Function at 0x4c1090
Capabilities:
Contain obfuscated stackstrings
Resolve function by parsing pe exports

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5d1767
mov eax, dword fs:[0]
push eax
push ebx
mov eax, 0x14d8
call fcn.0041f1c0
mov eax, dword [0x6dd1e4]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x14d0], edi
mov esi, dword [ebx + 8]
mov dword [ebp - 0x14b8], esi
cmp dword [esi], 0
jne 0x4c10f3
or eax, 0xffffffff
jmp 0x4c55ff
mov dword [edi + 0x538], esi
mov eax, dword [esi + 4]
test eax, eax
je 0x4c1115
mov ecx, dword [eax]
test ecx, ecx
je 0x4c1115
push 0
call fcn.004fcac0
mov dword [ebp - 0x14c8], eax
jmp 0x4c111f
mov dword [ebp - 0x14c8], 0
mov ecx, dword [esi]
call fcn.004fb730
mov esi, dword [esi]
lea ecx, [edi + 0x5a8]
push eax
mov dword [ebp - 0x14c0], eax
mov dword [ebp - 0x14d8], esi
call fcn.004ef0d0
push dword [ebp - 0x14c0]
lea ecx, [edi + 0x840]
call fcn.004edc60
push dword [ebp - 0x14c0]
lea ecx, [edi + 0x2c0]
call fcn.004fb740
mov eax, dword [ebp - 0x14b8]
cmp dword [eax + 0x7c], 5
je 0x4c1181
test dword [eax + 0x8c], 0x10
jne 0x4c1181
mov dword [eax + 0x7c], 5
movsd xmm0, qword [0x6be4d8]
mov ecx, 0x60c608
comisd xmm0, xmmword [edi + 0x2b0]
mov eax, str.Arial
push 5
push str.Arial
push 0
push 0x190
movsd xmm1, qword [0x6be528]
cmovbe eax, ecx
mov ecx, esi
mov dword [ebp - 0x1c4], eax
call fcn.004fb6d0
push 0
mov ecx, esi
call fcn.004fb8b0
mov eax, dword [ebp - 0x14b8]
mov ecx, esi
push 0xffffffffffffffff
push 0xffffffffffffffff
push dword [eax + 8]
call fcn.004fb8d0
push 0
mov ecx, esi
call fcn.004fcac0
movaps xmm0, xmmword [0x6be800]
mov edi, eax
push 0
push 0xfffffffffffffff0
push edi
mov dword [ebp - 0x14e0], edi
movups xmmword [ebp - 0x143c], xmm0
call dword [0x5de7c0]
push eax
lea eax, [ebp - 0x143c]
push eax
call dword [0x5de748]
mov eax, dword [ebp - 0x1430]
mov ecx, dword [ebp - 0x1434]
sub eax, dword [ebp - 0x1438]
sub ecx, dword [ebp - 0x143c]
push 0
push 0
push eax
mov dword [ebp - 0x1434], ecx
push ecx
mov ecx, esi
mov dword [ebp - 0x1430], eax
call fcn.004fb4e0
lea eax, [ebp - 0x143c]
push eax
push edi
call dword [0x5de6ec]
or eax, 0xffffffff
lea edi, [ebp - 0x148]
mov ecx, 0x4b
rep stosd dword es:[edi], eax
xor eax, eax
mov edi, esi
mov dword [ebp - 0x14e4], eax
mov ecx, edi
mov eax, dword [ebp - 0x1434]
mov dword [ebp - 0x14d4], eax
mov eax, dword [ebp - 0x1430]
push 0x400
mov dword [ebp - 0x1ec], eax
call fcn.004fb760
movsd xmm1, qword [0x6be528]
mov ecx, edi
push 5
push str.Arial
push 0
push 0x190
call fcn.004fb6d0
mov esi, dword [ebp - 0x14b8]
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x40
push 0x40
push 8
push 5
push dword [esi + 0xc]
mov ecx, edi
call fcn.004f7940
lea ecx, [esi + 0xc4]
mov dword [ebp - 0x148], eax
call fcn.0051df40
cmp eax, 5
jle 0x4c12ef
lea ecx, [esi + 0xc4]
call fcn.0051dd30
jmp 0x4c12f4
mov eax, 0x60c61c
mov esi, dword [ebp - 0x14d0]
push eax
lea ecx, [esi + 0x264]
call fcn.0051e0b0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x19
push 0xc8
push 0xa
push 0x50
lea ecx, [esi + 0x264]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.004f7f60
mov eax, dword [esi + 0x538]
mov ecx, edi
push dword [eax + 0x100]
push 0xffffffffffffffff
call fcn.004f6320
movsd xmm0, qword [0x6be558]
sub esp, 8
mov ecx, edi
movsd qword [esp], xmm0
push 0
push 0
push 0
push 0x320
push 0xffffffffffffffff
call fcn.004f61c0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x14
push 0x6e
push 0x28
push 0x50
push 0x60c644
mov ecx, edi
call fcn.004f7f60
mov eax, dword [esi + 0x538]
mov ecx, edi
push dword [eax + 0x100]
push 0xffffffffffffffff
call fcn.004f6320
mov eax, dword [ebp - 0x14d4]
mov ecx, edi
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x4b
push 0x1bd
push 5
add eax, 0xfffffe3e
push eax
call fcn.004f7440
push 0x402
push 0xffffffffffffffff
mov ecx, edi
mov dword [ebp - 0x14dc], eax
call fcn.004f51f0
push 0x10
call dword [0x5de93c]
mov esi, eax
mov dword [ebp - 0x1c8], esi
test esi, esi
je 0x4c1417
lea eax, [ebp - 0x1428]
mov dword [ebp - 0x1428], 0
push eax
push 0
push 0x26200a
push 0
xorps xmm0, xmm0
push 0x4b
movups xmmword [esi], xmm0
push 0x1bd
mov dword [esi], 0x61e8c4
call dword [0x5dea40]
mov dword [esi + 8], eax
mov eax, dword [ebp - 0x1428]
mov dword [esi + 4], eax
jmp 0x4c1421
mov dword [ebp - 0x1c8], 0
push 8
call dword [0x5de93c]
mov esi, eax
mov dword [ebp - 0x1428], eax
test esi, esi
je 0x4c146b
mov eax, dword [ebp - 0x1c8]
xor ecx, ecx
mov dword [ebp - 0x141c], ecx
xorps xmm0, xmm0
movq qword [esi], xmm0
test eax, eax
je 0x4c1467
lea ecx, [ebp - 0x141c]
push ecx
push dword [eax + 4]
call dword [0x5dea0c]
mov ecx, dword [ebp - 0x141c]
mov dword [esi + 4], eax
mov dword [esi], ecx
jmp 0x4c1473
xor esi, esi
mov dword [ebp - 0x1428], esi
mov eax, dword [ebp - 0x14b8]
mov eax, dword [eax + 8]
test eax, eax
je 0x4c149d
push 0x4b
push 0x1bd
push 0
push 0
push dword [eax + 4]
push dword [esi]
call dword [0x5de938]
test eax, eax
je 0x4c149d
mov dword [esi + 4], eax
mov ecx, dword [ebp - 0x1c8]
xor edx, edx
push 2
push 4
push 0xfff8f8ff
push 0xff000008
push 0x4b
push 0x1bd
push 0
call fcn.00514060
push 8
call dword [0x5de93c]
mov dword [ebp - 0x141c], eax
test eax, eax
je 0x4c1503
push eax
push 0
push ecx
xorps xmm0, xmm0
mov dword [esp], 0x40800000
movq qword [eax], xmm0
push 0xff909090
mov dword [eax], 0
call dword [0x5dea48]
mov ecx, dword [ebp - 0x141c]
mov dword [ecx + 4], eax
mov eax, ecx
jmp 0x4c150b
xor eax, eax
mov dword [ebp - 0x141c], eax
push 0x46
push 0xe6
push 5
push 0xe6
push dword [eax]
push dword [esi]
call dword [0x5de980]
test eax, eax
je 0x4c152a
mov dword [esi + 4], eax
mov ecx, dword [ebp - 0x141c]
push 0x46
push 0x172
push 5
push 0x172
push dword [ecx]
push dword [esi]
call dword [0x5de980]
test eax, eax
je 0x4c154f
mov dword [esi + 4], eax
mov esi, dword [ebp - 0x141c]
push dword [esi]
call dword [0x5dea3c]
push esi
mov esi, dword [0x5de9d8]
call esi
mov eax, dword [ebp - 0x1428]
push dword [eax]
call dword [0x5dea20]
push dword [ebp - 0x1428]
call esi
mov ecx, dword [ebp - 0x1c8]
mov dl, 1
call fcn.00515280
push eax
push dword [ebp - 0x14dc]
mov ecx, edi
call fcn.004f6640
push 0xfff8f8
mov ecx, edi
call fcn.004fb8c0
mov esi, dword [ebp - 0x14d0]
mov edx, 0x60c6b8
mov ecx, edi
mov eax, dword [esi + 0x538]
add eax, 0xdc
push eax
mov eax, dword [ebp - 0x14b8]
push 0x60c668
push 0x41
push 0x3c
push 5
push 5
push dword [eax + 0x10]
call fcn.004fe710
push 0xffffffffffffffff
mov ecx, edi
mov dword [ebp - 0x11c], eax
call fcn.004fb790
mov eax, dword [esi + 0x538]
mov edx, 0x60c6f0
add eax, 0xdc
mov ecx, edi
push eax
mov eax, dword [ebp - 0x14b8]
push 0x60c6c4
push 0x41
push 0x3c
push 5
push 5
push dword [eax + 0x14]
call fcn.004fe710
push 1
push 0xffffffffffffffff
mov ecx, edi
mov dword [ebp - 0x118], eax
call fcn.004f4b70
mov eax, dword [esi + 0x538]
mov edx, 0x605888
add eax, 0xdc
mov ecx, edi
push eax
mov eax, dword [ebp - 0x14b8]
push 0x60c700
push 0x41
push 0x3c
push 5
push 5
push dword [eax + 0x18]
call fcn.004fe710
movsd xmm1, qword [0x6be518]
mov ecx, edi
push 5
push str.Arial
push 0
push 0x190
mov dword [ebp - 0x108], eax
call fcn.004fb6d0
push 0xaf5030
push 0
push 8
push 0xe
push 0x96
push 6
push 0x46
push dword [esi + 0x1b7c]
mov ecx, edi
push dword [esi + 0x1b78]
push 0x60c744
call fcn.004f88a0
mov dword [ebp - 0x120], eax
mov eax, dword [ebp - 0x14b8]
test dword [eax + 0x8c], 0x200
jne 0x4c16c5
push 4
push 0xffffffffffffffff
mov ecx, edi
call fcn.004f4b70
push 0x186a0
push 0
push 0x60c768
push 0xffffffffffffffff
mov ecx, edi
call fcn.004f4270
push 0xaf5030
push 0
push 8
push 0xe
push 0x96
push 0x18
push 0x46
push dword [esi + 0x1b7c]
mov ecx, edi
push dword [esi + 0x1b78]
push 0x60c7e0
call fcn.004f88a0
mov dword [ebp - 0xfc], eax
mov eax, dword [ebp - 0x14b8]
test byte [eax + 0x8c], 0x40
je 0x4c1726
push 4
push 0xffffffffffffffff
mov ecx, edi
call fcn.004f4b70
push 0x186a0
push 0
push 0x60c808
push 0xffffffffffffffff
mov ecx, edi
call fcn.004f4270
push 0xaf5030
push 0
push 8
push 0xe
push 0x96
push 6
push 0x46
push dword [esi + 0x1b7c]
mov ecx, edi
push dword [esi + 0x1b78]
push 0x60c8f8
call fcn.004f88a0
mov dword [ebp - 0x10c], eax
mov eax, dword [ebp - 0x14b8]
test dword [eax + 0x8c], 0x20
jne 0x4c178a
push 4
push 0xffffffffffffffff
mov ecx, edi
call fcn.004f4b70
push 0x186a0
push 0
push 0x60c928
push 0xffffffffffffffff
mov ecx, edi
call fcn.004f4270
push 0xaf5030
push 0
push 8
push 0xe
push 0x96
push 0x18
push 0x46
push dword [esi + 0x1b7c]
mov ecx, edi
push dword [esi + 0x1b78]
push 0x60c9b4
call fcn.004f88a0
mov dword [ebp - 0xf8], eax
mov eax, dword [ebp - 0x14b8]
test byte [eax + 0x8c], 0x80
je 0x4c17eb
push 4
push 0xffffffffffffffff
mov ecx, edi
call fcn.004f4b70
push 0x186a0
push 0
push 0x60c9e8
push 0xffffffffffffffff
mov ecx, edi
call fcn.004f4270
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 6
push 0x91
push 0x2f
push 0x46
mov ecx, edi
call fcn.004f7670
push 0x186a0
push 0
push 0x60cae0
push 0xffffffffffffffff
mov ecx, edi
mov dword [ebp - 0x114], eax
call fcn.004f4270
push 0x5fe50c
push 0x5fe50c
push 0xffffffffffffffff
mov ecx, edi
call fcn.004f4470
push 0xff2020
push 0xffffffffffffffff
mov ecx, edi
call fcn.004f6320
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 6
push 0x91
push 0x2f
push 0x46
mov ecx, edi
call fcn.004f7670
push 0x186a0
push 0
push 0x60cb0c
push 0xffffffffffffffff
mov ecx, edi
mov dword [ebp - 0x104], eax
call fcn.004f4270
push 0x5fe50c
push 0x5fe50c
push 0xffffffffffffffff
mov ecx, edi
call fcn.004f4470
push 0xff2020
push 0xffffffffffffffff
mov ecx, edi
call fcn.004f6320
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x10
push 0x9b
push 0x39
push 0x46
push 0x60cb44
mov ecx, edi
call fcn.004f7f60
movsd xmm0, qword [0x6be508]
sub esp, 8
mov ecx, edi
mov dword [ebp - 0x110], eax
movsd qword [esp], xmm0
push 0
push 0
push 0
push 0x190
push 0xffffffffffffffff
call fcn.004f61c0
movsd xmm1, qword [0x6be518]
push 5
push str.Arial
push 0
push 0x190
mov ecx, edi
call fcn.004fb6d0
mov eax, dword [ebp - 0x14b8]
mov ecx, edi
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x14
push 0x14
push 0xa
push 0xf0
push dword [eax + 0x20]
call fcn.004f7940
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x12
push 0x64
push 0xc
push 0x109
push 0x60cb64
mov ecx, edi
call fcn.004f7eb0
push 0x186a0
push 0
push 0x60cb94
push 0xffffffffffffffff
mov ecx, edi
mov dword [ebp - 0x13c], eax
call fcn.004f4270
mov eax, dword [ebp - 0x14b8]
push 0x60
push 0
mov dword [ebp - 0x1418], 3
mov eax, dword [eax + 0x8c]
mov dword [esi + 0x34], eax
lea eax, [ebp - 0x1408]
push eax
mov dword [ebp - 0x1414], 0
mov dword [ebp - 0x1410], 0x10
mov dword [ebp - 0x140c], 0x10
call fcn.00420580
add esp, 0xc
xor eax, eax
mov word [ebp - 0x13a8], ax
push 0x1046
push eax
lea eax, [ebp - 0x13a6]
push eax
call fcn.00420580
mov eax, dword [ebp - 0x14b8]
add esp, 0xc
mov ecx, edi
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x14
push 0x14
push 0x28
push 0xf0
push dword [eax + 0x2c]
call fcn.004f7940
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x12
push 0x64
push 0x2a
push 0x109
push 0x60cbcc
mov ecx, edi
call fcn.004f7eb0
push 0x186a0
push 0
push 0x60cbe4
push 0xffffffffffffffff
mov ecx, edi
mov dword [ebp - 0x138], eax
call fcn.004f4270
mov eax, dword [ebp - 0x14b8]
test byte [eax + 0x8c], 8
je 0x4c1a3a
push 0x40
push dword [ebp - 0x138]
mov ecx, edi
call fcn.004f4b70
lea eax, [ebp - 0x1418]
mov ecx, edi
push eax
push 0
push 0x702
push dword [ebp - 0x144]
call fcn.004f6680
lea eax, [ebp - 0x1418]
mov ecx, edi
push eax
push 0
push 0x702
push dword [ebp - 0x13c]
call fcn.004f6680
lea eax, [ebp - 0x1418]
mov ecx, edi
push eax
push 0
push 0x702
push dword [ebp - 0x138]
call fcn.004f6680
mov eax, dword [esi + 0x538]
mov edx, 0x60cc98
mov esi, dword [ebp - 0x14b8]
add eax, 0xdc
push eax
push 0x60cc20
push 0x41
push 0x3c
push 5
push 0x17c
push dword [esi + 0x38]
mov ecx, edi
call fcn.004fe710
mov dword [ebp - 0x100], eax
mov esi, 0xf
nop word [eax + eax]
push 1
push dword [ebp + esi*4 - 0x148]
mov ecx, edi
call fcn.004f4b70
inc esi
cmp esi, 0x12
jl 0x4c1ad0
push 1
push dword [ebp - 0xf8]
mov ecx, edi
call fcn.004f4b70
push 0x833
mov ecx, edi
call fcn.004fb760
push 0
mov ecx, edi
call fcn.004fb330
movsd xmm1, qword [0x6be528]
mov ecx, edi
push 0
push str.Arial
push 1
push 0x190
call fcn.004fb6d0
push 0xffffffffffffffff
mov ecx, edi
call fcn.004fb8b0
push 0xffffffffffffffff
mov ecx, edi
call fcn.004fb8c0
mov eax, dword [ebp - 0x1ec]
mov ecx, edi
push 0xffffffffffffffff
push 0xffffffffffffffff
add eax, 0xffffffab
push eax
push dword [ebp - 0x14d4]
push 0x55
push 0
call fcn.004f7370
push 0x433
mov ecx, edi
mov dword [ebp - 0xe4], eax
call fcn.004fb760
xorps xmm0, xmm0
mov dword [ebp - 0x2b0], 0
lea ecx, [ebp - 0x2b8]
movq qword [ebp - 0x2b8], xmm0
call fcn.0051e180
push 0x60cca4
push 0
mov dword [ebp - 4], 0
mov ecx, edi
push dword [ebp - 0xe4]
call fcn.004f7200
mov esi, dword [ebp - 0x14b8]
mov ecx, edi
push 0x12
push 0x12
mov dword [ebp - 0xd0], eax
push dword [esi + 0x50]
push 0xffffffffffffffff
push 0xffffffffffffffff
call fcn.004f59b0
push 0x60ccb8
push 1
push dword [ebp - 0xe4]
mov ecx, edi
call fcn.004f7200
push 0x12
push 0x12
push dword [esi + 0x54]
mov ecx, edi
mov dword [ebp - 0xcc], eax
push 0xffffffffffffffff
push 0xffffffffffffffff
call fcn.004f59b0
push 0x60cccc
push 2
push dword [ebp - 0xe4]
mov ecx, edi
call fcn.004f7200
push 0x12
push 0x12
push dword [esi + 0x6c]
mov dword [ebp - 0xc8], eax
push 0xffffffffffffffff
push 0xffffffffffffffff
mov ecx, edi
call fcn.004f59b0
push 0x60ccf0
push 3
push dword [ebp - 0xe4]
mov ecx, edi
call fcn.004f7200
push 0x12
push 0x12
push dword [esi + 0x68]
mov ecx, edi
mov dword [ebp - 0xb8], eax
push 0xffffffffffffffff
push 0xffffffffffffffff
call fcn.004f59b0
push dword [ebp - 0xe4]
mov ecx, edi
call fcn.004fcac0
lea ecx, [ebp - 0x143c]
push ecx
push eax
call dword [0x5de6ec]
lea eax, [ebp - 0x143c]
mov ecx, edi
push eax
push 0
push 0x1328
push dword [ebp - 0xe4]
call fcn.004f6680
mov esi, dword [ebp - 0x1434]
mov edi, dword [ebp - 0x1430]
sub esi, dword [ebp - 0x143c]
sub edi, dword [ebp - 0x1438]
movsd xmm1, qword [0x6be510]
mov ecx, dword [ebp - 0x14d8]
push 0
push dword [ebp - 0x1c4]
mov dword [ebp - 0x141c], esi
push 1
push 0x190
mov dword [ebp - 0x14dc], edi
call fcn.004fb6d0
push dword [ebp - 0xd0]
mov ecx, dword [ebp - 0x14d8]
call fcn.004fb330
mov ecx, dword [ebp - 0x14d8]
push 0x10024
push 0x1000000d
push edi
push esi
push 0
push 0
push 0x604a10
push 0x60cd00
call fcn.004f7d00
mov ecx, dword [ebp - 0x14d8]
push eax
mov dword [ebp - 0xa8], eax
call fcn.004fcac0
mov ecx, dword [ebp - 0x141c]
mov esi, eax
add ecx, 0xffffff06
movzx ecx, cx
push ecx
push 0
push 0x101e
push esi
call dword [0x5de7fc]
push 0x82
push 1
push 0x101e
push esi
call dword [0x5de7fc]
push 0x64
push 2
push 0x101e
push esi
call dword [0x5de7fc]
xorps xmm0, xmm0
movq qword [ebp - 0x240], xmm0
lea ecx, [ebp - 0x240]
mov dword [ebp - 0x238], 0
call fcn.0051e180
push 0x104
push 0
push 0
push 0x104
lea ecx, [ebp - 0x240]
mov byte [ebp - 4], 1
call fcn.0051d530
push eax
call dword [0x5de464]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x60cd34
lea ecx, [ebp - 0x240]
call fcn.0051c4c0
push 0x10
push 0
lea ecx, [ebp - 0x240]
call fcn.0051dd30
mov esi, dword [ebp - 0x14d8]
mov ecx, esi
push eax
push 1
push dword [ebp - 0xa8]
call fcn.004f6120
push dword [ebp - 0xcc]
mov ecx, esi
call fcn.004fb330
push 0x10024
push 0x1000000d
push edi
push dword [ebp - 0x141c]
mov ecx, esi
push 0
push 0
push 0x604a10
push 0x60cd50
call fcn.004f7d00
push eax
mov ecx, esi
mov dword [ebp - 0xa4], eax
call fcn.004fcac0
push 0xc8
push 0
mov esi, eax
push 0x101e
push esi
call dword [0x5de7fc]
push 0x64
push 1
push 0x101e
push esi
call dword [0x5de7fc]
push 0x1f4
push 2
push 0x101e
push esi
call dword [0x5de7fc]
mov eax, dword [ebp - 0x14b8]
mov edx, 0x10
mov ecx, dword [eax + 0x54]
call fcn.005151c0
push eax
lea ecx, [ebp - 0x1484]
call fcn.004fd860
push 0
mov byte [ebp - 4], 2
push dword [ebp - 0x1484]
mov esi, dword [ebp - 0x14d8]
mov ecx, esi
push 1
push dword [ebp - 0xa4]
call fcn.004f5b00
push 0xffffffffffffffff
push 0
push 0
push 0xffffffffffffffff
push 0
push 0x60cd78
push 0xb
push dword [ebp - 0xa4]
mov ecx, esi
call fcn.004f35d0
push 0xffffffffffffffff
push 0
push 0
push 0xffffffffffffffff
push 0
push 0x60cdb0
push 0xc
push dword [ebp - 0xa4]
mov ecx, esi
call fcn.004f35d0
push 0xffffffffffffffff
push 0
push 0
push 0xffffffffffffffff
push 0
push 0x60cde0
push 0xd
push dword [ebp - 0xa4]
mov ecx, esi
call fcn.004f35d0
push 0xffffffffffffffff
push 0
push 0
push 0xffffffffffffffff
push 0
push 0x60ce28
push 0xe
push dword [ebp - 0xa4]
mov ecx, esi
call fcn.004f35d0
push 0xffffffffffffffff
push 0
push 0
push 0xffffffffffffffff
push 0
push 0x60ce44
push 0xf
push dword [ebp - 0xa4]
mov ecx, esi
call fcn.004f35d0
push 1
push dword [ebp - 0xa4]
mov ecx, esi
call fcn.004f31a0
push dword [ebp - 0xc8]
mov ecx, esi
call fcn.004fb330
push 0x10024
push 0x1000000d
push edi
push dword [ebp - 0x141c]
mov ecx, esi
push 0
push 0
push 0x604a10
push 0x60ce60
call fcn.004f7d00
push eax
mov ecx, esi
mov dword [ebp - 0xa0], eax
call fcn.004fcac0
push 0xc8
push 0
mov esi, eax
push 0x101e
push esi
mov edi, dword [0x5de7fc]
call edi
push 0x64
push 1
push 0x101e
push esi
call edi
push 0x1f4
push 2
push 0x101e
push esi
call edi
mov edi, dword [ebp - 0x14b8]
mov edx, 0x10
mov ecx, dword [edi + 0x58]
call fcn.005151c0
push eax
lea ecx, [ebp - 0x1480]
call fcn.004fd860
mov byte [ebp - 4], 3
mov edx, 0x10
mov ecx, dword [edi + 0x5c]
call fcn.005151c0
push eax
lea ecx, [ebp - 0x147c]
call fcn.004fd860
mov byte [ebp - 4], 4
mov edx, 0x10
mov ecx, dword [edi + 0x60]
call fcn.005151c0
push eax
lea ecx, [ebp - 0x1478]
call fcn.004fd860
mov byte [ebp - 4], 5
mov edx, 0x10
mov ecx, dword [edi + 0x64]
call fcn.005151c0
push eax
lea ecx, [ebp - 0x1488]
call fcn.004fd860
mov byte [ebp - 4], 6
mov edx, 0x10
mov ecx, dword [edi + 0x70]
call fcn.005151c0
push eax
lea ecx, [ebp - 0x1470]
call fcn.004fd860
mov byte [ebp - 4], 7
mov edx, 0x10
mov ecx, dword [edi + 0x6c]
call fcn.005151c0
push eax
lea ecx, [ebp - 0x146c]
call fcn.004fd860
mov ecx, dword [ebp - 0x14d8]
push 0
mov byte [ebp - 4], 8
push dword [ebp - 0x1480]
push 1
push dword [ebp - 0xa0]
call fcn.004f5b00
push 0
push 1
push 0x1002
push esi
call dword [0x5de7fc]
push dword [ebp - 0x147c]
mov esi, dword [0x5de178]
mov edi, eax
push 0xffffffffffffffff
push edi
call esi
push dword [ebp - 0x1478]
push 0xffffffffffffffff
push edi
call esi
push dword [ebp - 0x1488]
push 0xffffffffffffffff
push edi
call esi
push dword [ebp - 0x1470]
push 0xffffffffffffffff
push edi
call esi
push dword [ebp - 0x146c]
push 0xffffffffffffffff
push edi
call esi
mov edi, dword [ebp - 0x14d8]
mov ecx, edi
push 0xffffffffffffffff
push 0
push 0
push 0xffffffffffffffff
push 0
push 0x60ce90
push 0x16
push dword [ebp - 0xa0]
call fcn.004f35d0
push 0xffffffffffffffff
push 0
push 0
push 0xffffffffffffffff
push 0
push 0x60ced4
push 0x17
push dword [ebp - 0xa0]
mov ecx, edi
call fcn.004f35d0
push 0xffffffffffffffff
push 0
push 0
push 0xffffffffffffffff
push 0
push 0x60cf10
push 0x19
push dword [ebp - 0xa0]
mov ecx, edi
call fcn.004f35d0
push 0xffffffffffffffff
push 0
push 0
push 0xffffffffffffffff
push 0
push 0x60cf54
push 0x18
push dword [ebp - 0xa0]
mov ecx, edi
call fcn.004f35d0
push 0xffffffffffffffff
push 0
push 0
push 0xffffffffffffffff
push 0
push 0x60cf80
push 0x1b
push dword [ebp - 0xa0]
mov ecx, edi
call fcn.004f35d0
push 0xffffffffffffffff
push 0
push 0
push 0xffffffffffffffff
push 0
push 0x60cfb4
push 0x1a
push dword [ebp - 0xa0]
mov ecx, edi
call fcn.004f35d0
push 0xffffffffffffffff
push 0
push 0
push 0xffffffffffffffff
push 0
push 0x60cfe8
push 0x6f
push dword [ebp - 0xa0]
mov ecx, edi
call fcn.004f35d0
push 0xffffffffffffffff
push 0
push 0
push 0xffffffffffffffff
push 0
push 0x60d02c
push 0x70
push dword [ebp - 0xa0]
mov ecx, edi
call fcn.004f35d0
push 0xffffffffffffffff
push 0
push 0
push 0xffffffffffffffff
push 0
push 0x60d068
push 0x72
push dword [ebp - 0xa0]
mov ecx, edi
call fcn.004f35d0
push 0xffffffffffffffff
push 0
push 0
push 0xffffffffffffffff
push 0
push 0x60d0ac
push 0x71
push dword [ebp - 0xa0]
mov ecx, edi
call fcn.004f35d0
push 0xffffffffffffffff
push 0
push 0
push 0xffffffffffffffff
push 0
push 0x60d0d8
push 0x74
push dword [ebp - 0xa0]
mov ecx, edi
call fcn.004f35d0
push 0xffffffffffffffff
push 0
push 0
push 0xffffffffffffffff
push 0
push 0x60d10c
push 0x73
push dword [ebp - 0xa0]
mov ecx, edi
call fcn.004f35d0
push 1
push dword [ebp - 0xa0]
mov ecx, edi
call fcn.004f31a0
push 0xffffffffffffffff
push 0
push 0
push 0xffffffffffffffff
push 0
push 0x60d140
push 0x1f
push dword [ebp - 0xa0]
mov ecx, edi
call fcn.004f35d0
push 0xffffffffffffffff
push 0
push 0
push 0xffffffffffffffff
push 0
push 0x60d190
push 0x20
push dword [ebp - 0xa0]
mov ecx, edi
call fcn.004f35d0
push 0xffffffffffffffff
push 0
push 0
push 0xffffffffffffffff
push 0
push 0x60d1d8
push 0x21
push dword [ebp - 0xa0]
mov ecx, edi
call fcn.004f35d0
push 0xffffffffffffffff
push 0
push 0
push 0xffffffffffffffff
push 0
push 0x60d210
push 0x23
push dword [ebp - 0xa0]
mov ecx, edi
call fcn.004f35d0
push 0xffffffffffffffff
push 0
push 0
push 0xffffffffffffffff
push 0
push 0x60d268
push 0x25
push dword [ebp - 0xa0]
mov ecx, edi
call fcn.004f35d0
push 0xffffffffffffffff
push 0
push 0
push 0xffffffffffffffff
push 0
push 0x60d2b0
push 0x24
push dword [ebp - 0xa0]
mov ecx, edi
call fcn.004f35d0
push 0xffffffffffffffff
push 0
push 0
push 0xffffffffffffffff
push 0
push 0x60d308
push 0x2a
push dword [ebp - 0xa0]
mov ecx, edi
call fcn.004f35d0
push 0xffffffffffffffff
push 0
push 0
push 0xffffffffffffffff
push 0
push 0x60d348
push 0x2b
push dword [ebp - 0xa0]
mov ecx, edi
call fcn.004f35d0
push 0xffffffffffffffff
push 0
push 0
push 0xffffffffffffffff
push 0
push 0x60d380
push 0x2d
push dword [ebp - 0xa0]
mov ecx, edi
call fcn.004f35d0
push 0xffffffffffffffff
push 0
push 0
push 0xffffffffffffffff
push 0
push 0x60d3c0
push 0x2c
push dword [ebp - 0xa0]
mov ecx, edi
call fcn.004f35d0
push 0xffffffffffffffff
push 0
push 0
push 0xffffffffffffffff
push 0
push 0x60d3e4
push 0x2f
push dword [ebp - 0xa0]
mov ecx, edi
call fcn.004f35d0
push 0xffffffffffffffff
push 0
push 0
push 0xffffffffffffffff
push 0
push 0x60d414
push 0x2e
push dword [ebp - 0xa0]
mov ecx, edi
call fcn.004f35d0
push 0xffffffffffffffff
push 0
push 0
push 0xffffffffffffffff
push 0
push 0x60d440
push 0x33
push dword [ebp - 0xa0]
mov ecx, edi
call fcn.004f35d0
push 0xffffffffffffffff
push 0
push 0
push 0xffffffffffffffff
push 0
push 0x60d46c
push 0x34
push dword [ebp - 0xa0]
mov ecx, edi
call fcn.004f35d0
push 0xffffffffffffffff
push 0
push 0
push 0xffffffffffffffff
push 0
push 0x60d49c
push 0x35
push dword [ebp - 0xa0]
mov ecx, edi
call fcn.004f35d0
push 0xffffffffffffffff
push 0
push 0
push 0xffffffffffffffff
push 0
push 0x60d4c4
push 0x37
push dword [ebp - 0xa0]
mov ecx, edi
call fcn.004f35d0
push 0xffffffffffffffff
push 0
push 0
push 0xffffffffffffffff
push 0
push 0x60d504
push 0x38
push dword [ebp - 0xa0]
mov ecx, edi
call fcn.004f35d0
push 0xffffffffffffffff
push 0
push 0
push 0xffffffffffffffff
push 0
push 0x60d530
push 0x3e
push dword [ebp - 0xa0]
mov ecx, edi
call fcn.004f35d0
push 0xffffffffffffffff
push 0
push 0
push 0xffffffffffffffff
push 0
push 0x60d590
push 0x3f
push dword [ebp - 0xa0]
mov ecx, edi
call fcn.004f35d0
push 0xffffffffffffffff
push 0
push 0
push 0xffffffffffffffff
push 0
push 0x60d5e8
push 0x41
push dword [ebp - 0xa0]
mov ecx, edi
call fcn.004f35d0
push 0xffffffffffffffff
push 0
push 0
push 0xffffffffffffffff
push 0
push 0x60d648
push 0x40
push dword [ebp - 0xa0]
mov ecx, edi
call fcn.004f35d0
push 0xffffffffffffffff
push 0
push 0
push 0xffffffffffffffff
push 0
push 0x60d690
push 0x43
push dword [ebp - 0xa0]
mov ecx, edi
call fcn.004f35d0
push 0xffffffffffffffff
push 0
push 0
push 0xffffffffffffffff
push 0
push 0x60d6e0
push 0x42
push dword [ebp - 0xa0]
mov ecx, edi
call fcn.004f35d0
push 0xffffffffffffffff
push 0
push 0
push 0xffffffffffffffff
push 0
push 0x60d730
push 0x47
push dword [ebp - 0xa0]
mov ecx, edi
call fcn.004f35d0
push 0xffffffffffffffff
push 0
push 0
push 0xffffffffffffffff
push 0
push 0x60d780
push 0x48
push dword [ebp - 0xa0]
mov ecx, edi
call fcn.004f35d0
push 0xffffffffffffffff
push 0
push 0
push 0xffffffffffffffff
push 0
push 0x60d7d0
push 0x49
push dword [ebp - 0xa0]
mov ecx, edi
call fcn.004f35d0
push 0xffffffffffffffff
push 0
push 0
push 0xffffffffffffffff
push 0
push 0x60d818
push 0x4b
push dword [ebp - 0xa0]
mov ecx, edi
call fcn.004f35d0
push 0xffffffffffffffff
push 0
push 0
push 0xffffffffffffffff
push 0
push 0x60d878
push 0x4c
push dword [ebp - 0xa0]
mov ecx, edi
call fcn.004f35d0
push dword [ebp - 0xb8]
mov ecx, edi
call fcn.004fb330
push 0x10024
push 0x1000000d
push dword [ebp - 0x14dc]
mov ecx, edi
push dword [ebp - 0x141c]
push 0
push 0
push 0x604a10
push 0x60d8c8
call fcn.004f7d00
push eax
mov ecx, edi
mov dword [ebp - 0x90], eax
call fcn.004fcac0
push 0x1a4
push 0
mov esi, eax
push 0x101e
push esi
call dword [0x5de7fc]
push 0x50
push 1
push 0x101e
push esi
call dword [0x5de7fc]
push 0x6e
push 2
push 0x101e
push esi
call dword [0x5de7fc]
push 0x78
push 3
push 0x101e
push esi
call dword [0x5de7fc]
mov eax, dword [ebp - 0x14b8]
mov edx, 0x10
mov ecx, dword [eax + 0x68]
call fcn.005151c0
push eax
lea ecx, [ebp - 0x1468]
call fcn.004fd860
push 0
mov byte [ebp - 4], 9
mov ecx, edi
push dword [ebp - 0x1468]
push 1
push dword [ebp - 0x90]
call fcn.004f5b00
push 0xffffffffffffffff
push 0
push 0
push 0xffffffffffffffff
push 0
push 0x60d920
push 0x51
push dword [ebp - 0x90]
mov ecx, edi
call fcn.004f35d0
push 0xffffffffffffffff
push 0
push 0
push 0xffffffffffffffff
push 0
push 0x60d94c
push 0x52
push dword [ebp - 0x90]
mov ecx, edi
call fcn.004f35d0
push 0xffffffffffffffff
push 0
push 0
push 0xffffffffffffffff
push 0
push 0x60d980
push 0x53
push dword [ebp - 0x90]
mov ecx, edi
call fcn.004f35d0
push 1
push dword [ebp - 0x90]
mov ecx, edi
call fcn.004f31a0
movaps xmm0, xmmword [0x6be630]
lea eax, [ebp - 0x14b4]
push eax
push 1
push 0x1060
push dword [ebp - 0x90]
movups xmmword [ebp - 0x14b0], xmm0
mov dword [ebp - 0x14b4], 1
mov ecx, edi
xorps xmm0, xmm0
mov dword [ebp - 0x14a0], 0
movups xmmword [ebp - 0x149c], xmm0
mov dword [ebp - 0x148c], 0
call fcn.004f6680
mov esi, 0x28
mov eax, dword [ebp + esi*4 - 0x148]
test eax, eax
jle 0x4c272a
push 1
push eax
mov ecx, edi
call fcn.004f1d80
inc esi
cmp esi, 0x2f
jl 0x4c2715
push 0
mov ecx, edi
call fcn.004fb330
mov esi, dword [ebp - 0x14d0]
mov ecx, dword [ebp - 0x14b8]
mov eax, dword [ebp - 0x14c0]
mov dword [esi], eax
lea eax, [ebp - 0x148]
mov dword [esi + 8], eax
mov dword [esi + 4], edi
mov byte [esi + 0x14], 0
mov eax, dword [ecx + 0xc]
mov dword [esi + 0x18], eax
mov eax, dword [ecx + 0x2c]
mov dword [esi + 0x1c], eax
mov eax, dword [ecx + 0x88]
mov dword [esi + 0x20], eax
mov dword [esi + 0x24], 0
mov dword [esi + 0x28], 0
mov dword [esi + 0x2c], 0
mov eax, dword [ecx + 0x8c]
mov dword [esi + 0x34], eax
lea eax, [ecx + 0xb8]
push eax
lea ecx, [esi + 0x6c]
mov dword [esi + 0x30], 0
mov dword [esi + 0x38], 0
call fcn.0051e080
mov dword [ebp - 0x1420], 0xffffffff
mov dword [ebp - 0x1440], 0xffffffff
mov dword [ebp - 0x142c], 0xffffffff
mov eax, dword [ebp - 0x14b8]
mov byte [ebp - 4], 0xc
mov dword [ebp - 0x1cc], 0
test byte [eax + 0x8c], 4
je 0x4c27f5
cmp dword [eax + 0x7c], 0
mov byte [ebp - 0x14c9], 1
je 0x4c27fc
mov byte [ebp - 0x14c9], 0
push 0x48
call dword [0x5de7f8]
movsd xmm0, qword [0x6be4d8]
comisd xmm0, xmmword [esi + 0x2b0]
mov dword [ebp - 0x1c8], eax
jb 0x4c2834
push 4
call dword [0x5de754]
mov ecx, eax
mov eax, dword [ebp - 0x1c8]
or ecx, 0xff000000
jmp 0x4c2836
xor ecx, ecx
push ecx
push eax
mov edx, eax
mov dword [ebp - 0x141c], ecx
mov eax, dword [ebp - 0x14b8]
mov dword [ebp - 0x1424], 0
mov ecx, dword [eax + 0x10]
call fcn.00512c90
mov dword [ebp - 0x1424], eax
push eax
lea ecx, [ebp - 0x1464]
mov byte [ebp - 4], 0xd
call fcn.004fd7f0
mov byte [ebp - 4], 0xe
mov ecx, edi
push dword [ebp - 0x1464]
push 0x60d9ac
push dword [ebp - 0xe4]
call fcn.004f8b00
push dword [ebp - 0x141c]
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x1c8]
mov edx, eax
push eax
mov eax, dword [ebp - 0x14b8]
mov ecx, dword [eax + 0x34]
call fcn.00512c90
mov ecx, dword [ebp - 0x1424]
mov dword [ebp - 0x1c4], eax
test ecx, ecx
je 0x4c28c6
mov edx, dword [ecx]
push 1
call dword [edx]
mov eax, dword [ebp - 0x1c4]
push eax
lea ecx, [ebp - 0x1460]
mov dword [ebp - 0x1424], eax
call fcn.004fd7f0
push 0
mov byte [ebp - 4], 0xf
mov ecx, edi
push dword [ebp - 0x1460]
push 0
push 0x64
push 0x60d9cc
push dword [ebp - 0xe4]
call fcn.004f7b00
push dword [ebp - 0x141c]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x1c8]
mov edx, eax
push eax
mov eax, dword [ebp - 0x14b8]
mov ecx, dword [eax + 0x30]
call fcn.00512c90
mov ecx, dword [ebp - 0x1424]
mov dword [ebp - 0x1c4], eax
test ecx, ecx
je 0x4c2936
mov edx, dword [ecx]
push 1
call dword [edx]
mov eax, dword [ebp - 0x1c4]
push eax
lea ecx, [ebp - 0x145c]
mov dword [ebp - 0x1424], eax
call fcn.004fd7f0
push 0
mov byte [ebp - 4], 0x10
mov ecx, edi
push dword [ebp - 0x145c]
push 0
push 0x64
push 0x60d9f0
push dword [ebp - 0xe4]
call fcn.004f7b00
push dword [ebp - 0x141c]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x1c8]
mov edx, eax
push eax
mov eax, dword [ebp - 0x14b8]
mov ecx, dword [eax + 0x28]
call fcn.00512c90
mov ecx, dword [ebp - 0x1424]
mov dword [ebp - 0x1c4], eax
test ecx, ecx
je 0x4c29a6
mov edx, dword [ecx]
push 1
call dword [edx]
mov eax, dword [ebp - 0x1c4]
push eax
lea ecx, [ebp - 0x144c]
mov dword [ebp - 0x1424], eax
call fcn.004fd7f0
push 0
mov byte [ebp - 4], 0x11
mov ecx, edi
push dword [ebp - 0x144c]
push 0
push 0x64
push 0x60da34
push dword [ebp - 0xe4]
call fcn.004f7b00
push 0
push dword [ebp - 0x144c]
mov ecx, edi
mov dword [ebp - 0x54], eax
push 0
push 0x64
push 0x60da68
push dword [ebp - 0xe4]
call fcn.004f7b00
mov dword [ebp - 0x50], eax
mov esi, 0x3d
push 0x40
push dword [ebp + esi*4 - 0x148]
mov ecx, edi
call fcn.004f4b70
inc esi
cmp esi, 0x3f
jl 0x4c2a03
mov ecx, dword [ebp - 0x14b8]
push dword [ebp - 0x141c]
mov eax, dword [ebp - 0x1c8]
add ecx, 0x48
mov dword [ebp - 0x14e8], ecx
mov edx, eax
push eax
mov ecx, dword [ecx]
call fcn.00512c90
mov ecx, dword [ebp - 0x1424]
mov esi, dword [ebp - 0x14d0]
mov dword [ebp - 0x1c4], eax
test ecx, ecx
je 0x4c2a60
mov edx, dword [ecx]
push 1
call dword [edx]
mov eax, dword [ebp - 0x1c4]
push eax
lea ecx, [ebp - 0x1448]
mov dword [ebp - 0x1424], eax
call fcn.004fd7f0
push 0
mov byte [ebp - 4], 0x12
mov ecx, edi
push dword [ebp - 0x1448]
push 0
push 0x64
push 0x60daa0
push dword [ebp - 0xe4]
call fcn.004f7b00
push dword [ebp - 0x141c]
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x1c8]
mov edx, eax
push eax
mov eax, dword [ebp - 0x14b8]
mov ecx, dword [eax + 0x3c]
call fcn.00512c90
mov ecx, dword [ebp - 0x1424]
mov dword [ebp - 0x1c4], eax
test ecx, ecx
je 0x4c2ad0
mov edx, dword [ecx]
push 1
call dword [edx]
mov eax, dword [ebp - 0x1c4]
push eax
lea ecx, [ebp - 0x1444]
mov dword [ebp - 0x1424], eax
call fcn.004fd7f0
push 0
push 0
push 8
push 0x64
push 0
mov byte [ebp - 4], 0x13
mov ecx, edi
push dword [ebp - 0xe4]
call fcn.004f7b00
push dword [ebp - 0x141c]
mov eax, dword [ebp - 0x1c8]
mov edx, eax
push eax
mov eax, dword [ebp - 0x14b8]
mov ecx, dword [eax + 0x4c]
call fcn.00512c90
mov ecx, dword [ebp - 0x1424]
mov dword [ebp - 0x1c4], eax
test ecx, ecx
je 0x4c2b36
mov edx, dword [ecx]
push 1
call dword [edx]
mov eax, dword [ebp - 0x1c4]
push eax
lea ecx, [ebp - 0x1458]
mov dword [ebp - 0x1424], eax
call fcn.004fd7f0
push 0
mov byte [ebp - 4], 0x14
mov ecx, edi
push dword [ebp - 0x1458]
push 0
push 0x64
push 0x60dad0
push dword [ebp - 0xe4]
call fcn.004f7b00
push 0
push dword [ebp - 0x1448]
mov ecx, edi
mov dword [ebp - 0x7c], eax
push 0
push 0x64
push 0x60db14
push dword [ebp - 0xe4]
call fcn.004f7b00
push dword [ebp - 0x141c]
mov dword [ebp - 0x78], eax
mov eax, dword [ebp - 0x1c8]
mov edx, eax
push eax
mov eax, dword [ebp - 0x14b8]
mov ecx, dword [eax + 0x1c]
call fcn.00512c90
mov ecx, dword [ebp - 0x1424]
mov dword [ebp - 0x1c4], eax
test ecx, ecx
je 0x4c2bc7
mov edx, dword [ecx]
push 1
call dword [edx]
mov eax, dword [ebp - 0x1c4]
push eax
lea ecx, [ebp - 0x1474]
mov dword [ebp - 0x1424], eax
call fcn.004fd7f0
push 0
mov byte [ebp - 4], 0x15
mov ecx, edi
push dword [ebp - 0x1474]
push 0
push 0x64
push 0x60db50
push dword [ebp - 0xe4]
call fcn.004f7b00
mov ecx, dword [ebp - 0x1c8]
mov edx, 1
push 0xffffffffffffffff
push 0xff000000
push 0xff005f00
mov dword [ebp - 0xc4], eax
call fcn.00514670
push eax
lea ecx, [ebp - 0x1454]
call fcn.004fd7e0
push 0xffffffffffffffff
push 0xff000000
mov byte [ebp - 4], 0x16
xor edx, edx
mov ecx, dword [ebp - 0x1c8]
push 0xff005f00
call fcn.00514670
push eax
lea ecx, [ebp - 0x1450]
call fcn.004fd7e0
push 0
mov byte [ebp - 4], 0x17
mov ecx, edi
push dword [ebp - 0x1454]
push 0
push 0x64
push 0x60db8c
push dword [ebp - 0xe4]
call fcn.004f7b00
push 0
push dword [ebp - 0x1450]
mov ecx, edi
mov dword [ebp - 0x74], eax
push 0
push 0x64
push 0x60dbb0
push dword [ebp - 0xe4]
call fcn.004f7b00
push 0
push 0
push 8
push 0x64
push 0
push dword [ebp - 0xe4]
mov ecx, edi
mov dword [ebp - 0x70], eax
call fcn.004f7b00
push 0
push dword [ebp - 0x1444]
mov ecx, edi
push 0
push 0x64
push 0x60dbd8
push dword [ebp - 0xe4]
call fcn.004f7b00
push 0
push dword [ebp - 0x1448]
mov ecx, edi
mov dword [ebp - 0x6c], eax
push 0
push 0x64
push 0x60dc1c
push dword [ebp - 0xe4]
call fcn.004f7b00
mov dword [ebp - 0x30], eax
push 0
push dword [ebp - 0x1444]
mov ecx, edi
push 0
push 0x64
push 0x60dc58
push dword [ebp - 0xe4]
call fcn.004f7b00
push 0
push dword [ebp - 0x1444]
mov ecx, edi
mov dword [ebp - 0x40], eax
push 0
push 0x64
push 0x60dc98
push dword [ebp - 0xe4]
call fcn.004f7b00
push 0
push dword [ebp - 0x1444]
mov ecx, edi
mov dword [ebp - 0x3c], eax
push 0
push 0x64
push 0x60dce0
push dword [ebp - 0xe4]
call fcn.004f7b00
push 0
push dword [ebp - 0x7c]
mov ecx, edi
mov dword [ebp - 0x44], eax
push dword [ebp - 0xe4]
call fcn.004fca70
push eax
call dword [0x5de75c]
mov eax, 0x70
mov byte [ebp - 0x1c0], 1
mov word [ebp - 0x1be], ax
mov ecx, 0xd
movzx eax, word [ebp - 0x13c]
mov edx, 0x41
mov word [ebp - 0x1bc], ax
mov eax, 0x4e
mov word [ebp - 0x1b8], ax
movzx eax, word [ebp - 0x58]
mov word [ebp - 0x1b6], ax
mov eax, 0x46
mov word [ebp - 0x1b2], ax
movzx eax, word [ebp - 0x34]
mov word [ebp - 0x1b0], ax
mov eax, 0x4d
mov word [ebp - 0x1ac], ax
movzx eax, word [ebp - 0x2c]
mov word [ebp - 0x1aa], ax
mov eax, 0x53
mov word [ebp - 0x1a6], ax
movzx eax, word [ebp - 0x54]
mov word [ebp - 0x1a4], ax
mov eax, 0x43
mov word [ebp - 0x1a0], ax
movzx eax, word [ebp - 0x50]
mov word [ebp - 0x19e], ax
mov eax, 0x4c
mov word [ebp - 0x19a], ax
movzx eax, word [ebp - 0x4c]
mov word [ebp - 0x198], ax
movzx eax, word [ebp - 0x7c]
mov word [ebp - 0x192], ax
movzx eax, word [ebp - 0x78]
mov byte [ebp - 0x1ba], 0x11
mov byte [ebp - 0x1b4], 0x11
mov byte [ebp - 0x1ae], 0x11
mov byte [ebp - 0x1a8], 0x11
mov byte [ebp - 0x1a2], 0x11
mov byte [ebp - 0x19c], 9
mov byte [ebp - 0x196], 9
mov word [ebp - 0x194], cx
mov byte [ebp - 0x190], 0x11
mov word [ebp - 0x18e], cx
mov word [ebp - 0x18c], ax
mov byte [ebp - 0x18a], 9
mov word [ebp - 0x188], dx
movzx eax, word [ebp - 0x74]
mov ecx, 0x57
mov word [ebp - 0x186], ax
mov eax, 0x4e
mov word [ebp - 0x182], ax
movzx eax, word [ebp - 0x70]
mov word [ebp - 0x180], ax
movzx eax, word [ebp - 0x6c]
mov word [ebp - 0x17a], ax
mov eax, 0x4d
mov word [ebp - 0x176], ax
movzx eax, word [ebp - 0x44]
mov word [ebp - 0x174], ax
movzx eax, word [ebp - 0x40]
mov word [ebp - 0x16e], ax
movzx eax, word [ebp - 0x3c]
mov word [ebp - 0x168], ax
mov eax, 0x52
mov word [ebp - 0x164], ax
movzx eax, word [ebp - 0xc4]
mov word [ebp - 0x162], ax
mov eax, 0x50
mov word [ebp - 0x15e], ax
movzx eax, word [ebp - 0x30]
mov word [ebp - 0x15c], ax
mov eax, 0x53
mov word [ebp - 0x158], ax
movzx eax, word [ebp - 0x38]
mov word [ebp - 0x156], ax
mov eax, 0x55
mov word [ebp - 0x152], ax
movzx eax, word [ebp - 0x48]
mov word [ebp - 0x150], ax
lea eax, [ebp - 0x1c0]
push 0x12
mov word [ebp - 0x17c], cx
mov word [ebp - 0x170], cx
mov ecx, edi
push eax
mov byte [ebp - 0x184], 9
mov byte [ebp - 0x17e], 9
mov byte [ebp - 0x178], 9
mov byte [ebp - 0x172], 0x11
mov byte [ebp - 0x16c], 0x11
mov word [ebp - 0x16a], dx
mov byte [ebp - 0x166], 9
mov byte [ebp - 0x160], 0x11
mov byte [ebp - 0x15a], 9
mov byte [ebp - 0x154], 9
call fcn.004fbbb0
push 0
lea ecx, [ebp - 0x310]
call fcn.00512430
push 0
lea ecx, [ebp - 0x328]
call fcn.00512430
push 0
lea ecx, [ebp - 0x360]
call fcn.00512430
xorps xmm0, xmm0
mov dword [ebp - 0x220], 0
lea ecx, [ebp - 0x228]
movq qword [ebp - 0x228], xmm0
call fcn.0051e180
push 0x104
push 0
push 0
push 0x104
lea ecx, [ebp - 0x228]
mov byte [ebp - 4], 0x18
call fcn.0051d530
push eax
call dword [0x5de464]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x60dd14
lea ecx, [ebp - 0x228]
call fcn.0051c4c0
lea ecx, [esi + 0x6c]
call fcn.0051da30
test al, al
je 0x4c30a9
push 0
push 0
push 0x23
lea ecx, [esi + 0x6c]
call fcn.0051d750
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x60dd40
lea ecx, [esi + 0x6c]
call fcn.0051c4c0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x60dd4c
lea ecx, [esi + 0x6c]
call fcn.0051dd30
push eax
push 0x5fe594
lea ecx, [esi + 0x6c]
call fcn.0051dda0
lea ecx, [esi + 0x6c]
call fcn.0051dd30
or edx, 0xffffffff
mov ecx, eax
call fcn.00509060
xorps xmm0, xmm0
mov dword [ebp - 0x2a4], 0
lea ecx, [ebp - 0x2ac]
movq qword [ebp - 0x2ac], xmm0
call fcn.0051e180
push 0x104
push 0
push 0
push 0x104
lea ecx, [ebp - 0x2ac]
mov byte [ebp - 4], 0x19
call fcn.0051d530
push eax
call dword [0x5de404]
mov eax, dword [ebp - 0x14b8]
lea ecx, [esi + 0x84]
add eax, 0xd0
push eax
call fcn.0051e080
push 0
push 0xffffffffffffffff
push 0x60dd78
lea ecx, [ebp - 0x1e8]
mov dword [ebp - 0x1e8], 0
call fcn.00518860
lea eax, [esi + 0x84]
mov byte [ebp - 4], 0x1a
push eax
push 0x60ddc8
lea ecx, [ebp - 0x1e8]
call fcn.00518530
test al, al
je 0x4c319f
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x60dde4
push 0
lea ecx, [esi + 0x84]
call fcn.0051da50
mov ecx, eax
call fcn.0051c4c0
mov ecx, eax
call fcn.0051dd30
push eax
call dword [0x5de620]
test eax, eax
jne 0x4c319f
lea ecx, [esi + 0x84]
call fcn.0051dfa0
lea ecx, [esi + 0x84]
call fcn.0051da30
test al, al
je 0x4c3218
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x60de0c
lea ecx, [esi + 0x6c]
call fcn.0051dd30
push eax
lea ecx, [esi + 0x84]
call fcn.0051dda0
lea ecx, [esi + 0x84]
call fcn.0051dd30
mov edx, 2
mov ecx, eax
call fcn.00509060
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x60de20
lea ecx, [esi + 0x84]
call fcn.0051c4c0
lea ecx, [esi + 0x258]
call fcn.0051dd30
mov ecx, eax
call fcn.004cee60
lea ecx, [esi + 0x84]
mov byte [ebp - 0x14ba], 0
mov byte [ebp - 0x14b9], 0
call fcn.0051dd30
push eax
call dword [0x5de620]
lea ecx, [esi + 0x84]
test eax, eax
jne 0x4c3286
xorps xmm0, xmm0
push eax
push 0x21
movups xmmword [ebp - 0x2d8], xmm0
movups xmmword [ebp - 0x2c8], xmm0
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2d8]
call fcn.0050c8c0
lea ecx, [ebp - 0x2d8]
call fcn.00401f90
jmp 0x4c3293
call fcn.0051dd30
push eax
mov ecx, esi
call fcn.00498800
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
xorps xmm0, xmm0
mov dword [ebp - 0x1d0], 0
push 0x60de40
lea ecx, [esi + 0x6c]
movq qword [ebp - 0x1d8], xmm0
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1d8]
call fcn.0051e0c0
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x1e4]
xorps xmm0, xmm0
mov dword [ebp - 0x1dc], 0
movq qword [ebp - 0x1e4], xmm0
call fcn.0051e180
lea ecx, [ebp - 0x1d8]
mov byte [ebp - 4], 0x1c
call fcn.0051dd30
push eax
call dword [0x5de620]
test eax, eax
jne 0x4c3349
xorps xmm0, xmm0
lea ecx, [ebp - 0x1d8]
push eax
push 0x2a
movups xmmword [ebp - 0x2d8], xmm0
movups xmmword [ebp - 0x2c8], xmm0
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2d8]
call fcn.0050c8c0
lea ecx, [ebp - 0x2d8]
call fcn.00401f90
push 0x80
push 0x5fe670
push 0x60de70
push 0x60de84
lea ecx, [ebp - 0x1d8]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1e4]
call fcn.0051ce70
mov ecx, eax
call fcn.0051ccb0
test eax, eax
jne 0x4c349e
push 0x80
push 0x5fe670
push 0x60de8c
push 0x60de84
lea ecx, [ebp - 0x1d8]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1e4]
call fcn.0051ce70
mov ecx, eax
call fcn.0051ccb0
push 0x80
push 0x5fe670
push 0x60dea0
push 0x60de84
lea ecx, [ebp - 0x1d8]
mov dword [ebp - 0x1c4], eax
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1e4]
call fcn.0051ce70
mov ecx, eax
call fcn.0051ccb0
push 0
mov dword [ebp - 0x14dc], eax
call dword [0x5de69c]
mov esi, dword [0x5de22c]
mov edi, eax
push 8
push edi
call esi
push 0xa
push edi
mov dword [ebp - 0x141c], eax
call esi
push edi
push 0
mov dword [ebp - 0x1428], eax
call dword [0x5de660]
mov esi, dword [ebp - 0x14d4]
mov eax, dword [ebp - 0x1c4]
cmp eax, esi
jle 0x4c343b
cmp eax, dword [ebp - 0x141c]
cmovle esi, eax
mov edi, dword [ebp - 0x1ec]
mov eax, dword [ebp - 0x14dc]
mov ecx, dword [ebp - 0x1428]
cmp eax, edi
jle 0x4c3456
cmp eax, ecx
cmovle edi, eax
mov eax, ecx
cdq
sub eax, edx
mov ecx, eax
mov eax, edi
cdq
sub eax, edx
sar ecx, 1
sar eax, 1
sub ecx, eax
mov eax, dword [ebp - 0x141c]
push 0x10
push edi
cdq
push esi
push ecx
sub eax, edx
mov ecx, eax
mov eax, esi
cdq
sub eax, edx
sar ecx, 1
sar eax, 1
sub ecx, eax
push ecx
push 0
push dword [ebp - 0x14e0]
call dword [0x5de690]
mov edi, dword [ebp - 0x14d8]
mov esi, dword [ebp - 0x14d0]
mov eax, dword [ebp - 0x14b8]
mov eax, dword [eax + 0x90]
test eax, eax
je 0x4c34b6
mov dword [esi + 0x1b58], eax
jmp 0x4c3502
push 0x80
push 0x60deb4
push 0x60debc
push 0x60ded8
lea ecx, [ebp - 0x1d8]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1e4]
call fcn.0051ce70
mov ecx, eax
call fcn.0051ccb0
mov dword [esi + 0x1b58], eax
cmp eax, 0xa
je 0x4c3502
cmp eax, 0xe
je 0x4c3502
mov dword [esi + 0x1b58], 0xc
mov ecx, edi
call fcn.004fdbd0
push 0x3c
push 0
push dword [ebp - 0x14c0]
call fcn.00420580
add esp, 0xc
mov ecx, edi
push dword [ebp - 0x14e0]
call fcn.004f9350
mov eax, dword [ebp - 0x14b8]
test byte [eax + 0x8c], 4
je 0x4c3545
push 7
push dword [eax + 0x7c]
mov ecx, edi
call fcn.004fb3a0
jmp 0x4c357e
push 0
push 1
push 0xb
push dword [ebp - 0x14e0]
call dword [0x5de7fc]
push 0x487
push 0
push 0
push dword [ebp - 0x14e0]
call dword [0x5de7a4]
push 0
push 2
push 6
push dword [ebp - 0x14e0]
call dword [0x5de7fc]
call fcn.0051adc0
cmp dword [ebp - 0x14c8], 0
je 0x4c359a
mov eax, dword [ebp - 0x14b8]
mov ecx, dword [eax + 4]
call fcn.00404030
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x60dee8
xorps xmm0, xmm0
mov dword [ebp - 0x244], 0
push 0x60df30
lea ecx, [esi + 0x264]
movq qword [ebp - 0x24c], xmm0
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x24c]
call fcn.0051e0c0
mov eax, dword [ebp - 0x14b8]
mov byte [ebp - 4], 0x1d
test byte [eax + 0x8c], 1
je 0x4c36f8
lea eax, [ebp - 0x1c4]
push eax
push 0
push esi
push 0x499f10
push 0
push 0
call dword [0x5de380]
push eax
lea ecx, [ebp - 0x1420]
call fcn.00401620
mov eax, dword [ebp - 0x10c]
test eax, eax
jle 0x4c3632
push 0x40
push eax
mov ecx, edi
call fcn.004f4b70
push 0x22
push dword [ebp - 0x118]
mov ecx, edi
call fcn.004f4b70
push 1
push dword [ebp - 0x11c]
mov ecx, edi
call fcn.004f4b70
push 0x40
push dword [ebp - 0x120]
mov ecx, edi
call fcn.004f4b70
push 0x40
push dword [ebp - 0xfc]
mov ecx, edi
call fcn.004f4b70
push 0x40
push dword [ebp - 0x58]
mov ecx, edi
call fcn.004f4b70
push 0x40
push dword [ebp - 0x54]
mov ecx, edi
call fcn.004f4b70
lea eax, [ebp - 0x143c]
mov ecx, edi
push eax
push dword [ebp - 0x114]
call fcn.004fcac0
push eax
call dword [0x5de6b0]
test eax, eax
je 0x4c36eb
push 2
lea eax, [ebp - 0x143c]
push eax
push dword [ebp - 0x14e0]
push 0
call dword [0x5de764]
mov eax, dword [ebp - 0x1438]
lea ecx, [ebp - 0x24c]
push 0
add eax, 2
push eax
mov eax, dword [ebp - 0x143c]
add eax, 0x78
push eax
push 0xffffffffffffffff
push 0xffffffffffffffff
push 4
call fcn.0051dd30
push eax
mov ecx, esi
call fcn.00492210
lea ecx, [ebp - 0x310]
call fcn.00512410
jmp 0x4c3713
push 0
push 0
push esi
push 0x499e80
push 0
push 0
call dword [0x5de380]
push eax
call dword [0x5de390]
xorps xmm0, xmm0
lea ecx, [ebp - 0x348]
movups xmmword [ebp - 0x348], xmm0
movups xmmword [ebp - 0x338], xmm0
call fcn.004f0290
push 1
mov ecx, edi
mov byte [ebp - 4], 0x1e
call fcn.004fd4b0
push 0
mov ecx, esi
call fcn.004c0790
test eax, eax
je 0x4c52da
nop dword [eax]
cmp byte [ebp - 0x14b9], 1
jne 0x4c378b
nop dword [eax]
push 1
mov ecx, esi
call fcn.004c0790
test eax, eax
jne 0x4c3760
mov eax, dword [ebp - 0x14c0]
mov ecx, dword [ebp - 0x14c0]
mov byte [ebp - 0x14b9], 2
mov dword [eax + 0x30], edi
mov eax, dword [ebp - 0x108]
mov dword [ecx], eax
mov eax, dword [ebp - 0x14c0]
mov ecx, dword [eax]
cmp ecx, 0xfffffffa
je 0x4c521c
cmp ecx, 0xffffffe1
je 0x4c521c
cmp dword [eax + 0x30], edi
jne 0x4c44cd
cmp byte [ebp - 0x14ba], 1
jne 0x4c37d6
cmp ecx, 0xffffff31
jne 0x4c37d6
lea ecx, [ebp - 0x328]
call fcn.00512410
mov byte [ebp - 0x14ba], 2
jmp 0x4c5320
cmp ecx, 0xffffffea
jne 0x4c37fe
mov edx, dword [eax + 0xc]
cmp edx, dword [ebp - 0xa8]
je 0x4c380a
cmp edx, dword [ebp - 0xa4]
je 0x4c380a
cmp edx, dword [ebp - 0xa0]
je 0x4c380a
cmp edx, dword [ebp - 0x90]
je 0x4c380a
cmp ecx, dword [ebp - 0x100]
jne 0x4c3a99
cmp ecx, dword [ebp - 0x100]
sete byte [ebp - 0x14c1]
cmp dword [esi + 0x1b50], 0
je 0x4c3827
mov ecx, esi
call fcn.004990f0
push 0
push 0
push 0x130b
push dword [ebp - 0xe4]
mov ecx, edi
call fcn.004fcac0
push eax
call dword [0x5de7fc]
push eax
mov ecx, esi
mov dword [ebp - 0x14c8], eax
call fcn.00491190
push eax
mov ecx, edi
call fcn.004fcac0
cmp byte [ebp - 0x14c1], 0
mov dword [ebp - 0x14d4], eax
je 0x4c38ae
push eax
call dword [0x5de730]
cmp byte [ebp - 0x14ba], 2
jne 0x4c38a1
xorps xmm1, xmm1
lea ecx, [ebp - 0x328]
call fcn.005123c0
movsd xmm1, qword [0x6be5b0]
comisd xmm1, xmm0
jbe 0x4c38a1
mov byte [ebp - 0x14ba], 0
jmp 0x4c5320
mov eax, dword [ebp - 0x14d4]
mov byte [ebp - 0x14ba], 1
cmp dword [ebp - 0x14c8], 7
ja 0x4c39ca
push 0
push 0
push 0x1004
push eax
call dword [0x5de7fc]
test eax, eax
jne 0x4c38ef
mov esi, 0x33
push 0x40
push dword [ebp + esi*4 - 0x148]
mov ecx, edi
call fcn.004f4b70
inc esi
cmp esi, 0x38
jl 0x4c38d4
jmp 0x4c39e6
push 2
push 0xffffffffffffffff
push 0x100c
push dword [ebp - 0x14d4]
call dword [0x5de7fc]
mov ecx, eax
mov eax, 0x20
cmp ecx, 0xffffffff
mov dword [ebp - 0x1c4], ecx
mov ecx, 0x40
cmove eax, ecx
mov ecx, edi
push eax
push dword [ebp - 0x6c]
mov dword [ebp - 0x141c], eax
call fcn.004f4b70
push dword [ebp - 0x141c]
mov ecx, edi
push dword [ebp - 0x7c]
call fcn.004f4b70
push dword [ebp - 0x141c]
mov ecx, edi
push dword [ebp - 0x78]
call fcn.004f4b70
push 0x20
push dword [ebp - 0x74]
mov ecx, edi
call fcn.004f4b70
push 0x20
push dword [ebp - 0x70]
mov ecx, edi
call fcn.004f4b70
push 0x20
push dword [ebp - 0x40]
mov ecx, edi
call fcn.004f4b70
cmp dword [ebp - 0x14c8], 3
je 0x4c3981
mov ecx, 0x40
jmp 0x4c39ae
mov ecx, dword [ebp - 0x141c]
cmp ecx, 0x20
jne 0x4c39b4
mov edx, dword [ebp - 0x1c4]
mov ecx, dword [ebp - 0x14d4]
call fcn.00500760
mov ecx, dword [ebp - 0x141c]
cmp eax, 0x51
mov eax, 0x40
cmovne ecx, eax
mov dword [ebp - 0x141c], ecx
push ecx
push dword [ebp - 0xc4]
mov ecx, edi
call fcn.004f4b70
push dword [ebp - 0x141c]
jmp 0x4c3a09
mov esi, 0x33
nop
push 0x40
push dword [ebp + esi*4 - 0x148]
mov ecx, edi
call fcn.004f4b70
inc esi
cmp esi, 0x38
jl 0x4c39d0
mov esi, dword [ebp - 0x14d0]
mov ecx, edi
push 0x40
push dword [ebp - 0x40]
call fcn.004f4b70
push 0x40
push dword [ebp - 0xc4]
mov ecx, edi
call fcn.004f4b70
push 0x40
push dword [ebp - 0x30]
mov ecx, edi
call fcn.004f4b70
lea ecx, [esi + 0x60]
call fcn.0051da30
test al, al
mov ecx, 0x20
mov eax, 0x40
cmovne ecx, eax
push ecx
push dword [ebp - 0x50]
mov ecx, edi
call fcn.004f4b70
cmp byte [ebp - 0x14c1], 0
je 0x4c3a81
lea eax, [ebp - 0x143c]
mov ecx, edi
push eax
push dword [ebp - 0x100]
call fcn.004fcac0
push eax
call dword [0x5de6b0]
test eax, eax
je 0x4c3a81
mov eax, dword [ebp - 0x1430]
mov ecx, edi
inc eax
push eax
mov eax, dword [ebp - 0x1434]
inc eax
push eax
push 8
push dword [ebp - 0xe4]
call fcn.004f3760
jmp 0x4c3b1b
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push dword [ebp - 0xe4]
mov ecx, edi
call fcn.004f3760
jmp 0x4c3b1b
mov edx, dword [ebp - 0x120]
cmp ecx, edx
jne 0x4c3ac9
push 4
push edx
mov ecx, edi
call fcn.004f3c80
test eax, eax
mov eax, dword [ebp - 0x14c0]
je 0x4c3ac0
and dword [esi + 0x34], 0xfffffdff
jmp 0x4c3b21
or dword [esi + 0x34], 0x200
jmp 0x4c3b21
mov edx, dword [ebp - 0xfc]
cmp ecx, edx
jne 0x4c3af3
push 4
push edx
mov ecx, edi
call fcn.004f3c80
test eax, eax
mov eax, dword [ebp - 0x14c0]
je 0x4c3aed
or dword [esi + 0x34], 0x40
jmp 0x4c3b21
and dword [esi + 0x34], 0xffffffbf
jmp 0x4c3b21
mov edx, dword [ebp - 0xf8]
cmp ecx, edx
jne 0x4c3b21
push 4
push edx
mov ecx, edi
call fcn.004f3c80
test eax, eax
je 0x4c3b14
or dword [esi + 0x34], 0x80
jmp 0x4c3b1b
and dword [esi + 0x34], 0xffffff7f
mov eax, dword [ebp - 0x14c0]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x11c]
cmp eax, ecx
jne 0x4c3cd7
cmp dword [esi + 0x1b50], 0
je 0x4c3b41
mov ecx, esi
call fcn.004990f0
mov ecx, dword [ebp - 0x142c]
cmp ecx, 0xffffffff
je 0x4c3b74
test ecx, ecx
je 0x4c3b74
xor edx, edx
call fcn.00503650
test al, al
je 0x4c3b74
push 0
push dword [ebp - 0x142c]
call dword [0x5de41c]
lea ecx, [ebp - 0x142c]
call fcn.00401670
lea ecx, [esi + 0x9c]
mov byte [esi + 0x14], 0
mov dword [esi + 0x24], 0
mov dword [esi + 0x28], 0
call fcn.0051dfa0
lea eax, [ebp - 0x1ec]
push eax
push 0
push esi
push 0x499f10
push 0
push 0
call dword [0x5de380]
push eax
lea ecx, [ebp - 0x1420]
call fcn.00401620
mov eax, 0xf
mov dword [ebp - 0x14c8], eax
mov ecx, dword [ebp + eax*4 - 0x148]
test ecx, ecx
jle 0x4c3bdc
push 0x40
push ecx
mov ecx, edi
call fcn.004f4b70
mov eax, dword [ebp - 0x14c8]
inc eax
mov dword [ebp - 0x14c8], eax
cmp eax, 0x11
jl 0x4c3bc1
push 0x22
push dword [ebp - 0x118]
mov ecx, edi
call fcn.004f4b70
mov ecx, dword [esi + 4]
push 0x186a0
push 0
push 0x60c6c4
push dword [ebp - 0x118]
call fcn.004f4270
push 1
push dword [ebp - 0x11c]
mov ecx, edi
call fcn.004f4b70
push 0x40
push dword [ebp - 0x120]
mov ecx, edi
call fcn.004f4b70
push 0x40
push dword [ebp - 0xfc]
mov ecx, edi
call fcn.004f4b70
push 0x40
push dword [ebp - 0x58]
mov ecx, edi
call fcn.004f4b70
push 0x40
push dword [ebp - 0x54]
mov ecx, edi
call fcn.004f4b70
push 0x40
push dword [ebp - 0x34]
mov ecx, edi
call fcn.004f4b70
lea eax, [ebp - 0x143c]
mov ecx, edi
push eax
push dword [ebp - 0x114]
call fcn.004fcac0
push eax
call dword [0x5de6b0]
test eax, eax
je 0x4c3cc7
push 2
lea eax, [ebp - 0x143c]
push eax
push dword [ebp - 0x14e0]
push 0
call dword [0x5de764]
mov eax, dword [ebp - 0x1438]
lea ecx, [ebp - 0x24c]
push 0
add eax, 2
push eax
mov eax, dword [ebp - 0x143c]
add eax, 0x78
push eax
push 0xffffffffffffffff
push 0xffffffffffffffff
push 4
call fcn.0051dd30
push eax
mov ecx, esi
call fcn.00492210
lea ecx, [ebp - 0x310]
call fcn.00512410
jmp 0x4c5320
cmp eax, dword [ebp - 0x34]
je 0x4c47b1
cmp eax, 0xfffffffb
je 0x4c47b1
cmp eax, dword [ebp - 0x2c]
jne 0x4c3d5b
cmp dword [esi + 0x1b50], 0
je 0x4c3d04
mov ecx, esi
call fcn.004990f0
mov ecx, dword [ebp - 0x11c]
push 0xd
push dword [ebp - 0x13c]
xorps xmm0, xmm0
push dword [ebp - 0xe4]
movups xmmword [ebp - 0x2d8], xmm0
push ecx
push edi
lea ecx, [ebp - 0x2d8]
movups xmmword [ebp - 0x2c8], xmm0
call fcn.004f0200
lea ecx, [ebp - 0x1d8]
mov byte [ebp - 4], 0x23
call fcn.0051dd30
push eax
mov ecx, esi
call fcn.00492cb0
lea ecx, [ebp - 0x2d8]
mov byte [ebp - 4], 0x1e
call fcn.004f0190
jmp 0x4c44cd
cmp eax, dword [ebp - 0x138]
jne 0x4c3e28
mov eax, dword [ebp - 0x1420]
cmp eax, 0xffffffff
je 0x4c3e0c
test eax, eax
je 0x4c3e0c
lea ecx, [esi + 0x5a8]
call fcn.004ef0f0
push 0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0xb4
push 1
push 0x60df68
mov ecx, esi
call fcn.00492210
test eax, eax
je 0x4c5320
mov edi, dword [0x5de480]
push 0
push dword [ebp - 0x1420]
mov byte [esi + 0x14], 1
call edi
cmp eax, 0x102
jne 0x4c3dfc
mov esi, dword [ebp - 0x14c0]
nop dword [eax]
mov dl, 1
mov ecx, esi
call fcn.004ff4e0
test eax, eax
jne 0x4c3de5
push 0xa
call dword [0x5de438]
push 0
push dword [ebp - 0x1420]
call edi
cmp eax, 0x102
je 0x4c3dd0
mov esi, dword [ebp - 0x14d0]
lea ecx, [ebp - 0x1420]
call fcn.00401670
jmp 0x4c52da
mov eax, dword [ebp - 0x1440]
cmp eax, 0xffffffff
je 0x4c52da
test eax, eax
je 0x4c52da
jmp 0x4c5320
cmp eax, dword [ebp - 0x118]
jne 0x4c3e39
mov byte [esi + 0x14], 1
jmp 0x4c44cd
cmp eax, dword [ebp - 0x108]
jne 0x4c3f47
cmp dword [esi + 0x1b50], 0
je 0x4c3e55
mov ecx, esi
call fcn.004990f0
mov cl, byte [ebp - 0x14b9]
test cl, cl
jne 0x4c3e84
push 0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0xb4
push 1
push 0x60dff8
mov ecx, esi
call fcn.00492210
test eax, eax
je 0x4c5320
jmp 0x4c3e98
movzx eax, cl
cmp cl, 1
mov ecx, 3
cmova eax, ecx
mov byte [ebp - 0x14b9], al
push 0x40
push dword [ebp - 0x10c]
mov ecx, edi
call fcn.004f4b70
push 0x40
push dword [ebp - 0x108]
mov ecx, edi
call fcn.004f4b70
push 0x40
push dword [ebp - 0x100]
mov ecx, edi
call fcn.004f4b70
push 0x40
push dword [ebp - 0xf8]
mov ecx, edi
call fcn.004f4b70
push 0x40
push dword [ebp - 0x34]
mov ecx, edi
call fcn.004f4b70
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xfa
push 0x2a8
push edi
push 0x60e0c8
lea ecx, [esi + 0x840]
call fcn.004ee320
cmp byte [ebp - 0x14c9], 0
jne 0x4c3f22
push 1
push 5
push 0
push 0xffffffffffffffb0
lea ecx, [esi + 0x840]
call fcn.004ee190
mov ecx, eax
call fcn.004edde0
push 0
push 0
push esi
push 0x4b5300
push 0
push 0
call dword [0x5de380]
push eax
lea ecx, [ebp - 0x1440]
call fcn.00401620
jmp 0x4c44cd
cmp eax, dword [ebp - 0x6c]
jne 0x4c3fbc
cmp dword [esi + 0x1b50], 0
je 0x4c3f5c
mov ecx, esi
call fcn.004990f0
push 0
push 0
push 0x130b
push dword [ebp - 0xe4]
mov ecx, edi
call fcn.004f6680
push eax
mov ecx, esi
call fcn.00491190
mov dword [ebp - 0x1c4], eax
test eax, eax
je 0x4c5320
push 2
push 0xffffffffffffffff
push 0x100c
push eax
mov ecx, edi
call fcn.004fcac0
push eax
call dword [0x5de7fc]
cmp eax, 0xffffffff
je 0x4c5320
push eax
push dword [ebp - 0x1c4]
mov ecx, esi
call fcn.00490b70
jmp 0x4c44cd
cmp eax, dword [ebp - 0x30]
jne 0x4c40f4
cmp dword [esi + 0x1b50], 0
je 0x4c3fd5
mov ecx, esi
call fcn.004990f0
push 0
push 0
push 0x130b
push dword [ebp - 0xe4]
mov ecx, edi
call fcn.004f6680
push eax
mov ecx, esi
call fcn.00491190
mov dword [ebp - 0x14d4], eax
test eax, eax
je 0x4c5320
push 2
push 0xffffffffffffffff
push 0x100c
push eax
mov ecx, edi
call fcn.004fcac0
push eax
call dword [0x5de7fc]
mov dword [ebp - 0x14c8], eax
cmp eax, 0xffffffff
je 0x4c5320
mov ecx, dword [esi + 4]
push eax
push dword [ebp - 0x14d4]
call fcn.004f2e50
cmp eax, 0x51
jne 0x4c5320
mov ecx, dword [esi + 4]
xorps xmm0, xmm0
push 0
push 0
push dword [ebp - 0x14c8]
movq qword [ebp - 0x270], xmm0
push dword [ebp - 0x14d4]
mov dword [ebp - 0x268], 0
call fcn.004f2da0
push eax
lea ecx, [ebp - 0x270]
call fcn.0051e110
push 0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0x96
push 1
push 0x60e120
mov ecx, esi
mov byte [ebp - 4], 0x24
call fcn.00492210
lea ecx, [ebp - 0x270]
test eax, eax
jne 0x4c40b0
mov byte [ebp - 4], 0x1e
call fcn.0051dfd0
jmp 0x4c5320
push 1
call fcn.0051da50
mov ecx, eax
call fcn.0051dd30
push eax
mov ecx, esi
call fcn.00498970
test al, al
je 0x4c40e0
mov ecx, dword [esi + 4]
push 0
push dword [ebp - 0x14c8]
push dword [ebp - 0x14d4]
call fcn.004f31f0
lea ecx, [ebp - 0x270]
mov byte [ebp - 4], 0x1e
call fcn.0051dfd0
jmp 0x4c44cd
cmp eax, dword [ebp - 0x40]
jne 0x4c413c
cmp dword [esi + 0x1b50], 0
je 0x4c4109
mov ecx, esi
call fcn.004990f0
push 0
push 0
push 0x130b
push dword [ebp - 0xe4]
mov ecx, edi
call fcn.004f6680
push eax
mov ecx, esi
call fcn.00491190
test eax, eax
je 0x4c44cd
push eax
mov ecx, esi
call fcn.004910d0
jmp 0x4c44cd
cmp eax, dword [ebp - 0x3c]
jne 0x4c415f
cmp dword [esi + 0x1b50], 0
je 0x4c4151
mov ecx, esi
call fcn.004990f0
push 0xffffffffffffffff
mov ecx, esi
call fcn.004910d0
jmp 0x4c44cd
cmp eax, dword [ebp - 0x58]
jne 0x4c4230
mov esi, 0x28
nop dword [eax]
push 0
push 0
push 0x1009
push dword [ebp + esi*4 - 0x148]
mov ecx, edi
call fcn.004f6680
inc esi
cmp esi, 0x2f
jl 0x4c4170
mov esi, 0xf
push 1
push dword [ebp + esi*4 - 0x148]
mov ecx, edi
call fcn.004f4b70
inc esi
cmp esi, 0x12
jl 0x4c4192
mov esi, dword [ebp - 0x14d0]
mov ecx, edi
push 0x22
push dword [ebp - 0x120]
call fcn.004f4b70
push 0x22
push dword [ebp - 0x11c]
mov ecx, edi
call fcn.004f4b70
push 0x22
push dword [ebp - 0x114]
mov ecx, edi
call fcn.004f4b70
push 0x22
push dword [ebp - 0xfc]
mov ecx, edi
call fcn.004f4b70
push 1
push dword [ebp - 0x118]
mov ecx, edi
call fcn.004f4b70
push 1
push dword [ebp - 0xf8]
mov ecx, edi
call fcn.004f4b70
push 0
push dword [ebp - 0x114]
mov ecx, edi
call fcn.004f1310
push 0
push 0x60cb44
push dword [ebp - 0x110]
mov ecx, edi
call fcn.004f44b0
jmp 0x4c44cd
cmp eax, dword [ebp - 0x54]
jne 0x4c42da
cmp dword [esi + 0x1b50], 0
je 0x4c4249
mov ecx, esi
call fcn.004990f0
lea ecx, [esi + 0x54]
call fcn.0051da30
test al, al
jne 0x4c5320
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
xorps xmm0, xmm0
mov dword [ebp - 0x28c], 0
push 0x5ff6d4
lea ecx, [esi + 0x54]
movq qword [ebp - 0x294], xmm0
call fcn.0051dd30
push eax
push 0x60a0fc
lea ecx, [ebp - 0x228]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x294]
call fcn.0051e0c0
push 2
push 5
push 0
lea ecx, [ebp - 0x294]
mov byte [ebp - 4], 0x25
call fcn.0051dd30
mov edx, eax
xor ecx, ecx
call fcn.0050aaf0
lea ecx, [ebp - 0x294]
mov byte [ebp - 4], 0x1e
call fcn.0051dfd0
jmp 0x4c44cd
cmp eax, dword [ebp - 0x50]
jne 0x4c4384
cmp dword [esi + 0x1b50], 0
je 0x4c42f3
mov ecx, esi
call fcn.004990f0
lea ecx, [esi + 0x60]
call fcn.0051da30
test al, al
jne 0x4c5320
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
xorps xmm0, xmm0
mov dword [ebp - 0x298], 0
push 0x5ff6d4
lea ecx, [esi + 0x60]
movq qword [ebp - 0x2a0], xmm0
call fcn.0051dd30
push eax
push 0x60a0fc
lea ecx, [ebp - 0x228]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2a0]
call fcn.0051e0c0
push 2
push 5
push 0
lea ecx, [ebp - 0x2a0]
mov byte [ebp - 4], 0x26
call fcn.0051dd30
mov edx, eax
xor ecx, ecx
call fcn.0050aaf0
lea ecx, [ebp - 0x2a0]
mov byte [ebp - 4], 0x1e
call fcn.0051dfd0
jmp 0x4c44cd
cmp eax, dword [ebp - 0x4c]
jne 0x4c441c
cmp dword [esi + 0x1b50], 0
je 0x4c439d
mov ecx, esi
call fcn.004990f0
lea eax, [esi + 0x6c]
mov dword [ebp - 0x250], 0
xorps xmm0, xmm0
lea ecx, [ebp - 0x258]
push eax
movq qword [ebp - 0x258], xmm0
call fcn.0051e150
push 4
push 1
push 1
push 1
push 0x5fe594
lea ecx, [ebp - 0x258]
mov byte [ebp - 4], 0x27
call fcn.0051c760
test eax, eax
je 0x4c43ee
push 4
lea ecx, [ebp - 0x258]
call fcn.0051ca50
push 0
push 5
push 0
lea ecx, [ebp - 0x258]
call fcn.0051dd30
xor edx, edx
mov ecx, eax
call fcn.0050aa30
lea ecx, [ebp - 0x258]
mov byte [ebp - 4], 0x1e
call fcn.0051dfd0
jmp 0x4c44cd
cmp eax, dword [ebp - 0x44]
jne 0x4c444c
cmp dword [esi + 0x1b50], 0
je 0x4c4431
mov ecx, esi
call fcn.004990f0
mov eax, dword [ebp - 0x14b8]
mov ecx, esi
push dword [eax + 0x3c]
push dword [ebp - 0x14e8]
call fcn.004911f0
jmp 0x4c44cd
cmp eax, 0xfffffff2
je 0x4c4773
cmp eax, dword [ebp - 0x7c]
je 0x4c4773
cmp eax, dword [ebp - 0x78]
je 0x4c4773
cmp eax, dword [ebp - 0xc4]
jne 0x4c46a0
push 0
push 0
push 0x130b
push dword [ebp - 0xe4]
mov ecx, edi
call fcn.004f6680
push eax
mov ecx, esi
call fcn.00491190
mov ecx, dword [ebp - 0x90]
cmp ecx, eax
jne 0x4c5320
push 0
push ecx
mov ecx, esi
call fcn.004909e0
push 0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
movzx eax, al
mov ecx, esi
push 0
push 4
cmp eax, 1
jne 0x4c4687
push 0x60e238
call fcn.00492210
mov eax, dword [ebp - 0x1420]
cmp eax, 0xffffffff
je 0x4c5027
test eax, eax
je 0x4c5027
xorps xmm1, xmm1
lea ecx, [ebp - 0x310]
call fcn.005123c0
comisd xmm0, xmmword [0x6be5f0]
ja 0x4c4552
mov eax, dword [ebp - 0x14c0]
mov ecx, dword [eax]
lea eax, [ecx + 0x1a]
cmp eax, 0x1a
ja 0x4c4552
cmp ecx, 0xfffffffe
je 0x4c4552
cmp ecx, 0xfffffff9
je 0x4c4552
cmp ecx, 0xfffffff8
je 0x4c4552
cmp ecx, 0xfffffff6
je 0x4c4552
cmp ecx, 0xfffffff3
je 0x4c4552
cmp ecx, 0xfffffff2
je 0x4c4552
cmp ecx, 0xffffffee
je 0x4c4552
cmp ecx, 0xffffffed
je 0x4c4552
cmp ecx, 0xffffffe3
je 0x4c4552
cmp ecx, 0xffffffe4
je 0x4c4552
cmp ecx, 0xffffffec
je 0x4c4552
cmp ecx, 0xffffffe7
je 0x4c4552
cmp ecx, 0xfffffff5
je 0x4c4552
cmp ecx, 0xffffffea
jne 0x4c4568
lea ecx, [esi + 0x5a8]
call fcn.004ef0f0
lea ecx, [ebp - 0x310]
call fcn.00512410
mov ecx, dword [ebp - 0x1420]
xor edx, edx
call fcn.00503650
test al, al
jne 0x4c5320
lea eax, [ebp - 0x1cc]
push eax
push dword [ebp - 0x1420]
call dword [0x5de444]
lea ecx, [ebp - 0x1420]
call fcn.00401670
lea ecx, [esi + 0x5a8]
call fcn.004ef0f0
lea ecx, [esi + 0xb20]
call fcn.004e0ac0
push 0
push 0
push esi
push 0x499ec0
push 0
push 0
mov dword [ebp - 0x1428], 0
call dword [0x5de380]
test eax, eax
mov ecx, 0xffffffff
cmove eax, ecx
mov dword [ebp - 0x1428], eax
push 0
push 0
push esi
push 0x499ef0
push 0
push 0
mov byte [ebp - 4], 0x28
call dword [0x5de380]
push eax
lea ecx, [ebp - 0x142c]
call fcn.00401620
xorps xmm0, xmm0
mov dword [ebp - 0x1f0], 0
lea ecx, [ebp - 0x1f8]
movq qword [ebp - 0x1f8], xmm0
call fcn.0051e180
mov byte [ebp - 4], 0x29
mov eax, dword [ebp - 0x1cc]
mov dword [ebp - 0x1c4], 0x96
cmp eax, 1
jne 0x4c4bbd
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x60e3a0
push 0x60e418
lea ecx, [ebp - 0x1f8]
call fcn.0051dda0
push 0
push 0x60e494
push dword [ebp - 0x110]
mov ecx, edi
call fcn.004f44b0
mov eax, 0xc8
jmp 0x4c4e12
cmp eax, 3
jne 0x4c4696
push 0x60e2e8
jmp 0x4c44c8
push 0x60e350
jmp 0x4c44c8
mov ecx, dword [ebp - 0x74]
cmp eax, ecx
je 0x4c46b2
cmp eax, dword [ebp - 0x70]
jne 0x4c44cd
cmp eax, ecx
push 0
push 0
push 0x130b
push dword [ebp - 0xe4]
mov ecx, edi
sete byte [ebp - 0x14c1]
call fcn.004fcac0
push eax
call dword [0x5de7fc]
push eax
mov ecx, esi
call fcn.00491190
test eax, eax
je 0x4c5320
push eax
mov ecx, edi
call fcn.004fcac0
push 0
push 0
push 0x1004
push eax
mov dword [ebp - 0x14dc], eax
call dword [0x5de7fc]
mov dword [ebp - 0x14c8], eax
mov dword [ebp - 0x1c4], 0
test eax, eax
jle 0x4c44cd
movzx esi, byte [ebp - 0x14c1]
mov edi, dword [ebp - 0x1c4]
inc esi
shl esi, 0xc
nop dword [eax]
lea eax, [ebp - 0x2f4]
mov dword [ebp - 0x2e4], 0xf000
push eax
push edi
push 0x102b
push dword [ebp - 0x14dc]
mov dword [ebp - 0x2e8], esi
call dword [0x5de7fc]
inc edi
cmp edi, dword [ebp - 0x14c8]
jl 0x4c4730
mov edi, dword [ebp - 0x14d8]
mov esi, dword [ebp - 0x14d0]
jmp 0x4c44cd
cmp dword [esi + 0x1b50], 0
je 0x4c479b
mov ecx, esi
call fcn.004990f0
mov ecx, dword [ebp - 0x14c0]
push dword [ecx + 0xc]
mov eax, dword [ecx]
mov ecx, esi
push eax
call fcn.00499650
jmp 0x4c44cd
mov ecx, dword [ebp - 0x14c0]
push dword [ecx + 0xc]
mov ecx, esi
push eax
call fcn.00499650
jmp 0x4c44cd
xorps xmm0, xmm0
mov dword [ebp - 0x1fc], 0
lea ecx, [ebp - 0x204]
movq qword [ebp - 0x204], xmm0
call fcn.0051e180
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x264]
xorps xmm0, xmm0
mov dword [ebp - 0x25c], 0
movq qword [ebp - 0x264], xmm0
call fcn.0051e180
mov eax, dword [ebp - 0x14c0]
mov byte [ebp - 4], 0x20
cmp dword [eax], 0xfffffffb
jne 0x4c4943
mov ecx, edi
call fcn.004fcb60
push eax
lea ecx, [ebp - 0x204]
call fcn.0051dd60
xorps xmm0, xmm0
lea ecx, [ebp - 0x204]
push 1
push 0x60477c
movups xmmword [ebp - 0x288], xmm0
movq qword [ebp - 0x278], xmm0
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x288]
call fcn.0051b070
push 0
lea ecx, [ebp - 0x288]
mov byte [ebp - 4], 0x21
call fcn.0051aff0
push eax
call dword [0x5de638]
lea ecx, [ebp - 0x288]
test eax, eax
je 0x4c4885
push 0
call fcn.0051aff0
push eax
lea ecx, [ebp - 0x204]
call fcn.0051e0b0
jmp 0x4c4934
call fcn.0051afe0
cmp eax, 1
jbe 0x4c4934
push 0
push 1
push 0
lea ecx, [ebp - 0x288]
call fcn.0051aff0
push eax
lea ecx, [ebp - 0x204]
call fcn.0051de00
mov ecx, eax
call fcn.0051da50
lea ecx, [ebp - 0x288]
mov dword [ebp - 0x1c4], 0
call fcn.0051afe0
test eax, eax
je 0x4c4934
mov esi, dword [ebp - 0x1c4]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5c
push 1
push esi
lea ecx, [ebp - 0x288]
call fcn.0051aff0
push eax
lea ecx, [ebp - 0x264]
call fcn.0051de00
mov ecx, eax
call fcn.0051db40
push eax
push 0x5fe640
lea ecx, [ebp - 0x204]
call fcn.0051c4c0
lea ecx, [ebp - 0x288]
inc esi
call fcn.0051afe0
cmp esi, eax
jb 0x4c48d6
mov esi, dword [ebp - 0x14d0]
lea ecx, [ebp - 0x288]
mov byte [ebp - 4], 0x20
call fcn.0051b050
cmp dword [esi + 0x1b50], 0
je 0x4c4953
mov ecx, esi
call fcn.004990f0
push 0xd
push dword [ebp - 0x13c]
xorps xmm0, xmm0
lea ecx, [ebp - 0x2d8]
push dword [ebp - 0xe4]
movups xmmword [ebp - 0x2d8], xmm0
push dword [ebp - 0x11c]
movups xmmword [ebp - 0x2c8], xmm0
push edi
call fcn.004f0200
lea ecx, [ebp - 0x204]
mov byte [ebp - 4], 0x22
call fcn.0051dd30
push eax
mov ecx, esi
call fcn.00492400
cmp eax, 0xffffffff
jne 0x4c49ca
lea ecx, [ebp - 0x2d8]
call fcn.004f0190
lea ecx, [ebp - 0x264]
call fcn.0051dfd0
lea ecx, [ebp - 0x204]
mov byte [ebp - 4], 0x1e
call fcn.0051dfd0
jmp 0x4c5320
push 0
push 3
push 0x1330
push dword [ebp - 0xe4]
mov ecx, edi
call fcn.004f6680
mov ecx, dword [ebp - 0x142c]
cmp ecx, 0xffffffff
je 0x4c4a13
test ecx, ecx
je 0x4c4a13
xor edx, edx
call fcn.00503650
test al, al
je 0x4c4a13
push 0
push dword [ebp - 0x142c]
call dword [0x5de41c]
lea ecx, [ebp - 0x142c]
call fcn.00401670
lea eax, [ebp - 0x1c8]
mov byte [esi + 0x14], 0
push eax
push 0
push esi
push 0x499e60
push 0
push 0
mov dword [esi + 0x24], 0
mov dword [esi + 0x28], 0
call dword [0x5de380]
push eax
lea ecx, [ebp - 0x1420]
call fcn.00401620
mov eax, 0xf
mov dword [ebp - 0x14c8], eax
mov ecx, dword [ebp + eax*4 - 0x148]
test ecx, ecx
jle 0x4c4a70
push 0x40
push ecx
mov ecx, edi
call fcn.004f4b70
mov eax, dword [ebp - 0x14c8]
inc eax
mov dword [ebp - 0x14c8], eax
cmp eax, 0x11
jl 0x4c4a55
push 0x22
push dword [ebp - 0x118]
mov ecx, edi
call fcn.004f4b70
push 0x22
push dword [ebp - 0x114]
mov ecx, edi
call fcn.004f4b70
mov ecx, dword [esi + 4]
push 0x186a0
push 0
push 0x60c6c4
push dword [ebp - 0x118]
call fcn.004f4270
push 1
push dword [ebp - 0x11c]
mov ecx, edi
call fcn.004f4b70
push 1
push dword [ebp - 0x108]
mov ecx, edi
call fcn.004f4b70
push 1
push dword [ebp - 0x104]
mov ecx, edi
call fcn.004f4b70
push 0x40
push dword [ebp - 0x120]
mov ecx, edi
call fcn.004f4b70
push 0x40
push dword [ebp - 0xfc]
mov ecx, edi
call fcn.004f4b70
push 0x40
push dword [ebp - 0x58]
mov ecx, edi
call fcn.004f4b70
push 0x40
push dword [ebp - 0x54]
mov ecx, edi
call fcn.004f4b70
push 0x40
push dword [ebp - 0x34]
mov ecx, edi
call fcn.004f4b70
lea eax, [ebp - 0x143c]
mov ecx, edi
push eax
push dword [ebp - 0x114]
call fcn.004fcac0
push eax
call dword [0x5de6b0]
test eax, eax
je 0x4c4b88
push 2
lea eax, [ebp - 0x143c]
push eax
push dword [ebp - 0x14e0]
push 0
call dword [0x5de764]
mov eax, dword [ebp - 0x1438]
lea ecx, [ebp - 0x24c]
push 0
add eax, 2
push eax
mov eax, dword [ebp - 0x143c]
add eax, 0x78
push eax
push 0xffffffffffffffff
push 0xffffffffffffffff
push 4
call fcn.0051dd30
push eax
mov ecx, esi
call fcn.00492210
lea ecx, [ebp - 0x310]
call fcn.00512410
lea ecx, [ebp - 0x2d8]
call fcn.004f0190
lea ecx, [ebp - 0x264]
call fcn.0051dfd0
lea ecx, [ebp - 0x204]
mov byte [ebp - 4], 0x1e
call fcn.0051dfd0
jmp 0x4c5320
cmp eax, 3
jne 0x4c4c07
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x60e4c0
push 0x60e568
push 0x60e5d8
lea ecx, [ebp - 0x1f8]
call fcn.0051dda0
push 0
push 0x60e664
push dword [ebp - 0x110]
mov ecx, edi
call fcn.004f44b0
jmp 0x4c4e0d
cmp dword [esi + 0x28], 0
jne 0x4c4c7d
cmp dword [esi + 0x24], 0
jne 0x4c4c7d
cmp byte [esi + 0x14], 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
jne 0x4c4c59
push 0x60eab0
push 0x60eb00
lea ecx, [esi + 0x264]
call fcn.0051dd30
push eax
push 0x60eb54
lea ecx, [ebp - 0x1f8]
call fcn.0051dda0
mov eax, 0xdc
jmp 0x4c4e12
push 0
push 0
push 0x60eb80
push 0x60ebb8
lea ecx, [ebp - 0x1f8]
call fcn.0051dda0
mov eax, dword [ebp - 0x1c4]
jmp 0x4c4e12
xorps xmm0, xmm0
mov dword [ebp - 0x214], 0
lea ecx, [ebp - 0x21c]
movq qword [ebp - 0x21c], xmm0
call fcn.0051e180
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0x210]
xorps xmm0, xmm0
mov dword [ebp - 0x208], 0
movq qword [ebp - 0x210], xmm0
call fcn.0051e180
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0x21c]
push dword [esi + 0x28]
call fcn.0051cf20
mov eax, dword [esi + 0x28]
lea ecx, [ebp - 0x21c]
test eax, eax
jne 0x4c4ce7
call fcn.0051dfa0
jmp 0x4c4d19
cmp eax, 1
jne 0x4c4cf9
push eax
push 0x60e6a0
call fcn.0051de00
jmp 0x4c4d19
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x60e710
call fcn.0051c4c0
mov eax, dword [esi + 0x24]
lea ecx, [ebp - 0x210]
sub eax, dword [esi + 0x28]
push eax
mov dword [ebp - 0x1c4], eax
call fcn.0051cf20
cmp dword [esi + 0x24], 0
lea ecx, [ebp - 0x210]
jne 0x4c4d49
push 0x60e778
call fcn.0051e0b0
jmp 0x4c4d90
mov eax, dword [ebp - 0x1c4]
test eax, eax
jne 0x4c4d5f
push 0x60e7a4
call fcn.0051e0b0
jmp 0x4c4d90
cmp eax, 1
jne 0x4c4d70
push 0x60e7c8
call fcn.0051e0b0
jmp 0x4c4d90
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x60e7ec
call fcn.0051c4c0
push 0
push 0
push 0
push 0
push 0
push 0x60e810
lea ecx, [esi + 0x9c]
call fcn.0051df40
test eax, eax
mov ecx, 0x60ea34
mov eax, 0x60ea54
cmove ecx, eax
push ecx
push 0x60ea70
lea ecx, [ebp - 0x210]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x21c]
call fcn.0051dd30
push eax
push 0x60ea9c
lea ecx, [esi + 0x264]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1f8]
call fcn.0051dda0
lea ecx, [ebp - 0x210]
call fcn.0051dfd0
lea ecx, [ebp - 0x21c]
mov byte [ebp - 4], 0x29
call fcn.0051dfd0
mov eax, 0xfa
mov ecx, dword [ebp - 0x14b8]
test byte [ecx + 0x8c], 0x10
je 0x4c4e3a
cmp byte [esi + 0x14], 0
jne 0x4c4e3a
cmp dword [esi + 0x28], 0
je 0x4c5333
mov byte [ebp - 0x14b9], 1
jmp 0x4c4ea4
cmp dword [esi + 0x28], 0
jne 0x4c4e66
cmp dword [esi + 0x24], 0
jne 0x4c4e66
push 0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push eax
push 0
lea ecx, [ebp - 0x1f8]
call fcn.0051dd30
push eax
mov ecx, esi
call fcn.00492210
jmp 0x4c4ea4
push 0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x1c2
push eax
push 1
lea ecx, [ebp - 0x1f8]
call fcn.0051dd30
push eax
mov ecx, esi
call fcn.00492210
cmp eax, 1
jne 0x4c4ea4
cmp dword [esi + 0x1b50], 0
jne 0x4c4ea4
cmp dword [esi + 0x1b54], 0
jne 0x4c4ea4
mov dword [esi + 0x1b54], eax
cmp dword [esi + 0x24], 0
mov esi, 0xf
je 0x4c4f20
nop
push 0x22
push dword [ebp + esi*4 - 0x148]
mov ecx, edi
call fcn.004f4b70
inc esi
cmp esi, 0x12
jl 0x4c4eb0
mov esi, 0xa
nop dword [eax + eax]
push 1
push dword [ebp + esi*4 - 0x148]
mov ecx, edi
call fcn.004f4b70
inc esi
cmp esi, 0xe
jl 0x4c4ed0
mov esi, dword [ebp - 0x14d0]
mov ecx, edi
push 0x22
push dword [ebp - 0xf8]
call fcn.004f4b70
push 1
push dword [ebp - 0xfc]
mov ecx, edi
call fcn.004f4b70
push 0
push 0x60ebf0
jmp 0x4c4fac
push 1
push dword [ebp + esi*4 - 0x148]
mov ecx, edi
call fcn.004f4b70
inc esi
cmp esi, 0x12
jl 0x4c4f20
mov esi, dword [ebp - 0x14d0]
mov ecx, edi
push 0x22
push dword [ebp - 0x120]
call fcn.004f4b70
push 0x22
push dword [ebp - 0x11c]
mov ecx, edi
call fcn.004f4b70
push 0x22
push dword [ebp - 0x114]
mov ecx, edi
call fcn.004f4b70
push 0x22
push dword [ebp - 0xf8]
mov ecx, edi
call fcn.004f4b70
push 1
push dword [ebp - 0x118]
mov ecx, edi
call fcn.004f4b70
push 1
push dword [ebp - 0xfc]
mov ecx, edi
call fcn.004f4b70
push 0
push dword [ebp - 0x114]
mov ecx, edi
call fcn.004f1310
push 0
push 0x60ec14
push dword [ebp - 0x110]
mov ecx, edi
call fcn.004f44b0
mov ecx, dword [esi + 0x538]
mov eax, dword [esi + 0x28]
push 0x20
mov dword [ecx + 0x80], eax
mov ecx, edi
push dword [ebp - 0x58]
call fcn.004f4b70
push 0x20
push dword [ebp - 0x54]
mov ecx, edi
call fcn.004f4b70
push 0x20
push dword [ebp - 0x34]
mov ecx, edi
call fcn.004f4b70
lea ecx, [esi + 0x54]
call fcn.0051df40
test eax, eax
je 0x4c5004
push 0x20
push dword [ebp - 0x54]
mov ecx, edi
call fcn.004f4b70
lea ecx, [ebp - 0x1f8]
mov byte [esi + 0x14], 0
call fcn.0051dfd0
lea ecx, [ebp - 0x1428]
mov byte [ebp - 4], 0x1e
call fcn.00401600
jmp 0x4c5320
mov ecx, dword [ebp - 0x1440]
cmp ecx, 0xffffffff
je 0x4c5320
test ecx, ecx
je 0x4c5320
xor edx, edx
call fcn.00503650
test al, al
jne 0x4c5320
lea eax, [ebp - 0x1cc]
push eax
push dword [ebp - 0x1440]
call dword [0x5de444]
lea ecx, [ebp - 0x1440]
call fcn.00401670
push 0
push 0x60ec54
push dword [ebp - 0x110]
mov ecx, edi
call fcn.004f44b0
cmp byte [ebp - 0x14b9], 3
je 0x4c536d
cmp byte [ebp - 0x14c9], 0
jne 0x4c510f
push 1
push 0x604bf4
lea ecx, [esi + 0x840]
call fcn.004edf50
push 1
lea ecx, [esi + 0x840]
call fcn.004ee650
lea ecx, [esi + 0x840]
mov dword [ebp - 0x14dc], eax
call fcn.004ee690
push 0
mov ecx, esi
mov dword [ebp - 0x1c4], eax
call fcn.004c0790
test eax, eax
je 0x4c510f
mov edi, dword [ebp - 0x14c0]
mov ecx, dword [edi]
cmp ecx, 0xfffffffa
je 0x4c5109
mov eax, dword [ebp - 0x1c4]
cmp dword [edi + 0x30], eax
jne 0x4c50fc
cmp ecx, dword [ebp - 0x14dc]
je 0x4c5109
push 0
mov ecx, esi
call fcn.004c0790
test eax, eax
jne 0x4c50e2
mov edi, dword [ebp - 0x14d8]
lea ecx, [esi + 0x840]
call fcn.004ee5e0
push 0x20
push dword [ebp - 0x10c]
mov ecx, edi
call fcn.004f4b70
push 0x20
push dword [ebp - 0x108]
mov ecx, edi
call fcn.004f4b70
push 0x20
push dword [ebp - 0x100]
mov ecx, edi
call fcn.004f4b70
push 0x20
push dword [ebp - 0xf8]
mov ecx, edi
call fcn.004f4b70
push 0x20
push dword [ebp - 0x50]
mov ecx, edi
call fcn.004f4b70
push 0x20
push dword [ebp - 0x50]
mov ecx, edi
call fcn.004f4b70
push 0x20
push dword [ebp - 0x34]
mov ecx, edi
call fcn.004f4b70
xorps xmm0, xmm0
mov byte [esi + 0x14], 0
lea ecx, [ebp - 0x234]
movq qword [ebp - 0x234], xmm0
mov dword [ebp - 0x22c], 0
call fcn.0051e180
mov byte [ebp - 4], 0x2c
test byte [ebp - 0x1cc], 2
je 0x4c5208
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x60ec78
lea ecx, [esi + 0x264]
call fcn.0051dd30
push eax
push 0x60ed28
lea ecx, [ebp - 0x234]
call fcn.0051dda0
push 0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0xfa
push 1
lea ecx, [ebp - 0x234]
call fcn.0051dd30
push eax
mov ecx, esi
call fcn.00492210
test eax, eax
jne 0x4c534f
lea ecx, [ebp - 0x234]
mov byte [ebp - 4], 0x1e
call fcn.0051dfd0
jmp 0x4c5320
cmp dword [esi + 0x1b50], 0
je 0x4c5234
mov ecx, esi
call fcn.004990f0
mov eax, dword [ebp - 0x14c0]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x1420]
cmp eax, 0xffffffff
je 0x4c530d
test eax, eax
je 0x4c530d
cmp ecx, 0xfffffffa
jne 0x4c530d
push 0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0xb4
push 1
push 0x60df68
mov ecx, esi
call fcn.00492210
test eax, eax
je 0x4c5320
push 0
push dword [ebp - 0x1420]
mov byte [esi + 0x14], 1
call dword [0x5de480]
cmp eax, 0x102
jne 0x4c52ba
push 1
mov ecx, esi
call fcn.004c0790
test eax, eax
jne 0x4c52a5
push 0xa
call dword [0x5de438]
push 0
push dword [ebp - 0x1420]
call dword [0x5de480]
cmp eax, 0x102
je 0x4c5290
lea ecx, [ebp - 0x1420]
call fcn.00401670
push 1
push 0
mov ecx, edi
call fcn.004fb3a0
mov dword [ebp - 0x14e4], 1
mov edi, dword [ebp - 0x14e0]
push 0xfffffffffffffff0
push edi
mov byte [esi + 0xa8], 1
call dword [0x5de7c0]
lea ecx, [ebp - 0x1e4]
push 1
test eax, 0x1000000
je 0x4c53a0
push 0x605d48
jmp 0x4c53a5
mov eax, dword [ebp - 0x1440]
cmp eax, 0xffffffff
je 0x4c52c5
test eax, eax
je 0x4c52c5
mov byte [esi + 0x14], 1
push 0
mov ecx, esi
call fcn.004c0790
test eax, eax
jne 0x4c3750
jmp 0x4c52da
lea ecx, [ebp - 0x1f8]
call fcn.0051dfd0
lea ecx, [ebp - 0x1428]
mov byte [ebp - 4], 0x1e
call fcn.00401600
jmp 0x4c52da
push 0
push 0x12
call dword [0x5de77c]
lea ecx, [ebp - 0x234]
mov byte [ebp - 4], 0x1e
call fcn.0051dfd0
jmp 0x4c52da
push 4
push dword [ebp - 0xf8]
mov ecx, edi
call fcn.004f3c80
test eax, eax
je 0x4c52da
test byte [ebp - 0x1cc], 2
je 0x4c52da
push 0
push 0x12
call dword [0x5de77c]
jmp 0x4c52da
push 0x5fe670
call fcn.0051de00
push 0x60de70
push 0x60de84
lea ecx, [ebp - 0x1d8]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1e4]
call fcn.0051ce40
lea eax, [ebp - 0x143c]
push eax
push edi
call dword [0x5de6b0]
push 0x60de8c
push 0x60de84
lea ecx, [ebp - 0x1d8]
call fcn.0051dd30
push eax
mov eax, dword [ebp - 0x1434]
lea ecx, [ebp - 0x1e4]
sub eax, dword [ebp - 0x143c]
push eax
call fcn.0051cfb0
mov ecx, eax
call fcn.0051ce40
push 0x60dea0
push 0x60de84
lea ecx, [ebp - 0x1d8]
call fcn.0051dd30
push eax
mov eax, dword [ebp - 0x1430]
lea ecx, [ebp - 0x1e4]
sub eax, dword [ebp - 0x1438]
push eax
call fcn.0051cfb0
mov ecx, eax
call fcn.0051ce40
mov eax, dword [ebp - 0x14b8]
test byte [eax + 0x8c], 2
je 0x4c5457
mov edi, dword [esi + 0x2c]
jmp 0x4c545d
mov edi, dword [ebp - 0x14e4]
mov ecx, dword [ebp - 0x142c]
cmp ecx, 0xffffffff
je 0x4c5485
test ecx, ecx
je 0x4c5485
xor edx, edx
call fcn.00503650
test al, al
je 0x4c5485
push 0
push dword [ebp - 0x142c]
call dword [0x5de41c]
cmp dword [esi + 0x10], 1
jne 0x4c549e
nop dword [eax + eax]
push 0x14
call dword [0x5de438]
cmp dword [esi + 0x10], 1
je 0x4c5490
push edi
mov ecx, esi
call fcn.004c0b80
lea ecx, [ebp - 0x348]
mov esi, eax
call fcn.004f0190
lea ecx, [ebp - 0x24c]
call fcn.0051dfd0
lea ecx, [ebp - 0x1e4]
call fcn.0051dfd0
lea ecx, [ebp - 0x1d8]
call fcn.0051dfd0
lea ecx, [ebp - 0x1e8]
call fcn.005187c0
lea ecx, [ebp - 0x2ac]
call fcn.0051dfd0
lea ecx, [ebp - 0x228]
call fcn.0051dfd0
lea ecx, [ebp - 0x1450]
call fcn.004fd7d0
lea ecx, [ebp - 0x1454]
call fcn.004fd7d0
lea ecx, [ebp - 0x1474]
call fcn.004fd7d0
lea ecx, [ebp - 0x1458]
call fcn.004fd7d0
lea ecx, [ebp - 0x1444]
call fcn.004fd7d0
lea ecx, [ebp - 0x1448]
call fcn.004fd7d0
lea ecx, [ebp - 0x144c]
call fcn.004fd7d0
lea ecx, [ebp - 0x145c]
call fcn.004fd7d0
lea ecx, [ebp - 0x1460]
call fcn.004fd7d0
lea ecx, [ebp - 0x1464]
call fcn.004fd7d0
lea ecx, [ebp - 0x1424]
call fcn.00403420
lea ecx, [ebp - 0x142c]
call fcn.00401600
lea ecx, [ebp - 0x1440]
call fcn.00401600
lea ecx, [ebp - 0x1420]
call fcn.00401600
lea ecx, [ebp - 0x1468]
call fcn.004fd850
lea ecx, [ebp - 0x146c]
call fcn.004fd850
lea ecx, [ebp - 0x1470]
call fcn.004fd850
lea ecx, [ebp - 0x1488]
call fcn.004fd850
lea ecx, [ebp - 0x1478]
call fcn.004fd850
lea ecx, [ebp - 0x147c]
call fcn.004fd850
lea ecx, [ebp - 0x1480]
call fcn.004fd850
lea ecx, [ebp - 0x1484]
call fcn.004fd850
lea ecx, [ebp - 0x240]
call fcn.0051dfd0
lea ecx, [ebp - 0x2b8]
call fcn.0051dfd0
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0041e885
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 4