Function at 0x4420d0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5e6304
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x518
mov eax, dword [0x705200]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x498], edi
push 3
push 0x67a47c
call fcn.0044dd30
push 1
push 0x67a4a0
lea ecx, [edi + 0x11a4]
mov dword [ebp - 0x4dc], eax
call fcn.005451b0
mov ecx, edi
call fcn.00466440
test al, al
je 0x4452d6
mov esi, dword [edi + 0x14b4]
lea eax, [ebp - 0x448]
push 0x268
push 0
push eax
mov dword [ebp - 0x4b0], esi
call fcn.004201e0
add esp, 0xc
lea ecx, [edi + 0x1478]
push ecx
lea ecx, [ebp - 0x448]
call fcn.00523810
push 0xffffffffffffffff
lea ecx, [ebp - 0x448]
mov dword [ebp - 4], 0
call fcn.00521c60
movsd xmm1, qword [0x6e4350]
mov ecx, esi
push 0
push str.Arial
push 1
push 0x320
call fcn.005217f0
push 0x37
push 0x50
push 3
push 0xa
mov ecx, edi
call fcn.0044e570
push 0x67a47c
lea ecx, [edi + 0x1418]
call fcn.00545460
push 0xffffffffffffffff
push 0x10000001
push 0x2d
push 0x5a
push 0x3c
push 5
lea ecx, [edi + 0x1418]
call fcn.005450e0
push eax
mov ecx, esi
call fcn.0051df20
push dword [edi + 0x1408]
mov ecx, esi
push 0xffffffffffffffff
call fcn.0051c300
movsd xmm1, qword [0x6e4328]
mov ecx, esi
push 0
push str.Arial
push 1
push 0x190
call fcn.005217f0
push 0
push ecx
mov dword [esp], 0x41500000
mov ecx, edi
push 0x67a510
push 0x5f
push 0x78
push 0xa
push 0x6e
push 0x72
push 0x67a5d4
call fcn.0044e4a0
push eax
mov ecx, esi
mov dword [ebp - 0x4c8], eax
call fcn.00522c70
push eax
lea ecx, [ebp - 0x448]
call fcn.00523510
mov ecx, dword [edi + 0x13d4]
lea eax, [ebp - 0x448]
push 0xfffffffffffffffe
push ecx
push ecx
push eax
push 0x67a5f8
push 1
push ecx
push 0x6e
push 0x49
push 5
push 0x67a6bc
mov ecx, edi
call fcn.0044e310
push 0
push ecx
mov dword [esp], 0x41500000
mov ecx, edi
push 0x67a6e0
push 0x5f
push 0x55
push 0xa
push 0xeb
push 0x8b
push 0x67a7a4
mov dword [ebp - 0x51c], eax
call fcn.0044e4a0
push 0
push ecx
mov dword [esp], 0x41500000
mov ecx, edi
push 0x67a7d8
push 0x5f
push 0x50
push 0xa
push 0x145
push 0xa4
push 0x67978c
mov dword [ebp - 0x4d0], eax
call fcn.0044e4a0
push 0
push ecx
mov dword [esp], 0x41500000
mov ecx, edi
push 0x67a878
push 0x5f
push 0x50
push 0xa
push 0x19a
push 0x9c
push 0x67a910
mov dword [ebp - 0x524], eax
call fcn.0044e4a0
push 0
push ecx
mov dword [esp], 0x41500000
mov ecx, edi
push 0x67a934
push 0x5f
push 0x50
push 0xa
push 0x1ef
push 0x94
push 0x679714
mov dword [ebp - 0x520], eax
call fcn.0044e4a0
push 0
push ecx
mov dword [esp], 0x41500000
mov ecx, edi
push 0x673154
push 0x5f
push 0x4b
push 0xa
push 0x244
push 0x7d
push 0x673180
mov dword [ebp - 0x518], eax
call fcn.0044e4a0
push 0
push ecx
mov dword [esp], 0x41500000
push 0x677b0c
push 0x5f
push 0x50
mov dword [edi + 0x11c4], eax
push 0xa
push 0x294
push 0xb3
push 0x673148
mov ecx, edi
call fcn.0044e4a0
push 0
push 0x10800080
push 0x19
push 0xb9
push 0x23
push 0x2f3
push 0x67a964
mov ecx, esi
mov dword [edi + 0x11c8], eax
call fcn.0051e0d0
push 0x909090
push 0xffffffffffffffff
mov ecx, esi
mov dword [ebp - 0x4c0], eax
call fcn.0051c300
movsd xmm0, qword [0x6e4338]
sub esp, 0xc
movsd qword [esp + 4], xmm0
push 0
push ecx
push 0x190
push 0xffffffffffffffff
mov ecx, esi
call fcn.0051c1a0
push 0x40
push 0xffffffffffffffff
mov ecx, esi
call fcn.0051aa80
push 0
push ecx
mov dword [esp], 0x41500000
mov ecx, edi
push 0x677b7c
push 0x28
push 0x5a
push 0x41
push 0x2f3
push 0x86
push 0x677b7c
call fcn.0044e400
push 0
push ecx
mov dword [esp], 0x41500000
mov ecx, edi
push 0x62c6b0
push 0x28
push 0x5a
push 0x41
push 0x352
push 0x99
push 0x677b90
mov dword [ebp - 0x4a8], eax
call fcn.0044e400
push 0
push 0x67a994
mov ecx, edi
mov dword [ebp - 0x4d8], eax
call fcn.0044db80
mov ecx, edi
call fcn.0044d9b0
push 0x20
call fcn.0041e693
add esp, 4
mov dword [ebp - 0x4fc], eax
mov byte [ebp - 4], 1
xorps xmm0, xmm0
push 0xd
movups xmmword [eax], xmm0
mov ecx, eax
movups xmmword [eax + 0x10], xmm0
push dword [edi + 0x11c4]
push dword [ebp - 0x4d8]
push dword [ebp - 0x4c8]
push esi
call fcn.00515f60
push 0
lea ecx, [ebp - 0x1e0]
mov dword [ebp - 0x4ac], eax
mov byte [ebp - 4], 0
mov byte [ebp - 0x49e], 0
mov byte [ebp - 0x4ba], 0
call fcn.005395f0
movsd xmm1, qword [0x6e4328]
mov ecx, esi
push 0
push str.Arial
push 1
push 0x190
mov dword [ebp - 0x49c], 0
call fcn.005217f0
lea eax, [ebp - 0x49c]
mov ecx, edi
push eax
call fcn.00441de0
push dword [ebp - 0x49c]
mov ecx, esi
call fcn.00522c70
mov dword [ebp - 0x4c4], eax
mov eax, dword [ebp - 0x4ac]
test eax, eax
je 0x442553
mov ecx, eax
call fcn.00515ef0
mov eax, dword [ebp - 0x4ac]
push 0x20
push eax
call fcn.0041ea7e
add esp, 8
push dword [ebp - 0x4d0]
mov ecx, edi
push dword [ebp - 0x4c8]
push dword [ebp - 0x49c]
call fcn.005de950
push 0x48
call dword [0x5fd6d0]
movsd xmm0, qword [0x6e42e8]
mov ecx, eax
comisd xmm0, xmmword [edi + 8]
mov dword [ebp - 0x4b8], ecx
jb 0x4425a0
push 4
call dword [0x5fd7f8]
mov ecx, dword [ebp - 0x4b8]
or eax, 0xff000000
jmp 0x4425a2
xor eax, eax
push eax
push ecx
push ecx
push 0x8b
mov ecx, edi
mov dword [ebp - 0x4a4], eax
call fcn.0045e340
push eax
lea ecx, [ebp - 0x454]
call fcn.00523a10
mov byte [ebp - 4], 2
mov ecx, esi
push dword [ebp - 0x454]
push 0x67a9b4
push dword [ebp - 0x4a8]
call fcn.0051eae0
push 0
push eax
push dword [ebp - 0x4a8]
mov ecx, esi
mov dword [ebp - 0x4f0], eax
call fcn.00522c20
push eax
call dword [0x5fd800]
push dword [ebp - 0x4a4]
mov eax, dword [ebp - 0x4b8]
mov ecx, edi
push eax
push eax
push 0x72
call fcn.0045e340
push eax
lea ecx, [ebp - 0x458]
call fcn.00523a10
push 0
mov byte [ebp - 4], 3
mov ecx, esi
push dword [ebp - 0x458]
push 0
push 0x32
push 0x67a9f0
push dword [ebp - 0x4a8]
call fcn.0051da90
push dword [ebp - 0x4a4]
mov dword [ebp - 0x508], eax
mov ecx, edi
mov eax, dword [ebp - 0x4b8]
push eax
push eax
push 0x81
call fcn.0045e340
push eax
lea ecx, [ebp - 0x45c]
call fcn.00523a10
push 0
mov byte [ebp - 4], 4
mov ecx, esi
push dword [ebp - 0x45c]
push 0
push 0x32
push 0x67aa14
push dword [ebp - 0x4a8]
call fcn.0051da90
push dword [ebp - 0x4a4]
mov dword [ebp - 0x4e0], eax
mov ecx, edi
mov eax, dword [ebp - 0x4b8]
push eax
push eax
push 0x80
call fcn.0045e340
push eax
lea ecx, [ebp - 0x450]
call fcn.00523a10
push 0
mov byte [ebp - 4], 5
push dword [ebp - 0x450]
push 0
push 0x32
push 0x677ef0
push dword [ebp - 0x4a8]
mov ecx, esi
call fcn.0051da90
push 0
push 0
push 8
push 0x32
push 0
push dword [ebp - 0x4a8]
mov ecx, esi
mov dword [ebp - 0x500], eax
call fcn.0051da90
push dword [ebp - 0x4a4]
mov eax, dword [ebp - 0x4b8]
mov ecx, edi
push eax
push eax
push 0x7c
call fcn.0045e340
push eax
lea ecx, [ebp - 0x460]
call fcn.00523a10
push 0
mov byte [ebp - 4], 6
mov ecx, esi
push dword [ebp - 0x460]
push 0
push 0x32
push 0x677e98
push dword [ebp - 0x4a8]
call fcn.0051da90
push dword [ebp - 0x4a4]
mov dword [ebp - 0x504], eax
mov ecx, edi
mov eax, dword [ebp - 0x4b8]
push eax
push eax
push 0xac
call fcn.0045e340
push eax
lea ecx, [ebp - 0x464]
call fcn.00523a10
push 0
mov byte [ebp - 4], 7
mov ecx, esi
push dword [ebp - 0x464]
push 0
push 0x32
push 0x677f28
push dword [ebp - 0x4a8]
call fcn.0051da90
push 0
push dword [ebp - 0x454]
mov ecx, esi
mov dword [ebp - 0x510], eax
push 0
push 0x32
push 0x677f5c
push dword [ebp - 0x4a8]
call fcn.0051da90
push 0
push 0
push 8
push 0x32
push 0
push dword [ebp - 0x4a8]
mov ecx, esi
mov dword [ebp - 0x514], eax
call fcn.0051da90
push dword [ebp - 0x4a4]
mov eax, dword [ebp - 0x4b8]
mov ecx, edi
push eax
push eax
push 0x94
call fcn.0045e340
push eax
lea ecx, [ebp - 0x468]
call fcn.00523a10
push 0
mov byte [ebp - 4], 8
mov ecx, esi
push dword [ebp - 0x468]
push 0
push 0x32
push 0x679a5c
push dword [ebp - 0x4a8]
call fcn.0051da90
push 0
push 0
push 8
push 0x32
push 0
push dword [ebp - 0x4a8]
mov ecx, esi
mov dword [ebp - 0x4e4], eax
call fcn.0051da90
push 0
push dword [ebp - 0x450]
mov ecx, esi
push 0
push 0x32
push 0x677fac
push dword [ebp - 0x4a8]
call fcn.0051da90
push dword [ebp - 0x4a4]
mov dword [ebp - 0x4f4], eax
mov ecx, edi
mov eax, dword [ebp - 0x4b8]
push eax
push eax
push 0xb1
call fcn.0045e340
push eax
lea ecx, [ebp - 0x44c]
call fcn.00523a10
push 0
mov byte [ebp - 4], 9
mov ecx, esi
push dword [ebp - 0x44c]
push 0
push 0x32
push 0x677fe0
push dword [ebp - 0x4a8]
call fcn.0051da90
push 0
push dword [ebp - 0x44c]
mov ecx, esi
mov dword [ebp - 0x4ec], eax
push 0
push 0x32
push 0x679a78
push dword [ebp - 0x4a8]
call fcn.0051da90
push 0
mov ecx, edi
mov dword [ebp - 0x4e8], eax
call fcn.0044d820
mov cx, word [edi + 0x11c8]
mov edx, eax
mov eax, 0x74
mov dword [ebp - 0x50c], edx
mov word [ebp - 0x76], ax
mov eax, dword [ebp - 0x518]
mov word [ebp - 0x74], ax
mov eax, 0x1b
mov word [ebp - 0x70], ax
mov eax, 0x70
mov word [ebp - 0x6a], ax
mov ax, word [edi + 0x11c4]
mov byte [ebp - 0x78], 1
mov byte [ebp - 0x72], 1
mov word [ebp - 0x6e], cx
mov byte [ebp - 0x6c], 1
mov word [ebp - 0x68], ax
mov eax, 0x72
mov byte [ebp - 0x66], 1
mov word [ebp - 0x64], ax
mov ecx, 0x2e
mov eax, dword [ebp - 0x4d8]
mov word [ebp - 0x62], ax
mov eax, 0x46
mov word [ebp - 0x5e], ax
mov eax, 0xd
mov word [ebp - 0x58], ax
mov eax, dword [ebp - 0x4f0]
mov word [ebp - 0x56], ax
mov eax, dword [ebp - 0x508]
mov word [ebp - 0x50], ax
mov eax, dword [ebp - 0x4e0]
mov word [ebp - 0x4a], ax
mov eax, 0x47
mov word [ebp - 0x46], ax
mov eax, dword [ebp - 0x504]
mov word [ebp - 0x44], ax
mov eax, 0x56
mov word [ebp - 0x40], ax
mov eax, dword [ebp - 0x500]
mov word [ebp - 0x3e], ax
mov eax, 0x4c
mov word [ebp - 0x3a], ax
mov eax, dword [ebp - 0x510]
mov word [ebp - 0x38], ax
mov eax, 0x50
mov word [ebp - 0x34], ax
mov eax, dword [ebp - 0x514]
mov word [ebp - 0x32], ax
mov eax, 0x4d
mov word [ebp - 0x2e], ax
mov eax, dword [ebp - 0x4f4]
mov word [ebp - 0x2c], ax
mov eax, 0x55
mov word [ebp - 0x28], ax
mov eax, dword [ebp - 0x4ec]
mov word [ebp - 0x26], ax
mov eax, 0x48
mov word [ebp - 0x22], ax
mov eax, dword [ebp - 0x4e8]
mov word [ebp - 0x20], ax
mov eax, 0x5d
mov word [ebp - 0x1c], ax
mov eax, dword [ebp - 0x4a8]
mov word [ebp - 0x1a], ax
lea eax, [ebp - 0x78]
push 0x10
mov word [ebp - 0x52], cx
mov word [ebp - 0x4c], cx
mov ecx, esi
push eax
mov byte [ebp - 0x60], 9
mov word [ebp - 0x5c], dx
mov byte [ebp - 0x5a], 9
mov byte [ebp - 0x54], 1
mov byte [ebp - 0x4e], 9
mov byte [ebp - 0x48], 9
mov byte [ebp - 0x42], 0x11
mov byte [ebp - 0x3c], 9
mov byte [ebp - 0x36], 9
mov byte [ebp - 0x30], 9
mov byte [ebp - 0x2a], 9
mov byte [ebp - 0x24], 9
mov byte [ebp - 0x1e], 1
call fcn.00521ce0
push dword [ebp - 0x4c4]
call dword [0x5fd7b0]
push 0x20
push dword [ebp - 0x4c0]
mov ecx, esi
call fcn.0051aa80
xorps xmm0, xmm0
mov dword [ebp - 0x4f8], 0xffffffff
lea ecx, [ebp - 0xa8]
movq qword [ebp - 0xa8], xmm0
mov dword [ebp - 0xa0], 0
call fcn.00545530
xorps xmm0, xmm0
mov dword [ebp - 0xac], 0
lea ecx, [ebp - 0xb4]
movq qword [ebp - 0xb4], xmm0
call fcn.00545530
xorps xmm0, xmm0
mov dword [ebp - 0xb8], 0
lea ecx, [ebp - 0xc0]
movq qword [ebp - 0xc0], xmm0
call fcn.00545530
xorps xmm0, xmm0
mov dword [ebp - 0x94], 0
lea ecx, [ebp - 0x9c]
movq qword [ebp - 0x9c], xmm0
call fcn.00545530
xorps xmm0, xmm0
mov dword [ebp - 0x14c], 0
lea ecx, [ebp - 0x154]
movq qword [ebp - 0x154], xmm0
call fcn.00545530
lea ecx, [ebp - 0x88]
mov dword [ebp - 0x88], 0
call fcn.0053fa70
lea ecx, [ebp - 0xc4]
mov dword [ebp - 0xc4], 0
call fcn.0053fa70
push dword [ebp - 0x4d8]
mov ecx, esi
mov byte [ebp - 4], 0x10
call fcn.005218b0
push 0
mov ecx, edi
call fcn.005e2990
test eax, eax
je 0x4451ef
nop
mov ecx, dword [edi + 0x14a8]
lea eax, [ebp - 0x448]
mov edx, dword [ebp - 0x4c8]
cmp ecx, eax
lea eax, [edi + 0x1478]
jne 0x442b8b
cmp dword [eax], 0xfffffff5
jne 0x442b8b
mov dword [edi + 0x14a8], esi
mov ecx, esi
mov dword [eax], edx
mov eax, dword [eax]
mov dword [ebp - 0x4cc], eax
cmp eax, 0xfffffffa
je 0x4451ef
cmp ecx, esi
jne 0x4451d5
cmp eax, dword [edi + 0x11c8]
je 0x4451e8
cmp byte [ebp - 0x49e], 1
jne 0x442bd7
cmp eax, 0xffffff31
jne 0x442bd7
lea ecx, [ebp - 0x1e0]
call fcn.005395d0
mov byte [ebp - 0x49e], 2
jmp 0x4451d5
mov ecx, dword [ebp - 0x49c]
cmp eax, 0xffffffea
jne 0x442bea
cmp dword [edi + 0x1484], ecx
je 0x442bf6
cmp eax, dword [ebp - 0x4a8]
jne 0x442d79
cmp eax, dword [ebp - 0x4a8]
jne 0x442c42
push dword [ebp - 0x4c4]
call dword [0x5fd7b0]
cmp byte [ebp - 0x49e], 2
jne 0x442c3b
xorps xmm1, xmm1
lea ecx, [ebp - 0x1e0]
call fcn.00539580
movsd xmm1, qword [0x6e43c0]
comisd xmm1, xmm0
jbe 0x442c3b
mov byte [ebp - 0x49e], 0
jmp 0x4451d5
mov byte [ebp - 0x49e], 1
push 2
push 0xffffffffffffffff
push 0x100c
push dword [ebp - 0x4c4]
call dword [0x5fd6cc]
cmp eax, 0xffffffff
mov ecx, 0x20
mov eax, 0x40
cmove ecx, eax
mov eax, dword [ebp - 0x4f0]
mov dword [ebp - 0x4ac], ecx
cmp eax, dword [ebp - 0x4e4]
jge 0x442c9e
mov edi, eax
nop dword [eax]
push ecx
push edi
mov ecx, esi
call fcn.0051aa80
mov ecx, dword [ebp - 0x4ac]
inc edi
cmp edi, dword [ebp - 0x4e4]
jl 0x442c80
mov edi, dword [ebp - 0x498]
push ecx
push dword [ebp - 0x4f4]
mov ecx, esi
call fcn.0051aa80
push 0
mov ecx, edi
call fcn.0045d5e0
mov ecx, dword [ebp - 0x4b0]
test al, al
mov eax, 0x40
mov esi, 0x20
cmovne esi, eax
push esi
push dword [ebp - 0x4ec]
call fcn.0051aa80
push esi
push dword [ebp - 0x4e8]
mov esi, dword [ebp - 0x4b0]
mov ecx, esi
call fcn.0051aa80
mov eax, dword [ebp - 0x4a8]
cmp dword [ebp - 0x4cc], eax
jne 0x442d5c
lea ecx, [ebp - 0x164]
push ecx
push eax
mov ecx, esi
call fcn.00522c70
push eax
call dword [0x5fd734]
test eax, eax
je 0x442d56
mov eax, dword [ebp - 0x164]
mov edx, 8
mov ecx, dword [ebp - 0x4a8]
add eax, 0x5a
mov dword [ebp - 0x4d4], eax
mov eax, dword [ebp - 0x160]
add eax, 0x2d
mov dword [ebp - 0x4ac], eax
push dword [ebp - 0x4ac]
mov eax, dword [ebp - 0x4d4]
push eax
push edx
push ecx
mov ecx, esi
call fcn.00519660
jmp 0x4451d5
mov eax, dword [ebp - 0x4a8]
mov ecx, eax
xor edx, edx
or eax, 0xffffffff
push eax
push eax
push edx
push ecx
mov ecx, esi
mov dword [ebp - 0x4ac], eax
call fcn.00519660
jmp 0x4451d5
cmp eax, 0xffffffb3
jne 0x442d92
mov esi, dword [ebp - 0x4c0]
cmp dword [edi + 0x1484], esi
mov esi, dword [ebp - 0x4b0]
je 0x442d9e
cmp eax, dword [ebp - 0x50c]
jne 0x442e48
mov ecx, edi
call fcn.005deda0
push 0x80
push dword [ebp - 0x4c0]
mov ecx, esi
call fcn.0051aa80
push dword [ebp - 0x4c0]
mov ecx, esi
call fcn.005198c0
push eax
lea ecx, [ebp - 0xa8]
call fcn.00545110
push 0x67a964
lea ecx, [ebp - 0xa8]
call fcn.00545410
mov ecx, esi
test al, al
je 0x442e2f
push 0
push 0
push dword [ebp - 0x4c0]
call fcn.0051a3c0
push 0
push dword [ebp - 0x4c0]
mov ecx, esi
call fcn.0051c300
movsd xmm0, qword [0x6e4350]
sub esp, 0xc
movsd qword [esp + 4], xmm0
push 0
push ecx
push 0x190
push dword [ebp - 0x4c0]
mov ecx, esi
call fcn.0051c1a0
jmp 0x4451d5
push 0xffffffffffffffff
push 0
push 0xb1
push dword [ebp - 0x4c0]
call fcn.0051c660
jmp 0x4451d5
cmp eax, 0xffffffb4
jne 0x442eb1
mov esi, dword [ebp - 0x4c0]
cmp dword [edi + 0x1484], esi
mov esi, dword [ebp - 0x4b0]
jne 0x442eb1
push dword [ebp - 0x4c0]
mov ecx, esi
call fcn.005198c0
push eax
lea ecx, [ebp - 0xa8]
call fcn.00545110
lea ecx, [ebp - 0xa8]
call fcn.005452f0
cmp eax, 3
jl 0x4451d5
push 0xffffffffffffffff
push 6
push 0xffffffffffffffff
lea ecx, [ebp - 0xa8]
call fcn.005450e0
mov ecx, dword [ebp - 0x4c4]
mov edx, eax
call fcn.00527290
jmp 0x4451d5
cmp eax, dword [ebp - 0x4d8]
jne 0x442f80
push dword [ebp - 0x4c0]
mov ecx, esi
call fcn.005198c0
push eax
lea ecx, [ebp - 0xa8]
call fcn.00545110
push 0x67a964
lea ecx, [ebp - 0xa8]
call fcn.00545410
test al, al
jne 0x442f65
lea ecx, [ebp - 0xa8]
call fcn.00544e00
test al, al
jne 0x442f65
push dword [ebp - 0x4f8]
push 0x1e
push 0xffffffffffffffff
call fcn.005450e0
mov ecx, dword [ebp - 0x4c4]
mov edx, eax
call fcn.00527290
mov dword [ebp - 0x4f8], eax
mov ecx, esi
push 0x80
cmp eax, 0xffffffff
je 0x442f37
push dword [ebp - 0x49c]
call fcn.0051aa80
jmp 0x4451d5
push dword [ebp - 0x4c0]
call fcn.0051aa80
sub esp, 8
mov ecx, edi
push 0x8c
push 0x190
push 0
push esi
push 4
push 0x62d6a0
call fcn.004661f0
jmp 0x4451d5
push 0
push 0
push 0x201
push dword [ebp - 0x50c]
mov ecx, esi
call fcn.0051c660
jmp 0x4451d5
cmp eax, 0xffffffeb
jne 0x442fa0
cmp dword [edi + 0x1484], ecx
jne 0x442fb2
push dword [ebp - 0x4c0]
push ecx
mov ecx, edi
call fcn.00466190
jmp 0x4451d5
cmp eax, 0xffffffd3
je 0x4451c6
cmp eax, 0xffffffd2
je 0x4451c6
cmp eax, dword [ebp - 0x4d0]
je 0x445171
cmp eax, dword [ebp - 0x4f0]
je 0x445171
cmp eax, 0xfffffff2
jne 0x442fdb
cmp dword [edi + 0x1484], ecx
je 0x445171
cmp eax, dword [ebp - 0x524]
jne 0x443096
push 0xd
push dword [edi + 0x11c4]
xorps xmm0, xmm0
push ecx
push edx
push esi
lea ecx, [ebp - 0x1c4]
movups xmmword [ebp - 0x1c4], xmm0
movups xmmword [ebp - 0x1b4], xmm0
call fcn.00515f60
mov ecx, edi
mov byte [ebp - 4], 0x12
call fcn.00436c00
push dword [ebp - 0x4dc]
mov byte [ebp - 0x49d], al
call dword [0x5fd7a8]
cmp byte [ebp - 0x49d], 0
jne 0x443048
lea ecx, [ebp - 0x1c4]
mov byte [ebp - 4], 0x10
call fcn.00515ef0
jmp 0x4451d5
lea eax, [ebp - 0x49c]
mov ecx, edi
push eax
call fcn.00441de0
push dword [ebp - 0x49c]
mov ecx, esi
call fcn.00522c70
push dword [ebp - 0x4d0]
mov ecx, edi
mov dword [ebp - 0x4c4], eax
push dword [ebp - 0x4c8]
push dword [ebp - 0x49c]
call fcn.005de950
lea ecx, [ebp - 0x1c4]
mov byte [ebp - 4], 0x10
call fcn.00515ef0
jmp 0x4451d5
cmp eax, dword [ebp - 0x520]
jne 0x443151
push 0xd
push dword [edi + 0x11c4]
xorps xmm0, xmm0
push ecx
push edx
push esi
lea ecx, [ebp - 0x1a4]
movups xmmword [ebp - 0x1a4], xmm0
movups xmmword [ebp - 0x194], xmm0
call fcn.00515f60
mov ecx, edi
mov byte [ebp - 4], 0x13
call fcn.004357a0
push dword [ebp - 0x4dc]
mov byte [ebp - 0x49d], al
call dword [0x5fd7a8]
cmp byte [ebp - 0x49d], 0
jne 0x443103
lea ecx, [ebp - 0x1a4]
mov byte [ebp - 4], 0x10
call fcn.00515ef0
jmp 0x4451d5
lea eax, [ebp - 0x49c]
mov ecx, edi
push eax
call fcn.00441de0
push dword [ebp - 0x49c]
mov ecx, esi
call fcn.00522c70
push dword [ebp - 0x4d0]
mov ecx, edi
mov dword [ebp - 0x4c4], eax
push dword [ebp - 0x4c8]
push dword [ebp - 0x49c]
call fcn.005de950
lea ecx, [ebp - 0x1a4]
mov byte [ebp - 4], 0x10
call fcn.00515ef0
jmp 0x4451d5
cmp eax, dword [ebp - 0x508]
je 0x44370d
cmp eax, dword [ebp - 0x4e0]
je 0x44370d
cmp eax, edx
je 0x44370d
cmp eax, dword [ebp - 0x504]
jne 0x44321f
xorps xmm0, xmm0
push ecx
mov ecx, esi
movlpd qword [ebp - 0x90], xmm0
call fcn.00518aa0
mov ecx, eax
mov dword [ebp - 0x90], ecx
mov byte [ebp - 4], 0x22
mov edx, dword [ecx]
test edx, edx
jne 0x4431b4
push ecx
mov byte [ebp - 4], 0x10
call fcn.0041e483
add esp, 4
jmp 0x4451d5
mov eax, 1
mov dword [ebp - 0x4ac], eax
cmp edx, eax
jl 0x44320d
push 1
push dword [ecx + eax*4]
mov ecx, esi
push dword [ebp - 0x49c]
call fcn.00518c50
push eax
lea ecx, [ebp - 0xa8]
call fcn.00545110
push 2
lea ecx, [ebp - 0xa8]
call fcn.005450e0
push eax
mov ecx, edi
call fcn.0044d620
mov eax, dword [ebp - 0x4ac]
mov ecx, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x4ac], eax
cmp eax, dword [ecx]
jle 0x4431c3
push ecx
mov byte [ebp - 4], 0x10
call fcn.0041e483
add esp, 4
jmp 0x4451d5
cmp eax, dword [ebp - 0x500]
jne 0x4434c6
xorps xmm0, xmm0
push ecx
mov ecx, esi
movlpd qword [ebp - 0x90], xmm0
call fcn.00518aa0
mov dword [ebp - 0x90], eax
mov byte [ebp - 4], 0x23
cmp dword [eax], 0
jne 0x44325f
push eax
mov byte [ebp - 4], 0x10
call fcn.0041e483
add esp, 4
jmp 0x4451d5
push 0xd
push dword [edi + 0x11c4]
xorps xmm0, xmm0
lea ecx, [ebp - 0x13c]
push dword [ebp - 0x49c]
movups xmmword [ebp - 0x13c], xmm0
push dword [ebp - 0x4c8]
movups xmmword [ebp - 0x12c], xmm0
push esi
call fcn.00515f60
push 0
push str.Cancel
sub esp, 8
mov byte [ebp - 4], 0x24
mov ecx, edi
push 0x50
push 0x258
push 0
push 0x61d074
call fcn.00465970
mov ecx, eax
call fcn.00513c30
push 1
lea ecx, [edi + 0x14c0]
push 0x67898c
call fcn.00513c30
xorps xmm0, xmm0
mov dword [ebp - 0xd8], 0
lea ecx, [ebp - 0xe0]
movq qword [ebp - 0xe0], xmm0
call fcn.00545530
mov byte [ebp - 4], 0x25
mov eax, 1
mov ecx, dword [ebp - 0x90]
mov dword [ebp - 0x4a4], eax
mov ecx, dword [ecx]
cmp ecx, eax
jl 0x44348c
mov dword [ebp - 0x4cc], 0x64
cmp eax, ecx
jne 0x443340
push 2
push 2
lea ecx, [edi + 0x14c0]
call fcn.00513950
push 0x66faf8
push 1
lea ecx, [edi + 0x14c0]
call fcn.005138e0
mov eax, dword [ebp - 0x4a4]
mov ecx, dword [ebp - 0x90]
push 1
push dword [ecx + eax*4]
mov ecx, esi
push dword [ebp - 0x49c]
call fcn.00518c50
push eax
lea ecx, [ebp - 0xa8]
call fcn.00545110
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x62e448
lea ecx, [ebp - 0xa8]
call fcn.005450e0
push eax
push 0x6789a8
lea ecx, [ebp - 0xe0]
call fcn.00545150
lea ecx, [ebp - 0xe0]
call fcn.005450e0
mov ecx, dword [ebp - 0x90]
push eax
mov eax, dword [ebp - 0x4cc]
cdq
idiv dword [ecx]
lea ecx, [edi + 0x14c0]
push eax
call fcn.00513e70
push 0
push 1
mov ecx, edi
call fcn.00465630
lea ecx, [ebp - 0xa8]
call fcn.005450e0
xor edx, edx
mov ecx, eax
call fcn.004f1c80
push eax
lea ecx, [ebp - 0xe0]
call fcn.00545110
lea ecx, [edi + 0x14c0]
call fcn.005139b0
push eax
mov edx, 0x1f4
lea ecx, [ebp - 0xa8]
call fcn.004ebe10
sub esp, 0xc
lea ecx, [ebp - 0xa8]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x621884
call fcn.005450e0
push eax
lea ecx, [ebp - 0xe0]
call fcn.005434e0
lea ecx, [ebp - 0xe0]
call fcn.005450e0
push eax
push 0xffffffffffffffff
lea ecx, [edi + 0x14c0]
call fcn.00513e70
push 3
mov ecx, edi
call fcn.004657f0
push 0
push 0
mov ecx, edi
call fcn.00465630
test eax, eax
je 0x443454
cmp eax, 1
jg 0x44348c
mov ecx, dword [ebp - 0x90]
mov eax, dword [ebp - 0x4a4]
add dword [ebp - 0x4cc], 0x64
inc eax
mov dword [ebp - 0x4a4], eax
mov ecx, dword [ecx]
cmp eax, ecx
jle 0x443317
push 2
lea ecx, [edi + 0x14c0]
call fcn.005139e0
lea ecx, [ebp - 0xe0]
call fcn.00545380
lea ecx, [ebp - 0x13c]
call fcn.00515ef0
mov byte [ebp - 4], 0x10
push dword [ebp - 0x90]
call fcn.0041e483
add esp, 4
jmp 0x4451d5
cmp eax, dword [ebp - 0x4f4]
jne 0x4434e2
push 1
push dword [ebp - 0x4c4]
mov ecx, edi
call fcn.0045d940
jmp 0x4451d5
cmp eax, dword [ebp - 0x4ec]
jne 0x443504
push 4
push 0x20
push 6
push 1
push dword [ebp - 0x4c4]
mov ecx, edi
call fcn.0045d630
jmp 0x4451d5
cmp eax, dword [ebp - 0x4e8]
jne 0x443526
push 4
push 0
push 6
push 1
push dword [ebp - 0x4c4]
mov ecx, edi
call fcn.0045d630
jmp 0x4451d5
cmp eax, dword [ebp - 0x510]
jne 0x4435c2
xorps xmm0, xmm0
push ecx
mov ecx, esi
movlpd qword [ebp - 0x90], xmm0
call fcn.00518aa0
mov dword [ebp - 0x90], eax
mov byte [ebp - 4], 0x26
mov ecx, dword [eax]
test ecx, ecx
jne 0x443567
push eax
mov byte [ebp - 4], 0x10
call fcn.0041e483
add esp, 4
jmp 0x4451d5
mov dword [ebp - 0x4ac], 1
cmp ecx, 1
jl 0x443663
mov edi, dword [ebp - 0x4ac]
push 1
push dword [eax + edi*4]
mov ecx, esi
push dword [ebp - 0x49c]
call fcn.00518c50
push eax
lea ecx, [ebp - 0xa8]
call fcn.00545110
lea ecx, [ebp - 0xa8]
call fcn.005450e0
xor edx, edx
mov ecx, eax
call fcn.004ee650
mov eax, dword [ebp - 0x90]
inc edi
cmp edi, dword [eax]
jle 0x443580
jmp 0x44365d
cmp eax, dword [ebp - 0x514]
jne 0x443675
xorps xmm0, xmm0
push ecx
mov ecx, esi
movlpd qword [ebp - 0x90], xmm0
call fcn.00518aa0
mov dword [ebp - 0x90], eax
mov byte [ebp - 4], 0x27
mov ecx, dword [eax]
test ecx, ecx
jne 0x443603
push eax
mov byte [ebp - 4], 0x10
call fcn.0041e483
add esp, 4
jmp 0x4451d5
mov dword [ebp - 0x4ac], 1
cmp ecx, 1
jl 0x443663
mov edi, dword [ebp - 0x4ac]
push 1
push dword [eax + edi*4]
mov ecx, esi
push dword [ebp - 0x49c]
call fcn.00518c50
push eax
lea ecx, [ebp - 0xa8]
call fcn.00545110
push 0
lea ecx, [ebp - 0xa8]
call fcn.005450e0
push eax
push 2
push dword [ebp - 0x4dc]
call dword [0x5fd664]
mov eax, dword [ebp - 0x90]
inc edi
cmp edi, dword [eax]
jle 0x443618
mov edi, dword [ebp - 0x498]
push eax
mov byte [ebp - 4], 0x10
call fcn.0041e483
add esp, 4
jmp 0x4451d5
cmp eax, dword [ebp - 0x4e4]
je 0x443689
cmp eax, dword [ebp - 0x518]
jne 0x4451d5
push 0xd
push dword [edi + 0x11c4]
xorps xmm0, xmm0
push ecx
push edx
push esi
lea ecx, [ebp - 0x184]
movups xmmword [ebp - 0x184], xmm0
movups xmmword [ebp - 0x174], xmm0
call fcn.00515f60
lea eax, [ebp - 0x49c]
mov byte [ebp - 4], 0x28
push eax
mov ecx, edi
call fcn.00441de0
push dword [ebp - 0x49c]
mov ecx, esi
call fcn.00522c70
lea ecx, [ebp - 0x184]
mov dword [ebp - 0x4c4], eax
call fcn.00515d60
push dword [ebp - 0x4d0]
mov ecx, edi
push dword [ebp - 0x4c8]
push dword [ebp - 0x49c]
call fcn.005de950
lea ecx, [ebp - 0x184]
mov byte [ebp - 4], 0x10
call fcn.00515ef0
jmp 0x4451d5
xorps xmm0, xmm0
push ecx
mov ecx, esi
movlpd qword [ebp - 0x90], xmm0
call fcn.00518aa0
mov dword [ebp - 0x90], eax
mov byte [ebp - 4], 0x14
cmp dword [eax], 1
jge 0x443741
push eax
mov byte [ebp - 4], 0x10
call fcn.0041e483
add esp, 4
jmp 0x4451d5
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, 0x67aa58
mov byte [ebp - 0x4b1], 0
push 0
mov eax, 0x67aa54
cmovne eax, ecx
lea ecx, [ebp - 0xa8]
push eax
push 0x67aa60
call fcn.00545150
mov eax, dword [edi + 0x1478]
cmp eax, dword [ebp - 0x4e0]
je 0x4437ae
cmp eax, dword [ebp - 0x4c8]
jne 0x4437a7
push 4
push dword [ebp - 0x51c]
lea ecx, [ebp - 0x448]
call fcn.00519b90
test eax, eax
jne 0x4437ae
mov eax, 0x61d1d0
jmp 0x4437ba
mov byte [ebp - 0x4b1], 1
mov eax, 0x67aad4
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0xa8]
push eax
call fcn.00543750
push 0xd
push dword [edi + 0x11c4]
xorps xmm0, xmm0
lea ecx, [ebp - 0x13c]
push dword [ebp - 0x49c]
movups xmmword [ebp - 0x13c], xmm0
push dword [ebp - 0x4c8]
movups xmmword [ebp - 0x12c], xmm0
push esi
call fcn.00515f60
sub esp, 8
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0xa8]
push 0x8c
push 0x8c
push 0
push 0
push 1
call fcn.005450e0
push eax
mov ecx, edi
call fcn.004661f0
test eax, eax
jne 0x44385e
lea ecx, [ebp - 0x13c]
call fcn.00515ef0
mov byte [ebp - 4], 0x10
mov ecx, dword [ebp - 0x90]
push ecx
call fcn.0041e483
add esp, 4
jmp 0x4451d5
xor esi, esi
mov dword [ebp - 0x7c], 0
xorps xmm0, xmm0
mov dword [ebp - 0x7c], esi
movq qword [ebp - 0x84], xmm0
mov dword [ebp - 0x84], esi
mov dword [ebp - 0x80], esi
sub esp, 8
mov byte [ebp - 4], 0x16
mov ecx, edi
push 0x50
push 0x1c2
push esi
push 0x67ab08
call fcn.00465970
lea eax, [edi + 0x14c0]
push 1
push str.Cancel
mov ecx, eax
mov dword [ebp - 0x528], eax
call fcn.00513c30
mov ecx, dword [ebp - 0x90]
mov dword [ebp - 0x4ac], esi
mov eax, dword [ecx]
mov dword [ebp - 0x4a4], eax
test eax, eax
je 0x444599
jmp 0x4438d7
mov ecx, dword [ebp - 0x90]
lea edx, [ebp - 0x84]
push edx
push dword [ecx + eax*4]
push dword [ebp - 0x49c]
push dword [ebp - 0x4b0]
call fcn.00449990
mov esi, dword [ebp - 0x7c]
cmp eax, 6
jb 0x44457e
mov edi, dword [ebp - 0x84]
lea ecx, [esi + 0xc]
cmp edi, 1
mov eax, 2
cmovbe edi, eax
mov dword [ebp - 0x84], edi
call fcn.00544e00
test al, al
je 0x44395f
cmp edi, 2
lea ecx, [esi + 0x18]
mov eax, 3
cmovbe edi, eax
mov dword [ebp - 0x84], edi
call fcn.00544e00
test al, al
je 0x44395f
cmp edi, 4
lea ecx, [esi + 0x30]
mov eax, 5
cmovbe edi, eax
mov dword [ebp - 0x84], edi
call fcn.00544e00
test al, al
jne 0x44457e
mov eax, dword [ebp - 0x90]
push 0
mov ecx, dword [eax]
mov eax, ecx
sub eax, dword [ebp - 0x4a4]
imul eax, eax, 0x64
cdq
idiv ecx
mov ecx, dword [ebp - 0x528]
push eax
call fcn.00513e70
mov ecx, dword [ebp - 0x498]
push 0
push 1
call fcn.00465630
test eax, eax
jne 0x444593
push 0
push 1
push 1
push 0
cmp edi, 4
lea ecx, [esi + 0x30]
mov eax, 5
push 0x67ab58
cmovbe edi, eax
call fcn.00543a40
test eax, eax
je 0x443b8c
test edi, edi
mov eax, 1
push 0x63a434
mov ecx, esi
cmove edi, eax
call fcn.005453d0
test al, al
je 0x4439fa
test edi, edi
mov eax, 1
push 0x63a464
mov ecx, esi
cmove edi, eax
call fcn.005453d0
test al, al
jne 0x443b8c
cmp edi, 1
lea ecx, [esi + 0xc]
mov eax, 2
cmovbe edi, eax
mov dword [ebp - 0x84], edi
call fcn.005450e0
push eax
push 0
call dword [0x5fdb00]
test eax, eax
je 0x443b8c
cmp edi, 1
lea ecx, [esi + 0xc]
mov eax, 2
cmovbe edi, eax
push 0
mov dword [ebp - 0x84], edi
call fcn.005450e0
lea edx, [ebp - 0x154]
mov ecx, eax
call fcn.00535270
add esp, 4
test eax, eax
je 0x443b8c
mov eax, dword [ebp - 0x498]
lea ecx, [esi + 0xc]
movsd xmm0, qword [eax + 8]
mov eax, 2
comisd xmm0, xmmword [0x6e42e8]
jb 0x443b05
cmp edi, 1
mov dword [ebp - 0x140], 0
xorps xmm0, xmm0
cmovbe edi, eax
movq qword [ebp - 0x148], xmm0
sub esp, 8
mov dword [ebp - 0x84], edi
push 0
push 0
push 0
push 0
push 0
push 0
push 0x61e2c0
call fcn.005450e0
push eax
mov eax, dword [ebp - 0x498]
lea ecx, [ebp - 0x148]
push 0x663d44
push dword [eax + 0x24]
call fcn.00545470
mov eax, dword [ebp - 0x498]
lea ecx, [ebp - 0x148]
push 0
push 0
mov byte [ebp - 4], 0x17
push dword [eax + 0x24]
call fcn.005450e0
mov edx, eax
xor ecx, ecx
call fcn.005316e0
lea ecx, [ebp - 0x148]
mov byte [ebp - 4], 0x16
call fcn.00545380
jmp 0x443b8c
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x67abb8
push 0
cmp edi, 1
push 1
cmovbe edi, eax
push 0xffffffffffffffff
cmp edi, 1
push 1
cmovbe edi, eax
push 0x61d06c
mov dword [ebp - 0x84], edi
call fcn.00543a40
inc eax
lea ecx, [esi + 0xc]
push eax
call fcn.005450b0
push eax
push 0x67ac80
lea ecx, [ebp - 0xa8]
call fcn.00545150
sub esp, 8
lea ecx, [ebp - 0xa8]
push 0x8c
push 0x190
push 0
push dword [ebp - 0x4b0]
push 4
call fcn.005450e0
mov ecx, dword [ebp - 0x498]
push eax
call fcn.004661f0
mov esi, dword [ebp - 0x7c]
cmp edi, 2
lea ecx, [esi + 0x18]
mov eax, 3
push 0x67aca0
cmovbe edi, eax
call fcn.00545410
test al, al
je 0x4442ab
push 0
push 1
push 1
push 0
cmp edi, 4
lea ecx, [esi + 0x30]
mov eax, 5
push 0x67ace4
cmovbe edi, eax
call fcn.00543a40
test eax, eax
je 0x4442ab
mov ecx, dword [ebp - 0x7c]
test edi, edi
mov eax, 1
cmove edi, eax
mov eax, 5
cmp edi, 4
push 0
cmovbe edi, eax
mov dword [ebp - 0x84], edi
call fcn.005450e0
push eax
lea ecx, [esi + 0x30]
call fcn.005450e0
mov ecx, dword [ebp - 0x498]
push eax
call fcn.004647f0
mov esi, dword [ebp - 0x7c]
cmp edi, 4
mov eax, 5
cmovbe edi, eax
push 0
lea ecx, [esi + 0x30]
mov dword [ebp - 0x84], edi
call fcn.005450e0
push eax
lea ecx, [ebp - 0x88]
call fcn.0053e5c0
push 0
push 0
cmp edi, 4
mov byte [ebp - 0x4b9], al
mov eax, 5
lea ecx, [esi + 0x30]
push 1
cmovbe edi, eax
push 0xffffffffffffffff
cmp edi, 4
push 1
cmovbe edi, eax
push 0x61d06c
mov dword [ebp - 0x84], edi
call fcn.00543a40
inc eax
lea ecx, [esi + 0x30]
push eax
call fcn.005450e0
push eax
lea ecx, [ebp - 0x9c]
call fcn.00542d10
push 0
cmp edi, 4
mov ecx, 5
push 1
cmovbe edi, ecx
mov eax, esi
push 2
cmp edi, 4
push 1
cmovbe edi, ecx
lea esi, [eax + 0x30]
lea ecx, [eax + 0x30]
mov dword [ebp - 0x84], edi
push 0x61d06c
call fcn.00543a40
push eax
push 1
mov ecx, esi
call fcn.005450e0
push eax
lea ecx, [ebp - 0xb4]
call fcn.00542d10
mov esi, dword [ebp - 0x7c]
cmp edi, 4
mov eax, 5
mov dword [ebp - 0xc8], 1
cmovbe edi, eax
lea eax, [ebp - 0xc8]
push 0
mov dword [ebp - 0x84], edi
lea ecx, [esi + 0x30]
push eax
push 4
push 0x67ad04
call fcn.005450e0
push eax
lea ecx, [ebp - 0x88]
call fcn.0053ebd0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x67ad18
lea ecx, [ebp - 0xb4]
call fcn.005450e0
push eax
lea ecx, [ebp - 0xc0]
call fcn.00545150
push ecx
push 0x20019
lea ecx, [ebp - 0xc0]
call fcn.005450e0
push eax
lea ecx, [ebp - 0x88]
call fcn.0053fa00
lea eax, [ebp - 0xc8]
push eax
push 0x646158
lea ecx, [ebp - 0x88]
call fcn.0053f680
test al, al
je 0x443dd8
cmp dword [ebp - 0xc8], 1
jne 0x443dd8
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x9c]
mov byte [ebp - 0x49d], 1
call fcn.005450e0
push eax
push 0x67ada8
lea ecx, [ebp - 0xb4]
call fcn.005450e0
push eax
lea ecx, [ebp - 0xc0]
call fcn.00545150
push 0
lea ecx, [ebp - 0xc0]
call fcn.005450e0
push eax
lea ecx, [ebp - 0x88]
call fcn.0053e5c0
jmp 0x443ddf
mov byte [ebp - 0x49d], 0
cmp byte [ebp - 0x4b9], 0
je 0x444277
mov ecx, dword [ebp - 0x90]
mov eax, dword [ebp - 0x4a4]
mov eax, dword [ecx + eax*4]
mov ecx, dword [ebp - 0x4b0]
push eax
push eax
push dword [ebp - 0x49c]
call fcn.005190c0
test edi, edi
mov eax, 1
push 0
cmove edi, eax
mov ecx, esi
push 0x61d070
mov dword [ebp - 0x84], edi
call fcn.005450e0
mov edi, dword [ebp - 0x498]
mov ecx, edi
push eax
push 0x67ae20
call fcn.00449100
xorps xmm0, xmm0
mov dword [ebp - 0x46c], 0
lea ecx, [ebp - 0x474]
movq qword [ebp - 0x474], xmm0
call fcn.0053fa90
xorps xmm0, xmm0
mov dword [ebp - 0x4cc], 0
lea ecx, [ebp - 0xd4]
mov dword [ebp - 0x4d4], 0
movq qword [ebp - 0xd4], xmm0
mov dword [ebp - 0xcc], 0
call fcn.00545530
xorps xmm0, xmm0
mov dword [ebp - 0x108], 0
lea ecx, [ebp - 0x110]
movq qword [ebp - 0x110], xmm0
call fcn.00545530
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x67aec8
lea ecx, [ebp - 0xb4]
mov byte [ebp - 4], 0x1a
call fcn.005450e0
push eax
lea ecx, [ebp - 0xc0]
call fcn.00545150
xorps xmm0, xmm0
lea ecx, [ebp - 0x494]
movups xmmword [ebp - 0x494], xmm0
call fcn.0053fae0
xorps xmm0, xmm0
lea ecx, [ebp - 0x484]
movups xmmword [ebp - 0x484], xmm0
call fcn.0053fae0
lea eax, [ebp - 0x494]
mov byte [ebp - 4], 0x1c
push eax
push 0x657a58
lea ecx, [ebp - 0xc0]
call fcn.005450e0
push eax
lea ecx, [ebp - 0x88]
call fcn.0053f850
test al, al
je 0x444078
cmp dword [ebp - 0x48c], 1
jne 0x444078
push dword [ebp - 0x494]
lea ecx, [ebp - 0x9c]
call fcn.00545410
test al, al
je 0x444078
lea eax, [ebp - 0x474]
mov dword [ebp - 0x4fc], 0
push eax
push 0
lea ecx, [ebp - 0x88]
call fcn.0053f350
test al, al
je 0x444078
mov esi, dword [ebp - 0x4fc]
mov edi, esi
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x474]
lea ecx, [ebp - 0xb4]
push 0x61d06c
call fcn.005450e0
push eax
lea ecx, [ebp - 0xc0]
call fcn.00545150
lea eax, [ebp - 0x484]
push eax
push 0x67af40
lea ecx, [ebp - 0xc0]
call fcn.005450e0
push eax
lea ecx, [ebp - 0xc4]
call fcn.0053f850
test al, al
je 0x44404d
cmp dword [ebp - 0x480], 6
jb 0x44404d
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x621b08
push dword [ebp - 0x484]
lea ecx, [ebp - 0xd4]
call fcn.00543750
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x621b08
push dword [ebp - 0x474]
lea ecx, [ebp - 0x110]
call fcn.00543750
inc edi
lea eax, [ebp - 0x474]
inc esi
push eax
push esi
lea ecx, [ebp - 0x88]
call fcn.0053f350
test al, al
jne 0x443f94
mov esi, dword [ebp - 0x7c]
mov dword [ebp - 0x4cc], edi
mov edi, dword [ebp - 0x498]
push 1
lea ecx, [ebp - 0xd4]
call fcn.00543d90
push 1
lea ecx, [ebp - 0x110]
call fcn.00543d90
cmp dword [ebp - 0x4cc], 1
jle 0x444113
push 0x96
push 0x190
push dword [ebp - 0x4b0]
lea ecx, [ebp - 0xd4]
push 0x67af58
push 0
call fcn.005450e0
push eax
mov ecx, edi
call fcn.00465310
mov dword [ebp - 0x4d4], eax
test eax, eax
jns 0x444113
lea ecx, [ebp - 0x484]
call fcn.0053fad0
lea ecx, [ebp - 0x494]
call fcn.0053fad0
lea ecx, [ebp - 0x110]
call fcn.00545380
lea ecx, [ebp - 0xd4]
call fcn.00545380
lea ecx, [ebp - 0x474]
mov byte [ebp - 4], 0x16
call fcn.0053fa80
jmp 0x44457e
xorps xmm0, xmm0
lea ecx, [ebp - 0xd4]
push 0
push 0x621b08
movups xmmword [ebp - 0xfc], xmm0
movq qword [ebp - 0xec], xmm0
call fcn.005450e0
push eax
lea ecx, [ebp - 0xfc]
call fcn.00542280
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x67afd0
lea ecx, [ebp - 0xb4]
mov byte [ebp - 4], 0x1d
call fcn.005450e0
push eax
lea ecx, [ebp - 0xc0]
call fcn.00545150
push 0
push dword [ebp - 0x4d4]
lea ecx, [ebp - 0xfc]
call fcn.00542200
push eax
lea ecx, [ebp - 0xc0]
call fcn.005450e0
push eax
mov ecx, edi
call fcn.004647f0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x67b058
lea ecx, [ebp - 0xb4]
call fcn.005450e0
push eax
lea ecx, [ebp - 0xc0]
call fcn.00545150
mov edi, dword [ebp - 0x4d4]
lea ecx, [ebp - 0xfc]
push 0
push edi
call fcn.00542200
push eax
push 1
push 0x657a58
lea ecx, [ebp - 0xc0]
call fcn.005450e0
push eax
lea ecx, [ebp - 0xc4]
call fcn.0053ebd0
cmp byte [ebp - 0x49d], 0
je 0x444267
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x67aec8
lea ecx, [ebp - 0xb4]
call fcn.005450e0
push eax
lea ecx, [ebp - 0xc0]
call fcn.00545150
push 0
push edi
lea ecx, [ebp - 0xfc]
call fcn.00542200
push eax
push 1
push 0x657a58
lea ecx, [ebp - 0xc0]
call fcn.005450e0
push eax
lea ecx, [ebp - 0xc4]
call fcn.0053ebd0
lea ecx, [ebp - 0xfc]
call fcn.00542260
jmp 0x4440d3
test edi, edi
mov eax, 1
push 0
cmove edi, eax
mov ecx, esi
push 0x61d070
mov dword [ebp - 0x84], edi
call fcn.005450e0
mov ecx, dword [ebp - 0x498]
push eax
push 0x67ae78
call fcn.00449100
jmp 0x44457e
test edi, edi
mov eax, 1
push 0x645d48
mov ecx, esi
cmove edi, eax
call fcn.00545410
test al, al
je 0x4446bf
push 0
push 1
push 1
cmp edi, 4
lea ecx, [esi + 0x30]
mov eax, 5
push 0
cmovbe edi, eax
push 0x67b0bc
mov dword [ebp - 0x84], edi
call fcn.00543a40
test eax, eax
je 0x4446bf
mov ecx, dword [ebp - 0x498]
push 0x82
push 0x1c2
push dword [ebp - 0x4b0]
push 0x67b0f8
push 0
push 0x67b198
call fcn.00465310
cmp eax, 2
ja 0x44457e
test eax, eax
jne 0x444332
mov eax, 0x648654
jmp 0x444341
cmp eax, 1
mov eax, 0x645d60
je 0x444341
mov eax, 0x67b1f8
lea ecx, [ebp - 0x9c]
push eax
call fcn.00545460
mov ecx, dword [ebp - 0x7c]
test edi, edi
mov eax, 1
cmove edi, eax
mov eax, 5
cmp edi, 4
push 0
cmovbe edi, eax
mov dword [ebp - 0x84], edi
call fcn.005450e0
push eax
lea ecx, [esi + 0x30]
call fcn.005450e0
mov ecx, dword [ebp - 0x498]
push eax
call fcn.004647f0
mov eax, dword [ebp - 0x7c]
cmp edi, 4
push 0
mov edx, 5
push 1
cmovbe edi, edx
lea ecx, [eax + 0x30]
push 1
cmp edi, 4
lea esi, [eax + 0x30]
push 1
cmovbe edi, edx
push 0x67b210
mov dword [ebp - 0x84], edi
call fcn.00543a40
push eax
push 1
mov ecx, esi
call fcn.005450e0
push eax
lea ecx, [ebp - 0xb4]
call fcn.00542d10
push 0
lea ecx, [ebp - 0x9c]
call fcn.005450e0
push eax
push 1
push 0x645d48
lea ecx, [ebp - 0xb4]
call fcn.005450e0
push eax
lea ecx, [ebp - 0x88]
call fcn.0053ebd0
push 0
test al, al
je 0x4446a4
mov eax, dword [ebp - 0x7c]
cmp edi, 4
mov ecx, 5
cmovbe edi, ecx
push 1
push 2
cmp edi, 4
lea esi, [eax + 0x30]
push 1
cmovbe edi, ecx
lea ecx, [eax + 0x30]
push 0x61d06c
mov dword [ebp - 0x84], edi
call fcn.00543a40
push eax
push 1
mov ecx, esi
call fcn.005450e0
push eax
lea ecx, [ebp - 0xb4]
call fcn.00542d10
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x67b220
lea ecx, [ebp - 0xb4]
call fcn.005450e0
push eax
lea ecx, [ebp - 0xc0]
call fcn.00545150
push ecx
push 0x20019
lea ecx, [ebp - 0xc0]
mov dword [ebp - 0xe4], 1
call fcn.005450e0
push eax
lea ecx, [ebp - 0x88]
call fcn.0053fa00
test al, al
je 0x44452a
lea eax, [ebp - 0xe4]
push eax
push 0x645cdc
lea ecx, [ebp - 0x88]
call fcn.0053f680
test al, al
je 0x44452a
cmp dword [ebp - 0xe4], 1
jne 0x44452a
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x67b298
lea ecx, [ebp - 0xb4]
call fcn.005450e0
push eax
lea ecx, [ebp - 0xc0]
call fcn.00545150
push 0
lea ecx, [ebp - 0x9c]
call fcn.005450e0
push eax
push 1
push 0x645d48
lea ecx, [ebp - 0xc0]
call fcn.005450e0
push eax
lea ecx, [ebp - 0x88]
call fcn.0053ebd0
push 1
lea ecx, [ebp - 0x9c]
call fcn.005450e0
mov ecx, dword [ebp - 0x90]
push eax
mov eax, dword [ebp - 0x4a4]
push dword [ecx + eax*4]
mov ecx, dword [ebp - 0x4b0]
push dword [ebp - 0x49c]
call fcn.00517c30
push 0
push 0x61d070
lea ecx, [ebp - 0x9c]
call fcn.005450e0
push eax
push 0x67b300
mov ecx, dword [ebp - 0x498]
call fcn.00449100
mov esi, dword [ebp - 0x7c]
mov eax, dword [ebp - 0x4a4]
sub eax, 1
mov dword [ebp - 0x4a4], eax
jne 0x4438d1
mov edi, dword [ebp - 0x498]
push 2
lea ecx, [edi + 0x14c0]
call fcn.005139e0
lea ecx, [ebp - 0x13c]
call fcn.00515d60
push dword [ebp - 0x4d0]
mov ecx, edi
push dword [ebp - 0x4c8]
push dword [ebp - 0x49c]
call fcn.005de950
cmp byte [ebp - 0x4b1], 0
je 0x444649
mov eax, dword [ebp - 0x90]
mov ecx, dword [ebp - 0x4ac]
cmp ecx, dword [eax]
jne 0x444649
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
cmp ecx, 1
mov eax, 0x61d074
push 0
mov ecx, 0x63fe78
push 0x67babc
cmovne eax, ecx
lea ecx, [ebp - 0xa8]
push eax
push 0x67baf8
call fcn.00545150
sub esp, 8
lea ecx, [ebp - 0xa8]
push 0x8c
push 0x190
push 0
push dword [ebp - 0x4b0]
push 4
call fcn.005450e0
push eax
mov ecx, edi
call fcn.004661f0
test esi, esi
je 0x44467c
add esi, 0xfffffffc
mov byte [ebp - 4], 0x21
mov eax, dword [ebp - 0x7c]
push fcn.00545380
push dword [esi]
push 0xc
push eax
call fcn.0041e718
mov eax, dword [esi]
lea eax, [eax + eax*2]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.0041e488
add esp, 8
lea ecx, [ebp - 0x13c]
call fcn.00515ef0
mov byte [ebp - 4], 0x10
push dword [ebp - 0x90]
call fcn.0041e483
mov esi, dword [ebp - 0x4b0]
add esp, 4
jmp 0x4451d5
push 0x61d070
lea ecx, [ebp - 0x9c]
call fcn.005450e0
push eax
push 0x67b350
jmp 0x444570
test edi, edi
mov eax, 1
push 0x661660
mov ecx, esi
cmove edi, eax
call fcn.00545410
test al, al
je 0x444861
push 0
push 1
push 1
cmp edi, 4
lea ecx, [esi + 0x30]
mov eax, 5
push 0
cmovbe edi, eax
push 0x67b0bc
mov dword [ebp - 0x84], edi
call fcn.00543a40
test eax, eax
je 0x444861
mov ecx, dword [ebp - 0x498]
sub esp, 8
push 0x1f4
push dword [ebp - 0x4b0]
push 0x67b398
push 0x67b3f0
call fcn.00465080
push eax
lea ecx, [ebp - 0x9c]
call fcn.00545110
lea ecx, [ebp - 0x9c]
call fcn.00544e00
test al, al
jne 0x44457e
mov ecx, dword [ebp - 0x7c]
cmp edi, 4
mov eax, 5
cmovbe edi, eax
mov eax, 1
test edi, edi
push 0
cmove edi, eax
mov dword [ebp - 0x84], edi
call fcn.005450e0
push eax
lea ecx, [esi + 0x30]
call fcn.005450e0
mov ecx, dword [ebp - 0x498]
push eax
call fcn.004647f0
mov eax, dword [ebp - 0x7c]
cmp edi, 4
push 0
mov ecx, 5
cmovbe edi, ecx
push 1
push 1
cmp edi, 4
lea esi, [eax + 0x30]
push 1
cmovbe edi, ecx
lea ecx, [eax + 0x30]
push 0x67b210
mov dword [ebp - 0x84], edi
call fcn.00543a40
push eax
push 1
mov ecx, esi
call fcn.005450e0
push eax
lea ecx, [ebp - 0xb4]
call fcn.00542d10
push 0
lea ecx, [ebp - 0x9c]
call fcn.005450e0
push eax
push 1
push 0x661660
lea ecx, [ebp - 0xb4]
call fcn.005450e0
push eax
lea ecx, [ebp - 0x88]
call fcn.0053ebd0
lea ecx, [ebp - 0x9c]
test al, al
je 0x44484a
push 1
call fcn.005450e0
mov ecx, dword [ebp - 0x90]
push eax
mov eax, dword [ebp - 0x4a4]
push dword [ecx + eax*4]
mov ecx, dword [ebp - 0x4b0]
push dword [ebp - 0x49c]
call fcn.00517c30
push 0
push 0x61d070
lea ecx, [ebp - 0x9c]
call fcn.005450e0
push eax
push 0x67b480
jmp 0x444570
push 0
push 0x61d070
call fcn.005450e0
push eax
push 0x67b4d8
jmp 0x444570
test edi, edi
mov eax, 1
push 0x6616fc
mov ecx, esi
cmove edi, eax
call fcn.00545410
test al, al
je 0x444a03
push 0
push 1
push 1
cmp edi, 4
lea ecx, [esi + 0x30]
mov eax, 5
push 0
cmovbe edi, eax
push 0x67b0bc
mov dword [ebp - 0x84], edi
call fcn.00543a40
test eax, eax
je 0x444a03
mov ecx, dword [ebp - 0x498]
sub esp, 8
push 0x1f4
push dword [ebp - 0x4b0]
push 0x67b524
push 0x67b550
call fcn.00465080
push eax
lea ecx, [ebp - 0x9c]
call fcn.00545110
lea ecx, [ebp - 0x9c]
call fcn.00544e00
test al, al
jne 0x44457e
mov ecx, dword [ebp - 0x7c]
cmp edi, 4
mov eax, 5
cmovbe edi, eax
mov eax, 1
test edi, edi
push 0
cmove edi, eax
mov dword [ebp - 0x84], edi
call fcn.005450e0
push eax
lea ecx, [esi + 0x30]
call fcn.005450e0
mov ecx, dword [ebp - 0x498]
push eax
call fcn.004647f0
mov eax, dword [ebp - 0x7c]
cmp edi, 4
push 0
mov edx, 5
push 1
cmovbe edi, edx
lea ecx, [eax + 0x30]
push 1
cmp edi, 4
lea esi, [eax + 0x30]
push 1
cmovbe edi, edx
push 0x67b210
mov dword [ebp - 0x84], edi
call fcn.00543a40
push eax
push 1
mov ecx, esi
call fcn.005450e0
push eax
lea ecx, [ebp - 0xb4]
call fcn.00542d10
push 0
lea ecx, [ebp - 0x9c]
call fcn.005450e0
push eax
push 1
push 0x6616fc
lea ecx, [ebp - 0xb4]
call fcn.005450e0
push eax
lea ecx, [ebp - 0x88]
call fcn.0053ebd0
lea ecx, [ebp - 0x9c]
test al, al
je 0x4449ec
push 1
call fcn.005450e0
mov ecx, dword [ebp - 0x90]
push eax
mov eax, dword [ebp - 0x4a4]
push dword [ecx + eax*4]
mov ecx, dword [ebp - 0x4b0]
push dword [ebp - 0x49c]
call fcn.00517c30
push 0
push 0x61d070
lea ecx, [ebp - 0x9c]
call fcn.005450e0
push eax
push 0x67b5f8
jmp 0x444570
push 0
push 0x61d070
call fcn.005450e0
push eax
push 0x67b668
jmp 0x444570
test edi, edi
mov eax, 1
push 0x67b6d0
mov ecx, esi
cmove edi, eax
call fcn.00545410
test al, al
je 0x444bd0
push 0
push 1
push 1
cmp edi, 4
lea ecx, [esi + 0x30]
mov eax, 5
push 0
cmovbe edi, eax
push 0x67b0bc
mov dword [ebp - 0x84], edi
call fcn.00543a40
test eax, eax
je 0x444bd0
mov eax, dword [ebp - 0x498]
lea ecx, [ebp - 0x9c]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x67b6e8
push dword [eax + 0x24]
call fcn.00545150
cmp byte [ebp - 0x4b1], 0
je 0x444a98
push 2
lea ecx, [ebp - 0x9c]
call fcn.005450e0
push eax
call fcn.004d5430
xorps xmm0, xmm0
lea ecx, [ebp - 0x9c]
push 0
push 2
movups xmmword [ebp - 0x104], xmm0
movups xmmword [ebp - 0xf4], xmm0
call fcn.005450e0
push eax
lea ecx, [ebp - 0x104]
call fcn.00533440
push 0
push 0x67b700
lea ecx, [ebp - 0x104]
mov byte [ebp - 4], 0x1e
call fcn.005324b0
push 0
cmp edi, 4
lea ecx, [esi + 0x30]
mov eax, 5
push 1
cmovbe edi, eax
push 1
cmp edi, 4
push 1
cmovbe edi, eax
push 0x67b210
mov dword [ebp - 0x84], edi
call fcn.00543a40
push eax
push 1
lea ecx, [esi + 0x30]
call fcn.005450e0
push eax
lea ecx, [ebp - 0xb4]
call fcn.00542d10
push 0
lea ecx, [ebp - 0x9c]
call fcn.005450e0
push eax
push 1
push 0x67b6d0
lea ecx, [ebp - 0xb4]
call fcn.005450e0
push eax
lea ecx, [ebp - 0x88]
call fcn.0053ebd0
test al, al
je 0x444b88
push 1
lea ecx, [ebp - 0x9c]
call fcn.005450e0
mov ecx, dword [ebp - 0x90]
push eax
mov eax, dword [ebp - 0x4a4]
push dword [ecx + eax*4]
mov ecx, dword [ebp - 0x4b0]
push dword [ebp - 0x49c]
call fcn.00517c30
push 0
push 0
push 0
push 0x67b778
jmp 0x444b93
push 0
push 0
push 0
push 0x67b7c8
mov ecx, dword [ebp - 0x498]
call fcn.00449100
lea ecx, [ebp - 0xfc]
mov byte [ebp - 4], 0x16
call fcn.00542260
mov eax, dword [ebp - 0x104]
cmp eax, 0xffffffff
je 0x44457b
test eax, eax
je 0x44457b
push eax
call dword [0x5fd3a0]
jmp 0x44457b
test edi, edi
mov eax, 1
push 0x67b80c
mov ecx, esi
cmove edi, eax
call fcn.00545410
test al, al
je 0x444d8c
push 0
push 1
push 1
push 0
cmp edi, 4
lea ecx, [esi + 0x30]
mov eax, 5
push 0x67b0bc
cmovbe edi, eax
call fcn.00543a40
test eax, eax
je 0x444d8c
cmp edi, 4
lea ecx, [esi + 0x30]
mov eax, 5
cmovbe edi, eax
mov dword [ebp - 0x84], edi
call fcn.005450e0
push eax
call fcn.00464290
push 0
cmp edi, 4
mov byte [ebp - 0x4b9], al
mov eax, 5
lea ecx, [esi + 0x30]
push 1
cmovbe edi, eax
push 2
cmp edi, 4
push 1
cmovbe edi, eax
push 0x61d06c
mov dword [ebp - 0x84], edi
call fcn.00543a40
push eax
push 1
lea ecx, [esi + 0x30]
call fcn.005450e0
push eax
lea ecx, [ebp - 0xb4]
call fcn.00542d10
mov esi, dword [ebp - 0x7c]
cmp edi, 4
mov eax, 5
xorps xmm0, xmm0
push 1
cmovbe edi, eax
movq qword [ebp - 0xec], xmm0
lea ecx, [esi + 0x30]
mov dword [ebp - 0x84], edi
push 0x624a28
movups xmmword [ebp - 0xfc], xmm0
call fcn.005450e0
push eax
lea ecx, [ebp - 0xfc]
call fcn.00542280
lea ecx, [ebp - 0xfc]
mov byte [ebp - 4], 0x1f
call fcn.005421f0
cmp eax, 2
jbe 0x444d28
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x67b848
lea ecx, [ebp - 0xb4]
call fcn.005450e0
push eax
lea ecx, [ebp - 0xc0]
call fcn.00545150
push 3
lea ecx, [ebp - 0xfc]
call fcn.00542200
push eax
lea ecx, [ebp - 0xc0]
call fcn.005450e0
push eax
lea ecx, [ebp - 0x88]
call fcn.0053e5c0
cmp byte [ebp - 0x4b9], 0
lea ecx, [esi + 0xc]
push 0
mov eax, 2
push 0
je 0x444d56
cmp edi, 1
cmovbe edi, eax
mov dword [ebp - 0x84], edi
call fcn.005450e0
push eax
push 0x67b8d8
jmp 0x444d6d
cmp edi, 1
cmovbe edi, eax
mov dword [ebp - 0x84], edi
call fcn.005450e0
push eax
push 0x67b940
mov ecx, dword [ebp - 0x498]
call fcn.00449100
lea ecx, [ebp - 0xfc]
mov byte [ebp - 4], 0x16
call fcn.00542260
jmp 0x44457e
cmp edi, 2
lea ecx, [esi + 0x18]
mov eax, 3
cmovbe edi, eax
sub esp, 8
push 0x67b9a0
call fcn.00542920
test al, al
je 0x444dd5
cmp edi, 1
lea ecx, [esi + 0xc]
mov eax, 2
cmovbe edi, eax
mov dword [ebp - 0x84], edi
call fcn.005450e0
mov ecx, dword [ebp - 0x498]
push eax
call fcn.00463c30
jmp 0x445072
cmp byte [ebp - 0x4b1], 0
je 0x444e42
mov ecx, dword [ebp - 0x498]
cmp edi, 1
mov eax, 2
cmovbe edi, eax
mov dword [ebp - 0x84], edi
lea ecx, [ecx + 0x118c]
call fcn.005450e0
push eax
lea ecx, [esi + 0xc]
call fcn.005453d0
mov esi, dword [ebp - 0x7c]
test al, al
je 0x444e42
cmp edi, 1
lea ecx, [esi + 0xc]
mov eax, 2
push 0
cmovbe edi, eax
push 0xc
mov dword [ebp - 0x84], edi
call fcn.005450e0
mov ecx, dword [ebp - 0x498]
push eax
call fcn.00448ae0
cmp eax, 1
jl 0x44457e
mov ecx, dword [ebp - 0x498]
cmp edi, 4
push 0
push 1
mov eax, 5
push 1
cmovbe edi, eax
lea ecx, [ecx + 0x1ac]
push 0
mov dword [ebp - 0x84], edi
call fcn.005450e0
push eax
lea ecx, [esi + 0x30]
call fcn.00543a40
mov esi, dword [ebp - 0x7c]
cmp eax, 1
jne 0x444f53
mov eax, dword [ebp - 0x498]
movsd xmm0, qword [0x6e42e8]
comisd xmm0, xmmword [eax + 8]
jbe 0x444eca
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
cmp edi, 4
lea ecx, [esi + 0x30]
mov eax, 5
push 0
cmovbe edi, eax
push 0x6288d8
mov dword [ebp - 0x84], edi
call fcn.00543750
cmp edi, 4
lea ecx, [esi + 0x30]
mov eax, 5
cmovbe edi, eax
mov dword [ebp - 0x84], edi
call fcn.005450e0
push eax
call dword [0x5fd684]
test eax, eax
mov eax, 5
jne 0x444f18
cmp edi, 4
lea ecx, [esi + 0x30]
cmovbe edi, eax
mov dword [ebp - 0x84], edi
call fcn.005450e0
mov ecx, dword [ebp - 0x498]
push eax
call fcn.00463ac0
jmp 0x445072
mov ecx, dword [ebp - 0x7c]
cmp edi, 4
cmovbe edi, eax
mov eax, 1
test edi, edi
cmove edi, eax
mov dword [ebp - 0x84], edi
call fcn.005450e0
push eax
lea ecx, [esi + 0x30]
call fcn.005450e0
mov ecx, dword [ebp - 0x498]
push eax
call fcn.004646d0
mov esi, dword [ebp - 0x7c]
jmp 0x445072
cmp edi, 4
mov byte [ebp - 0x4b8], 1
mov eax, 5
lea ecx, [esi + 0x30]
cmovbe edi, eax
call fcn.005452f0
test eax, eax
je 0x444fb2
mov ecx, dword [ebp - 0x7c]
cmp edi, 4
mov eax, 5
cmovbe edi, eax
mov eax, 1
test edi, edi
cmove edi, eax
mov dword [ebp - 0x84], edi
call fcn.005450e0
push eax
lea ecx, [esi + 0x30]
call fcn.005450e0
mov ecx, dword [ebp - 0x498]
push eax
call fcn.004646d0
mov esi, dword [ebp - 0x7c]
mov byte [ebp - 0x4b8], al
cmp edi, 5
lea ecx, [esi + 0x3c]
mov eax, 6
cmovbe edi, eax
call fcn.005452f0
test eax, eax
je 0x445015
cmp edi, 5
mov eax, 6
mov ecx, esi
cmovbe edi, eax
mov eax, 1
test edi, edi
cmove edi, eax
mov dword [ebp - 0x84], edi
call fcn.005450e0
push eax
lea ecx, [esi + 0x3c]
call fcn.005450e0
mov ecx, dword [ebp - 0x498]
push eax
call fcn.004646d0
mov edx, dword [ebp - 0x4b8]
movzx ecx, dl
movzx eax, al
imul eax, ecx
mov dword [ebp - 0x4b8], eax
cmp edi, 3
lea ecx, [esi + 0x24]
mov eax, 4
cmovbe edi, eax
call fcn.005452f0
test eax, eax
je 0x445078
cmp edi, 3
mov eax, 4
mov ecx, esi
cmovbe edi, eax
mov eax, 1
test edi, edi
cmove edi, eax
mov dword [ebp - 0x84], edi
call fcn.005450e0
push eax
lea ecx, [esi + 0x24]
call fcn.005450e0
mov ecx, dword [ebp - 0x498]
push eax
call fcn.004646d0
mov edx, dword [ebp - 0x4b8]
movzx ecx, dl
movzx eax, al
imul eax, ecx
mov byte [ebp - 0x4b8], al
xorps xmm0, xmm0
mov dword [ebp - 0x114], 0
lea ecx, [ebp - 0x11c]
movq qword [ebp - 0x11c], xmm0
call fcn.00545530
cmp byte [ebp - 0x4b8], 0
mov byte [ebp - 4], 0x20
push 0
je 0x445103
mov eax, dword [ebp - 0x4a4]
mov ecx, dword [ebp - 0x90]
inc dword [ebp - 0x4ac]
push dword [ecx + eax*4]
mov ecx, dword [ebp - 0x4b0]
push dword [ebp - 0x49c]
call fcn.005190c0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
test edi, edi
mov eax, 1
push 0
cmove edi, eax
mov ecx, esi
push 0x61e2c0
mov dword [ebp - 0x84], edi
call fcn.005450e0
push eax
push 0x67ba28
jmp 0x445135
push 0
push 0
push 0
push 0
push 0
push 0
push 0
test edi, edi
mov eax, 1
push 0
cmove edi, eax
mov ecx, esi
push 0x61e2c0
mov dword [ebp - 0x84], edi
call fcn.005450e0
push eax
push 0x67ba78
lea ecx, [ebp - 0x11c]
call fcn.00545150
push 0
push 0
push 0
lea ecx, [ebp - 0x11c]
call fcn.005450e0
mov ecx, dword [ebp - 0x498]
push eax
call fcn.00449100
lea ecx, [ebp - 0x11c]
mov byte [ebp - 4], 0x16
call fcn.00545380
jmp 0x44457e
push 0xd
push dword [edi + 0x11c4]
xorps xmm0, xmm0
push ecx
push edx
push esi
lea ecx, [ebp - 0x13c]
movups xmmword [ebp - 0x13c], xmm0
movups xmmword [ebp - 0x12c], xmm0
call fcn.00515f60
mov byte [ebp - 4], 0x11
mov ecx, edi
push dword [ebp - 0x49c]
call fcn.00437380
push dword [ebp - 0x4dc]
call dword [0x5fd7a8]
lea ecx, [ebp - 0x13c]
mov byte [ebp - 4], 0x10
call fcn.00515ef0
jmp 0x4451d5
push dword [ebp - 0x4d0]
push edx
push ecx
mov ecx, edi
call fcn.005de950
push 0
mov ecx, edi
call fcn.005e2990
test eax, eax
jne 0x442b60
jmp 0x4451ef
mov byte [ebp - 0x4ba], 1
push dword [ebp - 0x4c4]
push 0x67a994
call fcn.00449a20
push 0
push 0x67a994
mov ecx, edi
call fcn.0044da30
mov al, byte [ebp - 0x4ba]
mov ecx, edi
xor al, 1
movzx eax, al
push eax
call fcn.0044d910
lea ecx, [ebp - 0xc4]
call fcn.0053f9b0
lea ecx, [ebp - 0x88]
call fcn.0053f9b0
lea ecx, [ebp - 0x154]
call fcn.00545380
lea ecx, [ebp - 0x9c]
call fcn.00545380
lea ecx, [ebp - 0xc0]
call fcn.00545380
lea ecx, [ebp - 0xb4]
call fcn.00545380
lea ecx, [ebp - 0xa8]
call fcn.00545380
lea ecx, [ebp - 0x44c]
call fcn.005239f0
lea ecx, [ebp - 0x468]
call fcn.005239f0
lea ecx, [ebp - 0x464]
call fcn.005239f0
lea ecx, [ebp - 0x460]
call fcn.005239f0
lea ecx, [ebp - 0x450]
call fcn.005239f0
lea ecx, [ebp - 0x45c]
call fcn.005239f0
lea ecx, [ebp - 0x458]
call fcn.005239f0
lea ecx, [ebp - 0x454]
call fcn.005239f0
lea ecx, [ebp - 0x448]
call fcn.0051f2f0
mov al, byte [ebp - 0x4ba]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0041e475
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret