Function at 0x649424
Capabilities:
Get disk information
Get geographical location

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0xb2
push 0
push 0
dec ecx
jne 0x64942c
push ecx
push ebx
push esi
push edi
mov dword [ebp - 8], edx
mov dword [ebp - 4], eax
mov eax, dword [ebp - 8]
call fcn.004042a4
xor eax, eax
push ebp
push 0x64c542
push dword fs:[eax]
mov dword fs:[eax], esp
mov byte [ebp - 0x81], 0
mov eax, dword [ebp - 8]
mov edx, 0x64c558
call fcn.00404200
jne 0x649471
lea eax, [ebp - 8]
call fcn.00403e74
mov eax, dword [ebp - 8]
call fcn.0044c49c
test al, al
jne 0x64949b
mov eax, dword [ebp - 8]
call fcn.004097b8
test al, al
je 0x64949b
mov byte [ebp - 0x81], 1
lea eax, [ebp - 0x48]
mov edx, dword [ebp - 8]
call fcn.00403f0c
cmp byte [ebp - 0x81], 0
jne 0x649675
lea eax, [ebp - 0x474]
push eax
xor ecx, ecx
mov edx, 0x64c564
mov eax, 0x64c578
call fcn.0079ff1c
mov edx, dword [ebp - 0x474]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1fc]
add eax, 0x6c
call fcn.00403ec8
lea eax, [ebp - 0xc]
mov edx, dword [0x8415f4]
mov edx, dword [edx]
call fcn.00403f0c
lea eax, [ebp - 0x474]
call fcn.0078741c
lea eax, [ebp - 0x474]
mov edx, 0x64c58c
call fcn.004040f8
mov eax, dword [ebp - 0x474]
call fcn.004836c0
test al, al
je 0x64952f
lea eax, [ebp - 0x474]
call fcn.0078741c
mov edx, dword [ebp - 0x474]
lea eax, [ebp - 0xc]
mov ecx, 0x64c58c
call fcn.0040413c
lea edx, [ebp - 0x474]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1fc]
call fcn.00459b30
mov eax, dword [ebp - 0x474]
call fcn.0044c49c
test al, al
je 0x6495aa
lea eax, [ebp - 0x474]
call fcn.0078741c
lea eax, [ebp - 0x474]
mov edx, 0x64c5a0
call fcn.004040f8
mov eax, dword [ebp - 0x474]
call fcn.004097b8
test al, al
je 0x6495aa
lea eax, [ebp - 0x474]
call fcn.0078741c
mov edx, dword [ebp - 0x474]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1fc]
add eax, 0x6c
mov ecx, 0x64c5a0
call fcn.0040413c
mov byte [ebp - 0x82], 1
lea edx, [ebp - 0x474]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1fc]
call fcn.00459b30
cmp dword [ebp - 0x474], 0
jne 0x6495da
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1fc]
mov edx, dword [ebp - 0xc]
call fcn.00459bc8
jmp 0x649613
lea edx, [ebp - 0x478]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1fc]
call fcn.00459b30
mov eax, dword [ebp - 0x478]
lea edx, [ebp - 0x474]
call fcn.00409abc
mov edx, dword [ebp - 0x474]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1fc]
call fcn.00459bc8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1fc]
mov edx, dword [eax]
call dword [edx + 0x34]
test al, al
jne 0x649645
lea eax, [ebp - 0x474]
call fcn.0078741c
mov eax, dword [ebp - 0x474]
call fcn.004028d4
call fcn.00402898
jmp 0x64c4e5
lea edx, [ebp - 0x48]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1fc]
call fcn.00459b30
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x220]
xor ecx, ecx
mov edx, dword [ebp - 0x48]
call fcn.0058a964
mov eax, dword [0x8417e4]
mov eax, dword [eax]
call fcn.0042d188
mov eax, dword [ebp - 4]
mov byte [eax + 0x280], 0
mov byte [ebp - 0x82], 0
mov byte [ebp - 0x81], 0
mov eax, dword [ebp - 4]
mov dword [eax + 0x278], 0xfffe7961
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + 0x1af8], edx
mov dword [eax + 0x1afc], 0x40590000
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x238]
mov edx, 0x64c5c4
call fcn.004340a4
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1dc]
mov eax, dword [eax + 0x118]
xor edx, edx
call fcn.00425eb0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1dc]
mov eax, dword [eax + 0x11c]
xor edx, edx
call fcn.00425eb0
lea eax, [ebp - 0x474]
call fcn.0078741c
mov eax, dword [ebp - 0x474]
call fcn.004028d4
call fcn.00402898
mov eax, dword [ebp - 4]
call fcn.0042a768
mov eax, dword [0x84227c]
mov eax, dword [eax]
mov dx, 0xfff5
call fcn.0042b9bc
xor eax, eax
push ebp
push 0x64c4de
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x8417e4]
mov eax, dword [eax]
call fcn.0042d188
xor eax, eax
push ebp
push 0x64c463
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
mov byte [eax + 0x1ac0], 0x32
mov edx, dword [ebp - 0x48]
lea eax, [ebp - 0x264]
call fcn.0040619e
lea eax, [ebp - 0x264]
call fcn.004066e7
call fcn.00402898
lea eax, [ebp - 0x264]
call fcn.00406630
call fcn.00402898
mov eax, dword [ebp - 4]
lea edx, [eax + 0x28c]
lea eax, [ebp - 0x264]
call fcn.004044d8
lea eax, [ebp - 0x264]
call fcn.00406630
call fcn.00402898
lea edx, [ebp - 0xc]
lea eax, [ebp - 0x264]
call fcn.004044d8
lea eax, [ebp - 0x264]
call fcn.00406630
call fcn.00402898
lea eax, [ebp - 0x44]
push eax
xor ecx, ecx
mov edx, 1
mov eax, dword [ebp - 0xc]
call fcn.0044c84c
lea eax, [ebp - 0x264]
call fcn.00406630
call fcn.00402898
lea edx, [ebp - 0x4c]
lea eax, [ebp - 0x264]
call fcn.004044d8
lea eax, [ebp - 0x264]
call fcn.00406630
call fcn.00402898
lea eax, [ebp - 0x474]
push eax
mov ecx, 0x64c5d4
mov edx, 1
mov eax, dword [ebp - 0x4c]
call fcn.0044c84c
mov eax, dword [ebp - 0x474]
call fcn.00558658
mov edx, dword [ebp - 4]
mov dword [edx + 0x284], eax
xor eax, eax
mov dword [ebp - 0x8c], eax
mov dword [ebp - 0x88], 0x3ff00000
lea edx, [ebp - 0xc]
lea eax, [ebp - 0x264]
call fcn.004044d8
lea eax, [ebp - 0x264]
call fcn.00406630
call fcn.00402898
lea eax, [ebp - 0x10]
push eax
xor ecx, ecx
mov edx, 1
mov eax, dword [ebp - 0xc]
call fcn.0044c84c
mov eax, dword [ebp - 0x10]
mov edx, 0x64c5e4
call fcn.00404200
jne 0x64989e
push 0x3ff00000
push 0
mov edx, 2
mov eax, dword [ebp - 0xc]
call fcn.0044c96c
fstp qword [ebp - 0x8c]
wait
lea eax, [ebp - 0x264]
call fcn.00406630
call fcn.00402898
lea edx, [ebp - 0xc]
lea eax, [ebp - 0x264]
call fcn.004044d8
lea eax, [ebp - 0x264]
call fcn.00406630
call fcn.00402898
lea edx, [ebp - 0xc]
lea eax, [ebp - 0x264]
call fcn.004044d8
lea eax, [ebp - 0x264]
call fcn.00406630
call fcn.00402898
lea eax, [ebp - 0x474]
push eax
xor ecx, ecx
mov edx, 2
mov eax, dword [ebp - 0xc]
call fcn.0044c84c
mov edx, dword [ebp - 0x474]
mov eax, dword [ebp - 4]
add eax, 0x288
call fcn.00403ec8
lea edx, [ebp - 0x474]
mov eax, dword [ebp - 0xc]
call fcn.0044bf5c
mov edx, dword [ebp - 0x474]
lea eax, [ebp - 0x578]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x578]
lea eax, [ebp - 0x2c]
mov cl, 3
call fcn.00402d1c
lea eax, [ebp - 0x2c]
mov edx, 0x64c5e8
xor ecx, ecx
mov cl, byte [eax]
inc ecx
call fcn.00402dd0
jne 0x64996d
mov eax, dword [ebp - 4]
add eax, 0x288
mov edx, 0x64c5f4
call fcn.00403ec8
lea eax, [ebp - 0x2c]
mov edx, 0x64c618
xor ecx, ecx
mov cl, byte [eax]
inc ecx
call fcn.00402dd0
jne 0x649993
mov eax, dword [ebp - 4]
add eax, 0x288
mov edx, 0x64c624
call fcn.00403ec8
lea eax, [ebp - 0x2c]
mov edx, 0x64c640
xor ecx, ecx
mov cl, byte [eax]
inc ecx
call fcn.00402dd0
jne 0x6499b9
mov eax, dword [ebp - 4]
add eax, 0x288
mov edx, 0x64c64c
call fcn.00403ec8
lea eax, [ebp - 0x474]
push eax
mov ecx, 0x64c668
mov edx, 4
mov eax, dword [ebp - 0xc]
call fcn.0044c84c
mov edx, dword [ebp - 0x474]
lea eax, [ebp - 0x578]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x578]
lea eax, [ebp - 0x2c]
mov cl, 3
call fcn.00402d1c
lea eax, [ebp - 0x478]
lea edx, [ebp - 0x2c]
call fcn.00404094
mov eax, dword [ebp - 0x478]
lea edx, [ebp - 0x474]
call fcn.00408fa8
mov eax, dword [ebp - 0x474]
mov edx, 0x64c674
call fcn.00404200
jne 0x649a35
mov eax, dword [ebp - 4]
mov byte [eax + 0x1acc], 1
jmp 0x649a3f
mov eax, dword [ebp - 4]
mov byte [eax + 0x1acc], 0
mov dword [ebp - 0x34], 6
mov dword [ebp - 0x38], 7
lea eax, [ebp - 0x478]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x288]
mov ecx, 5
mov edx, 1
call fcn.004042f4
mov eax, dword [ebp - 0x478]
lea edx, [ebp - 0x474]
call fcn.0078760c
mov edx, dword [ebp - 0x474]
lea eax, [ebp - 0x578]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x578]
lea eax, [ebp - 0x75]
mov cl, 5
call fcn.00402d1c
lea eax, [ebp - 0x75]
mov edx, 0x64c678
xor ecx, ecx
mov cl, byte [eax]
inc ecx
call fcn.00402dd0
jne 0x649ac5
mov dword [ebp - 0x34], 5
mov dword [ebp - 0x38], 5
lea eax, [ebp - 0x75]
mov edx, 0x64c680
xor ecx, ecx
mov cl, byte [eax]
inc ecx
call fcn.00402dd0
jne 0x649ae7
mov dword [ebp - 0x34], 5
mov dword [ebp - 0x38], 5
lea eax, [ebp - 0x75]
mov edx, 0x64c688
xor ecx, ecx
mov cl, byte [eax]
inc ecx
call fcn.00402dd0
jne 0x649b09
mov dword [ebp - 0x34], 7
mov dword [ebp - 0x38], 7
lea eax, [ebp - 0x75]
mov edx, 0x64c690
xor ecx, ecx
mov cl, byte [eax]
inc ecx
call fcn.00402dd0
jne 0x649b2b
mov dword [ebp - 0x34], 7
mov dword [ebp - 0x38], 7
lea eax, [ebp - 0x75]
mov edx, 0x64c698
xor ecx, ecx
mov cl, byte [eax]
inc ecx
call fcn.00402dd0
jne 0x649b4d
mov dword [ebp - 0x34], 7
mov dword [ebp - 0x38], 7
mov eax, dword [ebp - 4]
call fcn.0064481c
lea edx, [ebp - 0xc]
lea eax, [ebp - 0x264]
call fcn.004044d8
lea eax, [ebp - 0x264]
call fcn.00406630
call fcn.00402898
lea eax, [ebp - 0x474]
push eax
xor ecx, ecx
mov edx, 1
mov eax, dword [ebp - 0xc]
call fcn.0044c84c
mov edx, dword [ebp - 0x474]
lea eax, [ebp - 0x578]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x578]
lea eax, [ebp - 0x270]
mov cl, 0xa
call fcn.00402d1c
lea eax, [ebp - 0x584]
push eax
mov ecx, 5
mov edx, 1
lea eax, [ebp - 0x270]
call fcn.004028f0
lea eax, [ebp - 0x584]
mov edx, 0x64c6a0
xor ecx, ecx
mov cl, byte [eax]
inc ecx
call fcn.00402dd0
jne 0x64aaba
lea eax, [ebp - 0x584]
push eax
mov ecx, 2
mov edx, 6
lea eax, [ebp - 0x270]
call fcn.004028f0
lea edx, [ebp - 0x584]
lea eax, [ebp - 0x474]
call fcn.00404094
mov eax, dword [ebp - 0x474]
call fcn.00409514
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x10]
push eax
xor ecx, ecx
mov edx, 2
mov eax, dword [ebp - 0xc]
call fcn.0044c84c
lea edx, [ebp - 0x474]
mov eax, dword [ebp - 0x10]
call fcn.0044bf5c
mov eax, dword [ebp - 0x474]
mov edx, 0x64c6b0
call fcn.00404200
jne 0x64a1be
lea eax, [ebp - 0x474]
push eax
xor ecx, ecx
mov edx, 3
mov eax, dword [ebp - 0xc]
call fcn.0044c84c
mov edx, dword [ebp - 0x474]
lea eax, [ebp - 0x578]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x578]
mov eax, dword [ebp - 0x30]
add eax, eax
mov ecx, dword [ebp - 4]
lea eax, [ecx + eax*8 + 0x388]
mov cl, 0xf
call fcn.00402d1c
lea eax, [ebp - 0x474]
push eax
xor ecx, ecx
mov edx, 4
mov eax, dword [ebp - 0xc]
call fcn.0044c84c
mov edx, dword [ebp - 0x474]
lea eax, [ebp - 0x578]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x578]
mov eax, dword [ebp - 0x30]
add eax, eax
mov ecx, dword [ebp - 4]
lea eax, [ecx + eax*8 + 0x568]
mov cl, 0xf
call fcn.00402d1c
lea eax, [ebp - 0x474]
push eax
xor ecx, ecx
mov edx, 5
mov eax, dword [ebp - 0xc]
call fcn.0044c84c
mov edx, dword [ebp - 0x474]
lea eax, [ebp - 0x578]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x578]
lea eax, [ebp - 0x6f]
mov cl, 2
call fcn.00402d1c
lea eax, [ebp - 0x6f]
mov edx, 0x64c6b4
xor ecx, ecx
mov cl, byte [eax]
inc ecx
call fcn.00402dd0
jne 0x649d4b
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0x30]
mov byte [eax + edx + 0x1a17], 0
jmp 0x649d59
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0x30]
mov byte [eax + edx + 0x1a17], 1
lea eax, [ebp - 0x478]
push eax
xor ecx, ecx
mov edx, 7
mov eax, dword [ebp - 0xc]
call fcn.0044c84c
mov eax, dword [ebp - 0x478]
lea edx, [ebp - 0x474]
call fcn.0064490c
mov edx, dword [ebp - 0x474]
lea eax, [ebp - 0x578]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x578]
mov eax, dword [ebp - 0x30]
add eax, eax
mov ecx, dword [ebp - 4]
lea eax, [ecx + eax*8 + 0xb08]
mov cl, 0xf
call fcn.00402d1c
lea eax, [ebp - 0x478]
push eax
xor ecx, ecx
mov edx, 8
mov eax, dword [ebp - 0xc]
call fcn.0044c84c
mov eax, dword [ebp - 0x478]
lea edx, [ebp - 0x474]
call fcn.0064490c
mov edx, dword [ebp - 0x474]
lea eax, [ebp - 0x578]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x578]
mov eax, dword [ebp - 0x30]
add eax, eax
mov ecx, dword [ebp - 4]
lea eax, [ecx + eax*8 + 0xce8]
mov cl, 0xf
call fcn.00402d1c
lea eax, [ebp - 0x474]
push eax
lea edx, [ebp - 0x478]
mov eax, dword [0x84225c]
call fcn.00405e74
mov ecx, dword [ebp - 0x478]
mov edx, 9
mov eax, dword [ebp - 0xc]
call fcn.0044c84c
mov edx, dword [ebp - 0x474]
lea eax, [ebp - 0x578]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x578]
mov eax, dword [ebp - 0x30]
add eax, eax
mov ecx, dword [ebp - 4]
lea eax, [ecx + eax*8 + 0xec8]
mov cl, 0xf
call fcn.00402d1c
lea eax, [ebp - 0x478]
push eax
xor ecx, ecx
mov edx, 0xa
mov eax, dword [ebp - 0xc]
call fcn.0044c84c
mov eax, dword [ebp - 0x478]
lea edx, [ebp - 0x474]
call fcn.0064490c
mov edx, dword [ebp - 0x474]
lea eax, [ebp - 0x578]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x578]
mov eax, dword [ebp - 0x30]
add eax, eax
mov ecx, dword [ebp - 4]
lea eax, [ecx + eax*8 + 0x748]
mov cl, 0xf
call fcn.00402d1c
lea eax, [ebp - 0x478]
push eax
xor ecx, ecx
mov edx, 0xb
mov eax, dword [ebp - 0xc]
call fcn.0044c84c
mov eax, dword [ebp - 0x478]
lea edx, [ebp - 0x474]
call fcn.0064490c
mov edx, dword [ebp - 0x474]
lea eax, [ebp - 0x578]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x578]
mov eax, dword [ebp - 0x30]
add eax, eax
mov ecx, dword [ebp - 4]
lea eax, [ecx + eax*8 + 0x928]
mov cl, 0xf
call fcn.00402d1c
lea eax, [ebp - 0x474]
push eax
lea edx, [ebp - 0x478]
mov eax, dword [0x841468]
call fcn.00405e74
mov ecx, dword [ebp - 0x478]
mov edx, 0xc
mov eax, dword [ebp - 0xc]
call fcn.0044c84c
mov edx, dword [ebp - 0x474]
lea eax, [ebp - 0x578]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x578]
mov eax, dword [ebp - 0x30]
add eax, eax
mov ecx, dword [ebp - 4]
lea eax, [ecx + eax*8 + 0x10a8]
mov cl, 0xf
call fcn.00402d1c
lea eax, [ebp - 0x474]
mov edx, dword [ebp - 0x30]
add edx, edx
mov ecx, dword [ebp - 4]
lea edx, [ecx + edx*8 + 0x388]
call fcn.00404094
mov eax, dword [ebp - 0x474]
call fcn.0044c49c
test al, al
je 0x64a007
lea eax, [ebp - 0x474]
mov edx, dword [ebp - 0x30]
add edx, edx
mov ecx, dword [ebp - 4]
lea edx, [ecx + edx*8 + 0x568]
call fcn.00404094
mov eax, dword [ebp - 0x474]
call fcn.0044c49c
test al, al
je 0x64a007
mov eax, dword [ebp - 0x30]
add eax, eax
mov edx, dword [ebp - 4]
mov byte [edx + eax*8 + 0xb08], 0
mov eax, dword [ebp - 0x30]
add eax, eax
mov edx, dword [ebp - 4]
mov byte [edx + eax*8 + 0xce8], 0
mov eax, dword [ebp - 0x30]
add eax, eax
mov edx, dword [ebp - 4]
mov byte [edx + eax*8 + 0x748], 0
mov eax, dword [ebp - 0x30]
add eax, eax
mov edx, dword [ebp - 4]
mov byte [edx + eax*8 + 0x928], 0
lea eax, [ebp - 0x474]
push eax
xor ecx, ecx
mov edx, 0xe
mov eax, dword [ebp - 0xc]
call fcn.0044c84c
mov edx, dword [ebp - 0x474]
lea eax, [ebp - 0x578]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x578]
mov eax, dword [ebp - 0x30]
add eax, eax
mov ecx, dword [ebp - 4]
lea eax, [ecx + eax*8 + 0x1288]
mov cl, 0xf
call fcn.00402d1c
lea eax, [ebp - 0x478]
push eax
xor ecx, ecx
mov edx, 0xf
mov eax, dword [ebp - 0xc]
call fcn.0044c84c
mov eax, dword [ebp - 0x478]
lea edx, [ebp - 0x474]
call fcn.0064490c
mov edx, dword [ebp - 0x474]
lea eax, [ebp - 0x578]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x578]
mov eax, dword [ebp - 0x30]
add eax, eax
mov ecx, dword [ebp - 4]
lea eax, [ecx + eax*8 + 0x1468]
mov cl, 0xf
call fcn.00402d1c
lea eax, [ebp - 0x478]
push eax
xor ecx, ecx
mov edx, 0x10
mov eax, dword [ebp - 0xc]
call fcn.0044c84c
mov eax, dword [ebp - 0x478]
lea edx, [ebp - 0x474]
call fcn.0064490c
mov edx, dword [ebp - 0x474]
lea eax, [ebp - 0x578]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x578]
mov eax, dword [ebp - 0x30]
add eax, eax
mov ecx, dword [ebp - 4]
lea eax, [ecx + eax*8 + 0x1648]
mov cl, 0xf
call fcn.00402d1c
lea eax, [ebp - 0x474]
push eax
mov ecx, 0x64c6c0
mov edx, 0x11
mov eax, dword [ebp - 0xc]
call fcn.0044c84c
mov edx, dword [ebp - 0x474]
lea eax, [ebp - 0x578]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x578]
mov eax, dword [ebp - 0x30]
add eax, eax
mov ecx, dword [ebp - 4]
lea eax, [ecx + eax*8 + 0x1828]
mov cl, 0xf
call fcn.00402d1c
lea eax, [ebp - 0x474]
mov edx, dword [ebp - 0x30]
add edx, edx
mov ecx, dword [ebp - 4]
lea edx, [ecx + edx*8 + 0x388]
call fcn.00404094
mov eax, dword [ebp - 0x474]
call fcn.0044c49c
test al, al
je 0x64a1be
lea eax, [ebp - 0x474]
mov edx, dword [ebp - 0x30]
add edx, edx
mov ecx, dword [ebp - 4]
lea edx, [ecx + edx*8 + 0x568]
call fcn.00404094
mov eax, dword [ebp - 0x474]
call fcn.0044c49c
test al, al
je 0x64a1be
mov eax, dword [ebp - 0x30]
add eax, eax
mov edx, dword [ebp - 4]
mov byte [edx + eax*8 + 0x1468], 0
mov eax, dword [ebp - 0x30]
add eax, eax
mov edx, dword [ebp - 4]
mov byte [edx + eax*8 + 0x1648], 0
lea edx, [ebp - 0x474]
mov eax, dword [ebp - 0x10]
call fcn.0044bf5c
mov eax, dword [ebp - 0x474]
mov edx, 0x64c6cc
call fcn.00404200
je 0x64a202
lea edx, [ebp - 0x474]
mov eax, dword [ebp - 0x10]
call fcn.0044bf5c
mov eax, dword [ebp - 0x474]
mov edx, 0x64c6d8
call fcn.00404200
jne 0x64a511
lea eax, [ebp - 0x474]
push eax
xor ecx, ecx
mov edx, 3
mov eax, dword [ebp - 0xc]
call fcn.0044c84c
mov edx, dword [ebp - 0x474]
lea eax, [ebp - 0x578]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x578]
mov eax, dword [ebp - 0x30]
add eax, eax
mov ecx, dword [ebp - 4]
lea eax, [ecx + eax*8 + 0x388]
mov cl, 0xf
call fcn.00402d1c
lea eax, [ebp - 0x474]
push eax
xor ecx, ecx
mov edx, 4
mov eax, dword [ebp - 0xc]
call fcn.0044c84c
mov edx, dword [ebp - 0x474]
lea eax, [ebp - 0x578]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x578]
mov eax, dword [ebp - 0x30]
add eax, eax
mov ecx, dword [ebp - 4]
lea eax, [ecx + eax*8 + 0x568]
mov cl, 0xf
call fcn.00402d1c
lea eax, [ebp - 0x474]
push eax
xor ecx, ecx
mov edx, 5
mov eax, dword [ebp - 0xc]
call fcn.0044c84c
mov edx, dword [ebp - 0x474]
lea eax, [ebp - 0x578]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x578]
mov eax, dword [ebp - 0x30]
add eax, eax
mov ecx, dword [ebp - 4]
lea eax, [ecx + eax*8 + 0x1288]
mov cl, 0xf
call fcn.00402d1c
lea eax, [ebp - 0x478]
push eax
xor ecx, ecx
mov edx, 6
mov eax, dword [ebp - 0xc]
call fcn.0044c84c
mov eax, dword [ebp - 0x478]
lea edx, [ebp - 0x474]
call fcn.0064490c
mov edx, dword [ebp - 0x474]
lea eax, [ebp - 0x578]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x578]
mov eax, dword [ebp - 0x30]
add eax, eax
mov ecx, dword [ebp - 4]
lea eax, [ecx + eax*8 + 0x1468]
mov cl, 0xf
call fcn.00402d1c
lea eax, [ebp - 0x478]
push eax
xor ecx, ecx
mov edx, 7
mov eax, dword [ebp - 0xc]
call fcn.0044c84c
mov eax, dword [ebp - 0x478]
lea edx, [ebp - 0x474]
call fcn.0064490c
mov edx, dword [ebp - 0x474]
lea eax, [ebp - 0x578]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x578]
mov eax, dword [ebp - 0x30]
add eax, eax
mov ecx, dword [ebp - 4]
lea eax, [ecx + eax*8 + 0x1648]
mov cl, 0xf
call fcn.00402d1c
lea eax, [ebp - 0x474]
push eax
mov ecx, 0x64c6c0
mov edx, 8
mov eax, dword [ebp - 0xc]
call fcn.0044c84c
mov edx, dword [ebp - 0x474]
lea eax, [ebp - 0x578]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x578]
mov eax, dword [ebp - 0x30]
add eax, eax
mov ecx, dword [ebp - 4]
lea eax, [ecx + eax*8 + 0x1828]
mov cl, 0xf
call fcn.00402d1c
lea eax, [ebp - 0x474]
mov edx, dword [ebp - 0x30]
add edx, edx
mov ecx, dword [ebp - 4]
lea edx, [ecx + edx*8 + 0x388]
call fcn.00404094
mov eax, dword [ebp - 0x474]
call fcn.0044c49c
test al, al
je 0x64a449
lea eax, [ebp - 0x474]
mov edx, dword [ebp - 0x30]
add edx, edx
mov ecx, dword [ebp - 4]
lea edx, [ecx + edx*8 + 0x568]
call fcn.00404094
mov eax, dword [ebp - 0x474]
call fcn.0044c49c
test al, al
je 0x64a449
mov eax, dword [ebp - 0x30]
add eax, eax
mov edx, dword [ebp - 4]
mov byte [edx + eax*8 + 0x1468], 0
mov eax, dword [ebp - 0x30]
add eax, eax
mov edx, dword [ebp - 4]
mov byte [edx + eax*8 + 0x1648], 0
mov eax, dword [ebp - 0x30]
add eax, eax
mov edx, dword [ebp - 4]
lea eax, [edx + eax*8 + 0x388]
mov edx, 0x64c6dc
xor ecx, ecx
mov cl, byte [eax]
inc ecx
call fcn.00402dd0
jne 0x64a511
mov eax, dword [ebp - 0x30]
add eax, eax
mov edx, dword [ebp - 4]
lea eax, [edx + eax*8 + 0x568]
mov edx, 0x64c6dc
xor ecx, ecx
mov cl, byte [eax]
inc ecx
call fcn.00402dd0
jne 0x64a511
mov eax, dword [ebp - 0x30]
add eax, eax
mov edx, dword [ebp - 4]
lea eax, [edx + eax*8 + 0x1468]
mov edx, 0x64c6dc
xor ecx, ecx
mov cl, byte [eax]
inc ecx
call fcn.00402dd0
jne 0x64a511
mov eax, dword [ebp - 0x30]
add eax, eax
mov edx, dword [ebp - 4]
lea eax, [edx + eax*8 + 0x1648]
mov edx, 0x64c6dc
xor ecx, ecx
mov cl, byte [eax]
inc ecx
call fcn.00402dd0
jne 0x64a511
mov eax, dword [ebp - 0x30]
add eax, eax
mov edx, dword [ebp - 4]
mov byte [edx + eax*8 + 0x388], 0
mov eax, dword [ebp - 0x30]
add eax, eax
mov edx, dword [ebp - 4]
mov byte [edx + eax*8 + 0x568], 0
mov eax, dword [ebp - 0x30]
add eax, eax
mov edx, dword [ebp - 4]
mov byte [edx + eax*8 + 0x1468], 0
mov eax, dword [ebp - 0x30]
add eax, eax
mov edx, dword [ebp - 4]
mov byte [edx + eax*8 + 0x1648], 0
lea edx, [ebp - 0x474]
mov eax, dword [ebp - 0x10]
call fcn.0044bf5c
mov eax, dword [ebp - 0x474]
mov edx, 0x64c6e8
call fcn.00404200
jne 0x64a94d
lea eax, [ebp - 0x474]
push eax
xor ecx, ecx
mov edx, 3
mov eax, dword [ebp - 0xc]
call fcn.0044c84c
mov edx, dword [ebp - 0x474]
lea eax, [ebp - 0x578]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x578]
mov eax, dword [ebp - 0x30]
add eax, eax
mov ecx, dword [ebp - 4]
lea eax, [ecx + eax*8 + 0x388]
mov cl, 0xf
call fcn.00402d1c
lea eax, [ebp - 0x474]
push eax
xor ecx, ecx
mov edx, 4
mov eax, dword [ebp - 0xc]
call fcn.0044c84c
mov edx, dword [ebp - 0x474]
lea eax, [ebp - 0x578]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x578]
mov eax, dword [ebp - 0x30]
add eax, eax
mov ecx, dword [ebp - 4]
lea eax, [ecx + eax*8 + 0x568]
mov cl, 0xf
call fcn.00402d1c
push 0
push 0
mov edx, 5
mov eax, dword [ebp - 0xc]
call fcn.0044c96c
add esp, 0xfffffff8
fstp qword [esp]
wait
lea ecx, [ebp - 0x474]
xor edx, edx
mov eax, 4
call fcn.006449a4
mov edx, dword [ebp - 0x474]
lea eax, [ebp - 0x578]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x578]
mov eax, dword [ebp - 0x30]
add eax, eax
mov ecx, dword [ebp - 4]
lea eax, [ecx + eax*8 + 0xb08]
mov cl, 0xf
call fcn.00402d1c
push 0
push 0
mov edx, 6
mov eax, dword [ebp - 0xc]
call fcn.0044c96c
add esp, 0xfffffff8
fstp qword [esp]
wait
lea ecx, [ebp - 0x474]
mov edx, 5
mov eax, 8
call fcn.006449a4
mov edx, dword [ebp - 0x474]
lea eax, [ebp - 0x578]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x578]
mov eax, dword [ebp - 0x30]
add eax, eax
mov ecx, dword [ebp - 4]
lea eax, [ecx + eax*8 + 0xce8]
mov cl, 0xf
call fcn.00402d1c
lea eax, [ebp - 0x474]
push eax
lea edx, [ebp - 0x478]
mov eax, dword [0x84225c]
call fcn.00405e74
mov ecx, dword [ebp - 0x478]
mov edx, 7
mov eax, dword [ebp - 0xc]
call fcn.0044c84c
mov edx, dword [ebp - 0x474]
lea eax, [ebp - 0x578]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x578]
mov eax, dword [ebp - 0x30]
add eax, eax
mov ecx, dword [ebp - 4]
lea eax, [ecx + eax*8 + 0xec8]
mov cl, 0xf
call fcn.00402d1c
push 0
push 0
mov edx, 8
mov eax, dword [ebp - 0xc]
call fcn.0044c96c
add esp, 0xfffffff8
fstp qword [esp]
wait
lea ecx, [ebp - 0x474]
xor edx, edx
mov eax, 4
call fcn.006449a4
mov edx, dword [ebp - 0x474]
lea eax, [ebp - 0x578]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x578]
mov eax, dword [ebp - 0x30]
add eax, eax
mov ecx, dword [ebp - 4]
lea eax, [ecx + eax*8 + 0x748]
mov cl, 0xf
call fcn.00402d1c
push 0
push 0
mov edx, 9
mov eax, dword [ebp - 0xc]
call fcn.0044c96c
add esp, 0xfffffff8
fstp qword [esp]
wait
lea ecx, [ebp - 0x474]
mov edx, 5
mov eax, 8
call fcn.006449a4
mov edx, dword [ebp - 0x474]
lea eax, [ebp - 0x578]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x578]
mov eax, dword [ebp - 0x30]
add eax, eax
mov ecx, dword [ebp - 4]
lea eax, [ecx + eax*8 + 0x928]
mov cl, 0xf
call fcn.00402d1c
lea eax, [ebp - 0x474]
push eax
lea edx, [ebp - 0x478]
mov eax, dword [0x841468]
call fcn.00405e74
mov ecx, dword [ebp - 0x478]
mov edx, 0xa
mov eax, dword [ebp - 0xc]
call fcn.0044c84c
mov edx, dword [ebp - 0x474]
lea eax, [ebp - 0x578]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x578]
mov eax, dword [ebp - 0x30]
add eax, eax
mov ecx, dword [ebp - 4]
lea eax, [ecx + eax*8 + 0x10a8]
mov cl, 0xf
call fcn.00402d1c
lea eax, [ebp - 0x474]
mov edx, dword [ebp - 0x30]
add edx, edx
mov ecx, dword [ebp - 4]
lea edx, [ecx + edx*8 + 0x388]
call fcn.00404094
mov eax, dword [ebp - 0x474]
call fcn.0044c49c
test al, al
je 0x64a885
lea eax, [ebp - 0x474]
mov edx, dword [ebp - 0x30]
add edx, edx
mov ecx, dword [ebp - 4]
lea edx, [ecx + edx*8 + 0x568]
call fcn.00404094
mov eax, dword [ebp - 0x474]
call fcn.0044c49c
test al, al
je 0x64a885
mov eax, dword [ebp - 0x30]
add eax, eax
mov edx, dword [ebp - 4]
mov byte [edx + eax*8 + 0xb08], 0
mov eax, dword [ebp - 0x30]
add eax, eax
mov edx, dword [ebp - 4]
mov byte [edx + eax*8 + 0xce8], 0
mov eax, dword [ebp - 0x30]
add eax, eax
mov edx, dword [ebp - 4]
mov byte [edx + eax*8 + 0x748], 0
mov eax, dword [ebp - 0x30]
add eax, eax
mov edx, dword [ebp - 4]
mov byte [edx + eax*8 + 0x928], 0
mov eax, dword [ebp - 0x30]
add eax, eax
mov edx, dword [ebp - 4]
lea eax, [edx + eax*8 + 0x388]
mov edx, 0x64c6dc
xor ecx, ecx
mov cl, byte [eax]
inc ecx
call fcn.00402dd0
jne 0x64a94d
mov eax, dword [ebp - 0x30]
add eax, eax
mov edx, dword [ebp - 4]
lea eax, [edx + eax*8 + 0x568]
mov edx, 0x64c6dc
xor ecx, ecx
mov cl, byte [eax]
inc ecx
call fcn.00402dd0
jne 0x64a94d
mov eax, dword [ebp - 0x30]
add eax, eax
mov edx, dword [ebp - 4]
lea eax, [edx + eax*8 + 0xb08]
mov edx, 0x64c6dc
xor ecx, ecx
mov cl, byte [eax]
inc ecx
call fcn.00402dd0
jne 0x64a94d
mov eax, dword [ebp - 0x30]
add eax, eax
mov edx, dword [ebp - 4]
lea eax, [edx + eax*8 + 0x748]
mov edx, 0x64c6dc
xor ecx, ecx
mov cl, byte [eax]
inc ecx
call fcn.00402dd0
jne 0x64a94d
mov eax, dword [ebp - 0x30]
add eax, eax
mov edx, dword [ebp - 4]
mov byte [edx + eax*8 + 0x388], 0
mov eax, dword [ebp - 0x30]
add eax, eax
mov edx, dword [ebp - 4]
mov byte [edx + eax*8 + 0x568], 0
mov eax, dword [ebp - 0x30]
add eax, eax
mov edx, dword [ebp - 4]
mov byte [edx + eax*8 + 0xb08], 0
mov eax, dword [ebp - 0x30]
add eax, eax
mov edx, dword [ebp - 4]
mov byte [edx + eax*8 + 0x748], 0
fld qword [ebp - 0x8c]
fcomp dword [0x64c6ec]
fnstsw ax
sahf
je 0x64aaba
mov eax, dword [ebp - 0x30]
add eax, eax
mov edx, dword [ebp - 4]
cmp byte [edx + eax*8 + 0x388], 0
je 0x64aaba
mov eax, dword [ebp - 0x30]
add eax, eax
mov edx, dword [ebp - 4]
cmp byte [edx + eax*8 + 0x568], 0
je 0x64aaba
xor eax, eax
push ebp
push 0x64aab0
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x474]
mov edx, dword [ebp - 0x30]
add edx, edx
mov ecx, dword [ebp - 4]
lea edx, [ecx + edx*8 + 0x388]
call fcn.00404094
mov eax, dword [ebp - 0x474]
call fcn.00409514
mov dword [ebp - 0x90], eax
fild dword [ebp - 0x90]
fdiv qword [ebp - 0x8c]
call fcn.00402c90
mov dword [ebp - 0x90], eax
lea edx, [ebp - 0x474]
mov eax, dword [ebp - 0x90]
call fcn.004094a8
mov edx, dword [ebp - 0x474]
lea eax, [ebp - 0x578]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x578]
mov eax, dword [ebp - 0x30]
add eax, eax
mov ecx, dword [ebp - 4]
lea eax, [ecx + eax*8 + 0x388]
mov cl, 0xf
call fcn.00402d1c
lea eax, [ebp - 0x474]
mov edx, dword [ebp - 0x30]
add edx, edx
mov ecx, dword [ebp - 4]
lea edx, [ecx + edx*8 + 0x568]
call fcn.00404094
mov eax, dword [ebp - 0x474]
call fcn.00409514
mov dword [ebp - 0x94], eax
fild dword [ebp - 0x94]
fdiv qword [ebp - 0x8c]
call fcn.00402c90
mov dword [ebp - 0x94], eax
lea edx, [ebp - 0x474]
mov eax, dword [ebp - 0x94]
call fcn.004094a8
mov edx, dword [ebp - 0x474]
lea eax, [ebp - 0x578]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x578]
mov eax, dword [ebp - 0x30]
add eax, eax
mov ecx, dword [ebp - 4]
lea eax, [ecx + eax*8 + 0x568]
mov cl, 0xf
call fcn.00402d1c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x64aaba
lea eax, [ebp - 0x270]
mov edx, 0x64c6f0
xor ecx, ecx
mov cl, byte [eax]
inc ecx
call fcn.00402dd0
jne 0x64abfb
push 0x40884800
push 0
mov edx, 2
mov eax, dword [ebp - 0xc]
call fcn.0044c96c
mov eax, dword [ebp - 4]
fstp qword [eax + 0x358]
wait
push 0x40884800
push 0
mov edx, 3
mov eax, dword [ebp - 0xc]
call fcn.0044c96c
mov eax, dword [ebp - 4]
fstp qword [eax + 0x360]
wait
push 0x40884800
push 0
mov edx, 4
mov eax, dword [ebp - 0xc]
call fcn.0044c96c
mov eax, dword [ebp - 4]
fstp qword [eax + 0x368]
wait
push 0x40884800
push 0
mov edx, 5
mov eax, dword [ebp - 0xc]
call fcn.0044c96c
mov eax, dword [ebp - 4]
fstp qword [eax + 0x370]
wait
push 0x40884800
push 0
mov edx, 6
mov eax, dword [ebp - 0xc]
call fcn.0044c96c
mov eax, dword [ebp - 4]
fstp qword [eax + 0x378]
wait
push 0x40884800
push 0
mov edx, 7
mov eax, dword [ebp - 0xc]
call fcn.0044c96c
mov eax, dword [ebp - 4]
fstp qword [eax + 0x380]
wait
push 0x40884800
push 0
mov edx, 8
mov eax, dword [ebp - 0xc]
call fcn.0044c96c
mov eax, dword [ebp - 4]
fstp qword [eax + 0x388]
wait
push 0x40884800
push 0
mov edx, 9
mov eax, dword [ebp - 0xc]
call fcn.0044c96c
mov eax, dword [ebp - 4]
fstp qword [eax + 0x350]
wait
mov ecx, 0x309
mov edx, 0xa
mov eax, dword [ebp - 0xc]
call fcn.0044cb1c
mov edx, dword [ebp - 4]
mov dword [edx + 0x390], eax
mov ecx, 0x309
mov edx, 0xb
mov eax, dword [ebp - 0xc]
call fcn.0044cb1c
mov edx, dword [ebp - 4]
mov dword [edx + 0x394], eax
lea eax, [ebp - 0x270]
mov edx, 0x64c6fc
xor ecx, ecx
mov cl, byte [eax]
inc ecx
call fcn.00402dd0
jne 0x649b55
mov eax, dword [ebp - 4]
call fcn.00646e0c
jmp 0x64ae4e
lea edx, [ebp - 0x10]
lea eax, [ebp - 0x264]
call fcn.004044d8
lea eax, [ebp - 0x264]
call fcn.00406630
call fcn.00402898
lea eax, [ebp - 0x474]
push eax
xor ecx, ecx
mov edx, 1
mov eax, dword [ebp - 0x10]
call fcn.0044c84c
mov edx, dword [ebp - 0x474]
lea eax, [ebp - 0x578]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x578]
lea eax, [ebp - 0x23]
mov cl, 6
call fcn.00402d1c
lea eax, [ebp - 0x23]
mov edx, 0x64c708
xor ecx, ecx
mov cl, byte [eax]
inc ecx
call fcn.00402dd0
jne 0x64ad61
xor ecx, ecx
mov edx, 2
mov eax, dword [ebp - 0x10]
call fcn.0044cb1c
mov edx, dword [ebp - 4]
mov dword [edx + 0xb760], eax
xor ecx, ecx
mov edx, 3
mov eax, dword [ebp - 0x10]
call fcn.0044cb1c
mov edx, dword [ebp - 4]
mov dword [edx + 0xb8f0], eax
mov ecx, 0x64
mov edx, 4
mov eax, dword [ebp - 0x10]
call fcn.0044cb1c
mov edx, dword [ebp - 4]
mov dword [edx + 0xb764], eax
xor ecx, ecx
mov edx, 5
mov eax, dword [ebp - 0x10]
call fcn.0044cb1c
mov edx, dword [ebp - 4]
mov dword [edx + 0xb8f4], eax
xor ecx, ecx
mov edx, 6
mov eax, dword [ebp - 0x10]
call fcn.0044cb1c
mov edx, dword [ebp - 4]
mov dword [edx + 0xb76c], eax
mov ecx, 0x64
mov edx, 7
mov eax, dword [ebp - 0x10]
call fcn.0044cb1c
mov edx, dword [ebp - 4]
mov dword [edx + 0xb8fc], eax
mov ecx, 0x64
mov edx, 8
mov eax, dword [ebp - 0x10]
call fcn.0044cb1c
mov edx, dword [ebp - 4]
mov dword [edx + 0xb768], eax
mov ecx, 0x64
mov edx, 9
mov eax, dword [ebp - 0x10]
call fcn.0044cb1c
mov edx, dword [ebp - 4]
mov dword [edx + 0xb8f8], eax
lea eax, [ebp - 0x23]
mov edx, 0x64c710
xor ecx, ecx
mov cl, byte [eax]
inc ecx
call fcn.00402dd0
jne 0x64ad90
mov ecx, 4
mov edx, 2
mov eax, dword [ebp - 0x10]
call fcn.0044cb1c
mov edx, dword [ebp - 4]
mov dword [edx + 0xb75c], eax
lea eax, [ebp - 0x23]
mov edx, 0x64c718
xor ecx, ecx
mov cl, byte [eax]
inc ecx
call fcn.00402dd0
jne 0x64ae4e
mov ecx, 1
mov edx, 2
mov eax, dword [ebp - 0x10]
call fcn.0044cb1c
mov dword [ebp - 0x1c], eax
xor ecx, ecx
mov edx, 3
mov eax, dword [ebp - 0x10]
call fcn.0044cb1c
mov edx, dword [ebp - 4]
mov ecx, dword [ebp - 0x1c]
mov dword [edx + ecx*4 + 0xb75c], eax
xor ecx, ecx
mov edx, 4
mov eax, dword [ebp - 0x10]
call fcn.0044cb1c
mov edx, dword [ebp - 4]
mov ecx, dword [ebp - 0x1c]
mov dword [edx + ecx*4 + 0xb8ec], eax
fld qword [ebp - 0x8c]
fcomp dword [0x64c6ec]
fnstsw ax
sahf
je 0x64ae4e
mov eax, dword [0x841d58]
mov edx, dword [ebp - 0x1c]
fild dword [eax + edx*4 - 4]
fdiv qword [ebp - 0x8c]
call fcn.00402c90
mov edx, dword [0x841d58]
mov ecx, dword [ebp - 0x1c]
mov dword [edx + ecx*4 - 4], eax
mov eax, dword [0x841ab8]
mov edx, dword [ebp - 0x1c]
fild dword [eax + edx*4 - 4]
fdiv qword [ebp - 0x8c]
call fcn.00402c90
mov edx, dword [0x841ab8]
mov ecx, dword [ebp - 0x1c]
mov dword [edx + ecx*4 - 4], eax
lea eax, [ebp - 0x264]
call fcn.00406398
call fcn.00402898
test al, al
je 0x64ac23
lea eax, [ebp - 0x264]
call fcn.00406308
call fcn.00402898
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xb75c]
test eax, eax
jle 0x64af41
mov dword [ebp - 0x98], eax
mov dword [ebp - 0x18], 1
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0x18]
cmp dword [eax + edx*4 + 0xb75c], 0
jge 0x64aeb3
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0x18]
xor ecx, ecx
mov dword [eax + edx*4 + 0xb75c], ecx
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0x18]
cmp dword [eax + edx*4 + 0xb8ec], 0
jge 0x64aed2
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0x18]
xor ecx, ecx
mov dword [eax + edx*4 + 0xb8ec], ecx
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0x18]
mov ecx, dword [eax + edx*4 + 0xb8ec]
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0x18]
mov edx, dword [eax + edx*4 + 0xb75c]
mov eax, dword [ebp - 4]
call fcn.006462f8
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0x18]
fstp qword [eax + edx*8 + 0xba78]
wait
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0x18]
mov ecx, dword [eax + edx*4 + 0xb8ec]
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0x18]
mov edx, dword [eax + edx*4 + 0xb75c]
mov eax, dword [ebp - 4]
call fcn.00645ff8
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0x18]
fstp qword [eax + edx*8 + 0xbd98]
wait
inc dword [ebp - 0x18]
dec dword [ebp - 0x98]
jne 0x64ae94
lea eax, [ebp - 0x14]
mov edx, dword [ebp - 0x44]
call fcn.00403f0c
mov byte [ebp - 0x59], 0
mov dword [ebp - 0x7c], 1
cmp dword [ebp - 0x44], 0
jne 0x64af6f
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
call fcn.0040396c
jmp 0x64c4e5
lea edx, [ebp - 0x474]
mov eax, dword [ebp - 0x44]
call fcn.00409c18
mov eax, dword [ebp - 0x474]
lea edx, [ebp - 0x28]
call fcn.00408fa8
mov eax, dword [ebp - 0x28]
mov edx, 0x64c728
call fcn.00404200
jne 0x64afb6
mov eax, 0x64c738
call fcn.0044b3e4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
call fcn.0040396c
jmp 0x64c4e5
mov eax, dword [ebp - 0x28]
mov edx, 0x64c770
call fcn.00404200
jne 0x64afe1
mov eax, 0x64c780
call fcn.0044b3e4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
call fcn.0040396c
jmp 0x64c4e5
mov eax, dword [ebp - 0x44]
call fcn.004097b8
test al, al
jne 0x64b753
lea edx, [ebp - 0x40]
mov eax, dword [ebp - 0x48]
call fcn.00409abc
lea edx, [ebp - 0x50]
mov eax, dword [ebp - 0x44]
call fcn.00409abc
lea edx, [ebp - 0x3c]
mov eax, dword [ebp - 0x44]
call fcn.00409be0
lea edx, [ebp - 0x54]
mov eax, dword [ebp - 0x44]
call fcn.00409b4c
lea eax, [ebp - 0x58]
mov edx, dword [ebp - 0x50]
call fcn.00403f0c
mov eax, dword [ebp - 0x54]
call fcn.004040f0
mov ecx, eax
lea eax, [ebp - 0x58]
mov edx, 1
call fcn.00404334
lea eax, [ebp - 0x474]
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x40]
call fcn.0040413c
mov eax, dword [ebp - 0x474]
call fcn.004097b8
test al, al
je 0x64b072
lea eax, [ebp - 0x44]
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x40]
call fcn.0040413c
jmp 0x64b753
mov eax, dword [0x8420fc]
cmp byte [eax], 0
je 0x64b0e6
mov eax, dword [0x841c0c]
mov eax, dword [eax]
call fcn.0044c49c
test al, al
jne 0x64b0e6
lea edx, [ebp - 0x64]
mov eax, dword [0x841c0c]
mov eax, dword [eax]
call fcn.0044d760
push dword [ebp - 0x64]
push 0x64c7bc
push dword [ebp - 0x3c]
lea eax, [ebp - 0x474]
mov edx, 3
call fcn.004041b0
mov eax, dword [ebp - 0x474]
call fcn.004097b8
test al, al
je 0x64b0e6
push dword [ebp - 0x64]
push 0x64c7bc
push dword [ebp - 0x3c]
lea eax, [ebp - 0x44]
mov edx, 3
call fcn.004041b0
mov byte [ebp - 0x59], 1
jmp 0x64b5c8
mov eax, dword [0x842200]
cmp byte [eax], 0
je 0x64b15a
mov eax, dword [0x841d64]
mov eax, dword [eax]
call fcn.0044c49c
test al, al
jne 0x64b15a
lea edx, [ebp - 0x64]
mov eax, dword [0x841d64]
mov eax, dword [eax]
call fcn.0044d760
push dword [ebp - 0x64]
push 0x64c7bc
push dword [ebp - 0x3c]
lea eax, [ebp - 0x474]
mov edx, 3
call fcn.004041b0
mov eax, dword [ebp - 0x474]
call fcn.004097b8
test al, al
je 0x64b15a
push dword [ebp - 0x64]
push 0x64c7bc
push dword [ebp - 0x3c]
lea eax, [ebp - 0x44]
mov edx, 3
call fcn.004041b0
mov byte [ebp - 0x59], 1
jmp 0x64b5c8
mov eax, dword [0x841730]
cmp byte [eax], 0
je 0x64b1ce
mov eax, dword [0x8413a0]
mov eax, dword [eax]
call fcn.0044c49c
test al, al
jne 0x64b1ce
lea edx, [ebp - 0x64]
mov eax, dword [0x8413a0]
mov eax, dword [eax]
call fcn.0044d760
push dword [ebp - 0x64]
push 0x64c7bc
push dword [ebp - 0x3c]
lea eax, [ebp - 0x474]
mov edx, 3
call fcn.004041b0
mov eax, dword [ebp - 0x474]
call fcn.004097b8
test al, al
je 0x64b1ce
push dword [ebp - 0x64]
push 0x64c7bc
push dword [ebp - 0x3c]
lea eax, [ebp - 0x44]
mov edx, 3
call fcn.004041b0
mov byte [ebp - 0x59], 1
jmp 0x64b5c8
mov eax, dword [0x840ff8]
cmp byte [eax], 0
je 0x64b242
mov eax, dword [0x840c18]
mov eax, dword [eax]
call fcn.0044c49c
test al, al
jne 0x64b242
lea edx, [ebp - 0x64]
mov eax, dword [0x840c18]
mov eax, dword [eax]
call fcn.0044d760
push dword [ebp - 0x64]
push 0x64c7bc
push dword [ebp - 0x3c]
lea eax, [ebp - 0x474]
mov edx, 3
call fcn.004041b0
mov eax, dword [ebp - 0x474]
call fcn.004097b8
test al, al
je 0x64b242
push dword [ebp - 0x64]
push 0x64c7bc
push dword [ebp - 0x3c]
lea eax, [ebp - 0x44]
mov edx, 3
call fcn.004041b0
mov byte [ebp - 0x59], 1
jmp 0x64b5c8
mov eax, dword [0x841828]
mov eax, dword [eax]
call fcn.004040f0
test eax, eax
jle 0x64b3e2
mov dword [ebp - 0x98], eax
mov dword [ebp - 0x18], 1
lea eax, [ebp - 0x588]
mov edx, dword [0x841828]
mov edx, dword [edx]
mov ecx, dword [ebp - 0x18]
mov dl, byte [edx + ecx - 1]
mov byte [eax + 1], dl
mov byte [eax], 1
lea edx, [ebp - 0x588]
lea eax, [ebp - 0x58c]
call fcn.00402d00
mov edx, 0x64c7c0
lea eax, [ebp - 0x58c]
mov cl, 2
call fcn.00402cd0
lea edx, [ebp - 0x58c]
lea eax, [ebp - 0x478]
call fcn.00404094
push dword [ebp - 0x478]
push dword [ebp - 0x58]
push dword [ebp - 0x3c]
lea eax, [ebp - 0x474]
mov edx, 3
call fcn.004041b0
mov eax, dword [ebp - 0x474]
call fcn.004097b8
test al, al
je 0x64b34e
lea eax, [ebp - 0x588]
mov edx, dword [0x841828]
mov edx, dword [edx]
mov ecx, dword [ebp - 0x18]
mov dl, byte [edx + ecx - 1]
mov byte [eax + 1], dl
mov byte [eax], 1
lea edx, [ebp - 0x588]
lea eax, [ebp - 0x58c]
call fcn.00402d00
mov edx, 0x64c7c0
lea eax, [ebp - 0x58c]
mov cl, 2
call fcn.00402cd0
lea edx, [ebp - 0x58c]
lea eax, [ebp - 0x474]
call fcn.00404094
push dword [ebp - 0x474]
push dword [ebp - 0x58]
push dword [ebp - 0x3c]
lea eax, [ebp - 0x44]
mov edx, 3
call fcn.004041b0
mov byte [ebp - 0x59], 1
jmp 0x64b5c8
lea eax, [ebp - 0x478]
mov edx, dword [0x841828]
mov edx, dword [edx]
mov ecx, dword [ebp - 0x18]
mov dl, byte [edx + ecx - 1]
call fcn.00404018
push dword [ebp - 0x478]
push 0x64c7cc
push dword [ebp - 0x3c]
lea eax, [ebp - 0x474]
mov edx, 3
call fcn.004041b0
mov eax, dword [ebp - 0x474]
call fcn.004097b8
test al, al
je 0x64b3d3
lea eax, [ebp - 0x474]
mov edx, dword [0x841828]
mov edx, dword [edx]
mov ecx, dword [ebp - 0x18]
mov dl, byte [edx + ecx - 1]
call fcn.00404018
push dword [ebp - 0x474]
push 0x64c7cc
push dword [ebp - 0x3c]
lea eax, [ebp - 0x44]
mov edx, 3
call fcn.004041b0
mov byte [ebp - 0x59], 1
jmp 0x64b5c8
inc dword [ebp - 0x18]
dec dword [ebp - 0x98]
jne 0x64b263
mov eax, dword [0x841d60]
cmp byte [eax], 0
je 0x64b5c8
mov byte [ebp - 0x59], 0
mov dword [ebp - 0x6c], 0x200
lea eax, [ebp - 0x470]
push eax
mov eax, dword [ebp - 0x6c]
push eax
call sub.KERNEL32.DLL_GetLogicalDriveStringsA
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 0x68]
cmp eax, dword [ebp - 0x6c]
jle 0x64b41c
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x68], eax
lea eax, [ebp - 0x60]
call fcn.00403e74
mov eax, dword [ebp - 0x68]
dec eax
test eax, eax
jl 0x64b5c8
inc eax
mov dword [ebp - 0x98], eax
mov dword [ebp - 0x18], 0
mov eax, dword [ebp - 0x18]
cmp byte [ebp + eax - 0x470], 0
je 0x64b473
lea eax, [ebp - 0x474]
mov edx, dword [ebp - 0x18]
mov dl, byte [ebp + edx - 0x470]
call fcn.00404018
mov edx, dword [ebp - 0x474]
lea eax, [ebp - 0x60]
call fcn.004040f8
jmp 0x64b59f
mov eax, dword [ebp - 0x60]
call fcn.004042b4
push eax
call sub.KERNEL32.DLL_GetDriveTypeA
mov word [ebp - 0x5c], ax
lea eax, [ebp - 0x474]
push eax
lea edx, [ebp - 0x478]
mov eax, dword [ebp - 0x60]
call fcn.0044bf5c
mov eax, dword [ebp - 0x478]
mov ecx, 2
mov edx, 1
call fcn.004042f4
mov eax, dword [ebp - 0x474]
mov edx, 0x64c7d8
call fcn.00404200
jne 0x64b4c7
mov word [ebp - 0x5c], 0
lea eax, [ebp - 0x474]
push eax
lea edx, [ebp - 0x478]
mov eax, dword [ebp - 0x60]
call fcn.0044bf5c
mov eax, dword [ebp - 0x478]
mov ecx, 2
mov edx, 1
call fcn.004042f4
mov eax, dword [ebp - 0x474]
mov edx, 0x64c7e4
call fcn.00404200
jne 0x64b509
mov word [ebp - 0x5c], 0
cmp word [ebp - 0x5c], 5
jne 0x64b597
lea edx, [ebp - 0x64]
mov eax, dword [ebp - 0x60]
call fcn.0044d760
push dword [ebp - 0x64]
push dword [ebp - 0x58]
push dword [ebp - 0x3c]
lea eax, [ebp - 0x474]
mov edx, 3
call fcn.004041b0
mov eax, dword [ebp - 0x474]
call fcn.004097b8
test al, al
je 0x64b563
push dword [ebp - 0x64]
push dword [ebp - 0x58]
push dword [ebp - 0x3c]
lea eax, [ebp - 0x44]
mov edx, 3
call fcn.004041b0
mov byte [ebp - 0x59], 1
jmp 0x64b5c8
lea eax, [ebp - 0x474]
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x60]
call fcn.0040413c
mov eax, dword [ebp - 0x474]
call fcn.004097b8
test al, al
je 0x64b597
lea eax, [ebp - 0x44]
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x60]
call fcn.0040413c
mov byte [ebp - 0x59], 1
jmp 0x64b5c8
lea eax, [ebp - 0x60]
call fcn.00403e74
mov eax, dword [ebp - 0x18]
cmp byte [ebp + eax - 0x470], 0
jne 0x64b5b9
mov eax, dword [ebp - 0x18]
cmp byte [ebp + eax - 0x46f], 0
je 0x64b5c8
inc dword [ebp - 0x18]
dec dword [ebp - 0x98]
jne 0x64b43e
cmp byte [ebp - 0x59], 0
jne 0x64b753
push 0
lea edx, [ebp - 0x478]
mov eax, dword [0x8410b8]
call fcn.00405e74
push dword [ebp - 0x478]
push 0x64c7f0
push dword [ebp - 0x48]
push 0x64c7fc
push 0x64c808
push 0x64c7fc
push 0x64c808
lea edx, [ebp - 0x590]
mov eax, dword [0x8407b8]
call fcn.00405e74
push dword [ebp - 0x590]
push 0x64c7f0
push dword [ebp - 0x44]
push 0x64c7fc
push 0x64c808
push 0x64c7fc
push 0x64c808
lea edx, [ebp - 0x594]
mov eax, dword [0x8408d8]
call fcn.00405e74
push dword [ebp - 0x594]
lea eax, [ebp - 0x474]
mov edx, 0xf
call fcn.004041b0
mov eax, dword [ebp - 0x474]
mov cx, word [0x64c80c]
xor edx, edx
call fcn.0044b300
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 3
jne 0x64b6a8
lea edx, [ebp - 0x474]
mov eax, 0x64941c
call fcn.00405e74
mov eax, dword [ebp - 0x474]
call fcn.0044b3e4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
call fcn.0040396c
jmp 0x64c4e5
cmp dword [ebp - 0x80], 4
jne 0x64b6be
lea eax, [ebp - 0x44]
mov edx, dword [ebp - 0x14]
call fcn.00403f0c
jmp 0x64af4c
lea edx, [ebp - 0x474]
mov eax, dword [ebp - 0x44]
call fcn.00409be0
mov edx, dword [ebp - 0x474]
mov eax, dword [0x841348]
mov eax, dword [eax]
mov eax, dword [eax + 0x44]
add eax, 0x6c
call fcn.00403ec8
mov eax, dword [0x841348]
mov eax, dword [eax]
mov eax, dword [eax + 0x44]
mov edx, dword [eax]
call dword [edx + 0x34]
test al, al
je 0x64b726
lea edx, [ebp - 0x44]
mov eax, dword [0x841348]
mov eax, dword [eax]
mov eax, dword [eax + 0x44]
call fcn.00459b30
lea eax, [ebp - 0x474]
call fcn.0078741c
mov eax, dword [ebp - 0x474]
call fcn.004028d4
call fcn.00402898
jmp 0x64b753
lea edx, [ebp - 0x474]
mov eax, 0x64941c
call fcn.00405e74
mov eax, dword [ebp - 0x474]
call fcn.0044b3e4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
call fcn.0040396c
jmp 0x64c4e5
mov eax, dword [ebp - 0x44]
call fcn.0044c49c
test al, al
jne 0x64c38a
lea edx, [ebp - 0x478]
mov eax, dword [ebp - 0x44]
call fcn.00409c18
mov eax, dword [ebp - 0x478]
lea edx, [ebp - 0x474]
call fcn.00408fa8
mov eax, dword [ebp - 0x474]
lea edx, [ebp - 0x28]
call fcn.0078760c
xor eax, eax
mov dword [ebp - 0x7c], eax
mov eax, dword [ebp - 4]
lea edx, [eax + 0x268]
xor ecx, ecx
mov eax, dword [ebp - 0x44]
call fcn.00752024
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0
jne 0x64c38a
mov dword [ebp - 0x7c], 1
mov eax, dword [ebp - 0x28]
mov edx, 0x64c818
call fcn.00404200
jne 0x64b895
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x268]
call fcn.004032dc
mov dl, 1
mov eax, dword [0x41960c]
call fcn.0041fdbc
mov edx, dword [ebp - 4]
mov dword [edx + 0x268], eax
xor eax, eax
push ebp
push 0x64b81b
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x268]
mov edx, dword [ebp - 0x44]
mov ecx, dword [eax]
call dword [ecx + 0x48]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x64b850
cmp dword [ebp - 0x7c], 0
je 0x64b868
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x268]
mov edx, dword [eax]
call dword [edx + 0x60]
test eax, eax
jne 0x64b895
lea edx, [ebp - 0x474]
mov eax, 0x64941c
call fcn.00405e74
mov eax, dword [ebp - 0x474]
call fcn.0044b3e4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
call fcn.0040396c
jmp 0x64c4e5
mov eax, dword [ebp - 0x28]
mov edx, 0x64c82c
call fcn.00404200
jne 0x64b97a
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x268]
call fcn.004032dc
mov dl, 1
mov eax, dword [0x41960c]
call fcn.0041fdbc
mov edx, dword [ebp - 4]
mov dword [edx + 0x268], eax
xor eax, eax
push ebp
push 0x64b900
push dword fs:[eax]
mov dword fs:[eax], esp
mov edx, 1
mov eax, dword [ebp - 0x44]
call fcn.004f2184
mov edx, eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x268]
call fcn.00420ee0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x64b935
cmp dword [ebp - 0x7c], 0
je 0x64b94d
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x268]
mov edx, dword [eax]
call dword [edx + 0x60]
test eax, eax
jne 0x64b97a
lea edx, [ebp - 0x474]
mov eax, 0x64941c
call fcn.00405e74
mov eax, dword [ebp - 0x474]
call fcn.0044b3e4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
call fcn.0040396c
jmp 0x64c4e5
mov eax, dword [ebp - 0x28]
mov edx, 0x64c83c
call fcn.00404200
jne 0x64ba69
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x268]
call fcn.004032dc
mov dl, 1
mov eax, dword [0x41960c]
call fcn.0041fdbc
mov edx, dword [ebp - 4]
mov dword [edx + 0x268], eax
xor eax, eax
push ebp
push 0x64b9ef
push dword fs:[eax]
mov dword fs:[eax], esp
push 0
mov ecx, dword [0x840c10]
mov cl, byte [ecx]
mov edx, 1
mov eax, dword [ebp - 0x44]
call fcn.00756f50
mov edx, eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x268]
call fcn.00420ee0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x64ba24
cmp dword [ebp - 0x7c], 0
je 0x64ba3c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x268]
mov edx, dword [eax]
call dword [edx + 0x60]
test eax, eax
jne 0x64ba69
lea edx, [ebp - 0x474]
mov eax, 0x64941c
call fcn.00405e74
mov eax, dword [ebp - 0x474]
call fcn.0044b3e4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
call fcn.0040396c
jmp 0x64c4e5
mov eax, dword [ebp - 0x28]
mov edx, 0x64c84c
call fcn.00404200
jne 0x64bb45
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x268]
call fcn.004032dc
mov dl, 1
mov eax, dword [0x41960c]
call fcn.0041fdbc
mov edx, dword [ebp - 4]
mov dword [edx + 0x268], eax
xor eax, eax
push ebp
push 0x64bacb
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x268]
mov eax, dword [ebp - 0x44]
call fcn.0053071c
mov dword [ebp - 0x7c], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x64bada
cmp dword [ebp - 0x7c], 0
je 0x64baf2
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x268]
mov edx, dword [eax]
call dword [edx + 0x60]
test eax, eax
jne 0x64bb45
push 0
lea edx, [ebp - 0x474]
mov eax, dword [0x8410d8]
call fcn.00405e74
mov eax, dword [ebp - 0x474]
mov cx, word [0x64c820]
mov dl, 1
call fcn.0044b300
lea edx, [ebp - 0x474]
mov eax, 0x64941c
call fcn.00405e74
mov eax, dword [ebp - 0x474]
call fcn.0044b3e4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
call fcn.0040396c
jmp 0x64c4e5
mov eax, dword [ebp - 0x28]
mov edx, 0x64c85c
call fcn.00404200
jne 0x64bc0f
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x268]
call fcn.004032dc
mov dl, 1
mov eax, dword [0x41960c]
call fcn.0041fdbc
mov edx, dword [ebp - 4]
mov dword [edx + 0x268], eax
xor eax, eax
push ebp
push 0x64bba7
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x268]
mov eax, dword [ebp - 0x44]
call fcn.007554c0
mov dword [ebp - 0x7c], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x64bbb6
cmp dword [ebp - 0x7c], 0
jne 0x64bc0f
push 0
lea edx, [ebp - 0x474]
mov eax, dword [0x8410d8]
call fcn.00405e74
mov eax, dword [ebp - 0x474]
mov cx, word [0x64c820]
mov dl, 1
call fcn.0044b300
lea edx, [ebp - 0x474]
mov eax, 0x64941c
call fcn.00405e74
mov eax, dword [ebp - 0x474]
call fcn.0044b3e4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
call fcn.0040396c
jmp 0x64c4e5
mov eax, dword [ebp - 0x28]
mov edx, 0x64c86c
call fcn.00404200
jne 0x64bcf6
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x268]
call fcn.004032dc
mov dl, 1
mov eax, dword [0x41960c]
call fcn.0041fdbc
mov edx, dword [ebp - 4]
mov dword [edx + 0x268], eax
xor eax, eax
push ebp
push 0x64bc7c
push dword fs:[eax]
mov dword fs:[eax], esp
xor ecx, ecx
mov edx, 1
mov eax, dword [ebp - 0x44]
call fcn.0051addc
mov edx, eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x268]
call fcn.00420ee0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x64bcb1
cmp dword [ebp - 0x7c], 0
je 0x64bcc9
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x268]
mov edx, dword [eax]
call dword [edx + 0x60]
test eax, eax
jne 0x64bcf6
lea edx, [ebp - 0x474]
mov eax, 0x64941c
call fcn.00405e74
mov eax, dword [ebp - 0x474]
call fcn.0044b3e4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
call fcn.0040396c
jmp 0x64c4e5
mov eax, dword [ebp - 0x28]
mov edx, 0x64c87c
call fcn.00404200
je 0x64bd54
mov eax, dword [ebp - 0x28]
mov edx, 0x64c88c
call fcn.00404200
je 0x64bd54
mov eax, dword [ebp - 0x28]
mov edx, 0x64c89c
call fcn.00404200
je 0x64bd54
mov eax, dword [ebp - 0x28]
mov edx, 0x64c8ac
call fcn.00404200
je 0x64bd54
mov eax, dword [ebp - 0x28]
mov edx, 0x64c8bc
call fcn.00404200
je 0x64bd54
mov eax, dword [ebp - 0x28]
mov edx, 0x64c8cc
call fcn.00404200
jne 0x64be21
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x268]
call fcn.004032dc
mov dl, 1
mov eax, dword [0x41960c]
call fcn.0041fdbc
mov edx, dword [ebp - 4]
mov dword [edx + 0x268], eax
xor eax, eax
push ebp
push 0x64bda7
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x44]
call fcn.005774d8
mov edx, eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x268]
call fcn.00420ee0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x64bddc
cmp dword [ebp - 0x7c], 0
je 0x64bdf4
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x268]
mov edx, dword [eax]
call dword [edx + 0x60]
test eax, eax
jne 0x64be21
lea edx, [ebp - 0x474]
mov eax, 0x64941c
call fcn.00405e74
mov eax, dword [ebp - 0x474]
call fcn.0044b3e4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
call fcn.0040396c
jmp 0x64c4e5
mov eax, dword [ebp - 0x28]
mov edx, 0x64c8dc
call fcn.00404200
jne 0x64bf08
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x268]
call fcn.004032dc
mov dl, 1
mov eax, dword [0x41960c]
call fcn.0041fdbc
mov edx, dword [ebp - 4]
mov dword [edx + 0x268], eax
xor eax, eax
push ebp
push 0x64be8e
push dword fs:[eax]
mov dword fs:[eax], esp
xor ecx, ecx
mov edx, 1
mov eax, dword [ebp - 0x44]
call fcn.0051addc
mov edx, eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x268]
call fcn.00420ee0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x64bec3
cmp dword [ebp - 0x7c], 0
je 0x64bedb
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x268]
mov edx, dword [eax]
call dword [edx + 0x60]
test eax, eax
jne 0x64bf08
lea edx, [ebp - 0x474]
mov eax, 0x64941c
call fcn.00405e74
mov eax, dword [ebp - 0x474]
call fcn.0044b3e4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
call fcn.0040396c
jmp 0x64c4e5
mov eax, dword [ebp - 0x28]
mov edx, 0x64c8ec
call fcn.00404200
je 0x64bf2a
mov eax, dword [ebp - 0x28]
mov edx, 0x64c8fc
call fcn.00404200
jne 0x64bffe
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x268]
call fcn.004032dc
mov dl, 1
mov eax, dword [0x41960c]
call fcn.0041fdbc
mov edx, dword [ebp - 4]
mov dword [edx + 0x268], eax
xor eax, eax
push ebp
push 0x64bf84
push dword fs:[eax]
mov dword fs:[eax], esp
xor ecx, ecx
mov edx, 1
mov eax, dword [ebp - 0x44]
call fcn.00750720
mov edx, eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x268]
call fcn.00420ee0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x64bfb9
cmp dword [ebp - 0x7c], 0
je 0x64bfd1
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x268]
mov edx, dword [eax]
call dword [edx + 0x60]
test eax, eax
jne 0x64bffe
lea edx, [ebp - 0x474]
mov eax, 0x64941c
call fcn.00405e74
mov eax, dword [ebp - 0x474]
call fcn.0044b3e4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
call fcn.0040396c
jmp 0x64c4e5
mov eax, dword [ebp - 0x28]
mov edx, 0x64c90c
call fcn.00404200
je 0x64c031
lea edx, [ebp - 0x474]
mov eax, 0x64c91c
call fcn.0079fddc
mov edx, dword [ebp - 0x474]
mov eax, dword [ebp - 0x28]
call fcn.00404200
jne 0x64c105
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x268]
call fcn.004032dc
mov dl, 1
mov eax, dword [0x41960c]
call fcn.0041fdbc
mov edx, dword [ebp - 4]
mov dword [edx + 0x268], eax
xor eax, eax
push ebp
push 0x64c08b
push dword fs:[eax]
mov dword fs:[eax], esp
xor ecx, ecx
mov edx, 1
mov eax, dword [ebp - 0x44]
call fcn.0074a034
mov edx, eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x268]
call fcn.00420ee0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x64c0c0
cmp dword [ebp - 0x7c], 0
je 0x64c0d8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x268]
mov edx, dword [eax]
call dword [edx + 0x60]
test eax, eax
jne 0x64c105
lea edx, [ebp - 0x474]
mov eax, 0x64941c
call fcn.00405e74
mov eax, dword [ebp - 0x474]
call fcn.0044b3e4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
call fcn.0040396c
jmp 0x64c4e5
mov eax, dword [ebp - 0x28]
mov edx, 0x64c92c
call fcn.00404200
jne 0x64c1cf
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x268]
call fcn.004032dc
mov dl, 1
mov eax, dword [0x41960c]
call fcn.0041fdbc
mov edx, dword [ebp - 4]
mov dword [edx + 0x268], eax
xor eax, eax
push ebp
push 0x64c167
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x268]
mov eax, dword [ebp - 0x44]
call fcn.0074d13c
mov dword [ebp - 0x7c], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x64c176
cmp dword [ebp - 0x7c], 0
jne 0x64c1cf
push 0
lea edx, [ebp - 0x474]
mov eax, dword [0x8410d8]
call fcn.00405e74
mov eax, dword [ebp - 0x474]
mov cx, word [0x64c820]
mov dl, 1
call fcn.0044b300
lea edx, [ebp - 0x474]
mov eax, 0x64941c
call fcn.00405e74
mov eax, dword [ebp - 0x474]
call fcn.0044b3e4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
call fcn.0040396c
jmp 0x64c4e5
mov eax, dword [ebp - 0x28]
mov edx, 0x64c93c
call fcn.00404200
jne 0x64c2b1
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x268]
call fcn.004032dc
mov dl, 1
mov eax, dword [0x41960c]
call fcn.0041fdbc
mov edx, dword [ebp - 4]
mov dword [edx + 0x268], eax
xor eax, eax
push ebp
push 0x64c237
push dword fs:[eax]
mov dword fs:[eax], esp
xor edx, edx
mov eax, dword [ebp - 0x44]
call fcn.0074c0d4
mov edx, eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x268]
call fcn.00420ee0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x64c26c
cmp dword [ebp - 0x7c], 0
je 0x64c284
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x268]
mov edx, dword [eax]
call dword [edx + 0x60]
test eax, eax
jne 0x64c2b1
lea edx, [ebp - 0x474]
mov eax, 0x64941c
call fcn.00405e74
mov eax, dword [ebp - 0x474]
call fcn.0044b3e4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
call fcn.0040396c
jmp 0x64c4e5
mov eax, dword [ebp - 0x28]
mov edx, 0x64c94c
call fcn.00404200
je 0x64c2d3
mov eax, dword [ebp - 0x28]
mov edx, 0x64c95c
call fcn.00404200
jne 0x64c38a
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x268]
call fcn.004032dc
mov dl, 1
mov eax, dword [0x41960c]
call fcn.0041fdbc
mov edx, dword [ebp - 4]
mov dword [edx + 0x268], eax
xor eax, eax
push ebp
push 0x64c322
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x268]
mov eax, dword [ebp - 0x44]
call fcn.0074e544
mov dword [ebp - 0x7c], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x64c331
cmp dword [ebp - 0x7c], 0
jne 0x64c38a
push 0
lea edx, [ebp - 0x474]
mov eax, dword [0x8410d8]
call fcn.00405e74
mov eax, dword [ebp - 0x474]
mov cx, word [0x64c820]
mov dl, 1
call fcn.0044b300
lea edx, [ebp - 0x474]
mov eax, 0x64941c
call fcn.00405e74
mov eax, dword [ebp - 0x474]
call fcn.0044b3e4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
call fcn.0040396c
jmp 0x64c4e5
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1ec]
xor edx, edx
call fcn.00433868
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1ec]
xor edx, edx
call fcn.00433830
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x268]
mov edx, dword [eax]
call dword [edx + 0x2c]
mov edx, eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1dc]
mov eax, dword [eax + 0x118]
call fcn.00426010
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x268]
mov edx, dword [eax]
call dword [edx + 0x20]
mov edx, eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1dc]
mov eax, dword [eax + 0x11c]
call fcn.00426010
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x28c]
mov eax, dword [ebp - 4]
call fcn.004340a4
mov eax, dword [ebp - 4]
mov byte [eax + 0x280], 1
mov eax, dword [ebp - 4]
add eax, 0x1b14
mov edx, dword [ebp - 0x48]
call fcn.00403ec8
mov eax, dword [ebp - 4]
mov dword [eax + 0x278], 0xfffe7961
mov byte [0x94a788], 0
mov eax, dword [ebp - 4]
call fcn.00643910
mov eax, dword [0x94a77c]
mov eax, dword [eax + 0x1ec]
call fcn.0043474c
mov eax, dword [ebp - 4]
add eax, 0x1b04
mov edx, dword [ebp - 0x48]
call fcn.00403ec8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x64c4c2
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x64c4e5
mov eax, dword [0x84227c]
mov eax, dword [eax]
xor edx, edx
call fcn.0042b9bc
ret
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x64c549
lea eax, [ebp - 0x594]
mov edx, 2
call fcn.00403e98
lea eax, [ebp - 0x478]
mov edx, 2
call fcn.00403e98
lea eax, [ebp - 0x64]
mov edx, 2
call fcn.00403e98
lea eax, [ebp - 0x58]
mov edx, 8
call fcn.00403e98
lea eax, [ebp - 0x28]
call fcn.00403e74
lea eax, [ebp - 0x14]
mov edx, 4
call fcn.00403e98
ret