 0xa0], 0
movq qword [ebp - 0xa8], xmm0
call fcn.00516ef0
mov byte [ebp - 4], 0xc
mov ecx, edi
push 0
mov dword [ebp - 0x448], 0xffffffff
mov dword [ebp - 0x3ac], 0
call fcn.005b4250
test eax, eax
je 0x532e1c
nop dword [eax]
nop dword [eax + eax]
mov eax, dword [edi + 0x146c]
cmp eax, 0xfffffffa
je 0x532e1c
cmp dword [edi + 0x149c], esi
jne 0x533016
cmp eax, dword [ebp - 0x44c]
je 0x532e15
mov ecx, dword [ebp - 0x3ec]
cmp eax, 0xffffffb3
jne 0x530c1a
cmp dword [edi + 0x1478], ecx
je 0x530c22
cmp eax, dword [ebp - 0x444]
jne 0x530c9a
push 0x80
push ecx
mov ecx, esi
call fcn.004edcc0
push dword [ebp - 0x3ec]
mov ecx, esi
call fcn.004ecb20
push eax
lea ecx, [ebp - 0x3c]
call fcn.00516ae0
push 0x64df24
lea ecx, [ebp - 0x3c]
call fcn.00516de0
mov ecx, esi
test al, al
je 0x530c81
push 0
push 0
push dword [ebp - 0x3ec]
call fcn.004ed600
push 0
push dword [ebp - 0x3ec]
mov ecx, esi
call fcn.004ef460
push dword [ebp - 0x428]
jmp 0x53300f
push 0xffffffffffffffff
push 0
push 0xb1
push dword [ebp - 0x3ec]
call fcn.004ef7c0
jmp 0x533016
cmp eax, 0xffffffb4
jne 0x530ce9
cmp dword [edi + 0x1478], ecx
jne 0x530ce9
push ecx
mov ecx, esi
call fcn.004ecb20
push eax
lea ecx, [ebp - 0x3c]
call fcn.00516ae0
lea ecx, [ebp - 0x3c]
call fcn.00516cc0
cmp eax, 3
jl 0x533016
push 0xffffffffffffffff
push 6
push 0xffffffffffffffff
lea ecx, [ebp - 0x3c]
call fcn.00516ab0
mov ecx, dword [ebp - 0x430]
mov edx, eax
call fcn.004f9cc0
jmp 0x533016
cmp eax, dword [ebp - 0x428]
jne 0x530db2
push ecx
mov ecx, esi
call fcn.004ecb20
push eax
lea ecx, [ebp - 0x3c]
call fcn.00516ae0
push 0x64df24
lea ecx, [ebp - 0x3c]
call fcn.00516de0
test al, al
jne 0x530d97
lea ecx, [ebp - 0x3c]
call fcn.005167b0
test al, al
jne 0x530d97
push dword [ebp - 0x448]
lea ecx, [ebp - 0x3c]
push 0x1e
push 0xffffffffffffffff
call fcn.00516ab0
mov ecx, dword [ebp - 0x430]
mov edx, eax
call fcn.004f9cc0
mov dword [ebp - 0x448], eax
mov ecx, esi
push 0x80
cmp eax, 0xffffffff
je 0x530d68
push dword [ebp - 0x3d4]
call fcn.004edcc0
jmp 0x533016
push dword [ebp - 0x3ec]
call fcn.004edcc0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x8c
push 0x190
push 0
push esi
push 4
push 0x631590
mov ecx, edi
call fcn.00482c10
jmp 0x533016
push 0
push 0
push 0x201
push dword [ebp - 0x444]
mov ecx, esi
call fcn.004ef7c0
jmp 0x533016
cmp eax, 0xffffffbf
jne 0x530e5f
mov ecx, dword [ebp - 0x400]
cmp dword [edi + 0x1478], ecx
jne 0x530e5f
push 0
push 0
push 0x157
push ecx
mov ecx, esi
call fcn.004ef7c0
test eax, eax
je 0x530e07
push 1
push 0xa
mov ecx, edi
call fcn.0047c7a0
push 0
push 0
push 0x157
push dword [ebp - 0x400]
mov ecx, esi
call fcn.004ef7c0
test eax, eax
jne 0x530de2
push dword [ebp - 0x400]
mov ecx, esi
call fcn.004ecb20
push eax
lea ecx, [ebp - 0x3c]
call fcn.00516ae0
push 0x64e2d8
lea ecx, [ebp - 0x3c]
call fcn.00516de0
lea ecx, [ebp - 0x3c]
test al, al
je 0x530ea3
push dword [ebp - 0x408]
push 0x64e2f0
push 0
push 0x1000
push 0x64e280
push 0
call fcn.00516d20
mov edx, 0x64e304
mov ecx, eax
call fcn.005030d0
test al, al
jmp 0x530eb1
cmp eax, dword [ebp - 0x480]
jne 0x530f61
push dword [ebp - 0x408]
lea ecx, [ebp - 0x3c]
push 0x64e2f0
push 0
push 0x1000
push 0x64e280
push 0
call fcn.00516d20
mov edx, 0x64e304
mov ecx, eax
call fcn.005030d0
test al, al
je 0x533016
lea ecx, [ebp - 0x3c]
call fcn.00516ab0
push eax
call dword [0x5cd624]
test eax, eax
je 0x533016
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x8c
push 0x190
push 0
push esi
push 1
push 0x64e340
mov ecx, edi
call fcn.00482c10
test eax, eax
je 0x533016
push 0
push dword [ebp - 0x3d4]
lea ecx, [ebp - 0x3c]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.00517160
mov esi, eax
lea ecx, [ebp - 0x3c]
push esi
call fcn.00515d60
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
cmp esi, 1
mov ecx, 0x64e40c
mov eax, 0x64e3fc
cmovne eax, ecx
lea ecx, [ebp - 0x3c]
push 0x64e3c4
push eax
call fcn.00515270
mov esi, dword [ebp - 0x3d0]
lea ecx, [ebp - 0x3c]
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x8c
push 0x190
push 0
push esi
push 4
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.00482c10
jmp 0x533016
cmp eax, dword [ebp - 0x47c]
jne 0x531025
push dword [ebp - 0x408]
lea ecx, [ebp - 0x3c]
push 0x64e2f0
push 0x64e420
push 0
push 0x64e280
push 0
call fcn.00516d20
mov edx, 0x64e430
mov ecx, eax
call fcn.00503010
test al, al
je 0x533016
push 0
lea ecx, [ebp - 0x3c]
call fcn.00516ab0
push eax
push dword [ebp - 0x3d4]
mov ecx, edi
call fcn.00516fa0
mov esi, eax
lea ecx, [ebp - 0x3c]
push esi
call fcn.00515d60
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
cmp esi, 1
mov ecx, 0x64e40c
mov eax, 0x64e3fc
cmovne eax, ecx
lea ecx, [ebp - 0x3c]
push 0x64e46c
push eax
call fcn.00515270
mov esi, dword [ebp - 0x3d0]
lea ecx, [ebp - 0x3c]
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x8c
push 0x190
push 0
push esi
push 4
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.00482c10
jmp 0x533016
cmp eax, 0xffffffdc
jne 0x53111a
push 0
push 0
push 0x132f
push dword [ebp - 0x3f8]
mov ecx, esi
call fcn.004ef7c0
test eax, eax
jne 0x53105f
push 0x80
push dword [ebp - 0x3e0]
mov ecx, esi
call fcn.004edcc0
jmp 0x533016
cmp eax, 2
jne 0x53108d
push 0x80
push dword [ebp - 0x3d4]
mov ecx, esi
call fcn.004edcc0
push 0x80
push dword [ebp - 0x3f8]
mov ecx, esi
call fcn.004edcc0
jmp 0x533016
cmp eax, 3
jne 0x533016
cmp byte [ebp - 0x3da], 0
jne 0x533016
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x46
push 0x1c2
push 0
push 0x64e4a8
mov ecx, edi
mov byte [ebp - 0x3da], 1
call fcn.004823a0
push 0
push 0xffffffffffffffba
lea ecx, [edi + 0x14b0]
call fcn.004e73c0
push 0
push 1
mov ecx, edi
call fcn.00482050
push dword [ebp - 0x420]
mov ecx, edi
push dword [ebp - 0x3fc]
push dword [ebp - 0x3d8]
push dword [ebp - 0x3e4]
push dword [ebp - 0x3d0]
call fcn.00517350
push 2
lea ecx, [edi + 0x14b0]
call fcn.004e6fb0
mov esi, dword [ebp - 0x3d0]
jmp 0x533016
cmp eax, 0xfffffffb
jne 0x5311c2
mov ecx, dword [edi + 0x1478]
cmp ecx, dword [ebp - 0x5c]
je 0x531144
mov edx, dword [ebp - 0x404]
cmp ecx, edx
je 0x531144
cmp ecx, dword [ebp - 0x3e0]
jne 0x5311e5
push 1
push dword [edi + 0x147c]
lea ecx, [ebp - 0x58]
call fcn.00516b80
mov eax, dword [edi + 0x1478]
lea ecx, [ebp - 0x58]
mov dword [ebp - 0x48], eax
call fcn.00516ab0
push eax
call dword [0x5cd624]
test eax, eax
je 0x533016
mov eax, dword [ebp - 0x404]
cmp dword [ebp - 0x48], eax
jne 0x531196
lea ecx, [ebp - 0x58]
call fcn.00516ab0
push eax
call dword [0x5cd63c]
test eax, eax
je 0x533016
mov ecx, dword [ebp - 0x3e0]
xor eax, eax
cmp dword [ebp - 0x48], ecx
mov ecx, 3
cmove eax, ecx
lea ecx, [ebp - 0x58]
push eax
call fcn.00516ab0
push eax
push dword [ebp - 0x48]
mov ecx, esi
call fcn.004ed600
jmp 0x533016
cmp eax, 0xffffffbc
je 0x5311cc
cmp eax, 0xffffffbd
jne 0x5311ed
mov ecx, dword [ebp - 0x3e0]
cmp dword [edi + 0x1478], ecx
jne 0x5311f3
push dword [ebp - 0x424]
jmp 0x53300f
mov ecx, dword [ebp - 0x3e0]
jmp 0x5311f9
mov ecx, dword [ebp - 0x3e0]
mov edx, dword [ebp - 0x404]
cmp eax, dword [ebp - 0x478]
jne 0x531229
push 0
push 0
push 0x14b
push dword [ebp - 0x3e8]
call dword [0x5cd800]
push 2
push 0x648f90
mov ecx, edi
call fcn.0047a0a0
jmp 0x533016
cmp eax, dword [ebp - 0x470]
jne 0x53127d
push 0
mov ecx, esi
call fcn.004f5a60
push eax
push 0
push 0
push 0x10800800
push 0x60e510
push 0
mov edx, 0x64e508
lea ecx, [ebp - 0x58]
call fcn.005030d0
test al, al
je 0x533016
push 3
lea ecx, [ebp - 0x58]
call fcn.00516ab0
push eax
push dword [ebp - 0x3e0]
mov ecx, esi
call fcn.004ed600
jmp 0x533016
cmp eax, dword [ebp - 0x424]
jne 0x53136a
push ecx
mov ecx, esi
call fcn.004ecb20
push eax
lea ecx, [ebp - 0x3c]
call fcn.00516ae0
mov ecx, eax
call fcn.005167b0
test al, al
je 0x5312db
push 0x80
push dword [ebp - 0x3e0]
mov ecx, esi
call fcn.004edcc0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x8c
push 0x190
push 0
push esi
push 4
push 0x64e558
mov ecx, edi
call fcn.00482c10
jmp 0x533016
push 0
push 5
push 0
lea ecx, [ebp - 0x3c]
call fcn.00516530
mov ecx, eax
call fcn.00516ab0
xor edx, edx
mov ecx, eax
call fcn.005038e0
test eax, eax
je 0x533016
lea ecx, [ebp - 0x3c]
call fcn.00516ab0
push eax
push 0
push 0x14c
push dword [ebp - 0x3e8]
call dword [0x5cd800]
mov dword [ebp - 0x3b0], eax
test eax, eax
jle 0x531343
push 0
push eax
push 0x144
push dword [ebp - 0x3e8]
call dword [0x5cd800]
mov eax, dword [ebp - 0x3b0]
test eax, eax
je 0x533016
lea ecx, [ebp - 0x3c]
call fcn.00516ab0
push eax
push 0
push 0x14a
push dword [ebp - 0x3e8]
call dword [0x5cd800]
jmp 0x533016
cmp eax, dword [ebp - 0x474]
jne 0x5313db
push ecx
mov ecx, esi
call fcn.004ecb20
push eax
lea ecx, [ebp - 0x3c]
call fcn.00516ae0
mov ecx, eax
call fcn.005167b0
test al, al
je 0x5313c4
push 0x80
push dword [ebp - 0x3e0]
mov ecx, esi
call fcn.004edcc0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x8c
push 0x190
push 0
push esi
push 4
push 0x64e5e8
mov ecx, edi
call fcn.00482c10
jmp 0x533016
push 0
lea ecx, [ebp - 0x3c]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.0044f510
jmp 0x533016
cmp eax, 0xffffffb3
je 0x532fe2
cmp eax, 0xffffffb5
je 0x532fe2
cmp eax, 0xffffffb4
je 0x532fe2
cmp eax, 0xfffffff2
jne 0x531bfb
mov ecx, dword [ebp - 0x40c]
cmp dword [edi + 0x1478], ecx
jne 0x531bfb
push 2
push 0xffffffffffffffff
push ecx
mov ecx, esi
call fcn.004ebeb0
cmp eax, 0xffffffff
je 0x533016
push 1
push eax
push dword [ebp - 0x40c]
mov ecx, esi
call fcn.004ebf00
push eax
lea ecx, [ebp - 0x3c]
call fcn.00516ae0
lea eax, [ebp - 0x3c]
mov dword [ebp - 0x78], 0
xorps xmm0, xmm0
lea ecx, [ebp - 0x80]
push eax
movq qword [ebp - 0x80], xmm0
call fcn.00516ec0
push 0
push 1
push 1
push 0
push 0x5f0150
push 0
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0xd
call fcn.005167d0
mov ecx, eax
call fcn.00515510
test eax, eax
jne 0x53148f
lea eax, [edi + 0x1424]
push eax
lea ecx, [ebp - 0x80]
call fcn.00516e00
push 0
push 1
push 1
push 0
push 0x6494d8
lea ecx, [ebp - 0x3c]
call fcn.00515510
test eax, eax
je 0x5314b9
push str.rundll32
mov ecx, edi
call fcn.00462320
jmp 0x531b62
push 0x649580
lea ecx, [ebp - 0x3c]
call fcn.00516de0
test al, al
je 0x53151c
mov eax, dword [ebp - 0x408]
mov dword [ebp - 0xc4], eax
lea eax, [ebp - 0xc8]
push eax
mov dword [ebp - 0xc8], 0x14
mov dword [ebp - 0xc0], 0
mov dword [ebp - 0xbc], 0x64e664
mov dword [ebp - 0xb8], 0
call dword [0x5cd1e4]
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0xc
call fcn.00516d50
jmp 0x533016
push 0
push 1
push 1
push 0
push 0x649b58
lea ecx, [ebp - 0x3c]
call fcn.00515510
test eax, eax
je 0x53159d
movsd xmm0, qword [0x6a40a0]
comisd xmm0, xmmword [edi + 8]
jbe 0x531555
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0xc
call fcn.00516d50
jmp 0x533016
lea ecx, [ebp - 0x3c]
call fcn.00516ab0
or edx, 0xffffffff
mov ecx, eax
call fcn.00502230
test al, al
je 0x53158c
lea ecx, [edi + 0x28c]
push 0
push 5
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x3c]
call fcn.00516ab0
xor edx, edx
mov ecx, eax
call fcn.00503b90
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0xc
call fcn.00516d50
jmp 0x533016
push 0
push 1
push 1
push 0
push 0x64e680
lea ecx, [ebp - 0x3c]
call fcn.00515510
push 0
test eax, eax
je 0x53163c
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x64e6a0
push dword [edi + 0x24]
lea ecx, [ebp - 0x58]
call fcn.00516b20
lea ecx, [ebp - 0x58]
call fcn.00516ab0
push eax
call dword [0x5cd624]
test eax, eax
jne 0x53162b
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x8c
push 0x190
push eax
push esi
push 1
push 0x64e6b8
mov ecx, edi
call fcn.00482c10
test eax, eax
jne 0x531624
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0xc
call fcn.00516d50
jmp 0x533016
mov ecx, edi
call fcn.005a80f0
push 0x64e77c
mov ecx, edi
call fcn.00462320
jmp 0x531b62
push 1
push 1
push 0
push 0x64e784
lea ecx, [ebp - 0x3c]
call fcn.00515510
test eax, eax
je 0x531664
push 0x627d64
mov ecx, edi
call fcn.00462320
jmp 0x531b62
push 0
push 1
push 1
push 0
push 0x6497e4
lea ecx, [ebp - 0x3c]
call fcn.00515510
test eax, eax
je 0x53168e
push 0x64e77c
mov ecx, edi
call fcn.00462320
jmp 0x531b62
push 0
push 1
push 1
push 0
push str._rundll32.exe
lea ecx, [ebp - 0x3c]
call fcn.00515510
test eax, eax
je 0x5316b8
push str.rundll32
mov ecx, edi
call fcn.00462320
jmp 0x531b62
push 0
push 1
push 1
push 0
push 0x649964
lea ecx, [ebp - 0x3c]
call fcn.00515510
test eax, eax
je 0x5316e2
push 0x64e798
mov ecx, edi
call fcn.00462320
jmp 0x531b62
push 0
push 1
push 1
push 0
push 0x6499f0
lea ecx, [ebp - 0x3c]
call fcn.00515510
test eax, eax
je 0x531711
push 0x628604
push 0x64e7ac
mov ecx, edi
call fcn.00472f40
jmp 0x531b62
push 0
push 1
push 1
push 0
push 0x64e7cc
lea ecx, [ebp - 0x3c]
call fcn.00515510
test eax, eax
je 0x53173b
push 0x64e7e0
mov ecx, edi
call fcn.00462320
jmp 0x531b62
push 0
push 1
push 1
push 0
push 0x649e68
lea ecx, [ebp - 0x3c]
call fcn.00515510
test eax, eax
je 0x531765
push 0x64e7e8
mov ecx, edi
call fcn.00462320
jmp 0x531b62
push 0
push 1
push 1
push 0
push 0x64e7f0
lea ecx, [ebp - 0x3c]
call fcn.00515510
test eax, eax
je 0x53178f
push 0x64e810
mov ecx, edi
call fcn.00462320
jmp 0x531b62
push 0
push 1
push 1
push 0
push 0x64a090
lea ecx, [ebp - 0x3c]
call fcn.00515510
lea ecx, [ebp - 0x3c]
test eax, eax
je 0x5317e0
call fcn.00516ab0
push eax
call dword [0x5cd624]
test eax, eax
jne 0x5317cc
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0xc
call fcn.00516d50
jmp 0x533016
push 0x64e828
mov ecx, edi
call fcn.00462320
lea ecx, [ebp - 0x80]
jmp 0x531571
push 0
push 1
push 1
push 0
push 0x64a5f0
call fcn.00515510
test eax, eax
je 0x531807
push 0x64e830
mov ecx, edi
call fcn.00462320
jmp 0x531b62
push 0
push 1
push 1
push 0
push 0x64a7cc
lea ecx, [ebp - 0x3c]
call fcn.00515510
test eax, eax
je 0x531831
push 0x64e844
mov ecx, edi
call fcn.00462320
jmp 0x531b62
push 0
push 1
push 1
push 0
push 0x64a10c
lea ecx, [ebp - 0x3c]
call fcn.00515510
test eax, eax
je 0x53185b
push 0x64e858
mov ecx, edi
call fcn.00462320
jmp 0x531b62
push 0
push 1
push 1
push 0
push 0x64a17c
lea ecx, [ebp - 0x3c]
call fcn.00515510
test eax, eax
je 0x531885
push str.regedit
mov ecx, edi
call fcn.00462320
jmp 0x531b62
push 0
push 1
push 1
push 0
push 0x64e870
lea ecx, [ebp - 0x3c]
call fcn.00515510
test eax, eax
je 0x5318af
push 0x64e88c
mov ecx, edi
call fcn.00462320
jmp 0x531b62
push 0
push 1
push 1
push 0
push 0x64a3ec
lea ecx, [ebp - 0x3c]
call fcn.00515510
test eax, eax
je 0x5318d9
push 0x64e89c
mov ecx, edi
call fcn.00462320
jmp 0x531b62
push 0
push 1
push 1
push 0
push 0x64a4a0
lea ecx, [ebp - 0x3c]
call fcn.00515510
test eax, eax
je 0x531903
push 0x64e8b0
mov ecx, edi
call fcn.00462320
jmp 0x531b62
push 0
push 1
push 1
push 0
push 0x64a8ac
lea ecx, [ebp - 0x3c]
call fcn.00515510
test eax, eax
je 0x531939
mov ecx, edi
call fcn.00461240
test eax, eax
je 0x531b62
push 0
mov ecx, edi
call fcn.004610d0
jmp 0x531b62
push 0
push 1
push 1
push 0
push 0x64a9bc
lea ecx, [ebp - 0x3c]
call fcn.00515510
test eax, eax
je 0x531963
push 0x64e8cc
mov ecx, edi
call fcn.00462320
jmp 0x531b62
push 0
push 1
push 1
push 0
push 0x64ab04
lea ecx, [ebp - 0x3c]
call fcn.00515510
push 0
test eax, eax
je 0x531a62
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x621200
lea ecx, [edi + 0x154]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x80]
call fcn.00516b20
push 5
lea ecx, [ebp - 0x80]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x3c]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.0047a780
push 0
push 1
push 0x64e8dc
mov ecx, edi
call fcn.004795e0
push 0
push 0x80
push 0x64e8dc
mov ecx, edi
call fcn.004795e0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xa0
push 0x1c2
push 0
push esi
push 1
push 0x64e8f0
mov ecx, edi
call fcn.00482c10
cmp eax, 1
jne 0x53158c
push eax
push 5
push 0
push 0xffffffffffffffba
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x46
push 0x1c2
push esi
push 0
mov ecx, edi
call fcn.004823a0
mov ecx, eax
call fcn.004e73c0
mov ecx, eax
call fcn.004e7010
mov ecx, edi
call fcn.00472600
push 2
lea ecx, [edi + 0x14b0]
call fcn.004e6fb0
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0xc
call fcn.00516d50
jmp 0x533016
push 1
push 1
push 0
push 0x64ab64
lea ecx, [ebp - 0x3c]
call fcn.00515510
test eax, eax
je 0x531a8a
push 0x64eaf0
mov ecx, edi
call fcn.00462320
jmp 0x531b62
push 0
push 1
push 1
push 0
push 0x64eb04
lea ecx, [ebp - 0x3c]
call fcn.00515510
test eax, eax
je 0x531ab4
push 0x64eb20
mov ecx, edi
call fcn.00462320
jmp 0x531b62
push 0
push 1
push 1
push 0
push 0x64eb30
lea ecx, [ebp - 0x3c]
call fcn.00515510
test eax, eax
je 0x531ade
push 0x64eb4c
mov ecx, edi
call fcn.00462320
jmp 0x531b62
push 0
push 1
push 1
push 0
push 0x64eb5c
lea ecx, [ebp - 0x3c]
call fcn.00515510
test eax, eax
je 0x531b62
push 0
lea ecx, [ebp - 0x3c]
call fcn.00516d60
cmp word [eax], 0x20
jne 0x531ba2
cmp eax, dword [ebp - 0x46c]
jne 0x531c52
push 0
mov ecx, esi
call fcn.004f5a60
push eax
push 0
push 0
push 0x10800800
push 0x60e510
push 0
mov edx, 0x64ebf0
lea ecx, [ebp - 0x58]
call fcn.005030d0
test al, al
je 0x533016
push 0
lea ecx, [ebp - 0x58]
call fcn.00516ab0
push eax
push dword [ebp - 0x5c]
mov ecx, esi
call fcn.004ed600
push dword [ebp - 0x41c]
jmp 0x53300f
cmp eax, dword [ebp - 0x468]
jne 0x531c8d
push dword [ebp - 0x5c]
mov ecx, esi
call fcn.004ecb20
push eax
lea ecx, [ebp - 0x58]
call fcn.00516ae0
lea ecx, [ebp - 0x58]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.0047aeb0
push 6
push 5
mov ecx, esi
call fcn.004f4380
jmp 0x533016
cmp eax, dword [ebp - 0x41c]
jne 0x531ff3
push 0
push ecx
push dword [ebp - 0x5c]
mov ecx, esi
call fcn.004ecb20
add esp, 4
lea ecx, [ebp - 0x58]
push eax
call fcn.00516ae0
mov ecx, eax
call fcn.00516530
lea ecx, [ebp - 0x58]
call fcn.00516ab0
push eax
call dword [0x5cd624]
test eax, eax
jne 0x531cef
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x8c
push 0x190
push eax
push eax
push 4
push 0x64ec38
mov ecx, edi
call fcn.00482c10
jmp 0x533016
push 0
push 0
push 0x147
push dword [ebp - 0x3f0]
mov ecx, esi
call fcn.004ef7c0
test eax, eax
jne 0x531d23
push 0x5f3998
lea ecx, [ebp - 0x58]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.0045e0c0
jmp 0x533016
cmp eax, 1
jne 0x531d3f
push 2
lea ecx, [ebp - 0x58]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.0044f510
jmp 0x533016
cmp eax, 2
jne 0x531e01
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x8c
push 0x190
push 0
push 0
push 1
push 0x64eca8
mov ecx, edi
call fcn.00482c10
test eax, eax
je 0x533016
push 0
push 4
lea ecx, [ebp - 0x58]
call fcn.00516ab0
mov edx, 1
mov ecx, eax
call fcn.00512160
lea ecx, [ebp - 0x58]
push 0
push 0
test al, al
je 0x531dca
call fcn.00516ab0
push eax
push 0x64ed20
mov ecx, edi
call fcn.0044b0d0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x8c
push 0x190
push 0
push 0
push 4
push 0x64ed70
mov ecx, edi
call fcn.00482c10
jmp 0x533016
call fcn.00516ab0
push eax
push 0x64edc8
mov ecx, edi
call fcn.0044b0d0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x8c
push 0x190
push 0
push 0
push 4
push 0x64ee08
mov ecx, edi
call fcn.00482c10
jmp 0x533016
cmp eax, 3
jne 0x531ec3
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x8c
push 0x190
push 0
push 0
push 1
push 0x64ee58
mov ecx, edi
call fcn.00482c10
test eax, eax
je 0x533016
push 0
push 4
lea ecx, [ebp - 0x58]
call fcn.00516ab0
mov edx, 1
mov ecx, eax
call fcn.00512380
lea ecx, [ebp - 0x58]
push 0
push 0
test al, al
je 0x531e8c
call fcn.00516ab0
push eax
push 0x64eed8
mov ecx, edi
call fcn.0044b0d0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x8c
push 0x190
push 0
push 0
push 4
push 0x64ef28
mov ecx, edi
call fcn.00482c10
jmp 0x533016
call fcn.00516ab0
push eax
push 0x64ef88
mov ecx, edi
call fcn.0044b0d0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x8c
push 0x190
push 0
push 0
push 4
push 0x64efd0
mov ecx, edi
call fcn.00482c10
jmp 0x533016
cmp eax, 4
jne 0x531f6b
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x8c
push 0x190
push 0
push 0
push 1
push 0x64f028
mov ecx, edi
call fcn.00482c10
test eax, eax
je 0x533016
push 0
push 4
lea ecx, [ebp - 0x58]
call fcn.00516ab0
mov edx, 1
mov ecx, eax
call fcn.00512380
push 0
push 2
lea ecx, [ebp - 0x58]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.0044aaf0
mov ecx, edi
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x8c
push 0x190
push 0
push 0
push 4
cmp al, 1
jne 0x531f49
push 0x64f0a0
call fcn.00482c10
jmp 0x533016
cmp al, 2
jne 0x531f5c
push 0x64f0f8
call fcn.00482c10
jmp 0x533016
push 0x64f168
call fcn.00482c10
jmp 0x533016
cmp eax, 5
jne 0x533016
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
xorps xmm0, xmm0
mov dword [ebp - 0xac], 0
push 0x5f0068
lea ecx, [ebp - 0x58]
movq qword [ebp - 0xb4], xmm0
call fcn.00516ab0
push eax
push 0x64f20c
lea ecx, [edi + 0x214]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0xb4]
call fcn.00516e40
push 5
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0xb4]
push dword [edi + 0x24]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.0047a780
lea ecx, [ebp - 0xb4]
mov byte [ebp - 4], 0xc
call fcn.00516d50
jmp 0x533016
cmp eax, dword [ebp - 0x460]
jne 0x53204a
push 0
mov ecx, esi
call fcn.004f5a60
push eax
push 0
push 1
push 0
lea ecx, [ebp - 0x58]
call fcn.00516d20
mov edx, 0x64f240
mov ecx, eax
call fcn.00502dc0
test al, al
je 0x533016
push 0
lea ecx, [ebp - 0x58]
call fcn.00516ab0
push eax
push dword [ebp - 0x404]
mov ecx, esi
call fcn.004ed600
push dword [ebp - 0x438]
jmp 0x53300f
cmp eax, dword [ebp - 0x438]
jne 0x532266
push 0
push ecx
push edx
mov ecx, esi
call fcn.004ecb20
add esp, 4
lea ecx, [ebp - 0x58]
push eax
call fcn.00516ae0
mov ecx, eax
call fcn.00516530
lea ecx, [ebp - 0x58]
call fcn.00516ab0
push eax
call dword [0x5cd63c]
mov ecx, edi
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x8c
push 0x190
push 0
push esi
test eax, eax
jne 0x5320ab
push 4
push 0x64f290
call fcn.00482c10
jmp 0x533016
push 1
push 0x64f308
call fcn.00482c10
test eax, eax
je 0x533016
push 1
mov ecx, edi
call fcn.00482220
push 0
push 0x64f3dc
push 0
push 0xffffffffffffffba
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x46
push 0x1c2
push esi
push 0x64f398
mov ecx, edi
call fcn.004823a0
mov ecx, eax
call fcn.004e73c0
mov ecx, eax
call fcn.004e7180
lea ecx, [ebp - 0x44]
mov dword [ebp - 0x44], 0
call fcn.00512da0
push 0x1a
lea ecx, [ebp - 0x3b8]
mov byte [ebp - 4], 0xf
call fcn.00512e60
push 3
push 0x10000000
push 1
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x44]
push dword [ebp - 0x3b8]
call fcn.00512c20
push 3
push 0x10000000
push 1
push 0x16
lea ecx, [ebp - 0x44]
call fcn.00512c50
push 3
push 0x10000000
push 1
push 1
lea ecx, [ebp - 0x44]
call fcn.00512c50
call fcn.005133c0
comisd xmm0, xmmword [0x6a40a8]
jbe 0x532195
push 3
push 0xa0000000
push 1
push str.S_1_15_2_1
lea ecx, [ebp - 0x44]
call fcn.00512cd0
push 3
push 0xa0000000
push 1
push str.S_1_15_2_2
lea ecx, [ebp - 0x44]
call fcn.00512cd0
push dword [ebp - 0x3b8]
lea ecx, [ebp - 0x58]
push 5
push 1
call fcn.00516ab0
push eax
lea eax, [ebp - 0x44]
mov ecx, edi
push eax
call fcn.004729f0
mov dword [ebp - 0x3b0], eax
test eax, eax
jne 0x5321e1
push dword [ebp - 0x3b8]
lea ecx, [ebp - 0x58]
push 5
push 1
call fcn.00516ab0
push eax
lea eax, [ebp - 0x44]
mov ecx, edi
push eax
call fcn.004729f0
mov dword [ebp - 0x3b0], eax
push 2
lea ecx, [edi + 0x14b0]
call fcn.004e6fb0
push 0
push 1
mov ecx, edi
call fcn.00482050
mov eax, dword [ebp - 0x3b0]
cmp eax, 0xffffffff
jne 0x532220
lea ecx, [ebp - 0x3b8]
call fcn.00512dd0
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0xc
call fcn.00512d90
jmp 0x533016
mov ecx, edi
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x8c
push 0x190
push 0
push esi
push 4
test eax, eax
je 0x532240
push 0x64f410
jmp 0x532245
push 0x64f470
call fcn.00482c10
lea ecx, [ebp - 0x3b8]
call fcn.00512dd0
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0xc
call fcn.00512d90
jmp 0x533016
cmp eax, 0xffffffbc
je 0x532270
cmp eax, 0xffffffbd
jne 0x532289
mov ecx, dword [ebp - 0x450]
cmp dword [edi + 0x1478], ecx
jne 0x53228f
push dword [ebp - 0x43c]
jmp 0x53300f
mov ecx, dword [ebp - 0x450]
cmp eax, dword [ebp - 0x43c]
jne 0x532346
push ecx
mov ecx, esi
call fcn.004ecb20
push eax
lea ecx, [ebp - 0x3c]
call fcn.00516ae0
lea ecx, [ebp - 0x3c]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.0045e180
test eax, eax
je 0x532311
push 0x5f08bc
lea ecx, [ebp - 0x3c]
call fcn.00516de0
test al, al
je 0x5322e2
push 1
push 0x64f4e8
lea ecx, [ebp - 0x68]
call fcn.00516b80
jmp 0x53231e
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x64f550
lea ecx, [ebp - 0x3c]
call fcn.00516ab0
push eax
push 0x637f78
lea ecx, [ebp - 0x68]
call fcn.00516b20
jmp 0x53231e
push 0x64f5a0
lea ecx, [ebp - 0x68]
call fcn.00516e30
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x8c
push 0x190
push 0
push esi
push 4
lea ecx, [ebp - 0x68]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.00482c10
jmp 0x533016
cmp eax, dword [ebp - 0x45c]
jne 0x53237e
push 0x5f08bc
mov ecx, edi
call fcn.0045e560
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x8c
push 0x190
push 0
push esi
push 4
push 0x64f660
mov ecx, edi
call fcn.00482c10
jmp 0x533016
cmp eax, dword [ebp - 0x464]
jne 0x5323b6
push 0x5f08bc
mov ecx, edi
call fcn.0045e1e0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x8c
push 0x190
push 0
push esi
push 4
push 0x64f730
mov ecx, edi
call fcn.00482c10
jmp 0x533016
cmp eax, dword [ebp - 0x454]
jne 0x53241e
push dword [ebp - 0x418]
mov ecx, esi
call fcn.004ecb20
push eax
lea ecx, [ebp - 0x74]
call fcn.00516ae0
push 0
lea ecx, [ebp - 0x74]
call fcn.00516ab0
push eax
push 0x2710
lea ecx, [ebp - 0x74]
call fcn.005162e0
push eax
mov edx, 0x64f7e8
mov ecx, esi
call fcn.00487c90
test al, al
je 0x533016
push 0
lea ecx, [ebp - 0x74]
call fcn.00516ab0
push eax
push dword [ebp - 0x418]
mov ecx, esi
call fcn.004ed600
jmp 0x533016
cmp eax, dword [ebp - 0x414]
jne 0x5326f9
push dword [ebp - 0x418]
mov ecx, esi
call fcn.004ecb20
push eax
lea ecx, [ebp - 0x74]
call fcn.00516ae0
lea ecx, [ebp - 0x74]
call fcn.00516ab0
xor edx, edx
mov ecx, eax
call fcn.0050e4c0
test al, al
jne 0x53247a
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x8c
push 0x190
push 0
push 0
push 4
push 0x64f830
mov ecx, edi
call fcn.00482c10
jmp 0x533016
push 0
push 0
push 0x147
push dword [ebp - 0x410]
mov ecx, esi
call fcn.004ef7c0
mov dword [ebp - 0x3b0], eax
test eax, eax
jle 0x5324de
push 0
push 1
push 1
push 0
push 0x5ed514
lea ecx, [ebp - 0x74]
call fcn.00515510
test eax, eax
jne 0x5324d6
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x8c
push 0x190
push eax
push eax
push 4
push 0x64f8b0
mov ecx, edi
call fcn.00482c10
jmp 0x533016
mov eax, dword [ebp - 0x3b0]
test eax, eax
jne 0x5324f7
push 2
lea ecx, [ebp - 0x74]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.0044f510
jmp 0x533016
cmp eax, 1
jne 0x5325b2
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x8c
push 0x190
push 0
push 0
push eax
push 0x64f910
mov ecx, edi
call fcn.00482c10
test eax, eax
je 0x533016
push 0xe
lea ecx, [ebp - 0x74]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.004606c0
lea ecx, [ebp - 0x74]
push 0
push 0
test eax, eax
je 0x53257b
call fcn.00516ab0
push eax
push 0x64f990
mov ecx, edi
call fcn.0044b0d0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x8c
push 0x190
push 0
push 0
push 4
push 0x64f9e8
mov ecx, edi
call fcn.00482c10
jmp 0x533016
call fcn.00516ab0
push eax
push 0x64fa38
mov ecx, edi
call fcn.0044b0d0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x8c
push 0x190
push 0
push 0
push 4
push 0x64fa88
mov ecx, edi
call fcn.00482c10
jmp 0x533016
cmp eax, 2
jne 0x53266e
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x8c
push 0x190
push 0
push 0
push 1
push 0x64fad8
mov ecx, edi
call fcn.00482c10
test eax, eax
je 0x533016
push 0xc
lea ecx, [ebp - 0x74]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.004606c0
lea ecx, [ebp - 0x74]
push 0
push 0
test eax, eax
je 0x532637
call fcn.00516ab0
push eax
push 0x64fb50
mov ecx, edi
call fcn.0044b0d0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x8c
push 0x190
push 0
push 0
push 4
push 0x64fba0
mov ecx, edi
call fcn.00482c10
jmp 0x533016
call fcn.00516ab0
push eax
push 0x64fc10
mov ecx, edi
call fcn.0044b0d0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x8c
push 0x190
push 0
push 0
push 4
push 0x64fc50
mov ecx, edi
call fcn.00482c10
jmp 0x533016
cmp eax, 3
jne 0x533016
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x8c
push 0x190
push 0
push 0
push 1
push 0x64fcb8
mov ecx, edi
call fcn.00482c10
test eax, eax
je 0x533016
push 0xc
lea ecx, [ebp - 0x74]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.004606c0
lea ecx, [ebp - 0x74]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.00480c70
mov ecx, edi
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x8c
push 0x190
push 0
push 0
push 4
test al, al
je 0x5326ea
push 0x64fd20
call fcn.00482c10
jmp 0x533016
push 0x64fd88
call fcn.00482c10
jmp 0x533016
cmp eax, 0xffffffd3
je 0x532707
cmp eax, 0xffffffd2
jne 0x53278f
mov ecx, dword [ebp - 0x3d4]
cmp dword [edi + 0x1478], ecx
jne 0x532795
push 2
push 0xffffffffffffffff
push ecx
mov ecx, esi
call fcn.004ebeb0
mov ecx, esi
cmp eax, 0xffffffff
jne 0x532743
push 0
push 0x5ed51c
push dword [ebp - 0x440]
call fcn.004ed600
jmp 0x533016
push 1
push eax
push dword [ebp - 0x3d4]
call fcn.004ebf00
push eax
lea ecx, [ebp - 0x3c]
call fcn.00516ae0
mov ecx, eax
call fcn.005167b0
test al, al
je 0x532772
push 0x64fde8
lea ecx, [ebp - 0x3c]
call fcn.00516e30
push 0
lea ecx, [ebp - 0x3c]
call fcn.00516ab0
push eax
push dword [ebp - 0x440]
mov ecx, esi
call fcn.004ed600
jmp 0x533016
mov ecx, dword [ebp - 0x3d4]
cmp eax, 0xffffffd1
je 0x5327a3
cmp eax, 0xffffffd0
jne 0x532949
cmp dword [edi + 0x1478], ecx
jne 0x532949
mov eax, dword [edi + 0x147c]
mov dword [ebp - 0x48], eax
cmp eax, 0xffffffff
je 0x533016
push 0xf000
push eax
push 0x102c
push ecx
mov ecx, esi
call fcn.004f5a60
push eax
call dword [0x5cd800]
push 1
push dword [ebp - 0x48]
shr eax, 0xd
mov ecx, esi
push dword [ebp - 0x3d4]
and eax, 0xffffff01
mov dword [ebp - 0x3b0], eax
call fcn.004ebf00
push eax
lea ecx, [ebp - 0x3c]
call fcn.00516ae0
push 0x64ba40
lea ecx, [ebp - 0x3c]
call fcn.00516de0
push 0
push dword [ebp - 0x48]
movzx eax, al
mov ecx, esi
push dword [ebp - 0x3d4]
add dword [ebp - 0x3ac], eax
call fcn.004ebf00
push eax
lea ecx, [ebp - 0x3c]
call fcn.00516ae0
push 0
push dword [ebp - 0x3b0]
lea ecx, [ebp - 0x3c]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.00517560
cmp eax, 0xfffffffe
jne 0x5328b9
mov eax, dword [ebp - 0x3b0]
mov ecx, esi
movzx eax, al
xor eax, 1
mov dword [ebp - 0xe0], 0xf000
inc eax
shl eax, 0xc
mov dword [ebp - 0xe4], eax
lea eax, [ebp - 0xf0]
push eax
push dword [ebp - 0x48]
push 0x102b
push dword [ebp - 0x3d4]
call fcn.004f5a60
push eax
call dword [0x5cd800]
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x8c
push 0x190
push 0
push esi
push 4
push 0x64fe30
mov ecx, edi
call fcn.00482c10
jmp 0x533016
cmp eax, 1
jge 0x532925
mov eax, dword [ebp - 0x3b0]
mov ecx, esi
movzx eax, al
xor eax, 1
mov dword [ebp - 0xe0], 0xf000
inc eax
shl eax, 0xc
mov dword [ebp - 0xe4], eax
lea eax, [ebp - 0xf0]
push eax
push dword [ebp - 0x48]
push 0x102b
push dword [ebp - 0x3d4]
call fcn.004f5a60
push eax
call dword [0x5cd800]
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x8c
push 0x190
push 0
push esi
push 4
push 0x64feb8
mov ecx, edi
call fcn.00482c10
jmp 0x533016
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x8c
push 0x190
push 0
push esi
push 4
push 0x64ff08
mov ecx, edi
call fcn.00482c10
jmp 0x533016
mov ecx, dword [ebp - 0x484]
cmp eax, ecx
jne 0x532982
push 4
push ecx
mov ecx, esi
call fcn.004ecdd0
push 0xffffffffffffffff
test eax, eax
mov ecx, esi
push 0
setne byte [ebp - 0x458]
push dword [ebp - 0x458]
push dword [ebp - 0x3e4]
call fcn.004ec410
jmp 0x533016
cmp eax, dword [ebp - 0x42c]
jne 0x532acb
push dword [ebp - 0x3e4]
xorps xmm0, xmm0
mov ecx, esi
movlpd qword [ebp - 0x4c], xmm0
call fcn.004ec1d0
mov dword [ebp - 0x4c], eax
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x8c
push 0x190
mov byte [ebp - 4], 0x11
mov ecx, edi
cmp dword [eax], 0
push 0
push 0
jne 0x5329e4
push 4
push 0x64ff68
call fcn.00482c10
mov byte [ebp - 4], 0xc
mov ecx, dword [ebp - 0x4c]
push ecx
call fcn.0041e876
add esp, 4
jmp 0x533016
push 1
push 0x64ffd8
call fcn.00482c10
test eax, eax
je 0x5329cf
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x46
push 0x1f4
push 0
push 0x650060
mov ecx, edi
call fcn.004823a0
push 0
push str.Cancel
push 0
lea ecx, [edi + 0x14b0]
push 0xffffffffffffffba
call fcn.004e73c0
mov ecx, eax
call fcn.004e7180
mov ecx, dword [ebp - 0x4c]
mov eax, dword [ecx]
mov dword [ebp - 0x3b0], eax
test eax, eax
je 0x532aaa
jmp 0x532a43
mov ecx, dword [ebp - 0x4c]
push 0
push dword [ecx + eax*4]
mov ecx, esi
push dword [ebp - 0x3e4]
call fcn.004ebf00
push eax
lea ecx, [ebp - 0xa8]
call fcn.00516ae0
lea ecx, [ebp - 0xa8]
call fcn.00515a90
push eax
mov ecx, edi
call fcn.0046ccc0
cmp eax, 0xffffffff
je 0x532aaa
cmp eax, 1
jne 0x532a99
mov eax, dword [ebp - 0x3b0]
mov ecx, dword [ebp - 0x4c]
push 0
push dword [ecx + eax*4]
mov ecx, esi
push dword [ebp - 0x3e4]
call fcn.004ec350
mov eax, dword [ebp - 0x3b0]
sub eax, 1
mov dword [ebp - 0x3b0], eax
jne 0x532a40
push 2
lea ecx, [edi + 0x14b0]
call fcn.004e6fb0
mov byte [ebp - 4], 0xc
push dword [ebp - 0x4c]
call fcn.0041e876
add esp, 4
jmp 0x533016
cmp eax, dword [ebp - 0x434]
jne 0x532c84
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
xorps xmm0, xmm0
mov dword [ebp - 0x88], 0
push 0x62038c
lea ecx, [edi + 0x13dc]
movq qword [ebp - 0x90], xmm0
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x90]
call fcn.00516e40
push 0x96
push 0x186
xorps xmm0, xmm0
mov byte [ebp - 4], 0x12
push 0
lea ecx, [ebp - 0x90]
movlpd qword [ebp - 0x3b4], xmm0
call fcn.00516ab0
push eax
push 0x6500b0
mov ecx, edi
call fcn.00481ac0
mov dword [ebp - 0x3b4], eax
mov byte [ebp - 4], 0x13
test eax, eax
jne 0x532b71
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 0xc
call fcn.00516d50
jmp 0x533016
mov ecx, eax
call fcn.00513870
mov ecx, edi
cmp eax, 1
jge 0x532bbf
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x8c
push 0x190
push 0
push 0
push 4
push 0x650110
call fcn.00482c10
push dword [ebp - 0x3b4]
call fcn.0041e876
add esp, 4
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x90]
call fcn.00516d50
jmp 0x533016
push 0
push 0xffffffffffffffba
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x46
push 0x1c2
push 0
push 0
call fcn.004823a0
mov ecx, eax
call fcn.004e73c0
push 0
push 0
push 0
push 0x64
push dword [ebp - 0x3b4]
mov ecx, edi
call fcn.0046ca50
mov ecx, dword [ebp - 0x3f4]
mov edi, eax
push 2
add ecx, 0x14b0
mov esi, edx
call fcn.004e6fb0
or edi, esi
mov edi, dword [ebp - 0x3f4]
mov ecx, edi
push 0xffffffffffffffff
push 0xffffffffffffffff
je 0x532c5f
push 0xa0
push 0x19a
push 0
push 0
push 4
push 0x650188
call fcn.00482c10
push dword [ebp - 0x420]
mov esi, dword [ebp - 0x3d0]
mov ecx, edi
push dword [ebp - 0x3fc]
push dword [ebp - 0x3d8]
push dword [ebp - 0x3e4]
push esi
call fcn.00517350
jmp 0x532b9d
push 0x8c
push 0x190
push 0
push 0
push 4
push 0x6502d0
call fcn.00482c10
mov esi, dword [ebp - 0x3d0]
jmp 0x532b9d
cmp eax, dword [ebp - 0x3fc]
jne 0x532e09
push 0
push 1
mov ecx, edi
call fcn.00482050
push 4
push dword [ebp - 0x3fc]
mov ecx, esi
call fcn.004ecdd0
movsd xmm0, qword [0x6a40a8]
comisd xmm0, xmmword [edi + 8]
mov dword [ebp - 0x3b0], eax
jbe 0x532ce6
push 0
push 0xffffffffffffffba
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x46
push 0x1c2
push 0
push 0
mov ecx, edi
call fcn.004823a0
mov ecx, eax
call fcn.004e73c0
mov eax, dword [ebp - 0x3b0]
mov ecx, edi
push 0
test eax, eax
je 0x532cf5
call fcn.00460fc0
jmp 0x532cfa
call fcn.004610d0
movsd xmm0, qword [0x6a40a8]
comisd xmm0, xmmword [edi + 8]
mov dword [ebp - 0x48], eax
jbe 0x532d19
push 2
lea ecx, [edi + 0x14b0]
call fcn.004e6fb0
push 4
push dword [ebp - 0x3fc]
mov ecx, esi
call fcn.004ecdd0
neg eax
mov dword [ebp - 0x94], 0
xorps xmm0, xmm0
lea ecx, [ebp - 0x9c]
sbb eax, eax
movq qword [ebp - 0x9c], xmm0
and eax, 4
add eax, 4
mov dword [ebp - 0x3b0], eax
call fcn.00516ef0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
mov byte [ebp - 4], 0x14
mov eax, 0x650364
cmp dword [ebp - 0x48], 1
mov ecx, 0x65036c
push 0
push 0x650354
je 0x532db3
cmp dword [ebp - 0x3b0], 4
cmovne eax, ecx
lea ecx, [ebp - 0x9c]
push eax
push 0x650378
call fcn.00516b20
push dword [ebp - 0x3b0]
mov ecx, esi
push dword [ebp - 0x3fc]
call fcn.004edcc0
jmp 0x532dce
cmp dword [ebp - 0x3b0], 4
cmovne eax, ecx
lea ecx, [ebp - 0x9c]
push eax
push 0x6503c8
call fcn.00516b20
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x8c
push 0x190
push 0
push 0
push 4
lea ecx, [ebp - 0x9c]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.00482c10
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 0xc
call fcn.00516d50
jmp 0x533016
cmp eax, dword [ebp - 0x420]
jne 0x533016
mov byte [ebp - 0x3d9], 1
push 0
push 0
push 0x146
push dword [ebp - 0x3e8]
call dword [0x5cd800]
xor esi, esi
mov dword [ebp - 0x42c], eax
test eax, eax
jle 0x532f03
xor edi, edi
push 0
push esi
push 0x149
push dword [ebp - 0x3e8]
call dword [0x5cd800]
mov dword [ebp - 0x434], eax
cmp eax, 1
jl 0x532ef0
push 0
lea ecx, [eax + 2]
push 0
push ecx
lea ecx, [ebp - 0x68]
call fcn.005162e0
push eax
push esi
push 0x148
push dword [ebp - 0x3e8]
call dword [0x5cd800]
test eax, eax
je 0x532ef0
push dword [ebp - 0x434]
lea ecx, [ebp - 0x68]
call fcn.00516d60
xor ecx, ecx
push ecx
mov word [eax], cx
lea ecx, [ebp - 0x68]
call fcn.00516ab0
push eax
push 1
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x649098
push edi
lea ecx, [ebp - 0x3c]
call fcn.00515d60
mov ecx, eax
call fcn.005150b0
mov ecx, eax
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x84]
call fcn.00510c50
inc edi
cmp edi, 0x1d
jg 0x532efd
inc esi
cmp esi, dword [ebp - 0x42c]
jl 0x532e43
mov edi, dword [ebp - 0x3f4]
cmp dword [ebp - 0x3ac], 0
jle 0x532f3a
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x8c
push 0x190
push 0
push 0
push 1
push 0x650418
mov ecx, edi
call fcn.00482c10
cmp eax, 1
jne 0x532f3a
push 0
mov ecx, edi
call fcn.00479a10
mov al, byte [ebp - 0x3d9]
mov ecx, edi
xor al, 1
movzx eax, al
push eax
call fcn.0044f7b0
lea ecx, [ebp - 0xa8]
call fcn.00516d50
lea ecx, [ebp - 0x74]
call fcn.00516d50
lea ecx, [ebp - 0x58]
call fcn.00516d50
mov eax, dword [ebp - 0x158]
cmp eax, 0xffffffff
je 0x532f7a
push eax
call dword [0x5cd484]
lea ecx, [ebp - 0x3cc]
call fcn.005117c0
lea ecx, [ebp - 0x40]
call fcn.005116a0
lea ecx, [ebp - 0x3bc]
call fcn.00403100
lea ecx, [ebp - 0xfc]
call fcn.00511770
lea ecx, [ebp - 0x84]
call fcn.005116a0
lea ecx, [ebp - 0x68]
call fcn.00516d50
lea ecx, [ebp - 0x3c]
call fcn.00516d50
mov al, byte [ebp - 0x3d9]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0041e865
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
mov eax, dword [edi + 0x1478]
cmp eax, dword [ebp - 0x5c]
jne 0x532ff5
push dword [ebp - 0x41c]
jmp 0x53300f
cmp eax, edx
jne 0x533001
push dword [ebp - 0x438]
jmp 0x53300f
cmp eax, dword [ebp - 0x418]
jne 0x533016
push dword [ebp - 0x414]
mov ecx, esi
call fcn.004f4740
push 0
mov ecx, edi
call fcn.005b4250
test eax, eax
jne 0x530be0
jmp 0x532e1c