Function at 0x6706e8
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x8c804c
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xb04
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x3c], edi
mov dword [ebp - 0x38], esi
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp + 8]
mov edx, dword [ebp + 0x1c]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x2c], edx
mov dword [ebp - 4], 0
mov eax, dword [ecx]
call dword [eax + 4]
movzx eax, al
test eax, eax
jne 0x670761
mov ecx, dword [ebp - 0x30]
call fcn.004e4b6c
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0xc]
call fcn.0040b540
mov eax, dword [ebp - 0x30]
mov ebx, dword [ebp - 0x34]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 0x18
lea ecx, [ebp - 0x924]
call fcn.0044f6d0
mov dword [ebp - 4], 1
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ecx]
call dword [eax + 0x10]
mov ebx, eax
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ecx]
call dword [edx + 0x18]
movzx edx, al
test edx, edx
jne 0x670f4b
mov dword [ebp - 0x44], ebx
fild dword [ebp - 0x44]
fstp qword [ebp - 0x24]
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ecx]
call dword [eax + 8]
mov dword [ebp - 0x18], eax
lea ecx, [ebp - 0x8f0]
call fcn.0041cbf8
mov dword [ebp - 4], 2
lea esi, [ebp - 0x8f0]
mov ebx, 0xa3c670
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x44], eax
fild dword [ebp - 0x44]
fmul dword [0xa3beec]
fld dword [0xa3bee8]
fdiv qword [ebp - 0x24]
fmulp st(1)
fstp qword [ebp - 0x4c]
mov edi, dword [ebp - 0x4c]
mov edx, dword [ebp - 0x48]
mov ecx, edx
shr ecx, 0x14
and ecx, 0x7ff
cmp ecx, 0x3fe
jle 0x670814
mov eax, edx
neg ecx
add ecx, 0x41e
shld eax, edi, 0xb
or eax, 0x80000000
shr eax, cl
test edx, edx
jge 0x670816
neg eax
jmp 0x670816
xor eax, eax
push eax
push ebx
push esi
call fcn.00406768
add esp, 0xc
mov eax, dword [ebp - 0x2c]
test eax, eax
je 0x67084b
push 0xa15d80
mov ecx, eax
push 1
push 0
push 0
push dword [ebp - 0x8f0]
call fcn.00565d60
movzx eax, al
test eax, eax
jne 0x671d96
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ecx]
lea eax, [ebp - 0x8ec]
push 0
push 4
push eax
call dword [edx + 0x1c]
mov byte [ebp - 0x8e8], 0
lea eax, [ebp - 0x8ec]
push eax
call fcn.0089ab9d
mov ebx, eax
add esp, 4
test ebx, ebx
jl 0x671d3f
cmp ebx, 0x800
jg 0x671ce8
mov ecx, dword [ebp - 0x1c]
mov esi, dword [ecx]
lea edx, [ebp - 0x8ec]
push 0
push ebx
push edx
call dword [esi + 0x1c]
mov byte [ebp + ebx - 0x8ec], 0
lea ecx, [ebp - 0xec]
call fcn.004e4b6c
mov dword [ebp - 4], 3
lea ecx, [ebp - 0xdc]
lea eax, [ebp - 0x8ec]
push eax
call fcn.004061ac
mov dword [ebp - 4], 4
lea ecx, [ebp - 0xec]
lea eax, [ebp - 0xdc]
push eax
call fcn.004e6270
mov dword [ebp - 4], 3
lea ecx, [ebp - 0xdc]
call fcn.00406220
lea ecx, [ebp + 0xc]
lea eax, [ebp - 0xd8]
push eax
call fcn.004e4df4
mov dword [ebp - 4], 5
lea ecx, [ebp - 0xec]
call fcn.004e2ff4
lea ecx, [ebp - 0xec]
lea eax, [ebp - 0xd8]
push eax
call fcn.004e3380
lea ecx, [ebp - 0xec]
call fcn.004e2de4
cmp eax, 1
jne 0x6709d3
lea eax, [ebp - 0xec]
push eax
call fcn.0043bff8
pop ecx
movzx eax, al
test eax, eax
jne 0x6711a9
mov dword [ebp - 4], 3
lea eax, [ebp - 0xd8]
mov dword [ebp - 0x968], eax
mov dword [ebp - 4], 0x5a
mov dword [ebp - 4], 3
mov eax, dword [ebp - 0xd4]
mov edx, dword [ebp - 0xd0]
cmp eax, edx
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], edx
je 0x6710db
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x960], eax
mov dword [ebp - 4], 0x5b
mov dword [ebp - 4], 0x5c
mov dword [ebp - 4], 0x5b
lea ecx, [eax + 0xc]
call fcn.00406220
mov eax, dword [ebp - 0x18]
lea ecx, [eax + 8]
call fcn.00406220
mov eax, dword [ebp - 0x18]
add eax, 0x10
mov edx, dword [ebp - 0x14]
mov dword [ebp - 0x18], eax
cmp eax, edx
jne 0x67098d
jmp 0x6710d2
lea ecx, [ebp - 0xc8]
call fcn.004526bc
mov dword [ebp - 4], 6
lea ecx, [ebp - 0x70]
call fcn.004e4b6c
mov dword [ebp - 4], 7
lea ecx, [ebp - 0x60]
call fcn.004e4b6c
mov dword [ebp - 4], 8
lea ecx, [ebp - 0xec]
lea edx, [ebp - 0x70]
lea eax, [ebp - 0x60]
push eax
push edx
call fcn.004ec1ac
movzx eax, al
test eax, eax
jne 0x670b1a
mov dword [ebp - 4], 7
lea eax, [ebp - 0x60]
mov dword [ebp - 0xb10], eax
mov dword [ebp - 4], 9
mov dword [ebp - 4], 7
lea ecx, [ebp - 0x60]
call fcn.00411738
mov dword [ebp - 4], 6
lea eax, [ebp - 0x70]
mov dword [ebp - 0xb08], eax
mov dword [ebp - 4], 0xa
mov dword [ebp - 4], 6
lea ecx, [ebp - 0x70]
call fcn.00411738
mov dword [ebp - 4], 5
lea eax, [ebp - 0xc8]
mov dword [ebp - 0xb00], eax
mov dword [ebp - 4], 0xb
mov dword [ebp - 4], 5
lea ecx, [ebp - 0x8c]
call fcn.00452634
mov dword [ebp - 4], 3
lea eax, [ebp - 0xd8]
mov dword [ebp - 0xaf8], eax
mov dword [ebp - 4], 0xc
mov dword [ebp - 4], 3
mov eax, dword [ebp - 0xd4]
mov edx, dword [ebp - 0xd0]
cmp eax, edx
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], edx
je 0x6714b2
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0xaf0], eax
mov dword [ebp - 4], 0xd
mov dword [ebp - 4], 0xe
mov dword [ebp - 4], 0xd
lea ecx, [eax + 0xc]
call fcn.00406220
mov eax, dword [ebp - 0x18]
lea ecx, [eax + 8]
call fcn.00406220
mov eax, dword [ebp - 0x18]
add eax, 0x10
mov edx, dword [ebp - 0x14]
mov dword [ebp - 0x18], eax
cmp eax, edx
jne 0x670ad4
jmp 0x6714a9
lea ecx, [ebp - 0x924]
call fcn.0043bd40
movzx eax, al
test eax, eax
je 0x670b48
lea ecx, [ebp - 0x904]
lea eax, [ebp - 0x70]
push 1
push eax
call fcn.004e3018
movzx eax, al
test eax, eax
jne 0x670bfa
lea ecx, [ebp - 0x924]
call fcn.0043bd40
movzx eax, al
test eax, eax
je 0x670b65
lea ecx, [ebp - 0x924]
call fcn.0043c3e0
lea ecx, [ebp - 0x924]
lea edx, [ebp - 0x70]
xor eax, eax
push 0x58585858
push eax
push eax
push eax
push edx
call fcn.0043c40c
test eax, eax
je 0x670bfa
mov dword [ebp - 4], 7
lea eax, [ebp - 0x60]
mov dword [ebp - 0xad8], eax
mov dword [ebp - 4], 0x12
mov dword [ebp - 4], 7
mov eax, dword [ebp - 0x5c]
mov edx, dword [ebp - 0x58]
cmp eax, edx
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x18], edx
je 0x671586
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0xad0], eax
mov dword [ebp - 4], 0x13
mov dword [ebp - 4], 0x14
mov dword [ebp - 4], 0x13
lea ecx, [eax + 0xc]
call fcn.00406220
mov eax, dword [ebp - 0x14]
lea ecx, [eax + 8]
call fcn.00406220
mov eax, dword [ebp - 0x14]
add eax, 0x10
mov edx, dword [ebp - 0x18]
mov dword [ebp - 0x14], eax
cmp eax, edx
jne 0x670bb4
jmp 0x671580
lea ecx, [ebp - 0xc8]
lea ebx, [ebp - 0x924]
lea edx, [ebp - 0x60]
lea eax, [ebp - 0x50]
push eax
push edx
push ebx
call fcn.00520490
movzx eax, al
test eax, eax
jne 0x671824
lea ecx, [ebp - 0x924]
call fcn.0043c3e0
mov dword [ebp - 4], 7
lea eax, [ebp - 0x60]
mov dword [ebp - 0xa08], eax
mov dword [ebp - 4], 0x3b
mov dword [ebp - 4], 7
mov eax, dword [ebp - 0x5c]
mov edx, dword [ebp - 0x58]
cmp eax, edx
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x18], edx
je 0x670c9f
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0xa00], eax
mov dword [ebp - 4], 0x3c
mov dword [ebp - 4], 0x3d
mov dword [ebp - 4], 0x3c
lea ecx, [eax + 0xc]
call fcn.00406220
mov eax, dword [ebp - 0x14]
lea ecx, [eax + 8]
call fcn.00406220
mov eax, dword [ebp - 0x14]
add eax, 0x10
mov edx, dword [ebp - 0x18]
mov dword [ebp - 0x14], eax
cmp eax, edx
jne 0x670c58
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x14], eax
push eax
call fcn.00888fb0
pop ecx
xor eax, eax
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x54], eax
mov dword [ebp - 4], 6
lea eax, [ebp - 0x70]
mov dword [ebp - 0x9f8], eax
mov dword [ebp - 4], 0x3e
mov dword [ebp - 4], 6
mov eax, dword [ebp - 0x6c]
mov edx, dword [ebp - 0x68]
cmp eax, edx
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x18], edx
je 0x670d26
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x9f0], eax
mov dword [ebp - 4], 0x3f
mov dword [ebp - 4], 0x40
mov dword [ebp - 4], 0x3f
lea ecx, [eax + 0xc]
call fcn.00406220
mov eax, dword [ebp - 0x14]
lea ecx, [eax + 8]
call fcn.00406220
mov eax, dword [ebp - 0x14]
add eax, 0x10
mov edx, dword [ebp - 0x18]
mov dword [ebp - 0x14], eax
cmp eax, edx
jne 0x670cdf
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x14], eax
push eax
call fcn.00888fb0
pop ecx
xor eax, eax
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x64], eax
mov dword [ebp - 4], 5
lea eax, [ebp - 0xc8]
mov dword [ebp - 0x9e8], eax
mov dword [ebp - 4], 0x41
mov dword [ebp - 4], 5
lea eax, [ebp - 0x8c]
mov dword [ebp - 0x9e0], eax
mov dword [ebp - 4], 0x42
mov dword [ebp - 4], 0x43
mov dword [ebp - 4], 0x44
mov dword [ebp - 4], 0x43
mov ecx, dword [ebp - 0x7c]
test ecx, ecx
je 0x670d98
mov dword [ebp - 0x7c], 0
je 0x670d98
push 1
call fcn.00448214
mov ecx, dword [ebp - 0x78]
test ecx, ecx
je 0x670daf
mov dword [ebp - 0x78], 0
je 0x670daf
push 1
call fcn.0044829c
mov ecx, dword [ebp - 0x84]
test ecx, ecx
je 0x670dcc
mov dword [ebp - 0x84], 0
je 0x670dcc
push 1
call fcn.004481a0
mov ecx, dword [ebp - 0x80]
test ecx, ecx
je 0x670de3
mov dword [ebp - 0x80], 0
je 0x670de3
push 1
call fcn.004481c0
lea ecx, [ebp - 0x88]
call fcn.00406220
mov dword [ebp - 4], 3
lea eax, [ebp - 0xd8]
mov dword [ebp - 0x9d8], eax
mov dword [ebp - 4], 0x45
mov dword [ebp - 4], 3
mov eax, dword [ebp - 0xd4]
mov edx, dword [ebp - 0xd0]
cmp eax, edx
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x18], edx
je 0x670e6f
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x9d0], eax
mov dword [ebp - 4], 0x46
mov dword [ebp - 4], 0x47
mov dword [ebp - 4], 0x46
lea ecx, [eax + 0xc]
call fcn.00406220
mov eax, dword [ebp - 0x14]
lea ecx, [eax + 8]
call fcn.00406220
mov eax, dword [ebp - 0x14]
add eax, 0x10
mov edx, dword [ebp - 0x18]
mov dword [ebp - 0x14], eax
cmp eax, edx
jne 0x670e25
mov eax, dword [ebp - 0xd4]
mov dword [ebp - 0x14], eax
push eax
call fcn.00888fb0
pop ecx
xor eax, eax
mov dword [ebp - 0xd4], eax
mov dword [ebp - 0xd0], eax
mov dword [ebp - 0xcc], eax
mov dword [ebp - 4], 2
lea eax, [ebp - 0xec]
mov dword [ebp - 0x9c8], eax
mov dword [ebp - 4], 0x48
mov dword [ebp - 4], 2
mov eax, dword [ebp - 0xe8]
mov edx, dword [ebp - 0xe4]
cmp eax, edx
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x18], edx
je 0x670f0b
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x9c0], eax
mov dword [ebp - 4], 0x49
mov dword [ebp - 4], 0x4a
mov dword [ebp - 4], 0x49
lea ecx, [eax + 0xc]
call fcn.00406220
mov eax, dword [ebp - 0x14]
lea ecx, [eax + 8]
call fcn.00406220
mov eax, dword [ebp - 0x14]
add eax, 0x10
mov edx, dword [ebp - 0x18]
mov dword [ebp - 0x14], eax
cmp eax, edx
jne 0x670ec1
mov eax, dword [ebp - 0xe8]
mov dword [ebp - 0x14], eax
push eax
call fcn.00888fb0
pop ecx
xor eax, eax
mov dword [ebp - 0xe8], eax
mov dword [ebp - 0xe4], eax
mov dword [ebp - 0xe0], eax
mov dword [ebp - 4], 1
lea ecx, [ebp - 0x8f0]
call fcn.00406220
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ecx]
call dword [eax + 0x18]
movzx eax, al
test eax, eax
je 0x670799
mov ecx, dword [ebp - 0x30]
call fcn.004e4b6c
mov dword [ebp - 4], 0
lea eax, [ebp - 0x924]
mov dword [ebp - 0x948], eax
mov dword [ebp - 4], 0x60
mov dword [ebp - 4], 0x61
mov dword [ebp - fcn.0043c40c], 0x9f6a40
lea ecx, [ebp - 0x924]
call fcn.0043c3e0
mov dword [ebp - 4], 0x60
lea eax, [ebp - 0x904]
mov dword [ebp - 0x940], eax
mov dword [ebp - 4], 0x62
mov dword [ebp - 4], 0x60
mov eax, dword [ebp - 0x900]
mov edx, dword [ebp - 0x8fc]
cmp eax, edx
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x2c], edx
je 0x67100a
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x938], eax
mov dword [ebp - 4], 0x63
mov dword [ebp - 4], 0x64
mov dword [ebp - 4], 0x63
lea ecx, [eax + 0xc]
call fcn.00406220
mov eax, dword [ebp - 0x18]
lea ecx, [eax + 8]
call fcn.00406220
mov eax, dword [ebp - 0x18]
add eax, 0x10
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x18], eax
cmp eax, edx
jne 0x670fc0
mov eax, dword [ebp - 0x900]
mov dword [ebp - 0x18], eax
push eax
call fcn.00888fb0
pop ecx
xor eax, eax
mov dword [ebp - 0x900], eax
mov dword [ebp - 0x8fc], eax
mov dword [ebp - 0x8f8], eax
mov dword [ebp - case.0x4e640c.73], 0x9f6a18
mov dword [ebp - 4], 0xffffffff
lea eax, [ebp + 0xc]
mov dword [ebp - 0x930], eax
mov dword [ebp - 4], 0x65
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp + 0x10]
mov edx, dword [ebp + 0x14]
cmp eax, edx
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x2c], edx
je 0x6710a4
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x928], eax
mov dword [ebp - 4], 0x66
mov dword [ebp - 4], 0x67
mov dword [ebp - 4], 0x66
lea ecx, [eax + 0xc]
call fcn.00406220
mov eax, dword [ebp - 0x18]
lea ecx, [eax + 8]
call fcn.00406220
mov eax, dword [ebp - 0x18]
add eax, 0x10
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x18], eax
cmp eax, edx
jne 0x67105d
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x18], eax
push eax
call fcn.00888fb0
pop ecx
xor edx, edx
mov eax, dword [ebp - 0x30]
mov dword [ebp + 0x10], edx
mov edi, dword [ebp - 0x3c]
mov esi, dword [ebp - 0x38]
mov dword [ebp + 0x14], edx
mov ebx, dword [ebp - 0x34]
mov dword [ebp + 0x18], edx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 0x18
mov eax, dword [ebp - 0xd4]
mov dword [ebp - 0x18], eax
push eax
call fcn.00888fb0
pop ecx
xor eax, eax
mov dword [ebp - 0xd4], eax
mov dword [ebp - 0xd0], eax
mov dword [ebp - 0xcc], eax
mov dword [ebp - 4], 2
lea eax, [ebp - 0xec]
mov dword [ebp - 0x958], eax
mov dword [ebp - 4], 0x5d
mov dword [ebp - 4], 2
mov eax, dword [ebp - 0xe8]
mov edx, dword [ebp - 0xe4]
cmp eax, edx
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], edx
je 0x671177
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x950], eax
mov dword [ebp - 4], 0x5e
mov dword [ebp - 4], 0x5f
mov dword [ebp - 4], 0x5e
lea ecx, [eax + 0xc]
call fcn.00406220
mov eax, dword [ebp - 0x18]
lea ecx, [eax + 8]
call fcn.00406220
mov eax, dword [ebp - 0x18]
add eax, 0x10
mov edx, dword [ebp - 0x14]
mov dword [ebp - 0x18], eax
cmp eax, edx
jne 0x67112d
mov eax, dword [ebp - 0xe8]
mov dword [ebp - 0x18], eax
push eax
call fcn.00888fb0
pop ecx
xor eax, eax
mov dword [ebp - 0xe8], eax
mov dword [ebp - 0xe4], eax
mov dword [ebp - 0xe0], eax
mov dword [ebp - 4], 1
lea ecx, [ebp - 0x8f0]
call fcn.00406220
jmp 0x670f38
mov edx, dword [ebp - 0x30]
xor eax, eax
mov dword [ebp - 0x9b8], edx
mov dword [edx + 4], eax
mov dword [edx + 8], eax
mov dword [edx + 0xc], eax
mov dword [ebp - 4], 0x4b
lea eax, [ebp - 0xec]
mov ecx, edx
push eax
call fcn.004e2d98
mov dword [ebp - 4], 5
mov dword [ebp - 4], 5
mov dword [ebp - 4], 3
lea eax, [ebp - 0xd8]
mov dword [ebp - 0x9b0], eax
mov dword [ebp - 4], 0x4c
mov dword [ebp - 4], 3
mov eax, dword [ebp - 0xd4]
mov edx, dword [ebp - 0xd0]
cmp eax, edx
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x2c], edx
je 0x671261
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x9a8], eax
mov dword [ebp - 4], 0x4d
mov dword [ebp - 4], 0x4e
mov dword [ebp - 4], 0x4d
lea ecx, [eax + 0xc]
call fcn.00406220
mov eax, dword [ebp - 0x18]
lea ecx, [eax + 8]
call fcn.00406220
mov eax, dword [ebp - 0x18]
add eax, 0x10
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x18], eax
cmp eax, edx
jne 0x671217
mov eax, dword [ebp - 0xd4]
mov dword [ebp - 0x18], eax
push eax
call fcn.00888fb0
pop ecx
xor eax, eax
mov dword [ebp - 0xd4], eax
mov dword [ebp - 0xd0], eax
mov dword [ebp - 0xcc], eax
mov dword [ebp - 4], 2
lea eax, [ebp - 0xec]
mov dword [ebp - 0x9a0], eax
mov dword [ebp - 4], 0x4f
mov dword [ebp - 4], 2
mov eax, dword [ebp - 0xe8]
mov edx, dword [ebp - 0xe4]
cmp eax, edx
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x2c], edx
je 0x6712fd
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x998], eax
mov dword [ebp - 4], 0x50
mov dword [ebp - 4], 0x51
mov dword [ebp - 4], 0x50
lea ecx, [eax + 0xc]
call fcn.00406220
mov eax, dword [ebp - 0x18]
lea ecx, [eax + 8]
call fcn.00406220
mov eax, dword [ebp - 0x18]
add eax, 0x10
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x18], eax
cmp eax, edx
jne 0x6712b3
mov eax, dword [ebp - 0xe8]
mov dword [ebp - 0x18], eax
push eax
call fcn.00888fb0
pop ecx
xor eax, eax
mov dword [ebp - 0xe8], eax
mov dword [ebp - 0xe4], eax
mov dword [ebp - 0xe0], eax
mov dword [ebp - 4], 1
lea ecx, [ebp - 0x8f0]
call fcn.00406220
mov dword [ebp - 4], 0
lea eax, [ebp - 0x924]
mov dword [ebp - 0x990], eax
mov dword [ebp - 4], 0x52
mov dword [ebp - 4], 0x53
mov dword [ebp - fcn.0043c40c], 0x9f6a40
lea ecx, [ebp - 0x924]
call fcn.0043c3e0
mov dword [ebp - 4], 0x52
lea eax, [ebp - 0x904]
mov dword [ebp - 0x988], eax
mov dword [ebp - 4], 0x54
mov dword [ebp - 4], 0x52
mov eax, dword [ebp - 0x900]
mov edx, dword [ebp - 0x8fc]
cmp eax, edx
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x2c], edx
je 0x6713e1
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x980], eax
mov dword [ebp - 4], 0x55
mov dword [ebp - 4], 0x56
mov dword [ebp - 4], 0x55
lea ecx, [eax + 0xc]
call fcn.00406220
mov eax, dword [ebp - 0x18]
lea ecx, [eax + 8]
call fcn.00406220
mov eax, dword [ebp - 0x18]
add eax, 0x10
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x18], eax
cmp eax, edx
jne 0x671397
mov eax, dword [ebp - 0x900]
mov dword [ebp - 0x18], eax
push eax
call fcn.00888fb0
pop ecx
xor eax, eax
mov dword [ebp - 0x900], eax
mov dword [ebp - 0x8fc], eax
mov dword [ebp - 0x8f8], eax
mov dword [ebp - case.0x4e640c.73], 0x9f6a18
mov dword [ebp - 4], 0xffffffff
lea eax, [ebp + 0xc]
mov dword [ebp - 0x978], eax
mov dword [ebp - 4], 0x57
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp + 0x10]
mov edx, dword [ebp + 0x14]
cmp eax, edx
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x2c], edx
je 0x67147b
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x970], eax
mov dword [ebp - 4], 0x58
mov dword [ebp - 4], 0x59
mov dword [ebp - 4], 0x58
lea ecx, [eax + 0xc]
call fcn.00406220
mov eax, dword [ebp - 0x18]
lea ecx, [eax + 8]
call fcn.00406220
mov eax, dword [ebp - 0x18]
add eax, 0x10
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x18], eax
cmp eax, edx
jne 0x671434
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x18], eax
push eax
call fcn.00888fb0
pop ecx
xor edx, edx
mov eax, dword [ebp - 0x30]
mov dword [ebp + 0x10], edx
mov edi, dword [ebp - 0x3c]
mov esi, dword [ebp - 0x38]
mov dword [ebp + 0x14], edx
mov ebx, dword [ebp - 0x34]
mov dword [ebp + 0x18], edx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 0x18
mov eax, dword [ebp - 0xd4]
mov dword [ebp - 0x18], eax
push eax
call fcn.00888fb0
pop ecx
xor eax, eax
mov dword [ebp - 0xd4], eax
mov dword [ebp - 0xd0], eax
mov dword [ebp - 0xcc], eax
mov dword [ebp - 4], 2
lea eax, [ebp - 0xec]
mov dword [ebp - 0xae8], eax
mov dword [ebp - 4], 0xf
mov dword [ebp - 4], 2
mov eax, dword [ebp - 0xe8]
mov edx, dword [ebp - 0xe4]
cmp eax, edx
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], edx
je 0x67154e
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0xae0], eax
mov dword [ebp - 4], 0x10
mov dword [ebp - 4], 0x11
mov dword [ebp - 4], 0x10
lea ecx, [eax + 0xc]
call fcn.00406220
mov eax, dword [ebp - 0x18]
lea ecx, [eax + 8]
call fcn.00406220
mov eax, dword [ebp - 0x18]
add eax, 0x10
mov edx, dword [ebp - 0x14]
mov dword [ebp - 0x18], eax
cmp eax, edx
jne 0x671504
mov eax, dword [ebp - 0xe8]
mov dword [ebp - 0x18], eax
push eax
call fcn.00888fb0
pop ecx
xor eax, eax
mov dword [ebp - 0xe8], eax
mov dword [ebp - 0xe4], eax
mov dword [ebp - 0xe0], eax
mov dword [ebp - 4], 1
lea ecx, [ebp - 0x8f0]
call fcn.00406220
jmp 0x670f38
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x14], eax
push eax
call fcn.00888fb0
pop ecx
xor eax, eax
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x54], eax
mov dword [ebp - 4], 6
lea eax, [ebp - 0x70]
mov dword [ebp - 0xac8], eax
mov dword [ebp - 4], 0x15
mov dword [ebp - 4], 6
mov eax, dword [ebp - 0x6c]
mov edx, dword [ebp - 0x68]
cmp eax, edx
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x18], edx
je 0x67160d
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0xac0], eax
mov dword [ebp - 4], 0x16
mov dword [ebp - 4], 0x17
mov dword [ebp - 4], 0x16
lea ecx, [eax + 0xc]
call fcn.00406220
mov eax, dword [ebp - 0x14]
lea ecx, [eax + 8]
call fcn.00406220
mov eax, dword [ebp - 0x14]
add eax, 0x10
mov edx, dword [ebp - 0x18]
mov dword [ebp - 0x14], eax
cmp eax, edx
jne 0x6715c6
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x14], eax
push eax
call fcn.00888fb0
pop ecx
xor eax, eax
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x64], eax
mov dword [ebp - 4], 5
lea eax, [ebp - 0xc8]
mov dword [ebp - 0xab8], eax
mov dword [ebp - 4], 0x18
mov dword [ebp - 4], 5
lea eax, [ebp - 0x8c]
mov dword [ebp - 0xab0], eax
mov dword [ebp - 4], 0x19
mov dword [ebp - 4], 0x1a
mov dword [ebp - 4], 0x1b
mov dword [ebp - 4], 0x1a
mov ecx, dword [ebp - 0x7c]
test ecx, ecx
je 0x67167f
mov dword [ebp - 0x7c], 0
je 0x67167f
push 1
call fcn.00448214
mov ecx, dword [ebp - 0x78]
test ecx, ecx
je 0x671696
mov dword [ebp - 0x78], 0
je 0x671696
push 1
call fcn.0044829c
mov ecx, dword [ebp - 0x84]
test ecx, ecx
je 0x6716b3
mov dword [ebp - 0x84], 0
je 0x6716b3
push 1
call fcn.004481a0
mov ecx, dword [ebp - 0x80]
test ecx, ecx
je 0x6716ca
mov dword [ebp - 0x80], 0
je 0x6716ca
push 1
call fcn.004481c0
lea ecx, [ebp - 0x88]
call fcn.00406220
mov dword [ebp - 4], 3
lea eax, [ebp - 0xd8]
mov dword [ebp - 0xaa8], eax
mov dword [ebp - 4], 0x1c
mov dword [ebp - 4], 3
mov eax, dword [ebp - 0xd4]
mov edx, dword [ebp - 0xd0]
cmp eax, edx
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x18], edx
je 0x671756
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0xaa0], eax
mov dword [ebp - 4], 0x1d
mov dword [ebp - 4], 0x1e
mov dword [ebp - 4], 0x1d
lea ecx, [eax + 0xc]
call fcn.00406220
mov eax, dword [ebp - 0x14]
lea ecx, [eax + 8]
call fcn.00406220
mov eax, dword [ebp - 0x14]
add eax, 0x10
mov edx, dword [ebp - 0x18]
mov dword [ebp - 0x14], eax
cmp eax, edx
jne 0x67170c
mov eax, dword [ebp - 0xd4]
mov dword [ebp - 0x14], eax
push eax
call fcn.00888fb0
pop ecx
xor eax, eax
mov dword [ebp - 0xd4], eax
mov dword [ebp - 0xd0], eax
mov dword [ebp - 0xcc], eax
mov dword [ebp - 4], 2
lea eax, [ebp - 0xec]
mov dword [ebp - 0xa98], eax
mov dword [ebp - 4], 0x1f
mov dword [ebp - 4], 2
mov eax, dword [ebp - 0xe8]
mov edx, dword [ebp - 0xe4]
cmp eax, edx
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x18], edx
je 0x6717f2
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0xa90], eax
mov dword [ebp - 4], 0x20
mov dword [ebp - 4], 0x21
mov dword [ebp - 4], 0x20
lea ecx, [eax + 0xc]
call fcn.00406220
mov eax, dword [ebp - 0x14]
lea ecx, [eax + 8]
call fcn.00406220
mov eax, dword [ebp - 0x14]
add eax, 0x10
mov edx, dword [ebp - 0x18]
mov dword [ebp - 0x14], eax
cmp eax, edx
jne 0x6717a8
mov eax, dword [ebp - 0xe8]
mov dword [ebp - 0x14], eax
push eax
call fcn.00888fb0
pop ecx
xor eax, eax
mov dword [ebp - 0xe8], eax
mov dword [ebp - 0xe4], eax
mov dword [ebp - 0xe0], eax
mov dword [ebp - 4], 1
lea ecx, [ebp - 0x8f0]
call fcn.00406220
jmp 0x670f38
mov edx, dword [ebp - 0x30]
xor eax, eax
mov dword [ebp - 0xa88], edx
mov dword [edx + 4], eax
mov dword [edx + 8], eax
mov dword [edx + 0xc], eax
mov dword [ebp - 4], 0x22
lea eax, [ebp - 0xec]
mov ecx, edx
push eax
call fcn.004e2d98
mov dword [ebp - 4], 8
mov dword [ebp - 4], 8
mov dword [ebp - 4], 7
lea eax, [ebp - 0x60]
mov dword [ebp - 0xa80], eax
mov dword [ebp - 4], 0x23
mov dword [ebp - 4], 7
mov eax, dword [ebp - 0x5c]
mov edx, dword [ebp - 0x58]
cmp eax, edx
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x2c], edx
je 0x6718d0
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0xa78], eax
mov dword [ebp - 4], 0x24
mov dword [ebp - 4], 0x25
mov dword [ebp - 4], 0x24
lea ecx, [eax + 0xc]
call fcn.00406220
mov eax, dword [ebp - 0x18]
lea ecx, [eax + 8]
call fcn.00406220
mov eax, dword [ebp - 0x18]
add eax, 0x10
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x18], eax
cmp eax, edx
jne 0x671889
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x18], eax
push eax
call fcn.00888fb0
pop ecx
xor eax, eax
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x54], eax
mov dword [ebp - 4], 6
lea eax, [ebp - 0x70]
mov dword [ebp - 0xa70], eax
mov dword [ebp - 4], 0x26
mov dword [ebp - 4], 6
mov eax, dword [ebp - 0x6c]
mov edx, dword [ebp - 0x68]
cmp eax, edx
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x2c], edx
je 0x671957
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0xa68], eax
mov dword [ebp - 4], 0x27
mov dword [ebp - 4], 0x28
mov dword [ebp - 4], 0x27
lea ecx, [eax + 0xc]
call fcn.00406220
mov eax, dword [ebp - 0x18]
lea ecx, [eax + 8]
call fcn.00406220
mov eax, dword [ebp - 0x18]
add eax, 0x10
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x18], eax
cmp eax, edx
jne 0x671910
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x18], eax
push eax
call fcn.00888fb0
pop ecx
xor eax, eax
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x64], eax
mov dword [ebp - 4], 5
lea eax, [ebp - 0xc8]
mov dword [ebp - 0xa60], eax
mov dword [ebp - 4], 0x29
mov dword [ebp - 4], 5
lea eax, [ebp - 0x8c]
mov dword [ebp - 0xa58], eax
mov dword [ebp - 4], 0x2a
mov dword [ebp - 4], 0x2b
mov dword [ebp - 4], 0x2c
mov dword [ebp - 4], 0x2b
mov ecx, dword [ebp - 0x7c]
test ecx, ecx
je 0x6719c9
mov dword [ebp - 0x7c], 0
je 0x6719c9
push 1
call fcn.00448214
mov ecx, dword [ebp - 0x78]
test ecx, ecx
je 0x6719e0
mov dword [ebp - 0x78], 0
je 0x6719e0
push 1
call fcn.0044829c
mov ecx, dword [ebp - 0x84]
test ecx, ecx
je 0x6719fd
mov dword [ebp - 0x84], 0
je 0x6719fd
push 1
call fcn.004481a0
mov ecx, dword [ebp - 0x80]
test ecx, ecx
je 0x671a14
mov dword [ebp - 0x80], 0
je 0x671a14
push 1
call fcn.004481c0
lea ecx, [ebp - 0x88]
call fcn.00406220
mov dword [ebp - 4], 3
lea eax, [ebp - 0xd8]
mov dword [ebp - 0xa50], eax
mov dword [ebp - 4], 0x2d
mov dword [ebp - 4], 3
mov eax, dword [ebp - 0xd4]
mov edx, dword [ebp - 0xd0]
cmp eax, edx
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x2c], edx
je 0x671aa0
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0xa48], eax
mov dword [ebp - 4], 0x2e
mov dword [ebp - 4], 0x2f
mov dword [ebp - 4], 0x2e
lea ecx, [eax + 0xc]
call fcn.00406220
mov eax, dword [ebp - 0x18]
lea ecx, [eax + 8]
call fcn.00406220
mov eax, dword [ebp - 0x18]
add eax, 0x10
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x18], eax
cmp eax, edx
jne 0x671a56
mov eax, dword [ebp - 0xd4]
mov dword [ebp - 0x18], eax
push eax
call fcn.00888fb0
pop ecx
xor eax, eax
mov dword [ebp - 0xd4], eax
mov dword [ebp - 0xd0], eax
mov dword [ebp - 0xcc], eax
mov dword [ebp - 4], 2
lea eax, [ebp - 0xec]
mov dword [ebp - 0xa40], eax
mov dword [ebp - 4], 0x30
mov dword [ebp - 4], 2
mov eax, dword [ebp - 0xe8]
mov edx, dword [ebp - 0xe4]
cmp eax, edx
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x2c], edx
je 0x671b3c
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0xa38], eax
mov dword [ebp - 4], 0x31
mov dword [ebp - 4], 0x32
mov dword [ebp - 4], 0x31
lea ecx, [eax + 0xc]
call fcn.00406220
mov eax, dword [ebp - 0x18]
lea ecx, [eax + 8]
call fcn.00406220
mov eax, dword [ebp - 0x18]
add eax, 0x10
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x18], eax
cmp eax, edx
jne 0x671af2
mov eax, dword [ebp - 0xe8]
mov dword [ebp - 0x18], eax
push eax
call fcn.00888fb0
pop ecx
xor eax, eax
mov dword [ebp - 0xe8], eax
mov dword [ebp - 0xe4], eax
mov dword [ebp - 0xe0], eax
mov dword [ebp - 4], 1
lea ecx, [ebp - 0x8f0]
call fcn.00406220
mov dword [ebp - 4], 0
lea eax, [ebp - 0x924]
mov dword [ebp - 0xa30], eax
mov dword [ebp - 4], 0x33
mov dword [ebp - 4], 0x34
mov dword [ebp - fcn.0043c40c], 0x9f6a40
lea ecx, [ebp - 0x924]
call fcn.0043c3e0
mov dword [ebp - 4], 0x33
lea eax, [ebp - 0x904]
mov dword [ebp - 0xa28], eax
mov dword [ebp - 4], 0x35
mov dword [ebp - 4], 0x33
mov eax, dword [ebp - 0x900]
mov edx, dword [ebp - 0x8fc]
cmp eax, edx
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x2c], edx
je 0x671c20
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0xa20], eax
mov dword [ebp - 4], 0x36
mov dword [ebp - 4], 0x37
mov dword [ebp - 4], 0x36
lea ecx, [eax + 0xc]
call fcn.00406220
mov eax, dword [ebp - 0x18]
lea ecx, [eax + 8]
call fcn.00406220
mov eax, dword [ebp - 0x18]
add eax, 0x10
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x18], eax
cmp eax, edx
jne 0x671bd6
mov eax, dword [ebp - 0x900]
mov dword [ebp - 0x18], eax
push eax
call fcn.00888fb0
pop ecx
xor eax, eax
mov dword [ebp - 0x900], eax
mov dword [ebp - 0x8fc], eax
mov dword [ebp - 0x8f8], eax
mov dword [ebp - case.0x4e640c.73], 0x9f6a18
mov dword [ebp - 4], 0xffffffff
lea eax, [ebp + 0xc]
mov dword [ebp - 0xa18], eax
mov dword [ebp - 4], 0x38
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp + 0x10]
mov edx, dword [ebp + 0x14]
cmp eax, edx
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x2c], edx
je 0x671cba
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0xa10], eax
mov dword [ebp - 4], 0x39
mov dword [ebp - 4], 0x3a
mov dword [ebp - 4], 0x39
lea ecx, [eax + 0xc]
call fcn.00406220
mov eax, dword [ebp - 0x18]
lea ecx, [eax + 8]
call fcn.00406220
mov eax, dword [ebp - 0x18]
add eax, 0x10
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x18], eax
cmp eax, edx
jne 0x671c73
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x18], eax
push eax
call fcn.00888fb0
pop ecx
xor edx, edx
mov eax, dword [ebp - 0x30]
mov dword [ebp + 0x10], edx
mov edi, dword [ebp - 0x3c]
mov esi, dword [ebp - 0x38]
mov dword [ebp + 0x14], edx
mov ebx, dword [ebp - 0x34]
mov dword [ebp + 0x18], edx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 0x18
mov ecx, dword [ebp - 0x30]
call fcn.004e4b6c
mov dword [ebp - 4], 1
lea ecx, [ebp - 0x8f0]
call fcn.00406220
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x924]
call fcn.0043bcc8
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0xc]
call fcn.0040b540
mov eax, dword [ebp - 0x30]
mov edi, dword [ebp - 0x3c]
mov esi, dword [ebp - 0x38]
mov ebx, dword [ebp - 0x34]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 0x18
mov ecx, dword [ebp - 0x30]
call fcn.004e4b6c
mov dword [ebp - 4], 1
lea ecx, [ebp - 0x8f0]
call fcn.00406220
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x924]
call fcn.0043bcc8
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0xc]
call fcn.0040b540
mov eax, dword [ebp - 0x30]
mov edi, dword [ebp - 0x3c]
mov esi, dword [ebp - 0x38]
mov ebx, dword [ebp - 0x34]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 0x18
mov ecx, dword [ebp - 0x30]
call fcn.004e4b6c
mov dword [ebp - 4], 1
lea ecx, [ebp - 0x8f0]
call fcn.00406220
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x924]
call fcn.0043bcc8
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0xc]
call fcn.0040b540
mov eax, dword [ebp - 0x30]
mov edi, dword [ebp - 0x3c]
mov esi, dword [ebp - 0x38]
mov ebx, dword [ebp - 0x34]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 0x18