Function at 0x617b94
Capabilities:
Check for software breakpoints

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x66
push 0
push 0
dec ecx
jne 0x617b9c
push ecx
push ebx
push esi
push edi
mov dword [ebp - 4], eax
xor eax, eax
push ebp
push 0x6192fa
push dword fs:[eax]
mov dword fs:[eax], esp
xor eax, eax
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x30]
add eax, 0x70
cmp eax, dword [ebp - 0x28]
jge 0x617c08
mov eax, 0x62
sub eax, dword [ebp - 0x20]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x18]
mov dword [ebp - 0x14], eax
lea eax, [ebp - 8]
mov edx, dword [ebp - 8]
call fcn.0040a1dc
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 8]
call fcn.0040a1dc
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 8]
call fcn.0040a1dc
lea eax, [ebp - 8]
mov edx, dword [ebp - 0xc]
call fcn.0040a1dc
mov eax, dword [0x6f5850]
mov edx, dword [0x6f5850]
call fcn.0040afe0
jne 0x617c5c
lea eax, [ebp - 8]
mov edx, dword [ebp - 8]
call fcn.0040a1dc
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 8]
call fcn.0040a1dc
lea eax, [ebp - 8]
mov edx, dword [ebp - 8]
call fcn.0040a1dc
lea eax, [ebp - 8]
mov edx, dword [ebp - 0xc]
call fcn.0040a1dc
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 8]
call fcn.0040a1dc
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 0xc]
call fcn.0040a1dc
lea eax, [ebp - 0x250]
mov edx, dword [0x6f5d24]
mov dl, byte [edx]
mov byte [eax + 1], dl
mov byte [eax], 1
lea edx, [ebp - 0x250]
lea eax, [ebp - 0x254]
call fcn.0040a438
lea eax, [ebp - 0x258]
mov edx, dword [0x6f5c54]
mov dl, byte [edx]
mov byte [eax + 1], dl
mov byte [eax], 1
lea edx, [ebp - 0x258]
lea eax, [ebp - 0x254]
mov cl, 2
call fcn.0040a460
lea edx, [ebp - 0x254]
lea eax, [ebp - 0x25c]
call fcn.0040a438
lea eax, [ebp - 0x258]
mov edx, dword [0x6f5b90]
mov dl, byte [edx]
mov byte [eax + 1], dl
mov byte [eax], 1
lea edx, [ebp - 0x258]
lea eax, [ebp - 0x25c]
mov cl, 3
call fcn.0040a460
lea edx, [ebp - 0x25c]
lea eax, [ebp - 0x264]
call fcn.0040a438
lea eax, [ebp - 0x258]
mov edx, dword [0x6f5be8]
mov dl, byte [edx]
mov byte [eax + 1], dl
mov byte [eax], 1
lea edx, [ebp - 0x258]
lea eax, [ebp - 0x264]
mov cl, 4
call fcn.0040a460
lea edx, [ebp - 0x264]
lea eax, [ebp - 0x26c]
call fcn.0040a438
lea eax, [ebp - 0x258]
mov edx, dword [0x6f5e20]
mov dl, byte [edx]
mov byte [eax + 1], dl
mov byte [eax], 1
lea edx, [ebp - 0x258]
lea eax, [ebp - 0x26c]
mov cl, 5
call fcn.0040a460
lea edx, [ebp - 0x26c]
lea eax, [ebp - 0x274]
call fcn.0040a438
lea eax, [ebp - 0x258]
mov edx, dword [0x6f5a9c]
mov dl, byte [edx]
mov byte [eax + 1], dl
mov byte [eax], 1
lea edx, [ebp - 0x258]
lea eax, [ebp - 0x274]
mov cl, 6
call fcn.0040a460
lea edx, [ebp - 0x274]
lea eax, [ebp - 0x27c]
call fcn.0040a438
lea eax, [ebp - 0x258]
mov edx, dword [0x6f5b90]
mov dl, byte [edx]
mov byte [eax + 1], dl
mov byte [eax], 1
lea edx, [ebp - 0x258]
lea eax, [ebp - 0x27c]
mov cl, 7
call fcn.0040a460
lea edx, [ebp - 0x27c]
lea eax, [ebp - 0x288]
call fcn.0040a438
mov edx, 0x619308
lea eax, [ebp - 0x288]
mov cl, 8
call fcn.0040a460
lea edx, [ebp - 0x288]
lea eax, [ebp - 0x294]
call fcn.0040a438
lea eax, [ebp - 0x258]
mov edx, dword [0x6f5d24]
mov dl, byte [edx]
mov byte [eax + 1], dl
mov byte [eax], 1
lea edx, [ebp - 0x258]
lea eax, [ebp - 0x294]
mov cl, 9
call fcn.0040a460
lea edx, [ebp - 0x294]
lea eax, [ebp - 0x2a0]
call fcn.0040a438
lea eax, [ebp - 0x258]
mov edx, dword [0x6f5b78]
mov dl, byte [edx]
mov byte [eax + 1], dl
mov byte [eax], 1
lea edx, [ebp - 0x258]
lea eax, [ebp - 0x2a0]
mov cl, 0xa
call fcn.0040a460
lea edx, [ebp - 0x2a0]
lea eax, [ebp - 0x2ac]
call fcn.0040a438
lea eax, [ebp - 0x258]
mov edx, dword [0x6f5b78]
mov dl, byte [edx]
mov byte [eax + 1], dl
mov byte [eax], 1
lea edx, [ebp - 0x258]
lea eax, [ebp - 0x2ac]
mov cl, 0xb
call fcn.0040a460
lea edx, [ebp - 0x2ac]
lea eax, [ebp - 0xc]
call fcn.0040adc4
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 0xc]
call fcn.0040a1dc
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 7
jne 0x617bbd
mov eax, dword [0x6f5850]
mov edx, dword [0x6f5850]
call fcn.0040afe0
jne 0x617ee4
lea eax, [ebp - 8]
mov edx, dword [ebp - 8]
call fcn.0040a1dc
lea eax, [ebp - 8]
mov edx, dword [ebp - 8]
call fcn.0040a1dc
lea eax, [ebp - 8]
mov edx, dword [ebp - 0xc]
call fcn.0040a1dc
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x30]
cmp eax, 0xcd
jge 0x617f43
lea eax, [ebp - 8]
mov edx, dword [ebp - 0xc]
call fcn.0040a1dc
lea eax, [ebp - 8]
mov edx, dword [ebp - 8]
call fcn.0040a1dc
lea eax, [ebp - 8]
mov edx, dword [ebp - 0xc]
call fcn.0040a1dc
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 0xc]
call fcn.0040a1dc
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 8]
call fcn.0040a1dc
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 0xc]
call fcn.0040a1dc
lea eax, [ebp - 8]
mov edx, dword [ebp - 0xc]
call fcn.0040a1dc
jmp 0x617fe0
mov eax, dword [ebp - 0x28]
add eax, 0x71
cmp eax, dword [ebp - 0x2c]
jge 0x617f96
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 8]
call fcn.0040a1dc
lea eax, [ebp - 8]
mov edx, dword [ebp - 0xc]
call fcn.0040a1dc
lea eax, [ebp - 8]
mov edx, 0x619318
call fcn.0040a1dc
lea eax, [ebp - 8]
mov edx, dword [ebp - 8]
call fcn.0040a1dc
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 8]
call fcn.0040a1dc
lea eax, [ebp - 0xc]
mov edx, 0x61933c
call fcn.0040a1dc
jmp 0x617fe0
lea eax, [ebp - 8]
mov edx, dword [ebp - 8]
call fcn.0040a1dc
lea eax, [ebp - 8]
mov edx, dword [ebp - 0xc]
call fcn.0040a1dc
lea eax, [ebp - 0xc]
push eax
xor ecx, ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.0040b018
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 0xc]
call fcn.0040a1dc
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 0xc]
call fcn.0040a1dc
lea eax, [ebp - 8]
mov edx, dword [ebp - 8]
call fcn.0040a1dc
lea eax, [ebp - 8]
mov edx, dword [ebp - 8]
call fcn.0040a1dc
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 0xc]
call fcn.0040a1dc
lea eax, [ebp - 0xc]
push eax
xor ecx, ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.0040b018
xor eax, eax
push ebp
push 0x61929a
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x20], eax
xor eax, eax
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 8]
push eax
xor ecx, ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.0040b018
mov ecx, 1
mov edx, dword [0x6f5850]
mov eax, 0x61938c
call fcn.0040b170
cmp eax, 0xb2
jge 0x618093
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x30]
mov dword [ebp - 0x18], eax
lea eax, [ebp - 8]
mov edx, dword [ebp - 8]
call fcn.0040a1dc
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 0xc]
call fcn.0040a1dc
lea eax, [ebp - 8]
mov edx, dword [ebp - 0xc]
call fcn.0040a1dc
lea eax, [ebp - 8]
mov edx, dword [ebp - 8]
call fcn.0040a1dc
lea eax, [ebp - 0xc]
mov edx, 0x6193ec
call fcn.0040a1dc
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 5
jne 0x618022
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 0xc]
call fcn.0040a1dc
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 8]
call fcn.0040a1dc
lea eax, [ebp - 8]
push eax
mov ecx, 1
mov edx, 1
mov eax, dword [ebp - 0xc]
call fcn.0040b018
lea eax, [ebp - 0x250]
mov edx, dword [0x6f5a00]
mov dl, byte [edx]
mov byte [eax + 1], dl
mov byte [eax], 1
lea edx, [ebp - 0x250]
lea eax, [ebp - 0x254]
call fcn.0040a438
lea eax, [ebp - 0x258]
mov edx, dword [0x6f5bfc]
mov dl, byte [edx]
mov byte [eax + 1], dl
mov byte [eax], 1
lea edx, [ebp - 0x258]
lea eax, [ebp - 0x254]
mov cl, 2
call fcn.0040a460
lea edx, [ebp - 0x254]
lea eax, [ebp - 0x25c]
call fcn.0040a438
lea eax, [ebp - 0x258]
mov edx, dword [0x6f5c18]
mov dl, byte [edx]
mov byte [eax + 1], dl
mov byte [eax], 1
lea edx, [ebp - 0x258]
lea eax, [ebp - 0x25c]
mov cl, 3
call fcn.0040a460
lea edx, [ebp - 0x25c]
lea eax, [ebp - 0x264]
call fcn.0040a438
lea eax, [ebp - 0x258]
mov edx, dword [0x6f5d24]
mov dl, byte [edx]
mov byte [eax + 1], dl
mov byte [eax], 1
lea edx, [ebp - 0x258]
lea eax, [ebp - 0x264]
mov cl, 4
call fcn.0040a460
lea edx, [ebp - 0x264]
lea eax, [ebp - 0x26c]
call fcn.0040a438
lea eax, [ebp - 0x258]
mov edx, dword [0x6f5e20]
mov dl, byte [edx]
mov byte [eax + 1], dl
mov byte [eax], 1
lea edx, [ebp - 0x258]
lea eax, [ebp - 0x26c]
mov cl, 5
call fcn.0040a460
lea edx, [ebp - 0x26c]
lea eax, [ebp - 0x274]
call fcn.0040a438
lea eax, [ebp - 0x258]
mov edx, dword [0x6f5e20]
mov dl, byte [edx]
mov byte [eax + 1], dl
mov byte [eax], 1
lea edx, [ebp - 0x258]
lea eax, [ebp - 0x274]
mov cl, 6
call fcn.0040a460
lea edx, [ebp - 0x274]
lea eax, [ebp - 0x27c]
call fcn.0040a438
mov edx, 0x619308
lea eax, [ebp - 0x27c]
mov cl, 7
call fcn.0040a460
lea edx, [ebp - 0x27c]
lea eax, [ebp - 0x288]
call fcn.0040a438
lea eax, [ebp - 0x258]
mov edx, dword [0x6f5d24]
mov dl, byte [edx]
mov byte [eax + 1], dl
mov byte [eax], 1
lea edx, [ebp - 0x258]
lea eax, [ebp - 0x288]
mov cl, 8
call fcn.0040a460
lea edx, [ebp - 0x288]
lea eax, [ebp - 0x294]
call fcn.0040a438
lea eax, [ebp - 0x258]
mov edx, dword [0x6f5b78]
mov dl, byte [edx]
mov byte [eax + 1], dl
mov byte [eax], 1
lea edx, [ebp - 0x258]
lea eax, [ebp - 0x294]
mov cl, 9
call fcn.0040a460
lea edx, [ebp - 0x294]
lea eax, [ebp - 0x2a0]
call fcn.0040a438
lea eax, [ebp - 0x258]
mov edx, dword [0x6f5b78]
mov dl, byte [edx]
mov byte [eax + 1], dl
mov byte [eax], 1
lea edx, [ebp - 0x258]
lea eax, [ebp - 0x2a0]
mov cl, 0xa
call fcn.0040a460
lea edx, [ebp - 0x2a0]
lea eax, [ebp - 0x2b0]
call fcn.0040adc4
mov eax, dword [ebp - 0x2b0]
mov ecx, 1
mov edx, dword [ebp - 0xc]
call fcn.0040b170
cmp eax, 5
jge 0x6182f3
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 8]
call fcn.0040a1dc
xor eax, eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0xe
jge 0x6183c5
inc dword [ebp - 0x28]
mov eax, dword [ebp - 8]
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0
je 0x61831c
mov eax, dword [ebp - 0x34]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0x85
jne 0x618371
mov eax, dword [ebp - 0x24]
add eax, 0x6a
mov dword [ebp - 0x20], eax
mov eax, 0xab
sub eax, dword [ebp - 0x18]
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 0xc]
call fcn.0040a1dc
lea eax, [ebp - 8]
push eax
xor ecx, ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.0040b018
lea eax, [ebp - 8]
mov edx, 0x619414
call fcn.0040a1dc
lea eax, [ebp - 8]
mov edx, dword [ebp - 8]
call fcn.0040a1dc
jmp 0x6183bb
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 0xc]
call fcn.0040a1dc
lea eax, [ebp - 0xc]
push eax
xor ecx, ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.0040b018
lea eax, [ebp - 8]
mov edx, dword [ebp - 0xc]
call fcn.0040a1dc
lea eax, [ebp - 8]
mov edx, dword [ebp - 8]
call fcn.0040a1dc
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 0xc]
call fcn.0040a1dc
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 8]
call fcn.0040a1dc
cmp dword [ebp - 0x28], 0xe
jl 0x618302
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 8]
call fcn.0040a1dc
lea eax, [ebp - 8]
mov edx, dword [ebp - 8]
call fcn.0040a1dc
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 0xc]
call fcn.0040a1dc
mov eax, dword [0x6f5a00]
mov al, byte [eax]
mov byte [ebp - 0x35], al
mov al, byte [ebp - 0x35]
add al, 0x9f
sub al, 0x1a
jae 0x6183fd
sub byte [ebp - 0x35], 0x20
mov eax, dword [0x6f5e20]
mov al, byte [eax]
mov byte [ebp - 0x36], al
mov al, byte [ebp - 0x36]
add al, 0x9f
sub al, 0x1a
jae 0x618414
sub byte [ebp - 0x36], 0x20
mov eax, dword [0x6f5ce8]
mov al, byte [eax]
mov byte [ebp - 0x37], al
mov al, byte [ebp - 0x37]
add al, 0x9f
sub al, 0x1a
jae 0x61842b
sub byte [ebp - 0x37], 0x20
lea eax, [ebp - 0x2b8]
mov dl, byte [ebp - 0x35]
mov ecx, 0
call fcn.0040a4d4
push dword [ebp - 0x2b8]
lea eax, [ebp - 0x2bc]
mov edx, dword [0x6f5bfc]
mov dl, byte [edx]
mov ecx, 0
call fcn.0040a4d4
push dword [ebp - 0x2bc]
lea eax, [ebp - 0x2c0]
mov edx, dword [0x6f5cb0]
mov dl, byte [edx]
mov ecx, 0
call fcn.0040a4d4
push dword [ebp - 0x2c0]
lea eax, [ebp - 0x2c4]
mov dl, byte [ebp - 0x36]
mov ecx, 0
call fcn.0040a4d4
push dword [ebp - 0x2c4]
lea eax, [ebp - 0x2c8]
mov edx, dword [0x6f5bc4]
mov dl, byte [edx]
mov ecx, 0
call fcn.0040a4d4
push dword [ebp - 0x2c8]
lea eax, [ebp - 0x2cc]
mov edx, dword [0x6f5cb0]
mov dl, byte [edx]
mov ecx, 0
call fcn.0040a4d4
push dword [ebp - 0x2cc]
lea eax, [ebp - 0x2d0]
mov edx, dword [0x6f5b98]
mov dl, byte [edx]
mov ecx, 0
call fcn.0040a4d4
push dword [ebp - 0x2d0]
lea eax, [ebp - 0x2d4]
mov dl, byte [ebp - 0x37]
mov ecx, 0
call fcn.0040a4d4
push dword [ebp - 0x2d4]
lea eax, [ebp - 0x2d8]
mov edx, dword [0x6f5a48]
mov dl, byte [edx]
mov ecx, 0
call fcn.0040a4d4
push dword [ebp - 0x2d8]
lea eax, [ebp - 0x2dc]
mov edx, dword [0x6f5990]
mov dl, byte [edx]
mov ecx, 0
call fcn.0040a4d4
push dword [ebp - 0x2dc]
lea eax, [ebp - 0x2e0]
mov edx, dword [0x6f5c48]
mov dl, byte [edx]
mov ecx, 0
call fcn.0040a4d4
push dword [ebp - 0x2e0]
lea eax, [ebp - 0x2e4]
mov edx, dword [0x6f5bfc]
mov dl, byte [edx]
mov ecx, 0
call fcn.0040a4d4
push dword [ebp - 0x2e4]
lea eax, [ebp - 0x2e8]
mov edx, dword [0x6f5d24]
mov dl, byte [edx]
mov ecx, 0
call fcn.0040a4d4
push dword [ebp - 0x2e8]
lea eax, [ebp - 0x2ec]
mov edx, dword [0x6f59f4]
mov dl, byte [edx]
mov ecx, 0
call fcn.0040a4d4
push dword [ebp - 0x2ec]
lea eax, [ebp - 0x2f0]
mov edx, dword [0x6f5a48]
mov dl, byte [edx]
mov ecx, 0
call fcn.0040a4d4
push dword [ebp - 0x2f0]
lea eax, [ebp - 0x2f4]
mov edx, dword [0x6f5e20]
mov dl, byte [edx]
mov ecx, 0
call fcn.0040a4d4
push dword [ebp - 0x2f4]
push 0x61943c
lea eax, [ebp - 0x2f8]
mov edx, dword [0x6f5d24]
mov dl, byte [edx]
mov ecx, 0
call fcn.0040a4d4
push dword [ebp - 0x2f8]
lea eax, [ebp - 0x2fc]
mov edx, dword [0x6f5b78]
mov dl, byte [edx]
mov ecx, 0
call fcn.0040a4d4
push dword [ebp - 0x2fc]
lea eax, [ebp - 0x300]
mov edx, dword [0x6f5b78]
mov dl, byte [edx]
mov ecx, 0
call fcn.0040a4d4
push dword [ebp - 0x300]
lea eax, [ebp - 0x2b4]
mov edx, 0x14
call fcn.0040a684
mov edx, dword [ebp - 0x2b4]
lea eax, [ebp - 0xc]
call fcn.0040ad14
lea eax, [ebp - 0xc]
push eax
xor ecx, ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.0040b018
push 0x104
lea eax, [ebp - 0x24a]
push eax
push 0
call fcn.005309f4
mov eax, dword [ebp - 0x18]
sub eax, 0x86
mov dword [ebp - 0x28], eax
lea eax, [ebp - 8]
mov edx, dword [ebp - 8]
call fcn.0040a1dc
xor eax, eax
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 8]
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0
je 0x6186d1
mov eax, dword [ebp - 0x3c]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0xa3
jle 0x61872f
mov eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0x1c]
mov dword [ebp - 0x14], eax
lea eax, [ebp - 8]
push eax
mov ecx, 1
mov edx, 1
mov eax, dword [ebp - 0xc]
call fcn.0040b018
lea eax, [ebp - 0xc]
push eax
xor ecx, ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.0040b018
lea eax, [ebp - 8]
mov edx, dword [ebp - 0xc]
call fcn.0040a1dc
lea eax, [ebp - 8]
mov edx, dword [ebp - 8]
call fcn.0040a1dc
lea eax, [ebp - 8]
mov edx, dword [ebp - 0xc]
call fcn.0040a1dc
jmp 0x61877b
lea eax, [ebp - 8]
mov edx, dword [ebp - 8]
call fcn.0040a1dc
lea eax, [ebp - 8]
mov edx, dword [ebp - 8]
call fcn.0040a1dc
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 0xc]
call fcn.0040a1dc
lea eax, [ebp - 0xc]
push eax
xor ecx, ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.0040b018
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 0xc]
call fcn.0040a1dc
lea eax, [ebp - 8]
mov edx, 0x61944c
call fcn.0040a1dc
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 6
jne 0x6186ba
lea eax, [ebp - 8]
mov edx, dword [ebp - 8]
call fcn.0040a1dc
lea eax, [ebp - 0xc]
mov edx, 0x619494
call fcn.0040a1dc
lea eax, [ebp - 8]
mov edx, dword [ebp - 0xc]
call fcn.0040a1dc
xor eax, eax
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 8]
mov edx, 0x6194c0
call fcn.0040a1dc
mov eax, dword [ebp - 0x24]
imul dword [ebp - 0x28]
mov dword [ebp - 0x1c], eax
xor eax, eax
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x20]
sub eax, dword [ebp - 0x14]
mov dword [ebp - 0x30], eax
lea eax, [ebp - 8]
mov edx, dword [ebp - 8]
call fcn.0040a1dc
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 0xc]
call fcn.0040a1dc
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 8]
call fcn.0040a1dc
lea eax, [ebp - 8]
mov edx, dword [ebp - 8]
call fcn.0040a1dc
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 8]
call fcn.0040a1dc
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0xe
jne 0x6187cb
lea eax, [ebp - 8]
mov edx, dword [ebp - 8]
call fcn.0040a1dc
lea eax, [ebp - 8]
mov edx, dword [ebp - 0xc]
call fcn.0040a1dc
lea eax, [ebp - 8]
mov edx, dword [ebp - 8]
call fcn.0040a1dc
lea eax, [ebp - 8]
mov edx, dword [ebp - 0xc]
call fcn.0040a1dc
lea eax, [ebp - 0xc]
push eax
mov ecx, 1
mov edx, 1
mov eax, dword [ebp - 0xc]
call fcn.0040b018
lea eax, [ebp - 0xc]
push eax
xor ecx, ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.0040b018
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 0xc]
call fcn.0040a1dc
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 8
jne 0x6187b0
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x28]
mov edx, dword [ebp - 0x20]
sub edx, dword [ebp - 0x28]
cmp eax, edx
jle 0x6189c3
mov ecx, 1
mov edx, dword [ebp - 0xc]
mov eax, 0x619510
call fcn.0040b170
cmp eax, 0x82
jge 0x618902
lea eax, [ebp - 8]
push eax
xor ecx, ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.0040b018
lea eax, [ebp - 0xc]
push eax
xor ecx, ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.0040b018
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 0xc]
call fcn.0040a1dc
lea eax, [ebp - 8]
mov edx, 0x619548
call fcn.0040a1dc
lea eax, [ebp - 8]
mov edx, dword [ebp - 0xc]
call fcn.0040a1dc
lea eax, [ebp - 8]
mov edx, dword [ebp - 8]
call fcn.0040a1dc
mov eax, dword [ebp - 0x30]
sub eax, dword [ebp - 0x28]
mov edx, dword [ebp - 0x28]
sub edx, dword [ebp - 0x28]
cmp eax, edx
jle 0x618961
lea eax, [ebp - 8]
mov edx, dword [ebp - 0xc]
call fcn.0040a1dc
lea eax, [ebp - 8]
mov edx, dword [ebp - 8]
call fcn.0040a1dc
lea eax, [ebp - 8]
mov edx, dword [ebp - 0xc]
call fcn.0040a1dc
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 0xc]
call fcn.0040a1dc
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 8]
call fcn.0040a1dc
lea eax, [ebp - 8]
push eax
mov ecx, 1
mov edx, 1
mov eax, dword [ebp - 0xc]
call fcn.0040b018
jmp 0x6189a5
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 8]
call fcn.0040a1dc
lea eax, [ebp - 0xc]
mov edx, 0x61956c
call fcn.0040a1dc
lea eax, [ebp - 8]
mov edx, dword [ebp - 8]
call fcn.0040a1dc
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 8]
call fcn.0040a1dc
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 0xc]
call fcn.0040a1dc
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 0xc]
call fcn.0040a1dc
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 0xc]
call fcn.0040a1dc
lea eax, [ebp - 0xc]
push eax
xor ecx, ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.0040b018
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 8]
call fcn.0040a1dc
lea eax, [ebp - 8]
mov edx, dword [ebp - 8]
call fcn.0040a1dc
mov eax, 0xa8
sub eax, dword [ebp - 0x30]
cmp eax, 0x2e
jge 0x6189fe
lea eax, [ebp - 8]
push eax
mov ecx, 1
mov edx, 1
mov eax, dword [ebp - 0xc]
call fcn.0040b018
jmp 0x618a53
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 0x30]
cmp eax, dword [ebp - 0x30]
jne 0x618a53
lea eax, [ebp - 8]
mov edx, dword [ebp - 0xc]
call fcn.0040a1dc
lea eax, [ebp - 8]
mov edx, dword [ebp - 8]
call fcn.0040a1dc
lea eax, [ebp - 0xc]
push eax
xor ecx, ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.0040b018
lea eax, [ebp - 8]
mov edx, dword [ebp - 0xc]
call fcn.0040a1dc
lea eax, [ebp - 8]
mov edx, dword [ebp - 8]
call fcn.0040a1dc
lea eax, [ebp - 8]
mov edx, dword [ebp - 8]
call fcn.0040a1dc
mov eax, dword [ebp - 0x30]
cmp eax, dword [ebp - 0x28]
jle 0x618a71
lea eax, [ebp - 8]
push eax
mov ecx, 1
mov edx, 1
mov eax, dword [ebp - 0xc]
call fcn.0040b018
call fcn.004f6d58
call fcn.004f7ee0
call fcn.004fa018
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x30]
mov dword [ebp - 0x20], eax
xor eax, eax
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 8]
push eax
mov ecx, 1
mov edx, 1
mov eax, dword [ebp - 0xc]
call fcn.0040b018
mov eax, dword [ebp - 0x24]
add eax, 0x7e
mov dword [ebp - 0x18], eax
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 9
jne 0x618a8e
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 8]
call fcn.0040a1dc
lea eax, [ebp - 8]
mov edx, dword [ebp - 8]
call fcn.0040a1dc
lea eax, [ebp - 0x250]
mov edx, dword [0x6f5d24]
mov dl, byte [edx]
mov byte [eax + 1], dl
mov byte [eax], 1
lea edx, [ebp - 0x250]
lea eax, [ebp - 0x254]
call fcn.0040a438
lea eax, [ebp - 0x258]
mov edx, dword [0x6f5ce8]
mov dl, byte [edx]
mov byte [eax + 1], dl
mov byte [eax], 1
lea edx, [ebp - 0x258]
lea eax, [ebp - 0x254]
mov cl, 2
call fcn.0040a460
lea edx, [ebp - 0x254]
lea eax, [ebp - 0x25c]
call fcn.0040a438
lea eax, [ebp - 0x258]
mov edx, dword [0x6f5a00]
mov dl, byte [edx]
mov byte [eax + 1], dl
mov byte [eax], 1
lea edx, [ebp - 0x258]
lea eax, [ebp - 0x25c]
mov cl, 3
call fcn.0040a460
lea edx, [ebp - 0x25c]
lea eax, [ebp - 0x264]
call fcn.0040a438
lea eax, [ebp - 0x258]
mov edx, dword [0x6f5e20]
mov dl, byte [edx]
mov byte [eax + 1], dl
mov byte [eax], 1
lea edx, [ebp - 0x258]
lea eax, [ebp - 0x264]
mov cl, 4
call fcn.0040a460
lea edx, [ebp - 0x264]
lea eax, [ebp - 0x26c]
call fcn.0040a438
lea eax, [ebp - 0x258]
mov edx, dword [0x6f5990]
mov dl, byte [edx]
mov byte [eax + 1], dl
mov byte [eax], 1
lea edx, [ebp - 0x258]
lea eax, [ebp - 0x26c]
mov cl, 5
call fcn.0040a460
lea edx, [ebp - 0x26c]
lea eax, [ebp - 0x274]
call fcn.0040a438
lea eax, [ebp - 0x258]
mov edx, dword [0x6f5b98]
mov dl, byte [edx]
mov byte [eax + 1], dl
mov byte [eax], 1
lea edx, [ebp - 0x258]
lea eax, [ebp - 0x274]
mov cl, 6
call fcn.0040a460
lea edx, [ebp - 0x274]
lea eax, [ebp - 0x27c]
call fcn.0040a438
lea eax, [ebp - 0x258]
mov edx, dword [0x6f5da0]
mov dl, byte [edx]
mov byte [eax + 1], dl
mov byte [eax], 1
lea edx, [ebp - 0x258]
lea eax, [ebp - 0x27c]
mov cl, 7
call fcn.0040a460
lea edx, [ebp - 0x27c]
lea eax, [ebp - 0x288]
call fcn.0040a438
lea eax, [ebp - 0x258]
mov edx, dword [0x6f5c54]
mov dl, byte [edx]
mov byte [eax + 1], dl
mov byte [eax], 1
lea edx, [ebp - 0x258]
lea eax, [ebp - 0x288]
mov cl, 8
call fcn.0040a460
lea edx, [ebp - 0x288]
lea eax, [ebp - 0x294]
call fcn.0040a438
mov edx, 0x619308
lea eax, [ebp - 0x294]
mov cl, 9
call fcn.0040a460
lea edx, [ebp - 0x294]
lea eax, [ebp - 0x2a0]
call fcn.0040a438
lea eax, [ebp - 0x258]
mov edx, dword [0x6f5d24]
mov dl, byte [edx]
mov byte [eax + 1], dl
mov byte [eax], 1
lea edx, [ebp - 0x258]
lea eax, [ebp - 0x2a0]
mov cl, 0xa
call fcn.0040a460
lea edx, [ebp - 0x2a0]
lea eax, [ebp - 0x2ac]
call fcn.0040a438
lea eax, [ebp - 0x258]
mov edx, dword [0x6f5b78]
mov dl, byte [edx]
mov byte [eax + 1], dl
mov byte [eax], 1
lea edx, [ebp - 0x258]
lea eax, [ebp - 0x2ac]
mov cl, 0xb
call fcn.0040a460
lea edx, [ebp - 0x2ac]
lea eax, [ebp - 0x310]
call fcn.0040a438
lea eax, [ebp - 0x258]
mov edx, dword [0x6f5b78]
mov dl, byte [edx]
mov byte [eax + 1], dl
mov byte [eax], 1
lea edx, [ebp - 0x258]
lea eax, [ebp - 0x310]
mov cl, 0xc
call fcn.0040a460
lea edx, [ebp - 0x310]
lea eax, [ebp - 0xc]
call fcn.0040adc4
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 0xc]
call fcn.0040a1dc
call fcn.004fa5cc
mov eax, dword [ebp - 0x18]
add eax, dword [ebp - 0x30]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 8]
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0
je 0x618d71
mov eax, dword [ebp - 0x40]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0x2d
jne 0x618d98
lea eax, [ebp - 8]
mov edx, dword [ebp - 8]
call fcn.0040a1dc
mov eax, dword [ebp - 0x14]
add eax, 0x8b
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 0xc]
call fcn.0040a1dc
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 8]
call fcn.0040a1dc
lea eax, [ebp - 8]
mov edx, dword [ebp - 0xc]
call fcn.0040a1dc
lea eax, [ebp - 0x250]
mov edx, dword [0x6f5be8]
mov dl, byte [edx]
mov byte [eax + 1], dl
mov byte [eax], 1
lea edx, [ebp - 0x250]
lea eax, [ebp - 0x254]
call fcn.0040a438
lea eax, [ebp - 0x258]
mov edx, dword [0x6f5e20]
mov dl, byte [edx]
mov byte [eax + 1], dl
mov byte [eax], 1
lea edx, [ebp - 0x258]
lea eax, [ebp - 0x254]
mov cl, 2
call fcn.0040a460
lea edx, [ebp - 0x254]
lea eax, [ebp - 0x25c]
call fcn.0040a438
lea eax, [ebp - 0x258]
mov edx, dword [0x6f5c54]
mov dl, byte [edx]
mov byte [eax + 1], dl
mov byte [eax], 1
lea edx, [ebp - 0x258]
lea eax, [ebp - 0x25c]
mov cl, 3
call fcn.0040a460
lea edx, [ebp - 0x25c]
lea eax, [ebp - 0x264]
call fcn.0040a438
lea eax, [ebp - 0x258]
mov edx, dword [0x6f5be8]
mov dl, byte [edx]
mov byte [eax + 1], dl
mov byte [eax], 1
lea edx, [ebp - 0x258]
lea eax, [ebp - 0x264]
mov cl, 4
call fcn.0040a460
lea edx, [ebp - 0x264]
lea eax, [ebp - 0x26c]
call fcn.0040a438
lea eax, [ebp - 0x258]
mov edx, dword [0x6f5b78]
mov dl, byte [edx]
mov byte [eax + 1], dl
mov byte [eax], 1
lea edx, [ebp - 0x258]
lea eax, [ebp - 0x26c]
mov cl, 5
call fcn.0040a460
lea edx, [ebp - 0x26c]
lea eax, [ebp - 0x318]
mov ecx, 0
call fcn.0040a558
push dword [ebp - 0x318]
lea edx, [ebp - 0x31c]
mov eax, 6
call fcn.0042f454
push dword [ebp - 0x31c]
lea eax, [ebp - 0x320]
mov edx, dword [0x6f5a48]
mov dl, byte [edx]
mov ecx, 0
call fcn.0040a4d4
push dword [ebp - 0x320]
push 0x61943c
lea eax, [ebp - 0x324]
mov edx, dword [0x6f5d24]
mov dl, byte [edx]
mov ecx, 0
call fcn.0040a4d4
push dword [ebp - 0x324]
lea eax, [ebp - 0x328]
mov edx, dword [0x6f5b78]
mov dl, byte [edx]
mov ecx, 0
call fcn.0040a4d4
push dword [ebp - 0x328]
lea eax, [ebp - 0x32c]
mov edx, dword [0x6f5b78]
mov dl, byte [edx]
mov ecx, 0
call fcn.0040a4d4
push dword [ebp - 0x32c]
lea eax, [ebp - 0x314]
mov edx, 7
call fcn.0040a684
mov edx, dword [ebp - 0x314]
lea eax, [ebp - 0xc]
call fcn.0040ad14
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 0xc]
call fcn.0040a1dc
call fcn.004fb678
mov eax, dword [ebp - 0x30]
add eax, 0x85
mov dword [ebp - 0x1c], eax
xor eax, eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 3
jge 0x618fa9
inc dword [ebp - 0x2c]
lea eax, [ebp - 8]
mov edx, dword [ebp - 0xc]
call fcn.0040a1dc
cmp dword [ebp - 0x2c], 3
jl 0x618f95
mov eax, dword [ebp - 0x24]
add eax, 0x56
mov dword [ebp - 0x20], eax
mov ecx, 1
mov edx, dword [ebp - 0xc]
mov eax, 0x619590
call fcn.0040b170
cmp eax, 0x81
je 0x618fe5
lea eax, [ebp - 8]
mov edx, 0x6195c0
call fcn.0040a1dc
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 8]
call fcn.0040a1dc
jmp 0x618ff0
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 8]
call fcn.0040a1dc
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 8]
call fcn.0040a1dc
lea eax, [ebp - 8]
mov edx, dword [ebp - 8]
call fcn.0040a1dc
xor eax, eax
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0xc]
mov edx, 0x6195e0
call fcn.0040afe0
jne 0x619066
mov eax, dword [ebp - 0x1c]
add eax, 0xb6
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x28]
add eax, 0xd8
mov dword [ebp - 0x18], eax
lea eax, [ebp - 8]
mov edx, dword [ebp - 8]
call fcn.0040a1dc
lea eax, [ebp - 0xc]
push eax
xor ecx, ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.0040b018
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 0xc]
call fcn.0040a1dc
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 8]
call fcn.0040a1dc
jmp 0x6190c0
lea eax, [ebp - 8]
mov edx, dword [ebp - 8]
call fcn.0040a1dc
lea eax, [ebp - 0xc]
push eax
mov ecx, 1
mov edx, 1
mov eax, dword [ebp - 0xc]
call fcn.0040b018
lea eax, [ebp - 0xc]
push eax
mov ecx, 1
mov edx, 1
mov eax, dword [ebp - 0xc]
call fcn.0040b018
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 8]
call fcn.0040a1dc
lea eax, [ebp - 8]
mov edx, 0x619614
call fcn.0040a1dc
lea eax, [ebp - 8]
mov edx, dword [ebp - 8]
call fcn.0040a1dc
mov eax, 0xc6
sub eax, dword [ebp - 0x28]
cmp eax, 0x1b
jge 0x619111
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 8]
call fcn.0040a1dc
lea eax, [ebp - 8]
mov edx, dword [ebp - 0xc]
call fcn.0040a1dc
lea eax, [ebp - 8]
mov edx, dword [ebp - 8]
call fcn.0040a1dc
lea eax, [ebp - 8]
mov edx, dword [ebp - 0xc]
call fcn.0040a1dc
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 0xc]
call fcn.0040a1dc
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 8]
call fcn.0040a1dc
jmp 0x61915b
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 0xc]
call fcn.0040a1dc
lea eax, [ebp - 8]
mov edx, dword [ebp - 8]
call fcn.0040a1dc
lea eax, [ebp - 8]
mov edx, dword [ebp - 0xc]
call fcn.0040a1dc
lea eax, [ebp - 8]
mov edx, dword [ebp - 8]
call fcn.0040a1dc
lea eax, [ebp - 0xc]
push eax
xor ecx, ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.0040b018
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 0xc]
call fcn.0040a1dc
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 0xc]
call fcn.0040a1dc
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 0xc]
call fcn.0040a1dc
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 2
jne 0x61900b
lea eax, [ebp - 8]
push eax
xor ecx, ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.0040b018
lea eax, [ebp - 8]
mov edx, dword [ebp - 8]
call fcn.0040a1dc
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 0xc]
call fcn.0040a1dc
lea eax, [ebp - 0xc]
push eax
xor ecx, ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.0040b018
lea eax, [ebp - 8]
mov edx, 0x619644
call fcn.0040a1dc
lea eax, [ebp - 0x334]
lea edx, [ebp - 0x24a]
mov ecx, 0x105
call fcn.0040acf8
mov eax, dword [ebp - 0x334]
lea edx, [ebp - 0x330]
call fcn.00421cf0
mov eax, dword [ebp - 0x330]
mov edx, dword [ebp - 4]
call fcn.0041ff78
xor eax, eax
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 8]
mov edx, dword [ebp - 8]
call fcn.0040a1dc
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 8
jne 0x619201
xor eax, eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 7
jge 0x61923c
inc dword [ebp - 0x28]
lea eax, [ebp - 8]
push eax
xor ecx, ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.0040b018
cmp dword [ebp - 0x28], 7
jl 0x619220
lea eax, [ebp - 8]
mov edx, dword [ebp - 0xc]
call fcn.0040a1dc
mov eax, dword [ebp - 0x14]
add eax, 0x44
mov dword [ebp - 0x20], eax
xor eax, eax
mov dword [ebp - 0x10], eax
lea eax, [ebp - 8]
mov edx, dword [ebp - 0xc]
call fcn.0040a1dc
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 5
jne 0x619255
xor eax, eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jge 0x619290
inc dword [ebp - 0x18]
lea eax, [ebp - 8]
push eax
xor ecx, ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.0040b018
cmp dword [ebp - 0x18], 3
jl 0x619274
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x6192a4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x619301
lea eax, [ebp - 0x334]
mov edx, 2
call fcn.00409e14
lea eax, [ebp - 0x32c]
mov edx, 7
call fcn.00409e44
lea eax, [ebp - 0x300]
mov edx, 0x14
call fcn.00409e44
lea eax, [ebp - 0x2b0]
call fcn.00409db4
lea eax, [ebp - 0xc]
mov edx, 2
call fcn.00409e14
ret