Function at 0x447c70
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5ca8f1
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x208
mov eax, dword [0x6dd1e4]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov dword [ebp - 0x1c0], esi
push 1
push 0x647d4c
call fcn.0044fc50
mov edi, dword [esi + 0x1f20]
lea ecx, [esi + 0x12b4]
push 1
push 0x647d80
mov dword [ebp - 0x1c8], eax
mov dword [esi + 0x1f20], 0
call fcn.0051de00
mov eax, dword [esi + 0x14d4]
mov dword [ebp - 0x194], eax
lea eax, [ebp - 0x10c]
push eax
push dword [ebp - 0x1c8]
call dword [0x5de6ec]
push 0xffffffffffffffff
push 0x5f
push 0xa5
push 0xa
push 0x64
push dword [esi + 0x70]
mov ecx, esi
call fcn.00486420
movsd xmm1, qword [0x6be540]
mov ecx, dword [ebp - 0x194]
push 0
push str.Arial
push 1
push 0x320
call fcn.004fb6d0
push 0x37
push 0x50
push 3
push 0xa
mov ecx, esi
call fcn.00450470
push 0x647dec
lea ecx, [esi + 0x1414]
call fcn.0051e0b0
push 0xffffffffffffffff
push 0x10000001
push 0x2d
push 0x5a
push 0x3c
push 5
lea ecx, [esi + 0x1414]
call fcn.0051dd30
mov ecx, dword [ebp - 0x194]
push eax
call fcn.004f7f60
push dword [esi + 0x1404]
mov ecx, dword [ebp - 0x194]
push 0xffffffffffffffff
call fcn.004f6320
movsd xmm1, qword [0x6be518]
mov ecx, dword [ebp - 0x194]
push 0
push str.Arial
push 1
push 0x190
call fcn.004fb6d0
mov ecx, dword [ebp - 0x194]
push 0xffffffffffffffff
push 0x10000001
push 0x10
push 0x91
push 0x14
push 0x6e
push 0x647e0c
call fcn.004f7f60
push dword [esi + 0x1404]
mov ecx, dword [ebp - 0x194]
push 0xffffffffffffffff
call fcn.004f6320
push ecx
push 0xffffffffffffffff
push ecx
push 0
push 0x647e30
push 1
push ecx
push 0x8c
push 0x32
push 0x73
push 0x647ee4
mov ecx, esi
call fcn.00450190
push ecx
push 0xffffffffffffffff
push ecx
push 0
push 0x647f10
push 0
push ecx
push 0x8c
push 0x4b
push 0x73
push 0x648044
mov ecx, esi
mov dword [ebp - 0x20c], eax
call fcn.00450190
push 0
push ecx
mov dword [esp], 0x41500000
mov ecx, esi
push 0x648070
push 0x5f
push 0x50
push 0xa
push 0x10e
push 0x72
push 0x64812c
mov dword [ebp - 0x210], eax
call fcn.004503a0
push 0
push ecx
mov dword [esp], 0x41500000
mov ecx, esi
push 0x648148
push 0x5f
push 0x4b
push 0xa
push 0x163
push 0x8b
push 0x6481fc
mov dword [ebp - 0x1bc], eax
call fcn.004503a0
push 0
push ecx
mov dword [esp], 0x41500000
mov ecx, esi
push 0x648220
push 0x5f
push 0x4b
push 0xa
push 0x1b3
push 0x8b
push 0x64826c
mov dword [ebp - 0x204], eax
call fcn.004503a0
push 0
push ecx
mov dword [esp], 0x41500000
mov ecx, esi
push 0x648288
push 0x5f
push 0x4b
push 0xa
push 0x203
push 0xa4
push 0x6482e4
mov dword [ebp - 0x1f0], eax
call fcn.004503a0
push 0
push ecx
mov dword [esp], 0x41500000
push 0x64197c
push 0x5f
push 0x46
mov dword [ebp - 0x218], eax
push 0xa
push 0x253
push 0x7d
push 0x6419a8
mov ecx, esi
call fcn.004503a0
push 0
push ecx
mov dword [esp], 0x41500000
mov ecx, esi
push 0x648300
push 0x5f
push 0x4b
push 0xa
push 0x29e
push 0xb3
push 0x641970
mov dword [esi + 0x12d4], eax
call fcn.004503a0
mov ecx, dword [ebp - 0x194]
push 0
push 0x10800080
push 0x19
push 0xb9
push 0x23
push 0x2f3
push 0x648340
mov dword [esi + 0x12d8], eax
call fcn.004f8120
mov ecx, dword [ebp - 0x194]
push 0x909090
push 0xffffffffffffffff
mov dword [ebp - 0x1b0], eax
call fcn.004f6320
movsd xmm0, qword [0x6be528]
sub esp, 0xc
movsd qword [esp + 4], xmm0
push 0
push ecx
mov ecx, dword [ebp - 0x194]
push 0x190
push 0xffffffffffffffff
call fcn.004f61c0
mov ecx, dword [ebp - 0x194]
push 0x40
push 0xffffffffffffffff
call fcn.004f4b70
push 0
push ecx
mov dword [esp], 0x41500000
mov ecx, esi
push 0x645b44
push 0x28
push 0x5a
push 0x41
push 0x2f3
push 0x86
push 0x645b44
call fcn.00450300
push 0
push ecx
mov dword [esp], 0x41500000
mov ecx, esi
push 0x645b58
push 0x28
push 0x5a
push 0x41
push 0x352
push 0x99
push 0x645b78
mov dword [ebp - 0x1a4], eax
call fcn.00450300
push 0
push 0x648370
mov ecx, esi
mov dword [ebp - 0x1e0], eax
call fcn.0044faa0
mov ecx, esi
call fcn.0044f8d0
xorps xmm0, xmm0
mov dword [ebp - 0x84], 0
movq qword [ebp - 0x8c], xmm0
sub esp, 8
lea ecx, [ebp - 0x8c]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x648390
push 0x621a58
call fcn.0051e0c0
mov dword [ebp - 4], 0
lea ecx, [ebp - 0xfc]
xorps xmm0, xmm0
mov dword [ebp - 0xf4], 0
movq qword [ebp - 0xfc], xmm0
call fcn.0051e180
push 0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x8c]
push 0xffffffffffffffff
mov dword [ebp - 0x94], 0
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x94]
call fcn.00518860
lea eax, [ebp - 0x90]
mov byte [ebp - 4], 2
push eax
push 0x6483b0
lea ecx, [ebp - 0x94]
call fcn.005184a0
mov ecx, dword [ebp - 0x90]
mov edx, 1
movsd xmm1, qword [0x6be518]
test al, al
push 0
push str.Arial
cmove ecx, edx
mov byte [ebp - 0x19d], 0
push edx
mov dword [ebp - 0x90], ecx
mov ecx, dword [ebp - 0x194]
push 0x190
mov byte [ebp - 0x196], 0
mov dword [ebp - 0x19c], 0
call fcn.004fb6d0
push edi
push dword [ebp - 0x90]
lea eax, [ebp - 0x19c]
mov ecx, esi
push eax
call fcn.00447a50
push dword [ebp - 0x19c]
mov edi, dword [ebp - 0x194]
mov ecx, edi
call fcn.004fcac0
push 0
push 1
mov ecx, esi
mov dword [ebp - 0x194], eax
call fcn.00486e80
push 0x48
call dword [0x5de7f8]
movsd xmm0, qword [0x6be4d8]
mov ecx, eax
comisd xmm0, xmmword [esi + 8]
mov dword [ebp - 0x1a8], ecx
jb 0x4481b0
push 4
call dword [0x5de754]
mov ecx, dword [ebp - 0x1a8]
or eax, 0xff000000
jmp 0x4481b2
xor eax, eax
push eax
push ecx
push ecx
push 0x8b
mov ecx, esi
mov dword [ebp - 0x1b4], eax
call fcn.00477830
push eax
lea ecx, [ebp - 0x174]
call fcn.004fd7f0
mov byte [ebp - 4], 3
mov ecx, edi
push dword [ebp - 0x174]
push 0x6483c8
push dword [ebp - 0x1a4]
call fcn.004f8b00
push 0
push eax
push dword [ebp - 0x1a4]
mov ecx, edi
mov dword [ebp - 0x1dc], eax
call fcn.004fca70
push eax
call dword [0x5de75c]
push dword [ebp - 0x1b4]
mov eax, dword [ebp - 0x1a8]
mov ecx, esi
push eax
push eax
push 0x72
call fcn.00477830
push eax
lea ecx, [ebp - 0x188]
call fcn.004fd7f0
push ecx
mov byte [ebp - 4], 4
mov ecx, edi
push dword [ebp - 0x188]
push 0
push 0x32
push 0x648408
push dword [ebp - 0x1a4]
call fcn.004f7b00
push dword [ebp - 0x1b4]
mov dword [ebp - 0x200], eax
mov ecx, esi
mov eax, dword [ebp - 0x1a8]
push eax
push eax
push 0x81
call fcn.00477830
push eax
lea ecx, [ebp - 0x184]
call fcn.004fd7f0
push ecx
mov byte [ebp - 4], 5
mov ecx, edi
push dword [ebp - 0x184]
push 0
push 0x32
push 0x648460
push dword [ebp - 0x1a4]
call fcn.004f7b00
push dword [ebp - 0x1b4]
mov dword [ebp - 0x1fc], eax
mov ecx, esi
mov eax, dword [ebp - 0x1a8]
push eax
push eax
push 0x82
call fcn.00477830
push eax
lea ecx, [ebp - 0x180]
call fcn.004fd7f0
push ecx
mov byte [ebp - 4], 6
push dword [ebp - 0x180]
push 0
push 0x32
push 0x6484c0
push dword [ebp - 0x1a4]
mov ecx, edi
call fcn.004f7b00
push ecx
push 0
push 8
push 0x32
push 0
push dword [ebp - 0x1a4]
mov ecx, edi
mov dword [ebp - 0x1f8], eax
call fcn.004f7b00
push dword [ebp - 0x1b4]
mov eax, dword [ebp - 0x1a8]
mov ecx, esi
push eax
push eax
push 0x7c
call fcn.00477830
push eax
lea ecx, [ebp - 0x18c]
call fcn.004fd7f0
push ecx
mov byte [ebp - 4], 7
mov ecx, edi
push dword [ebp - 0x18c]
push 0
push 0x32
push 0x648510
push dword [ebp - 0x1a4]
call fcn.004f7b00
push dword [ebp - 0x1b4]
mov dword [ebp - 0x1f4], eax
mov ecx, esi
mov eax, dword [ebp - 0x1a8]
push eax
push eax
push 0x8a
call fcn.00477830
push eax
lea ecx, [ebp - 0x17c]
call fcn.004fd7f0
push ecx
mov byte [ebp - 4], 8
mov ecx, edi
push dword [ebp - 0x17c]
push 0
push 0x32
push 0x648550
push dword [ebp - 0x1a4]
call fcn.004f7b00
push dword [ebp - 0x1b4]
mov dword [ebp - 0x1d4], eax
mov ecx, esi
mov eax, dword [ebp - 0x1a8]
push eax
push eax
push 0x80
call fcn.00477830
push eax
lea ecx, [ebp - 0x170]
call fcn.004fd7f0
push ecx
mov byte [ebp - 4], 9
mov ecx, edi
push dword [ebp - 0x170]
push 0
push 0x32
push 0x645ed8
push dword [ebp - 0x1a4]
call fcn.004f7b00
push dword [ebp - 0x1b4]
mov dword [ebp - 0x1e4], eax
mov eax, dword [ebp - 0x1a8]
push eax
push eax
push 0xac
mov ecx, esi
call fcn.00477830
push eax
lea ecx, [ebp - 0x178]
call fcn.004fd7f0
push ecx
mov byte [ebp - 4], 0xa
mov ecx, edi
push dword [ebp - 0x178]
push 0
push 0x32
push 0x645f10
push dword [ebp - 0x1a4]
call fcn.004f7b00
push ecx
push dword [ebp - 0x174]
mov ecx, edi
mov dword [ebp - 0x1e8], eax
push 0
push 0x32
push 0x648578
push dword [ebp - 0x1a4]
call fcn.004f7b00
push ecx
push 0
push 8
push 0x32
push 0
push dword [ebp - 0x1a4]
mov ecx, edi
mov dword [ebp - 0x1ec], eax
call fcn.004f7b00
push dword [ebp - 0x1b4]
mov eax, dword [ebp - 0x1a8]
mov ecx, esi
push eax
push eax
push 0x94
call fcn.00477830
push eax
lea ecx, [ebp - 0x190]
call fcn.004fd7f0
push ecx
mov byte [ebp - 4], 0xb
mov ecx, edi
push dword [ebp - 0x190]
push 0
push 0x32
push 0x6485b4
push dword [ebp - 0x1a4]
call fcn.004f7b00
push ecx
push 0
push 8
push 0x32
push 0
push dword [ebp - 0x1a4]
mov ecx, edi
mov dword [ebp - 0x1d0], eax
call fcn.004f7b00
push ecx
push dword [ebp - 0x170]
mov ecx, edi
push 0
push 0x32
push 0x645f94
push dword [ebp - 0x1a4]
call fcn.004f7b00
push dword [ebp - 0x1b4]
mov dword [ebp - 0x1c4], eax
mov ecx, esi
mov eax, dword [ebp - 0x1a8]
push eax
push eax
push 0xb1
call fcn.00477830
push eax
lea ecx, [ebp - 0x16c]
call fcn.004fd7f0
push ecx
mov byte [ebp - 4], 0xc
mov ecx, edi
push dword [ebp - 0x16c]
push 0
push 0x32
push 0x645fc8
push dword [ebp - 0x1a4]
call fcn.004f7b00
push ecx
push dword [ebp - 0x16c]
mov ecx, edi
mov dword [ebp - 0x1b4], eax
push 0
push 0x32
push 0x6485d0
push dword [ebp - 0x1a4]
call fcn.004f7b00
push 0
mov ecx, esi
mov dword [ebp - 0x1d8], eax
call fcn.0044f730
mov edx, eax
mov cx, word [esi + 0x12d8]
mov eax, 0x74
mov word [ebp - 0x76], cx
mov word [ebp - 0x7e], ax
mov ecx, 0x2e
mov eax, dword [ebp - 0x1f0]
mov word [ebp - 0x7c], ax
mov eax, 0x1b
mov word [ebp - 0x78], ax
mov eax, 0x70
mov word [ebp - 0x72], ax
mov ax, word [esi + 0x12d4]
mov word [ebp - 0x70], ax
mov eax, 0x72
mov word [ebp - 0x6c], ax
mov eax, dword [ebp - 0x1e0]
mov word [ebp - 0x6a], ax
mov eax, 0xd
mov word [ebp - 0x66], ax
mov eax, dword [ebp - 0x1dc]
mov word [ebp - 0x64], ax
mov eax, dword [ebp - 0x200]
mov word [ebp - 0x5e], ax
mov eax, dword [ebp - 0x1fc]
mov word [ebp - 0x58], ax
mov eax, dword [ebp - 0x1f8]
mov word [ebp - 0x52], ax
mov eax, 0x47
mov word [ebp - 0x4e], ax
mov eax, dword [ebp - 0x1f4]
mov word [ebp - 0x4c], ax
mov eax, dword [ebp - 0x1d4]
mov word [ebp - 0x46], ax
mov eax, 0x56
mov word [ebp - 0x60], cx
mov word [ebp - 0x5a], cx
mov word [ebp - 0x54], cx
mov ecx, 0x50
mov word [ebp - 0x42], ax
mov eax, dword [ebp - 0x1e4]
mov dword [ebp - 0x214], edx
mov byte [ebp - 0x80], 1
mov byte [ebp - 0x7a], 1
mov byte [ebp - 0x74], 1
mov byte [ebp - 0x6e], 1
mov byte [ebp - 0x68], 9
mov byte [ebp - 0x62], 1
mov byte [ebp - 0x5c], 5
mov byte [ebp - 0x56], 9
mov byte [ebp - 0x50], 9
mov byte [ebp - 0x4a], 0x11
mov word [ebp - 0x48], cx
mov byte [ebp - 0x44], 0x11
mov word [ebp - 0x40], ax
mov byte [ebp - 0x3e], 9
mov eax, 0x4c
mov word [ebp - 0x36], cx
mov word [ebp - 0x3c], ax
lea ecx, [ebp - 0x148]
mov eax, dword [ebp - 0x1e8]
mov word [ebp - 0x3a], ax
mov eax, dword [ebp - 0x1ec]
mov word [ebp - 0x34], ax
mov eax, 0x4d
mov word [ebp - 0x30], ax
mov eax, dword [ebp - 0x1c4]
mov word [ebp - 0x2e], ax
mov eax, 0x55
mov word [ebp - 0x2a], ax
mov eax, dword [ebp - 0x1b4]
mov word [ebp - 0x28], ax
mov eax, 0x48
mov word [ebp - 0x24], ax
mov eax, dword [ebp - 0x1d8]
mov word [ebp - 0x22], ax
mov eax, 0x46
push 0
mov byte [ebp - 0x38], 9
mov byte [ebp - 0x32], 9
mov byte [ebp - 0x2c], 9
mov byte [ebp - 0x26], 9
mov byte [ebp - 0x20], 9
mov word [ebp - 0x1e], ax
mov word [ebp - 0x1c], dx
call fcn.00512430
push 0x11
lea eax, [ebp - 0x80]
mov ecx, edi
push eax
call fcn.004fbbb0
push dword [ebp - 0x194]
mov dword [ebp - 0x1a8], 0
call dword [0x5de730]
push 0x20
push dword [ebp - 0x1b0]
mov ecx, edi
call fcn.004f4b70
xorps xmm0, xmm0
lea ecx, [ebp - 0xf0]
movups xmmword [ebp - 0xf0], xmm0
movq qword [ebp - 0xe0], xmm0
call fcn.0051b0f0
push dword [ebp - 0x1e0]
mov ecx, edi
mov byte [ebp - 4], 0xd
call fcn.004fb790
push 0
mov ecx, esi
call fcn.005c4c60
test eax, eax
je 0x44989e
mov ecx, dword [esi + 0x1498]
mov eax, dword [0x5de7fc]
cmp ecx, 0xfffffffa
je 0x44989e
cmp dword [esi + 0x14c8], edi
jne 0x449859
cmp ecx, dword [esi + 0x12d8]
je 0x449897
mov edx, dword [ebp - 0x1b0]
cmp ecx, 0xffffffb3
jne 0x4487a8
cmp dword [esi + 0x14a4], edx
je 0x4487b4
cmp ecx, dword [ebp - 0x214]
jne 0x44885e
mov ecx, esi
call fcn.005c1c90
push 0x80
push dword [ebp - 0x1b0]
mov ecx, edi
call fcn.004f4b70
push dword [ebp - 0x1b0]
mov ecx, edi
call fcn.004f39c0
push eax
lea ecx, [ebp - 0x8c]
call fcn.0051dd60
push 0x648340
lea ecx, [ebp - 0x8c]
call fcn.0051e060
mov ecx, edi
test al, al
je 0x448845
push 0
push 0
push dword [ebp - 0x1b0]
call fcn.004f44b0
push 0
push dword [ebp - 0x1b0]
mov ecx, edi
call fcn.004f6320
movsd xmm0, qword [0x6be540]
sub esp, 0xc
movsd qword [esp + 4], xmm0
push 0
push ecx
push 0x190
push dword [ebp - 0x1b0]
mov ecx, edi
call fcn.004f61c0
jmp 0x449859
push 0xffffffffffffffff
push 0
push 0xb1
push dword [ebp - 0x1b0]
call fcn.004f6680
jmp 0x449859
cmp ecx, 0xffffffb4
jne 0x44891f
cmp dword [esi + 0x14a4], edx
jne 0x44891f
push edx
mov ecx, edi
call fcn.004f39c0
push eax
lea ecx, [ebp - 0x8c]
call fcn.0051dd60
lea ecx, [ebp - 0x8c]
call fcn.0051df40
cmp eax, 3
jl 0x448758
cmp dword [ebp - 0x1a8], 0
jne 0x4488b9
push 0
push 9
push 0x110a
push dword [ebp - 0x194]
call dword [0x5de7fc]
push ecx
lea ecx, [ebp - 0x8c]
call fcn.0051dd30
push eax
push 0
push dword [ebp - 0x19c]
mov ecx, edi
call fcn.004f1bd0
mov dword [ebp - 0x1a8], eax
test eax, eax
je 0x449859
push eax
push 9
push 0x110b
push dword [ebp - 0x194]
call dword [0x5de7fc]
push dword [ebp - 0x1a8]
push 0
push 0x1114
push dword [ebp - 0x194]
call dword [0x5de7fc]
mov dword [ebp - 0x1a8], 0
jmp 0x449859
cmp ecx, dword [ebp - 0x1e0]
jne 0x448a6a
push edx
mov ecx, edi
call fcn.004f39c0
push eax
lea ecx, [ebp - 0x8c]
call fcn.0051dd60
push 0x648340
lea ecx, [ebp - 0x8c]
call fcn.0051e060
test al, al
jne 0x448962
lea ecx, [ebp - 0x8c]
call fcn.0051da30
test al, al
je 0x4489ba
push 0
push 0
push dword [ebp - 0x1b0]
mov ecx, edi
call fcn.004f44b0
push 0
push dword [ebp - 0x1b0]
mov ecx, edi
call fcn.004f6320
movsd xmm0, qword [0x6be540]
sub esp, 0xc
movsd qword [esp + 4], xmm0
push 0
push ecx
push 0x190
push dword [ebp - 0x1b0]
mov ecx, edi
call fcn.004f61c0
push 0x80
push dword [ebp - 0x1b0]
mov ecx, edi
call fcn.004f4b70
lea ecx, [ebp - 0x8c]
call fcn.0051da30
test al, al
jne 0x448758
push ecx
call fcn.0051dd30
push eax
push dword [ebp - 0x1a8]
mov ecx, edi
push dword [ebp - 0x19c]
call fcn.004f1bd0
mov dword [ebp - 0x1a8], eax
test eax, eax
je 0x448a35
push eax
push 9
push 0x110b
push dword [ebp - 0x194]
call dword [0x5de7fc]
push dword [ebp - 0x1a8]
push 0
push 0x1114
push dword [ebp - 0x194]
call dword [0x5de7fc]
push 0x80
push dword [ebp - 0x19c]
mov ecx, edi
call fcn.004f4b70
jmp 0x449859
push 0x80
push dword [ebp - 0x1b0]
mov ecx, edi
call fcn.004f4b70
sub esp, 8
mov ecx, esi
push 0x8c
push 0x190
push 0
push edi
push 4
push 0x646010
call fcn.00487a40
jmp 0x449859
cmp byte [ebp - 0x19d], 1
jne 0x448a92
cmp ecx, 0xffffff31
jne 0x448a92
lea ecx, [ebp - 0x148]
call fcn.00512410
mov byte [ebp - 0x19d], 2
jmp 0x448758
mov edx, dword [ebp - 0x19c]
cmp ecx, 0xffffffea
jne 0x448aa5
cmp dword [esi + 0x14a4], edx
je 0x448ab1
cmp ecx, dword [ebp - 0x1a4]
jne 0x448c5a
cmp ecx, dword [ebp - 0x1a4]
sete byte [ebp - 0x195]
jne 0x448b09
push dword [ebp - 0x194]
call dword [0x5de730]
cmp byte [ebp - 0x19d], 2
jne 0x448afd
xorps xmm1, xmm1
lea ecx, [ebp - 0x148]
call fcn.005123c0
movsd xmm1, qword [0x6be5b0]
comisd xmm1, xmm0
jbe 0x448afd
mov byte [ebp - 0x19d], 0
jmp 0x448758
mov eax, dword [0x5de7fc]
mov byte [ebp - 0x19d], 1
push 0
push 9
push 0x110a
push dword [ebp - 0x194]
call eax
push eax
push 3
push 0x110a
push dword [ebp - 0x194]
mov dword [ebp - 0x208], eax
call dword [0x5de7fc]
mov edx, dword [ebp - 0x1dc]
mov ecx, eax
test ecx, ecx
mov dword [ebp - 0x1ac], ecx
mov ecx, 0x40
mov eax, 0x20
cmove eax, ecx
mov ecx, dword [ebp - 0x1c4]
mov dword [ebp - 0x1cc], eax
cmp edx, ecx
jg 0x448b9a
mov esi, edx
mov edx, dword [ebp - 0x1d0]
nop dword [eax]
cmp esi, edx
je 0x448b8f
push eax
push esi
mov ecx, edi
call fcn.004f4b70
mov eax, dword [ebp - 0x1cc]
mov ecx, dword [ebp - 0x1c4]
mov edx, dword [ebp - 0x1d0]
inc esi
cmp esi, ecx
jle 0x448b70
mov esi, dword [ebp - 0x1c0]
push 0
mov ecx, esi
call fcn.00461860
test al, al
mov esi, 0x20
mov eax, 0x40
mov ecx, edi
cmovne esi, eax
push esi
push dword [ebp - 0x1b4]
call fcn.004f4b70
push esi
push dword [ebp - 0x1d8]
mov ecx, edi
call fcn.004f4b70
cmp dword [ebp - 0x208], 0
je 0x448bef
cmp dword [ebp - 0x1ac], 0
jne 0x448bef
push 0x20
push dword [ebp - 0x1d4]
mov ecx, edi
call fcn.004f4b70
cmp byte [ebp - 0x195], 0
mov esi, dword [ebp - 0x1a4]
je 0x448c41
lea eax, [ebp - 0x10c]
mov ecx, edi
push eax
push esi
call fcn.004fcac0
push eax
call dword [0x5de6b0]
test eax, eax
je 0x448c41
mov eax, dword [ebp - 0x108]
mov ecx, edi
add eax, 0x2d
push eax
mov eax, dword [ebp - 0x10c]
add eax, 0x5a
push eax
push 8
push esi
call fcn.004f3760
mov esi, dword [ebp - 0x1c0]
jmp 0x449859
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push esi
mov ecx, edi
call fcn.004f3760
mov esi, dword [ebp - 0x1c0]
jmp 0x449859
cmp ecx, 0xffffffeb
jne 0x448c7a
cmp dword [esi + 0x14a4], edx
jne 0x448c7a
push dword [ebp - 0x1b0]
mov ecx, esi
push edx
call fcn.004879e0
jmp 0x449859
cmp ecx, dword [ebp - 0x204]
je 0x4497fb
cmp ecx, dword [ebp - 0x1dc]
je 0x4497fb
cmp ecx, 0xfffffff2
jne 0x448ca3
cmp dword [esi + 0x14a4], edx
je 0x4497fb
cmp ecx, dword [ebp - 0x218]
jne 0x448d6b
push 0xd
push dword [esi + 0x12d4]
xorps xmm0, xmm0
lea ecx, [ebp - 0x12c]
push edx
push dword [ebp - 0x1bc]
movups xmmword [ebp - 0x12c], xmm0
push edi
movups xmmword [ebp - 0x11c], xmm0
call fcn.004f0200
lea eax, [ebp - 0x90]
mov byte [ebp - 4], 0xf
push eax
mov ecx, esi
call fcn.00446260
push dword [ebp - 0x1c8]
mov byte [ebp - 0x195], al
call dword [0x5de728]
cmp byte [ebp - 0x195], 0
jne 0x448d1c
lea ecx, [ebp - 0x12c]
mov byte [ebp - 4], 0xd
call fcn.004f0190
jmp 0x448758
push 0
push dword [ebp - 0x90]
lea eax, [ebp - 0x19c]
mov ecx, esi
push eax
call fcn.00447a50
push dword [ebp - 0x19c]
mov ecx, edi
call fcn.004fcac0
push 0
mov dword [ebp - 0x194], eax
lea ecx, [ebp - 0x94]
lea eax, [ebp - 0x90]
push eax
push 4
push 0x6483b0
call fcn.00517d20
lea ecx, [ebp - 0x12c]
jmp 0x449850
cmp ecx, dword [ebp - 0x200]
je 0x4496eb
mov edx, dword [ebp - 0x1bc]
cmp ecx, edx
jne 0x448d9e
push 4
push dword [ebp - 0x20c]
mov ecx, edi
call fcn.004f3c80
test eax, eax
jne 0x4496e6
mov edx, dword [ebp - 0x1bc]
mov eax, dword [esi + 0x1498]
cmp eax, dword [ebp - 0x1fc]
je 0x449593
cmp eax, edx
jne 0x448dcb
push 4
push dword [ebp - 0x210]
mov ecx, edi
call fcn.004f3c80
test eax, eax
jne 0x449593
mov eax, dword [esi + 0x1498]
cmp eax, dword [ebp - 0x1f8]
jne 0x448fd2
push 0
push 9
push 0x110a
push dword [ebp - 0x194]
call dword [0x5de7fc]
push eax
push 3
push 0x110a
push dword [ebp - 0x194]
mov dword [ebp - 0x1b8], eax
call dword [0x5de7fc]
mov ecx, eax
mov eax, dword [ebp - 0x1b8]
mov dword [ebp - 0x1cc], ecx
test eax, eax
je 0x448758
test ecx, ecx
je 0x448758
lea ecx, [ebp - 0xf0]
push ecx
lea ecx, [ebp - 0x8c]
push ecx
push eax
push dword [ebp - 0x19c]
mov ecx, esi
call fcn.004461e0
test al, al
je 0x448758
push 0xd
push dword [esi + 0x12d4]
xorps xmm0, xmm0
lea ecx, [ebp - 0xc0]
push dword [ebp - 0x19c]
movups xmmword [ebp - 0xc0], xmm0
push dword [ebp - 0x1bc]
movups xmmword [ebp - 0xb0], xmm0
push edi
call fcn.004f0200
sub esp, 8
mov byte [ebp - 4], 0x12
mov ecx, esi
push 0x8c
push 0
push 0
push 0
push 1
push 0x648888
call fcn.00487a40
test eax, eax
jne 0x448eb7
lea ecx, [ebp - 0xc0]
mov byte [ebp - 4], 0xd
call fcn.004f0190
jmp 0x448758
xorps xmm0, xmm0
mov dword [ebp - 0xd0], 0
lea ecx, [ebp - 0xd8]
movq qword [ebp - 0xd8], xmm0
call fcn.0051e180
lea eax, [ebp - 0xf0]
mov byte [ebp - 4], 0x13
push eax
lea eax, [ebp - 0xd8]
mov byte [ebp - 0x195], 0
push eax
push dword [ebp - 0x1cc]
mov ecx, esi
push dword [ebp - 0x19c]
call fcn.004461e0
test al, al
je 0x448f3c
lea ecx, [ebp - 0xd8]
call fcn.0051cce0
mov ecx, eax
call fcn.00503040
mov byte [ebp - 0x195], al
test al, al
je 0x448f3c
push dword [ebp - 0x1cc]
push 0
push 0x1101
push dword [ebp - 0x194]
call dword [0x5de7fc]
push 0
push 0xc
lea ecx, [ebp - 0x8c]
call fcn.0051dd30
push eax
mov ecx, esi
call fcn.0044ab80
cmp eax, 1
jne 0x448f81
cmp byte [ebp - 0x195], 0
jne 0x448f7a
push dword [ebp - 0x1b8]
push 0
push 0x1101
push dword [ebp - 0x194]
call dword [0x5de7fc]
push 0x6486b0
jmp 0x448f8b
cmp eax, 2
jne 0x448f96
push 0x648730
lea ecx, [ebp - 0x8c]
call fcn.0051e0b0
sub esp, 8
lea ecx, [ebp - 0x8c]
push 0x8c
push 0x190
push 0
push 0
push 4
call fcn.0051dd30
push eax
mov ecx, esi
call fcn.00487a40
lea ecx, [ebp - 0xd8]
call fcn.0051dfd0
lea ecx, [ebp - 0xc0]
jmp 0x449850
cmp eax, dword [ebp - 0x1c4]
jne 0x449054
push 0
push 9
push 0x110a
push dword [ebp - 0x194]
call dword [0x5de7fc]
push eax
push 3
push 0x110a
push dword [ebp - 0x194]
mov dword [ebp - 0x1ac], eax
call dword [0x5de7fc]
test eax, eax
je 0x448758
lea eax, [ebp - 0xf0]
mov ecx, esi
push eax
lea eax, [ebp - 0x8c]
push eax
push dword [ebp - 0x1ac]
push dword [ebp - 0x19c]
call fcn.004461e0
test al, al
je 0x448758
push 0
lea ecx, [ebp - 0x8c]
call fcn.0051dd30
push eax
mov ecx, esi
call fcn.00461b70
jmp 0x449859
cmp eax, dword [ebp - 0x1b4]
jne 0x44907e
push 0
mov ecx, esi
call fcn.00461860
test al, al
jne 0x448758
push 0
push ecx
mov ecx, esi
call fcn.00461a00
or eax, 0x100
jmp 0x4490aa
cmp eax, dword [ebp - 0x1d8]
jne 0x4490f0
push 0
mov ecx, esi
call fcn.00461860
test al, al
jne 0x448758
push dword [esi + 0x1f28]
push ecx
mov ecx, esi
call fcn.00461a00
or eax, 0x80
add esp, 4
push eax
push ecx
mov ecx, dword [ebp - 0x194]
call fcn.004e1c00
mov ecx, dword [esi + 0x34]
mov dword [ebp - 0x1ac], eax
cmp ecx, 0xffffffff
je 0x4490d9
test ecx, ecx
je 0x4490d9
push ecx
call dword [0x5de390]
mov eax, dword [ebp - 0x1ac]
mov dword [esi + 0x34], eax
test eax, eax
jne 0x449859
mov dword [esi + 0x34], 0xffffffff
jmp 0x449859
cmp eax, dword [ebp - 0x1f4]
jne 0x449168
push 0
push 9
push 0x110a
push dword [ebp - 0x194]
call dword [0x5de7fc]
push eax
push 3
push 0x110a
push dword [ebp - 0x194]
mov dword [ebp - 0x1ac], eax
call dword [0x5de7fc]
test eax, eax
je 0x448758
push dword [ebp - 0x1ac]
mov ecx, edi
push dword [ebp - 0x19c]
call fcn.004f1a90
push eax
lea ecx, [ebp - 0x8c]
call fcn.0051dd60
push 0
lea ecx, [ebp - 0x8c]
call fcn.0051dd30
push eax
mov ecx, esi
call fcn.0044f580
jmp 0x449859
cmp eax, dword [ebp - 0x1d4]
jne 0x44921e
push 0
push 9
push 0x110a
push dword [ebp - 0x194]
call dword [0x5de7fc]
push eax
push 3
push 0x110a
push dword [ebp - 0x194]
mov dword [ebp - 0x1ac], eax
call dword [0x5de7fc]
test eax, eax
jne 0x4491b5
mov eax, dword [ebp - 0x1ac]
test eax, eax
je 0x448758
push 0
push eax
push dword [ebp - 0x19c]
xorps xmm0, xmm0
mov dword [ebp - 0xc4], 0
mov ecx, edi
movq qword [ebp - 0xcc], xmm0
call fcn.004f1a90
push eax
lea ecx, [ebp - 0xcc]
call fcn.0051e110
push 0
push 1
push 0xffffffffffffffff
push 1
push 0x623a58
lea ecx, [ebp - 0xcc]
mov byte [ebp - 4], 0x14
call fcn.0051c760
lea ecx, [ebp - 0xcc]
test eax, eax
jne 0x449867
mov byte [ebp - 4], 0xd
call fcn.0051dfd0
jmp 0x448758
cmp eax, dword [ebp - 0x1e4]
jne 0x44943c
push 0
push 9
push 0x110a
push dword [ebp - 0x194]
call dword [0x5de7fc]
push eax
push 3
push 0x110a
push dword [ebp - 0x194]
mov dword [ebp - 0x1ac], eax
call dword [0x5de7fc]
test eax, eax
je 0x448758
push 0xd
push dword [esi + 0x12d4]
xorps xmm0, xmm0
lea ecx, [ebp - 0xc0]
push dword [ebp - 0x19c]
movups xmmword [ebp - 0xc0], xmm0
push dword [ebp - 0x1bc]
movups xmmword [ebp - 0xb0], xmm0
push edi
call fcn.004f0200
push dword [ebp - 0x1ac]
mov byte [ebp - 4], 0x15
mov ecx, edi
push dword [ebp - 0x19c]
call fcn.004f1a90
push eax
lea ecx, [ebp - 0x8c]
call fcn.0051dd60
push 8
push 0
push 0x5fe50c
push 0x648940
lea ecx, [ebp - 0x8c]
call fcn.0051b3f0
sub esp, 8
mov dword [ebp - 0x98], 0
xorps xmm0, xmm0
lea ecx, [ebp - 0x8c]
movq qword [ebp - 0xa0], xmm0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x628fc4
call fcn.0051dd30
push eax
push 0x6469e8
lea ecx, [ebp - 0xa0]
call fcn.0051e0c0
lea ecx, [esi + 0x14e0]
mov byte [ebp - 4], 0x16
call fcn.004edd50
push eax
mov edx, 0x1f4
lea ecx, [ebp - 0xa0]
call fcn.0048a1a0
push 0
push 0xffffffffffffffc4
sub esp, 8
lea ecx, [ebp - 0xa0]
push 0x46
push 0x258
push 0
call fcn.0051dd30
push eax
mov ecx, esi
call fcn.004871d0
mov ecx, eax
call fcn.004ee190
lea ecx, [ebp - 0x8c]
call fcn.0051dd30
xor edx, edx
mov ecx, eax
call fcn.004ccc80
push eax
lea ecx, [ebp - 0xa0]
call fcn.0051dd60
lea ecx, [esi + 0x14e0]
call fcn.004edd50
push eax
mov edx, 0x1f4
lea ecx, [ebp - 0x8c]
call fcn.0048a1a0
sub esp, 0xc
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x60477c
lea ecx, [ebp - 0x8c]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0xa0]
call fcn.0051c280
lea ecx, [ebp - 0xa0]
call fcn.0051dd30
push eax
push 0x64
lea ecx, [esi + 0x14e0]
call fcn.004ee190
push 1
push 0x63dd80
lea ecx, [esi + 0x14e0]
call fcn.004edf50
push 0
push 0
mov ecx, esi
call fcn.00486e80
test eax, eax
jne 0x449419
push 5
call dword [0x5de438]
push 0
push 0
mov ecx, esi
call fcn.00486e80
test eax, eax
je 0x449402
push 2
lea ecx, [esi + 0x14e0]
call fcn.004edd80
lea ecx, [ebp - 0xa0]
call fcn.0051dfd0
lea ecx, [ebp - 0xc0]
jmp 0x449850
cmp eax, dword [ebp - 0x1e8]
jne 0x4494d0
push 0
push 9
push 0x110a
push dword [ebp - 0x194]
call dword [0x5de7fc]
push eax
push 3
push 0x110a
push dword [ebp - 0x194]
mov dword [ebp - 0x1ac], eax
call dword [0x5de7fc]
test eax, eax
je 0x448758
push dword [ebp - 0x1ac]
mov ecx, edi
push dword [ebp - 0x19c]
call fcn.004f1a90
push eax
lea ecx, [ebp - 0x8c]
call fcn.0051dd60
push 8
push 0
push 0x5fe50c
push 0x648940
lea ecx, [ebp - 0x8c]
call fcn.0051b3f0
lea ecx, [ebp - 0x8c]
call fcn.0051dd30
xor edx, edx
mov ecx, eax
call fcn.004c9ab0
jmp 0x449859
cmp eax, dword [ebp - 0x1ec]
jne 0x449551
push 0
push 9
push 0x110a
push dword [ebp - 0x194]
call dword [0x5de7fc]
push eax
push 3
push 0x110a
push dword [ebp - 0x194]
mov dword [ebp - 0x1ac], eax
call dword [0x5de7fc]
test eax, eax
je 0x448758
lea eax, [ebp - 0xf0]
mov ecx, esi
push eax
lea eax, [ebp - 0x8c]
push eax
push dword [ebp - 0x1ac]
push dword [ebp - 0x19c]
call fcn.004461e0
push 0
lea ecx, [ebp - 0x8c]
call fcn.0051dd30
push eax
push 2
push dword [ebp - 0x1c8]
call dword [0x5de5ac]
jmp 0x449859
cmp eax, dword [ebp - 0x1d0]
je 0x449565
cmp eax, dword [ebp - 0x1f0]
jne 0x449859
push 0
push dword [ebp - 0x90]
lea eax, [ebp - 0x19c]
mov ecx, esi
push eax
call fcn.00447a50
push dword [ebp - 0x19c]
mov ecx, edi
call fcn.004fcac0
mov dword [ebp - 0x194], eax
jmp 0x449859
push 0
push 9
push 0x110a
push dword [ebp - 0x194]
call dword [0x5de7fc]
mov dword [ebp - 0x1b8], eax
test eax, eax
je 0x448758
push eax
push 3
push 0x110a
push dword [ebp - 0x194]
call dword [0x5de7fc]
test eax, eax
je 0x448758
lea eax, [ebp - 0xf0]
mov ecx, esi
push eax
lea eax, [ebp - 0x8c]
push eax
push dword [ebp - 0x1b8]
push dword [ebp - 0x19c]
call fcn.004461e0
test al, al
je 0x448758
push 0xd
push dword [esi + 0x12d4]
xorps xmm0, xmm0
lea ecx, [ebp - 0xc0]
push dword [ebp - 0x19c]
movups xmmword [ebp - 0xc0], xmm0
push dword [ebp - 0x1bc]
movups xmmword [ebp - 0xb0], xmm0
push edi
call fcn.004f0200
sub esp, 8
mov byte [ebp - 4], 0x11
mov ecx, esi
push 0x8c
push 0
push 0
push 0
push 1
push 0x6487a0
call fcn.00487a40
test eax, eax
jne 0x449664
lea ecx, [ebp - 0xc0]
mov byte [ebp - 4], 0xd
call fcn.004f0190
jmp 0x448758
push 0
push 0xe
lea ecx, [ebp - 0x8c]
call fcn.0051dd30
push eax
mov ecx, esi
call fcn.0044ab80
cmp eax, 1
jne 0x4496a0
push dword [ebp - 0x1b8]
push 0
push 0x1101
push dword [ebp - 0x194]
call dword [0x5de7fc]
push 0x648828
jmp 0x4496aa
cmp eax, 2
jne 0x4496b5
push 0x648730
lea ecx, [ebp - 0x8c]
call fcn.0051e0b0
sub esp, 8
lea ecx, [ebp - 0x8c]
push 0x8c
push 0x190
push 0
push 0
push 4
call fcn.0051dd30
push eax
mov ecx, esi
call fcn.00487a40
lea ecx, [ebp - 0xc0]
jmp 0x449850
mov eax, dword [0x5de7fc]
push 0
push 9
push 0x110a
push dword [ebp - 0x194]
call eax
mov dword [ebp - 0x1b8], eax
test eax, eax
je 0x448758
push eax
push 3
push 0x110a
push dword [ebp - 0x194]
call dword [0x5de7fc]
test eax, eax
je 0x448758
lea eax, [ebp - 0xf0]
mov ecx, esi
push eax
lea eax, [ebp - 0x8c]
push eax
push dword [ebp - 0x1b8]
push dword [ebp - 0x19c]
call fcn.004461e0
test al, al
je 0x448758
push 0xd
push dword [esi + 0x12d4]
xorps xmm0, xmm0
lea ecx, [ebp - 0xc0]
push dword [ebp - 0x19c]
movups xmmword [ebp - 0xc0], xmm0
push dword [ebp - 0x1bc]
movups xmmword [ebp - 0xb0], xmm0
push edi
call fcn.004f0200
sub esp, 8
mov byte [ebp - 4], 0x10
mov ecx, esi
push 0x8c
push 0
push 0
push 0
push 1
push 0x648620
call fcn.00487a40
test eax, eax
jne 0x4497b8
lea ecx, [ebp - 0xc0]
mov byte [ebp - 4], 0xd
call fcn.004f0190
jmp 0x448758
push 0
push 0xc
lea ecx, [ebp - 0x8c]
call fcn.0051dd30
push eax
mov ecx, esi
call fcn.0044ab80
cmp eax, 1
jne 0x4496a0
push dword [ebp - 0x1b8]
push 0
push 0x1101
push dword [ebp - 0x194]
call dword [0x5de7fc]
push 0x6486b0
jmp 0x4496aa
push 0xd
push dword [esi + 0x12d4]
xorps xmm0, xmm0
lea ecx, [ebp - 0x168]
push edx
push dword [ebp - 0x1bc]
movups xmmword [ebp - 0x168], xmm0
push edi
movups xmmword [ebp - 0x158], xmm0
call fcn.004f0200
mov byte [ebp - 4], 0xe
mov ecx, esi
push dword [ebp - 0x19c]
call fcn.00446740
push dword [ebp - 0x1c8]
mov byte [ebp - 0x196], al
call dword [0x5de728]
lea ecx, [ebp - 0x168]
mov byte [ebp - 4], 0xd
call fcn.004f0190
cmp byte [ebp - 0x196], 0
jne 0x44989e
jmp 0x448758
push 0
add eax, 3
mov byte [ebp - 0x196], 2
push eax
call fcn.0051ca10
mov ecx, eax
call fcn.0051cce0
lea ecx, [ebp - 0xcc]
mov dword [esi + 0x1f20], eax
mov byte [ebp - 4], 0xd
call fcn.0051dfd0
jmp 0x44989e
mov byte [ebp - 0x196], 1
push 0
push 0x648370
mov ecx, esi
call fcn.0044f950
cmp byte [ebp - 0x196], 0
mov ecx, esi
sete al
movzx eax, al
push eax
call fcn.0044f830
lea ecx, [ebp - 0xf0]
call fcn.0051b050
lea ecx, [ebp - 0x16c]
call fcn.004fd7d0
lea ecx, [ebp - 0x190]
call fcn.004fd7d0
lea ecx, [ebp - 0x178]
call fcn.004fd7d0
lea ecx, [ebp - 0x170]
call fcn.004fd7d0
lea ecx, [ebp - 0x17c]
call fcn.004fd7d0
lea ecx, [ebp - 0x18c]
call fcn.004fd7d0
lea ecx, [ebp - 0x180]
call fcn.004fd7d0
lea ecx, [ebp - 0x184]
call fcn.004fd7d0
lea ecx, [ebp - 0x188]
call fcn.004fd7d0
lea ecx, [ebp - 0x174]
call fcn.004fd7d0
lea ecx, [ebp - 0x94]
call fcn.005187c0
lea ecx, [ebp - 0xfc]
call fcn.0051dfd0
lea ecx, [ebp - 0x8c]
call fcn.0051dfd0
mov al, byte [ebp - 0x196]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0041e885
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret