Function at 0x446da0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5e6602
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x1f8
mov eax, dword [0x705200]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x1e8], edi
push 1
push 0x6791f4
call fcn.0044dd30
push 1
mov dword [ebp - 0x1ac], eax
lea ecx, [edi + 0x11a4]
mov eax, dword [edi + 0x1f20]
push 0x679228
mov dword [ebp - 0x1a8], eax
mov dword [edi + 0x1f20], 0
call fcn.005451b0
mov esi, dword [edi + 0x14b4]
lea eax, [ebp - 0x10c]
push eax
push dword [ebp - 0x1ac]
mov dword [ebp - 0x1b0], esi
call dword [0x5fd76c]
push 0xffffffffffffffff
push 0x5f
push 0xa5
push 0xa
push 0x64
push dword [edi + 0x68]
mov ecx, edi
call fcn.00464bb0
movsd xmm1, qword [0x6e4350]
mov ecx, esi
push 0
push str.Arial
push 1
push 0x320
call fcn.005217f0
push 0x37
push 0x50
push 3
push 0xa
mov ecx, edi
call fcn.0044e570
push 0x679294
lea ecx, [edi + 0x1418]
call fcn.00545460
push 0xffffffffffffffff
push 0x10000001
push 0x2d
push 0x5a
push 0x3c
push 5
lea ecx, [edi + 0x1418]
call fcn.005450e0
push eax
mov ecx, esi
call fcn.0051df20
push dword [edi + 0x1408]
mov ecx, esi
push 0xffffffffffffffff
call fcn.0051c300
movsd xmm1, qword [0x6e4328]
mov ecx, esi
push 0
push str.Arial
push 1
push 0x190
call fcn.005217f0
push 0xffffffffffffffff
push 0x10000001
push 0x10
push 0x91
push 0x14
push 0x6e
push 0x6792b4
mov ecx, esi
call fcn.0051df20
push dword [edi + 0x1408]
mov ecx, esi
push 0xffffffffffffffff
call fcn.0051c300
push ecx
push 0xffffffffffffffff
push ecx
push 0
push 0x6792d8
push 1
push ecx
push 0x8c
push 0x32
push 0x73
push 0x67938c
mov ecx, edi
call fcn.0044e290
push ecx
push 0xffffffffffffffff
push ecx
push 0
push 0x6793b8
push 0
push ecx
push 0x8c
push 0x4b
push 0x73
push 0x6794ec
mov ecx, edi
mov dword [ebp - 0x1f0], eax
call fcn.0044e290
push 0
push ecx
mov dword [esp], 0x41500000
mov ecx, edi
push 0x679518
push 0x5f
push 0x50
push 0xa
push 0x10e
push 0x72
push 0x6795d4
mov dword [ebp - 0x1f4], eax
call fcn.0044e4a0
push 0
push ecx
mov dword [esp], 0x41500000
mov ecx, edi
push 0x6795f0
push 0x5f
push 0x4b
push 0xa
push 0x163
push 0x8b
push 0x6796a4
mov dword [ebp - 0x1a0], eax
call fcn.0044e4a0
push 0
push ecx
mov dword [esp], 0x41500000
mov ecx, edi
push 0x6796c8
push 0x5f
push 0x4b
push 0xa
push 0x1b3
push 0x8b
push 0x679714
mov dword [ebp - 0x204], eax
call fcn.0044e4a0
push 0
push ecx
mov dword [esp], 0x41500000
mov ecx, edi
push 0x679730
push 0x5f
push 0x4b
push 0xa
push 0x203
push 0xa4
push 0x67978c
mov dword [ebp - 0x1cc], eax
call fcn.0044e4a0
push 0
push ecx
mov dword [esp], 0x41500000
push 0x673154
push 0x5f
mov dword [ebp - 0x1ec], eax
push 0x46
push 0xa
push 0x253
push 0x7d
push 0x673180
mov ecx, edi
call fcn.0044e4a0
push 0
push ecx
mov dword [esp], 0x41500000
mov ecx, edi
push 0x6797a8
push 0x5f
push 0x4b
push 0xa
push 0x29e
push 0xb3
push 0x673148
mov dword [edi + 0x11c4], eax
call fcn.0044e4a0
push 0
push 0x10800080
push 0x19
push 0xb9
push 0x23
push 0x2f3
push 0x6797e8
mov ecx, esi
mov dword [edi + 0x11c8], eax
call fcn.0051e0d0
push 0x909090
push 0xffffffffffffffff
mov ecx, esi
mov dword [ebp - 0x194], eax
call fcn.0051c300
movsd xmm0, qword [0x6e4338]
sub esp, 0xc
movsd qword [esp + 4], xmm0
push 0
push ecx
push 0x190
push 0xffffffffffffffff
mov ecx, esi
call fcn.0051c1a0
push 0x40
push 0xffffffffffffffff
mov ecx, esi
call fcn.0051aa80
push 0
push ecx
mov dword [esp], 0x41500000
mov ecx, edi
push 0x677b7c
push 0x28
push 0x5a
push 0x41
push 0x2f3
push 0x86
push 0x677b7c
call fcn.0044e400
push 0
push ecx
mov dword [esp], 0x41500000
mov ecx, edi
push 0x62c6b0
push 0x28
push 0x5a
push 0x41
push 0x352
push 0x99
push 0x677b90
mov dword [ebp - 0x184], eax
call fcn.0044e400
push 0
push 0x679818
mov ecx, edi
mov dword [ebp - 0x1c8], eax
call fcn.0044db80
mov ecx, edi
call fcn.0044d9b0
xorps xmm0, xmm0
movq qword [ebp - 0x8c], xmm0
sub esp, 8
mov dword [ebp - 0x84], 0
lea ecx, [ebp - 0x8c]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x679838
push 0x62edd8
call fcn.00545470
mov dword [ebp - 4], 0
lea ecx, [ebp - 0xfc]
xorps xmm0, xmm0
mov dword [ebp - 0xf4], 0
movq qword [ebp - 0xfc], xmm0
call fcn.00545530
push 0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x8c]
push 0xffffffffffffffff
mov dword [ebp - 0x94], 0
call fcn.005450e0
push eax
lea ecx, [ebp - 0x94]
call fcn.0053fa50
lea eax, [ebp - 0x90]
mov byte [ebp - 4], 2
push eax
push 0x679858
lea ecx, [ebp - 0x94]
call fcn.0053f680
test al, al
jne 0x447211
mov dword [ebp - 0x90], 1
movsd xmm1, qword [0x6e4328]
mov ecx, esi
push 0
push str.Arial
push 1
push 0x190
mov byte [ebp - 0x17d], 0
mov byte [ebp - 0x175], 0
mov dword [ebp - 0x17c], 0
call fcn.005217f0
push dword [ebp - 0x1a8]
lea eax, [ebp - 0x17c]
mov ecx, edi
push dword [ebp - 0x90]
push eax
call fcn.00446b70
push dword [ebp - 0x17c]
mov ecx, esi
call fcn.00522c70
push 0
push 1
mov ecx, edi
mov dword [ebp - 0x174], eax
call fcn.00465630
push 0x48
call dword [0x5fd6d0]
movsd xmm0, qword [0x6e42e8]
mov ecx, eax
comisd xmm0, xmmword [edi + 8]
mov dword [ebp - 0x18c], ecx
jb 0x4472b2
push 4
call dword [0x5fd7f8]
mov ecx, dword [ebp - 0x18c]
or eax, 0xff000000
jmp 0x4472b4
xor eax, eax
push eax
push ecx
push ecx
push 0x8b
mov ecx, edi
mov dword [ebp - 0x198], eax
call fcn.0045e340
push eax
lea ecx, [ebp - 0x154]
call fcn.00523a10
mov byte [ebp - 4], 3
mov ecx, esi
push dword [ebp - 0x154]
push 0x679870
push dword [ebp - 0x184]
call fcn.0051eae0
push 0
push eax
push dword [ebp - 0x184]
mov ecx, esi
mov dword [ebp - 0x1c4], eax
call fcn.00522c20
push eax
call dword [0x5fd800]
push dword [ebp - 0x198]
mov eax, dword [ebp - 0x18c]
mov ecx, edi
push eax
push eax
push 0x72
call fcn.0045e340
push eax
lea ecx, [ebp - 0x158]
call fcn.00523a10
push 0
mov byte [ebp - 4], 4
mov ecx, esi
push dword [ebp - 0x158]
push 0
push 0x32
push 0x6798b0
push dword [ebp - 0x184]
call fcn.0051da90
push dword [ebp - 0x198]
mov dword [ebp - 0x1e4], eax
mov ecx, edi
mov eax, dword [ebp - 0x18c]
push eax
push eax
push 0x81
call fcn.0045e340
push eax
lea ecx, [ebp - 0x15c]
call fcn.00523a10
push 0
mov byte [ebp - 4], 5
mov ecx, esi
push dword [ebp - 0x15c]
push 0
push 0x32
push 0x679908
push dword [ebp - 0x184]
call fcn.0051da90
push dword [ebp - 0x198]
mov dword [ebp - 0x1dc], eax
mov ecx, edi
mov eax, dword [ebp - 0x18c]
push eax
push eax
push 0x82
call fcn.0045e340
push eax
lea ecx, [ebp - 0x170]
call fcn.00523a10
push 0
mov byte [ebp - 4], 6
push dword [ebp - 0x170]
push 0
push 0x32
push 0x679968
push dword [ebp - 0x184]
mov ecx, esi
call fcn.0051da90
push 0
push 0
push 8
push 0x32
push 0
push dword [ebp - 0x184]
mov ecx, esi
mov dword [ebp - 0x1d8], eax
call fcn.0051da90
push dword [ebp - 0x198]
mov eax, dword [ebp - 0x18c]
mov ecx, edi
push eax
push eax
push 0x7c
call fcn.0045e340
push eax
lea ecx, [ebp - 0x160]
call fcn.00523a10
push 0
mov byte [ebp - 4], 7
mov ecx, esi
push dword [ebp - 0x160]
push 0
push 0x32
push 0x6799b8
push dword [ebp - 0x184]
call fcn.0051da90
push dword [ebp - 0x198]
mov dword [ebp - 0x1d4], eax
mov ecx, edi
mov eax, dword [ebp - 0x18c]
push eax
push eax
push 0x8a
call fcn.0045e340
push eax
lea ecx, [ebp - 0x164]
call fcn.00523a10
push 0
mov byte [ebp - 4], 8
mov ecx, esi
push dword [ebp - 0x164]
push 0
push 0x32
push 0x6799f8
push dword [ebp - 0x184]
call fcn.0051da90
push dword [ebp - 0x198]
mov dword [ebp - 0x1bc], eax
mov ecx, edi
mov eax, dword [ebp - 0x18c]
push eax
push eax
push 0x80
call fcn.0045e340
push eax
lea ecx, [ebp - 0x150]
call fcn.00523a10
push 0
mov byte [ebp - 4], 9
mov ecx, esi
push dword [ebp - 0x150]
push 0
push 0x32
push 0x677ef0
push dword [ebp - 0x184]
call fcn.0051da90
push dword [ebp - 0x198]
mov dword [ebp - 0x1d0], eax
mov eax, dword [ebp - 0x18c]
push eax
push eax
push 0xac
mov ecx, edi
call fcn.0045e340
push eax
lea ecx, [ebp - 0x168]
call fcn.00523a10
push 0
mov byte [ebp - 4], 0xa
mov ecx, esi
push dword [ebp - 0x168]
push 0
push 0x32
push 0x677f28
push dword [ebp - 0x184]
call fcn.0051da90
push 0
push dword [ebp - 0x154]
mov ecx, esi
mov dword [ebp - 0x1e0], eax
push 0
push 0x32
push 0x679a20
push dword [ebp - 0x184]
call fcn.0051da90
push 0
push 0
push 8
push 0x32
push 0
push dword [ebp - 0x184]
mov ecx, esi
mov dword [ebp - 0x1a8], eax
call fcn.0051da90
push dword [ebp - 0x198]
mov eax, dword [ebp - 0x18c]
mov ecx, edi
push eax
push eax
push 0x94
call fcn.0045e340
push eax
lea ecx, [ebp - 0x16c]
call fcn.00523a10
push 0
mov byte [ebp - 4], 0xb
mov ecx, esi
push dword [ebp - 0x16c]
push 0
push 0x32
push 0x679a5c
push dword [ebp - 0x184]
call fcn.0051da90
push 0
push 0
push 8
push 0x32
push 0
push dword [ebp - 0x184]
mov ecx, esi
mov dword [ebp - 0x1b8], eax
call fcn.0051da90
push 0
push dword [ebp - 0x150]
mov ecx, esi
push 0
push 0x32
push 0x677fac
push dword [ebp - 0x184]
call fcn.0051da90
push dword [ebp - 0x198]
mov dword [ebp - 0x1b4], eax
mov ecx, edi
mov eax, dword [ebp - 0x18c]
push eax
push eax
push 0xb1
call fcn.0045e340
push eax
lea ecx, [ebp - 0x14c]
call fcn.00523a10
push 0
mov byte [ebp - 4], 0xc
mov ecx, esi
push dword [ebp - 0x14c]
push 0
push 0x32
push 0x677fe0
push dword [ebp - 0x184]
call fcn.0051da90
push 0
push dword [ebp - 0x14c]
mov ecx, esi
mov dword [ebp - 0x198], eax
push 0
push 0x32
push 0x679a78
push dword [ebp - 0x184]
call fcn.0051da90
push 0
mov ecx, edi
mov dword [ebp - 0x1c0], eax
call fcn.0044d820
mov edx, eax
mov cx, word [edi + 0x11c8]
mov eax, 0x74
mov word [ebp - 0x76], cx
mov word [ebp - 0x7e], ax
mov ecx, 0x2e
mov eax, dword [ebp - 0x1cc]
mov word [ebp - 0x7c], ax
mov eax, 0x1b
mov word [ebp - 0x78], ax
mov eax, 0x70
mov word [ebp - 0x72], ax
mov ax, word [edi + 0x11c4]
mov word [ebp - 0x70], ax
mov eax, 0x72
mov word [ebp - 0x6c], ax
mov eax, dword [ebp - 0x1c8]
mov word [ebp - 0x6a], ax
mov eax, 0xd
mov word [ebp - 0x66], ax
mov eax, dword [ebp - 0x1c4]
mov word [ebp - 0x64], ax
mov eax, dword [ebp - 0x1e4]
mov word [ebp - 0x5e], ax
mov eax, dword [ebp - 0x1dc]
mov word [ebp - 0x58], ax
mov eax, dword [ebp - 0x1d8]
mov word [ebp - 0x52], ax
mov eax, 0x47
mov word [ebp - 0x4e], ax
mov eax, dword [ebp - 0x1d4]
mov word [ebp - 0x4c], ax
mov eax, dword [ebp - 0x1bc]
mov word [ebp - 0x46], ax
mov eax, 0x56
mov word [ebp - 0x60], cx
mov word [ebp - 0x5a], cx
mov word [ebp - 0x54], cx
mov ecx, 0x50
mov word [ebp - 0x42], ax
mov eax, dword [ebp - 0x1d0]
mov dword [ebp - 0x200], edx
mov byte [ebp - 0x80], 1
mov byte [ebp - 0x7a], 1
mov byte [ebp - 0x74], 1
mov byte [ebp - 0x6e], 1
mov byte [ebp - 0x68], 9
mov byte [ebp - 0x62], 1
mov byte [ebp - 0x5c], 5
mov byte [ebp - 0x56], 9
mov byte [ebp - 0x50], 9
mov byte [ebp - 0x4a], 0x11
mov word [ebp - 0x48], cx
mov byte [ebp - 0x44], 0x11
mov word [ebp - 0x40], ax
mov byte [ebp - 0x3e], 9
mov eax, 0x4c
mov word [ebp - 0x36], cx
mov word [ebp - 0x3c], ax
lea ecx, [ebp - 0x148]
mov eax, dword [ebp - 0x1e0]
mov word [ebp - 0x3a], ax
mov eax, dword [ebp - 0x1a8]
mov word [ebp - 0x34], ax
mov eax, 0x4d
mov word [ebp - 0x30], ax
mov eax, dword [ebp - 0x1b4]
mov word [ebp - 0x2e], ax
mov eax, 0x55
mov word [ebp - 0x2a], ax
mov eax, dword [ebp - 0x198]
mov word [ebp - 0x28], ax
mov eax, 0x48
mov word [ebp - 0x24], ax
mov eax, dword [ebp - 0x1c0]
mov word [ebp - 0x22], ax
mov eax, 0x46
push 0
mov byte [ebp - 0x38], 9
mov byte [ebp - 0x32], 9
mov byte [ebp - 0x2c], 9
mov byte [ebp - 0x26], 9
mov byte [ebp - 0x20], 9
mov word [ebp - 0x1e], ax
mov word [ebp - 0x1c], dx
call fcn.005395f0
push 0x11
lea eax, [ebp - 0x80]
mov ecx, esi
push eax
call fcn.00521ce0
push dword [ebp - 0x174]
mov dword [ebp - 0x18c], 0
call dword [0x5fd7b0]
push 0x20
push dword [ebp - 0x194]
mov ecx, esi
call fcn.0051aa80
xorps xmm0, xmm0
lea ecx, [ebp - 0xf0]
movups xmmword [ebp - 0xf0], xmm0
movq qword [ebp - 0xe0], xmm0
call fcn.00542300
push dword [ebp - 0x1c8]
mov ecx, esi
mov byte [ebp - 4], 0xd
call fcn.005218b0
push 0
mov ecx, edi
call fcn.005e2990
test eax, eax
je 0x4489f5
mov edx, dword [edi + 0x1478]
mov eax, dword [0x5fd6cc]
mov dword [ebp - 0x190], edx
cmp edx, 0xfffffffa
je 0x4489f5
cmp dword [edi + 0x14a8], esi
jne 0x4489b0
cmp edx, dword [edi + 0x11c8]
je 0x4489ee
mov ecx, dword [ebp - 0x194]
cmp edx, 0xffffffb3
jne 0x4478bf
cmp dword [edi + 0x1484], ecx
je 0x4478cb
cmp edx, dword [ebp - 0x200]
jne 0x447975
mov ecx, edi
call fcn.005deda0
push 0x80
push dword [ebp - 0x194]
mov ecx, esi
call fcn.0051aa80
push dword [ebp - 0x194]
mov ecx, esi
call fcn.005198c0
push eax
lea ecx, [ebp - 0x8c]
call fcn.00545110
push 0x6797e8
lea ecx, [ebp - 0x8c]
call fcn.00545410
mov ecx, esi
test al, al
je 0x44795c
push 0
push 0
push dword [ebp - 0x194]
call fcn.0051a3c0
push 0
push dword [ebp - 0x194]
mov ecx, esi
call fcn.0051c300
movsd xmm0, qword [0x6e4350]
sub esp, 0xc
movsd qword [esp + 4], xmm0
push 0
push ecx
push 0x190
push dword [ebp - 0x194]
mov ecx, esi
call fcn.0051c1a0
jmp 0x4489b0
push 0xffffffffffffffff
push 0
push 0xb1
push dword [ebp - 0x194]
call fcn.0051c660
jmp 0x4489b0
cmp edx, 0xffffffb4
jne 0x447a36
cmp dword [edi + 0x1484], ecx
jne 0x447a36
push ecx
mov ecx, esi
call fcn.005198c0
push eax
lea ecx, [ebp - 0x8c]
call fcn.00545110
lea ecx, [ebp - 0x8c]
call fcn.005452f0
cmp eax, 3
jl 0x447869
cmp dword [ebp - 0x18c], 0
jne 0x4479d0
push 0
push 9
push 0x110a
push dword [ebp - 0x174]
call dword [0x5fd6cc]
push ecx
lea ecx, [ebp - 0x8c]
call fcn.005450e0
push eax
push 0
push dword [ebp - 0x17c]
mov ecx, esi
call fcn.005178f0
mov dword [ebp - 0x18c], eax
test eax, eax
je 0x4489b0
push eax
push 9
push 0x110b
push dword [ebp - 0x174]
call dword [0x5fd6cc]
push dword [ebp - 0x18c]
push 0
push 0x1114
push dword [ebp - 0x174]
call dword [0x5fd6cc]
mov dword [ebp - 0x18c], 0
jmp 0x4489b0
cmp edx, dword [ebp - 0x1c8]
jne 0x447b81
push ecx
mov ecx, esi
call fcn.005198c0
push eax
lea ecx, [ebp - 0x8c]
call fcn.00545110
push 0x6797e8
lea ecx, [ebp - 0x8c]
call fcn.00545410
test al, al
jne 0x447a79
lea ecx, [ebp - 0x8c]
call fcn.00544e00
test al, al
je 0x447ad1
push 0
push 0
push dword [ebp - 0x194]
mov ecx, esi
call fcn.0051a3c0
push 0
push dword [ebp - 0x194]
mov ecx, esi
call fcn.0051c300
movsd xmm0, qword [0x6e4350]
sub esp, 0xc
movsd qword [esp + 4], xmm0
push 0
push ecx
push 0x190
push dword [ebp - 0x194]
mov ecx, esi
call fcn.0051c1a0
push 0x80
push dword [ebp - 0x194]
mov ecx, esi
call fcn.0051aa80
lea ecx, [ebp - 0x8c]
call fcn.00544e00
test al, al
jne 0x447869
push ecx
call fcn.005450e0
push eax
push dword [ebp - 0x18c]
mov ecx, esi
push dword [ebp - 0x17c]
call fcn.005178f0
mov dword [ebp - 0x18c], eax
test eax, eax
je 0x447b4c
push eax
push 9
push 0x110b
push dword [ebp - 0x174]
call dword [0x5fd6cc]
push dword [ebp - 0x18c]
push 0
push 0x1114
push dword [ebp - 0x174]
call dword [0x5fd6cc]
push 0x80
push dword [ebp - 0x17c]
mov ecx, esi
call fcn.0051aa80
jmp 0x4489b0
push 0x80
push dword [ebp - 0x194]
mov ecx, esi
call fcn.0051aa80
sub esp, 8
mov ecx, edi
push 0x8c
push 0x190
push 0
push esi
push 4
push 0x62d6a0
call fcn.004661f0
jmp 0x4489b0
cmp byte [ebp - 0x17d], 1
jne 0x447ba9
cmp edx, 0xffffff31
jne 0x447ba9
lea ecx, [ebp - 0x148]
call fcn.005395d0
mov byte [ebp - 0x17d], 2
jmp 0x447869
mov ecx, dword [ebp - 0x17c]
cmp edx, 0xffffffea
jne 0x447bbc
cmp dword [edi + 0x1484], ecx
je 0x447bc8
cmp edx, dword [ebp - 0x184]
jne 0x447dac
cmp edx, dword [ebp - 0x184]
jne 0x447c19
push dword [ebp - 0x174]
call dword [0x5fd7b0]
cmp byte [ebp - 0x17d], 2
jne 0x447c0d
xorps xmm1, xmm1
lea ecx, [ebp - 0x148]
call fcn.00539580
movsd xmm1, qword [0x6e43c0]
comisd xmm1, xmm0
jbe 0x447c0d
mov byte [ebp - 0x17d], 0
jmp 0x447869
mov eax, dword [0x5fd6cc]
mov byte [ebp - 0x17d], 1
push 0
push 9
push 0x110a
push dword [ebp - 0x174]
call eax
push eax
push 3
push 0x110a
push dword [ebp - 0x174]
mov dword [ebp - 0x1f8], eax
call dword [0x5fd6cc]
mov edx, dword [ebp - 0x1c4]
mov ecx, eax
test ecx, ecx
mov dword [ebp - 0x1fc], ecx
mov ecx, 0x40
mov eax, 0x20
cmove eax, ecx
mov ecx, dword [ebp - 0x1b4]
mov dword [ebp - 0x1a4], eax
cmp edx, ecx
jg 0x447caa
mov edi, edx
mov edx, dword [ebp - 0x1b8]
nop dword [eax]
cmp edi, edx
je 0x447c9f
push eax
push edi
mov ecx, esi
call fcn.0051aa80
mov eax, dword [ebp - 0x1a4]
mov ecx, dword [ebp - 0x1b4]
mov edx, dword [ebp - 0x1b8]
inc edi
cmp edi, ecx
jle 0x447c80
mov edi, dword [ebp - 0x1e8]
push 0
mov ecx, edi
call fcn.0045d5e0
mov ecx, dword [ebp - 0x1b0]
test al, al
mov eax, 0x40
mov esi, 0x20
cmovne esi, eax
push esi
push dword [ebp - 0x198]
call fcn.0051aa80
push esi
push dword [ebp - 0x1c0]
mov esi, dword [ebp - 0x1b0]
mov ecx, esi
call fcn.0051aa80
cmp dword [ebp - 0x1f8], 0
je 0x447d09
cmp dword [ebp - 0x1fc], 0
jne 0x447d09
push 0x20
push dword [ebp - 0x1bc]
mov ecx, esi
call fcn.0051aa80
mov eax, dword [ebp - 0x184]
cmp dword [ebp - 0x190], eax
jne 0x447d7a
lea ecx, [ebp - 0x10c]
push ecx
push eax
mov ecx, esi
call fcn.00522c70
push eax
call dword [0x5fd734]
test eax, eax
je 0x447d74
mov eax, dword [ebp - 0x10c]
mov ecx, esi
mov edx, dword [ebp - 0x184]
add eax, 0x5a
mov dword [ebp - 0x19c], eax
mov eax, dword [ebp - 0x108]
add eax, 0x2d
mov dword [ebp - 0x1a4], eax
mov eax, 8
push dword [ebp - 0x1a4]
push dword [ebp - 0x19c]
push eax
push edx
call fcn.00519660
jmp 0x4489b0
mov eax, dword [ebp - 0x184]
mov dword [ebp - 0x1a4], 0xffffffff
mov edx, eax
push dword [ebp - 0x1a4]
mov dword [ebp - 0x19c], 0xffffffff
xor eax, eax
push dword [ebp - 0x19c]
mov ecx, esi
push eax
push edx
call fcn.00519660
jmp 0x4489b0
cmp edx, 0xffffffeb
jne 0x447dcc
cmp dword [edi + 0x1484], ecx
jne 0x447dcc
push dword [ebp - 0x194]
push ecx
mov ecx, edi
call fcn.00466190
jmp 0x4489b0
cmp edx, dword [ebp - 0x204]
je 0x448952
cmp edx, dword [ebp - 0x1c4]
je 0x448952
cmp edx, 0xfffffff2
jne 0x447df5
cmp dword [edi + 0x1484], ecx
je 0x448952
cmp edx, dword [ebp - 0x1ec]
jne 0x447ebd
push 0xd
push dword [edi + 0x11c4]
xorps xmm0, xmm0
push ecx
push dword [ebp - 0x1a0]
lea ecx, [ebp - 0x12c]
push esi
movups xmmword [ebp - 0x12c], xmm0
movups xmmword [ebp - 0x11c], xmm0
call fcn.00515f60
lea eax, [ebp - 0x90]
mov byte [ebp - 4], 0xf
push eax
mov ecx, edi
call fcn.00445380
push dword [ebp - 0x1ac]
mov byte [ebp - 0x185], al
call dword [0x5fd7a8]
cmp byte [ebp - 0x185], 0
jne 0x447e6e
lea ecx, [ebp - 0x12c]
mov byte [ebp - 4], 0xd
call fcn.00515ef0
jmp 0x447869
push 0
push dword [ebp - 0x90]
lea eax, [ebp - 0x17c]
mov ecx, edi
push eax
call fcn.00446b70
push dword [ebp - 0x17c]
mov ecx, esi
call fcn.00522c70
push 0
mov dword [ebp - 0x174], eax
lea ecx, [ebp - 0x94]
lea eax, [ebp - 0x90]
push eax
push 4
push 0x679858
call fcn.0053ef10
lea ecx, [ebp - 0x12c]
jmp 0x4489a7
cmp edx, dword [ebp - 0x1e4]
je 0x448842
mov ecx, dword [ebp - 0x1a0]
cmp edx, ecx
jne 0x447ef0
push 4
push dword [ebp - 0x1f0]
mov ecx, esi
call fcn.00519b90
test eax, eax
jne 0x44883d
mov ecx, dword [ebp - 0x1a0]
mov eax, dword [edi + 0x1478]
cmp eax, dword [ebp - 0x1dc]
je 0x4486f0
cmp eax, ecx
jne 0x447f1d
push 4
push dword [ebp - 0x1f4]
mov ecx, esi
call fcn.00519b90
test eax, eax
jne 0x4486f0
mov eax, dword [edi + 0x1478]
cmp eax, dword [ebp - 0x1d8]
jne 0x44811e
push 0
push 9
push 0x110a
push dword [ebp - 0x174]
call dword [0x5fd6cc]
push eax
push 3
push 0x110a
push dword [ebp - 0x174]
mov dword [ebp - 0x1a4], eax
call dword [0x5fd6cc]
mov ecx, eax
mov eax, dword [ebp - 0x1a4]
mov dword [ebp - 0x19c], ecx
test eax, eax
je 0x447869
test ecx, ecx
je 0x447869
lea ecx, [ebp - 0xf0]
push ecx
lea ecx, [ebp - 0x8c]
push ecx
push eax
push dword [ebp - 0x17c]
mov ecx, edi
call fcn.00445300
test al, al
je 0x447869
push 0xd
push dword [edi + 0x11c4]
xorps xmm0, xmm0
lea ecx, [ebp - 0xc0]
push dword [ebp - 0x17c]
movups xmmword [ebp - 0xc0], xmm0
push dword [ebp - 0x1a0]
movups xmmword [ebp - 0xb0], xmm0
push esi
call fcn.00515f60
sub esp, 8
mov byte [ebp - 4], 0x12
mov ecx, edi
push 0x8c
push 0
push 0
push 0
push 1
push 0x679d30
call fcn.004661f0
test eax, eax
jne 0x448009
lea ecx, [ebp - 0xc0]
mov byte [ebp - 4], 0xd
call fcn.00515ef0
jmp 0x447869
xorps xmm0, xmm0
mov dword [ebp - 0xd0], 0
lea ecx, [ebp - 0xd8]
movq qword [ebp - 0xd8], xmm0
call fcn.00545530
lea eax, [ebp - 0xf0]
mov byte [ebp - 4], 0x13
push eax
lea eax, [ebp - 0xd8]
mov byte [ebp - 0x185], 0
push eax
push dword [ebp - 0x19c]
mov ecx, edi
push dword [ebp - 0x17c]
call fcn.00445300
test al, al
je 0x44808e
lea ecx, [ebp - 0xd8]
call fcn.00543fb0
mov ecx, eax
call fcn.005298b0
mov byte [ebp - 0x185], al
test al, al
je 0x44808e
push dword [ebp - 0x19c]
push 0
push 0x1101
push dword [ebp - 0x174]
call dword [0x5fd6cc]
push 0
push 0xc
lea ecx, [ebp - 0x8c]
call fcn.005450e0
push eax
mov ecx, edi
call fcn.00448ae0
cmp eax, 1
jne 0x4480d3
cmp byte [ebp - 0x185], 0
jne 0x4480cc
push dword [ebp - 0x1a4]
push 0
push 0x1101
push dword [ebp - 0x174]
call dword [0x5fd6cc]
push 0x679b58
jmp 0x4480dd
cmp eax, 2
jne 0x4480e8
push 0x679bd8
lea ecx, [ebp - 0x8c]
call fcn.00545460
sub esp, 8
lea ecx, [ebp - 0x8c]
push 0x8c
push 0x190
push 0
push 0
push 4
call fcn.005450e0
push eax
mov ecx, edi
call fcn.004661f0
lea ecx, [ebp - 0xd8]
call fcn.00545380
jmp 0x4489a1
cmp eax, dword [ebp - 0x1b4]
jne 0x4481a0
push 0
push 9
push 0x110a
push dword [ebp - 0x174]
call dword [0x5fd6cc]
push eax
push 3
push 0x110a
push dword [ebp - 0x174]
mov dword [ebp - 0x190], eax
call dword [0x5fd6cc]
test eax, eax
je 0x447869
lea eax, [ebp - 0xf0]
mov ecx, edi
push eax
lea eax, [ebp - 0x8c]
push eax
push dword [ebp - 0x190]
push dword [ebp - 0x17c]
call fcn.00445300
test al, al
je 0x447869
push 0
lea ecx, [ebp - 0x8c]
call fcn.005450e0
push eax
mov ecx, edi
call fcn.0045d8e0
jmp 0x4489b0
cmp eax, dword [ebp - 0x198]
jne 0x4481ca
push 0
mov ecx, edi
call fcn.0045d5e0
test al, al
jne 0x447869
push 0
push ecx
mov ecx, edi
call fcn.0045d770
or eax, 0x100
jmp 0x4481f6
cmp eax, dword [ebp - 0x1c0]
jne 0x44823c
push 0
mov ecx, edi
call fcn.0045d5e0
test al, al
jne 0x447869
push dword [edi + 0x1f28]
push ecx
mov ecx, edi
call fcn.0045d770
or eax, 0x80
add esp, 4
push eax
push ecx
mov ecx, dword [ebp - 0x174]
call fcn.00507110
mov ecx, dword [edi + 0x30]
mov dword [ebp - 0x190], eax
cmp ecx, 0xffffffff
je 0x448225
test ecx, ecx
je 0x448225
push ecx
call dword [0x5fd3a0]
mov eax, dword [ebp - 0x190]
mov dword [edi + 0x30], eax
test eax, eax
jne 0x4489b0
mov dword [edi + 0x30], 0xffffffff
jmp 0x4489b0
cmp eax, dword [ebp - 0x1d4]
jne 0x4482b4
push 0
push 9
push 0x110a
push dword [ebp - 0x174]
call dword [0x5fd6cc]
push eax
push 3
push 0x110a
push dword [ebp - 0x174]
mov dword [ebp - 0x190], eax
call dword [0x5fd6cc]
test eax, eax
je 0x447869
push dword [ebp - 0x190]
mov ecx, esi
push dword [ebp - 0x17c]
call fcn.005177b0
push eax
lea ecx, [ebp - 0x8c]
call fcn.00545110
push 0
lea ecx, [ebp - 0x8c]
call fcn.005450e0
push eax
mov ecx, edi
call fcn.0044d620
jmp 0x4489b0
cmp eax, dword [ebp - 0x1bc]
jne 0x44836a
push 0
push 9
push 0x110a
push dword [ebp - 0x174]
call dword [0x5fd6cc]
push eax
push 3
push 0x110a
push dword [ebp - 0x174]
mov dword [ebp - 0x190], eax
call dword [0x5fd6cc]
test eax, eax
jne 0x448301
mov eax, dword [ebp - 0x190]
test eax, eax
je 0x447869
push 0
push eax
push dword [ebp - 0x17c]
xorps xmm0, xmm0
mov dword [ebp - 0xc4], 0
mov ecx, esi
movq qword [ebp - 0xcc], xmm0
call fcn.005177b0
push eax
lea ecx, [ebp - 0xcc]
call fcn.005454c0
push 0
push 1
push 0xffffffffffffffff
push 1
push 0x64d780
lea ecx, [ebp - 0xcc]
mov byte [ebp - 4], 0x14
call fcn.00543a40
lea ecx, [ebp - 0xcc]
test eax, eax
jne 0x4489be
mov byte [ebp - 4], 0xd
call fcn.00545380
jmp 0x447869
cmp eax, dword [ebp - 0x1d0]
jne 0x448599
push 0
push 9
push 0x110a
push dword [ebp - 0x174]
call dword [0x5fd6cc]
push eax
push 3
push 0x110a
push dword [ebp - 0x174]
mov dword [ebp - 0x190], eax
call dword [0x5fd6cc]
test eax, eax
je 0x447869
push 0xd
push dword [edi + 0x11c4]
xorps xmm0, xmm0
lea ecx, [ebp - 0xc0]
push dword [ebp - 0x17c]
movups xmmword [ebp - 0xc0], xmm0
push dword [ebp - 0x1a0]
movups xmmword [ebp - 0xb0], xmm0
push esi
call fcn.00515f60
push dword [ebp - 0x190]
mov byte [ebp - 4], 0x15
mov ecx, esi
push dword [ebp - 0x17c]
call fcn.005177b0
push eax
lea ecx, [ebp - 0x8c]
call fcn.00545110
push 8
push 0
push 0x61d074
push 0x679de8
lea ecx, [ebp - 0x8c]
call fcn.00542650
sub esp, 8
mov dword [ebp - 0x98], 0
xorps xmm0, xmm0
lea ecx, [ebp - 0x8c]
movq qword [ebp - 0xa0], xmm0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x62e448
call fcn.005450e0
push eax
push 0x6789a8
lea ecx, [ebp - 0xa0]
call fcn.00545470
lea ecx, [edi + 0x14c0]
mov byte [ebp - 4], 0x16
call fcn.005139b0
push eax
mov edx, 0x1f4
lea ecx, [ebp - 0xa0]
call fcn.004ebe10
push 0
push 0xffffffffffffffc4
sub esp, 8
lea ecx, [ebp - 0xa0]
push 0x46
push 0x258
push 0
call fcn.005450e0
push eax
mov ecx, edi
call fcn.00465970
mov ecx, eax
call fcn.00513e70
lea ecx, [ebp - 0x8c]
call fcn.005450e0
xor edx, edx
mov ecx, eax
call fcn.004f1c80
push eax
lea ecx, [ebp - 0xa0]
call fcn.00545110
lea ecx, [edi + 0x14c0]
call fcn.005139b0
push eax
mov edx, 0x1f4
lea ecx, [ebp - 0x8c]
call fcn.004ebe10
sub esp, 0xc
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x621884
lea ecx, [ebp - 0x8c]
call fcn.005450e0
push eax
lea ecx, [ebp - 0xa0]
call fcn.005434e0
lea ecx, [ebp - 0xa0]
call fcn.005450e0
push eax
push 0x64
lea ecx, [edi + 0x14c0]
call fcn.00513e70
push 1
push 0x66faf8
lea ecx, [edi + 0x14c0]
call fcn.00513c30
push 0
push 0
mov ecx, edi
call fcn.00465630
test eax, eax
jne 0x448567
nop
push 5
call dword [0x5fd45c]
push 0
push 0
mov ecx, edi
call fcn.00465630
test eax, eax
je 0x448550
push 2
lea ecx, [edi + 0x14c0]
call fcn.005139e0
lea ecx, [ebp - 0xa0]
call fcn.00545380
lea ecx, [ebp - 0xc0]
mov byte [ebp - 4], 0xd
call fcn.00515ef0
mov esi, dword [ebp - 0x1b0]
jmp 0x4489b0
cmp eax, dword [ebp - 0x1e0]
jne 0x44862d
push 0
push 9
push 0x110a
push dword [ebp - 0x174]
call dword [0x5fd6cc]
push eax
push 3
push 0x110a
push dword [ebp - 0x174]
mov dword [ebp - 0x190], eax
call dword [0x5fd6cc]
test eax, eax
je 0x447869
push dword [ebp - 0x190]
mov ecx, esi
push dword [ebp - 0x17c]
call fcn.005177b0
push eax
lea ecx, [ebp - 0x8c]
call fcn.00545110
push 8
push 0
push 0x61d074
push 0x679de8
lea ecx, [ebp - 0x8c]
call fcn.00542650
lea ecx, [ebp - 0x8c]
call fcn.005450e0
xor edx, edx
mov ecx, eax
call fcn.004ee650
jmp 0x4489b0
cmp eax, dword [ebp - 0x1a8]
jne 0x4486ae
push 0
push 9
push 0x110a
push dword [ebp - 0x174]
call dword [0x5fd6cc]
push eax
push 3
push 0x110a
push dword [ebp - 0x174]
mov dword [ebp - 0x190], eax
call dword [0x5fd6cc]
test eax, eax
je 0x447869
lea eax, [ebp - 0xf0]
mov ecx, edi
push eax
lea eax, [ebp - 0x8c]
push eax
push dword [ebp - 0x190]
push dword [ebp - 0x17c]
call fcn.00445300
push 0
lea ecx, [ebp - 0x8c]
call fcn.005450e0
push eax
push 2
push dword [ebp - 0x1ac]
call dword [0x5fd664]
jmp 0x4489b0
cmp eax, dword [ebp - 0x1b8]
je 0x4486c2
cmp eax, dword [ebp - 0x1cc]
jne 0x4489b0
push 0
push dword [ebp - 0x90]
lea eax, [ebp - 0x17c]
mov ecx, edi
push eax
call fcn.00446b70
push dword [ebp - 0x17c]
mov ecx, esi
call fcn.00522c70
mov dword [ebp - 0x174], eax
jmp 0x4489b0
push 0
push 9
push 0x110a
push dword [ebp - 0x174]
call dword [0x5fd6cc]
mov dword [ebp - 0x19c], eax
test eax, eax
je 0x447869
push eax
push 3
push 0x110a
push dword [ebp - 0x174]
call dword [0x5fd6cc]
test eax, eax
je 0x447869
lea eax, [ebp - 0xf0]
mov ecx, edi
push eax
lea eax, [ebp - 0x8c]
push eax
push dword [ebp - 0x19c]
push dword [ebp - 0x17c]
call fcn.00445300
test al, al
je 0x447869
push 0xd
push dword [edi + 0x11c4]
xorps xmm0, xmm0
lea ecx, [ebp - 0xc0]
push dword [ebp - 0x17c]
movups xmmword [ebp - 0xc0], xmm0
push dword [ebp - 0x1a0]
movups xmmword [ebp - 0xb0], xmm0
push esi
call fcn.00515f60
sub esp, 8
mov byte [ebp - 4], 0x11
mov ecx, edi
push 0x8c
push 0
push 0
push 0
push 1
push 0x679c48
call fcn.004661f0
test eax, eax
jne 0x4487c1
lea ecx, [ebp - 0xc0]
mov byte [ebp - 4], 0xd
call fcn.00515ef0
jmp 0x447869
push 0
push 0xe
lea ecx, [ebp - 0x8c]
call fcn.005450e0
push eax
mov ecx, edi
call fcn.00448ae0
cmp eax, 1
jne 0x4487fd
push dword [ebp - 0x19c]
push 0
push 0x1101
push dword [ebp - 0x174]
call dword [0x5fd6cc]
push 0x679cd0
jmp 0x448807
cmp eax, 2
jne 0x448812
push 0x679bd8
lea ecx, [ebp - 0x8c]
call fcn.00545460
sub esp, 8
lea ecx, [ebp - 0x8c]
push 0x8c
push 0x190
push 0
push 0
push 4
call fcn.005450e0
push eax
mov ecx, edi
call fcn.004661f0
jmp 0x4489a1
mov eax, dword [0x5fd6cc]
push 0
push 9
push 0x110a
push dword [ebp - 0x174]
call eax
mov dword [ebp - 0x19c], eax
test eax, eax
je 0x447869
push eax
push 3
push 0x110a
push dword [ebp - 0x174]
call dword [0x5fd6cc]
test eax, eax
je 0x447869
lea eax, [ebp - 0xf0]
mov ecx, edi
push eax
lea eax, [ebp - 0x8c]
push eax
push dword [ebp - 0x19c]
push dword [ebp - 0x17c]
call fcn.00445300
test al, al
je 0x447869
push 0xd
push dword [edi + 0x11c4]
xorps xmm0, xmm0
lea ecx, [ebp - 0xc0]
push dword [ebp - 0x17c]
movups xmmword [ebp - 0xc0], xmm0
push dword [ebp - 0x1a0]
movups xmmword [ebp - 0xb0], xmm0
push esi
call fcn.00515f60
sub esp, 8
mov byte [ebp - 4], 0x10
mov ecx, edi
push 0x8c
push 0
push 0
push 0
push 1
push 0x679ac8
call fcn.004661f0
test eax, eax
jne 0x44890f
lea ecx, [ebp - 0xc0]
mov byte [ebp - 4], 0xd
call fcn.00515ef0
jmp 0x447869
push 0
push 0xc
lea ecx, [ebp - 0x8c]
call fcn.005450e0
push eax
mov ecx, edi
call fcn.00448ae0
cmp eax, 1
jne 0x4487fd
push dword [ebp - 0x19c]
push 0
push 0x1101
push dword [ebp - 0x174]
call dword [0x5fd6cc]
push 0x679b58
jmp 0x448807
push 0xd
push dword [edi + 0x11c4]
xorps xmm0, xmm0
push ecx
push dword [ebp - 0x1a0]
lea ecx, [ebp - 0xc0]
push esi
movups xmmword [ebp - 0xc0], xmm0
movups xmmword [ebp - 0xb0], xmm0
call fcn.00515f60
mov byte [ebp - 4], 0xe
mov ecx, edi
push dword [ebp - 0x17c]
call fcn.00445860
push dword [ebp - 0x1ac]
mov byte [ebp - 0x175], al
call dword [0x5fd7a8]
lea ecx, [ebp - 0xc0]
mov byte [ebp - 4], 0xd
call fcn.00515ef0
cmp byte [ebp - 0x175], 0
jne 0x4489f5
jmp 0x447869
push 0
add eax, 3
mov byte [ebp - 0x175], 2
push eax
call fcn.00543ce0
mov ecx, eax
call fcn.00543fb0
lea ecx, [ebp - 0xcc]
mov dword [edi + 0x1f20], eax
mov byte [ebp - 4], 0xd
call fcn.00545380
jmp 0x4489f5
mov byte [ebp - 0x175], 1
push 0
push 0x679818
mov ecx, edi
call fcn.0044da30
cmp byte [ebp - 0x175], 0
mov ecx, edi
sete al
movzx eax, al
push eax
call fcn.0044d910
lea ecx, [ebp - 0xf0]
call fcn.00542260
lea ecx, [ebp - 0x14c]
call fcn.005239f0
lea ecx, [ebp - 0x16c]
call fcn.005239f0
lea ecx, [ebp - 0x168]
call fcn.005239f0
lea ecx, [ebp - 0x150]
call fcn.005239f0
lea ecx, [ebp - 0x164]
call fcn.005239f0
lea ecx, [ebp - 0x160]
call fcn.005239f0
lea ecx, [ebp - 0x170]
call fcn.005239f0
lea ecx, [ebp - 0x15c]
call fcn.005239f0
lea ecx, [ebp - 0x158]
call fcn.005239f0
lea ecx, [ebp - 0x154]
call fcn.005239f0
lea ecx, [ebp - 0x94]
call fcn.0053f9b0
lea ecx, [ebp - 0xfc]
call fcn.00545380
lea ecx, [ebp - 0x8c]
call fcn.00545380
mov al, byte [ebp - 0x175]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0041e475
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret