Function at 0x635e08
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffb50
mov eax, 0x56498f
xor edx, edx
push ebx
push esi
push edi
mov ebx, dword [ebp + 0xc]
mov dword [ebp - 0x2c], 0x6fef08
mov dword [ebp - 0x28], esp
mov dword [ebp - 0x30], eax
mov word [ebp - 0x24], 0
mov dword [ebp - 0x18], edx
mov ecx, dword fs:[0]
mov dword [ebp - 0x34], ecx
lea eax, [ebp - 0x34]
mov dword fs:[0], eax
mov esi, ebx
mov edx, dword [esi + 8]
mov dword [ebp - 0x130], edx
mov ecx, dword [esi + 0xc]
mov dword [ebp - 0x12c], ecx
mov eax, dword [esi + 0x10]
mov dword [ebp - 0x128], eax
mov edx, dword [esi + 0x14]
mov dword [ebp - 0x124], edx
mov ecx, dword [ebp + 0x18]
cmp ecx, dword [ebp - 0x130]
je 0x635eff
mov eax, dword [ebp + 0x18]
cmp eax, dword [ebp + 0x1c]
je 0x635e92
mov edx, dword [ebp - 0x130]
cmp edx, dword [ebp - 0x12c]
jne 0x635efb
mov ecx, dword [ebp + 0x24]
cmp ecx, dword [ebp - 0x124]
jne 0x635eb2
mov eax, dword [ebp + 0x18]
sub eax, dword [ebp - 0x130]
test eax, eax
jns 0x635ead
add eax, 0xf
sar eax, 4
jmp 0x635ef7
call fcn.00637cc4
mov edx, dword [ebp + 0x24]
sub edx, dword [ebp - 0x124]
test edx, edx
jns 0x635ec7
add edx, 3
sar edx, 2
mov ecx, dword [ebp + 0x18]
dec edx
imul edx
sub ecx, dword [ebp + 0x1c]
test ecx, ecx
jns 0x635eda
add ecx, 0xf
sar ecx, 4
mov edx, dword [ebp - 0x128]
sub edx, dword [ebp - 0x130]
add eax, ecx
test edx, edx
jns 0x635ef2
add edx, 0xf
sar edx, 4
add eax, edx
test eax, eax
je 0x635eff
xor eax, eax
jmp 0x635f04
mov eax, 1
test al, al
je 0x636050
mov ecx, dword [ebp + 0x28]
mov dword [ebp - 0x38], ecx
cmp dword [ebx + 0x30], 0
sete al
and eax, 1
test al, al
jne 0x635f9a
mov dword [ebp - 0x3c], ebx
mov edx, dword [ebp - 0x3c]
mov ecx, dword [edx + 8]
mov dword [ebp - 0x148], ecx
mov eax, dword [ebp - 0x3c]
mov edx, dword [eax + 0xc]
mov dword [ebp - 0x144], edx
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ecx + 0x10]
mov dword [ebp - 0x140], eax
lea eax, [ebp - 0x150]
mov edx, dword [ebp - 0x3c]
mov ecx, dword [edx + 0x14]
mov dword [ebp - 0x13c], ecx
mov edx, dword [eax + 8]
mov dword [ebp - 0x40], ebx
mov ecx, dword [ebp - 0x40]
mov eax, dword [ecx + 8]
mov dword [ebp - 0x160], eax
mov ecx, dword [ebp - 0x40]
mov eax, dword [ecx + 0xc]
mov dword [ebp - 0x15c], eax
mov ecx, dword [ebp - 0x40]
mov eax, dword [ecx + 0x10]
mov dword [ebp - 0x158], eax
mov ecx, dword [ebp - 0x40]
mov eax, dword [ecx + 0x14]
lea ecx, [ebp - 0x168]
mov dword [ebp - 0x154], eax
cmp edx, dword [ecx + 0xc]
jne 0x635fa1
push ebx
call fcn.006374c4
pop ecx
mov edx, dword [ebx + 8]
add edx, 0xfffffff0
mov dword [ebp - 0x44], edx
mov eax, dword [ebp - 0x44]
mov dword [ebp - 4], eax
test eax, eax
je 0x63600d
mov word [ebp - 0x24], 0x14
mov ecx, dword [ebp - 0x38]
mov edx, dword [ebp - 4]
mov eax, dword [ecx]
mov dword [edx], eax
mov eax, dword [ecx + 4]
mov dword [edx + 4], eax
mov edx, dword [ebp - 4]
add edx, 8
mov dword [ebp - 0x48], edx
mov ecx, dword [ebp - 0x38]
add ecx, 8
mov dword [ebp - 0x4c], ecx
mov eax, dword [ebp - 0x4c]
mov ecx, dword [ebp - 0x48]
mov edx, dword [eax]
mov dword [ecx], edx
mov eax, dword [ebp - 0x48]
cmp dword [eax], 0
je 0x635ff5
mov edx, dword [ebp - 0x48]
mov ecx, dword [edx]
inc dword [ecx]
inc dword [ebp - 0x18]
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 4]
mov edx, dword [eax + 0xc]
mov dword [ecx + 0xc], edx
dec dword [ebp - 0x18]
mov word [ebp - 0x24], 8
sub dword [ebx + 8], 0x10
inc dword [ebx + 0x30]
mov eax, dword [ebp + 8]
mov dword [ebp - 0x50], ebx
mov edx, dword [ebp - 0x50]
mov ecx, dword [edx + 8]
mov dword [eax + 8], ecx
mov edx, dword [ebp - 0x50]
mov ecx, dword [edx + 0xc]
mov dword [eax + 0xc], ecx
mov edx, dword [ebp - 0x50]
mov ecx, dword [edx + 0x10]
mov dword [eax + 0x10], ecx
mov edx, dword [ebp - 0x50]
mov ecx, dword [edx + 0x14]
mov dword [eax + 0x14], ecx
mov eax, dword [ebp + 8]
mov edx, dword [ebp - 0x34]
mov dword fs:[0], edx
jmp 0x6374ba
lea esi, [ebx + 0x18]
mov eax, dword [esi + 8]
mov dword [ebp - 0x178], eax
mov edx, dword [esi + 0xc]
mov dword [ebp - 0x174], edx
mov ecx, dword [esi + 0x10]
mov dword [ebp - 0x170], ecx
mov eax, dword [esi + 0x14]
mov dword [ebp - 0x16c], eax
mov edx, dword [ebp + 0x18]
cmp edx, dword [ebp - 0x178]
je 0x63610c
mov ecx, dword [ebp + 0x18]
cmp ecx, dword [ebp + 0x1c]
je 0x63609c
mov eax, dword [ebp - 0x178]
cmp eax, dword [ebp - 0x174]
jne 0x636108
mov edx, dword [ebp + 0x24]
cmp edx, dword [ebp - 0x16c]
jne 0x6360bc
mov ecx, dword [ebp + 0x18]
sub ecx, dword [ebp - 0x178]
test ecx, ecx
jns 0x6360b7
add ecx, 0xf
sar ecx, 4
jmp 0x636104
call fcn.00637cc4
mov ecx, eax
mov eax, dword [ebp + 0x24]
sub eax, dword [ebp - 0x16c]
test eax, eax
jns 0x6360d3
add eax, 3
sar eax, 2
mov edx, dword [ebp + 0x18]
dec eax
imul ecx, eax
sub edx, dword [ebp + 0x1c]
test edx, edx
jns 0x6360e7
add edx, 0xf
sar edx, 4
mov eax, dword [ebp - 0x170]
sub eax, dword [ebp - 0x178]
add ecx, edx
test eax, eax
jns 0x6360ff
add eax, 0xf
sar eax, 4
add ecx, eax
test ecx, ecx
je 0x63610c
xor edx, edx
jmp 0x636111
mov edx, 1
test dl, dl
je 0x63637f
mov ecx, dword [ebp + 0x28]
mov dword [ebp - 0x54], ecx
cmp dword [ebx + 0x30], 0
sete al
and eax, 1
test al, al
jne 0x6361b1
lea edx, [ebx + 0x18]
mov dword [ebp - 0x58], edx
mov ecx, dword [ebp - 0x58]
mov eax, dword [ecx + 8]
mov dword [ebp - 0x190], eax
mov edx, dword [ebp - 0x58]
mov ecx, dword [edx + 0xc]
mov dword [ebp - 0x18c], ecx
mov eax, dword [ebp - 0x58]
mov edx, dword [eax + 0x10]
mov dword [ebp - 0x188], edx
lea edx, [ebp - 0x198]
mov ecx, dword [ebp - 0x58]
mov eax, dword [ecx + 0x14]
mov dword [ebp - 0x184], eax
lea eax, [ebx + 0x18]
mov ecx, dword [edx + 8]
mov dword [ebp - 0x5c], eax
mov edx, dword [ebp - 0x5c]
mov eax, dword [edx + 8]
mov dword [ebp - 0x1a8], eax
mov edx, dword [ebp - 0x5c]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0x1a4], eax
mov edx, dword [ebp - 0x5c]
mov eax, dword [edx + 0x10]
mov dword [ebp - 0x1a0], eax
mov edx, dword [ebp - 0x5c]
mov eax, dword [edx + 0x14]
lea edx, [ebp - 0x1b0]
mov dword [ebp - 0x19c], eax
cmp ecx, dword [edx + 0x10]
jne 0x6361b8
push ebx
call fcn.006378d8
pop ecx
mov ecx, dword [ebx + 0x20]
mov dword [ebp - 0x60], ecx
mov eax, dword [ebp - 0x60]
mov dword [ebp - 8], eax
test eax, eax
je 0x636221
mov word [ebp - 0x24], 0x2c
mov ecx, dword [ebp - 0x54]
mov edx, dword [ebp - 8]
mov eax, dword [ecx]
mov dword [edx], eax
mov eax, dword [ecx + 4]
mov dword [edx + 4], eax
mov edx, dword [ebp - 8]
add edx, 8
mov dword [ebp - 0x64], edx
mov ecx, dword [ebp - 0x54]
add ecx, 8
mov dword [ebp - 0x68], ecx
mov eax, dword [ebp - 0x68]
mov ecx, dword [ebp - 0x64]
mov edx, dword [eax]
mov dword [ecx], edx
mov eax, dword [ebp - 0x64]
cmp dword [eax], 0
je 0x636209
mov edx, dword [ebp - 0x64]
mov ecx, dword [edx]
inc dword [ecx]
inc dword [ebp - 0x18]
mov eax, dword [ebp - 0x54]
mov ecx, dword [ebp - 8]
mov edx, dword [eax + 0xc]
mov dword [ecx + 0xc], edx
dec dword [ebp - 0x18]
mov word [ebp - 0x24], 0x20
add dword [ebx + 0x20], 0x10
inc dword [ebx + 0x30]
add ebx, 0x18
mov dword [ebp - 0x6c], ebx
mov eax, dword [ebp - 0x6c]
mov edx, dword [eax + 8]
mov dword [ebp - 0x1c0], edx
mov ecx, dword [ebp - 0x6c]
mov eax, dword [ecx + 0xc]
mov dword [ebp - 0x1bc], eax
mov edx, dword [ebp - 0x6c]
mov ecx, dword [edx + 0x10]
mov dword [ebp - 0x1b8], ecx
mov eax, dword [ebp - 0x6c]
mov edx, dword [eax + 0x14]
mov dword [ebp - 0x1b4], edx
mov ecx, dword [ebp + 8]
mov dword [ebp - 0x70], ecx
mov eax, dword [ebp - 0x1c0]
mov dword [ebp - 0x1d8], eax
mov edx, dword [ebp - 0x1bc]
mov dword [ebp - 0x1d4], edx
mov ecx, dword [ebp - 0x1b8]
mov dword [ebp - 0x1d0], ecx
mov eax, dword [ebp - 0x1b4]
mov dword [ebp - 0x1cc], eax
mov edx, dword [ebp - 0x1d8]
sub edx, dword [ebp - 0x1d4]
test edx, edx
jns 0x6362a7
add edx, 0xf
sar edx, 4
dec edx
mov dword [ebp - 0x74], edx
cmp dword [ebp - 0x74], 0
jl 0x6362c6
call fcn.00637cc4
push eax
mov eax, dword [ebp - 0x74]
pop edx
mov ecx, edx
xor edx, edx
div ecx
jmp 0x6362e1
call fcn.00637cc4
mov edx, dword [ebp - 0x74]
neg edx
add eax, edx
dec eax
push eax
call fcn.00637cc4
pop ecx
xor edx, edx
xchg ecx, eax
div ecx
neg eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0
jne 0x6362f3
add dword [ebp - 0x1d8], 0xfffffff0
jmp 0x63633d
mov eax, dword [ebp - 0x78]
shl eax, 2
add dword [ebp - 0x1cc], eax
mov ecx, dword [ebp - 0x1cc]
mov eax, dword [ecx]
mov dword [ebp - 0x1d4], eax
call fcn.00637cc4
shl eax, 4
add eax, dword [ebp - 0x1d4]
mov dword [ebp - 0x1d0], eax
call fcn.00637cc4
imul dword [ebp - 0x78]
mov edx, dword [ebp - 0x74]
sub edx, eax
shl edx, 4
add edx, dword [ebp - 0x1d4]
mov dword [ebp - 0x1d8], edx
mov ecx, dword [ebp - 0x70]
mov eax, dword [ebp - 0x1d8]
mov dword [ecx + 8], eax
mov edx, dword [ebp - 0x70]
mov ecx, dword [ebp - 0x1d4]
mov dword [edx + 0xc], ecx
mov eax, dword [ebp - 0x70]
mov edx, dword [ebp - 0x1d0]
mov dword [eax + 0x10], edx
mov ecx, dword [ebp - 0x70]
mov eax, dword [ebp - 0x1cc]
mov dword [ecx + 0x14], eax
mov eax, dword [ebp + 8]
mov edx, dword [ebp - 0x34]
mov dword fs:[0], edx
jmp 0x6374ba
mov esi, ebx
mov ecx, dword [esi + 8]
mov dword [ebp - 0x1f0], ecx
mov eax, dword [esi + 0xc]
mov dword [ebp - 0x1ec], eax
mov edx, dword [esi + 0x10]
mov dword [ebp - 0x1e8], edx
mov ecx, dword [esi + 0x14]
mov dword [ebp - 0x1e4], ecx
mov eax, dword [ebp - 0x1e4]
cmp eax, dword [ebp + 0x24]
jne 0x6363c5
mov edi, dword [ebp + 0x18]
sub edi, dword [ebp - 0x1f0]
test edi, edi
jns 0x6363c0
add edi, 0xf
sar edi, 4
jmp 0x63640d
call fcn.00637cc4
mov edi, eax
mov eax, dword [ebp + 0x24]
sub eax, dword [ebp - 0x1e4]
test eax, eax
jns 0x6363dc
add eax, 3
sar eax, 2
mov edx, dword [ebp + 0x18]
dec eax
imul edi, eax
sub edx, dword [ebp + 0x1c]
test edx, edx
jns 0x6363f0
add edx, 0xf
sar edx, 4
mov ecx, dword [ebp - 0x1e8]
sub ecx, dword [ebp - 0x1f0]
add edi, edx
test ecx, ecx
jns 0x636408
add ecx, 0xf
sar ecx, 4
add edi, ecx
mov eax, dword [ebx + 0x30]
shr eax, 1
cmp eax, edi
jbe 0x636b02
mov dword [ebp - 0x7c], ebx
mov edx, dword [ebp - 0x7c]
mov ecx, dword [edx + 8]
mov dword [ebp - 0x208], ecx
mov eax, dword [ebp - 0x7c]
mov edx, dword [eax + 0xc]
mov dword [ebp - 0x204], edx
mov ecx, dword [ebp - 0x7c]
mov eax, dword [ecx + 0x10]
mov dword [ebp - 0x200], eax
mov edx, dword [ebp - 0x7c]
mov ecx, dword [edx + 0x14]
mov dword [ebp - 0x1fc], ecx
mov eax, dword [ebp - 0x208]
mov dword [ebp - 0x80], eax
cmp dword [ebx + 0x30], 0
sete dl
and edx, 1
test dl, dl
jne 0x636500
mov dword [ebp - 0x84], ebx
mov ecx, dword [ebp - 0x84]
mov eax, dword [ecx + 8]
mov dword [ebp - 0x220], eax
mov edx, dword [ebp - 0x84]
mov ecx, dword [edx + 0xc]
mov dword [ebp - 0x21c], ecx
mov eax, dword [ebp - 0x84]
mov edx, dword [eax + 0x10]
mov dword [ebp - 0x218], edx
lea edx, [ebp - 0x228]
mov ecx, dword [ebp - 0x84]
mov eax, dword [ecx + 0x14]
mov dword [ebp - 0x214], eax
mov ecx, dword [edx + 8]
mov dword [ebp - 0x88], ebx
mov eax, dword [ebp - 0x88]
mov edx, dword [eax + 8]
mov dword [ebp - 0x238], edx
mov eax, dword [ebp - 0x88]
mov edx, dword [eax + 0xc]
mov dword [ebp - 0x234], edx
mov eax, dword [ebp - 0x88]
mov edx, dword [eax + 0x10]
mov dword [ebp - 0x230], edx
mov eax, dword [ebp - 0x88]
mov edx, dword [eax + 0x14]
lea eax, [ebp - 0x240]
mov dword [ebp - 0x22c], edx
cmp ecx, dword [eax + 0xc]
jne 0x636507
push ebx
call fcn.006374c4
pop ecx
mov edx, dword [ebx + 8]
add edx, 0xfffffff0
mov dword [ebp - 0x8c], edx
mov ecx, dword [ebp - 0x8c]
mov dword [ebp - 0xc], ecx
test ecx, ecx
je 0x63658b
mov word [ebp - 0x24], 0x44
mov edx, dword [ebp - 0x80]
mov eax, dword [ebp - 0xc]
mov ecx, dword [edx]
mov dword [eax], ecx
mov ecx, dword [edx + 4]
mov dword [eax + 4], ecx
mov eax, dword [ebp - 0xc]
add eax, 8
mov dword [ebp - 0x90], eax
mov edx, dword [ebp - 0x80]
add edx, 8
mov dword [ebp - 0x94], edx
mov eax, dword [ebp - 0x94]
mov ecx, dword [ebp - 0x90]
mov edx, dword [eax]
mov dword [ecx], edx
mov eax, dword [ebp - 0x90]
cmp dword [eax], 0
je 0x636573
mov edx, dword [ebp - 0x90]
mov ecx, dword [edx]
inc dword [ecx]
inc dword [ebp - 0x18]
mov eax, dword [ebp - 0x80]
mov ecx, dword [ebp - 0xc]
mov edx, dword [eax + 0xc]
mov dword [ecx + 0xc], edx
dec dword [ebp - 0x18]
mov word [ebp - 0x24], 0x38
sub dword [ebx + 8], 0x10
inc dword [ebx + 0x30]
mov dword [ebp - 0xbc], ebx
mov eax, dword [ebp - 0xbc]
add esp, 0xffffffe8
mov edx, dword [eax + 8]
mov dword [ebp - 0x2f8], edx
mov ecx, dword [ebp - 0xbc]
mov eax, dword [ecx + 0xc]
mov dword [ebp - 0x2f4], eax
mov edx, dword [ebp - 0xbc]
mov ecx, dword [edx + 0x10]
mov dword [ebp - 0x2f0], ecx
mov eax, dword [ebp - 0xbc]
mov edx, dword [eax + 0x14]
mov dword [ebp - 0x2ec], edx
mov ecx, dword [ebp - 0x2f8]
mov dword [ebp - 0x310], ecx
mov eax, dword [ebp - 0x2f4]
mov dword [ebp - 0x30c], eax
mov edx, dword [ebp - 0x2f0]
mov dword [ebp - 0x308], edx
mov ecx, dword [ebp - 0x2ec]
mov dword [ebp - 0x304], ecx
mov eax, dword [ebp - 0x310]
sub eax, dword [ebp - 0x30c]
test eax, eax
jns 0x63661a
add eax, 0xf
sar eax, 4
inc eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 0
jl 0x636642
call fcn.00637cc4
push eax
mov eax, dword [ebp - 0xc0]
pop edx
mov ecx, edx
xor edx, edx
div ecx
jmp 0x636660
call fcn.00637cc4
mov edx, dword [ebp - 0xc0]
neg edx
add eax, edx
dec eax
push eax
call fcn.00637cc4
pop ecx
xor edx, edx
xchg ecx, eax
div ecx
neg eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 0
jne 0x636678
add dword [ebp - 0x310], 0x10
jmp 0x6366cb
mov eax, dword [ebp - 0xc4]
shl eax, 2
add dword [ebp - 0x304], eax
mov ecx, dword [ebp - 0x304]
mov eax, dword [ecx]
mov dword [ebp - 0x30c], eax
call fcn.00637cc4
shl eax, 4
add eax, dword [ebp - 0x30c]
mov dword [ebp - 0x308], eax
call fcn.00637cc4
imul dword [ebp - 0xc4]
mov edx, dword [ebp - 0xc0]
sub edx, eax
shl edx, 4
add edx, dword [ebp - 0x30c]
mov dword [ebp - 0x310], edx
mov ecx, dword [ebp - 0x310]
mov dword [esp + 8], ecx
mov eax, dword [ebp - 0x30c]
mov dword [esp + 0xc], eax
mov edx, dword [ebp - 0x308]
mov dword [esp + 0x10], edx
mov ecx, dword [ebp - 0x304]
mov dword [esp + 0x14], ecx
add esp, 0xffffffe8
mov dword [ebp - 0xa4], edi
mov dword [ebp - 0xa8], ebx
mov eax, dword [ebp - 0xa8]
mov edx, dword [eax + 8]
mov dword [ebp - 0x298], edx
mov ecx, dword [ebp - 0xa8]
mov eax, dword [ecx + 0xc]
mov dword [ebp - 0x294], eax
mov edx, dword [ebp - 0xa8]
mov ecx, dword [edx + 0x10]
mov dword [ebp - 0x290], ecx
mov eax, dword [ebp - 0xa8]
mov edx, dword [eax + 0x14]
mov dword [ebp - 0x28c], edx
mov ecx, dword [ebp - 0x298]
mov dword [ebp - 0x2b0], ecx
mov eax, dword [ebp - 0x294]
mov dword [ebp - 0x2ac], eax
mov edx, dword [ebp - 0x290]
mov dword [ebp - 0x2a8], edx
mov ecx, dword [ebp - 0x28c]
mov dword [ebp - 0x2a4], ecx
mov eax, dword [ebp - 0x2b0]
sub eax, dword [ebp - 0x2ac]
test eax, eax
jns 0x636781
add eax, 0xf
sar eax, 4
add eax, dword [ebp - 0xa4]
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 0
jl 0x6367ae
call fcn.00637cc4
push eax
mov eax, dword [ebp - 0xac]
pop edx
mov ecx, edx
xor edx, edx
div ecx
jmp 0x6367cc
call fcn.00637cc4
mov edx, dword [ebp - 0xac]
neg edx
add eax, edx
dec eax
push eax
call fcn.00637cc4
pop ecx
xor edx, edx
xchg ecx, eax
div ecx
neg eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 0
jne 0x6367ec
mov eax, dword [ebp - 0xa4]
shl eax, 4
add dword [ebp - 0x2b0], eax
jmp 0x63683f
mov ecx, dword [ebp - 0xb0]
shl ecx, 2
add dword [ebp - 0x2a4], ecx
mov eax, dword [ebp - 0x2a4]
mov edx, dword [eax]
mov dword [ebp - 0x2ac], edx
call fcn.00637cc4
shl eax, 4
add eax, dword [ebp - 0x2ac]
mov dword [ebp - 0x2a8], eax
call fcn.00637cc4
imul dword [ebp - 0xb0]
mov ecx, dword [ebp - 0xac]
sub ecx, eax
shl ecx, 4
add ecx, dword [ebp - 0x2ac]
mov dword [ebp - 0x2b0], ecx
mov eax, dword [ebp - 0x2b0]
mov dword [ebp - 0x2c8], eax
mov edx, dword [ebp - 0x2ac]
mov dword [ebp - 0x2c4], edx
mov ecx, dword [ebp - 0x2a8]
mov dword [ebp - 0x2c0], ecx
mov eax, dword [ebp - 0x2a4]
mov dword [ebp - 0x2bc], eax
mov edx, dword [ebp - 0x2c8]
mov dword [ebp - 0x2e0], edx
mov ecx, dword [ebp - 0x2c4]
mov dword [ebp - 0x2dc], ecx
mov eax, dword [ebp - 0x2c0]
mov dword [ebp - 0x2d8], eax
mov edx, dword [ebp - 0x2bc]
mov dword [ebp - 0x2d4], edx
mov ecx, dword [ebp - 0x2e0]
sub ecx, dword [ebp - 0x2dc]
test ecx, ecx
jns 0x6368b2
add ecx, 0xf
sar ecx, 4
inc ecx
mov dword [ebp - 0xb4], ecx
cmp dword [ebp - 0xb4], 0
jl 0x6368da
call fcn.00637cc4
push eax
mov eax, dword [ebp - 0xb4]
pop edx
mov ecx, edx
xor edx, edx
div ecx
jmp 0x6368f8
call fcn.00637cc4
mov edx, dword [ebp - 0xb4]
neg edx
add eax, edx
dec eax
push eax
call fcn.00637cc4
pop ecx
xor edx, edx
xchg ecx, eax
div ecx
neg eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 0
jne 0x636910
add dword [ebp - 0x2e0], 0x10
jmp 0x636963
mov eax, dword [ebp - 0xb8]
shl eax, 2
add dword [ebp - 0x2d4], eax
mov ecx, dword [ebp - 0x2d4]
mov eax, dword [ecx]
mov dword [ebp - 0x2dc], eax
call fcn.00637cc4
shl eax, 4
add eax, dword [ebp - 0x2dc]
mov dword [ebp - 0x2d8], eax
call fcn.00637cc4
imul dword [ebp - 0xb8]
mov edx, dword [ebp - 0xb4]
sub edx, eax
shl edx, 4
add edx, dword [ebp - 0x2dc]
mov dword [ebp - 0x2e0], edx
mov ecx, dword [ebp - 0x2e0]
mov dword [esp + 8], ecx
mov eax, dword [ebp - 0x2dc]
mov dword [esp + 0xc], eax
mov edx, dword [ebp - 0x2d8]
mov dword [esp + 0x10], edx
mov ecx, dword [ebp - 0x2d4]
mov dword [esp + 0x14], ecx
mov dword [ebp - 0x98], ebx
mov eax, dword [ebp - 0x98]
add esp, 0xffffffe8
mov edx, dword [eax + 8]
mov dword [ebp - 0x268], edx
mov ecx, dword [ebp - 0x98]
mov eax, dword [ecx + 0xc]
mov dword [ebp - 0x264], eax
mov edx, dword [ebp - 0x98]
mov ecx, dword [edx + 0x10]
mov dword [ebp - 0x260], ecx
mov eax, dword [ebp - 0x98]
mov edx, dword [eax + 0x14]
mov dword [ebp - 0x25c], edx
mov ecx, dword [ebp - 0x268]
mov dword [ebp - 0x280], ecx
mov eax, dword [ebp - 0x264]
mov dword [ebp - 0x27c], eax
mov edx, dword [ebp - 0x260]
mov dword [ebp - 0x278], edx
mov ecx, dword [ebp - 0x25c]
mov dword [ebp - 0x274], ecx
mov eax, dword [ebp - 0x280]
sub eax, dword [ebp - 0x27c]
test eax, eax
jns 0x636a13
add eax, 0xf
sar eax, 4
add eax, 2
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 0
jl 0x636a3d
call fcn.00637cc4
push eax
mov eax, dword [ebp - 0x9c]
pop edx
mov ecx, edx
xor edx, edx
div ecx
jmp 0x636a5b
call fcn.00637cc4
mov edx, dword [ebp - 0x9c]
neg edx
add eax, edx
dec eax
push eax
call fcn.00637cc4
pop ecx
xor edx, edx
xchg ecx, eax
div ecx
neg eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 0
jne 0x636a73
add dword [ebp - 0x280], 0x20
jmp 0x636ac6
mov eax, dword [ebp - 0xa0]
shl eax, 2
add dword [ebp - 0x274], eax
mov ecx, dword [ebp - 0x274]
mov eax, dword [ecx]
mov dword [ebp - 0x27c], eax
call fcn.00637cc4
shl eax, 4
add eax, dword [ebp - 0x27c]
mov dword [ebp - 0x278], eax
call fcn.00637cc4
imul dword [ebp - 0xa0]
mov edx, dword [ebp - 0x9c]
sub edx, eax
shl edx, 4
add edx, dword [ebp - 0x27c]
mov dword [ebp - 0x280], edx
mov ecx, dword [ebp - 0x280]
mov dword [esp + 8], ecx
mov eax, dword [ebp - 0x27c]
mov dword [esp + 0xc], eax
mov edx, dword [ebp - 0x278]
mov dword [esp + 0x10], edx
mov ecx, dword [ebp - 0x274]
mov dword [esp + 0x14], ecx
lea eax, [ebp - 0x258]
push eax
call fcn.006359f4
add esp, 0x4c
jmp 0x637179
lea eax, [ebx + 0x18]
mov edx, dword [eax + 8]
mov dword [ebp - 0x328], edx
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0x324], ecx
mov edx, dword [eax + 0x10]
mov dword [ebp - 0x320], edx
mov eax, dword [eax + 0x14]
mov dword [ebp - 0x31c], eax
mov ecx, dword [ebp - 0x328]
mov dword [ebp - 0x340], ecx
mov eax, dword [ebp - 0x324]
mov dword [ebp - 0x33c], eax
mov edx, dword [ebp - 0x320]
mov dword [ebp - 0x338], edx
mov ecx, dword [ebp - 0x31c]
mov dword [ebp - 0x334], ecx
mov esi, dword [ebp - 0x340]
sub esi, dword [ebp - 0x33c]
test esi, esi
jns 0x636b6c
add esi, 0xf
sar esi, 4
dec esi
test esi, esi
jl 0x636b85
call fcn.00637cc4
push eax
mov eax, esi
pop edx
mov ecx, edx
xor edx, edx
div ecx
jmp 0x636b9f
call fcn.00637cc4
mov edx, esi
neg edx
add eax, edx
dec eax
push eax
call fcn.00637cc4
pop ecx
xor edx, edx
xchg ecx, eax
div ecx
neg eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 0
jne 0x636bb7
add dword [ebp - 0x340], 0xfffffff0
jmp 0x636c04
mov eax, dword [ebp - 0xc8]
shl eax, 2
add dword [ebp - 0x334], eax
mov ecx, dword [ebp - 0x334]
mov eax, dword [ecx]
mov dword [ebp - 0x33c], eax
call fcn.00637cc4
shl eax, 4
add eax, dword [ebp - 0x33c]
mov dword [ebp - 0x338], eax
call fcn.00637cc4
imul dword [ebp - 0xc8]
sub esi, eax
shl esi, 4
add esi, dword [ebp - 0x33c]
mov dword [ebp - 0x340], esi
mov edx, dword [ebp - 0x340]
mov dword [ebp - 0x358], edx
mov ecx, dword [ebp - 0x33c]
mov dword [ebp - 0x354], ecx
mov eax, dword [ebp - 0x338]
mov dword [ebp - 0x350], eax
mov edx, dword [ebp - 0x334]
mov dword [ebp - 0x34c], edx
mov ecx, dword [ebp - 0x358]
mov dword [ebp - 0xcc], ecx
cmp dword [ebx + 0x30], 0
sete al
and eax, 1
test al, al
jne 0x636cb0
lea eax, [ebx + 0x18]
lea edx, [ebx + 0x18]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x370], ecx
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0x36c], ecx
mov ecx, dword [eax + 0x10]
mov dword [ebp - 0x368], ecx
mov eax, dword [eax + 0x14]
mov dword [ebp - 0x364], eax
lea eax, [ebp - 0x378]
mov ecx, dword [eax + 8]
mov eax, dword [edx + 8]
mov dword [ebp - 0x388], eax
mov eax, dword [edx + 0xc]
mov dword [ebp - 0x384], eax
mov eax, dword [edx + 0x10]
mov dword [ebp - 0x380], eax
lea eax, [ebp - 0x390]
mov edx, dword [edx + 0x14]
mov dword [ebp - 0x37c], edx
cmp ecx, dword [eax + 0x10]
jne 0x636cb7
push ebx
call fcn.006378d8
pop ecx
mov edx, dword [ebx + 0x20]
mov dword [ebp - 0xd0], edx
mov ecx, dword [ebp - 0xd0]
mov dword [ebp - 0x10], ecx
test ecx, ecx
je 0x636d41
mov word [ebp - 0x24], 0x5c
mov edx, dword [ebp - 0xcc]
mov eax, dword [ebp - 0x10]
mov ecx, dword [edx]
mov dword [eax], ecx
mov ecx, dword [edx + 4]
mov dword [eax + 4], ecx
mov eax, dword [ebp - 0x10]
add eax, 8
mov dword [ebp - 0xd4], eax
mov edx, dword [ebp - 0xcc]
add edx, 8
mov dword [ebp - 0xd8], edx
mov eax, dword [ebp - 0xd8]
mov ecx, dword [ebp - 0xd4]
mov edx, dword [eax]
mov dword [ecx], edx
mov eax, dword [ebp - 0xd4]
cmp dword [eax], 0
je 0x636d26
mov edx, dword [ebp - 0xd4]
mov ecx, dword [edx]
inc dword [ecx]
inc dword [ebp - 0x18]
mov eax, dword [ebp - 0xcc]
mov ecx, dword [ebp - 0x10]
mov edx, dword [eax + 0xc]
mov dword [ecx + 0xc], edx
dec dword [ebp - 0x18]
mov word [ebp - 0x24], 0x50
add dword [ebx + 0x20], 0x10
inc dword [ebx + 0x30]
lea eax, [ebx + 0x18]
mov dword [ebp - 0xf4], eax
add esp, 0xffffffe8
mov edx, dword [ebp - 0xf4]
mov ecx, dword [edx + 8]
mov dword [ebp - 0x418], ecx
mov eax, dword [ebp - 0xf4]
mov edx, dword [eax + 0xc]
mov dword [ebp - 0x414], edx
mov ecx, dword [ebp - 0xf4]
mov eax, dword [ecx + 0x10]
mov dword [ebp - 0x410], eax
mov edx, dword [ebp - 0xf4]
mov ecx, dword [edx + 0x14]
mov dword [ebp - 0x40c], ecx
mov eax, dword [ebp - 0x418]
mov dword [ebp - 0x430], eax
mov edx, dword [ebp - 0x414]
mov dword [ebp - 0x42c], edx
mov ecx, dword [ebp - 0x410]
mov dword [ebp - 0x428], ecx
mov eax, dword [ebp - 0x40c]
mov dword [ebp - 0x424], eax
mov edx, dword [ebp - 0x430]
sub edx, dword [ebp - 0x42c]
test edx, edx
jns 0x636dd3
add edx, 0xf
sar edx, 4
dec edx
mov dword [ebp - 0xf8], edx
cmp dword [ebp - 0xf8], 0
jl 0x636dfb
call fcn.00637cc4
push eax
mov eax, dword [ebp - 0xf8]
pop edx
mov ecx, edx
xor edx, edx
div ecx
jmp 0x636e19
call fcn.00637cc4
mov edx, dword [ebp - 0xf8]
neg edx
add eax, edx
dec eax
push eax
call fcn.00637cc4
pop ecx
xor edx, edx
xchg ecx, eax
div ecx
neg eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 0
jne 0x636e31
add dword [ebp - 0x430], 0xfffffff0
jmp 0x636e84
mov eax, dword [ebp - 0xfc]
shl eax, 2
add dword [ebp - 0x424], eax
mov ecx, dword [ebp - 0x424]
mov eax, dword [ecx]
mov dword [ebp - 0x42c], eax
call fcn.00637cc4
shl eax, 4
add eax, dword [ebp - 0x42c]
mov dword [ebp - 0x428], eax
call fcn.00637cc4
imul dword [ebp - 0xfc]
mov edx, dword [ebp - 0xf8]
sub edx, eax
shl edx, 4
add edx, dword [ebp - 0x42c]
mov dword [ebp - 0x430], edx
mov ecx, dword [ebp - 0x430]
mov dword [esp + 8], ecx
mov eax, dword [ebp - 0x42c]
mov dword [esp + 0xc], eax
lea eax, [ebx + 0x18]
mov edx, dword [ebp - 0x428]
mov dword [esp + 0x10], edx
mov ecx, dword [ebp - 0x424]
mov dword [esp + 0x14], ecx
mov dword [ebp - 0xe8], eax
mov edx, dword [ebp - 0xe8]
add esp, 0xffffffe8
mov ecx, dword [edx + 8]
mov dword [ebp - 0x3e8], ecx
mov eax, dword [ebp - 0xe8]
mov edx, dword [eax + 0xc]
mov dword [ebp - 0x3e4], edx
mov ecx, dword [ebp - 0xe8]
mov eax, dword [ecx + 0x10]
mov dword [ebp - 0x3e0], eax
mov edx, dword [ebp - 0xe8]
mov ecx, dword [edx + 0x14]
mov dword [ebp - 0x3dc], ecx
mov eax, dword [ebp - 0x3e8]
mov dword [ebp - 0x400], eax
mov edx, dword [ebp - 0x3e4]
mov dword [ebp - 0x3fc], edx
mov ecx, dword [ebp - 0x3e0]
mov dword [ebp - 0x3f8], ecx
mov eax, dword [ebp - 0x3dc]
mov dword [ebp - 0x3f4], eax
mov edx, dword [ebp - 0x400]
sub edx, dword [ebp - 0x3fc]
test edx, edx
jns 0x636f37
add edx, 0xf
sar edx, 4
add edx, 0xfffffffe
mov dword [ebp - 0xec], edx
cmp dword [ebp - 0xec], 0
jl 0x636f61
call fcn.00637cc4
push eax
mov eax, dword [ebp - 0xec]
pop edx
mov ecx, edx
xor edx, edx
div ecx
jmp 0x636f7f
call fcn.00637cc4
mov edx, dword [ebp - 0xec]
neg edx
add eax, edx
dec eax
push eax
call fcn.00637cc4
pop ecx
xor edx, edx
xchg ecx, eax
div ecx
neg eax
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 0
jne 0x636f97
add dword [ebp - 0x400], 0xffffffe0
jmp 0x636fea
mov eax, dword [ebp - 0xf0]
shl eax, 2
add dword [ebp - 0x3f4], eax
mov ecx, dword [ebp - 0x3f4]
mov eax, dword [ecx]
mov dword [ebp - 0x3fc], eax
call fcn.00637cc4
shl eax, 4
add eax, dword [ebp - 0x3fc]
mov dword [ebp - 0x3f8], eax
call fcn.00637cc4
imul dword [ebp - 0xf0]
mov edx, dword [ebp - 0xec]
sub edx, eax
shl edx, 4
add edx, dword [ebp - 0x3fc]
mov dword [ebp - 0x400], edx
mov ecx, dword [ebp - 0x400]
mov esi, ebx
mov dword [esp + 8], ecx
mov eax, dword [ebp - 0x3fc]
mov dword [esp + 0xc], eax
mov edx, dword [ebp - 0x3f8]
mov dword [esp + 0x10], edx
mov ecx, dword [ebp - 0x3f4]
mov dword [esp + 0x14], ecx
mov dword [ebp - 0xdc], edi
mov eax, dword [esi + 8]
add esp, 0xffffffe8
mov dword [ebp - 0x3b8], eax
mov edx, dword [esi + 0xc]
mov dword [ebp - 0x3b4], edx
mov ecx, dword [esi + 0x10]
mov dword [ebp - 0x3b0], ecx
mov eax, dword [esi + 0x14]
mov dword [ebp - 0x3ac], eax
mov edx, dword [ebp - 0x3b8]
mov dword [ebp - 0x3d0], edx
mov ecx, dword [ebp - 0x3b4]
mov dword [ebp - 0x3cc], ecx
mov eax, dword [ebp - 0x3b0]
mov dword [ebp - 0x3c8], eax
mov edx, dword [ebp - 0x3ac]
mov dword [ebp - 0x3c4], edx
mov ecx, dword [ebp - 0x3d0]
sub ecx, dword [ebp - 0x3cc]
test ecx, ecx
jns 0x637084
add ecx, 0xf
sar ecx, 4
add ecx, dword [ebp - 0xdc]
mov dword [ebp - 0xe0], ecx
cmp dword [ebp - 0xe0], 0
jl 0x6370b1
call fcn.00637cc4
push eax
mov eax, dword [ebp - 0xe0]
pop edx
mov ecx, edx
xor edx, edx
div ecx
jmp 0x6370cf
call fcn.00637cc4
mov edx, dword [ebp - 0xe0]
neg edx
add eax, edx
dec eax
push eax
call fcn.00637cc4
pop ecx
xor edx, edx
xchg ecx, eax
div ecx
neg eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 0
jne 0x6370ef
mov eax, dword [ebp - 0xdc]
shl eax, 4
add dword [ebp - 0x3d0], eax
jmp 0x637142
mov ecx, dword [ebp - 0xe4]
shl ecx, 2
add dword [ebp - 0x3c4], ecx
mov eax, dword [ebp - 0x3c4]
mov edx, dword [eax]
mov dword [ebp - 0x3cc], edx
call fcn.00637cc4
shl eax, 4
add eax, dword [ebp - 0x3cc]
mov dword [ebp - 0x3c8], eax
call fcn.00637cc4
imul dword [ebp - 0xe4]
mov ecx, dword [ebp - 0xe0]
sub ecx, eax
shl ecx, 4
add ecx, dword [ebp - 0x3cc]
mov dword [ebp - 0x3d0], ecx
mov eax, dword [ebp - 0x3d0]
mov dword [esp + 8], eax
mov edx, dword [ebp - 0x3cc]
mov dword [esp + 0xc], edx
mov ecx, dword [ebp - 0x3c8]
mov dword [esp + 0x10], ecx
mov eax, dword [ebp - 0x3c4]
mov dword [esp + 0x14], eax
lea edx, [ebp - 0x3a8]
push edx
call fcn.00635804
add esp, 0x4c
mov dword [ebp - 0x100], edi
mov eax, ebx
mov edx, dword [eax + 8]
mov dword [ebp - 0x448], edx
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0x444], ecx
mov edx, dword [eax + 0x10]
mov dword [ebp - 0x440], edx
mov eax, dword [eax + 0x14]
mov dword [ebp - 0x43c], eax
mov ecx, dword [ebp - 0x448]
mov dword [ebp - 0x460], ecx
mov eax, dword [ebp - 0x444]
mov dword [ebp - 0x45c], eax
mov edx, dword [ebp - 0x440]
mov dword [ebp - 0x458], edx
mov ecx, dword [ebp - 0x43c]
mov dword [ebp - 0x454], ecx
mov esi, dword [ebp - 0x460]
sub esi, dword [ebp - 0x45c]
test esi, esi
jns 0x6371e8
add esi, 0xf
sar esi, 4
add esi, dword [ebp - 0x100]
test esi, esi
jl 0x637206
call fcn.00637cc4
push eax
mov eax, esi
pop edx
mov ecx, edx
xor edx, edx
div ecx
jmp 0x637220
call fcn.00637cc4
mov edx, esi
neg edx
add eax, edx
dec eax
push eax
call fcn.00637cc4
pop ecx
xor edx, edx
xchg ecx, eax
div ecx
neg eax
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 0
jne 0x637240
mov eax, dword [ebp - 0x100]
shl eax, 4
add dword [ebp - 0x460], eax
jmp 0x63728d
mov ecx, dword [ebp - 0x104]
shl ecx, 2
add dword [ebp - 0x454], ecx
mov eax, dword [ebp - 0x454]
mov edx, dword [eax]
mov dword [ebp - 0x45c], edx
call fcn.00637cc4
shl eax, 4
add eax, dword [ebp - 0x45c]
mov dword [ebp - 0x458], eax
call fcn.00637cc4
imul dword [ebp - 0x104]
sub esi, eax
shl esi, 4
add esi, dword [ebp - 0x45c]
mov dword [ebp - 0x460], esi
mov ecx, dword [ebp - 0x460]
mov dword [ebp - 0x478], ecx
mov eax, dword [ebp - 0x45c]
mov dword [ebp - 0x474], eax
mov edx, dword [ebp - 0x458]
mov dword [ebp - 0x470], edx
mov ecx, dword [ebp - 0x454]
mov dword [ebp - 0x46c], ecx
mov esi, dword [ebp - 0x478]
mov eax, dword [ebp + 0x28]
mov dword [ebp - 0x108], eax
lea edx, [esi + 8]
mov dword [ebp - 0x10c], edx
mov ecx, dword [ebp - 0x108]
add ecx, 8
mov dword [ebp - 0x110], ecx
mov eax, dword [ebp - 0x110]
cmp dword [eax], 0
je 0x6372f9
mov edx, dword [ebp - 0x110]
mov ecx, dword [edx]
inc dword [ecx]
mov eax, dword [ebp - 0x10c]
cmp dword [eax], 0
je 0x637311
mov edx, dword [ebp - 0x10c]
mov eax, dword [edx]
call fcn.00408920
mov edx, dword [ebp - 0x110]
mov eax, dword [ebp - 0x10c]
mov ecx, dword [edx]
mov dword [eax], ecx
mov edx, dword [ebp - 0x108]
mov ecx, dword [edx]
mov dword [esi], ecx
mov ecx, dword [edx + 4]
mov dword [esi + 4], ecx
mov eax, dword [ebp - 0x108]
mov edx, dword [eax + 0xc]
mov dword [esi + 0xc], edx
mov dword [ebp - 0x114], edi
mov dword [ebp - 0x118], ebx
mov ecx, dword [ebp - 0x118]
mov eax, dword [ecx + 8]
mov dword [ebp - 0x490], eax
mov edx, dword [ebp - 0x118]
mov ecx, dword [edx + 0xc]
mov dword [ebp - 0x48c], ecx
mov eax, dword [ebp - 0x118]
mov edx, dword [eax + 0x10]
mov dword [ebp - 0x488], edx
mov ecx, dword [ebp - 0x118]
mov eax, dword [ecx + 0x14]
mov dword [ebp - 0x484], eax
mov esi, dword [ebp + 8]
mov edx, dword [ebp - 0x490]
mov dword [ebp - 0x4a8], edx
mov ecx, dword [ebp - 0x48c]
mov dword [ebp - 0x4a4], ecx
mov eax, dword [ebp - 0x488]
mov dword [ebp - 0x4a0], eax
mov edx, dword [ebp - 0x484]
mov dword [ebp - 0x49c], edx
mov ecx, dword [ebp - 0x4a8]
sub ecx, dword [ebp - 0x4a4]
test ecx, ecx
jns 0x6373cb
add ecx, 0xf
sar ecx, 4
add ecx, dword [ebp - 0x114]
mov dword [ebp - 0x11c], ecx
cmp dword [ebp - 0x11c], 0
jl 0x6373f8
call fcn.00637cc4
push eax
mov eax, dword [ebp - 0x11c]
pop edx
mov ecx, edx
xor edx, edx
div ecx
jmp 0x637416
call fcn.00637cc4
mov edx, dword [ebp - 0x11c]
neg edx
add eax, edx
dec eax
push eax
call fcn.00637cc4
pop ecx
xor edx, edx
xchg ecx, eax
div ecx
neg eax
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 0
jne 0x637436
mov eax, dword [ebp - 0x114]
shl eax, 4
add dword [ebp - 0x4a8], eax
jmp 0x637489
mov ecx, dword [ebp - 0x120]
shl ecx, 2
add dword [ebp - 0x49c], ecx
mov eax, dword [ebp - 0x49c]
mov edx, dword [eax]
mov dword [ebp - 0x4a4], edx
call fcn.00637cc4
shl eax, 4
add eax, dword [ebp - 0x4a4]
mov dword [ebp - 0x4a0], eax
call fcn.00637cc4
imul dword [ebp - 0x120]
mov ecx, dword [ebp - 0x11c]
sub ecx, eax
shl ecx, 4
add ecx, dword [ebp - 0x4a4]
mov dword [ebp - 0x4a8], ecx
mov eax, dword [ebp - 0x4a8]
mov dword [esi + 8], eax
mov edx, dword [ebp - 0x4a4]
mov dword [esi + 0xc], edx
mov ecx, dword [ebp - 0x4a0]
mov dword [esi + 0x10], ecx
mov eax, dword [ebp - 0x49c]
mov dword [esi + 0x14], eax
mov eax, dword [ebp + 8]
mov edx, dword [ebp - 0x34]
mov dword fs:[0], edx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret