Function at 0x40ad5c
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push eax
mov eax, 4
add esp, 0xfffff004
push eax
dec eax
jne 0x40ad65
mov eax, dword [ebp - 4]
add esp, 0xfffffee4
push ebx
push esi
push edi
mov ebx, 0x66e05c
mov esi, 0x53616c
mov eax, fcn.0066f3a8
call fcn.005ea624
call fcn.0042c244
mov dword [0x672f60], eax
mov dl, 1
mov eax, dword [0x536778]
call fcn.0040d0a4
mov dword [0x6a2020], eax
call fcn.0042c0dc
push 0x208
push 0
lea edx, [ebp - 0x338]
push edx
call fcn.005ea254
add esp, 0xc
lea ecx, [ebp - 0x540]
push 0x208
push 0
push ecx
call fcn.005ea254
add esp, 0xc
lea eax, [ebp - 0x338]
push 0x104
push eax
push 0
call fcn.0066f4fe
push 0
call fcn.00670162
mov word [ebp - 0x114], 8
lea edx, [ebp - 4]
push edx
call fcn.0045d6a0
pop ecx
inc dword [ebp - 0x108]
mov word [ebp - 0x114], 0x14
lea ecx, [ebp - 4]
push ecx
call fcn.0045d714
pop ecx
lea eax, [ebp - 0x128]
push eax
lea edx, [ebp - 4]
push edx
call fcn.0045d88c
add esp, 8
push 0x6a2084
push 0x6a2088
call fcn.0042c15c
add esp, 8
cmp dword [ebp - 0x128], 0
je 0x40ae8c
lea ecx, [ebp - 0x12c]
push ecx
lea eax, [ebp - 0x338]
push eax
lea edx, [ebp - 4]
push edx
call fcn.0045d958
add esp, 0xc
cmp dword [ebp - 0x12c], 0
jne 0x40ae8c
lea ecx, [ebx + 0xb6]
push ecx
lea eax, [ebp - 0x338]
push eax
lea edx, [ebp - 4]
push edx
call fcn.0045db00
add esp, 0xc
lea ecx, [ebp - 4]
push ecx
call fcn.0045d870
pop ecx
call fcn.0067016e
mov word [ebp - 0x114], 0x20
lea edx, [ebx + 0xca]
lea eax, [ebp - 0x18]
call fcn.005f5c88
inc dword [ebp - 0x108]
mov eax, dword [eax]
call fcn.0054d0d8
xor edx, edx
mov dl, al
lea eax, [ebp - 0x18]
cmp edx, 1
mov edx, 2
sbb ecx, ecx
neg ecx
push ecx
dec dword [ebp - 0x108]
call fcn.005f5edc
pop ecx
test cl, cl
je 0x40af1a
mov word [ebp - 0x114], 0x2c
lea edx, [ebx + 0xd3]
lea eax, [ebp - 0x1c]
call fcn.005f5c88
inc dword [ebp - 0x108]
mov eax, dword [eax]
call fcn.0054d4f4
dec dword [ebp - 0x108]
lea eax, [ebp - 0x1c]
mov edx, 2
call fcn.005f5edc
mov word [ebp - 0x114], 0x38
lea edx, [ebx + 0xdc]
lea eax, [ebp - 0x20]
call fcn.005f5c88
inc dword [ebp - 0x108]
mov eax, dword [eax]
call fcn.0054d0d8
xor edx, edx
mov dl, al
lea eax, [ebp - 0x20]
cmp edx, 1
mov edx, 2
sbb ecx, ecx
neg ecx
push ecx
dec dword [ebp - 0x108]
call fcn.005f5edc
pop ecx
test cl, cl
je 0x40af99
mov word [ebp - 0x114], 0x44
lea edx, [ebx + 0xe5]
lea eax, [ebp - 0x24]
call fcn.005f5c88
inc dword [ebp - 0x108]
mov eax, dword [eax]
call fcn.0054d4f4
dec dword [ebp - 0x108]
lea eax, [ebp - 0x24]
mov edx, 2
call fcn.005f5edc
mov word [ebp - 0x114], 0x50
lea edx, [ebx + 0xee]
lea eax, [ebp - 0x28]
call fcn.005f5c88
inc dword [ebp - 0x108]
mov eax, dword [eax]
call fcn.0054d0d8
xor edx, edx
mov dl, al
lea eax, [ebp - 0x28]
cmp edx, 1
mov edx, 2
sbb ecx, ecx
neg ecx
push ecx
dec dword [ebp - 0x108]
call fcn.005f5edc
pop ecx
test cl, cl
je 0x40b018
mov word [ebp - 0x114], 0x5c
lea edx, [ebx + 0xf3]
lea eax, [ebp - 0x2c]
call fcn.005f5c88
inc dword [ebp - 0x108]
mov eax, dword [eax]
call fcn.0054d4f4
dec dword [ebp - 0x108]
lea eax, [ebp - 0x2c]
mov edx, 2
call fcn.005f5edc
push 0
call fcn.005f22ec
pop ecx
push eax
call fcn.005eed20
pop ecx
push 0
call fcn.0067018c
lea ecx, [ebp - 0x6d0]
push ecx
push 0x101
call fcn.0066f256
mov word [ebp - 0x114], 0x14
test eax, eax
je 0x40b0e8
mov word [ebp - 0x114], 0x68
xor edx, edx
mov dword [ebp - 0x30], edx
inc dword [ebp - 0x108]
mov word [ebp - 0x114], 0x74
push eax
lea eax, [ebx + 0xf8]
push eax
lea ecx, [ebp - 0x30]
push ecx
call fcn.005f60a0
add esp, 0xc
lea edx, [ebx + 0x10c]
lea eax, [ebp - 0x34]
push 1
mov word [ebp - 0x114], 0x80
call fcn.005f5c88
inc dword [ebp - 0x108]
mov ecx, dword [eax]
push ecx
mov eax, dword [ebp - 0x30]
push eax
call fcn.0042b784
add esp, 0xc
dec dword [ebp - 0x108]
lea eax, [ebp - 0x34]
mov edx, 2
call fcn.005f5edc
mov ecx, dword [ebp + 8]
push ecx
call fcn.0041100c
pop ecx
dec dword [ebp - 0x108]
lea eax, [ebp - 0x30]
mov edx, 2
call fcn.005f5edc
mov word [ebp - 0x114], 0x14
xor ecx, ecx
mov dword [0x6a28d8], ecx
xor eax, eax
mov dword [0x6a28c0], eax
xor edx, edx
mov dword [0x6a28c8], edx
mov dl, 1
mov eax, dword [esi]
call fcn.0040d0f8
mov dword [0x6a28b4], eax
push 0xc
call fcn.005e9430
pop ecx
mov dword [ebp - 0x38], eax
test eax, eax
je 0x40b13d
mov word [ebp - 0x114], 0x98
mov edx, dword [ebp - 0x38]
push edx
call fcn.004524b0
pop ecx
mov word [ebp - 0x114], 0x8c
mov ecx, dword [ebp - 0x38]
jmp 0x40b140
mov ecx, dword [ebp - 0x38]
mov dword [0x6a28e0], ecx
mov dl, 1
mov eax, dword [esi]
call fcn.0040d0f8
mov dword [0x6a28f4], eax
mov dl, 1
mov eax, dword [esi]
call fcn.0040d0f8
mov dword [0x6a28b8], eax
mov dl, 1
mov eax, dword [esi]
call fcn.0040d0f8
mov dword [0x6a28bc], eax
mov dl, 1
mov eax, dword [esi]
call fcn.0040d0f8
mov dword [0x6a28f8], eax
mov dl, 1
mov eax, dword [esi]
call fcn.0040d0f8
mov dword [0x6a28fc], eax
mov dl, 1
mov eax, dword [esi]
call fcn.0040d0f8
mov dword [0x6a2900], eax
mov dl, 1
mov eax, dword [esi]
call fcn.0040d0f8
mov dword [0x6a2908], eax
mov dl, 1
mov eax, dword [esi]
call fcn.0040d0f8
mov dword [0x6a290c], eax
mov dl, 1
mov eax, dword [esi]
call fcn.0040d0f8
mov dword [0x6a2904], eax
mov dl, 1
mov eax, dword [0x536778]
call fcn.0040d0a4
mov dword [0x6a28ec], eax
mov dl, 1
mov eax, dword [0x536778]
call fcn.0040d0a4
mov dword [0x6a28f0], eax
mov dl, 1
mov eax, dword [esi]
call fcn.0040d0f8
mov dword [0x6a2910], eax
mov dl, 1
mov eax, dword [esi]
call fcn.0040d0f8
mov word [ebp - 0x114], 0xa4
mov dword [0x6a2914], eax
call fcn.00670142
mov ecx, 0x15f90
xor edx, edx
div ecx
mov eax, edx
xor edx, edx
mov dword [ebp - 0x3c], edx
lea edx, [ebp - 0x3c]
inc dword [ebp - 0x108]
call fcn.0040d148
lea edx, [ebp - 0x3c]
xor eax, eax
mov dword [ebp - 0x40], eax
lea ecx, [ebp - 0x40]
inc dword [ebp - 0x108]
lea eax, [ebx + 0x118]
call fcn.005f6420
lea edx, [ebp - 0x40]
mov eax, 0x6a2944
call fcn.005f5f0c
dec dword [ebp - 0x108]
lea eax, [ebp - 0x40]
mov edx, 2
call fcn.005f5edc
dec dword [ebp - 0x108]
lea eax, [ebp - 0x3c]
mov edx, 2
call fcn.005f5edc
cmp dword [0x6a2944], 0
je 0x40b28e
mov ecx, dword [0x6a2944]
jmp 0x40b294
lea ecx, [ebx + 0x124]
push ecx
push 1
push 0
push 0
call fcn.0066f37e
mov dword [0x6a28c4], eax
push 0x6a2a00
call fcn.0066f600
push 0x6a2a18
call fcn.0066f600
push 0x6a2954
call fcn.0066f600
push 0x6a2970
call fcn.0066f600
push 0x6a2988
call fcn.0066f600
push 0x6a29a0
call fcn.0066f600
push 0x6a29b8
call fcn.0066f600
push 0x6a29d0
call fcn.0066f600
push 0x6a29e8
call fcn.0066f600
mov eax, dword [ebp + 8]
call fcn.005be79c
mov dword [0x672f80], eax
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x320]
xor edx, edx
mov ecx, dword [eax]
call dword [ecx + 0x60]
xor eax, eax
mov dword [0x6a296c], eax
xor edx, edx
mov dword [0x6a2920], edx
mov ecx, dword [ebp + 8]
push ecx
call fcn.00410f30
pop ecx
xor eax, eax
mov dword [0x6a2c34], 6
mov dword [0x6a2c38], eax
mov word [ebp - 0x114], pe_nt_image_headers32
xor edx, edx
xor ecx, ecx
mov dword [0x6a2930], edx
xor eax, eax
mov dword [0x6a2924], ecx
lea ecx, [ebp - 0x10]
mov dword [0x6a2928], eax
xor edx, edx
mov dword [0x6a292c], edx
push ecx
call fcn.0045c2c8
pop ecx
inc dword [ebp - 0x108]
mov word [ebp - 0x114], 0x14
push 0x400
push 0
lea eax, [ebp - 0xed0]
push eax
call fcn.005ea2e0
add esp, 0xc
mov word [0x6a2918], 0x412e
push 0
push 0x800
lea edx, [ebp - 0x16d0]
push edx
call fcn.005ea254
add esp, 0xc
lea ecx, [ebp - 0x16d0]
lea eax, [ebx + 0x146]
lea edx, [ebx + 0x136]
push 0x6a26a4
push 0x400
push ecx
push eax
push edx
lea ecx, [ebx + 0x126]
push ecx
call fcn.0066f51c
mov word [ebp - 0x114], 0xbc
lea edx, [ebp - 0x16d0]
lea eax, [ebp - 0x44]
call fcn.005f67d8
mov edx, eax
inc dword [ebp - 0x108]
mov eax, 0x6a291c
call fcn.005f6840
dec dword [ebp - 0x108]
lea eax, [ebp - 0x44]
mov edx, 2
call fcn.005f6810
push 0x6a291c
call fcn.0041b2e0
pop ecx
mov ecx, dword [0x6a291c]
push ecx
mov eax, dword [ebp + 8]
push eax
call fcn.00410414
add esp, 8
lea edx, [ebp - 0xed0]
lea ecx, [ebx + 0x170]
lea eax, [ebx + 0x158]
push 0x6a26a4
push 0x400
push edx
push ecx
push eax
lea edx, [ebx + 0x148]
push edx
call fcn.0066f51c
mov word [ebp - 0x114], 0xc8
lea edx, [ebp - 0xed0]
lea eax, [ebp - 0x14]
call fcn.005f67d8
inc dword [ebp - 0x108]
lea ecx, [ebp - 0xed0]
mov word [ebp - 0x114], 0x14
push 0x6a26a4
push 0x400
push ecx
lea eax, [ebx + 0x194]
push eax
lea edx, [ebx + 0x182]
push edx
lea ecx, [ebx + 0x172]
push ecx
call fcn.0066f51c
mov word [ebp - 0x114], 0xd4
lea edx, [ebp - 0xed0]
lea eax, [ebp - 0x48]
call fcn.005f67d8
mov edx, eax
inc dword [ebp - 0x108]
mov eax, 0x6a2948
call fcn.005f6840
dec dword [ebp - 0x108]
lea eax, [ebp - 0x48]
mov edx, 2
call fcn.005f6810
push 0x6a26a4
push 0x49c
lea ecx, [ebx + 0x1a6]
push ecx
lea eax, [ebx + 0x196]
push eax
call fcn.0066f510
mov word [0x672f94], ax
push 0x6a26a4
push 0x400
lea edx, [ebp - 0xed0]
push edx
lea ecx, [ebx + 0x1d8]
push ecx
lea eax, [ebx + 0x1c4]
push eax
lea edx, [ebx + 0x1b4]
push edx
call fcn.0066f51c
mov word [ebp - 0x114], 0xe0
lea edx, [ebp - 0xed0]
lea eax, [ebp - 0x4c]
call fcn.005f67d8
mov edx, eax
inc dword [ebp - 0x108]
mov eax, 0x6a294c
call fcn.005f6840
dec dword [ebp - 0x108]
lea eax, [ebp - 0x4c]
mov edx, 2
call fcn.005f6810
push 0x6a26a4
push 0
lea ecx, [ebx + 0x1ea]
push ecx
lea eax, [ebx + 0x1da]
push eax
call fcn.0066f510
mov word [0x672f9c], ax
push 0x6a26a4
push 0x400
lea edx, [ebp - 0xed0]
push edx
lea ecx, [ebx + 0x214]
push ecx
lea eax, [ebx + 0x20a]
push eax
lea edx, [ebx + 0x1fa]
push edx
call fcn.0066f51c
mov word [ebp - 0x114], 0xec
lea edx, [ebp - 0xed0]
lea eax, [ebp - 0x50]
call fcn.005f5d94
mov edx, eax
inc dword [ebp - 0x108]
mov eax, 0x6a293c
call fcn.005f5f0c
dec dword [ebp - 0x108]
lea eax, [ebp - 0x50]
mov edx, 2
call fcn.005f5edc
push 0x6a26a4
push 0x400
lea ecx, [ebp - 0xed0]
push ecx
lea eax, [ebx + 0x22e]
push eax
lea edx, [ebx + 0x226]
push edx
lea ecx, [ebx + 0x216]
push ecx
call fcn.0066f51c
push 0x6a26a4
push 1
lea eax, [ebx + 0x240]
push eax
lea edx, [ebx + 0x230]
push edx
call fcn.0066f510
mov dword [0x672fcc], eax
lea ecx, [ebp - 0xed0]
push ecx
call fcn.005ea550
pop ecx
test eax, eax
je 0x40b6cf
mov word [ebp - 0x114], 0xf8
lea edx, [ebp - 0xed0]
lea eax, [ebp - 0x54]
call fcn.005f5d94
inc dword [ebp - 0x108]
lea edx, [ebp - 0x58]
mov ecx, dword [eax]
xor eax, eax
push ecx
mov dword [ebp - 0x58], eax
push edx
inc dword [ebp - 0x108]
call fcn.0041cb70
add esp, 8
lea edx, [ebp - 0x58]
mov eax, 0x6a2940
call fcn.005f5f0c
dec dword [ebp - 0x108]
lea eax, [ebp - 0x58]
mov edx, 2
call fcn.005f5edc
dec dword [ebp - 0x108]
lea eax, [ebp - 0x54]
mov edx, 2
call fcn.005f5edc
mov ecx, dword [0x6a196c]
mov eax, dword [ecx]
push eax
call fcn.004319b0
pop ecx
push 0x6a26a4
push 1
lea edx, [ebx + 0x26e]
push edx
lea ecx, [ebx + 0x25e]
push ecx
call fcn.0066f510
mov dword [0x672f70], eax
push 0x6a26a4
push 0
lea eax, [ebx + 0x290]
push eax
lea edx, [ebx + 0x280]
push edx
call fcn.0066f510
mov dword [0x6a2c40], eax
push 0x6a26a4
push 0
lea ecx, [ebx + 0x2b8]
push ecx
lea eax, [ebx + 0x2a8]
push eax
call fcn.0066f510
mov dword [0x6a2c44], eax
push 0x6a26a4
push 0
lea edx, [ebx + 0x2e2]
push edx
lea ecx, [ebx + 0x2d2]
push ecx
call fcn.0066f510
mov dword [0x6a2c48], eax
push 0x6a26a4
push 0
lea eax, [ebx + 0x304]
push eax
lea edx, [ebx + 0x2f4]
push edx
call fcn.0066f510
mov dword [0x6a2c4c], eax
push 0x6a26a4
push 0
lea ecx, [ebx + 0x326]
push ecx
lea eax, [ebx + 0x316]
push eax
call fcn.0066f510
mov dword [0x6a2c50], eax
push 0x6a26a4
push 0
lea edx, [ebx + 0x348]
push edx
lea ecx, [ebx + 0x338]
push ecx
call fcn.0066f510
mov dword [0x672fc4], eax
push 0x6a26a4
push 0
lea eax, [ebx + 0x36c]
push eax
lea edx, [ebx + 0x35c]
push edx
call fcn.0066f510
mov dword [0x6a2c54], eax
push 0x6a26a4
push 0x400
lea ecx, [ebp - 0xed0]
push ecx
lea eax, [ebx + 0x3b2]
push eax
lea edx, [ebx + 0x394]
push edx
lea ecx, [ebx + 0x384]
push ecx
call fcn.0066f51c
mov word [ebp - 0x114], 0x104
lea edx, [ebp - 0xed0]
lea eax, [ebp - 0x5c]
call fcn.005f67d8
mov edx, eax
inc dword [ebp - 0x108]
lea eax, [ebp - 0x60]
call fcn.005f5cfc
inc dword [ebp - 0x108]
lea edx, [ebp - 0x60]
mov eax, 0x6a2c58
call fcn.005f5f0c
dec dword [ebp - 0x108]
lea eax, [ebp - 0x60]
mov edx, 2
call fcn.005f5edc
dec dword [ebp - 0x108]
lea eax, [ebp - 0x5c]
mov edx, 2
call fcn.005f6810
push 0x6a26a4
push 0
lea ecx, [ebx + 0x3c4]
push ecx
lea eax, [ebx + 0x3b4]
push eax
call fcn.0066f510
mov dword [0x6a2c5c], eax
push 0x6a26a4
push 0x400
lea edx, [ebp - 0xed0]
push edx
lea ecx, [ebx + 0x412]
push ecx
lea eax, [ebx + 0x3f0]
push eax
lea edx, [ebx + 0x3e0]
push edx
call fcn.0066f51c
mov word [ebp - 0x114], 0x110
lea edx, [ebp - 0xed0]
lea eax, [ebp - 0x64]
call fcn.005f67d8
mov edx, eax
inc dword [ebp - 0x108]
lea eax, [ebp - 0x68]
call fcn.005f5cfc
inc dword [ebp - 0x108]
lea edx, [ebp - 0x68]
mov eax, 0x6a2c60
call fcn.005f5f0c
dec dword [ebp - 0x108]
lea eax, [ebp - 0x68]
mov edx, 2
call fcn.005f5edc
dec dword [ebp - 0x108]
lea eax, [ebp - 0x64]
mov edx, 2
call fcn.005f6810
push 0x6a26a4
push 0
lea ecx, [ebx + 0x424]
push ecx
lea eax, [ebx + 0x414]
push eax
call fcn.0066f510
mov dword [0x6a2c6c], eax
call fcn.0041c560
cmp al, 0xb
je 0x40b93c
call fcn.0041c560
cmp al, 0xc
jne 0x40b95d
call fcn.0042c0b8
test eax, eax
je 0x40b95d
mov ecx, dword [ebp + 8]
xor edx, edx
mov dword [0x6a2c40], edx
xor edx, edx
mov eax, dword [ecx + 0x430]
mov ecx, dword [eax]
call dword [ecx + 0x64]
call fcn.0040aaf4
test eax, eax
je 0x40b9e0
call fcn.0042c0b8
test eax, eax
je 0x40b981
call fcn.0041c560
cmp al, 0xb
je 0x40b99d
call fcn.0041c560
cmp al, 0xc
je 0x40b99d
mov dword [0x6a2c40], 1
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x430]
xor edx, edx
mov ecx, dword [eax]
call dword [ecx + 0x64]
jmp 0x40b9e0
mov word [ebp - 0x114], 0x11c
lea edx, [ebx + 0x43e]
lea eax, [ebp - 0x6c]
call fcn.005f6728
inc dword [ebp - 0x108]
mov ecx, dword [eax]
mov eax, dword [0x6a1980]
push ecx
mov edx, dword [eax]
push edx
call fcn.00453884
add esp, 8
dec dword [ebp - 0x108]
lea eax, [ebp - 0x6c]
mov edx, 2
call fcn.005f6810
call fcn.0041c560
cmp al, 0xb
je 0x40b9f2
call fcn.0041c560
cmp al, 0xc
jne 0x40ba61
call fcn.0041de5c
test eax, eax
je 0x40ba3c
mov eax, dword [0x6a1980]
mov ecx, dword [0x6a2e48]
push ecx
mov edx, dword [eax]
push edx
call fcn.00453808
add esp, 8
test eax, eax
je 0x40ba3c
call fcn.0041df88
mov eax, dword [0x6a1980]
mov ecx, dword [0x6a2e4c]
push ecx
mov edx, dword [eax]
push edx
call fcn.00453884
add esp, 8
mov ecx, dword [ebp + 8]
push ecx
call fcn.0041100c
pop ecx
cmp dword [0x6a2c40], 0
jne 0x40ba61
xor eax, eax
mov dword [0x6a2c50], eax
mov edx, dword [0x6a1978]
mov ecx, dword [edx]
mov eax, dword [ecx + 0x2fc]
xor edx, edx
mov ecx, dword [eax]
call dword [ecx + 0x64]
call fcn.00426c48
cmp dword [0x672fa0], 0
jne 0x40ba76
xor eax, eax
mov dword [0x6a2c40], eax
cmp dword [0x6a2c40], 0
jne 0x40c4e5
push 0x400
push 0
lea edx, [ebp - 0x1ed0]
push edx
call fcn.005ea254
add esp, 0xc
lea ecx, [ebp - 0x20d8]
push 0x104
push ecx
push 0
call fcn.0066f4fe
lea eax, [ebp - 0x22e0]
push eax
lea edx, [ebp - 0x20d8]
push edx
call fcn.0041b3dc
add esp, 8
lea edx, [ebx + 0x466]
mov eax, 0x6a28b0
call fcn.005f686c
mov word [ebp - 0x114], 0x128
lea edx, [ebx + 0x47d]
lea eax, [ebp - 0x74]
call fcn.005f6728
inc dword [ebp - 0x108]
xor eax, eax
mov dword [ebp - 0x78], eax
mov eax, 0x6a28b0
inc dword [ebp - 0x108]
lea edx, [ebp - 0x74]
lea ecx, [ebp - 0x78]
call fcn.005f6988
lea edx, [ebp - 0x78]
mov eax, 0x6a28b0
call fcn.005f6840
dec dword [ebp - 0x108]
lea eax, [ebp - 0x78]
mov edx, 2
call fcn.005f6810
dec dword [ebp - 0x108]
lea eax, [ebp - 0x74]
mov edx, 2
call fcn.005f6810
push 0x6a26a4
push 0x400
lea ecx, [ebp - 0xed0]
push ecx
lea eax, [ebx + 0x4aa]
push eax
lea edx, [ebx + 0x49a]
push edx
lea ecx, [ebx + 0x48a]
push ecx
call fcn.0066f51c
mov word [ebp - 0x114], 0x134
lea edx, [ebp - 0xed0]
lea eax, [ebp - 0x7c]
call fcn.005f67d8
inc dword [ebp - 0x108]
mov ecx, dword [eax]
push ecx
call fcn.0041f218
pop ecx
dec dword [ebp - 0x108]
lea eax, [ebp - 0x7c]
mov edx, 2
call fcn.005f6810
push 0x104
lea ecx, [ebp - 0x1ed0]
push ecx
mov eax, dword [0x6a28b0]
push eax
call fcn.0066f3ea
test eax, eax
jne 0x40bbf3
call fcn.0041c560
cmp al, 6
jne 0x40bbdd
lea edx, [ebx + 0x4b0]
push edx
lea ecx, [ebp - 0x1ed0]
push ecx
call fcn.005ea5a8
add esp, 8
jmp 0x40bbf3
lea eax, [ebx + 0x4ee]
push eax
lea edx, [ebp - 0x1ed0]
push edx
call fcn.005ea5a8
add esp, 8
mov word [ebp - 0x114], 0x140
lea edx, [ebp - 0x1ed0]
lea eax, [ebp - 0x80]
call fcn.005f5d94
inc dword [ebp - 0x108]
mov eax, dword [eax]
call fcn.0054d0d8
push eax
dec dword [ebp - 0x108]
lea eax, [ebp - 0x80]
mov edx, 2
call fcn.005f5edc
pop ecx
test cl, cl
je 0x40bceb
push 0x400
push 0
lea eax, [ebp - 0x2ae0]
push eax
call fcn.005ea254
add esp, 0xc
lea edx, [ebp - 0x32e0]
push 0x400
push 0
push edx
call fcn.005ea254
add esp, 0xc
lea ecx, [ebp - 0x1ed0]
push ecx
lea eax, [ebp - 0x2ae0]
push eax
call fcn.005ea568
add esp, 8
lea edx, [ebp - 0x1ed0]
push edx
lea ecx, [ebp - 0x32e0]
push ecx
call fcn.005ea568
add esp, 8
lea eax, [ebx + 0x530]
push eax
lea edx, [ebp - 0x32e0]
push edx
call fcn.005ea5a8
add esp, 8
lea ecx, [ebp - 0x32e0]
push ecx
call fcn.0066f3c6
mov word [ebp - 0x114], 0x14c
lea edx, [ebp - 0x2ae0]
lea eax, [ebp - 0x84]
call fcn.005f5d94
inc dword [ebp - 0x108]
mov eax, dword [eax]
call fcn.0054d510
dec dword [ebp - 0x108]
lea eax, [ebp - 0x84]
mov edx, 2
call fcn.005f5edc
mov word [ebp - 0x114], 0x158
lea edx, [ebp - 0x1ed0]
lea eax, [ebp - 0x88]
call fcn.005f5d94
inc dword [ebp - 0x108]
mov eax, dword [eax]
call fcn.0054d0c8
xor edx, edx
mov dl, al
lea eax, [ebp - 0x88]
cmp edx, 1
mov edx, 2
sbb ecx, ecx
neg ecx
push ecx
dec dword [ebp - 0x108]
call fcn.005f5edc
pop ecx
test cl, cl
je 0x40bd4e
push 1
lea eax, [ebp - 0x1ed0]
push eax
lea edx, [ebx + 0x54c]
push edx
call fcn.0066f36c
xor ecx, ecx
mov dword [0x6a204c], ecx
xor eax, eax
mov dword [0x6a2050], eax
xor edx, edx
mov dword [0x6a2054], edx
xor ecx, ecx
mov dword [0x6a2058], ecx
xor eax, eax
mov dword [0x6a2060], eax
xor edx, edx
mov dword [0x6a2068], edx
xor ecx, ecx
mov dword [0x6a2080], ecx
xor eax, eax
mov dword [0x6a206c], eax
xor edx, edx
mov dword [0x6a2070], edx
xor ecx, ecx
mov dword [0x6a2074], ecx
xor eax, eax
mov dword [0x6a2078], eax
xor edx, edx
mov dword [0x6a207c], edx
lea ecx, [ebp - 0x1ed0]
push ecx
call fcn.0066f642
mov dword [0x672f7c], eax
cmp dword [0x672f7c], 0
je 0x40bf2b
lea eax, [ebx + 0x566]
push eax
mov edx, dword [0x672f7c]
push edx
call fcn.0066f522
mov dword [0x6a204c], eax
lea ecx, [ebx + 0x572]
push ecx
mov eax, dword [0x672f7c]
push eax
call fcn.0066f522
mov dword [0x6a2050], eax
lea edx, [ebx + 0x57e]
push edx
mov ecx, dword [0x672f7c]
push ecx
call fcn.0066f522
mov dword [0x6a2054], eax
lea eax, [ebx + 0x58c]
push eax
mov edx, dword [0x672f7c]
push edx
call fcn.0066f522
mov dword [0x6a2058], eax
lea ecx, [ebx + 0x597]
push ecx
mov eax, dword [0x672f7c]
push eax
call fcn.0066f522
mov dword [0x6a2060], eax
lea edx, [ebx + 0x59f]
push edx
mov ecx, dword [0x672f7c]
push ecx
call fcn.0066f522
mov dword [0x6a2064], eax
lea eax, [ebx + 0x5af]
push eax
mov edx, dword [0x672f7c]
push edx
call fcn.0066f522
mov dword [0x6a2068], eax
lea ecx, [ebx + 0x5b9]
push ecx
mov eax, dword [0x672f7c]
push eax
call fcn.0066f522
mov dword [0x6a206c], eax
lea edx, [ebx + 0x5c3]
push edx
mov ecx, dword [0x672f7c]
push ecx
call fcn.0066f522
mov dword [0x6a2070], eax
lea eax, [ebx + 0x5d5]
push eax
mov edx, dword [0x672f7c]
push edx
call fcn.0066f522
mov dword [0x6a2074], eax
lea ecx, [ebx + 0x5dd]
push ecx
mov eax, dword [0x672f7c]
push eax
call fcn.0066f522
mov dword [0x6a2078], eax
lea edx, [ebx + 0x5e4]
push edx
mov ecx, dword [0x672f7c]
push ecx
call fcn.0066f522
mov dword [0x6a207c], eax
lea eax, [ebx + 0x5f0]
push eax
mov edx, dword [0x672f7c]
push edx
call fcn.0066f522
mov dword [0x6a2080], eax
lea ecx, [ebx + 0x5f9]
push ecx
mov eax, dword [0x672f7c]
push eax
call fcn.0066f522
mov dword [0x6a2494], eax
lea edx, [ebx + 0x604]
push edx
mov ecx, dword [0x672f7c]
push ecx
call fcn.0066f522
mov dword [0x6a2498], eax
cmp dword [0x6a2058], 0
jne 0x40bf4b
mov eax, dword [ebp + 8]
push eax
call fcn.0041100c
pop ecx
push 0
call fcn.0066f47a
push eax
call fcn.0066f726
push 0x104
push 0
lea edx, [ebp - 0x34e8]
push edx
call fcn.005ea254
add esp, 0xc
lea ecx, [ebp - 0x1ed0]
push ecx
call fcn.005ea550
pop ecx
push eax
lea eax, [ebp - 0x1ed0]
push eax
lea edx, [ebp - 0x34e8]
push edx
call fcn.005ea5cc
add esp, 0xc
lea ecx, [ebx + 0x612]
push ecx
lea eax, [ebp - 0x34e8]
push eax
call fcn.005ea5a8
add esp, 8
push 0
lea edx, [ebp - 0x34e8]
push edx
call fcn.005eba40
add esp, 8
test eax, eax
jne 0x40bfbc
lea ecx, [ebp - 0x34e8]
push ecx
call fcn.0066f3c6
mov word [ebp - 0x114], 0x170
lea edx, [ebx + 0x61c]
lea eax, [ebp - 0x90]
call fcn.005f67d8
inc dword [ebp - 0x108]
lea ecx, [ebp - 0x90]
push ecx
xor eax, eax
mov dword [ebp - 0x8c], eax
lea edx, [ebp - 0x8c]
push edx
inc dword [ebp - 0x108]
call fcn.0042b474
pop ecx
xor edx, edx
mov dword [ebp - 0x70], edx
lea ecx, [ebp - 0x70]
inc dword [ebp - 0x108]
lea eax, [ebp - 0x8c]
pop edx
call fcn.005f6988
dec dword [ebp - 0x108]
lea eax, [ebp - 0x90]
mov edx, 2
call fcn.005f6810
dec dword [ebp - 0x108]
lea eax, [ebp - 0x8c]
mov edx, 2
call fcn.005f6810
mov word [ebp - 0x114], 0x164
mov eax, dword [ebp - 0x70]
push eax
call fcn.0066f642
mov esi, eax
test esi, esi
je 0x40c082
lea eax, [ebx + 0x636]
push eax
push esi
call fcn.0066f522
mov dword [0x6a205c], eax
cmp dword [0x6a205c], 0
je 0x40c082
call dword [0x6a205c]
mov dword [0x6a2c68], eax
cmp dword [0x6a205c], 0
je 0x40c26d
call dword [0x6a205c]
mov edi, eax
call dword [0x6a2058]
cmp edi, eax
jle 0x40c26d
push esi
call fcn.0066f432
lea eax, [ebp - 0x34e8]
push eax
lea edx, [ebp - 0x1ed0]
push edx
call fcn.0066f66c
mov edi, eax
xor esi, esi
jmp 0x40c229
lea eax, [ebp - 0x1ed0]
push eax
call fcn.005ea550
pop ecx
push eax
lea edx, [ebp - 0x1ed0]
push edx
lea ecx, [ebp - 0x34e8]
push ecx
call fcn.005ea5cc
add esp, 0xc
mov word [ebp - 0x114], 0x188
call fcn.00670142
mov ecx, 0x2710
xor edx, edx
div ecx
mov eax, edx
xor edx, edx
mov dword [ebp - 0x98], edx
lea edx, [ebp - 0x98]
inc dword [ebp - 0x108]
call fcn.0040d148
lea eax, [ebp - 0x98]
push eax
lea edx, [ebx + 0x641]
lea eax, [ebp - 0x9c]
call fcn.005f5c88
inc dword [ebp - 0x108]
xor eax, eax
mov dword [ebp - 0xa0], eax
lea edx, [ebp - 0x9c]
inc dword [ebp - 0x108]
lea ecx, [ebp - 0xa0]
pop eax
call fcn.005f5f34
lea edx, [ebp - 0xa0]
lea eax, [ebp - 0x94]
call fcn.005f679c
inc dword [ebp - 0x108]
dec dword [ebp - 0x108]
lea eax, [ebp - 0xa0]
mov edx, 2
call fcn.005f5edc
dec dword [ebp - 0x108]
lea eax, [ebp - 0x9c]
mov edx, 2
call fcn.005f5edc
dec dword [ebp - 0x108]
lea eax, [ebp - 0x98]
mov edx, 2
call fcn.005f5edc
mov word [ebp - 0x114], 0x17c
mov ecx, dword [ebp - 0x94]
push ecx
lea eax, [ebp - 0x34e8]
push eax
call fcn.005ea5a8
add esp, 8
push 0
lea edx, [ebp - 0x34e8]
push edx
call fcn.005eba40
add esp, 8
test eax, eax
jne 0x40c1f4
lea ecx, [ebp - 0x34e8]
push ecx
call fcn.0066f3c6
lea eax, [ebp - 0x34e8]
push eax
lea edx, [ebp - 0x1ed0]
push edx
call fcn.0066f66c
mov edi, eax
inc esi
dec dword [ebp - 0x108]
lea eax, [ebp - 0x94]
mov edx, 2
call fcn.005f6810
mov word [ebp - 0x114], 0x164
test edi, edi
jne 0x40c236
cmp esi, 0x64
jl 0x40c0c7
push 1
lea ecx, [ebp - 0x1ed0]
push ecx
lea eax, [ebx + 0x646]
push eax
call fcn.0066f36c
mov ecx, dword [0x6a1980]
mov edx, dword [0x6a2d20]
push edx
mov eax, dword [ecx]
push eax
call fcn.00453884
add esp, 8
mov edx, dword [ebp + 8]
push edx
call fcn.0041100c
pop ecx
cmp dword [0x6a204c], 0
je 0x40c2d9
cmp dword [0x6a2050], 0
je 0x40c2d9
cmp dword [0x6a2054], 0
je 0x40c2d9
cmp dword [0x6a2058], 0
je 0x40c2d9
cmp dword [0x6a2060], 0
je 0x40c2d9
cmp dword [0x6a2068], 0
je 0x40c2d9
cmp dword [0x6a206c], 0
je 0x40c2d9
cmp dword [0x6a2074], 0
je 0x40c2d9
cmp dword [0x6a2078], 0
je 0x40c2d9
cmp dword [0x6a207c], 0
je 0x40c2d9
cmp dword [0x6a2080], 0
je 0x40c2d9
cmp dword [0x6a2494], 0
jne 0x40c334
mov eax, dword [0x6a1980]
mov ecx, dword [0x6a2d30]
push ecx
mov edx, dword [eax]
push edx
call fcn.00453884
add esp, 8
mov eax, dword [0x6a1980]
mov ecx, dword [0x6a2f5c]
push ecx
mov edx, dword [eax]
push edx
call fcn.00453808
add esp, 8
test eax, eax
je 0x40c32a
push 0x6a26a4
lea ecx, [ebx + 0x688]
push ecx
lea eax, [ebx + 0x670]
push eax
lea edx, [ebx + 0x660]
push edx
call fcn.0066f792
mov ecx, dword [ebp + 8]
push ecx
call fcn.0041100c
pop ecx
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x320]
mov edx, 1
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov word [ebp - 0x114], 0x194
mov edx, 0x6a28b0
lea eax, [ebp - 0xa4]
call fcn.005f5cfc
inc dword [ebp - 0x108]
mov ecx, dword [eax]
push ecx
lea eax, [ebp - 0x10]
push eax
call fcn.0045c414
add esp, 8
test eax, eax
sete dl
and edx, 1
lea eax, [ebp - 0xa4]
push edx
mov edx, 2
dec dword [ebp - 0x108]
call fcn.005f5edc
pop ecx
test cl, cl
je 0x40c41f
mov word [ebp - 0x114], 0x1ac
mov edx, 0x6a28b0
lea eax, [ebp - 0xa8]
call fcn.005f5cfc
inc dword [ebp - 0x108]
mov ecx, dword [eax]
push ecx
lea eax, [ebp - 0x10]
push eax
call fcn.0045c6f8
add esp, 8
mov esi, eax
dec dword [ebp - 0x108]
lea eax, [ebp - 0xa8]
mov edx, 2
call fcn.005f5edc
mov word [ebp - 0x114], 0x1a0
test esi, esi
jg 0x40c416
call fcn.0041d00c
mov eax, dword [0x6a1980]
mov ecx, dword [0x6a2d38]
push ecx
mov edx, dword [eax]
push edx
call fcn.00453884
add esp, 8
mov ecx, dword [ebp + 8]
push ecx
call fcn.0041100c
pop ecx
mov word [ebp - 0x114], 0x164
cmp dword [0x6a2498], 0
je 0x40c431
push 0
call dword [0x6a2498]
pop ecx
cmp dword [0x6a2054], 0
je 0x40c448
lea eax, [ebp - 0x22e0]
push eax
call dword [0x6a2054]
pop ecx
cmp dword [0x6a2070], 0
je 0x40c45f
mov edx, dword [0x672fcc]
push edx
call dword [0x6a2070]
pop ecx
cmp dword [0x6a207c], 0
je 0x40c477
push 0
push 0
push 0
call dword [0x6a207c]
add esp, 0xc
cmp dword [0x6a2050], 0
je 0x40c489
push 1
call dword [0x6a2050]
pop ecx
cmp dword [0x6a2060], 0
je 0x40c4a2
mov eax, dword [ebp + 8]
call fcn.005be79c
push eax
call dword [0x6a2060]
pop ecx
cmp dword [0x6a2064], 0
je 0x40c4c4
lea edx, [ebx + 0x68d]
push edx
lea ecx, [ebx + 0x68c]
push ecx
push 0
call dword [0x6a2064]
add esp, 0xc
dec dword [ebp - 0x108]
lea eax, [ebp - 0x70]
mov edx, 2
call fcn.005f6810
mov word [ebp - 0x114], 0x14
jmp 0x40cb2d
mov ecx, dword [0x6a196c]
mov eax, dword [ecx]
mov eax, dword [eax + 0x30c]
mov dl, 2
mov ecx, dword [eax]
call dword [ecx + 0x114]
mov eax, dword [0x6a196c]
mov edx, dword [eax]
mov eax, dword [edx + 0x338]
mov dl, 2
mov ecx, dword [eax]
call dword [ecx + 0x114]
push 0x1c
call fcn.005e9430
pop ecx
mov dword [ebp - 0xb0], eax
test eax, eax
je 0x40c57d
mov word [ebp - 0x114], 0x1c4
mov edx, dword [ebp - 0xb0]
xor ecx, ecx
mov dword [edx], ecx
inc dword [ebp - 0x108]
mov esi, dword [ebp - 0xb0]
add esi, 4
xor eax, eax
mov dword [esi], eax
inc dword [ebp - 0x108]
mov edi, dword [ebp - 0xb0]
add edi, 0x18
xor eax, eax
mov dword [edi], eax
inc dword [ebp - 0x108]
add dword [ebp - 0x108], 0xfffffffd
mov word [ebp - 0x114], 0x1b8
mov edx, dword [ebp - 0xb0]
jmp 0x40c583
mov edx, dword [ebp - 0xb0]
mov word [ebp - 0x114], 0x14
push 0xa
lea eax, [ebp - 0x10]
push eax
call fcn.0045d5bc
mov word [ebp - 0x114], 0x1d0
xor ecx, ecx
add esp, 8
mov dword [ebp - 0xac], ecx
inc dword [ebp - 0x108]
mov word [ebp - 0x114], 0x1dc
call fcn.0042c0b8
test eax, eax
je 0x40c75d
push 0
push 0
mov word [ebp - 0x114], 0x1e8
lea edx, [ebx + 0x68e]
lea eax, [ebp - 0xb4]
call fcn.005f6728
inc dword [ebp - 0x108]
mov ecx, dword [eax]
push ecx
call fcn.0042bab0
add esp, 0xc
dec dword [ebp - 0x108]
lea eax, [ebp - 0xb4]
mov edx, 2
call fcn.005f6810
push 0
push 1
mov word [ebp - 0x114], 0x1f4
lea edx, [ebx + 0x6a3]
lea eax, [ebp - 0xb8]
call fcn.005f6728
inc dword [ebp - 0x108]
mov ecx, dword [eax]
push ecx
call fcn.0042bab0
add esp, 0xc
dec dword [ebp - 0x108]
lea eax, [ebp - 0xb8]
mov edx, 2
call fcn.005f6810
mov word [ebp - 0x114], 0x200
xor ecx, ecx
mov eax, dword [0x6a1d38]
mov dword [ebp - 0xbc], ecx
lea edx, [ebp - 0xbc]
inc dword [ebp - 0x108]
mov eax, dword [eax]
call fcn.005a6b28
lea eax, [ebp - 0xbc]
mov eax, dword [eax]
xor edx, edx
mov dword [ebp - 0xc0], edx
lea edx, [ebp - 0xc0]
inc dword [ebp - 0x108]
call fcn.0054d350
lea eax, [ebp - 0xc0]
push eax
lea edx, [ebx + 0x6b8]
lea eax, [ebp - 0xc4]
call fcn.005f5c88
inc dword [ebp - 0x108]
xor eax, eax
mov dword [ebp - 0xc8], eax
lea edx, [ebp - 0xc4]
inc dword [ebp - 0x108]
lea ecx, [ebp - 0xc8]
pop eax
call fcn.005f5f34
lea edx, [ebp - 0xc8]
mov ecx, dword [edx]
push ecx
push 0x6a2024
call fcn.0040d1b4
add esp, 8
dec dword [ebp - 0x108]
lea eax, [ebp - 0xc8]
mov edx, 2
call fcn.005f5edc
dec dword [ebp - 0x108]
lea eax, [ebp - 0xc4]
mov edx, 2
call fcn.005f5edc
dec dword [ebp - 0x108]
lea eax, [ebp - 0xc0]
mov edx, 2
call fcn.005f5edc
dec dword [ebp - 0x108]
lea eax, [ebp - 0xbc]
mov edx, 2
call fcn.005f5edc
lea edx, [ebx + 0x6c3]
lea eax, [ebp - 0xac]
call fcn.005f686c
jmp 0x40c8ee
push 0
push 0
mov word [ebp - 0x114], 0x20c
lea edx, [ebx + 0x6d6]
lea eax, [ebp - 0xcc]
call fcn.005f6728
inc dword [ebp - 0x108]
mov ecx, dword [eax]
push ecx
call fcn.0042bab0
add esp, 0xc
dec dword [ebp - 0x108]
lea eax, [ebp - 0xcc]
mov edx, 2
call fcn.005f6810
push 0
push 1
mov word [ebp - 0x114], 0x218
lea edx, [ebx + 0x6eb]
lea eax, [ebp - 0xd0]
call fcn.005f6728
inc dword [ebp - 0x108]
mov ecx, dword [eax]
push ecx
call fcn.0042bab0
add esp, 0xc
dec dword [ebp - 0x108]
lea eax, [ebp - 0xd0]
mov edx, 2
call fcn.005f6810
mov word [ebp - 0x114], 0x224
xor ecx, ecx
mov eax, dword [0x6a1d38]
mov dword [ebp - 0xd4], ecx
lea edx, [ebp - 0xd4]
inc dword [ebp - 0x108]
mov eax, dword [eax]
call fcn.005a6b28
lea eax, [ebp - 0xd4]
mov eax, dword [eax]
xor edx, edx
mov dword [ebp - 0xd8], edx
lea edx, [ebp - 0xd8]
inc dword [ebp - 0x108]
call fcn.0054d350
lea eax, [ebp - 0xd8]
push eax
lea edx, [ebx + 0x700]
lea eax, [ebp - 0xdc]
call fcn.005f5c88
inc dword [ebp - 0x108]
xor eax, eax
mov dword [ebp - 0xe0], eax
lea edx, [ebp - 0xdc]
inc dword [ebp - 0x108]
lea ecx, [ebp - 0xe0]
pop eax
call fcn.005f5f34
lea edx, [ebp - 0xe0]
mov ecx, dword [edx]
push ecx
push 0x6a2024
call fcn.0040d1b4
add esp, 8
dec dword [ebp - 0x108]
lea eax, [ebp - 0xe0]
mov edx, 2
call fcn.005f5edc
dec dword [ebp - 0x108]
lea eax, [ebp - 0xdc]
mov edx, 2
call fcn.005f5edc
dec dword [ebp - 0x108]
lea eax, [ebp - 0xd8]
mov edx, 2
call fcn.005f5edc
dec dword [ebp - 0x108]
lea eax, [ebp - 0xd4]
mov edx, 2
call fcn.005f5edc
lea edx, [ebx + 0x70b]
lea eax, [ebp - 0xac]
call fcn.005f686c
push 0x6a2024
call fcn.00457ccc
pop ecx
mov esi, eax
mov word [ebp - 0x114], 0x1dc
cmp esi, 1
jne 0x40c9f8
mov word [ebp - 0x114], 0x23c
lea edx, [ebx + 0x71e]
lea eax, [ebp - 0xe4]
call fcn.005f6728
inc dword [ebp - 0x108]
lea ecx, [ebp - 0x3ce8]
mov word [ebp - 0x114], 0x230
push 0x400
push 0
push ecx
call fcn.005ea254
add esp, 0xc
lea eax, [ebp - 0x3ce8]
push 0x400
push eax
mov edx, dword [ebp - 0xe4]
push edx
call fcn.0066f3ea
test eax, eax
jne 0x40c99f
call fcn.0041c560
cmp al, 6
jne 0x40c989
lea ecx, [ebx + 0x746]
push ecx
lea eax, [ebp - 0x3ce8]
push eax
call fcn.005ea5a8
add esp, 8
jmp 0x40c99f
lea edx, [ebx + 0x784]
push edx
lea ecx, [ebp - 0x3ce8]
push ecx
call fcn.005ea5a8
add esp, 8
push 0
lea eax, [ebp - 0x3ce8]
push eax
mov edx, dword [ebp - 0xac]
push edx
call fcn.0066f36c
test eax, eax
je 0x40c9d9
mov eax, dword [0x6a1980]
mov ecx, dword [0x6a2f50]
push ecx
mov edx, dword [eax]
push edx
call fcn.00453884
add esp, 8
mov ecx, dword [ebp + 8]
push ecx
call fcn.0041100c
pop ecx
dec dword [ebp - 0x108]
lea eax, [ebp - 0xe4]
mov edx, 2
call fcn.005f6810
mov word [ebp - 0x114], 0x1dc
test esi, esi
je 0x40ca1b
mov eax, dword [0x6a1980]
mov ecx, dword [0x6a2f60]
push ecx
mov edx, dword [eax]
push edx
call fcn.00453884
add esp, 8
push 1
call fcn.0042bdfc
pop ecx
push 1
push 0x6a2024
call fcn.004571f0
add esp, 8
push 0x6a2c64
push 0x6a2024
call fcn.004572e0
add esp, 8
mov edi, eax
mov word [ebp - 0x114], 0x1dc
test esi, esi
je 0x40ca53
push 0
call fcn.0042bdfc
pop ecx
cmp edi, 1
jne 0x40ca79
mov edx, dword [0x6a1980]
mov eax, dword [0x6a2f4c]
push eax
mov ecx, dword [edx]
push ecx
call fcn.00453884
add esp, 8
mov eax, dword [ebp + 8]
push eax
call fcn.0041100c
pop ecx
cmp edi, 2
jne 0x40cadb
mov ecx, dword [0x6a1980]
mov edx, dword [0x6a2f58]
push edx
mov eax, dword [ecx]
push eax
call fcn.00453884
add esp, 8
mov ecx, dword [0x6a1980]
mov edx, dword [0x6a2f5c]
push edx
mov eax, dword [ecx]
push eax
call fcn.00453808
add esp, 8
test eax, eax
je 0x40cad1
push 0x6a26a4
lea edx, [ebx + 0x7ee]
push edx
lea ecx, [ebx + 0x7d6]
push ecx
lea eax, [ebx + 0x7c6]
push eax
call fcn.0066f792
mov edx, dword [ebp + 8]
push edx
call fcn.0041100c
pop ecx
push 0x6a2024
call fcn.00459180
pop ecx
cmp eax, 0x3f6
je 0x40cb0e
mov eax, dword [0x6a1980]
mov ecx, dword [0x6a2f54]
push ecx
mov edx, dword [eax]
push edx
call fcn.00453884
add esp, 8
mov ecx, dword [ebp + 8]
push ecx
call fcn.0041100c
pop ecx
dec dword [ebp - 0x108]
lea eax, [ebp - 0xac]
mov edx, 2
call fcn.005f6810
mov word [ebp - 0x114], 0x14
mov ecx, dword [0x6a294c]
push ecx
mov eax, dword [0x6a2948]
push eax
call fcn.0041ab78
add esp, 8
call fcn.0042984c
call fcn.00426d38
mov word [ebp - 0x114], 0x248
push 0x104
lea edx, [ebp - 0x3ef0]
push edx
push 0
call fcn.0066f4fe
lea ecx, [ebp - 0x40f8]
push ecx
lea eax, [ebp - 0x3ef0]
push eax
call fcn.0041b3dc
mov dword [ebp - 0x4120], 0x770077
mov dword [ebp - 0x411c], 0x2e0077
mov dword [ebp - 0x4118], 0x610045
mov dword [ebp - 0x4114], 0x790073
mov dword [ebp - 0x4110], 0x470032
mov dword [ebp - 0x410c], 0x6d0061
mov dword [ebp - 0x4108], 0x2e0065
mov dword [ebp - 0x4104], 0x6f0063
mov dword [ebp - 0x4100], 0x20006d
add esp, 8
xor edx, edx
mov dword [ebp - 0x40fc], edx
lea edx, [ebp - 0x4120]
mov word [ebp - 0x114], 0x254
lea eax, [ebp - 0xec]
call fcn.005f67d8
inc dword [ebp - 0x108]
mov edx, dword [eax]
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x328]
call fcn.0049589c
dec dword [ebp - 0x108]
lea eax, [ebp - 0xec]
mov edx, 2
call fcn.005f6810
lea ecx, [ebx + 0x7f2]
push ecx
push 0xfa00
push 0
push 4
push 0
push 0xffffffffffffffff
call fcn.0066f38a
mov dword [0x6a28c0], eax
cmp dword [0x6a28c0], 0
jne 0x40cc9a
dec dword [ebp - 0x108]
lea eax, [ebp - 0x14]
mov edx, 2
call fcn.005f6810
dec dword [ebp - 0x108]
push 2
lea ecx, [ebp - 0x10]
push ecx
call fcn.0045c330
add esp, 8
dec dword [ebp - 0x108]
push 2
lea eax, [ebp - 4]
push eax
call fcn.0045d6f0
add esp, 8
mov edx, dword [ebp - 0x124]
mov dword fs:[0], edx
jmp 0x40d09c
push 0
push 0
push 0
push 0xf001f
mov ecx, dword [0x6a28c0]
push ecx
call fcn.0066f660
mov dword [0x6a28d8], eax
lea eax, [ebx + 0x7fd]
push eax
push 0x61a80
push 0
push 4
push 0
push 0xffffffffffffffff
call fcn.0066f38a
mov dword [0x6a28c8], eax
cmp dword [0x6a28c8], 0
je 0x40ccf9
push 0
push 0
push 0
push 0xf001f
mov edx, dword [0x6a28c8]
push edx
call fcn.0066f660
mov dword [0x6a28dc], eax
mov ecx, dword [0x6a28d8]
push 0x6a26a4
add ecx, 0xf9c0
push 0x400
mov dword [0x6a28d4], ecx
lea ecx, [ebp - 0xed0]
mov eax, dword [0x6a28d8]
push ecx
add eax, 0xf9fa
lea ecx, [ebx + 0x816]
mov dword [0x6a28cc], eax
lea eax, [ebx + 0x830]
mov edx, dword [0x6a28d8]
push eax
add edx, 0xf9fe
mov dword [0x6a28d0], edx
lea edx, [ebx + 0x826]
push edx
push ecx
call fcn.0066f51c
mov word [ebp - 0x114], 0x26c
lea edx, [ebp - 0xed0]
lea eax, [ebp - 0xe8]
call fcn.005f5d94
inc dword [ebp - 0x108]
mov dl, 1
mov word [ebp - 0x114], 0x260
mov eax, dword [0x536778]
call fcn.0040d0a4
mov dword [ebp - 0x130], eax
mov eax, dword [ebp - 0x130]
call fcn.004f5014
xor esi, esi
jmp 0x40ceae
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x3e0]
mov dl, 1
mov eax, dword [fcn.004757b0]
call fcn.0040d20c
mov word [ebp - 0x114], 0x260
mov word [ebp - 0x114], 0x278
mov ebx, eax
xor eax, eax
mov dword [ebp - 0xf0], eax
lea ecx, [ebp - 0xf0]
inc dword [ebp - 0x108]
mov edx, esi
mov eax, dword [ebp - 0x130]
mov edi, dword [eax]
call dword [edi + 0xc]
lea edx, [ebp - 0xf0]
lea eax, [ebp - 0xf4]
call fcn.005f679c
inc dword [ebp - 0x108]
mov edx, dword [eax]
mov eax, ebx
call fcn.00480450
dec dword [ebp - 0x108]
lea eax, [ebp - 0xf4]
mov edx, 2
call fcn.005f6810
dec dword [ebp - 0x108]
lea eax, [ebp - 0xf0]
mov edx, 2
call fcn.005f5edc
mov dword [ebx + 0x78], 0x409534
mov ecx, dword [ebp + 8]
lea edx, [ebx + 0xd8]
mov dword [ebx + 0x7c], ecx
lea eax, [ebp - 0xf8]
mov word [ebp - 0x114], 0x284
call fcn.005f5cfc
inc dword [ebp - 0x108]
lea edx, [ebp - 0xf8]
lea eax, [ebp - 0xe8]
call fcn.005f5fc0
push eax
dec dword [ebp - 0x108]
lea eax, [ebp - 0xf8]
mov edx, 2
call fcn.005f5edc
pop ecx
test cl, cl
je 0x40ce9d
mov dl, 1
mov eax, ebx
call fcn.004b0c44
mov ecx, dword [ebp + 8]
mov edx, ebx
mov eax, dword [ecx + 0x3e0]
call fcn.004af2b4
inc esi
mov eax, dword [ebp - 0x130]
mov edx, dword [eax]
call dword [edx + 0x14]
cmp esi, eax
jl 0x40cda4
mov ecx, dword [ebp - 0x130]
mov dword [ebp - 0x100], ecx
cmp dword [ebp - 0x100], 0
je 0x40cf06
mov eax, dword [ebp - 0x100]
mov edx, dword [eax]
mov dword [ebp - 0xfc], edx
mov word [ebp - 0x114], 0x29c
mov edx, 3
mov eax, dword [ebp - 0x100]
mov ecx, dword [eax]
call dword [ecx - 4]
mov word [ebp - 0x114], 0x290
mov eax, dword [ebp - 0xe8]
call fcn.004d8328
mov ecx, dword [ebp + 8]
cmp dword [0x6a2c44], 0
setne dl
mov eax, dword [ecx + 0x440]
and edx, 1
mov ecx, dword [eax]
call dword [ecx + 0x110]
mov eax, dword [ebp + 8]
cmp dword [0x6a2c40], 0
setne dl
mov eax, dword [eax + 0x430]
and edx, 1
mov ecx, dword [eax]
call dword [ecx + 0x110]
mov eax, dword [ebp + 8]
cmp dword [0x672fc4], 0
setne dl
mov eax, dword [eax + 0x42c]
and edx, 1
mov ecx, dword [eax]
call dword [ecx + 0x110]
mov eax, dword [ebp + 8]
cmp dword [0x672f70], 0
setne dl
mov eax, dword [eax + 0x3cc]
and edx, 1
mov ecx, dword [eax]
call dword [ecx + 0x110]
mov edx, dword [0x672fc4]
push edx
mov eax, dword [ebp + 8]
push eax
call fcn.00414248
add esp, 8
call fcn.0041bcc8
push 0
push 1
mov edx, dword [0x6724f0]
push edx
call fcn.0040d264
add esp, 0xc
mov dword [0x672fb0], eax
push 0
push 1
mov ecx, dword [0x67248c]
push ecx
call fcn.0040d2c4
add esp, 0xc
mov eax, dword [0x67235c]
push 0
push 1
push eax
call fcn.0040d324
add esp, 0xc
mov dword [0x672fb4], eax
push 0
push 1
mov edx, dword [0x672428]
push edx
call fcn.0040d384
add esp, 0xc
mov dword [0x672fac], eax
dec dword [ebp - 0x108]
lea eax, [ebp - 0xe8]
mov edx, 2
call fcn.005f5edc
mov word [ebp - 0x114], 0x248
mov word [ebp - 0x114], 0x14
jmp 0x40d054
dec dword [ebp - 0x108]
lea eax, [ebp - 0x14]
mov edx, 2
call fcn.005f6810
dec dword [ebp - 0x108]
push 2
lea ecx, [ebp - 0x10]
push ecx
call fcn.0045c330
add esp, 8
dec dword [ebp - 0x108]
push 2
lea eax, [ebp - 4]
push eax
call fcn.0045d6f0
add esp, 8
mov edx, dword [ebp - 0x124]
mov dword fs:[0], edx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret