Function at 0x563850
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5d9aa5
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x438
mov eax, dword [0x6dd1e4]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x3b8], edi
push 0
lea ecx, [ebp - 0x2b0]
mov byte [ebp - 0x39f], 0
mov byte [ebp - 0x39d], 0
call fcn.00512430
push 0x643300
lea ecx, [edi + 0x1414]
call fcn.0051e0b0
push 0x670e64
mov ecx, edi
call fcn.005c05d0
push 0
lea ecx, [edi + 0x1414]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.005c4fb0
push 1
lea ecx, [edi + 0x1414]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.0044fc50
mov ecx, edi
mov dword [ebp - 0x3dc], eax
call fcn.00487c90
test al, al
je 0x56740d
mov esi, dword [edi + 0x14d4]
lea ecx, [edi + 0x12b4]
push 1
push 0x670e88
mov dword [ebp - 0x3a8], esi
call fcn.0051de00
push 0
mov ecx, esi
call fcn.004fb8b0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
xorps xmm0, xmm0
mov dword [ebp - 0xe4], 0
push 0
lea ecx, [edi + 0x1414]
movq qword [ebp - 0xe0], xmm0
mov dword [ebp - 0xd8], 0
call fcn.0051dd30
push eax
push 0x5fe504
push 0x621a58
lea ecx, [ebp - 0xe0]
call fcn.0051e0c0
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x23c]
xorps xmm0, xmm0
mov dword [ebp - 0x234], 0
movq qword [ebp - 0x23c], xmm0
call fcn.0051e180
push 0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xe0]
push 0xffffffffffffffff
mov dword [ebp - 0xcc], 0
call fcn.0051dd30
push eax
lea ecx, [ebp - 0xcc]
call fcn.00518860
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xec]
mov dword [ebp - 0xec], 0
call fcn.00518880
push 0xffffffffffffffff
push 0x5e
push 0xc8
push 0xa
push 0x6e
mov byte [ebp - 4], 3
mov ecx, edi
push dword [edi + 0x70]
call fcn.00486420
push 0x8800
mov ecx, esi
call fcn.004fb760
movsd xmm1, qword [0x6be540]
mov ecx, esi
push 0
push str.Arial
push 1
push 0x320
call fcn.004fb6d0
push 0x37
push 0x5a
push 3
push 0xa
mov ecx, edi
call fcn.00450470
push 0xffffffffffffffff
push 0x10000001
push 0x2d
push 0x6e
push 0x3c
push 0
lea ecx, [edi + 0x1414]
call fcn.0051dd30
push eax
mov ecx, esi
call fcn.004f7f60
push dword [edi + 0x1404]
mov ecx, esi
push 0xffffffffffffffff
call fcn.004f6320
movsd xmm1, qword [0x6be528]
mov ecx, esi
push 0
push str.Arial
push 1
push 0x190
call fcn.004fb6d0
lea eax, [ebp - 0xe4]
push eax
push 0x670ef8
lea ecx, [ebp - 0xcc]
call fcn.005184a0
cmp dword [ebp - 0xe4], 0
mov ecx, edi
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0
push 0x670f18
setne al
movzx eax, al
push eax
push 0x10
push 0xb4
push 0x14
push 0x78
push 0x670fcc
call fcn.00450210
mov dword [ebp - 0x3d0], eax
lea ecx, [ebp - 0xcc]
lea eax, [ebp - 0xe4]
push eax
push 0x670ff8
call fcn.005184a0
cmp dword [ebp - 0xe4], 0
mov ecx, edi
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0
push 0x671018
setne al
movzx eax, al
push eax
push 0x10
push 0xb4
push 0x28
push 0x78
push 0x6710a4
call fcn.00450210
mov dword [ebp - 0x3d4], eax
lea ecx, [ebp - 0xcc]
lea eax, [ebp - 0xe4]
push eax
push 0x6710d8
call fcn.005184a0
cmp dword [ebp - 0xe4], 0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0
push 0x671100
setne al
movzx eax, al
push eax
push 0x10
push 0xb4
push 0x3c
push 0x78
push 0x671178
mov ecx, edi
call fcn.00450210
mov dword [ebp - 0x3c4], eax
lea ecx, [ebp - 0xcc]
lea eax, [ebp - 0xe4]
push eax
push 0x6711ac
call fcn.005184a0
cmp dword [ebp - 0xe4], 0
mov ecx, edi
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0
push 0x6711d0
setne al
movzx eax, al
push eax
push 0x10
push 0xb4
push 0x50
push 0x78
push 0x6712d0
call fcn.00450210
push 0
push ecx
mov dword [esp], 0x41500000
mov ecx, edi
push 0x671310
push 0x5f
push 0x55
push 0xa
push 0x13b
push 0xa7
push 0x67145c
mov dword [ebp - 0x3b0], eax
call fcn.004503a0
mov dword [ebp - 0x3b4], eax
mov eax, dword [edi + 0x1f20]
test al, 1
je 0x563c70
test al, 2
mov ecx, esi
mov eax, 0
sete al
lea eax, [eax*4 + 4]
push eax
push dword [ebp - 0x3d0]
call fcn.004f4b70
test byte [edi + 0x1f20], 4
mov eax, 0
mov ecx, esi
sete al
lea eax, [eax*4 + 4]
push eax
push dword [ebp - 0x3c4]
call fcn.004f4b70
test byte [edi + 0x1f20], 8
mov eax, 0
mov ecx, esi
sete al
lea eax, [eax*4 + 4]
push eax
push dword [ebp - 0x3d4]
call fcn.004f4b70
movsd xmm0, qword [edi + 8]
comisd xmm0, xmmword [0x6be4e8]
push 0
push ecx
mov dword [ebp - 0x424], 0xfffe7960
mov ecx, edi
mov dword [ebp - 0x3f0], 0xfff0bdc0
mov dword [esp], 0x41500000
jb 0x563cc6
push 0x671488
push 0x5f
push 0x55
push 0xa
push 0x195
push 0xcd
push 0x6714d0
call fcn.004503a0
mov dword [ebp - 0x424], eax
jmp 0x563ceb
push 0x6714f8
push 0x5f
push 0x55
push 0xa
push 0x195
push 0x8b
push 0x671564
call fcn.004503a0
mov dword [ebp - 0x3f0], eax
push 0
push ecx
mov dword [esp], 0x41500000
mov ecx, edi
push 0x6715a0
push 0x5f
push 0x55
push 0xa
push 0x1ef
push 0x78
push 0x6716d4
call fcn.004503a0
push 0
push ecx
mov dword [esp], 0x41500000
mov ecx, edi
push 0x64197c
push 0x5f
push 0x4b
push 0xa
push 0x249
push 0x7d
push 0x6419a8
mov dword [ebp - 0x434], eax
call fcn.004503a0
push 0
push ecx
mov dword [esp], 0x41500000
mov ecx, edi
push 0x645ad4
push 0x5f
push 0x4b
push 0xa
push 0x299
push 0xb3
push 0x641970
mov dword [edi + 0x12d4], eax
call fcn.004503a0
push 0
push 0x10800080
push 0x19
push 0xb9
push 0x23
push 0x2f3
push 0x671704
mov ecx, esi
mov dword [edi + 0x12d8], eax
call fcn.004f8120
push 0x909090
push 0xffffffffffffffff
mov ecx, esi
mov dword [ebp - 0x3ac], eax
call fcn.004f6320
movsd xmm0, qword [0x6be528]
sub esp, 8
mov ecx, esi
movsd qword [esp], xmm0
push 0
push 0
push 0
push 0x190
push 0xffffffffffffffff
call fcn.004f61c0
push 0x40
push 0xffffffffffffffff
mov ecx, esi
call fcn.004f4b70
push 0
push ecx
mov dword [esp], 0x41500000
mov ecx, edi
push 0x645b44
push 0x28
push 0x5a
push 0x41
push 0x2f3
push 0x86
push 0x645b44
call fcn.00450300
mov dword [ebp - 0x3d8], eax
push 0
push ecx
mov dword [esp], 0x41500000
mov ecx, edi
push 0x645b58
push 0x28
push 0x5a
push 0x41
push 0x352
push 0x99
push 0x645b78
call fcn.00450300
movsd xmm1, qword [0x6be518]
mov ecx, esi
push 0
push str.Arial
push 1
push 0x190
mov dword [ebp - 0x3cc], eax
call fcn.004fb6d0
movsd xmm0, qword [edi + 8]
xor eax, eax
comisd xmm0, xmmword [0x6be4d8]
mov ecx, 0x8200004
cmovae eax, ecx
mov ecx, esi
or eax, 0x10021
push eax
push 0x10000109
push 0x1b3
push 0x2ee
push 0x73
push 0
push 0x5fe640
push 0x671738
call fcn.004f7d00
push 0x433
push 0xffffffffffffffff
mov ecx, esi
mov dword [ebp - 0x394], eax
call fcn.004f51f0
movsd xmm0, qword [edi + 8]
mov ecx, esi
comisd xmm0, xmmword [0x6be4e8]
mov eax, dword [ebp - 0x3f0]
push dword [ebp - 0x394]
cmovae eax, dword [ebp - 0x3b4]
mov dword [ebp - 0x3bc], eax
call fcn.004fcac0
lea ecx, [ebp - 0xc0]
mov dword [ebp - 0x3a4], eax
push ecx
push eax
push 0x643300
mov ecx, edi
mov dword [ebp - 0xc0], 9
mov dword [ebp - 0xbc], 0x136
mov dword [ebp - 0xb8], 0xb4
mov dword [ebp - 0xb4], 0x55
mov dword [ebp - 0xb0], 0x55
mov dword [ebp - 0xac], 0x43
mov dword [ebp - 0xa8], 0x56
mov dword [ebp - 0xa4], 0
mov dword [ebp - 0xa0], 0
mov dword [ebp - 0x9c], 0
call fcn.0044bbd0
lea eax, [ebp - 0xe8]
push eax
push 0x671824
lea ecx, [ebp - 0xcc]
call fcn.005184a0
test al, al
je 0x563f8a
mov eax, dword [ebp - 0xe8]
test eax, eax
je 0x563f95
cmp eax, 3
je 0x563f95
cmp eax, 4
je 0x563f95
mov eax, 1
mov dword [ebp - 0xe8], eax
push 0
push eax
push 0x108e
push dword [ebp - 0x3a4]
call dword [0x5de7fc]
lea eax, [ebp - 0x264]
mov dword [ebp - 0x264], 0x28
push eax
push 0
push 0x10a2
push dword [ebp - 0x3a4]
xorps xmm0, xmm0
mov dword [ebp - 0x260], 2
mov dword [ebp - 0x25c], 0
mov dword [ebp - 0x258], 0
mov dword [ebp - 0x254], 0
movups xmmword [ebp - 0x24c], xmm0
mov dword [ebp - 0x250], 2
call dword [0x5de7fc]
push 0x48
call dword [0x5de7f8]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x60cd34
push dword [edi + 0x24]
xorps xmm0, xmm0
mov dword [ebp - 0xd0], eax
lea ecx, [ebp - 0x228]
movq qword [ebp - 0x228], xmm0
mov dword [ebp - 0x220], 0
call fcn.0051e0c0
push 0x14
push 0
lea ecx, [ebp - 0x228]
mov byte [ebp - 4], 4
call fcn.0051dd30
push eax
push 1
push dword [ebp - 0x394]
mov ecx, esi
call fcn.004f6120
push 0x20
push 0
lea ecx, [ebp - 0x228]
call fcn.0051dd30
push eax
push 0
push dword [ebp - 0x394]
mov ecx, esi
call fcn.004f6120
movsd xmm0, qword [edi + 8]
comisd xmm0, xmmword [0x6be4d0]
jbe 0x5640ba
push 0xff203000
push 0
push 0x14
push dword [ebp - 0x394]
mov ecx, esi
call fcn.004f1ea0
push 1
push dword [ebp - 0x394]
mov ecx, esi
call fcn.004f1d80
mov eax, dword [ebp - 0x3a4]
lea ecx, [ebp - 0x350]
mov dword [ebp - 0x35c], eax
xor eax, eax
cmp dword [ebp - 0xe4], eax
mov dword [ebp - 0x360], edi
setne al
mov byte [ebp - 0x354], 0
mov dword [ebp - 0x358], eax
call fcn.0051e180
mov byte [ebp - 4], 5
test byte [edi + 0x1f20], 1
je 0x564131
lea ecx, [edi + 0x142c]
call fcn.0051df40
test eax, eax
je 0x564131
lea eax, [edi + 0x142c]
push eax
lea ecx, [ebp - 0x350]
call fcn.0051e080
jmp 0x56420c
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [edi + 0x178]
push 0x67183c
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x350]
call fcn.0051dda0
lea ecx, [ebp - 0x350]
call fcn.0051dd30
push eax
call dword [0x5de620]
test eax, eax
je 0x56418d
lea ecx, [edi + 0x178]
call fcn.0051dd30
mov ecx, eax
call fcn.00505d40
test al, al
jne 0x56420c
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x671868
lea ecx, [edi + 0x160]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x350]
call fcn.0051dda0
lea ecx, [ebp - 0x350]
call fcn.0051dd30
or edx, 0xffffffff
mov ecx, eax
call fcn.00509060
push 2
lea ecx, [ebp - 0x350]
call fcn.0051dd30
push eax
call dword [0x5de454]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x671890
lea ecx, [ebp - 0x350]
call fcn.0051c4c0
lea ecx, [edi + 0x142c]
call fcn.0051dfa0
push 0
push 0x643300
mov ecx, edi
call fcn.0044faa0
mov ecx, edi
call fcn.0044f8d0
push 0
push 1
mov ecx, edi
call fcn.00486e80
mov dword [ebp - 0x334], 0xffffffff
lea eax, [ebp - 0x360]
mov byte [ebp - 4], 6
push eax
mov ecx, edi
call fcn.005502a0
movsd xmm0, qword [0x6be4d8]
comisd xmm0, xmmword [edi + 8]
jb 0x564271
push 4
call dword [0x5de754]
or eax, 0xff000000
jmp 0x564273
xor eax, eax
push eax
mov dword [ebp - 0xd4], eax
mov ecx, edi
mov eax, dword [ebp - 0xd0]
push eax
push eax
push 0x8b
call fcn.00477830
push eax
lea ecx, [ebp - 0x338]
call fcn.004fd7f0
mov byte [ebp - 4], 7
mov ecx, esi
push dword [ebp - 0x338]
push 0x6718b0
push dword [ebp - 0x394]
call fcn.004f8b00
push 0
push eax
push eax
mov ecx, esi
mov dword [ebp - 0x3c8], eax
call fcn.004fca70
push eax
call dword [0x5de75c]
push dword [ebp - 0xd4]
mov eax, dword [ebp - 0xd0]
mov ecx, edi
push eax
push eax
push 0xa7
call fcn.00477830
push eax
lea ecx, [ebp - 0x38c]
call fcn.004fd7f0
push 0
mov byte [ebp - 4], 8
mov ecx, esi
push dword [ebp - 0x38c]
push 0
push 0x32
push 0x671900
push dword [ebp - 0x394]
call fcn.004f7b00
push dword [ebp - 0xd4]
mov dword [ebp - 0x444], eax
mov ecx, edi
mov eax, dword [ebp - 0xd0]
push eax
push eax
push 0xfc
call fcn.00477830
push eax
lea ecx, [ebp - 0x378]
call fcn.004fd7f0
push 0
mov byte [ebp - 4], 9
mov ecx, esi
push dword [ebp - 0x378]
push 0
push 0x32
push 0x67194c
push dword [ebp - 0x394]
call fcn.004f7b00
push dword [ebp - 0xd4]
mov dword [ebp - 0x3f8], eax
mov ecx, edi
mov eax, dword [ebp - 0xd0]
push eax
push eax
push 0x72
call fcn.00477830
push eax
lea ecx, [ebp - 0x370]
call fcn.004fd7f0
mov byte [ebp - 4], 0xa
push 0
push dword [ebp - 0x370]
mov ecx, esi
push 0
push 0x32
push 0x67198c
push dword [ebp - 0x394]
call fcn.004f7b00
push 0
push 0
push 8
push 0x32
push 0
push dword [ebp - 0x394]
mov ecx, esi
mov dword [ebp - 0x408], eax
call fcn.004f7b00
push dword [ebp - 0xd4]
mov eax, dword [ebp - 0xd0]
mov ecx, edi
push eax
push eax
push 0x7c
call fcn.00477830
push eax
lea ecx, [ebp - 0x37c]
call fcn.004fd7f0
push 0
mov byte [ebp - 4], 0xb
mov ecx, esi
push dword [ebp - 0x37c]
push 0
push 0x32
push 0x6719c4
push dword [ebp - 0x394]
call fcn.004f7b00
push dword [ebp - 0xd4]
mov dword [ebp - 0x3fc], eax
mov ecx, edi
mov eax, dword [ebp - 0xd0]
push eax
push eax
push 0xac
call fcn.00477830
push eax
lea ecx, [ebp - 0x33c]
call fcn.004fd7f0
push 0
mov byte [ebp - 4], 0xc
mov ecx, esi
push dword [ebp - 0x33c]
push 0
push 0x32
push 0x645f10
push dword [ebp - 0x394]
call fcn.004f7b00
push dword [ebp - 0xd4]
mov dword [ebp - 0x404], eax
mov ecx, edi
mov eax, dword [ebp - 0xd0]
push eax
push eax
push 0x8e
call fcn.00477830
push eax
lea ecx, [ebp - 0x380]
call fcn.004fd7f0
push 0
mov byte [ebp - 4], 0xd
mov ecx, esi
push dword [ebp - 0x380]
push 0
push 0x32
push 0x671a00
push dword [ebp - 0x394]
call fcn.004f7b00
push 0
push dword [ebp - 0x338]
mov dword [ebp - 0x430], eax
push 0
push 0x32
push 0x645f44
push dword [ebp - 0x394]
mov ecx, esi
call fcn.004f7b00
push dword [ebp - 0xd4]
mov dword [ebp - 0x42c], eax
mov ecx, edi
mov eax, dword [ebp - 0xd0]
push eax
push eax
push 0x80
call fcn.00477830
push eax
lea ecx, [ebp - 0x36c]
call fcn.004fd7f0
push 0
mov byte [ebp - 4], 0xe
mov ecx, esi
push dword [ebp - 0x36c]
push 0
push 0x32
push 0x645ed8
push dword [ebp - 0x394]
call fcn.004f7b00
push dword [ebp - 0xd4]
mov dword [ebp - 0x428], eax
mov ecx, edi
mov eax, dword [ebp - 0xd0]
push eax
push eax
push 0x95
call fcn.00477830
push eax
lea ecx, [ebp - 0x384]
call fcn.004fd7f0
push 0
mov byte [ebp - 4], 0xf
mov ecx, esi
push dword [ebp - 0x384]
push 0
push 0x32
push 0x671a40
push dword [ebp - 0x394]
call fcn.004f7b00
push 0
push 0
push 8
push 0x32
push 0
push dword [ebp - 0x394]
mov ecx, esi
mov dword [ebp - 0x3c0], eax
call fcn.004f7b00
push 0
push dword [ebp - 0x33c]
mov ecx, esi
push 4
push 0x32
push 0x671a84
push dword [ebp - 0x394]
call fcn.004f7b00
mov ecx, dword [ebp - 0x3a8]
mov esi, eax
push 0
push 0
push 0
push 0x32
push 0x671aa8
push esi
call fcn.004f7b00
push 0
push 0
push 0
push 0x32
push 0x671ab4
mov dword [ebp - 0x440], eax
push esi
mov ecx, dword [ebp - 0x3a8]
call fcn.004f7b00
mov ecx, dword [ebp - 0x3a8]
push 0
push 0
push 0
push 0x32
push 0x671ac4
push esi
mov dword [ebp - 0x43c], eax
call fcn.004f7b00
push 0
push 0
push 0
push 0x32
push 0x671ad0
push esi
mov esi, dword [ebp - 0x3a8]
mov ecx, esi
mov dword [ebp - 0x414], eax
call fcn.004f7b00
push dword [ebp - 0xd4]
mov dword [ebp - 0x418], eax
mov ecx, edi
mov eax, dword [ebp - 0xd0]
push eax
push eax
push 0x94
call fcn.00477830
push eax
lea ecx, [ebp - 0x388]
call fcn.004fd7f0
push 0
mov byte [ebp - 4], 0x10
mov ecx, esi
push dword [ebp - 0x388]
push 0
push 0x32
push 0x671adc
push dword [ebp - 0x394]
call fcn.004f7b00
push 0
push 0
push 8
push 0x32
push 0
push dword [ebp - 0x394]
mov ecx, esi
mov dword [ebp - 0x400], eax
call fcn.004f7b00
push dword [ebp - 0xd4]
mov eax, dword [ebp - 0xd0]
mov ecx, edi
push eax
push eax
push 0x6a
call fcn.00477830
push eax
lea ecx, [ebp - 0x368]
call fcn.004fd7f0
push 0
mov byte [ebp - 4], 0x11
mov ecx, esi
push dword [ebp - 0x338]
push 0
push 0x32
push 0x671afc
push dword [ebp - 0x394]
call fcn.004f7b00
push 0
push dword [ebp - 0x370]
mov ecx, esi
mov dword [ebp - 0x3f4], eax
push 0
push 0x32
push 0x671b30
push dword [ebp - 0x394]
call fcn.004f7b00
mov dword [ebp - 0x3ec], eax
push 0
push dword [ebp - 0x33c]
mov ecx, esi
push 0
push 0x32
push 0x671b64
push dword [ebp - 0x394]
call fcn.004f7b00
push 0
push dword [ebp - 0x368]
mov ecx, esi
mov dword [ebp - 0x40c], eax
push 0
push 0x32
push 0x671b98
push dword [ebp - 0x394]
call fcn.004f7b00
push 0
push dword [ebp - 0x368]
mov ecx, esi
mov dword [ebp - 0x438], eax
push 0
push 0x32
push 0x671bd8
push dword [ebp - 0x394]
call fcn.004f7b00
push 0
push 0
push 8
push 0x32
push 0
push dword [ebp - 0x394]
mov ecx, esi
mov dword [ebp - 0x410], eax
call fcn.004f7b00
push 0
push dword [ebp - 0x36c]
mov ecx, esi
push 0
push 0x32
push 0x645f94
push dword [ebp - 0x394]
call fcn.004f7b00
push dword [ebp - 0xd4]
mov dword [ebp - 0x3e8], eax
mov ecx, edi
mov eax, dword [ebp - 0xd0]
push eax
push eax
push 0xb1
call fcn.00477830
push eax
lea ecx, [ebp - 0x364]
call fcn.004fd7f0
push 0
mov byte [ebp - 4], 0x12
mov ecx, esi
push dword [ebp - 0x364]
push 0
push 0x32
push 0x645fc8
push dword [ebp - 0x394]
call fcn.004f7b00
push 0
push dword [ebp - 0x364]
mov ecx, esi
mov dword [ebp - 0x3e4], eax
push 0
push 0x32
push 0x671c18
push dword [ebp - 0x394]
call fcn.004f7b00
push 0
mov ecx, edi
mov dword [ebp - 0x3e0], eax
call fcn.0044f730
mov ecx, eax
mov byte [ebp - 0x98], 1
mov dword [ebp - 0x41c], ecx
mov eax, 0x70
mov word [ebp - 0x96], ax
mov edx, 0x42
movzx eax, word [edi + 0x12d4]
mov word [ebp - 0x94], ax
mov eax, 0x1b
mov word [ebp - 0x90], ax
movzx eax, word [edi + 0x12d8]
mov word [ebp - 0x8e], ax
mov eax, 0x4d
mov word [ebp - 0x8a], ax
mov eax, dword [ebp - 0x3f8]
mov word [ebp - 0x88], ax
mov eax, 0xd
mov word [ebp - 0x84], ax
mov eax, dword [ebp - 0x3c8]
mov word [ebp - 0x82], ax
mov eax, 0x2e
mov word [ebp - 0x7e], ax
mov eax, dword [ebp - 0x408]
mov word [ebp - 0x7c], ax
mov eax, 0x47
mov word [ebp - 0x78], ax
mov eax, dword [ebp - 0x3fc]
mov word [ebp - 0x76], ax
mov eax, 0x4c
mov word [ebp - 0x72], ax
mov eax, dword [ebp - 0x404]
mov word [ebp - 0x70], ax
mov eax, 0x52
mov word [ebp - 0x6c], ax
mov eax, dword [ebp - 0x430]
mov word [ebp - 0x6a], ax
mov eax, 0x50
mov word [ebp - 0x66], ax
mov eax, dword [ebp - 0x42c]
mov word [ebp - 0x64], ax
mov eax, 0x56
mov word [ebp - 0x60], ax
mov eax, dword [ebp - 0x428]
mov word [ebp - 0x5e], ax
mov eax, 0x55
mov word [ebp - 0x5a], ax
mov eax, dword [ebp - 0x3c0]
mov word [ebp - 0x58], ax
mov eax, 0x74
mov word [ebp - 0x54], ax
mov eax, dword [ebp - 0x400]
mov word [ebp - 0x52], ax
mov eax, 0x57
mov word [ebp - 0x4e], ax
mov eax, dword [ebp - 0x3f4]
mov word [ebp - 0x4c], ax
mov eax, dword [ebp - 0x3ec]
mov word [ebp - 0x46], ax
mov eax, dword [ebp - 0x40c]
mov word [ebp - 0x40], ax
mov eax, 0x49
mov word [ebp - 0x3c], ax
mov eax, dword [ebp - 0x410]
mov word [ebp - 0x3a], ax
mov eax, 0x4d
mov word [ebp - 0x36], ax
mov eax, dword [ebp - 0x3e8]
mov byte [ebp - 0x92], 1
mov byte [ebp - 0x8c], 0x11
mov byte [ebp - 0x86], 9
mov byte [ebp - 0x80], 1
mov byte [ebp - 0x7a], 9
mov byte [ebp - 0x74], 9
mov byte [ebp - 0x6e], 9
mov byte [ebp - 0x68], 9
mov byte [ebp - 0x62], 0x11
mov byte [ebp - 0x5c], 0x11
mov byte [ebp - 0x56], 1
mov byte [ebp - 0x50], 9
mov byte [ebp - 0x4a], 9
mov word [ebp - 0x48], dx
mov byte [ebp - 0x44], 0x11
mov word [ebp - 0x42], dx
mov byte [ebp - 0x3e], 9
mov byte [ebp - 0x38], 9
mov word [ebp - 0x34], ax
mov eax, 0x55
mov word [ebp - 0x30], ax
mov eax, dword [ebp - 0x3e4]
mov word [ebp - 0x2e], ax
mov eax, 0x48
mov word [ebp - 0x2a], ax
mov eax, dword [ebp - 0x3e0]
mov word [ebp - 0x28], ax
mov eax, 0x72
mov word [ebp - 0x24], ax
mov eax, dword [ebp - 0x3cc]
mov word [ebp - 0x22], ax
mov eax, 0x46
mov word [ebp - 0x1e], ax
lea eax, [ebp - 0x98]
push 0x15
mov word [ebp - 0x1c], cx
mov ecx, esi
push eax
mov byte [ebp - 0x32], 9
mov byte [ebp - 0x2c], 9
mov byte [ebp - 0x26], 1
mov byte [ebp - 0x20], 9
call fcn.004fbbb0
push dword [ebp - 0x3a4]
mov dword [ebp - 0x420], 0xffffffff
call dword [0x5de730]
push 0x20
push dword [ebp - 0x3ac]
mov ecx, esi
call fcn.004f4b70
xorps xmm0, xmm0
mov dword [ebp - 0x184], 0
lea ecx, [ebp - 0x18c]
movq qword [ebp - 0x18c], xmm0
call fcn.0051e180
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x21c]
xorps xmm0, xmm0
mov dword [ebp - 0x214], 0
movq qword [ebp - 0x21c], xmm0
call fcn.0051e180
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x1d4]
xorps xmm0, xmm0
mov dword [ebp - 0x1cc], 0
movq qword [ebp - 0x1d4], xmm0
call fcn.0051e180
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x110]
xorps xmm0, xmm0
mov dword [ebp - 0x108], 0
movq qword [ebp - 0x110], xmm0
call fcn.0051e180
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x1e0]
xorps xmm0, xmm0
mov dword [ebp - 0x1d8], 0
movq qword [ebp - 0x1e0], xmm0
call fcn.0051e180
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x1ec]
xorps xmm0, xmm0
mov dword [ebp - 0x1e4], 0
movq qword [ebp - 0x1ec], xmm0
call fcn.0051e180
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x12c]
xorps xmm0, xmm0
mov dword [ebp - 0x124], 0
movq qword [ebp - 0x12c], xmm0
call fcn.0051e180
mov byte [ebp - 4], 0x19
xorps xmm0, xmm0
mov dword [ebp - 0x114], 0
lea ecx, [ebp - 0x11c]
movq qword [ebp - 0x11c], xmm0
call fcn.0051e180
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x120]
mov dword [ebp - 0x120], 0
call fcn.004e8c40
push dword [ebp - 0x3cc]
mov ecx, esi
mov byte [ebp - 4], 0x1b
call fcn.004fb790
push dword [ebp - 0x3bc]
mov ecx, edi
push dword [ebp - 0x3b4]
push dword [ebp - 0x394]
call fcn.005c13e0
test byte [edi + 0x1f20], 0x80
jne 0x567235
push 0
mov ecx, edi
call fcn.005c4c60
mov ecx, dword [edi + 0x1498]
cmp ecx, 0xfffffffa
je 0x567235
cmp dword [edi + 0x14c8], esi
jne 0x5671bb
cmp ecx, dword [edi + 0x12d8]
je 0x56722e
mov eax, dword [ebp - 0x394]
cmp ecx, 0xffffffeb
jne 0x564c1b
cmp dword [edi + 0x14a4], eax
jne 0x564c1b
push dword [ebp - 0x3ac]
mov ecx, edi
push eax
call fcn.004879e0
jmp 0x5671bb
test byte [edi + 0x1f20], 1
jne 0x56667c
cmp ecx, dword [ebp - 0x444]
je 0x56667c
cmp ecx, dword [ebp - 0x3b4]
je 0x56667c
cmp ecx, dword [ebp - 0x3f8]
jne 0x56503b
xorps xmm0, xmm0
mov ecx, esi
push eax
movlpd qword [ebp - 0xc8], xmm0
call fcn.004f2c90
mov dword [ebp - 0xc8], eax
mov byte [ebp - 4], 0x20
cmp dword [eax], 1
jge 0x564c78
mov byte [ebp - 4], 0x1b
push eax
jmp 0x5671b3
push 0xd
push dword [edi + 0x12d4]
xorps xmm0, xmm0
lea ecx, [ebp - 0x150]
push dword [ebp - 0x394]
movups xmmword [ebp - 0x150], xmm0
push dword [ebp - 0x3b0]
movups xmmword [ebp - 0x140], xmm0
push esi
call fcn.004f0200
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x1a4]
xorps xmm0, xmm0
mov dword [ebp - 0x19c], 0
movq qword [ebp - 0x1a4], xmm0
call fcn.0051e180
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x210]
xorps xmm0, xmm0
mov dword [ebp - 0x208], 0
movq qword [ebp - 0x210], xmm0
call fcn.0051e180
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x1b0]
xorps xmm0, xmm0
mov dword [ebp - 0x1a8], 0
movq qword [ebp - 0x1b0], xmm0
call fcn.0051e180
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0x1c8]
xorps xmm0, xmm0
mov dword [ebp - 0x1c0], 0
movq qword [ebp - 0x1c8], xmm0
call fcn.0051e180
push 0
push str.Cancel
push 0
push 0xffffffffffffffba
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x46
push 0x1c2
push esi
push 0x6721b4
mov ecx, edi
mov byte [ebp - 4], 0x25
call fcn.004871d0
mov ecx, eax
call fcn.004ee190
mov ecx, eax
call fcn.004edf50
mov ecx, dword [ebp - 0xc8]
mov eax, dword [ecx]
mov dword [ebp - 0x39c], eax
test eax, eax
je 0x564f45
jmp 0x564d8c
mov ecx, dword [ebp - 0xc8]
push 7
mov dword [ebp - 0xd0], 0
push dword [ecx + eax*4]
mov ecx, esi
mov dword [ebp - 0x398], 0
push dword [ebp - 0x394]
call fcn.004f2da0
push eax
lea ecx, [ebp - 0x210]
call fcn.0051dd60
push 0
push 0x20019
lea ecx, [ebp - 0x210]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0xcc]
call fcn.00518810
test al, al
je 0x564e45
lea eax, [ebp - 0xd0]
push eax
push 0x6721e4
lea ecx, [ebp - 0xcc]
call fcn.005184a0
test al, al
je 0x564e04
cmp dword [ebp - 0xd0], 0
jne 0x564e45
lea ecx, [ebp - 0x1b0]
call fcn.0051dfa0
push eax
push 0x6721f8
lea ecx, [ebp - 0xcc]
call fcn.00518530
test al, al
je 0x564e45
lea ecx, [ebp - 0x1b0]
call fcn.0051da30
mov ecx, dword [ebp - 0x398]
test al, al
mov eax, 1
cmove ecx, eax
mov dword [ebp - 0x398], ecx
mov eax, dword [ebp - 0x39c]
mov ecx, dword [ebp - 0xc8]
push 0
push dword [ecx + eax*4]
mov ecx, esi
push dword [ebp - 0x394]
call fcn.004f2da0
push eax
lea ecx, [ebp - 0x1c8]
call fcn.0051dd60
cmp dword [ebp - 0x398], 0
lea ecx, [ebp - 0x1c8]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
je 0x564f1a
call fcn.0051dd30
push eax
push 0x672210
lea ecx, [ebp - 0xe0]
call fcn.0051dda0
lea ecx, [ebp - 0xe0]
call fcn.0051dd30
push eax
push 0xffffffffffffffff
lea ecx, [edi + 0x14e0]
call fcn.004ee190
push 5
push 0
lea ecx, [ebp - 0x1b0]
mov dword [ebp - 0x374], 0
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.0047f510
test eax, eax
mov ecx, 0xffffffff
cmove eax, ecx
mov dword [ebp - 0x374], eax
lea ecx, [ebp - 0xd0]
mov byte [ebp - 4], 0x26
push ecx
push eax
mov ecx, edi
call fcn.00484350
lea ecx, [ebp - 0x374]
mov byte [ebp - 4], 0x25
call fcn.00401600
jmp 0x564f30
push 0x60477c
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1a4]
call fcn.0051c4c0
mov eax, dword [ebp - 0x39c]
sub eax, 1
mov dword [ebp - 0x39c], eax
jne 0x564d86
push 2
lea ecx, [edi + 0x14e0]
call fcn.004edd80
push 2
lea ecx, [ebp - 0x1a4]
call fcn.0051cac0
mov ecx, eax
call fcn.0051df40
test eax, eax
je 0x564ff6
push 0
push 1
push 1
push 0
push 0x60477c
lea ecx, [ebp - 0x1a4]
call fcn.0051c760
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x1a4]
mov esi, eax
call fcn.0051dd30
push eax
test esi, esi
mov ecx, 0x6507e4
push 0x672250
mov eax, 0x6507d8
cmovne eax, ecx
lea ecx, [ebp - 0xe0]
push eax
push 0x67227c
call fcn.0051dda0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x8c
push 0x190
push 0
push 0
push 4
lea ecx, [ebp - 0xe0]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.00487a40
mov esi, dword [ebp - 0x3a8]
push dword [ebp - 0x3bc]
mov ecx, edi
push dword [ebp - 0x3b4]
push dword [ebp - 0x394]
call fcn.005c13e0
lea ecx, [ebp - 0x1c8]
call fcn.0051dfd0
lea ecx, [ebp - 0x1b0]
call fcn.0051dfd0
lea ecx, [ebp - 0x210]
call fcn.0051dfd0
lea ecx, [ebp - 0x1a4]
jmp 0x567199
cmp ecx, dword [ebp - 0x408]
jne 0x5652ed
xorps xmm0, xmm0
mov ecx, esi
push eax
movlpd qword [ebp - 0xc8], xmm0
call fcn.004f2c90
mov dword [ebp - 0xc8], eax
mov byte [ebp - 4], 0x27
cmp dword [eax], 1
jge 0x565073
mov byte [ebp - 4], 0x1b
push eax
jmp 0x5671b3
push 0xd
push dword [edi + 0x12d4]
xorps xmm0, xmm0
lea ecx, [ebp - 0x150]
push dword [ebp - 0x394]
movups xmmword [ebp - 0x150], xmm0
push dword [ebp - 0x3b0]
movups xmmword [ebp - 0x140], xmm0
push esi
call fcn.004f0200
push 0
push 0
push 0
push 0
mov byte [ebp - 4], 0x28
mov edx, 0x630678
mov ecx, dword [ebp - 0xc8]
mov eax, 0x5fe50c
push 0
push 0
push 0x6722a8
mov ecx, dword [ecx]
cmp ecx, 1
mov ecx, 0x6495b0
cmovne eax, edx
push eax
push 0x6722e0
push 0x672310
mov eax, 0x6495ac
cmovne eax, ecx
lea ecx, [ebp - 0xe0]
push eax
push 0x672358
call fcn.0051dda0
xorps xmm0, xmm0
mov dword [ebp - 0x16c], 0
lea ecx, [ebp - 0x174]
movq qword [ebp - 0x174], xmm0
call fcn.0051e180
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x8c
push 0x190
push 0
push 0
push 1
lea ecx, [ebp - 0xe0]
mov byte [ebp - 4], 0x29
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.00487a40
test eax, eax
jne 0x565154
lea ecx, [ebp - 0x174]
jmp 0x567199
mov ecx, dword [ebp - 0xc8]
mov eax, dword [ecx]
mov dword [ebp - 0x398], eax
test eax, eax
je 0x565225
mov edi, dword [ebp - 0x394]
jmp 0x565178
mov ecx, dword [ebp - 0xc8]
push 7
push dword [ecx + eax*4]
mov ecx, esi
push edi
call fcn.004f2da0
push eax
lea ecx, [ebp - 0xe0]
call fcn.0051dd60
push 0
lea ecx, [ebp - 0xe0]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0xcc]
call fcn.005173d0
mov ecx, dword [ebp - 0xc8]
test al, al
mov eax, dword [ebp - 0x398]
push 0
push dword [ecx + eax*4]
mov ecx, esi
push edi
jne 0x565205
call fcn.004f2da0
push eax
lea ecx, [ebp - 0xe0]
call fcn.0051dd60
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5ff5ec
lea ecx, [ebp - 0xe0]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x174]
call fcn.0051c4c0
jmp 0x56520a
call fcn.004f31f0
mov eax, dword [ebp - 0x398]
sub eax, 1
mov dword [ebp - 0x398], eax
jne 0x565172
mov edi, dword [ebp - 0x3b8]
push 2
lea ecx, [ebp - 0x174]
call fcn.0051cac0
mov ecx, eax
call fcn.0051df40
test eax, eax
je 0x5652c9
push 0
push 1
push 1
push 0
push 0x5ff5ec
lea ecx, [ebp - 0x174]
call fcn.0051c760
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x174]
mov esi, eax
call fcn.0051dd30
push eax
test esi, esi
mov ecx, 0x6495b0
push 0x6723d0
mov eax, 0x6495ac
cmovne eax, ecx
lea ecx, [ebp - 0xe0]
push eax
push 0x672408
call fcn.0051dda0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x8c
push 0x190
push 0
push 0
push 4
lea ecx, [ebp - 0xe0]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.00487a40
mov esi, dword [ebp - 0x3a8]
push dword [ebp - 0x3bc]
mov ecx, edi
push dword [ebp - 0x3b4]
push dword [ebp - 0x394]
call fcn.005c13e0
lea ecx, [ebp - 0x174]
jmp 0x567199
cmp ecx, dword [ebp - 0x3fc]
jne 0x565386
xorps xmm0, xmm0
mov ecx, esi
push eax
movlpd qword [ebp - 0xc8], xmm0
call fcn.004f2c90
mov ecx, eax
mov dword [ebp - 0xc8], ecx
mov byte [ebp - 4], 0x2a
cmp dword [ecx], 1
jge 0x565327
mov byte [ebp - 4], 0x1b
push ecx
jmp 0x5671b3
mov eax, 1
mov dword [ebp - 0x39c], eax
push 0
push dword [ecx + eax*4]
mov ecx, esi
push dword [ebp - 0x394]
call fcn.004f2da0
push eax
lea ecx, [ebp - 0xe0]
call fcn.0051dd60
push 2
lea ecx, [ebp - 0xe0]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.0044f580
mov eax, dword [ebp - 0x39c]
mov ecx, dword [ebp - 0xc8]
inc eax
mov dword [ebp - 0x39c], eax
cmp eax, dword [ecx]
jle 0x565332
mov byte [ebp - 4], 0x1b
push ecx
jmp 0x5671b3
cmp ecx, dword [ebp - 0x404]
jne 0x565422
xorps xmm0, xmm0
mov ecx, esi
push eax
movlpd qword [ebp - 0xc8], xmm0
call fcn.004f2c90
mov ecx, eax
mov dword [ebp - 0xc8], ecx
mov byte [ebp - 4], 0x2b
cmp dword [ecx], 1
jge 0x5653c0
mov byte [ebp - 4], 0x1b
push ecx
jmp 0x5671b3
mov eax, 1
mov dword [ebp - 0x39c], eax
nop dword [eax + eax]
push 8
push dword [ecx + eax*4]
mov ecx, esi
push dword [ebp - 0x394]
call fcn.004f2da0
push eax
lea ecx, [ebp - 0xe0]
call fcn.0051dd60
lea ecx, [ebp - 0xe0]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.00485650
mov eax, dword [ebp - 0x39c]
mov ecx, dword [ebp - 0xc8]
inc eax
mov dword [ebp - 0x39c], eax
cmp eax, dword [ecx]
jle 0x5653d0
mov byte [ebp - 4], 0x1b
push ecx
jmp 0x5671b3
cmp ecx, dword [ebp - 0x430]
jne 0x565472
push 2
push 0xffffffffffffffff
push eax
mov ecx, esi
call fcn.004f2d50
test eax, eax
js 0x5671bb
push 7
push eax
push dword [ebp - 0x394]
mov ecx, esi
call fcn.004f2da0
push eax
lea ecx, [ebp - 0xe0]
call fcn.0051dd60
lea ecx, [ebp - 0xe0]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.00485650
jmp 0x5671bb
cmp ecx, dword [ebp - 0x42c]
jne 0x56551c
xorps xmm0, xmm0
mov ecx, esi
push eax
movlpd qword [ebp - 0xc8], xmm0
call fcn.004f2c90
mov ecx, eax
mov dword [ebp - 0xc8], ecx
mov byte [ebp - 4], 0x2c
cmp dword [ecx], 1
jge 0x5654ac
mov byte [ebp - 4], 0x1b
push ecx
jmp 0x5671b3
mov edi, dword [ebp - 0x394]
mov eax, 1
mov dword [ebp - 0x39c], eax
nop dword [eax]
push 8
push dword [ecx + eax*4]
mov ecx, esi
push edi
call fcn.004f2da0
push eax
lea ecx, [ebp - 0xe0]
call fcn.0051dd60
push 0
lea ecx, [ebp - 0xe0]
call fcn.0051dd30
push eax
push 2
push dword [ebp - 0x3dc]
call dword [0x5de5ac]
mov eax, dword [ebp - 0x39c]
mov ecx, dword [ebp - 0xc8]
inc eax
mov dword [ebp - 0x39c], eax
cmp eax, dword [ecx]
jle 0x5654c0
mov edi, dword [ebp - 0x3b8]
mov byte [ebp - 4], 0x1b
push ecx
jmp 0x5671b3
cmp ecx, dword [ebp - 0x428]
jne 0x5657ce
xorps xmm0, xmm0
mov ecx, esi
push eax
movlpd qword [ebp - 0xc8], xmm0
call fcn.004f2c90
mov dword [ebp - 0xc8], eax
mov byte [ebp - 4], 0x2d
cmp dword [eax], 1
jge 0x565554
mov byte [ebp - 4], 0x1b
push eax
jmp 0x5671b3
push 0xd
push dword [edi + 0x12d4]
xorps xmm0, xmm0
lea ecx, [ebp - 0x150]
push dword [ebp - 0x394]
movups xmmword [ebp - 0x150], xmm0
push dword [ebp - 0x3b0]
movups xmmword [ebp - 0x140], xmm0
push esi
call fcn.004f0200
push 0
push 0x672430
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x50
push 0x1f4
push 0
push 0
mov ecx, edi
mov byte [ebp - 4], 0x2e
call fcn.004871d0
mov ecx, eax
call fcn.004edf50
push 1
lea ecx, [edi + 0x14e0]
push str.Cancel
call fcn.004edf50
xorps xmm0, xmm0
mov dword [ebp - 0x178], 0
lea ecx, [ebp - 0x180]
movq qword [ebp - 0x180], xmm0
call fcn.0051e180
mov byte [ebp - 4], 0x2f
lea ecx, [ebp - 0x204]
xorps xmm0, xmm0
mov dword [ebp - 0x1fc], 0
movq qword [ebp - 0x204], xmm0
call fcn.0051e180
mov byte [ebp - 4], 0x30
mov ecx, 1
mov eax, dword [ebp - 0xc8]
mov dword [ebp - 0x39c], ecx
cmp dword [eax], ecx
jl 0x5657ab
mov dword [ebp - 0x398], 0x64
nop word [eax + eax]
push 8
push dword [eax + ecx*4]
mov ecx, esi
push dword [ebp - 0x394]
call fcn.004f2da0
push eax
lea ecx, [ebp - 0xe0]
call fcn.0051dd60
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x67243c
lea ecx, [ebp - 0xe0]
call fcn.0051dd30
push eax
push 0x67245c
lea ecx, [ebp - 0x180]
call fcn.0051dda0
lea ecx, [ebp - 0x180]
call fcn.0051dd30
mov ecx, dword [ebp - 0xc8]
push eax
mov eax, dword [ebp - 0x398]
cdq
idiv dword [ecx]
lea ecx, [edi + 0x14e0]
push eax
call fcn.004ee190
push 0
push 1
mov ecx, edi
call fcn.00486e80
mov eax, dword [ebp - 0xc8]
mov ecx, dword [ebp - 0x39c]
push 1
push dword [eax + ecx*4]
mov ecx, esi
push dword [ebp - 0x394]
call fcn.004f2da0
push eax
lea ecx, [ebp - 0x204]
call fcn.0051dd60
lea ecx, [ebp - 0x204]
call fcn.0051dd30
lea ecx, [ebp - 0xe0]
mov esi, eax
call fcn.0051dd30
mov edx, esi
mov ecx, eax
call fcn.004ccc80
push eax
lea ecx, [ebp - 0x180]
call fcn.0051dd60
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x60477c
lea ecx, [ebp - 0xe0]
call fcn.0051dd30
push eax
push 0x67245c
lea ecx, [ebp - 0x180]
call fcn.0051c280
lea ecx, [ebp - 0x180]
call fcn.0051dd30
push eax
push 0xffffffffffffffff
lea ecx, [edi + 0x14e0]
call fcn.004ee190
push 3
mov ecx, edi
call fcn.00487050
nop
push 0
push 0
mov ecx, edi
call fcn.00486e80
test eax, eax
je 0x565760
cmp eax, 2
jne 0x5657a5
push 1
mov ecx, edi
call fcn.00487050
mov ecx, dword [ebp - 0x39c]
mov eax, dword [ebp - 0xc8]
inc ecx
add dword [ebp - 0x398], 0x64
mov esi, dword [ebp - 0x3a8]
mov dword [ebp - 0x39c], ecx
cmp ecx, dword [eax]
jle 0x565630
mov esi, dword [ebp - 0x3a8]
push 2
lea ecx, [edi + 0x14e0]
call fcn.004edd80
lea ecx, [ebp - 0x204]
call fcn.0051dfd0
lea ecx, [ebp - 0x180]
jmp 0x567199
cmp ecx, dword [ebp - 0x3c0]
jne 0x5659b6
xorps xmm0, xmm0
mov ecx, esi
push eax
movlpd qword [ebp - 0xc8], xmm0
call fcn.004f2c90
mov dword [ebp - 0xc8], eax
mov byte [ebp - 4], 0x31
cmp dword [eax], 1
jge 0x565806
mov byte [ebp - 4], 0x1b
push eax
jmp 0x5671b3
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x8c
push 0x190
push 0
push esi
push 1
push 0x672470
mov ecx, edi
call fcn.00487a40
test eax, eax
je 0x5671a9
xorps xmm0, xmm0
mov dword [ebp - 0x1b4], 0
lea ecx, [ebp - 0x1bc]
movq qword [ebp - 0x1bc], xmm0
call fcn.0051e180
mov byte [ebp - 4], 0x32
lea ecx, [ebp - 0x198]
xorps xmm0, xmm0
mov dword [ebp - 0x190], 0
movq qword [ebp - 0x198], xmm0
call fcn.0051e180
mov byte [ebp - 4], 0x33
mov eax, 1
mov ecx, dword [ebp - 0xc8]
mov dword [ebp - 0x39c], eax
cmp dword [ecx], eax
jl 0x5658f2
mov edi, dword [ebp - 0x394]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x615de8
push 0
push dword [ecx + eax*4]
mov ecx, esi
push edi
call fcn.004f2da0
push eax
lea ecx, [ebp - 0xe0]
call fcn.0051dd60
mov ecx, eax
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1bc]
call fcn.0051c4c0
mov eax, dword [ebp - 0x39c]
mov ecx, dword [ebp - 0xc8]
inc eax
mov dword [ebp - 0x39c], eax
cmp eax, dword [ecx]
jle 0x565890
mov edi, dword [ebp - 0x3b8]
push 0x2000
lea eax, [ebp - 0x390]
mov dword [ebp - 0x390], 0x1000
push eax
push 0
push 0
push 0x1000
lea ecx, [ebp - 0x198]
call fcn.0051d530
push eax
lea ecx, [ebp - 0x1bc]
call fcn.0051dd30
push eax
call dword [0x5de634]
test eax, eax
je 0x565945
lea eax, [ebp - 0x1bc]
push eax
lea ecx, [ebp - 0x198]
call fcn.0051e080
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x615e30
lea ecx, [ebp - 0x198]
call fcn.0051c280
push 0
push 0
push 0x604f50
push 0x604f80
push 6
lea ecx, [ebp - 0x198]
call fcn.0051dd30
xor edx, edx
mov ecx, eax
call fcn.004ebc50
push eax
lea ecx, [ebp - 0x120]
call fcn.004e8bf0
lea ecx, [ebp - 0x198]
call fcn.0051dfd0
lea ecx, [ebp - 0x1bc]
call fcn.0051dfd0
jmp 0x5671a9
cmp ecx, dword [ebp - 0x424]
jne 0x565a15
push 0xd
push dword [edi + 0x12d4]
xorps xmm0, xmm0
lea ecx, [ebp - 0x2d0]
push eax
push dword [ebp - 0x3b0]
movups xmmword [ebp - 0x2d0], xmm0
push esi
movups xmmword [ebp - 0x2c0], xmm0
call fcn.004f0200
mov ecx, edi
mov byte [ebp - 4], 0x34
call fcn.0054b200
push dword [ebp - 0x3dc]
call dword [0x5de728]
lea ecx, [ebp - 0x2d0]
mov byte [ebp - 4], 0x1b
call fcn.004f0190
jmp 0x5671bb
cmp byte [ebp - 0x39d], 1
jne 0x565a3d
cmp ecx, 0xffffff31
jne 0x565a3d
lea ecx, [ebp - 0x2b0]
call fcn.00512410
mov byte [ebp - 0x39d], 2
jmp 0x5671bb
cmp ecx, 0xffffffea
jne 0x565a4a
cmp dword [edi + 0x14a4], eax
je 0x565a56
cmp ecx, dword [ebp - 0x3d8]
jne 0x565bdc
cmp ecx, dword [ebp - 0x3d8]
sete byte [ebp - 0x39e]
jne 0x565aa9
push dword [ebp - 0x3a4]
call dword [0x5de730]
cmp byte [ebp - 0x39d], 2
jne 0x565aa2
xorps xmm1, xmm1
lea ecx, [ebp - 0x2b0]
call fcn.005123c0
movsd xmm1, qword [0x6be5b0]
comisd xmm1, xmm0
jbe 0x565aa2
mov byte [ebp - 0x39d], 0
jmp 0x5671bb
mov byte [ebp - 0x39d], 1
push 2
push 0xffffffffffffffff
push 0x100c
push dword [ebp - 0x3a4]
call dword [0x5de7fc]
cmp eax, 0xffffffff
mov ecx, 0x20
mov eax, 0x40
cmove ecx, eax
mov eax, dword [ebp - 0x3c8]
mov dword [ebp - 0x398], ecx
cmp eax, dword [ebp - 0x3c0]
jg 0x565b02
mov edi, eax
push ecx
push edi
mov ecx, esi
call fcn.004f4b70
mov ecx, dword [ebp - 0x398]
inc edi
cmp edi, dword [ebp - 0x3c0]
jle 0x565ae4
mov edi, dword [ebp - 0x3b8]
push ecx
push dword [ebp - 0x3f4]
mov ecx, esi
call fcn.004f4b70
push dword [ebp - 0x398]
mov ecx, esi
push dword [ebp - 0x3ec]
call fcn.004f4b70
push dword [ebp - 0x398]
mov ecx, esi
push dword [ebp - 0x3e8]
call fcn.004f4b70
push 0
mov ecx, edi
call fcn.00461860
mov ecx, dword [ebp - 0x3a8]
test al, al
mov eax, 0x40
mov esi, 0x20
cmovne esi, eax
push esi
push dword [ebp - 0x3e4]
call fcn.004f4b70
push esi
push dword [ebp - 0x3e0]
mov esi, dword [ebp - 0x3a8]
mov ecx, esi
call fcn.004f4b70
cmp byte [ebp - 0x39e], 0
je 0x565bc4
lea eax, [ebp - 0x274]
mov ecx, esi
push eax
push dword [ebp - 0x3d8]
call fcn.004fcac0
push eax
call dword [0x5de6b0]
test eax, eax
je 0x565bc4
mov eax, dword [ebp - 0x270]
mov ecx, esi
add eax, 0x2d
push eax
mov eax, dword [ebp - 0x274]
add eax, 0x5a
push eax
push 8
push dword [ebp - 0x394]
call fcn.004f3760
jmp 0x5671bb
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push dword [ebp - 0x394]
mov ecx, esi
call fcn.004f3760
jmp 0x5671bb
mov edx, dword [ebp - 0x3ac]
cmp ecx, 0xffffffb3
jne 0x565bef
cmp dword [edi + 0x14a4], edx
je 0x565bfb
cmp ecx, dword [ebp - 0x41c]
jne 0x565ca7
mov ecx, edi
call fcn.005c1c90
push 0x80
push dword [ebp - 0x3ac]
mov ecx, esi
call fcn.004f4b70
push dword [ebp - 0x3ac]
mov ecx, esi
call fcn.004f39c0
push eax
lea ecx, [ebp - 0xe0]
call fcn.0051dd60
push 0x671704
lea ecx, [ebp - 0xe0]
call fcn.0051e060
mov ecx, esi
test al, al
je 0x565c8e
push 0
push 0
push dword [ebp - 0x3ac]
call fcn.004f44b0
push 0
push dword [ebp - 0x3ac]
mov ecx, esi
call fcn.004f6320
movsd xmm0, qword [0x6be540]
sub esp, 8
mov ecx, esi
movsd qword [esp], xmm0
push 0
push 0
push 0
push 0x190
push dword [ebp - 0x3ac]
call fcn.004f61c0
jmp 0x5671bb
push 0xffffffffffffffff
push 0
push 0xb1
push dword [ebp - 0x3ac]
call fcn.004f6680
jmp 0x5671bb
cmp ecx, 0xffffffb4
jne 0x565cff
cmp dword [edi + 0x14a4], edx
jne 0x565cff
push edx
mov ecx, esi
call fcn.004f39c0
push eax
lea ecx, [ebp - 0xe0]
call fcn.0051dd60
lea ecx, [ebp - 0xe0]
call fcn.0051df40
cmp eax, 3
jl 0x5671bb
push 0xffffffffffffffff
push 6
push 0xffffffffffffffff
lea ecx, [ebp - 0xe0]
call fcn.0051dd30
mov ecx, dword [ebp - 0x3a4]
mov edx, eax
call fcn.00500ac0
jmp 0x5671bb
cmp ecx, dword [ebp - 0x3cc]
jne 0x565dd4
push edx
mov ecx, esi
call fcn.004f39c0
push eax
lea ecx, [ebp - 0xe0]
call fcn.0051dd60
push 0x671704
lea ecx, [ebp - 0xe0]
call fcn.0051e060
test al, al
jne 0x565db9
lea ecx, [ebp - 0xe0]
call fcn.0051da30
test al, al
jne 0x565db9
push dword [ebp - 0x420]
lea ecx, [ebp - 0xe0]
push 0x1e
push 0xffffffffffffffff
call fcn.0051dd30
mov ecx, dword [ebp - 0x3a4]
mov edx, eax
call fcn.00500ac0
mov dword [ebp - 0x420], eax
mov ecx, esi
push 0x80
cmp eax, 0xffffffff
je 0x565d8a
push dword [ebp - 0x394]
call fcn.004f4b70
jmp 0x5671bb
push dword [ebp - 0x3ac]
call fcn.004f4b70
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x8c
push 0x190
push 0
push esi
push 4
push 0x646010
mov ecx, edi
call fcn.00487a40
jmp 0x5671bb
push 0
push 0
push 0x201
push dword [ebp - 0x41c]
mov ecx, esi
call fcn.004f6680
jmp 0x5671bb
cmp ecx, 0xffffffd3
je 0x566663
cmp ecx, 0xffffffd2
je 0x566663
cmp ecx, dword [ebp - 0x3c8]
je 0x5665fe
cmp ecx, dword [ebp - 0x3f0]
je 0x5665fe
cmp ecx, 0xfffffff2
jne 0x565e0f
cmp dword [edi + 0x14a4], eax
je 0x5665fe
mov edx, dword [ebp - 0x3b0]
cmp ecx, edx
jne 0x565e8e
push 4
push edx
mov ecx, esi
call fcn.004f3c80
test eax, eax
je 0x565e30
or dword [ebp - 0x358], 1
jmp 0x565e37
and dword [ebp - 0x358], 0xfffffffe
push 0xd
push dword [edi + 0x12d4]
xorps xmm0, xmm0
lea ecx, [ebp - 0x150]
push dword [ebp - 0x394]
movups xmmword [ebp - 0x150], xmm0
push dword [ebp - 0x3b0]
movups xmmword [ebp - 0x140], xmm0
push esi
call fcn.004f0200
lea eax, [ebp - 0x360]
mov byte [ebp - 4], 0x36
push eax
mov ecx, edi
call fcn.005502a0
lea ecx, [ebp - 0x150]
mov byte [ebp - 4], 0x1b
call fcn.004f0190
jmp 0x5671bb
cmp ecx, dword [ebp - 0x440]
je 0x5665bd
cmp ecx, dword [ebp - 0x43c]
je 0x566599
cmp ecx, dword [ebp - 0x414]
je 0x5665a1
cmp ecx, dword [ebp - 0x418]
je 0x566599
cmp ecx, dword [ebp - 0x400]
jne 0x565f13
push 0xd
push dword [edi + 0x12d4]
xorps xmm0, xmm0
lea ecx, [ebp - 0x2f0]
push eax
push edx
push esi
movups xmmword [ebp - 0x2f0], xmm0
movups xmmword [ebp - 0x2e0], xmm0
call fcn.004f0200
lea eax, [ebp - 0x360]
mov byte [ebp - 4], 0x37
push eax
mov ecx, edi
call fcn.005502a0
lea ecx, [ebp - 0x2f0]
mov byte [ebp - 4], 0x1b
call fcn.004f0190
jmp 0x5671bb
cmp ecx, dword [ebp - 0x3f4]
jne 0x5660e5
xorps xmm0, xmm0
mov ecx, esi
push eax
movlpd qword [ebp - 0xc8], xmm0
call fcn.004f2c90
mov dword [ebp - 0xc8], eax
mov byte [ebp - 4], 0x38
cmp dword [eax], 1
jge 0x565f4b
mov byte [ebp - 4], 0x1b
push eax
jmp 0x5671b3
xorps xmm0, xmm0
mov dword [ebp - 0x160], 0
lea ecx, [ebp - 0x168]
movq qword [ebp - 0x168], xmm0
call fcn.0051e180
push 0
mov byte [ebp - 4], 0x39
lea ecx, [ebp - 0x344]
push 0x67261c
mov dword [ebp - 0x344], 0
call fcn.00401aa0
mov byte [ebp - 4], 0x3a
mov ecx, dword [ebp - 0xc8]
mov eax, dword [ecx]
mov dword [ebp - 0x398], eax
test eax, eax
jle 0x5660b8
mov edi, dword [ebp - 0x394]
jmp 0x565fb6
mov ecx, dword [ebp - 0xc8]
push 0
push dword [ecx + eax*4]
mov ecx, esi
push edi
call fcn.004f2da0
push eax
lea ecx, [ebp - 0x168]
call fcn.0051dd60
lea ecx, [ebp - 0x350]
call fcn.0051dd30
push eax
push 0
lea ecx, [ebp - 0x168]
call fcn.0051dd30
push eax
push 0x672640
call dword [0x5de4e8]
push 0
push 0x5fe50c
push dword [ebp - 0x344]
lea ecx, [ebp - 0x168]
call fcn.0051b290
lea ecx, [ebp - 0x350]
call fcn.0051dd30
push eax
push 0
lea ecx, [ebp - 0x168]
call fcn.0051dd30
push eax
push 0x672640
call dword [0x5de4e8]
mov eax, dword [ebp - 0x398]
mov ecx, dword [ebp - 0xc8]
push 1
push dword [ecx + eax*4]
mov ecx, esi
push edi
call fcn.004f2da0
push eax
lea ecx, [ebp - 0xe0]
call fcn.0051dd60
lea ecx, [ebp - 0x168]
call fcn.0051dd30
push eax
push 0x672658
lea ecx, [ebp - 0x350]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0xe0]
call fcn.0051ce40
cmp byte [eax + 8], 0
je 0x56609d
mov eax, dword [ebp - 0x398]
mov ecx, dword [ebp - 0xc8]
push 0
push dword [ecx + eax*4]
mov ecx, esi
push edi
call fcn.004f31f0
mov eax, dword [ebp - 0x398]
dec eax
mov dword [ebp - 0x398], eax
test eax, eax
jg 0x565fb0
mov edi, dword [ebp - 0x3b8]
mov eax, dword [ebp - 0x344]
test eax, eax
je 0x5660cb
push eax
call fcn.004191d0
add esp, 4
lea ecx, [ebp - 0x168]
mov dword [ebp - 0x344], 0
call fcn.0051dfd0
jmp 0x5671a9
cmp ecx, dword [ebp - 0x3ec]
jne 0x566296
xorps xmm0, xmm0
mov ecx, esi
push eax
movlpd qword [ebp - 0xc8], xmm0
call fcn.004f2c90
mov dword [ebp - 0xc8], eax
mov byte [ebp - 4], 0x3b
cmp dword [eax], 1
jge 0x56611d
mov byte [ebp - 4], 0x1b
push eax
jmp 0x5671b3
xorps xmm0, xmm0
mov dword [ebp - 0x154], 0
lea ecx, [ebp - 0x15c]
movq qword [ebp - 0x15c], xmm0
call fcn.0051e180
push 0
mov byte [ebp - 4], 0x3c
lea ecx, [ebp - 0x340]
push 0x67261c
mov dword [ebp - 0x340], 0
call fcn.00401aa0
mov byte [ebp - 4], 0x3d
mov ecx, dword [ebp - 0xc8]
mov eax, dword [ecx]
mov dword [ebp - 0x39c], eax
test eax, eax
jle 0x566269
mov edi, dword [ebp - 0x394]
jmp 0x566186
mov ecx, dword [ebp - 0xc8]
push 0
push dword [ecx + eax*4]
mov ecx, esi
push edi
call fcn.004f2da0
push eax
lea ecx, [ebp - 0x15c]
call fcn.0051dd60
lea ecx, [ebp - 0x350]
call fcn.0051dd30
push eax
push 0
lea ecx, [ebp - 0x15c]
call fcn.0051dd30
push eax
push 0x672658
call dword [0x5de4e8]
push 0
push 0x5fe50c
push dword [ebp - 0x340]
lea ecx, [ebp - 0x15c]
call fcn.0051b290
lea ecx, [ebp - 0x350]
call fcn.0051dd30
push eax
push 0
lea ecx, [ebp - 0x15c]
call fcn.0051dd30
push eax
push 0x672658
call dword [0x5de4e8]
mov eax, dword [ebp - 0x39c]
mov ecx, dword [ebp - 0xc8]
push 1
push dword [ecx + eax*4]
mov ecx, esi
push edi
call fcn.004f2da0
push eax
lea ecx, [ebp - 0xe0]
call fcn.0051dd60
lea ecx, [ebp - 0x15c]
call fcn.0051dd30
push eax
push 0x672640
lea ecx, [ebp - 0x350]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0xe0]
call fcn.0051ce40
mov eax, dword [ebp - 0x39c]
dec eax
mov dword [ebp - 0x39c], eax
test eax, eax
jg 0x566180
mov edi, dword [ebp - 0x3b8]
mov eax, dword [ebp - 0x340]
test eax, eax
je 0x56627c
push eax
call fcn.004191d0
add esp, 4
lea ecx, [ebp - 0x15c]
mov dword [ebp - 0x340], 0
call fcn.0051dfd0
jmp 0x5671a9
cmp ecx, dword [ebp - 0x40c]
jne 0x5662d9
mov ecx, dword [ebp - 0x3a4]
call fcn.00501300
lea ecx, [ebp - 0x350]
call fcn.0051dd30
push eax
push dword [ebp - 0x394]
mov ecx, edi
call fcn.0054fe70
push 0x80
push dword [ebp - 0x394]
mov ecx, esi
call fcn.004f4b70
jmp 0x5671bb
cmp ecx, dword [ebp - 0x438]
jne 0x566345
push 0xd
push dword [edi + 0x12d4]
xorps xmm0, xmm0
lea ecx, [ebp - 0x310]
push eax
push edx
push esi
movups xmmword [ebp - 0x310], xmm0
movups xmmword [ebp - 0x300], xmm0
call fcn.004f0200
lea ecx, [ebp - 0x350]
mov byte [ebp - 4], 0x3e
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.0054bf20
test eax, eax
je 0x566331
lea eax, [ebp - 0x360]
mov ecx, edi
push eax
call fcn.005502a0
lea ecx, [ebp - 0x310]
mov byte [ebp - 4], 0x1b
call fcn.004f0190
jmp 0x5671bb
cmp ecx, dword [ebp - 0x410]
jne 0x5663a8
lea ecx, [ebp - 0x350]
call fcn.0051dd30
push eax
push 0x80
push 0
push 0
push 0x80
lea ecx, [ebp - 0xe0]
call fcn.0051d530
push eax
push 0x672658
call dword [0x5de488]
cmp eax, 5
jb 0x5671bb
or dword [ebp - 0x358], 2
lea eax, [ebp - 0x360]
push eax
mov ecx, edi
call fcn.005502a0
and dword [ebp - 0x358], 0xfffffffd
jmp 0x5671bb
cmp ecx, dword [ebp - 0x3e8]
jne 0x5663c4
push 8
push dword [ebp - 0x3a4]
mov ecx, edi
call fcn.00461bd0
jmp 0x5671bb
cmp ecx, dword [ebp - 0x3e4]
jne 0x5663e6
push 0xffffffffffffffff
push 0x20
push 2
push 8
push dword [ebp - 0x3a4]
mov ecx, edi
call fcn.004618b0
jmp 0x5671bb
cmp ecx, dword [ebp - 0x3e0]
jne 0x566408
push 4
push 0
push 2
push 8
push dword [ebp - 0x3a4]
mov ecx, edi
call fcn.004618b0
jmp 0x5671bb
cmp ecx, dword [ebp - 0x434]
jne 0x566472
push 0xd
push dword [edi + 0x12d4]
xorps xmm0, xmm0
lea ecx, [ebp - 0x330]
push eax
push edx
push esi
movups xmmword [ebp - 0x330], xmm0
movups xmmword [ebp - 0x320], xmm0
call fcn.004f0200
push dword [ebp - 0x394]
mov ecx, edi
mov byte [ebp - 4], 0x3f
push 0
call fcn.00549580
cmp eax, 1
jne 0x56645e
push 0x20
push dword [ebp - 0x3b4]
mov ecx, esi
call fcn.004f4b70
lea ecx, [ebp - 0x330]
mov byte [ebp - 4], 0x1b
call fcn.004f0190
jmp 0x5671bb
cmp ecx, 0xfffffffb
jne 0x5671bb
cmp dword [edi + 0x14a4], eax
jne 0x5671bb
mov ecx, esi
call fcn.004fcb60
push eax
lea ecx, [ebp - 0xe0]
call fcn.0051dd60
mov ecx, eax
call fcn.0051da30
test al, al
jne 0x5671bb
push 0xd
push dword [edi + 0x12d4]
xorps xmm0, xmm0
lea ecx, [ebp - 0x150]
push dword [ebp - 0x394]
movups xmmword [ebp - 0x150], xmm0
push dword [ebp - 0x3b0]
movups xmmword [ebp - 0x140], xmm0
push esi
call fcn.004f0200
xorps xmm0, xmm0
mov byte [ebp - 4], 0x40
push 1
push 0x60477c
lea ecx, [ebp - 0xe0]
movq qword [ebp - 0xf4], xmm0
movups xmmword [ebp - 0x104], xmm0
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x104]
call fcn.0051b070
lea ecx, [ebp - 0x104]
mov byte [ebp - 4], 0x41
mov dword [ebp - 0x398], 0
call fcn.0051afe0
test eax, eax
je 0x56657a
mov ecx, dword [ebp - 0x398]
push dword [ebp - 0x394]
push ecx
lea ecx, [ebp - 0x104]
call fcn.0051aff0
push eax
mov ecx, edi
call fcn.00549580
cmp eax, 1
jne 0x56655f
push 0x20
push dword [ebp - 0x3b4]
mov ecx, esi
call fcn.004f4b70
inc dword [ebp - 0x398]
lea ecx, [ebp - 0x104]
call fcn.0051afe0
mov ecx, dword [ebp - 0x398]
cmp ecx, eax
jb 0x566531
lea ecx, [ebp - 0x104]
call fcn.0051b050
lea ecx, [ebp - 0x150]
mov byte [ebp - 4], 0x1b
call fcn.004f0190
jmp 0x5671bb
cmp ecx, dword [ebp - 0x414]
jne 0x5665a8
mov eax, 3
jmp 0x5665bf
cmp ecx, dword [ebp - 0x418]
mov eax, 1
mov ecx, 4
cmove eax, ecx
jmp 0x5665bf
xor eax, eax
push 0
push eax
push 0x108e
push dword [ebp - 0x3a4]
mov dword [ebp - 0xe8], eax
call dword [0x5de7fc]
push 0
lea eax, [ebp - 0xe8]
push eax
push 4
push 0x671824
push 0x6725a8
lea ecx, [ebp - 0xcc]
call fcn.00517c20
jmp 0x5671bb
push 0xd
push dword [edi + 0x12d4]
xorps xmm0, xmm0
lea ecx, [ebp - 0x294]
push eax
push dword [ebp - 0x3b0]
movups xmmword [ebp - 0x294], xmm0
push esi
movups xmmword [ebp - 0x284], xmm0
call fcn.004f0200
push dword [ebp - 0x394]
mov ecx, edi
mov byte [ebp - 4], 0x35
call fcn.0054df30
test al, al
jne 0x5671cd
push dword [ebp - 0x3dc]
call dword [0x5de728]
lea ecx, [ebp - 0x294]
mov byte [ebp - 4], 0x1b
call fcn.004f0190
jmp 0x5671bb
push dword [ebp - 0x3bc]
mov ecx, edi
push dword [ebp - 0x3b4]
push eax
call fcn.005c13e0
jmp 0x5671bb
push 1
mov ecx, edi
call fcn.00487050
mov eax, dword [edi + 0x1f20]
test al, 1
je 0x56669d
and eax, 0xfffffffe
or eax, 0x80
mov dword [edi + 0x1f20], eax
push dword [ebp - 0x394]
xorps xmm0, xmm0
mov ecx, esi
movlpd qword [ebp - 0xc8], xmm0
call fcn.004f2c90
mov dword [ebp - 0xc8], eax
mov byte [ebp - 4], 0x1c
cmp dword [eax], 1
jge 0x5666ce
mov byte [ebp - 4], 0x1b
push eax
jmp 0x5671b3
push 0xd
push dword [edi + 0x12d4]
xorps xmm0, xmm0
lea ecx, [ebp - 0x150]
push dword [ebp - 0x394]
movups xmmword [ebp - 0x150], xmm0
push dword [ebp - 0x3b0]
movups xmmword [ebp - 0x140], xmm0
push esi
call fcn.004f0200
mov dl, 1
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x18c]
call fcn.00511a70
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x671c68
lea ecx, [ebp - 0x18c]
call fcn.0051c280
lea ecx, [ebp - 0xf8]
mov dword [ebp - 0x100], edi
mov dword [ebp - 0xfc], 0
call fcn.0051e180
push 4
push dword [ebp - 0x3c4]
mov ecx, esi
mov byte [ebp - 4], 0x1e
call fcn.004f3c80
push 4
push dword [ebp - 0x3d0]
test eax, eax
mov ecx, esi
setne byte [ebp - 0xfb]
call fcn.004f3c80
push 4
push dword [ebp - 0x3d4]
test eax, eax
mov ecx, esi
setne byte [ebp - 0xfa]
call fcn.004f3c80
mov cl, byte [ebp - 0xfa]
test eax, eax
setne byte [ebp - 0x39e]
cmp byte [ebp - 0xfb], 0
jne 0x5667b4
test cl, cl
je 0x566868
push 0
push 0
push 0
push 0
push 0
test cl, cl
mov dword [ebp - 0x1f0], 0
push 0
push 0
mov ecx, 0x5fe50c
mov eax, 0x671ce0
cmove eax, ecx
xorps xmm0, xmm0
mov ecx, dword [ebp - 0xc8]
push 0
push 0
push eax
movq qword [ebp - 0x1f8], xmm0
mov eax, 0x5fe668
cmp dword [ecx], 1
mov ecx, 0x64f34c
cmovne eax, ecx
lea ecx, [ebp - 0x1f8]
push eax
push 0x671d30
call fcn.0051e0c0
mov byte [ebp - 4], 0x1f
test byte [edi + 0x1f20], 0x80
jne 0x566859
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x8c
push 0x190
push 0
push esi
push 1
lea ecx, [ebp - 0x1f8]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.00487a40
test eax, eax
jne 0x566859
lea ecx, [ebp - 0x1f8]
call fcn.0051dfd0
jmp 0x567193
lea ecx, [ebp - 0x1f8]
mov byte [ebp - 4], 0x1e
call fcn.0051dfd0
push 0x671da0
mov ecx, edi
call fcn.00487320
push 0
push 0xffffffffffffffba
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xfa
push 0x28a
push esi
push 0x671e0c
mov ecx, edi
call fcn.004870d0
mov ecx, eax
call fcn.004ee190
cmp byte [ebp - 0xfa], 0
jne 0x5668c7
push 0
lea ecx, [edi + 0x14e0]
push 0x671e40
call fcn.004edf50
push 1
push 0x671e58
lea ecx, [edi + 0x14e0]
call fcn.004edf50
mov ecx, dword [ebp - 0xc8]
mov dword [ebp - 0x398], 0
mov eax, dword [ecx]
mov dword [ebp - 0xd0], eax
test eax, eax
jle 0x5670e8
jmp 0x5668f6
mov ecx, dword [ebp - 0xc8]
cmp byte [edi + 0x12e1], 0
jne 0x5670e8
push 7
push dword [ecx + eax*4]
mov ecx, esi
push dword [ebp - 0x394]
call fcn.004f2da0
push eax
lea ecx, [ebp - 0x11c]
call fcn.0051dd60
lea ecx, [ebp - 0x11c]
call fcn.0051dd30
xor edx, edx
mov ecx, eax
call fcn.00515590
mov ecx, dword [ebp - 0xc8]
test al, al
mov eax, dword [ebp - 0xd0]
push 0
push dword [ecx + eax*4]
mov ecx, esi
push dword [ebp - 0x394]
jne 0x56695c
call fcn.004f31f0
jmp 0x5670d3
call fcn.004f2da0
push eax
lea ecx, [ebp - 0x110]
call fcn.0051dd60
mov eax, dword [ebp - 0xd0]
mov ecx, dword [ebp - 0xc8]
push 6
push dword [ecx + eax*4]
mov ecx, esi
push dword [ebp - 0x394]
call fcn.004f2da0
push eax
lea ecx, [ebp - 0x12c]
call fcn.0051dd60
cmp byte [ebp - 0xfb], 0
jne 0x566a27
cmp byte [ebp - 0xfa], 0
jne 0x566a27
lea ecx, [ebp - 0x12c]
call fcn.0051da30
test al, al
je 0x566a27
test byte [edi + 0x1f20], 0x80
jne 0x566a27
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x8c
push 0x190
push 0
push 0
push 1
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5fe668
lea ecx, [ebp - 0x110]
call fcn.0051dd30
push eax
push 0x671e78
lea ecx, [ebp - 0xe0]
call fcn.0051dda0
mov ecx, eax
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.00487a40
test eax, eax
je 0x5670d3
lea ecx, [ebp - 0x11c]
call fcn.0051df40
lea ecx, [ebp - 0x21c]
lea eax, [eax*2 + 2]
mov dword [ebp - 0x130], eax
lea eax, [ebp - 0x130]
push eax
push 0
push 0
push 0x80
call fcn.0051d530
push eax
lea ecx, [ebp - 0x11c]
call fcn.0051dd30
mov edx, 0x8003
mov ecx, eax
call fcn.0050e390
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x21c]
call fcn.0051dd30
push eax
push 0x5fe504
lea ecx, [ebp - 0x18c]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0xf8]
call fcn.0051dda0
push 0
push 0xffffffffffffffff
lea ecx, [ebp - 0xf8]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0xcc]
call fcn.00518810
push 0
lea ecx, [ebp - 0x11c]
call fcn.0051dd30
push eax
push 1
push 0x671ec0
lea ecx, [ebp - 0xcc]
call fcn.00517d20
push 0
push 0x20019
lea ecx, [ebp - 0x11c]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0xec]
call fcn.00518810
lea eax, [ebp - 0x1d4]
push eax
lea ecx, [ebp - 0x11c]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.0054da60
push 0
lea ecx, [ebp - 0x1d4]
call fcn.0051dd30
push eax
push 1
push 0x615af4
lea ecx, [ebp - 0xcc]
call fcn.00517d20
push 0
lea ecx, [ebp - 0x110]
call fcn.0051dd30
push eax
push 1
push 0x609be8
lea ecx, [ebp - 0xcc]
call fcn.00517d20
push 1
mov eax, dword [ebp - 0xd0]
mov ecx, dword [ebp - 0xc8]
push dword [ecx + eax*4]
mov ecx, esi
push dword [ebp - 0x394]
call fcn.004f2da0
push eax
lea ecx, [ebp - 0x1ec]
call fcn.0051dd60
push 0
lea ecx, [ebp - 0x1ec]
call fcn.0051dd30
push eax
push 1
push 0x615b34
lea ecx, [ebp - 0xcc]
call fcn.00517d20
mov eax, dword [ebp - 0xd0]
mov ecx, dword [ebp - 0xc8]
push 8
push dword [ecx + eax*4]
mov ecx, esi
push dword [ebp - 0x394]
call fcn.004f2da0
push eax
lea ecx, [ebp - 0x1e0]
call fcn.0051dd60
push 0
lea ecx, [ebp - 0x1e0]
call fcn.0051dd30
push eax
push 1
push 0x671ed0
lea ecx, [ebp - 0xcc]
call fcn.00517d20
push 0
lea ecx, [ebp - 0x12c]
call fcn.0051dd30
push eax
push 1
push 0x615b14
lea ecx, [ebp - 0xcc]
call fcn.00517d20
lea eax, [ebp - 0xe0]
push eax
push 0x671eec
lea ecx, [ebp - 0xec]
call fcn.00518530
test al, al
je 0x566c5e
lea ecx, [ebp - 0xe0]
call fcn.0051df40
cmp eax, 3
jle 0x566c5e
push 0
lea ecx, [ebp - 0x12c]
call fcn.0051dd30
push eax
push 1
push 0x671eec
lea ecx, [ebp - 0xcc]
call fcn.00517d20
mov eax, dword [ebp - 0xd0]
mov ecx, dword [ebp - 0xc8]
push 0
mov edx, dword [ecx + eax*4]
mov ecx, dword [ebp - 0x3a4]
call fcn.00500690
cmp byte [ebp - 0x39e], 0
cdq
mov dword [ebp - 0x230], eax
mov dword [ebp - 0x22c], edx
je 0x566cab
push 0
lea eax, [ebp - 0x230]
push eax
push 0xb
push 0x671f18
lea ecx, [ebp - 0xcc]
call fcn.00517d20
lea eax, [ebp - 0x130]
push eax
push 0x671f24
lea ecx, [ebp - 0xec]
call fcn.005184a0
test al, al
je 0x566ccf
cmp dword [ebp - 0x130], 1
je 0x566ce7
push 0
push 8
push 0x671f44
lea ecx, [ebp - 0x12c]
call fcn.0051b6c0
test al, al
je 0x566d25
push 0
push 1
push 1
lea ecx, [ebp - 0x11c]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0xe0]
call fcn.0051de00
mov ecx, eax
call fcn.0051dac0
mov ecx, eax
call fcn.0051dd30
push eax
push 1
push 0x671f7c
lea ecx, [ebp - 0xcc]
call fcn.00517d20
lea ecx, [ebp - 0xcc]
call fcn.00517240
cmp byte [ebp - 0xfa], 0
mov dword [ebp - 0xd4], 0
jne 0x566d5c
lea ecx, [ebp - 0x12c]
call fcn.0051da30
mov dword [ebp - 0x39c], 0x671fc0
test al, al
je 0x566d66
mov dword [ebp - 0x39c], 0x671f94
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x628fc4
lea ecx, [ebp - 0x110]
call fcn.0051dd30
push eax
push dword [ebp - 0x39c]
lea ecx, [ebp - 0xe0]
call fcn.0051dda0
mov ecx, eax
call fcn.0051dd30
push eax
push 0xffffffffffffffff
lea ecx, [edi + 0x14e0]
call fcn.004ee190
cmp byte [ebp - 0xfa], 0
jne 0x566dd9
lea ecx, [ebp - 0x12c]
call fcn.0051da30
test al, al
jne 0x566dd9
push 0
push 0
lea eax, [ebp - 0x100]
push eax
push 0x542c30
jmp 0x566de9
push 0
push 0
lea eax, [ebp - 0x100]
push eax
push 0x542c00
push 0
push 0
call dword [0x5de380]
push eax
lea ecx, [ebp - 0x334]
call fcn.00401620
mov ecx, dword [ebp - 0x334]
mov byte [ebp - 0xfc], 0
mov byte [edi + 0x12e0], 0
cmp ecx, 0xffffffff
je 0x566fd9
test ecx, ecx
je 0x566fd9
mov dword [ebp - 0x39c], 0
nop
xor edx, edx
call fcn.00503650
test al, al
je 0x566e7a
mov esi, 1
push 0
push 0
mov ecx, edi
call fcn.00486e80
test eax, eax
je 0x566e63
mov al, byte [ebp - 0xfc]
test al, al
movzx ecx, al
cmove ecx, esi
mov byte [ebp - 0xfc], cl
mov ecx, dword [ebp - 0x334]
xor edx, edx
call fcn.00503650
test al, al
jne 0x566e40
mov esi, dword [ebp - 0x3a8]
lea eax, [ebp - 0xd4]
push eax
push dword [ebp - 0x334]
call dword [0x5de444]
mov eax, dword [ebp - 0xd4]
cmp eax, 3
je 0x567053
cmp byte [ebp - 0xfa], 0
jne 0x566fc8
lea ecx, [ebp - 0x12c]
call fcn.0051da30
test al, al
jne 0x566fc2
cmp dword [ebp - 0x39c], 0
jg 0x566fc2
mov eax, dword [ebp - 0xd4]
test eax, eax
jne 0x566fdf
test byte [edi + 0x1f20], 0x80
jne 0x5670a0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x8c
push 0x190
push eax
push eax
push 1
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x671fe0
lea ecx, [ebp - 0x110]
call fcn.0051dd30
push eax
push 0x672048
lea ecx, [ebp - 0xe0]
call fcn.0051dda0
mov ecx, eax
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.00487a40
test eax, eax
je 0x566fd9
push 0
push 0
lea eax, [ebp - 0x100]
push eax
push 0x542c00
push 0
push 0
call dword [0x5de380]
push eax
lea ecx, [ebp - 0x334]
call fcn.00401620
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x628fc4
lea ecx, [ebp - 0x110]
call fcn.0051dd30
push eax
push 0x672094
lea ecx, [ebp - 0xe0]
call fcn.0051dda0
mov ecx, eax
call fcn.0051dd30
push eax
push 0xffffffffffffffff
lea ecx, [edi + 0x14e0]
call fcn.004ee190
mov eax, dword [ebp - 0x39c]
inc eax
mov dword [ebp - 0x39c], eax
cmp eax, 2
jge 0x566fd9
mov ecx, dword [ebp - 0x334]
jmp 0x566e30
mov eax, dword [ebp - 0xd4]
cmp eax, 2
jne 0x566fdf
mov dword [ebp - 0xd4], 1
jmp 0x566fe4
mov eax, dword [ebp - 0xd4]
cmp eax, 1
jne 0x567029
mov eax, dword [ebp - 0xd0]
mov ecx, dword [ebp - 0xc8]
push 0
push dword [ecx + eax*4]
mov ecx, esi
push dword [ebp - 0x394]
call fcn.004f31f0
push 0
push 0
lea ecx, [ebp - 0x110]
call fcn.0051dd30
push eax
push 0x6720bc
mov ecx, edi
call fcn.0044b130
inc dword [ebp - 0x398]
jmp 0x5670d3
cmp eax, 2
jne 0x56704e
inc dword [ebp - 0x398]
lea ecx, [ebp - 0x110]
push 0
push 0
call fcn.0051dd30
push eax
push 0x6720f4
jmp 0x5670cc
cmp eax, 3
jne 0x5670a0
push 0
push 0
lea ecx, [ebp - 0x110]
call fcn.0051dd30
push eax
push 0x672120
mov ecx, edi
call fcn.0044b130
lea ecx, [ebp - 0x11c]
call fcn.0051dd30
xor edx, edx
mov ecx, eax
call fcn.00515590
test al, al
je 0x56701e
lea ecx, [ebp - 0xf8]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0xcc]
call fcn.00517540
jmp 0x5670d3
lea ecx, [ebp - 0xf8]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0xcc]
call fcn.00517540
push 0
push 0
lea ecx, [ebp - 0x110]
call fcn.0051dd30
push eax
push 0x67214c
mov ecx, edi
call fcn.0044b130
mov eax, dword [ebp - 0xd0]
dec eax
mov dword [ebp - 0xd0], eax
test eax, eax
jg 0x5668f0
push 0
mov ecx, edi
call fcn.00487320
push 1
mov ecx, edi
call fcn.00487050
cmp dword [ebp - 0x398], 0
jle 0x567110
cmp byte [ebp - 0x39e], 0
jne 0x5671de
test dword [edi + 0x1f18], 1
jne 0x567193
push 0x672178
push 0x64
lea ecx, [edi + 0x14e0]
call fcn.004ee190
push dword [ebp - 0x3bc]
mov ecx, edi
push dword [ebp - 0x3b4]
push dword [ebp - 0x394]
call fcn.005c13e0
push 1
push 1
push 1
push 2
lea ecx, [edi + 0x14e0]
call fcn.004ede00
mov ecx, eax
call fcn.004ede00
push 0
push 0x657e48
lea ecx, [edi + 0x14e0]
call fcn.004edf50
push 0
push 0
mov ecx, edi
call fcn.00486e80
test eax, eax
je 0x567177
push 2
lea ecx, [edi + 0x14e0]
call fcn.004edd80
lea ecx, [ebp - 0xf8]
call fcn.0051dfd0
lea ecx, [ebp - 0x150]
call fcn.004f0190
mov byte [ebp - 4], 0x1b
push dword [ebp - 0xc8]
call fcn.0041e896
add esp, 4
test byte [edi + 0x1f20], 0x80
je 0x564bc5
jmp 0x567235
lea ecx, [ebp - 0x294]
mov byte [ebp - 4], 0x1b
call fcn.004f0190
jmp 0x567235
push 2
lea ecx, [edi + 0x14e0]
call fcn.004edd80
lea eax, [ebp - 0x18c]
push eax
lea ecx, [edi + 0x142c]
call fcn.0051e080
lea ecx, [ebp - 0xf8]
mov byte [ebp - 0x39f], 0x18
call fcn.0051dfd0
lea ecx, [ebp - 0x150]
call fcn.004f0190
mov byte [ebp - 4], 0x1b
push dword [ebp - 0xc8]
call fcn.0041e896
add esp, 4
jmp 0x567235
mov byte [ebp - 0x39f], 1
push 0
push 1
mov ecx, edi
call fcn.00486e80
mov esi, dword [ebp - 0x3a4]
push 0
push 0
push 0x108f
push esi
call dword [0x5de7fc]
mov dword [ebp - 0xe8], eax
cmp eax, 1
jne 0x56726e
push esi
push 0x643300
mov ecx, edi
call fcn.0044ba50
push 0
lea eax, [ebp - 0xe8]
push eax
push 4
push 0x671824
lea ecx, [ebp - 0xcc]
call fcn.00517d20
push dword [ebp - 0x3b0]
mov ecx, edi
push dword [ebp - 0x3c4]
push dword [ebp - 0x3d4]
push dword [ebp - 0x3d0]
call fcn.005436a0
push 0
push 1
mov ecx, edi
call fcn.00486e80
push 0
push 0x643300
mov ecx, edi
call fcn.0044f950
cmp byte [ebp - 0x39f], 0
je 0x5672d3
push 0
mov ecx, edi
call fcn.0044f830
lea ecx, [ebp - 0x120]
call fcn.004e8c20
lea ecx, [ebp - 0x11c]
call fcn.0051dfd0
lea ecx, [ebp - 0x12c]
call fcn.0051dfd0
lea ecx, [ebp - 0x1ec]
call fcn.0051dfd0
lea ecx, [ebp - 0x1e0]
call fcn.0051dfd0
lea ecx, [ebp - 0x110]
call fcn.0051dfd0
lea ecx, [ebp - 0x1d4]
call fcn.0051dfd0
lea ecx, [ebp - 0x21c]
call fcn.0051dfd0
lea ecx, [ebp - 0x18c]
call fcn.0051dfd0
lea ecx, [ebp - 0x364]
call fcn.004fd7d0
lea ecx, [ebp - 0x368]
call fcn.004fd7d0
lea ecx, [ebp - 0x388]
call fcn.004fd7d0
lea ecx, [ebp - 0x384]
call fcn.004fd7d0
lea ecx, [ebp - 0x36c]
call fcn.004fd7d0
lea ecx, [ebp - 0x380]
call fcn.004fd7d0
lea ecx, [ebp - 0x33c]
call fcn.004fd7d0
lea ecx, [ebp - 0x37c]
call fcn.004fd7d0
lea ecx, [ebp - 0x370]
call fcn.004fd7d0
lea ecx, [ebp - 0x378]
call fcn.004fd7d0
lea ecx, [ebp - 0x38c]
call fcn.004fd7d0
lea ecx, [ebp - 0x338]
call fcn.004fd7d0
lea ecx, [ebp - 0x334]
call fcn.00401600
lea ecx, [ebp - 0x350]
call fcn.0051dfd0
lea ecx, [ebp - 0x228]
call fcn.0051dfd0
lea ecx, [ebp - 0xec]
call fcn.005187c0
lea ecx, [ebp - 0xcc]
call fcn.005187c0
lea ecx, [ebp - 0x23c]
call fcn.0051dfd0
lea ecx, [ebp - 0xe0]
call fcn.0051dfd0
mov al, byte [ebp - 0x39f]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0041e885
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret