Function at 0x446dd0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5e6762
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x1f8
mov eax, dword [0x704200]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x1e8], edi
push 1
push 0x678c2c
call fcn.0044dd60
push 1
mov dword [ebp - 0x1ac], eax
lea ecx, [edi + 0x11a4]
mov eax, dword [edi + 0x1f20]
push 0x678c60
mov dword [ebp - 0x1a8], eax
mov dword [edi + 0x1f20], 0
call fcn.005455c0
mov esi, dword [edi + 0x14b4]
lea eax, [ebp - 0x10c]
push eax
push dword [ebp - 0x1ac]
mov dword [ebp - 0x1b0], esi
call dword [0x5fd76c]
push 0xffffffffffffffff
push 0x5f
push 0xa5
push 0xa
push 0x64
push dword [edi + 0x68]
mov ecx, edi
call fcn.004650a0
movsd xmm1, qword [0x6e32c0]
mov ecx, esi
push 0
push str.Arial
push 1
push 0x320
call fcn.00521b80
push 0x37
push 0x50
push 3
push 0xa
mov ecx, edi
call fcn.0044e5a0
push 0x678ccc
lea ecx, [edi + 0x1418]
call fcn.00545870
push 0xffffffffffffffff
push 0x10000001
push 0x2d
push 0x5a
push 0x3c
push 5
lea ecx, [edi + 0x1418]
call fcn.005454f0
push eax
mov ecx, esi
call fcn.0051e2b0
push dword [edi + 0x1408]
mov ecx, esi
push 0xffffffffffffffff
call fcn.0051c690
movsd xmm1, qword [0x6e3298]
mov ecx, esi
push 0
push str.Arial
push 1
push 0x190
call fcn.00521b80
push 0xffffffffffffffff
push 0x10000001
push 0x10
push 0x91
push 0x14
push 0x6e
push 0x678cec
mov ecx, esi
call fcn.0051e2b0
push dword [edi + 0x1408]
mov ecx, esi
push 0xffffffffffffffff
call fcn.0051c690
push ecx
push 0xffffffffffffffff
push ecx
push 0
push 0x678d10
push 1
push ecx
push 0x8c
push 0x32
push 0x73
push 0x678dc4
mov ecx, edi
call fcn.0044e2c0
push ecx
push 0xffffffffffffffff
push ecx
push 0
push 0x678df0
push 0
push ecx
push 0x8c
push 0x4b
push 0x73
push 0x678f24
mov ecx, edi
mov dword [ebp - 0x1f0], eax
call fcn.0044e2c0
push 0
push ecx
mov dword [esp], 0x41500000
mov ecx, edi
push 0x678f50
push 0x5f
push 0x50
push 0xa
push 0x10e
push 0x72
push 0x67900c
mov dword [ebp - 0x1f4], eax
call fcn.0044e4d0
push 0
push ecx
mov dword [esp], 0x41500000
mov ecx, edi
push 0x679028
push 0x5f
push 0x4b
push 0xa
push 0x163
push 0x8b
push 0x6790dc
mov dword [ebp - 0x1a0], eax
call fcn.0044e4d0
push 0
push ecx
mov dword [esp], 0x41500000
mov ecx, edi
push 0x679100
push 0x5f
push 0x4b
push 0xa
push 0x1b3
push 0x8b
push 0x67914c
mov dword [ebp - 0x204], eax
call fcn.0044e4d0
push 0
push ecx
mov dword [esp], 0x41500000
mov ecx, edi
push 0x679168
push 0x5f
push 0x4b
push 0xa
push 0x203
push 0xa4
push 0x6791c4
mov dword [ebp - 0x1cc], eax
call fcn.0044e4d0
push 0
push ecx
mov dword [esp], 0x41500000
push 0x672df4
push 0x5f
mov dword [ebp - 0x1ec], eax
push 0x46
push 0xa
push 0x253
push 0x7d
push 0x672e20
mov ecx, edi
call fcn.0044e4d0
push 0
push ecx
mov dword [esp], 0x41500000
mov ecx, edi
push 0x6791e0
push 0x5f
push 0x4b
push 0xa
push 0x29e
push 0xb3
push 0x672de8
mov dword [edi + 0x11c4], eax
call fcn.0044e4d0
push 0
push 0x10800080
push 0x19
push 0xb9
push 0x23
push 0x2f3
push 0x679220
mov ecx, esi
mov dword [edi + 0x11c8], eax
call fcn.0051e460
push 0x909090
push 0xffffffffffffffff
mov ecx, esi
mov dword [ebp - 0x194], eax
call fcn.0051c690
movsd xmm0, qword [0x6e32a8]
sub esp, 0xc
movsd qword [esp + 4], xmm0
push 0
push ecx
push 0x190
push 0xffffffffffffffff
mov ecx, esi
call fcn.0051c530
push 0x40
push 0xffffffffffffffff
mov ecx, esi
call fcn.0051ae10
push 0
push ecx
mov dword [esp], 0x41500000
mov ecx, edi
push 0x6775b4
push 0x28
push 0x5a
push 0x41
push 0x2f3
push 0x86
push 0x6775b4
call fcn.0044e430
push 0
push ecx
mov dword [esp], 0x41500000
mov ecx, edi
push 0x62c6a0
push 0x28
push 0x5a
push 0x41
push 0x352
push 0x99
push 0x6775c8
mov dword [ebp - 0x184], eax
call fcn.0044e430
push 0
push 0x679250
mov ecx, edi
mov dword [ebp - 0x1c8], eax
call fcn.0044dbb0
mov ecx, edi
call fcn.0044d9e0
xorps xmm0, xmm0
movq qword [ebp - 0x8c], xmm0
sub esp, 8
mov dword [ebp - 0x84], 0
lea ecx, [ebp - 0x8c]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x679270
push 0x62edc8
call fcn.00545880
mov dword [ebp - 4], 0
lea ecx, [ebp - 0xfc]
xorps xmm0, xmm0
mov dword [ebp - 0xf4], 0
movq qword [ebp - 0xfc], xmm0
call fcn.00545940
push 0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x8c]
push 0xffffffffffffffff
mov dword [ebp - 0x94], 0
call fcn.005454f0
push eax
lea ecx, [ebp - 0x94]
call fcn.0053fe40
lea eax, [ebp - 0x90]
mov byte [ebp - 4], 2
push eax
push 0x679290
lea ecx, [ebp - 0x94]
call fcn.0053fa70
test al, al
jne 0x447241
mov dword [ebp - 0x90], 1
movsd xmm1, qword [0x6e3298]
mov ecx, esi
push 0
push str.Arial
push 1
push 0x190
mov byte [ebp - 0x17d], 0
mov byte [ebp - 0x175], 0
mov dword [ebp - 0x17c], 0
call fcn.00521b80
push dword [ebp - 0x1a8]
lea eax, [ebp - 0x17c]
mov ecx, edi
push dword [ebp - 0x90]
push eax
call fcn.00446ba0
push dword [ebp - 0x17c]
mov ecx, esi
call fcn.00523000
push 0
push 1
mov ecx, edi
mov dword [ebp - 0x174], eax
call fcn.00465b20
push 0x48
call dword [0x5fd6d0]
movsd xmm0, qword [0x6e3258]
mov ecx, eax
comisd xmm0, xmmword [edi + 8]
mov dword [ebp - 0x18c], ecx
jb 0x4472e2
push 4
call dword [0x5fd7f8]
mov ecx, dword [ebp - 0x18c]
or eax, 0xff000000
jmp 0x4472e4
xor eax, eax
push eax
push ecx
push ecx
push 0x8b
mov ecx, edi
mov dword [ebp - 0x198], eax
call fcn.0045e830
push eax
lea ecx, [ebp - 0x154]
call fcn.00523da0
mov byte [ebp - 4], 3
mov ecx, esi
push dword [ebp - 0x154]
push 0x6792a8
push dword [ebp - 0x184]
call fcn.0051ee70
push 0
push eax
push dword [ebp - 0x184]
mov ecx, esi
mov dword [ebp - 0x1c4], eax
call fcn.00522fb0
push eax
call dword [0x5fd800]
push dword [ebp - 0x198]
mov eax, dword [ebp - 0x18c]
mov ecx, edi
push eax
push eax
push 0x72
call fcn.0045e830
push eax
lea ecx, [ebp - 0x158]
call fcn.00523da0
push 0
mov byte [ebp - 4], 4
mov ecx, esi
push dword [ebp - 0x158]
push 0
push 0x32
push 0x6792e8
push dword [ebp - 0x184]
call fcn.0051de20
push dword [ebp - 0x198]
mov dword [ebp - 0x1e4], eax
mov ecx, edi
mov eax, dword [ebp - 0x18c]
push eax
push eax
push 0x81
call fcn.0045e830
push eax
lea ecx, [ebp - 0x15c]
call fcn.00523da0
push 0
mov byte [ebp - 4], 5
mov ecx, esi
push dword [ebp - 0x15c]
push 0
push 0x32
push 0x679340
push dword [ebp - 0x184]
call fcn.0051de20
push dword [ebp - 0x198]
mov dword [ebp - 0x1dc], eax
mov ecx, edi
mov eax, dword [ebp - 0x18c]
push eax
push eax
push 0x82
call fcn.0045e830
push eax
lea ecx, [ebp - 0x170]
call fcn.00523da0
push 0
mov byte [ebp - 4], 6
push dword [ebp - 0x170]
push 0
push 0x32
push 0x6793a0
push dword [ebp - 0x184]
mov ecx, esi
call fcn.0051de20
push 0
push 0
push 8
push 0x32
push 0
push dword [ebp - 0x184]
mov ecx, esi
mov dword [ebp - 0x1d8], eax
call fcn.0051de20
push dword [ebp - 0x198]
mov eax, dword [ebp - 0x18c]
mov ecx, edi
push eax
push eax
push 0x7c
call fcn.0045e830
push eax
lea ecx, [ebp - 0x160]
call fcn.00523da0
push 0
mov byte [ebp - 4], 7
mov ecx, esi
push dword [ebp - 0x160]
push 0
push 0x32
push 0x6793f0
push dword [ebp - 0x184]
call fcn.0051de20
push dword [ebp - 0x198]
mov dword [ebp - 0x1d4], eax
mov ecx, edi
mov eax, dword [ebp - 0x18c]
push eax
push eax
push 0x8a
call fcn.0045e830
push eax
lea ecx, [ebp - 0x164]
call fcn.00523da0
push 0
mov byte [ebp - 4], 8
mov ecx, esi
push dword [ebp - 0x164]
push 0
push 0x32
push 0x679430
push dword [ebp - 0x184]
call fcn.0051de20
push dword [ebp - 0x198]
mov dword [ebp - 0x1bc], eax
mov ecx, edi
mov eax, dword [ebp - 0x18c]
push eax
push eax
push 0x80
call fcn.0045e830
push eax
lea ecx, [ebp - 0x150]
call fcn.00523da0
push 0
mov byte [ebp - 4], 9
mov ecx, esi
push dword [ebp - 0x150]
push 0
push 0x32
push 0x677928
push dword [ebp - 0x184]
call fcn.0051de20
push dword [ebp - 0x198]
mov dword [ebp - 0x1d0], eax
mov eax, dword [ebp - 0x18c]
push eax
push eax
push 0xac
mov ecx, edi
call fcn.0045e830
push eax
lea ecx, [ebp - 0x168]
call fcn.00523da0
push 0
mov byte [ebp - 4], 0xa
mov ecx, esi
push dword [ebp - 0x168]
push 0
push 0x32
push 0x677960
push dword [ebp - 0x184]
call fcn.0051de20
push 0
push dword [ebp - 0x154]
mov ecx, esi
mov dword [ebp - 0x1e0], eax
push 0
push 0x32
push 0x679458
push dword [ebp - 0x184]
call fcn.0051de20
push 0
push 0
push 8
push 0x32
push 0
push dword [ebp - 0x184]
mov ecx, esi
mov dword [ebp - 0x1a8], eax
call fcn.0051de20
push dword [ebp - 0x198]
mov eax, dword [ebp - 0x18c]
mov ecx, edi
push eax
push eax
push 0x94
call fcn.0045e830
push eax
lea ecx, [ebp - 0x16c]
call fcn.00523da0
push 0
mov byte [ebp - 4], 0xb
mov ecx, esi
push dword [ebp - 0x16c]
push 0
push 0x32
push 0x679494
push dword [ebp - 0x184]
call fcn.0051de20
push 0
push 0
push 8
push 0x32
push 0
push dword [ebp - 0x184]
mov ecx, esi
mov dword [ebp - 0x1b8], eax
call fcn.0051de20
push 0
push dword [ebp - 0x150]
mov ecx, esi
push 0
push 0x32
push 0x6779e4
push dword [ebp - 0x184]
call fcn.0051de20
push dword [ebp - 0x198]
mov dword [ebp - 0x1b4], eax
mov ecx, edi
mov eax, dword [ebp - 0x18c]
push eax
push eax
push 0xb1
call fcn.0045e830
push eax
lea ecx, [ebp - 0x14c]
call fcn.00523da0
push 0
mov byte [ebp - 4], 0xc
mov ecx, esi
push dword [ebp - 0x14c]
push 0
push 0x32
push 0x677a18
push dword [ebp - 0x184]
call fcn.0051de20
push 0
push dword [ebp - 0x14c]
mov ecx, esi
mov dword [ebp - 0x198], eax
push 0
push 0x32
push 0x6794b0
push dword [ebp - 0x184]
call fcn.0051de20
push 0
mov ecx, edi
mov dword [ebp - 0x1c0], eax
call fcn.0044d850
mov edx, eax
mov cx, word [edi + 0x11c8]
mov eax, 0x74
mov word [ebp - 0x76], cx
mov word [ebp - 0x7e], ax
mov ecx, 0x2e
mov eax, dword [ebp - 0x1cc]
mov word [ebp - 0x7c], ax
mov eax, 0x1b
mov word [ebp - 0x78], ax
mov eax, 0x70
mov word [ebp - 0x72], ax
mov ax, word [edi + 0x11c4]
mov word [ebp - 0x70], ax
mov eax, 0x72
mov word [ebp - 0x6c], ax
mov eax, dword [ebp - 0x1c8]
mov word [ebp - 0x6a], ax
mov eax, 0xd
mov word [ebp - 0x66], ax
mov eax, dword [ebp - 0x1c4]
mov word [ebp - 0x64], ax
mov eax, dword [ebp - 0x1e4]
mov word [ebp - 0x5e], ax
mov eax, dword [ebp - 0x1dc]
mov word [ebp - 0x58], ax
mov eax, dword [ebp - 0x1d8]
mov word [ebp - 0x52], ax
mov eax, 0x47
mov word [ebp - 0x4e], ax
mov eax, dword [ebp - 0x1d4]
mov word [ebp - 0x4c], ax
mov eax, dword [ebp - 0x1bc]
mov word [ebp - 0x46], ax
mov eax, 0x56
mov word [ebp - 0x60], cx
mov word [ebp - 0x5a], cx
mov word [ebp - 0x54], cx
mov ecx, 0x50
mov word [ebp - 0x42], ax
mov eax, dword [ebp - 0x1d0]
mov dword [ebp - 0x200], edx
mov byte [ebp - 0x80], 1
mov byte [ebp - 0x7a], 1
mov byte [ebp - 0x74], 1
mov byte [ebp - 0x6e], 1
mov byte [ebp - 0x68], 9
mov byte [ebp - 0x62], 1
mov byte [ebp - 0x5c], 5
mov byte [ebp - 0x56], 9
mov byte [ebp - 0x50], 9
mov byte [ebp - 0x4a], 0x11
mov word [ebp - 0x48], cx
mov byte [ebp - 0x44], 0x11
mov word [ebp - 0x40], ax
mov byte [ebp - 0x3e], 9
mov eax, 0x4c
mov word [ebp - 0x36], cx
mov word [ebp - 0x3c], ax
lea ecx, [ebp - 0x148]
mov eax, dword [ebp - 0x1e0]
mov word [ebp - 0x3a], ax
mov eax, dword [ebp - 0x1a8]
mov word [ebp - 0x34], ax
mov eax, 0x4d
mov word [ebp - 0x30], ax
mov eax, dword [ebp - 0x1b4]
mov word [ebp - 0x2e], ax
mov eax, 0x55
mov word [ebp - 0x2a], ax
mov eax, dword [ebp - 0x198]
mov word [ebp - 0x28], ax
mov eax, 0x48
mov word [ebp - 0x24], ax
mov eax, dword [ebp - 0x1c0]
mov word [ebp - 0x22], ax
mov eax, 0x46
push 0
mov byte [ebp - 0x38], 9
mov byte [ebp - 0x32], 9
mov byte [ebp - 0x2c], 9
mov byte [ebp - 0x26], 9
mov byte [ebp - 0x20], 9
mov word [ebp - 0x1e], ax
mov word [ebp - 0x1c], dx
call fcn.005399e0
push 0x11
lea eax, [ebp - 0x80]
mov ecx, esi
push eax
call fcn.00522070
push dword [ebp - 0x174]
mov dword [ebp - 0x18c], 0
call dword [0x5fd7b0]
push 0x20
push dword [ebp - 0x194]
mov ecx, esi
call fcn.0051ae10
xorps xmm0, xmm0
lea ecx, [ebp - 0xf0]
movups xmmword [ebp - 0xf0], xmm0
movq qword [ebp - 0xe0], xmm0
call fcn.00542700
push dword [ebp - 0x1c8]
mov ecx, esi
mov byte [ebp - 4], 0xd
call fcn.00521c40
push 0
mov ecx, edi
call fcn.005e2af0
test eax, eax
je 0x448a25
mov edx, dword [edi + 0x1478]
mov eax, dword [0x5fd6cc]
mov dword [ebp - 0x190], edx
cmp edx, 0xfffffffa
je 0x448a25
cmp dword [edi + 0x14a8], esi
jne 0x4489e0
cmp edx, dword [edi + 0x11c8]
je 0x448a1e
mov ecx, dword [ebp - 0x194]
cmp edx, 0xffffffb3
jne 0x4478ef
cmp dword [edi + 0x1484], ecx
je 0x4478fb
cmp edx, dword [ebp - 0x200]
jne 0x4479a5
mov ecx, edi
call fcn.005df180
push 0x80
push dword [ebp - 0x194]
mov ecx, esi
call fcn.0051ae10
push dword [ebp - 0x194]
mov ecx, esi
call fcn.00519c50
push eax
lea ecx, [ebp - 0x8c]
call fcn.00545520
push 0x679220
lea ecx, [ebp - 0x8c]
call fcn.00545820
mov ecx, esi
test al, al
je 0x44798c
push 0
push 0
push dword [ebp - 0x194]
call fcn.0051a750
push 0
push dword [ebp - 0x194]
mov ecx, esi
call fcn.0051c690
movsd xmm0, qword [0x6e32c0]
sub esp, 0xc
movsd qword [esp + 4], xmm0
push 0
push ecx
push 0x190
push dword [ebp - 0x194]
mov ecx, esi
call fcn.0051c530
jmp 0x4489e0
push 0xffffffffffffffff
push 0
push 0xb1
push dword [ebp - 0x194]
call fcn.0051c9f0
jmp 0x4489e0
cmp edx, 0xffffffb4
jne 0x447a66
cmp dword [edi + 0x1484], ecx
jne 0x447a66
push ecx
mov ecx, esi
call fcn.00519c50
push eax
lea ecx, [ebp - 0x8c]
call fcn.00545520
lea ecx, [ebp - 0x8c]
call fcn.00545700
cmp eax, 3
jl 0x447899
cmp dword [ebp - 0x18c], 0
jne 0x447a00
push 0
push 9
push 0x110a
push dword [ebp - 0x174]
call dword [0x5fd6cc]
push ecx
lea ecx, [ebp - 0x8c]
call fcn.005454f0
push eax
push 0
push dword [ebp - 0x17c]
mov ecx, esi
call fcn.00517c80
mov dword [ebp - 0x18c], eax
test eax, eax
je 0x4489e0
push eax
push 9
push 0x110b
push dword [ebp - 0x174]
call dword [0x5fd6cc]
push dword [ebp - 0x18c]
push 0
push 0x1114
push dword [ebp - 0x174]
call dword [0x5fd6cc]
mov dword [ebp - 0x18c], 0
jmp 0x4489e0
cmp edx, dword [ebp - 0x1c8]
jne 0x447bb1
push ecx
mov ecx, esi
call fcn.00519c50
push eax
lea ecx, [ebp - 0x8c]
call fcn.00545520
push 0x679220
lea ecx, [ebp - 0x8c]
call fcn.00545820
test al, al
jne 0x447aa9
lea ecx, [ebp - 0x8c]
call fcn.005451f0
test al, al
je 0x447b01
push 0
push 0
push dword [ebp - 0x194]
mov ecx, esi
call fcn.0051a750
push 0
push dword [ebp - 0x194]
mov ecx, esi
call fcn.0051c690
movsd xmm0, qword [0x6e32c0]
sub esp, 0xc
movsd qword [esp + 4], xmm0
push 0
push ecx
push 0x190
push dword [ebp - 0x194]
mov ecx, esi
call fcn.0051c530
push 0x80
push dword [ebp - 0x194]
mov ecx, esi
call fcn.0051ae10
lea ecx, [ebp - 0x8c]
call fcn.005451f0
test al, al
jne 0x447899
push ecx
call fcn.005454f0
push eax
push dword [ebp - 0x18c]
mov ecx, esi
push dword [ebp - 0x17c]
call fcn.00517c80
mov dword [ebp - 0x18c], eax
test eax, eax
je 0x447b7c
push eax
push 9
push 0x110b
push dword [ebp - 0x174]
call dword [0x5fd6cc]
push dword [ebp - 0x18c]
push 0
push 0x1114
push dword [ebp - 0x174]
call dword [0x5fd6cc]
push 0x80
push dword [ebp - 0x17c]
mov ecx, esi
call fcn.0051ae10
jmp 0x4489e0
push 0x80
push dword [ebp - 0x194]
mov ecx, esi
call fcn.0051ae10
sub esp, 8
mov ecx, edi
push 0x8c
push 0x190
push 0
push esi
push 4
push 0x62d690
call fcn.004666e0
jmp 0x4489e0
cmp byte [ebp - 0x17d], 1
jne 0x447bd9
cmp edx, 0xffffff31
jne 0x447bd9
lea ecx, [ebp - 0x148]
call fcn.005399c0
mov byte [ebp - 0x17d], 2
jmp 0x447899
mov ecx, dword [ebp - 0x17c]
cmp edx, 0xffffffea
jne 0x447bec
cmp dword [edi + 0x1484], ecx
je 0x447bf8
cmp edx, dword [ebp - 0x184]
jne 0x447ddc
cmp edx, dword [ebp - 0x184]
jne 0x447c49
push dword [ebp - 0x174]
call dword [0x5fd7b0]
cmp byte [ebp - 0x17d], 2
jne 0x447c3d
xorps xmm1, xmm1
lea ecx, [ebp - 0x148]
call fcn.00539970
movsd xmm1, qword [0x6e3330]
comisd xmm1, xmm0
jbe 0x447c3d
mov byte [ebp - 0x17d], 0
jmp 0x447899
mov eax, dword [0x5fd6cc]
mov byte [ebp - 0x17d], 1
push 0
push 9
push 0x110a
push dword [ebp - 0x174]
call eax
push eax
push 3
push 0x110a
push dword [ebp - 0x174]
mov dword [ebp - 0x1f8], eax
call dword [0x5fd6cc]
mov edx, dword [ebp - 0x1c4]
mov ecx, eax
test ecx, ecx
mov dword [ebp - 0x1fc], ecx
mov ecx, 0x40
mov eax, 0x20
cmove eax, ecx
mov ecx, dword [ebp - 0x1b4]
mov dword [ebp - 0x1a4], eax
cmp edx, ecx
jg 0x447cda
mov edi, edx
mov edx, dword [ebp - 0x1b8]
nop dword [eax]
cmp edi, edx
je 0x447ccf
push eax
push edi
mov ecx, esi
call fcn.0051ae10
mov eax, dword [ebp - 0x1a4]
mov ecx, dword [ebp - 0x1b4]
mov edx, dword [ebp - 0x1b8]
inc edi
cmp edi, ecx
jle 0x447cb0
mov edi, dword [ebp - 0x1e8]
push 0
mov ecx, edi
call fcn.0045dad0
mov ecx, dword [ebp - 0x1b0]
test al, al
mov eax, 0x40
mov esi, 0x20
cmovne esi, eax
push esi
push dword [ebp - 0x198]
call fcn.0051ae10
push esi
push dword [ebp - 0x1c0]
mov esi, dword [ebp - 0x1b0]
mov ecx, esi
call fcn.0051ae10
cmp dword [ebp - 0x1f8], 0
je 0x447d39
cmp dword [ebp - 0x1fc], 0
jne 0x447d39
push 0x20
push dword [ebp - 0x1bc]
mov ecx, esi
call fcn.0051ae10
mov eax, dword [ebp - 0x184]
cmp dword [ebp - 0x190], eax
jne 0x447daa
lea ecx, [ebp - 0x10c]
push ecx
push eax
mov ecx, esi
call fcn.00523000
push eax
call dword [0x5fd734]
test eax, eax
je 0x447da4
mov eax, dword [ebp - 0x10c]
mov ecx, esi
mov edx, dword [ebp - 0x184]
add eax, 0x5a
mov dword [ebp - 0x19c], eax
mov eax, dword [ebp - 0x108]
add eax, 0x2d
mov dword [ebp - 0x1a4], eax
mov eax, 8
push dword [ebp - 0x1a4]
push dword [ebp - 0x19c]
push eax
push edx
call fcn.005199f0
jmp 0x4489e0
mov eax, dword [ebp - 0x184]
mov dword [ebp - 0x1a4], 0xffffffff
mov edx, eax
push dword [ebp - 0x1a4]
mov dword [ebp - 0x19c], 0xffffffff
xor eax, eax
push dword [ebp - 0x19c]
mov ecx, esi
push eax
push edx
call fcn.005199f0
jmp 0x4489e0
cmp edx, 0xffffffeb
jne 0x447dfc
cmp dword [edi + 0x1484], ecx
jne 0x447dfc
push dword [ebp - 0x194]
push ecx
mov ecx, edi
call fcn.00466680
jmp 0x4489e0
cmp edx, dword [ebp - 0x204]
je 0x448982
cmp edx, dword [ebp - 0x1c4]
je 0x448982
cmp edx, 0xfffffff2
jne 0x447e25
cmp dword [edi + 0x1484], ecx
je 0x448982
cmp edx, dword [ebp - 0x1ec]
jne 0x447eed
push 0xd
push dword [edi + 0x11c4]
xorps xmm0, xmm0
push ecx
push dword [ebp - 0x1a0]
lea ecx, [ebp - 0x12c]
push esi
movups xmmword [ebp - 0x12c], xmm0
movups xmmword [ebp - 0x11c], xmm0
call fcn.005162f0
lea eax, [ebp - 0x90]
mov byte [ebp - 4], 0xf
push eax
mov ecx, edi
call fcn.004453b0
push dword [ebp - 0x1ac]
mov byte [ebp - 0x185], al
call dword [0x5fd7a8]
cmp byte [ebp - 0x185], 0
jne 0x447e9e
lea ecx, [ebp - 0x12c]
mov byte [ebp - 4], 0xd
call fcn.00516280
jmp 0x447899
push 0
push dword [ebp - 0x90]
lea eax, [ebp - 0x17c]
mov ecx, edi
push eax
call fcn.00446ba0
push dword [ebp - 0x17c]
mov ecx, esi
call fcn.00523000
push 0
mov dword [ebp - 0x174], eax
lea ecx, [ebp - 0x94]
lea eax, [ebp - 0x90]
push eax
push 4
push 0x679290
call fcn.0053f300
lea ecx, [ebp - 0x12c]
jmp 0x4489d7
cmp edx, dword [ebp - 0x1e4]
je 0x448872
mov ecx, dword [ebp - 0x1a0]
cmp edx, ecx
jne 0x447f20
push 4
push dword [ebp - 0x1f0]
mov ecx, esi
call fcn.00519f20
test eax, eax
jne 0x44886d
mov ecx, dword [ebp - 0x1a0]
mov eax, dword [edi + 0x1478]
cmp eax, dword [ebp - 0x1dc]
je 0x448720
cmp eax, ecx
jne 0x447f4d
push 4
push dword [ebp - 0x1f4]
mov ecx, esi
call fcn.00519f20
test eax, eax
jne 0x448720
mov eax, dword [edi + 0x1478]
cmp eax, dword [ebp - 0x1d8]
jne 0x44814e
push 0
push 9
push 0x110a
push dword [ebp - 0x174]
call dword [0x5fd6cc]
push eax
push 3
push 0x110a
push dword [ebp - 0x174]
mov dword [ebp - 0x1a4], eax
call dword [0x5fd6cc]
mov ecx, eax
mov eax, dword [ebp - 0x1a4]
mov dword [ebp - 0x19c], ecx
test eax, eax
je 0x447899
test ecx, ecx
je 0x447899
lea ecx, [ebp - 0xf0]
push ecx
lea ecx, [ebp - 0x8c]
push ecx
push eax
push dword [ebp - 0x17c]
mov ecx, edi
call fcn.00445330
test al, al
je 0x447899
push 0xd
push dword [edi + 0x11c4]
xorps xmm0, xmm0
lea ecx, [ebp - 0xc0]
push dword [ebp - 0x17c]
movups xmmword [ebp - 0xc0], xmm0
push dword [ebp - 0x1a0]
movups xmmword [ebp - 0xb0], xmm0
push esi
call fcn.005162f0
sub esp, 8
mov byte [ebp - 4], 0x12
mov ecx, edi
push 0x8c
push 0
push 0
push 0
push 1
push 0x679768
call fcn.004666e0
test eax, eax
jne 0x448039
lea ecx, [ebp - 0xc0]
mov byte [ebp - 4], 0xd
call fcn.00516280
jmp 0x447899
xorps xmm0, xmm0
mov dword [ebp - 0xd0], 0
lea ecx, [ebp - 0xd8]
movq qword [ebp - 0xd8], xmm0
call fcn.00545940
lea eax, [ebp - 0xf0]
mov byte [ebp - 4], 0x13
push eax
lea eax, [ebp - 0xd8]
mov byte [ebp - 0x185], 0
push eax
push dword [ebp - 0x19c]
mov ecx, edi
push dword [ebp - 0x17c]
call fcn.00445330
test al, al
je 0x4480be
lea ecx, [ebp - 0xd8]
call fcn.005443a0
mov ecx, eax
call fcn.00529c50
mov byte [ebp - 0x185], al
test al, al
je 0x4480be
push dword [ebp - 0x19c]
push 0
push 0x1101
push dword [ebp - 0x174]
call dword [0x5fd6cc]
push 0
push 0xc
lea ecx, [ebp - 0x8c]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00448b10
cmp eax, 1
jne 0x448103
cmp byte [ebp - 0x185], 0
jne 0x4480fc
push dword [ebp - 0x1a4]
push 0
push 0x1101
push dword [ebp - 0x174]
call dword [0x5fd6cc]
push 0x679590
jmp 0x44810d
cmp eax, 2
jne 0x448118
push 0x679610
lea ecx, [ebp - 0x8c]
call fcn.00545870
sub esp, 8
lea ecx, [ebp - 0x8c]
push 0x8c
push 0x190
push 0
push 0
push 4
call fcn.005454f0
push eax
mov ecx, edi
call fcn.004666e0
lea ecx, [ebp - 0xd8]
call fcn.00545790
jmp 0x4489d1
cmp eax, dword [ebp - 0x1b4]
jne 0x4481d0
push 0
push 9
push 0x110a
push dword [ebp - 0x174]
call dword [0x5fd6cc]
push eax
push 3
push 0x110a
push dword [ebp - 0x174]
mov dword [ebp - 0x190], eax
call dword [0x5fd6cc]
test eax, eax
je 0x447899
lea eax, [ebp - 0xf0]
mov ecx, edi
push eax
lea eax, [ebp - 0x8c]
push eax
push dword [ebp - 0x190]
push dword [ebp - 0x17c]
call fcn.00445330
test al, al
je 0x447899
push 0
lea ecx, [ebp - 0x8c]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.0045ddd0
jmp 0x4489e0
cmp eax, dword [ebp - 0x198]
jne 0x4481fa
push 0
mov ecx, edi
call fcn.0045dad0
test al, al
jne 0x447899
push 0
push ecx
mov ecx, edi
call fcn.0045dc60
or eax, 0x100
jmp 0x448226
cmp eax, dword [ebp - 0x1c0]
jne 0x44826c
push 0
mov ecx, edi
call fcn.0045dad0
test al, al
jne 0x447899
push dword [edi + 0x1f28]
push ecx
mov ecx, edi
call fcn.0045dc60
or eax, 0x80
add esp, 4
push eax
push ecx
mov ecx, dword [ebp - 0x174]
call fcn.00507530
mov ecx, dword [edi + 0x30]
mov dword [ebp - 0x190], eax
cmp ecx, 0xffffffff
je 0x448255
test ecx, ecx
je 0x448255
push ecx
call dword [0x5fd3a4]
mov eax, dword [ebp - 0x190]
mov dword [edi + 0x30], eax
test eax, eax
jne 0x4489e0
mov dword [edi + 0x30], 0xffffffff
jmp 0x4489e0
cmp eax, dword [ebp - 0x1d4]
jne 0x4482e4
push 0
push 9
push 0x110a
push dword [ebp - 0x174]
call dword [0x5fd6cc]
push eax
push 3
push 0x110a
push dword [ebp - 0x174]
mov dword [ebp - 0x190], eax
call dword [0x5fd6cc]
test eax, eax
je 0x447899
push dword [ebp - 0x190]
mov ecx, esi
push dword [ebp - 0x17c]
call fcn.00517b40
push eax
lea ecx, [ebp - 0x8c]
call fcn.00545520
push 0
lea ecx, [ebp - 0x8c]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.0044d650
jmp 0x4489e0
cmp eax, dword [ebp - 0x1bc]
jne 0x44839a
push 0
push 9
push 0x110a
push dword [ebp - 0x174]
call dword [0x5fd6cc]
push eax
push 3
push 0x110a
push dword [ebp - 0x174]
mov dword [ebp - 0x190], eax
call dword [0x5fd6cc]
test eax, eax
jne 0x448331
mov eax, dword [ebp - 0x190]
test eax, eax
je 0x447899
push 0
push eax
push dword [ebp - 0x17c]
xorps xmm0, xmm0
mov dword [ebp - 0xc4], 0
mov ecx, esi
movq qword [ebp - 0xcc], xmm0
call fcn.00517b40
push eax
lea ecx, [ebp - 0xcc]
call fcn.005458d0
push 0
push 1
push 0xffffffffffffffff
push 1
push 0x64d768
lea ecx, [ebp - 0xcc]
mov byte [ebp - 4], 0x14
call fcn.00543e30
lea ecx, [ebp - 0xcc]
test eax, eax
jne 0x4489ee
mov byte [ebp - 4], 0xd
call fcn.00545790
jmp 0x447899
cmp eax, dword [ebp - 0x1d0]
jne 0x4485c9
push 0
push 9
push 0x110a
push dword [ebp - 0x174]
call dword [0x5fd6cc]
push eax
push 3
push 0x110a
push dword [ebp - 0x174]
mov dword [ebp - 0x190], eax
call dword [0x5fd6cc]
test eax, eax
je 0x447899
push 0xd
push dword [edi + 0x11c4]
xorps xmm0, xmm0
lea ecx, [ebp - 0xc0]
push dword [ebp - 0x17c]
movups xmmword [ebp - 0xc0], xmm0
push dword [ebp - 0x1a0]
movups xmmword [ebp - 0xb0], xmm0
push esi
call fcn.005162f0
push dword [ebp - 0x190]
mov byte [ebp - 4], 0x15
mov ecx, esi
push dword [ebp - 0x17c]
call fcn.00517b40
push eax
lea ecx, [ebp - 0x8c]
call fcn.00545520
push 8
push 0
push 0x61d060
push 0x679820
lea ecx, [ebp - 0x8c]
call fcn.00542a40
sub esp, 8
mov dword [ebp - 0x98], 0
xorps xmm0, xmm0
lea ecx, [ebp - 0x8c]
movq qword [ebp - 0xa0], xmm0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x62e438
call fcn.005454f0
push eax
push 0x6783e0
lea ecx, [ebp - 0xa0]
call fcn.00545880
lea ecx, [edi + 0x14c0]
mov byte [ebp - 4], 0x16
call fcn.00513dc0
push eax
mov edx, 0x1f4
lea ecx, [ebp - 0xa0]
call fcn.004ec230
push 0
push 0xffffffffffffffc4
sub esp, 8
lea ecx, [ebp - 0xa0]
push 0x46
push 0x258
push 0
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00465e60
mov ecx, eax
call fcn.00514200
lea ecx, [ebp - 0x8c]
call fcn.005454f0
xor edx, edx
mov ecx, eax
call fcn.004f20a0
push eax
lea ecx, [ebp - 0xa0]
call fcn.00545520
lea ecx, [edi + 0x14c0]
call fcn.00513dc0
push eax
mov edx, 0x1f4
lea ecx, [ebp - 0x8c]
call fcn.004ec230
sub esp, 0xc
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x621874
lea ecx, [ebp - 0x8c]
call fcn.005454f0
push eax
lea ecx, [ebp - 0xa0]
call fcn.005438d0
lea ecx, [ebp - 0xa0]
call fcn.005454f0
push eax
push 0x64
lea ecx, [edi + 0x14c0]
call fcn.00514200
push 1
push 0x66f7c0
lea ecx, [edi + 0x14c0]
call fcn.00513fc0
push 0
push 0
mov ecx, edi
call fcn.00465b20
test eax, eax
jne 0x448597
nop
push 5
call dword [0x5fd45c]
push 0
push 0
mov ecx, edi
call fcn.00465b20
test eax, eax
je 0x448580
push 2
lea ecx, [edi + 0x14c0]
call fcn.00513df0
lea ecx, [ebp - 0xa0]
call fcn.00545790
lea ecx, [ebp - 0xc0]
mov byte [ebp - 4], 0xd
call fcn.00516280
mov esi, dword [ebp - 0x1b0]
jmp 0x4489e0
cmp eax, dword [ebp - 0x1e0]
jne 0x44865d
push 0
push 9
push 0x110a
push dword [ebp - 0x174]
call dword [0x5fd6cc]
push eax
push 3
push 0x110a
push dword [ebp - 0x174]
mov dword [ebp - 0x190], eax
call dword [0x5fd6cc]
test eax, eax
je 0x447899
push dword [ebp - 0x190]
mov ecx, esi
push dword [ebp - 0x17c]
call fcn.00517b40
push eax
lea ecx, [ebp - 0x8c]
call fcn.00545520
push 8
push 0
push 0x61d060
push 0x679820
lea ecx, [ebp - 0x8c]
call fcn.00542a40
lea ecx, [ebp - 0x8c]
call fcn.005454f0
xor edx, edx
mov ecx, eax
call fcn.004eea70
jmp 0x4489e0
cmp eax, dword [ebp - 0x1a8]
jne 0x4486de
push 0
push 9
push 0x110a
push dword [ebp - 0x174]
call dword [0x5fd6cc]
push eax
push 3
push 0x110a
push dword [ebp - 0x174]
mov dword [ebp - 0x190], eax
call dword [0x5fd6cc]
test eax, eax
je 0x447899
lea eax, [ebp - 0xf0]
mov ecx, edi
push eax
lea eax, [ebp - 0x8c]
push eax
push dword [ebp - 0x190]
push dword [ebp - 0x17c]
call fcn.00445330
push 0
lea ecx, [ebp - 0x8c]
call fcn.005454f0
push eax
push 2
push dword [ebp - 0x1ac]
call dword [0x5fd664]
jmp 0x4489e0
cmp eax, dword [ebp - 0x1b8]
je 0x4486f2
cmp eax, dword [ebp - 0x1cc]
jne 0x4489e0
push 0
push dword [ebp - 0x90]
lea eax, [ebp - 0x17c]
mov ecx, edi
push eax
call fcn.00446ba0
push dword [ebp - 0x17c]
mov ecx, esi
call fcn.00523000
mov dword [ebp - 0x174], eax
jmp 0x4489e0
push 0
push 9
push 0x110a
push dword [ebp - 0x174]
call dword [0x5fd6cc]
mov dword [ebp - 0x19c], eax
test eax, eax
je 0x447899
push eax
push 3
push 0x110a
push dword [ebp - 0x174]
call dword [0x5fd6cc]
test eax, eax
je 0x447899
lea eax, [ebp - 0xf0]
mov ecx, edi
push eax
lea eax, [ebp - 0x8c]
push eax
push dword [ebp - 0x19c]
push dword [ebp - 0x17c]
call fcn.00445330
test al, al
je 0x447899
push 0xd
push dword [edi + 0x11c4]
xorps xmm0, xmm0
lea ecx, [ebp - 0xc0]
push dword [ebp - 0x17c]
movups xmmword [ebp - 0xc0], xmm0
push dword [ebp - 0x1a0]
movups xmmword [ebp - 0xb0], xmm0
push esi
call fcn.005162f0
sub esp, 8
mov byte [ebp - 4], 0x11
mov ecx, edi
push 0x8c
push 0
push 0
push 0
push 1
push 0x679680
call fcn.004666e0
test eax, eax
jne 0x4487f1
lea ecx, [ebp - 0xc0]
mov byte [ebp - 4], 0xd
call fcn.00516280
jmp 0x447899
push 0
push 0xe
lea ecx, [ebp - 0x8c]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00448b10
cmp eax, 1
jne 0x44882d
push dword [ebp - 0x19c]
push 0
push 0x1101
push dword [ebp - 0x174]
call dword [0x5fd6cc]
push 0x679708
jmp 0x448837
cmp eax, 2
jne 0x448842
push 0x679610
lea ecx, [ebp - 0x8c]
call fcn.00545870
sub esp, 8
lea ecx, [ebp - 0x8c]
push 0x8c
push 0x190
push 0
push 0
push 4
call fcn.005454f0
push eax
mov ecx, edi
call fcn.004666e0
jmp 0x4489d1
mov eax, dword [0x5fd6cc]
push 0
push 9
push 0x110a
push dword [ebp - 0x174]
call eax
mov dword [ebp - 0x19c], eax
test eax, eax
je 0x447899
push eax
push 3
push 0x110a
push dword [ebp - 0x174]
call dword [0x5fd6cc]
test eax, eax
je 0x447899
lea eax, [ebp - 0xf0]
mov ecx, edi
push eax
lea eax, [ebp - 0x8c]
push eax
push dword [ebp - 0x19c]
push dword [ebp - 0x17c]
call fcn.00445330
test al, al
je 0x447899
push 0xd
push dword [edi + 0x11c4]
xorps xmm0, xmm0
lea ecx, [ebp - 0xc0]
push dword [ebp - 0x17c]
movups xmmword [ebp - 0xc0], xmm0
push dword [ebp - 0x1a0]
movups xmmword [ebp - 0xb0], xmm0
push esi
call fcn.005162f0
sub esp, 8
mov byte [ebp - 4], 0x10
mov ecx, edi
push 0x8c
push 0
push 0
push 0
push 1
push 0x679500
call fcn.004666e0
test eax, eax
jne 0x44893f
lea ecx, [ebp - 0xc0]
mov byte [ebp - 4], 0xd
call fcn.00516280
jmp 0x447899
push 0
push 0xc
lea ecx, [ebp - 0x8c]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00448b10
cmp eax, 1
jne 0x44882d
push dword [ebp - 0x19c]
push 0
push 0x1101
push dword [ebp - 0x174]
call dword [0x5fd6cc]
push 0x679590
jmp 0x448837
push 0xd
push dword [edi + 0x11c4]
xorps xmm0, xmm0
push ecx
push dword [ebp - 0x1a0]
lea ecx, [ebp - 0xc0]
push esi
movups xmmword [ebp - 0xc0], xmm0
movups xmmword [ebp - 0xb0], xmm0
call fcn.005162f0
mov byte [ebp - 4], 0xe
mov ecx, edi
push dword [ebp - 0x17c]
call fcn.00445890
push dword [ebp - 0x1ac]
mov byte [ebp - 0x175], al
call dword [0x5fd7a8]
lea ecx, [ebp - 0xc0]
mov byte [ebp - 4], 0xd
call fcn.00516280
cmp byte [ebp - 0x175], 0
jne 0x448a25
jmp 0x447899
push 0
add eax, 3
mov byte [ebp - 0x175], 2
push eax
call fcn.005440d0
mov ecx, eax
call fcn.005443a0
lea ecx, [ebp - 0xcc]
mov dword [edi + 0x1f20], eax
mov byte [ebp - 4], 0xd
call fcn.00545790
jmp 0x448a25
mov byte [ebp - 0x175], 1
push 0
push 0x679250
mov ecx, edi
call fcn.0044da60
cmp byte [ebp - 0x175], 0
mov ecx, edi
sete al
movzx eax, al
push eax
call fcn.0044d940
lea ecx, [ebp - 0xf0]
call fcn.00542660
lea ecx, [ebp - 0x14c]
call fcn.00523d80
lea ecx, [ebp - 0x16c]
call fcn.00523d80
lea ecx, [ebp - 0x168]
call fcn.00523d80
lea ecx, [ebp - 0x150]
call fcn.00523d80
lea ecx, [ebp - 0x164]
call fcn.00523d80
lea ecx, [ebp - 0x160]
call fcn.00523d80
lea ecx, [ebp - 0x170]
call fcn.00523d80
lea ecx, [ebp - 0x15c]
call fcn.00523d80
lea ecx, [ebp - 0x158]
call fcn.00523d80
lea ecx, [ebp - 0x154]
call fcn.00523d80
lea ecx, [ebp - 0x94]
call fcn.0053fda0
lea ecx, [ebp - 0xfc]
call fcn.00545790
lea ecx, [ebp - 0x8c]
call fcn.00545790
mov al, byte [ebp - 0x175]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0041e465
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret