Function at 0x4209a0
Capabilities:
Check http status code
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5637fe
mov eax, dword fs:[0]
push eax
mov eax, 0x1823c
call fcn.00547480
mov eax, dword [0x661850]
xor eax, ebp
mov dword [ebp - 0x3c], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x1816c], ecx
push str.Wed_Sep_30_22:04:02_2015
push 0x15fa
push str.CGameProcess::OnSocketMessageRecieve
push str.GameProcessGameProc.cpp
lea ecx, [ebp - 0xd]
call fcn.004024e0
mov dword [ebp - 4], 0
mov eax, dword [ebp + 8]
movsx ecx, byte [eax]
cmp ecx, 0x2b
jne 0x420a1c
mov edx, dword [ebp + 8]
add edx, 1
push edx
mov ecx, dword [ebp - 0x1816c]
call fcn.004201b0
jmp 0x42aafd
mov dword [ebp - 0x38], 0
lea ecx, [ebp - 0x34]
call fcn.0043b330
lea ecx, [ebp - 0x28]
call fcn.0043b330
lea ecx, [ebp - 0x1c]
call fcn.0043b330
push 0xc
push 0
lea eax, [ebp - 0x34]
push eax
call fcn.005454d0
add esp, 0xc
push 0xc
push 0
lea ecx, [ebp - 0x28]
push ecx
call fcn.005454d0
add esp, 0xc
push 0xc
push 0
lea edx, [ebp - 0x1c]
push edx
call fcn.005454d0
add esp, 0xc
mov eax, dword [ebp + 8]
push eax
lea ecx, [ebp - 0x28]
push ecx
call fcn.00509d60
lea edx, [ebp - 0x28]
push edx
lea eax, [ebp - 0x34]
push eax
mov ecx, dword [ebp - 0x1816c]
call fcn.00432220
lea ecx, [ebp - 0x34]
push ecx
call fcn.00502b60
add esp, 4
cmp dword [0x663c34], 0
je 0x420aae
lea edx, [ebp + 8]
push edx
lea eax, [ebp - 0x34]
push eax
call dword [0x663c34]
movsx ecx, byte [0x663d58]
test ecx, ecx
je 0x420bef
mov byte [ebp - 0x83c], 0
push 0x7ff
push 0
lea edx, [ebp - 0x83b]
push edx
call fcn.005454d0
add esp, 0xc
mov dword [ebp - 0x840], 0
mov dword [ebp - 0x844], 0
jmp 0x420aff
mov eax, dword [ebp - 0x844]
add eax, 1
mov dword [ebp - 0x844], eax
push 0x663d58
call fcn.00545a90
add esp, 4
cmp dword [ebp - 0x844], eax
jae 0x420be8
mov ecx, dword [ebp - 0x844]
movsx edx, byte [ecx + 0x663d58]
cmp edx, 0x2f
jne 0x420bbb
mov eax, dword [ebp - 0x840]
mov byte [ebp + eax - 0x83b], 0
lea ecx, [ebp - 0x83c]
push ecx
push 0x575830
lea edx, [ebp - 0xa44]
push edx
call fcn.005456a9
add esp, 0xc
mov dword [ebp - 0xa54], 0
mov dword [ebp - 0xa50], 0
mov dword [ebp - 0xa4c], 0
mov dword [ebp - 0xa48], 0
lea eax, [ebp - 0xa54]
push eax
call dword [0x69d480]
mov dword [ebp - 0x840], 0
push 0x800
push 0
lea ecx, [ebp - 0x83c]
push ecx
call fcn.005454d0
add esp, 0xc
mov edx, dword [ebp - 0x844]
add edx, 1
mov dword [ebp - 0x844], edx
mov eax, dword [ebp - 0x840]
mov ecx, dword [ebp - 0x844]
mov dl, byte [ecx + 0x663d58]
mov byte [ebp + eax - 0x83c], dl
mov eax, dword [ebp - 0x840]
add eax, 1
mov dword [ebp - 0x840], eax
jmp 0x420af0
mov byte [0x663d58], 0
movzx ecx, word [ebp - 0x30]
mov dword [ebp - 0x18170], ecx
cmp dword [ebp - 0x18170], 0x210
jg 0x420c48
cmp dword [ebp - 0x18170], 0x210
je 0x420e37
mov edx, dword [ebp - 0x18170]
sub edx, 9
mov dword [ebp - 0x18170], edx
cmp dword [ebp - 0x18170], 0xcb
ja case.0x420e24.6
mov eax, dword [ebp - 0x18170]
movzx ecx, byte [eax + 0x42ab74]
jmp dword [ecx*4 + 0x42ab2c]
cmp dword [ebp - 0x18170], 0x4b3
jg 0x420c9a
cmp dword [ebp - 0x18170], 0x4b3
je 0x425b25
mov edx, dword [ebp - 0x18170]
sub edx, 0x258
mov dword [ebp - 0x18170], edx
cmp dword [ebp - 0x18170], 0xdd
ja case.0x420e24.6
mov eax, dword [ebp - 0x18170]
movzx ecx, byte [eax + 0x42ad54]
jmp dword [ecx*4 + 0x42ac40]
cmp dword [ebp - 0x18170], 0x6a4
jg 0x420ce9
cmp dword [ebp - 0x18170], 0x6a4
je 0x428fdd
mov edx, dword [ebp - 0x18170]
sub edx, 0x514
mov dword [ebp - 0x18170], edx
cmp dword [ebp - 0x18170], 0x65
ja case.0x420e24.6
mov eax, dword [ebp - 0x18170]
movzx ecx, byte [eax + 0x42ae74]
jmp dword [ecx*4 + 0x42ae34]
cmp dword [ebp - 0x18170], 0x1770
jg 0x420d7f
cmp dword [ebp - 0x18170], 0x1770
je 0x422551
cmp dword [ebp - 0x18170], 0x7d1
jg 0x420d5a
cmp dword [ebp - 0x18170], 0x7d1
je 0x423238
cmp dword [ebp - 0x18170], 0x6a5
je 0x428ff3
cmp dword [ebp - 0x18170], 0x6a6
je 0x429009
cmp dword [ebp - 0x18170], 0x7d0
je 0x42268f
jmp case.0x420e24.6
cmp dword [ebp - 0x18170], 0xfa0
je 0x42771f
cmp dword [ebp - 0x18170], 0xfa1
je 0x420e7d
jmp case.0x420e24.6
cmp dword [ebp - 0x18170], 0x270f
jg 0x420dce
cmp dword [ebp - 0x18170], 0x270f
je 0x4226dd
mov edx, dword [ebp - 0x18170]
sub edx, 0x1771
mov dword [ebp - 0x18170], edx
cmp dword [ebp - 0x18170], 0x66
ja case.0x420e24.6
mov eax, dword [ebp - 0x18170]
movzx ecx, byte [eax + 0x42af10]
jmp dword [ecx*4 + 0x42aedc]
cmp dword [ebp - 0x18170], 0xc350
jg 0x420dff
cmp dword [ebp - 0x18170], 0xc350
je 0x4260b7
cmp dword [ebp - 0x18170], 0x2c25
je 0x42a0df
jmp case.0x420e24.6
mov edx, dword [ebp - 0x18170]
sub edx, 0xc351
mov dword [ebp - 0x18170], edx
cmp dword [ebp - 0x18170], 0x13
ja case.0x420e24.6
mov eax, dword [ebp - 0x18170]
jmp dword [eax*4 + 0x42af78]
mov byte [0x663d4d], 1
jmp 0x42aafd
push 7
call fcn.004764c0
add esp, 4
mov dword [ebp - 0xa58], eax
push 2
call fcn.004764c0
add esp, 4
mov dword [ebp - 0xa5c], eax
push 0
push 0
push 0x578214
mov ecx, dword [ebp - 0xa58]
push ecx
mov edx, dword [ebp - 0xa5c]
push edx
mov ecx, 0x6eeef8
call fcn.0048ce80
jmp 0x42aafd
jmp 0x42aafd
push eax
call fcn.00408ed0
call [eax - 0x39]
test dword [eax + 0xfffff3], ecx
add byte [eax], al
add byte [eax - 0x18], dl
cmp dh, 0xff
call [eax + 0x6a]
and byte [ebx - 0x1816b7b], cl
inc dword [0x112710]
push eax
mov ecx, dword [ebp + 8]
add ecx, 0x10
push ecx
call fcn.00509bc0
mov dword [ebp - 0xc78], eax
push eax
call fcn.00408ed0
call [eax + 0x6a]
and byte [ebx - 0x1816b6b], cl
inc dword [ecx + 0x112730c2]
add byte [edx + 0xf], dl
mov bh, 0x45
ror byte [ebx + 0x548d084d], cl
add dword [eax], edx
push edx
call fcn.00509bc0
push eax
call fcn.00408ed0
call [eax - 0x73]
lea edi, [ebx + esi*8 - 1]
invalid
movzx ecx, word [ebp - 0x2c]
mov dword [0x664d5c], ecx
mov dword [0x664d68], 0
call dword [sym.imp.WINMM.dll_timeGetTime]
mov dword [0x664d60], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x664d64], eax
jmp 0x42aafd
push 0x1000
push 0
push 0x663d58
call fcn.005454d0
add esp, 0xc
push 0x1000
push 0x663d58
mov edx, dword [ebp + 8]
add edx, 0x10
push edx
call fcn.00509bc0
mov dword [ebp - 0x22b0], eax
mov eax, dword [ebp - 0x22b0]
mov byte [eax + 0x663d58], 0
mov dword [ebp - 0x12ac], str.2_5_2_1_6_8_9_3_4_1_8_4_2_0
mov ecx, dword [ebp - 0x12ac]
push ecx
push 0x1000
lea edx, [ebp - 0x22ac]
push edx
push 0x663d58
call dword [0x69d470]
mov dword [ebp - 0x22b0], eax
mov eax, dword [ebp - 0x22b0]
mov byte [ebp + eax - 0x22ac], 0
lea ecx, [ebp - 0x22ac]
push ecx
push 0x575830
push 0x663d58
call fcn.005456a9
add esp, 0xc
cmp dword [ebp - 0x22b0], 0
jl 0x4211f9
mov edx, dword [ebp - 0x22b0]
mov byte [edx + 0x663d58], 0
jmp 0x42aafd
push 0x226
call fcn.00545848
add esp, 4
mov dword [ebp - 0x18008], eax
mov byte [ebp - 4], 1
cmp dword [ebp - 0x18008], 0
je 0x421231
mov ecx, dword [ebp - 0x18008]
call fcn.0043b2e0
mov dword [ebp - 0x18174], eax
jmp 0x42123b
mov dword [ebp - 0x18174], 0
mov eax, dword [ebp - 0x18174]
mov dword [ebp - 0x18004], eax
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x18004]
mov dword [ebp - 0x22b8], ecx
push 0x226
mov edx, dword [ebp - 0x22b8]
push edx
mov eax, dword [ebp + 8]
add eax, 0x10
push eax
call fcn.00509bc0
mov byte [ebp - 0x22b1], 0
mov ecx, dword [ebp - 0x22b8]
cmp dword [ecx + 6], 0x11170
jne 0x4213d6
cmp dword [0x6657bc], 0
jne 0x4213d6
mov dword [0x6657bc], 1
mov edx, dword [ebp - 0x22b8]
add edx, 0x26
push edx
push 0x104
push 0x6657c0
call fcn.0054572d
add esp, 0xc
mov eax, dword [0x69e644]
or eax, 0x27a865cf
push eax
call fcn.00547835
add esp, 4
mov dword [ebp - 0x22bc], eax
mov eax, dword [ebp - 0x22bc]
cdq
mov ecx, 0x1e
idiv ecx
mov word [ebp - 0x22c4], dx
movsx edx, word [ebp - 0x22c4]
test edx, edx
jne 0x421301
mov eax, 0x1e
mov word [ebp - 0x22c4], ax
movsx ecx, word [ebp - 0x22c4]
add ecx, 0x28
mov word [ebp - 0x22c4], cx
movsx edx, word [ebp - 0x22c4]
mov byte [edx + 0x6657ca], 0
movsx eax, word [ebp - 0x22c4]
add eax, 0x6657c0
push eax
push 0xb
lea ecx, [ebp - 0x22d0]
push ecx
call fcn.0054572d
add esp, 0xc
mov byte [0x6657c9], 0
mov byte [0x6657d3], 0
mov byte [0x6657dd], 0
mov byte [0x6657e7], 0
push eax
call fcn.00408ed0
call [eax + 0x68]
rcl byte [edi + 0x66], 0
call fcn.00547d0c
add esp, 4
mov esi, eax
and esi, dword [ebp - 0x22bc]
push 0x6657ca
call fcn.00547d0c
add esp, 4
xor esi, eax
push 0x6657d4
call fcn.00547d0c
add esp, 4
or esi, eax
push 0x6657de
call fcn.00547d0c
add esp, 4
or esi, eax
push esi
call fcn.00547835
add esp, 4
mov dword [ebp - 0x22c0], eax
cmp dword [ebp - 0x22c0], 0x3b9aca00
jge 0x4213d1
mov edx, dword [ebp - 0x22c0]
add edx, 0x3b9aca00
mov dword [ebp - 0x22c0], edx
jmp 0x42186e
mov eax, dword [ebp - 0x22b8]
cmp dword [eax + 6], 0xef42
jne 0x42186e
mov dword [ebp - 0x2504], 0x128
push 0
push 2
call sub.KERNEL32.dll_CreateToolhelp32Snapshot
mov dword [ebp - 0x2514], eax
cmp dword [ebp - 0x2514], 0xffffffff
jne 0x421410
call fcn.00549ef0
lea ecx, [ebp - 0x2504]
push ecx
mov edx, dword [ebp - 0x2514]
push edx
call sub.KERNEL32.dll_Process32First
mov dword [ebp - 0x2520], eax
mov dword [ebp - 0x22d4], 0
mov dword [ebp - 0x250c], 0
mov dword [ebp - 0x2530], 0
mov eax, dword [str.Qmacro]
mov dword [ebp - 0x251c], eax
mov cx, word [0x5781dc]
mov word [ebp - 0x2518], cx
mov dl, byte [0x5781de]
mov byte [ebp - 0x2516], dl
mov eax, dword [str.vrbrothers]
mov dword [ebp - 0x252c], eax
mov ecx, dword [0x5781d0]
mov dword [ebp - 0x2528], ecx
mov dx, word [0x5781d4]
mov word [ebp - 0x2524], dx
mov al, byte [0x5781d6]
mov byte [ebp - 0x2522], al
cmp dword [ebp - 0x2520], 0
je 0x421861
mov ecx, dword [ebp - 0x24fc]
push ecx
push 0
push 0x410
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov dword [ebp - 0x2534], eax
push 0x104
lea edx, [ebp - 0x23dc]
push edx
push 0
mov eax, dword [ebp - 0x2534]
push eax
call sub.PSAPI.DLL_GetModuleFileNameExA
mov ecx, dword [ebp - 0x2534]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea edx, [ebp - 0x2508]
push edx
lea eax, [ebp - 0x23dc]
push eax
call sub.VERSION.dll_GetFileVersionInfoSizeA
mov dword [ebp - 0x2510], eax
cmp dword [ebp - 0x2510], 0
jbe 0x421843
mov ecx, dword [ebp - 0x2510]
add ecx, 1
push ecx
call fcn.00542ae0
add esp, 4
mov dword [ebp - 0x1800c], eax
mov edx, dword [ebp - 0x1800c]
mov dword [ebp - 0x22d4], edx
mov byte [ebp - 0x2535], 0
mov eax, dword [ebp - 0x22d4]
push eax
mov ecx, dword [ebp - 0x2510]
push ecx
mov edx, dword [ebp - 0x2508]
push edx
lea eax, [ebp - 0x23dc]
push eax
call sub.VERSION.dll_GetFileVersionInfoA
test eax, eax
je 0x421828
lea ecx, [ebp - 0x2530]
push ecx
lea edx, [ebp - 0x250c]
push edx
push str.StringFileInfo080404b0FileDescription
mov eax, dword [ebp - 0x22d4]
push eax
call sub.VERSION.dll_VerQueryValueA
test eax, eax
je 0x4215bf
lea ecx, [ebp - 0x251c]
push ecx
call fcn.00549e93
add esp, 4
push eax
mov edx, dword [ebp - 0x250c]
push edx
call fcn.00549e93
add esp, 4
push eax
call fcn.004372c0
add esp, 8
test eax, eax
je 0x4215bf
mov byte [ebp - 0x2535], 1
jmp 0x42166d
lea eax, [ebp - 0x2530]
push eax
lea ecx, [ebp - 0x250c]
push ecx
push str.StringFileInfo080404b0ProductName
mov edx, dword [ebp - 0x22d4]
push edx
call sub.VERSION.dll_VerQueryValueA
test eax, eax
je 0x421617
lea eax, [ebp - 0x251c]
push eax
call fcn.00549e93
add esp, 4
push eax
mov ecx, dword [ebp - 0x250c]
push ecx
call fcn.00549e93
add esp, 4
push eax
call fcn.004372c0
add esp, 8
test eax, eax
je 0x421617
mov byte [ebp - 0x2535], 1
jmp 0x42166d
lea edx, [ebp - 0x2530]
push edx
lea eax, [ebp - 0x250c]
push eax
push str.StringFileInfo080404b0LegalTradeMarks
mov ecx, dword [ebp - 0x22d4]
push ecx
call sub.VERSION.dll_VerQueryValueA
test eax, eax
je 0x42166d
lea edx, [ebp - 0x252c]
push edx
call fcn.00549e93
add esp, 4
push eax
mov eax, dword [ebp - 0x250c]
push eax
call fcn.00549e93
add esp, 4
push eax
call fcn.004372c0
add esp, 8
test eax, eax
je 0x42166d
mov byte [ebp - 0x2535], 1
movzx ecx, byte [ebp - 0x2535]
test ecx, ecx
je 0x421828
lea ecx, [ebp - 0x257c]
call fcn.0043b330
push eax
call fcn.00408ed0
call [eax + 0x6a]
add byte [edx], ch
push 0
push 0
push 0xea6c
lea edx, [ebp - 0x257c]
push edx
call fcn.00509d80
push eax
call fcn.00408ed0
call [eax - 0x3a]
test dword [edx + ebx*8 - 0x39cd0001], edx
test dword [ebp + 0x2cffffda], edx
mov byte [ebp - 0x256a], 0x35
mov byte [ebp - 0x2569], 0x2c
mov byte [ebp - 0x2568], 0x32
mov byte [ebp - 0x2567], 0x2c
mov byte [ebp - 0x2566], 0x31
mov byte [ebp - 0x2565], 0x2c
mov byte [ebp - 0x2564], 0x36
mov byte [ebp - 0x2563], 0x2c
mov byte [ebp - 0x2562], 0x38
mov byte [ebp - 0x2561], 0x2c
mov byte [ebp - 0x2560], 0x39
mov byte [ebp - 0x255f], 0x2c
mov byte [ebp - 0x255e], 0x33
mov byte [ebp - 0x255d], 0x2c
mov byte [ebp - 0x255c], 0x34
mov byte [ebp - 0x255b], 0x2c
mov byte [ebp - 0x255a], 0x31
mov byte [ebp - 0x2559], 0x2c
mov byte [ebp - 0x2558], 0x38
mov byte [ebp - 0x2557], 0x2c
mov byte [ebp - 0x2556], 0x34
mov byte [ebp - 0x2555], 0x2c
mov byte [ebp - 0x2554], 0x32
mov byte [ebp - 0x2553], 0x2c
mov byte [ebp - 0x2552], 0x30
xor eax, eax
mov dword [ebp - 0x2551], eax
mov dword [ebp - 0x254d], eax
mov dword [ebp - 0x2549], eax
mov dword [ebp - 0x2545], eax
mov dword [ebp - 0x2541], eax
mov word [ebp - 0x253d], ax
mov byte [ebp - 0x253b], al
push eax
call fcn.00408ed0
call [eax - 0x73]
lea edx, [edx + ebx*8 - 0x72ae0001]
xchg ebp, eax
and bl, bl
invalid
mov eax, dword [ebp - 0x22d4]
mov dword [ebp - 0x18014], eax
mov ecx, dword [ebp - 0x18014]
push ecx
call fcn.00544d5d
add esp, 4
lea edx, [ebp - 0x2504]
push edx
mov eax, dword [ebp - 0x2514]
push eax
call sub.KERNEL32.dll_Process32Next
mov dword [ebp - 0x2520], eax
jmp 0x42149c
mov ecx, dword [ebp - 0x2514]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x113ee8
call fcn.004f67e0
test eax, eax
jbe 0x4219c9
lea ecx, [ebp - 0x2580]
call fcn.00466d40
mov dword [ebp - 0x2584], 0
lea edx, [ebp - 0x18018]
push edx
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x113ee8
call fcn.00437d00
mov eax, dword [eax]
mov dword [ebp - 0x2580], eax
jmp 0x4218d2
push 0
lea ecx, [ebp - 0x1801c]
push ecx
lea ecx, [ebp - 0x2580]
call fcn.004f6740
lea edx, [ebp - 0x18020]
push edx
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x113ee8
call fcn.0051cb30
push eax
lea ecx, [ebp - 0x2580]
call fcn.00405200
movzx eax, al
test eax, eax
je 0x4219c9
lea ecx, [ebp - 0x2580]
call fcn.0044a2c0
mov ecx, dword [eax]
mov dword [ebp - 0x2584], ecx
mov edx, dword [ebp - 0x2584]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x22b8]
movzx edx, byte [ecx]
cmp eax, edx
jne 0x4219c4
mov eax, dword [ebp - 0x2584]
movzx ecx, byte [eax]
cmp ecx, 0x15
jne 0x42198b
mov edx, dword [ebp - 0x2584]
mov eax, dword [ebp - 0x22b8]
mov ecx, dword [edx + 6]
cmp ecx, dword [eax + 6]
jne 0x421989
mov byte [ebp - 0x22b1], 1
mov esi, dword [ebp - 0x22b8]
mov ecx, 0x89
mov edi, dword [ebp - 0x2584]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov edx, dword [ebp - 0x22b8]
mov dword [ebp - 0x18024], edx
mov eax, dword [ebp - 0x18024]
push eax
call fcn.00544d52
add esp, 4
jmp 0x4219c9
jmp 0x4219c4
mov byte [ebp - 0x22b1], 1
mov esi, dword [ebp - 0x22b8]
mov ecx, 0x89
mov edi, dword [ebp - 0x2584]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov ecx, dword [ebp - 0x22b8]
mov dword [ebp - 0x18028], ecx
mov edx, dword [ebp - 0x18028]
push edx
call fcn.00544d52
add esp, 4
jmp 0x4219c9
jmp 0x4218be
movzx eax, byte [ebp - 0x22b1]
test eax, eax
jne 0x4219ec
lea ecx, [ebp - 0x22b8]
push ecx
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x113ee8
call fcn.00437b70
jmp 0x42aafd
xor edx, edx
cmp dword [ebp - 0x34], 0
setne dl
mov byte [0x69cbce], dl
jmp 0x42aafd
mov al, byte [ebp - 0x34]
mov byte [0x69d4b5], al
jmp 0x42aafd
mov byte [ebp - 0x268c], 0
push 0x103
push 0
lea ecx, [ebp - 0x268b]
push ecx
call fcn.005454d0
add esp, 0xc
push 0x104
lea edx, [ebp - 0x268c]
push edx
mov eax, dword [ebp + 8]
add eax, 0x10
push eax
call fcn.00509bc0
mov ecx, dword [ebp - 0x34]
mov dword [ebp - 0x18178], ecx
cmp dword [ebp - 0x18178], 0
je 0x421a5e
jmp 0x421af1
mov edx, dword [ebp - 0x1816c]
cmp dword [edx + 0x113ef4], 0
je 0x421aec
push 0
mov eax, dword [ebp - 0x1816c]
mov ecx, dword [eax + 0x113ef4]
call fcn.005283c0
mov ecx, dword [ebp - 0x1816c]
cmp dword [ecx + 0x113ef4], 0
je 0x421aec
mov edx, dword [ebp - 0x1816c]
mov eax, dword [edx + 0x113ef4]
mov dword [ebp - 0x18030], eax
mov ecx, dword [ebp - 0x18030]
mov dword [ebp - 0x1802c], ecx
cmp dword [ebp - 0x1802c], 0
je 0x421ad2
push 1
mov edx, dword [ebp - 0x1802c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x1802c]
mov edx, dword [eax]
call edx
mov dword [ebp - 0x1817c], eax
jmp 0x421adc
mov dword [ebp - 0x1817c], 0
mov eax, dword [ebp - 0x1816c]
mov dword [eax + 0x113ef4], 0
jmp 0x421c05
mov ecx, dword [ebp - 0x1816c]
cmp dword [ecx + 0x113ef4], 0
je 0x421b6c
mov edx, dword [ebp - 0x1816c]
cmp dword [edx + 0x113ef4], 0
je 0x421b6c
mov eax, dword [ebp - 0x1816c]
mov ecx, dword [eax + 0x113ef4]
mov dword [ebp - 0x18038], ecx
mov edx, dword [ebp - 0x18038]
mov dword [ebp - 0x18034], edx
cmp dword [ebp - 0x18034], 0
je 0x421b52
push 1
mov eax, dword [ebp - 0x18034]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x18034]
mov eax, dword [edx]
call eax
mov dword [ebp - 0x18180], eax
jmp 0x421b5c
mov dword [ebp - 0x18180], 0
mov ecx, dword [ebp - 0x1816c]
mov dword [ecx + 0x113ef4], 0
push 0x13c
call fcn.00545848
add esp, 4
mov dword [ebp - 0x18040], eax
mov byte [ebp - 4], 2
cmp dword [ebp - 0x18040], 0
je 0x421b9f
mov ecx, dword [ebp - 0x18040]
call fcn.00526730
mov dword [ebp - 0x18184], eax
jmp 0x421ba9
mov dword [ebp - 0x18184], 0
mov edx, dword [ebp - 0x18184]
mov dword [ebp - 0x1803c], edx
mov byte [ebp - 4], 0
mov eax, dword [ebp - 0x1816c]
mov ecx, dword [ebp - 0x1803c]
mov dword [eax + 0x113ef4], ecx
push 0
push 1
lea edx, [ebp - 0x268c]
push edx
mov ecx, 0x69e668
call fcn.0043b310
push eax
mov eax, dword [ebp - 0x1816c]
mov ecx, dword [eax + 0x113ef4]
call fcn.00526b70
push 0
mov ecx, dword [ebp - 0x1816c]
mov ecx, dword [ecx + 0x113ef4]
call fcn.005279b0
jmp 0x42aafd
mov edx, dword [ebp - 0x34]
mov dword [ebp - 0x2690], edx
cmp dword [ebp - 0x2690], 0
jne 0x421c2b
mov dword [0x66aaa4], 0
jmp 0x421f80
cmp dword [0x66aaa4], 0
je 0x421f80
mov eax, dword [0x66aaa4]
mov ecx, dword [eax + 0x42]
cmp ecx, dword [ebp - 0x2690]
jne 0x421f80
lea edx, [ebp - 0x2690]
push edx
lea eax, [ebp - 0x2698]
push eax
mov ecx, 0x66aaa8
call fcn.00437730
mov dword [ebp - 0x4008], 0
lea ecx, [ebp - 0x18044]
push ecx
mov ecx, 0x66aaa8
call fcn.004f52e0
push eax
lea ecx, [ebp - 0x2698]
call fcn.00405200
movzx edx, al
test edx, edx
je 0x421ca8
lea ecx, [ebp - 0x2698]
call fcn.004f5470
mov eax, dword [eax + 4]
mov dword [ebp - 0x4008], eax
jmp 0x421d17
push 0xc
call fcn.00545848
add esp, 4
mov dword [ebp - 0x1804c], eax
mov byte [ebp - 4], 3
cmp dword [ebp - 0x1804c], 0
je 0x421cd8
mov ecx, dword [ebp - 0x1804c]
call fcn.004375c0
mov dword [ebp - 0x18188], eax
jmp 0x421ce2
mov dword [ebp - 0x18188], 0
mov ecx, dword [ebp - 0x18188]
mov dword [ebp - 0x18048], ecx
mov byte [ebp - 4], 0
mov edx, dword [ebp - 0x18048]
mov dword [ebp - 0x4008], edx
lea eax, [ebp - 0x2690]
push eax
mov ecx, 0x66aaa8
call fcn.004376c0
mov ecx, dword [ebp - 0x4008]
mov dword [eax], ecx
mov ecx, dword [ebp - 0x4008]
call fcn.00437620
mov byte [ebp - 0x4114], 0
push 0x103
push 0
lea edx, [ebp - 0x4113]
push edx
call fcn.005454d0
add esp, 0xc
push 0x104
lea eax, [ebp - 0x4114]
push eax
mov ecx, dword [ebp + 8]
add ecx, 0x10
push ecx
call fcn.00509bc0
mov byte [ebp - 0x4004], 0
push 0x1963
push 0
lea edx, [ebp - 0x4003]
push edx
call fcn.005454d0
add esp, 0xc
lea eax, [ebp - 0x27a4]
push eax
lea ecx, [ebp - 0x28a8]
push ecx
lea edx, [ebp - 0x29ac]
push edx
lea eax, [ebp - 0x2ab0]
push eax
lea ecx, [ebp - 0x2bb4]
push ecx
lea edx, [ebp - 0x2cb8]
push edx
lea eax, [ebp - 0x2dbc]
push eax
lea ecx, [ebp - 0x2ec0]
push ecx
lea edx, [ebp - 0x2fc4]
push edx
lea eax, [ebp - 0x30c8]
push eax
lea ecx, [ebp - 0x31cc]
push ecx
lea edx, [ebp - 0x32d0]
push edx
lea eax, [ebp - 0x33d4]
push eax
lea ecx, [ebp - 0x34d8]
push ecx
lea edx, [ebp - 0x35dc]
push edx
lea eax, [ebp - 0x36e0]
push eax
lea ecx, [ebp - 0x37e4]
push ecx
lea edx, [ebp - 0x38e8]
push edx
lea eax, [ebp - 0x39ec]
push eax
lea ecx, [ebp - 0x3af0]
push ecx
lea edx, [ebp - 0x3bf4]
push edx
lea eax, [ebp - 0x3cf8]
push eax
lea ecx, [ebp - 0x3dfc]
push ecx
lea edx, [ebp - 0x3f00]
push edx
lea eax, [ebp - 0x4004]
push eax
push str.____c_____c_____c_____c_____c_____c_____c_____c_____c_____c_____c_____c_____c_____c_____c_____c_____c_____c_____c_____c_____c_____c_____c_____c_____c
lea ecx, [ebp - 0x4114]
push ecx
call fcn.00548276
add esp, 0x6c
mov dword [ebp - 0x2694], eax
mov dword [ebp - 0x4118], 0
jmp 0x421e58
mov edx, dword [ebp - 0x4118]
add edx, 1
mov dword [ebp - 0x4118], edx
cmp dword [ebp - 0x4118], 0x19
jge 0x421f80
mov eax, dword [ebp - 0x4118]
imul eax, eax, 0x104
movsx ecx, byte [ebp + eax - 0x4004]
test ecx, ecx
je 0x421f7b
mov byte [ebp - 0x4224], 0
push 0x103
push 0
lea edx, [ebp - 0x4223]
push edx
call fcn.005454d0
add esp, 0xc
lea eax, [ebp - 0x4224]
push eax
lea ecx, [ebp - 0x432c]
push ecx
lea edx, [ebp - 0x4338]
push edx
push str.P_s_C_s_T_s
mov eax, dword [ebp - 0x4118]
imul eax, eax, 0x104
lea ecx, [ebp + eax - 0x4004]
push ecx
call fcn.00548276
add esp, 0x14
movsx edx, byte [ebp - 0x4224]
test edx, edx
je 0x421f7b
push 0
push 0xffffff
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x18050], esp
push 0x574a9b
call fcn.004074b0
mov dword [ebp - 0x1818c], eax
lea ecx, [ebp - 0x435c]
call fcn.0043b690
mov dword [ebp - 0x18190], eax
mov byte [ebp - 4], 4
lea eax, [ebp - 0x4224]
push eax
lea ecx, [ebp - 0x435c]
call fcn.004084f0
push 0x10
push 0
lea ecx, [ebp - 0x432c]
push ecx
call fcn.00549cbf
add esp, 0xc
mov dword [ebp - 0x4340], eax
lea edx, [ebp - 0x4338]
push edx
call fcn.00547d0c
add esp, 4
mov dword [ebp - 0x433c], eax
lea eax, [ebp - 0x435c]
push eax
mov ecx, dword [ebp - 0x4008]
call fcn.004375f0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x435c]
call fcn.0043b710
jmp 0x421e49
jmp 0x42aafd
mov byte [ebp - 0x4764], 0
push 0x3ff
push 0
lea ecx, [ebp - 0x4763]
push ecx
call fcn.005454d0
add esp, 0xc
mov byte [ebp - 0x47ec], 0
push 0x63
push 0
lea edx, [ebp - 0x47eb]
push edx
call fcn.005454d0
add esp, 0xc
push 0x400
push 0
lea eax, [ebp - 0x4764]
push eax
call fcn.005454d0
add esp, 0xc
push 0x400
lea ecx, [ebp - 0x4764]
push ecx
mov edx, dword [ebp + 8]
add edx, 0x10
push edx
call fcn.00509bc0
movzx eax, word [ebp - 0x2c]
push eax
movzx ecx, word [ebp - 0x2e]
push ecx
push 0x57804c
push 0x64
lea edx, [ebp - 0x47ec]
push edx
call fcn.0054572d
add esp, 0x14
lea eax, [ebp - 0x47ec]
push eax
lea ecx, [ebp - 0x4780]
call fcn.004074b0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x4780]
push ecx
lea edx, [ebp - 0x4360]
push edx
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x113ef8
call fcn.004375a0
mov dword [ebp - 0x4364], 0
lea eax, [ebp - 0x18054]
push eax
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x113ef8
call fcn.004f52e0
push eax
lea ecx, [ebp - 0x4360]
call fcn.00405200
movzx ecx, al
test ecx, ecx
je 0x42208a
lea ecx, [ebp - 0x4360]
call fcn.004f5470
mov edx, dword [eax + 0x1c]
mov dword [ebp - 0x4364], edx
jmp 0x422103
push 0x41c
call fcn.00545848
add esp, 4
mov dword [ebp - 0x1805c], eax
mov byte [ebp - 4], 6
cmp dword [ebp - 0x1805c], 0
je 0x4220bd
mov ecx, dword [ebp - 0x1805c]
call fcn.0043b210
mov dword [ebp - 0x18194], eax
jmp 0x4220c7
mov dword [ebp - 0x18194], 0
mov eax, dword [ebp - 0x18194]
mov dword [ebp - 0x18058], eax
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x18058]
mov dword [ebp - 0x4364], ecx
lea edx, [ebp - 0x4780]
push edx
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x113ef8
call fcn.004373e0
mov ecx, dword [ebp - 0x4364]
mov dword [eax], ecx
lea edx, [ebp - 0x4764]
push edx
push 0x400
mov eax, dword [ebp - 0x4364]
add eax, 0x1c
push eax
call fcn.005477d6
add esp, 0xc
mov byte [ebp - 0x4365], 0
mov ecx, dword [ebp - 0x34]
and ecx, 0xffffff
mov edx, dword [ebp - 0x4364]
mov dword [edx], ecx
mov eax, dword [ebp - 0x34]
and eax, 0xff000000
shr eax, 0x18
add eax, 3
mov ecx, dword [ebp - 0x4364]
mov dword [ecx + 4], eax
movzx edx, word [ebp - 0x2e]
mov eax, dword [ebp - 0x4364]
mov dword [eax + 8], edx
movzx ecx, word [ebp - 0x2c]
mov edx, dword [ebp - 0x4364]
mov dword [edx + 0xc], ecx
movzx eax, word [ebp - 0x2a]
mov ecx, dword [ebp - 0x4364]
mov dword [ecx + 0x10], eax
push 0
call fcn.0041e410
add esp, 4
mov edx, dword [ebp - 0x4364]
mov dword [edx + 0x14], eax
mov eax, dword [ebp - 0x4364]
cmp dword [eax + 0x18], 0
je 0x4221bd
mov ecx, dword [ebp - 0x4364]
mov edx, dword [ecx + 0x18]
mov eax, dword [ebp - 0x4364]
mov ecx, dword [eax + 0x18]
mov edx, dword [edx]
push ecx
mov eax, dword [edx + 8]
call eax
mov ecx, dword [ebp - 0x4364]
mov dword [ecx + 0x18], 0
push 0x86
push 0
push 0
push 0
push 0x2bc
push 0
mov edx, dword [ebp - 0x4364]
mov eax, dword [edx + 4]
push eax
push 0x578044
mov ecx, 0x69ec08
call fcn.00533000
mov ecx, dword [ebp - 0x4364]
mov dword [ecx + 0x18], eax
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4780]
call fcn.00408490
jmp 0x42aafd
movzx edx, word [ebp - 0x2e]
and edx, 0xff00
shl edx, 0x10
movzx eax, word [ebp - 0x2e]
and eax, 0xff
or edx, eax
movzx ecx, word [ebp - 0x2c]
and ecx, 0xff00
or edx, ecx
movzx eax, word [ebp - 0x2c]
and eax, 0xff
shl eax, 0x10
or edx, eax
mov dword [0x69e64c], edx
jmp 0x42aafd
mov ecx, dword [ebp - 0x1816c]
mov edx, dword [ebp - 0x34]
mov dword [ecx + 0x112750], edx
call fcn.0040ada0
mov ecx, dword [ebp - 0x1816c]
mov dword [ecx + 0x112754], eax
jmp 0x42aafd
mov edx, dword [ebp - 0x1816c]
mov eax, dword [ebp - 0x34]
mov dword [edx + 0x100b1c], eax
cmp dword [ebp + 8], 0
je 0x4223e8
mov byte [ebp - 0x48fc], 0
push 0x103
push 0
lea ecx, [ebp - 0x48fb]
push ecx
call fcn.005454d0
add esp, 0xc
push 0x104
lea edx, [ebp - 0x48fc]
push edx
mov eax, dword [ebp + 8]
add eax, 0x10
push eax
call fcn.00509bc0
mov dword [ebp - 0x4900], eax
mov dword [ebp - 0x47f0], 0
lea ecx, [ebp - 0x48fc]
mov dword [ebp - 0x4904], ecx
cmp dword [ebp - 0x4900], 0
jle 0x4223e8
push 0x574a9b
lea edx, [ebp - 0x48fc]
push edx
call fcn.00548180
add esp, 8
test eax, eax
je 0x4223e8
push 0x2f
mov eax, dword [ebp - 0x4904]
push eax
call fcn.004372e0
add esp, 8
mov dword [ebp - 0x47f0], eax
cmp dword [ebp - 0x47f0], 0
je 0x422332
mov ecx, dword [ebp - 0x47f0]
mov byte [ecx], 0
mov edx, dword [ebp - 0x47f0]
add edx, 1
mov dword [ebp - 0x47f0], edx
mov eax, dword [ebp - 0x4904]
push eax
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x10080e
push ecx
call fcn.00545750
add esp, 8
cmp dword [ebp - 0x47f0], 0
je 0x422363
mov edx, dword [ebp - 0x47f0]
mov dword [ebp - 0x4904], edx
push 0x2f
mov eax, dword [ebp - 0x4904]
push eax
call fcn.004372e0
add esp, 8
mov dword [ebp - 0x47f0], eax
cmp dword [ebp - 0x47f0], 0
je 0x42239b
mov ecx, dword [ebp - 0x47f0]
mov byte [ecx], 0
mov edx, dword [ebp - 0x47f0]
add edx, 1
mov dword [ebp - 0x47f0], edx
mov eax, dword [ebp - 0x4904]
push eax
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x100912
push ecx
call fcn.00545750
add esp, 8
cmp dword [ebp - 0x47f0], 0
je 0x4223cc
mov edx, dword [ebp - 0x47f0]
mov dword [ebp - 0x4904], edx
mov eax, dword [ebp - 0x4904]
push eax
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x100a16
push ecx
call fcn.00545750
add esp, 8
jmp 0x42aafd
cmp dword [0x69d464], 0
je 0x4224a6
push 0x2710
lea edx, [ebp - 0x7014]
push edx
call dword [0x69d464]
mov dword [ebp - 0x7018], eax
cmp dword [ebp - 0x7018], 0
jle 0x4224a6
lea ecx, [ebp - 0x702c]
call fcn.0043b330
push eax
call fcn.00408ed0
call [eax + 0x6a]
add byte [edx], ch
push 0
push 0
push 0xea6f
lea eax, [ebp - 0x702c]
push eax
call fcn.00509d80
push eax
call fcn.00408ed0
call [eax - 0x39]
test esp, esp
invalid
jmp 0x42aafd
mov eax, dword [ebp - 0x1816c]
mov cx, word [ebp - 0x34]
mov word [eax + 0xc3379], cx
push 6
call fcn.004764c0
add esp, 4
mov dword [ebp - 0x7138], eax
push 0
call fcn.004764c0
add esp, 4
mov dword [ebp - 0x713c], eax
mov byte [ebp - 0x7134], 0
push 0x103
push 0
lea edx, [ebp - 0x7133]
push edx
call fcn.005454d0
add esp, 0xc
mov eax, dword [ebp - 0x34]
cdq
mov ecx, 0x3e8
idiv ecx
cmp eax, 0xa
jge 0x42254c
mov eax, dword [ebp - 0x34]
cdq
mov ecx, 0x3e8
idiv ecx
push eax
push 0x578028
lea edx, [ebp - 0x7134]
push edx
call fcn.005456a9
add esp, 0xc
push 0
push 0
lea eax, [ebp - 0x7134]
push eax
mov ecx, dword [ebp - 0x7138]
push ecx
mov edx, dword [ebp - 0x713c]
push edx
mov ecx, 0x6eeef8
call fcn.0048ce80
jmp 0x42aafd
mov eax, dword [ebp - 0x1816c]
mov ecx, dword [ebp - 0x34]
mov dword [eax + 0xff73c], ecx
mov edx, dword [ebp - 0x1816c]
mov ax, word [ebp - 0x2e]
mov word [edx + 0xff740], ax
mov ecx, dword [ebp - 0x1816c]
mov dx, word [ebp - 0x2c]
mov word [ecx + 0xff742], dx
jmp 0x42aafd
mov eax, dword [ebp + 8]
push eax
lea ecx, [ebp - 0x34]
push ecx
mov ecx, dword [ebp - 0x1816c]
call fcn.0042d9e0
jmp 0x42aafd
mov edx, dword [ebp - 0x34]
mov dword [ebp - 0x18198], edx
cmp dword [ebp - 0x18198], 2
je 0x4225c8
cmp dword [ebp - 0x18198], 3
je 0x4225f7
cmp dword [ebp - 0x18198], 5
je 0x422626
jmp 0x422653
mov eax, dword [ebp - 0x1816c]
mov dword [eax + 0x46310], 0x1e
push 0x1a4
push 0
push 0x578014
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x43aac
call fcn.00513b70
jmp 0x422653
mov ecx, dword [ebp - 0x1816c]
mov dword [ecx + 0x46310], 0x1e
push 0x1a4
push 0
push 0x577ff8
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x43aac
call fcn.00513b70
jmp 0x422653
mov edx, dword [ebp - 0x1816c]
mov dword [edx + 0x46310], 0x1e
push 0x1a4
push 0
push 0x577fe4
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x43aac
call fcn.00513b70
jmp 0x42aafd
mov eax, dword [ebp - 0x1816c]
mov dword [eax + 0x46310], 0x1e
push 0x1a4
push 0
push 0x577fcc
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x43aac
call fcn.00513b70
jmp 0x42aafd
jmp 0x42aafd
mov ecx, dword [ebp - 0x1816c]
mov edx, dword [ebp - 0x34]
cmp edx, dword [ecx + 0xfb10c]
jne 0x4226d8
mov eax, dword [ebp - 0x1816c]
mov cx, word [ebp - 0x2e]
mov word [eax + 0xfb2a8], cx
mov edx, dword [ebp - 0x1816c]
mov ax, word [ebp - 0x2c]
mov word [edx + 0xfb2aa], ax
movzx ecx, word [ebp - 0x2a]
and ecx, 0xff
mov edx, dword [ebp - 0x1816c]
mov byte [edx + 0xfb299], cl
jmp 0x42aafd
jmp 0x42aafd
movzx eax, word [ebp - 0x2a]
mov dword [ebp - 0x7140], eax
mov byte [ebp - 0x794c], 0
push 0x7ff
push 0
lea ecx, [ebp - 0x794b]
push ecx
call fcn.005454d0
add esp, 0xc
push 0x800
lea edx, [ebp - 0x794c]
push edx
mov eax, dword [ebp + 8]
add eax, 0x10
push eax
call fcn.00509bc0
mov dword [ebp - 0x714c], eax
lea ecx, [ebp - 0x794c]
mov dword [ebp - 0x7144], ecx
mov dword [ebp - 0x7148], 0
mov dword [ebp - 0x7950], 0
mov dword [ebp - 0x7954], 0
jmp 0x422762
mov edx, dword [ebp - 0x7954]
add edx, 1
mov dword [ebp - 0x7954], edx
mov eax, dword [ebp - 0x7954]
cmp eax, dword [ebp - 0x7140]
jge 0x422851
push 0x2f
mov ecx, dword [ebp - 0x7144]
push ecx
call fcn.004372e0
add esp, 8
mov dword [ebp - 0x7148], eax
cmp dword [ebp - 0x7148], 0
je 0x42284a
mov edx, dword [ebp - 0x7148]
mov byte [edx], 0
mov eax, dword [ebp - 0x7148]
add eax, 1
mov dword [ebp - 0x7148], eax
push 0x2f
mov ecx, dword [ebp - 0x7148]
push ecx
call fcn.004372e0
add esp, 8
mov dword [ebp - 0x7950], eax
cmp dword [ebp - 0x7950], 0
je 0x422846
mov edx, dword [ebp - 0x7950]
mov byte [edx], 0
mov eax, dword [ebp - 0x7950]
add eax, 1
mov dword [ebp - 0x7950], eax
mov ecx, dword [ebp - 0x7144]
push ecx
mov edx, dword [ebp - 0x7148]
push edx
call fcn.00547d0c
add esp, 4
push eax
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x46314
call fcn.004a28c0
mov eax, dword [ebp - 0x7144]
push eax
mov ecx, dword [ebp - 0x7148]
push ecx
call fcn.00547d0c
add esp, 4
push eax
mov ecx, dword [ebp - 0x1816c]
add ecx, 0xc29e0
call fcn.004fd5e0
mov edx, dword [ebp - 0x7950]
mov dword [ebp - 0x7144], edx
jmp 0x422848
jmp 0x422851
jmp 0x42284c
jmp 0x422851
jmp 0x422753
jmp 0x42aafd
jmp 0x42aafd
mov eax, dword [ebp - 0x1816c]
mov cx, word [ebp - 0x2e]
mov word [eax + 0xfb38a], cx
mov edx, dword [ebp - 0x1816c]
mov ax, word [ebp - 0x2c]
mov word [edx + 0xfb38e], ax
movzx ecx, word [ebp - 0x2a]
and ecx, 0xff
mov edx, dword [ebp - 0x1816c]
mov byte [edx + 0x112708], cl
movzx eax, word [ebp - 0x2a]
shr eax, 8
and eax, 0xff
mov ecx, dword [ebp - 0x1816c]
mov byte [ecx + 0x112709], al
mov edx, dword [ebp - 0x34]
and edx, 0xffff
mov eax, dword [ebp - 0x1816c]
mov word [eax + 0x11270a], dx
mov ecx, dword [ebp - 0x34]
shr ecx, 0x10
and ecx, 0xffff
mov edx, dword [ebp - 0x1816c]
mov word [edx + 0x11270c], cx
mov eax, dword [ebp - 0x1816c]
movzx ecx, byte [eax + 0x112708]
test ecx, ecx
jle 0x42292b
mov edx, dword [ebp - 0x1816c]
movzx eax, word [edx + 0x11270a]
test eax, eax
jle 0x42292b
mov ecx, dword [ebp - 0x1816c]
movzx eax, word [ecx + 0x11270a]
mov edx, dword [ebp - 0x1816c]
movzx ecx, byte [edx + 0x112708]
cdq
idiv ecx
add eax, 1
mov edx, dword [ebp - 0x1816c]
mov word [edx + 0x11270a], ax
jmp 0x42293a
xor eax, eax
mov ecx, dword [ebp - 0x1816c]
mov word [ecx + 0x11270a], ax
mov edx, dword [ebp - 0x1816c]
movzx eax, byte [edx + 0x112709]
test eax, eax
jle 0x42298b
mov ecx, dword [ebp - 0x1816c]
movzx edx, word [ecx + 0x11270c]
test edx, edx
jle 0x42298b
mov eax, dword [ebp - 0x1816c]
movzx eax, word [eax + 0x11270c]
mov ecx, dword [ebp - 0x1816c]
movzx ecx, byte [ecx + 0x112709]
cdq
idiv ecx
add eax, 1
mov edx, dword [ebp - 0x1816c]
mov word [edx + 0x11270c], ax
jmp 0x42299a
xor eax, eax
mov ecx, dword [ebp - 0x1816c]
mov word [ecx + 0x11270c], ax
push 0
push 0xfa
push 6
mov ecx, 0x69ec08
call fcn.004edfb0
push eax
call dword [sym.imp.USER32.dll_SetTimer]
jmp 0x42aafd
movzx edx, word [ebp - 0x2e]
sub edx, 0x2711
mov eax, dword [ebp - 0x1816c]
mov dword [eax + 0x1126f8], edx
push 0x104
push 0
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x1125f0
push ecx
call fcn.005454d0
add esp, 0xc
push 0x104
mov edx, dword [ebp - 0x1816c]
add edx, 0x1125f0
push edx
mov eax, dword [ebp + 8]
add eax, 0x10
push eax
call fcn.00509bc0
mov ecx, dword [ebp - 0x1816c]
mov byte [ecx + 0x1126f4], 1
call fcn.0040ada0
mov edx, dword [ebp - 0x1816c]
mov dword [edx + 0x1126fc], eax
jmp 0x42aafd
mov ecx, dword [ebp - 0x1816c]
add ecx, 0xe72d0
call fcn.0043c1c0
mov ecx, dword [ebp - 0x1816c]
add ecx, 0xe72e8
call fcn.0043c1c0
mov eax, dword [ebp - 0x1816c]
mov dword [eax + 0xe5584], 0xffffffff
mov ecx, dword [ebp - 0x1816c]
mov dword [ecx + 0xe5588], 0xffffffff
mov edx, dword [ebp + 8]
add edx, 0x10
mov dword [ebp - 0x7958], edx
mov dword [ebp - 0x795c], 0
jmp 0x422a95
mov eax, dword [ebp - 0x795c]
add eax, 1
mov dword [ebp - 0x795c], eax
movzx ecx, word [ebp - 0x2a]
cmp dword [ebp - 0x795c], ecx
jge 0x422b6b
push 0x2f
mov edx, dword [ebp - 0x7958]
push edx
call fcn.004372e0
add esp, 8
mov dword [ebp - 0x7960], eax
cmp dword [ebp - 0x7960], 0
je 0x422b66
mov eax, dword [ebp - 0x7960]
mov byte [eax], 0
mov ecx, dword [ebp - 0x7960]
add ecx, 1
mov dword [ebp - 0x7960], ecx
lea ecx, [ebp - 0x79b4]
call fcn.0043b2c0
push 0x50
lea edx, [ebp - 0x79b4]
push edx
mov eax, dword [ebp - 0x7958]
push eax
call fcn.00509bc0
movzx ecx, word [ebp - 0x2e]
test ecx, ecx
jne 0x422b2e
sub esp, 0x50
mov ecx, 0x14
lea esi, [ebp - 0x79b4]
mov edi, esp
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [ebp - 0x1816c]
add ecx, 0xe72d0
call fcn.004379a0
jmp 0x422b5a
movzx edx, word [ebp - 0x2e]
cmp edx, 2
jne 0x422b5a
sub esp, 0x50
mov ecx, 0x14
lea esi, [ebp - 0x79b4]
mov edi, esp
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [ebp - 0x1816c]
add ecx, 0xe72e8
call fcn.004379a0
mov eax, dword [ebp - 0x7960]
mov dword [ebp - 0x7958], eax
jmp 0x422a86
mov ecx, dword [ebp - 0x1816c]
add ecx, 0xe54c8
call fcn.0043b9f0
movzx ecx, al
test ecx, ecx
jne 0x422bb4
mov edx, dword [ebp - 0x1816c]
mov eax, dword [edx + 0xe5578]
push eax
mov ecx, dword [ebp - 0x1816c]
add ecx, 0xe54c8
call fcn.0043bad0
push 0x13
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x41fe0
call fcn.00496ec0
mov byte [0x6657b9], 0
jmp 0x42aafd
mov ecx, dword [ebp - 0x1816c]
mov byte [ecx + 0x10080c], 1
mov edx, dword [ebp - 0x34]
shr edx, 0x10
and edx, 0xffff
movzx eax, dx
mov dword [ebp - 0x79b8], eax
mov ecx, dword [ebp - 0x34]
and ecx, 0xffff
movzx edx, cx
mov dword [ebp - 0x79bc], edx
mov eax, dword [ebp - 0x34]
push eax
mov ecx, dword [ebp - 0x1816c]
add ecx, 0xf83c0
call fcn.0043bb50
mov ecx, dword [ebp + 8]
push ecx
mov ecx, dword [ebp - 0x1816c]
add ecx, 0xf83c0
call fcn.0045f9f0
jmp 0x42aafd
mov byte [0x6657b9], 1
jmp 0x42aafd
push 0x2ac
mov edx, dword [ebp - 0x1816c]
add edx, 0xe7300
push edx
mov eax, dword [ebp + 8]
add eax, 0x10
push eax
call fcn.00509bc0
mov esi, dword [ebp - 0x1816c]
add esi, 0xe730c
mov edi, dword [ebp - 0x1816c]
add edi, 0xe75ac
mov ecx, 0x2a
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov ecx, dword [ebp - 0x1816c]
mov edx, dword [ecx + 0xe557c]
push edx
mov ecx, dword [ebp - 0x1816c]
add ecx, 0xe54c8
call fcn.0043bad0
jmp 0x42aafd
mov eax, dword [ebp - 0x34]
shr eax, 0x10
and eax, 0xffff
mov word [ebp - 0x79c0], ax
mov cl, byte [ebp - 0x79c0]
shr cl, 7
and cl, 1
mov edx, dword [ebp - 0x1816c]
mov byte [edx + 0xe51a1], cl
mov al, byte [ebp - 0x79c0]
shr al, 7
and al, 1
mov byte [0x663c1e], al
mov cl, byte [ebp - 0x79c0]
shr cl, 6
and cl, 1
mov edx, dword [ebp - 0x1816c]
mov byte [edx + 0xe51a5], cl
mov al, byte [ebp - 0x79c0]
shr al, 6
and al, 1
mov byte [0x663c21], al
mov cl, byte [ebp - 0x79bf]
shr cl, 1
and cl, 1
mov edx, dword [ebp - 0x1816c]
mov byte [edx + 0xe51a3], cl
mov al, byte [ebp - 0x79bf]
shr al, 1
and al, 1
mov byte [0x663c20], al
mov cl, byte [ebp - 0x79bf]
shr cl, 2
and cl, 1
mov edx, dword [ebp - 0x1816c]
mov byte [edx + 0xe51a0], cl
mov al, byte [ebp - 0x79bf]
shr al, 2
and al, 1
mov byte [0x663c1d], al
mov cl, byte [ebp - 0x79bf]
shr cl, 6
and cl, 1
mov edx, dword [ebp - 0x1816c]
mov byte [edx + 0xe5198], cl
mov al, byte [ebp - 0x79bf]
shr al, 6
and al, 1
mov byte [0x663c15], al
mov cl, byte [ebp - 0x79bf]
and cl, 1
mov edx, dword [ebp - 0x1816c]
mov byte [edx + 0xe5197], cl
mov al, byte [ebp - 0x79bf]
and al, 1
mov byte [0x663c14], al
mov cl, byte [ebp - 0x79bf]
shr cl, 7
and cl, 1
mov edx, dword [ebp - 0x1816c]
mov byte [edx + 0xe5199], cl
mov al, byte [ebp - 0x79bf]
shr al, 7
and al, 1
mov byte [0x663c16], al
mov cl, byte [ebp - 0x79bf]
shr cl, 3
and cl, 1
mov edx, dword [ebp - 0x1816c]
mov byte [edx + 0xe519a], cl
mov al, byte [ebp - 0x79bf]
shr al, 3
and al, 1
mov byte [0x663c17], al
mov ecx, dword [ebp - 0x1816c]
mov dl, byte [ebp - 0x2e]
mov byte [ecx + 0xff6bd], dl
mov byte [0x7d8066], 1
mov byte [ebp - 0x7acc], 0
push 0x103
push 0
lea eax, [ebp - 0x7acb]
push eax
call fcn.005454d0
add esp, 0xc
push 0x69df00
push 0x69dcf0
push str..king_saved_s__s.cfg
lea ecx, [ebp - 0x7acc]
push ecx
call fcn.005456a9
add esp, 0x10
lea edx, [ebp - 0x7acc]
push edx
call dword [0x69d4a8]
cmp dword [0x69d488], 0
je 0x422e61
mov eax, dword [ebp - 0x1816c]
mov ecx, dword [eax + 0xff557]
and ecx, 0xffff
movzx edx, cx
shl edx, 0x10
push edx
call dword [0x69d488]
mov eax, dword [0x6658cc]
mov dword [ebp - 0x1819c], eax
cmp dword [ebp - 0x1819c], 1
je 0x422e7f
jmp 0x422f9b
movzx ecx, byte [0x663c21]
test ecx, ecx
jne 0x422ea9
push 2
mov ecx, dword [ebp - 0x1816c]
add ecx, 0xe1b38
call fcn.0043b3f0
mov dword [ebp - 0x181a0], 0
jmp 0x422ec6
push 0
mov ecx, dword [ebp - 0x1816c]
add ecx, 0xe1b38
call fcn.0043b3f0
mov dword [ebp - 0x181a0], 0
movzx edx, byte [0x663c1e]
test edx, edx
jne 0x422ef0
push 2
mov ecx, dword [ebp - 0x1816c]
add ecx, 0xe1a08
call fcn.0043b3f0
mov dword [ebp - 0x181a4], 0
jmp 0x422f0d
push 0
mov ecx, dword [ebp - 0x1816c]
add ecx, 0xe1a08
call fcn.0043b3f0
mov dword [ebp - 0x181a4], 0
movzx eax, byte [0x663c20]
test eax, eax
jne 0x422f37
push 2
mov ecx, dword [ebp - 0x1816c]
add ecx, 0xe18d8
call fcn.0043b3f0
mov dword [ebp - 0x181a8], 0
jmp 0x422f54
push 0
mov ecx, dword [ebp - 0x1816c]
add ecx, 0xe18d8
call fcn.0043b3f0
mov dword [ebp - 0x181a8], 0
movzx ecx, byte [0x663c1d]
test ecx, ecx
jne 0x422f7e
push 2
mov ecx, dword [ebp - 0x1816c]
add ecx, 0xe17a8
call fcn.0043b3f0
mov dword [ebp - 0x181ac], 0
jmp 0x422f9b
push 0
mov ecx, dword [ebp - 0x1816c]
add ecx, 0xe17a8
call fcn.0043b3f0
mov dword [ebp - 0x181ac], 0
jmp 0x42aafd
push 0x2d10
push 0
mov edx, dword [ebp - 0x1816c]
add edx, 0xc6c5c
push edx
call fcn.005454d0
add esp, 0xc
push 0x104
push 0
mov eax, dword [ebp - 0x1816c]
add eax, 0xc6b55
push eax
call fcn.005454d0
add esp, 0xc
mov dword [ebp - 0x7ad0], 0xad1
push 0xad1
mov ecx, dword [ebp - 0x1816c]
add ecx, 0xc6084
push ecx
mov edx, dword [ebp + 8]
add edx, 0x10
push edx
call fcn.00509bc0
mov dword [ebp - 0x38], eax
cmp dword [0x6658c8], 0
jne 0x4230ac
mov eax, dword [ebp - 0x1816c]
mov ecx, dword [eax + 0xc6a38]
push ecx
call fcn.00547835
add esp, 4
test eax, eax
jle 0x42303c
mov edx, dword [ebp - 0x1816c]
mov eax, dword [edx + 0xc6a38]
mov dword [ebp - 0x181b0], eax
jmp 0x423046
mov dword [ebp - 0x181b0], 1
mov ecx, dword [ebp - 0x181b0]
mov dword [0x6658c8], ecx
mov dword [ebp - 0x7ad4], 0
jmp 0x42306d
mov edx, dword [ebp - 0x7ad4]
add edx, 1
mov dword [ebp - 0x7ad4], edx
cmp dword [ebp - 0x7ad4], 8
jge 0x423099
mov eax, dword [ebp - 0x7ad4]
mov ecx, dword [0x6658c8]
cmp ecx, dword [eax*4 + 0x5ad46c]
jne 0x423097
mov dword [0x6658c8], 2
jmp 0x423099
jmp 0x42305e
cmp dword [0x6658c8], 2
je 0x4230ac
mov dword [0x6658c8], 1
mov dword [ebp - 0x7ad8], 0
jmp 0x4230c7
mov edx, dword [ebp - 0x7ad8]
add edx, 1
mov dword [ebp - 0x7ad8], edx
cmp dword [ebp - 0x7ad8], 0xc
jge 0x42315f
mov eax, dword [ebp - 0x7ad8]
imul eax, eax, 0xaa
mov ecx, dword [ebp - 0x1816c]
lea esi, [ecx + eax + 0xc60d8]
mov edx, dword [ebp - 0x7ad8]
imul edx, edx, 0x338
mov eax, dword [ebp - 0x1816c]
lea edi, [eax + edx + 0xc6c5c]
mov ecx, 0x2a
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov ecx, dword [ebp - 0x7ad8]
imul ecx, ecx, 0x14
mov edx, dword [ebp - 0x1816c]
lea eax, [edx + ecx + 0xc6a3c]
mov ecx, dword [ebp - 0x7ad8]
imul ecx, ecx, 0x338
mov edx, dword [ebp - 0x1816c]
lea ecx, [edx + ecx + 0xc6d06]
mov edx, dword [eax]
mov dword [ecx], edx
mov edx, dword [eax + 4]
mov dword [ecx + 4], edx
mov edx, dword [eax + 8]
mov dword [ecx + 8], edx
mov edx, dword [eax + 0xc]
mov dword [ecx + 0xc], edx
mov eax, dword [eax + 0x10]
mov dword [ecx + 0x10], eax
jmp 0x4230b8
mov esi, dword [ebp - 0x1816c]
add esi, 0xc68e4
mov edi, dword [ebp - 0x1816c]
add edi, 0xc92fc
mov ecx, 0x2a
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov ecx, dword [ebp - 0x1816c]
add ecx, 0xc6b2c
mov edx, dword [ebp - 0x1816c]
add edx, 0xc93a6
mov eax, dword [ecx]
mov dword [edx], eax
mov eax, dword [ecx + 4]
mov dword [edx + 4], eax
mov eax, dword [ecx + 8]
mov dword [edx + 8], eax
mov eax, dword [ecx + 0xc]
mov dword [edx + 0xc], eax
mov ecx, dword [ecx + 0x10]
mov dword [edx + 0x10], ecx
mov esi, dword [ebp - 0x1816c]
add esi, 0xc698e
mov edi, dword [ebp - 0x1816c]
add edi, 0xc9634
mov ecx, 0x2a
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov edx, dword [ebp - 0x1816c]
add edx, 0xc6b40
mov eax, dword [ebp - 0x1816c]
add eax, 0xc96de
mov ecx, dword [edx]
mov dword [eax], ecx
mov ecx, dword [edx + 4]
mov dword [eax + 4], ecx
mov ecx, dword [edx + 8]
mov dword [eax + 8], ecx
mov ecx, dword [edx + 0xc]
mov dword [eax + 0xc], ecx
mov edx, dword [edx + 0x10]
mov dword [eax + 0x10], edx
mov ecx, dword [ebp - 0x1816c]
add ecx, 0xc5af4
call fcn.0043b9f0
movzx eax, al
test eax, eax
jne 0x423233
push 0x10
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x41fe0
call fcn.00496ec0
jmp 0x42aafd
lea ecx, [ebp - 0x7b44]
call fcn.0043b1f0
push 0x63
push 0
lea ecx, [ebp - 0x7b44]
push ecx
call fcn.005454d0
add esp, 0xc
push 0x63
lea edx, [ebp - 0x7b44]
push edx
mov eax, dword [ebp + 8]
add eax, 0x10
push eax
call fcn.00509bc0
mov dword [ebp - 0x38], eax
movzx ecx, byte [ebp - 0x7b42]
mov edx, dword [ebp - 0x1816c]
mov dword [edx + 0xc9a4c], ecx
movzx eax, byte [ebp - 0x7b43]
mov ecx, dword [ebp - 0x1816c]
mov dword [ecx + 0xc9a50], eax
lea edx, [ebp - 0x7b41]
push edx
push 0x104
mov eax, dword [ebp - 0x1816c]
add eax, 0xc9a54
push eax
call fcn.005477d6
add esp, 0xc
mov ecx, dword [ebp - 0x34]
push ecx
mov ecx, dword [ebp - 0x1816c]
call fcn.00420900
mov dword [ebp - 0x7b48], eax
cmp dword [ebp - 0x7b48], 0
je 0x423399
push str.CHero
mov edx, dword [ebp - 0x7b48]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x7b48]
mov edx, dword [eax + 0xc]
call edx
movzx eax, al
test eax, eax
je 0x423399
mov ecx, dword [ebp - 0x7b48]
mov dword [ebp - 0x7b4c], ecx
movsx edx, byte [ebp - 0x7b11]
test edx, edx
je 0x423366
lea eax, [ebp - 0x7b11]
push eax
push 0x104
mov ecx, dword [ebp - 0x7b4c]
add ecx, 0x300e
push ecx
call fcn.005477d6
add esp, 0xc
push 1
mov edx, dword [ebp - 0x7b4c]
movzx eax, byte [edx + 0x12c]
push eax
mov ecx, dword [ebp - 0x7b4c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x7b4c]
mov eax, dword [edx + 0xcc]
call eax
mov ecx, dword [ebp - 0x7b4c]
mov byte [ecx + 0x300d], 1
jmp 0x423399
push 0
mov edx, dword [ebp - 0x7b4c]
movzx eax, byte [edx + 0x12c]
push eax
mov ecx, dword [ebp - 0x7b4c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x7b4c]
mov eax, dword [edx + 0xcc]
call eax
mov ecx, dword [ebp - 0x7b4c]
mov byte [ecx + 0x300d], 0
jmp 0x42aafd
movzx edx, word [ebp - 0x2a]
cmp edx, 1
jne 0x423589
mov eax, dword [ebp - 0x34]
push eax
mov ecx, dword [ebp - 0x1816c]
call fcn.00420900
mov dword [ebp - 0x7b50], eax
cmp dword [ebp - 0x7b50], 0
je 0x4234b5
push 0x1a5
mov ecx, 0x7c0f70
call fcn.004f4290
mov dword [ebp - 0x7b58], eax
push 0x278
call fcn.00545848
add esp, 4
mov dword [ebp - 0x18064], eax
mov byte [ebp - 4], 7
cmp dword [ebp - 0x18064], 0
je 0x423415
mov ecx, dword [ebp - 0x18064]
call fcn.004b2720
mov dword [ebp - 0x181b4], eax
jmp 0x42341f
mov dword [ebp - 0x181b4], 0
mov ecx, dword [ebp - 0x181b4]
mov dword [ebp - 0x18060], ecx
mov byte [ebp - 4], 0
mov edx, dword [ebp - 0x18060]
mov dword [ebp - 0x7b54], edx
push 0
push 0xffffffffffffffff
push 0
push 0xa
push 0x1f4
push 0
push 0
mov eax, dword [ebp - 0x7b50]
movzx ecx, word [eax + 0x1a2]
push ecx
mov edx, dword [ebp - 0x7b50]
movzx eax, word [edx + 0x1a0]
push eax
mov ecx, dword [ebp - 0x7b50]
movzx edx, word [ecx + 0x1a2]
push edx
mov eax, dword [ebp - 0x7b50]
movzx ecx, word [eax + 0x1a0]
push ecx
mov edx, dword [ebp - 0x7b58]
push edx
mov eax, dword [ebp - 0x7b54]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x7b54]
mov eax, dword [edx]
call eax
lea ecx, [ebp - 0x7b54]
push ecx
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x1bf60
call fcn.00437b70
cmp dword [0x6658c4], 0
jne 0x423584
movzx edx, word [ebp - 0x2c]
and edx, 0xffff
movzx eax, dx
movzx ecx, word [ebp - 0x2e]
and ecx, 0xffff
movzx edx, cx
shl edx, 0x10
or eax, edx
push eax
call fcn.00547835
add esp, 4
test eax, eax
jle 0x423514
movzx eax, word [ebp - 0x2c]
and eax, 0xffff
movzx ecx, ax
movzx edx, word [ebp - 0x2e]
and edx, 0xffff
movzx eax, dx
shl eax, 0x10
or ecx, eax
mov dword [ebp - 0x181b8], ecx
jmp 0x42351e
mov dword [ebp - 0x181b8], 1
mov ecx, dword [ebp - 0x181b8]
mov dword [0x6658c4], ecx
mov dword [ebp - 0x7b5c], 0
jmp 0x423545
mov edx, dword [ebp - 0x7b5c]
add edx, 1
mov dword [ebp - 0x7b5c], edx
cmp dword [ebp - 0x7b5c], 8
jge 0x423571
mov eax, dword [ebp - 0x7b5c]
mov ecx, dword [0x6658c4]
cmp ecx, dword [eax*4 + 0x5ad46c]
jne 0x42356f
mov dword [0x6658c4], 2
jmp 0x423571
jmp 0x423536
cmp dword [0x6658c4], 2
je 0x423584
mov dword [0x6658c4], 1
jmp 0x4236ff
movzx edx, word [ebp - 0x2a]
test edx, edx
jne 0x4236ff
mov eax, dword [ebp - 0x34]
cdq
mov ecx, dword [ebp - 0x1816c]
mov dword [ecx + 0xff520], eax
mov dword [ecx + 0xff524], edx
mov edx, dword [ebp - 0x1816c]
movzx eax, word [edx + 0xff539]
mov dword [ebp - 0x7b64], eax
mov ecx, dword [ebp - 0x1816c]
mov dx, word [ebp - 0x2e]
mov word [ecx + 0xff539], dx
push 7
call fcn.004764c0
add esp, 4
mov dword [ebp - 0x7b6c], eax
push 2
call fcn.004764c0
add esp, 4
mov dword [ebp - 0x7b70], eax
push 0
push 0
push 0x577fa8
mov eax, dword [ebp - 0x7b6c]
push eax
mov ecx, dword [ebp - 0x7b70]
push ecx
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x41fe0
call fcn.0048ce80
push 0x1a5
mov ecx, 0x7c0f70
call fcn.004f4290
mov dword [ebp - 0x7b68], eax
push 0x278
call fcn.00545848
add esp, 4
mov dword [ebp - 0x1806c], eax
mov byte [ebp - 4], 8
cmp dword [ebp - 0x1806c], 0
je 0x42365f
mov ecx, dword [ebp - 0x1806c]
call fcn.004b2720
mov dword [ebp - 0x181bc], eax
jmp 0x423669
mov dword [ebp - 0x181bc], 0
mov edx, dword [ebp - 0x181bc]
mov dword [ebp - 0x18068], edx
mov byte [ebp - 4], 0
mov eax, dword [ebp - 0x18068]
mov dword [ebp - 0x7b60], eax
push 0
push 0xffffffffffffffff
push 0
push 0xa
push 0x1f4
push 0
push 0
mov ecx, dword [ebp - 0x1816c]
movzx edx, word [ecx + 0xfb2aa]
push edx
mov eax, dword [ebp - 0x1816c]
movzx ecx, word [eax + 0xfb2a8]
push ecx
mov edx, dword [ebp - 0x1816c]
movzx eax, word [edx + 0xfb2aa]
push eax
mov ecx, dword [ebp - 0x1816c]
movzx edx, word [ecx + 0xfb2a8]
push edx
mov eax, dword [ebp - 0x7b68]
push eax
mov ecx, dword [ebp - 0x7b60]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x7b60]
mov eax, dword [edx]
call eax
lea ecx, [ebp - 0x7b60]
push ecx
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x1bf60
call fcn.00437b70
jmp 0x42aafd
mov edx, dword [ebp - 0x1816c]
mov ax, word [ebp - 0x2e]
mov word [edx + 0x100b40], ax
mov ecx, dword [ebp - 0x1816c]
movzx edx, word [ecx + 0x100b40]
push edx
mov ecx, dword [ebp - 0x1816c]
add ecx, 0xc9b58
call fcn.004bf680
mov byte [ebp - 0x7b71], al
mov eax, dword [ebp - 0x1816c]
movzx ecx, word [eax + 0x100b40]
push ecx
mov ecx, dword [ebp - 0x1816c]
add ecx, 0xf83c0
call fcn.0045f900
mov byte [ebp - 0x7b71], al
movzx edx, byte [ebp - 0x7b71]
test edx, edx
jne 0x4237b2
push 2
call fcn.004764c0
add esp, 4
mov dword [ebp - 0x7b7c], eax
push 3
call fcn.004764c0
add esp, 4
mov dword [ebp - 0x7b78], eax
push 0
push 0
push 0x577f94
mov eax, dword [ebp - 0x7b78]
push eax
mov ecx, dword [ebp - 0x7b7c]
push ecx
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x41fe0
call fcn.0048ce80
mov edx, dword [ebp - 0x1816c]
mov byte [edx + 0x10080d], 1
jmp 0x42aafd
push 0
mov ecx, 0x7c0e48
call fcn.0043b450
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
push 0xe
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x41fe0
call fcn.00496ec0
mov eax, dword [ebp - 0x1816c]
mov byte [eax + 0x10080d], 0
jmp 0x42aafd
lea ecx, [ebp - 0x7d7c]
mov dword [ebp - 0x7d84], ecx
push 0x200
push 0
lea edx, [ebp - 0x7d7c]
push edx
call fcn.005454d0
add esp, 0xc
push 0x200
lea eax, [ebp - 0x7d7c]
push eax
mov ecx, dword [ebp + 8]
add ecx, 0x10
push ecx
call fcn.00509bc0
push 0x2f
mov edx, dword [ebp - 0x7d84]
push edx
call fcn.004372e0
add esp, 8
mov dword [ebp - 0x7d80], eax
cmp dword [ebp - 0x7d80], 0
je 0x4238fa
mov eax, dword [ebp - 0x7d80]
mov byte [eax], 0
mov ecx, dword [ebp - 0x7d80]
add ecx, 1
mov dword [ebp - 0x7d80], ecx
mov edx, dword [ebp - 0x7d84]
push edx
push 0x104
push 0x69ddf8
call fcn.005477d6
add esp, 0xc
mov eax, dword [ebp - 0x7d80]
push eax
call fcn.00547d0c
add esp, 4
mov dword [0x69dad8], eax
mov dword [0x69edfa], 0x6acf18
mov ecx, dword [0x69edfa]
mov dword [0x7d27d4], ecx
mov ecx, 0x7c46b0
call fcn.00504880
mov ecx, dword [ebp - 0x1816c]
call fcn.004321d0
mov edx, dword [ebp - 0x1816c]
mov dword [edx + 0xfb10c], 0
mov eax, dword [0x69dad8]
push eax
push 0x69ddf8
mov ecx, 0x69ec08
call fcn.004edfb0
push eax
mov ecx, 0x7c46b0
call fcn.00504420
jmp 0x42aafd
push 0x2010
call fcn.00545848
add esp, 4
mov dword [ebp - 0x18074], eax
mov byte [ebp - 4], 9
cmp dword [ebp - 0x18074], 0
je 0x423932
mov ecx, dword [ebp - 0x18074]
call fcn.0043b370
mov dword [ebp - 0x181c0], eax
jmp 0x42393c
mov dword [ebp - 0x181c0], 0
mov ecx, dword [ebp - 0x181c0]
mov dword [ebp - 0x18070], ecx
mov byte [ebp - 4], 0
mov edx, dword [ebp - 0x18070]
mov dword [ebp - 0x7d88], edx
cmp dword [ebp - 0x7d88], 0
je 0x4239cf
mov eax, dword [ebp - 0x7d88]
mov ecx, dword [ebp - 0x34]
mov dword [eax], ecx
mov edx, dword [ebp - 0x30]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x2c]
mov dword [eax + 8], ecx
mov edx, dword [ebp + 8]
add edx, 0x10
push edx
mov eax, dword [ebp - 0x7d88]
add eax, 0xc
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov ecx, dword [ebp - 0x7d88]
push ecx
mov ecx, dword [ebp - 0x1816c]
call fcn.0042d480
cmp dword [ebp - 0x7d88], 0
je 0x4239cf
mov edx, dword [ebp - 0x7d88]
mov dword [ebp - 0x18078], edx
mov eax, dword [ebp - 0x18078]
push eax
call fcn.00544d52
add esp, 4
mov dword [ebp - 0x7d88], 0
jmp 0x42aafd
mov ecx, dword [ebp + 8]
add ecx, 0x10
push ecx
mov ecx, dword [ebp - 0x1816c]
call fcn.004323c0
jmp 0x42aafd
push 0
mov ecx, dword [ebp - 0x1816c]
call fcn.00539990
mov edx, dword [ebp - 0x1816c]
mov byte [edx + 0x112700], 0
mov eax, dword [0x6658cc]
mov dword [ebp - 0x181c4], eax
cmp dword [ebp - 0x181c4], 0
je 0x423a24
cmp dword [ebp - 0x181c4], 1
je 0x423a30
jmp 0x423a7a
mov ecx, 0x7c46b0
call fcn.00506f80
jmp 0x423a7a
push 0x2000
lea ecx, [ebp - 0x9d8c]
push ecx
mov edx, dword [ebp + 8]
add edx, 0x10
push edx
call fcn.00509bc0
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
mov byte [ebp + eax - 0x9d8c], 0
lea ecx, [ebp - 0x9d8c]
push ecx
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x10d17c
mov edx, dword [ebp - 0x1816c]
mov eax, dword [edx + 0x10d17c]
mov edx, dword [eax + 8]
call edx
jmp 0x42aafd
push 0x104
mov eax, dword [ebp - 0x1816c]
add eax, 0xa55
push eax
mov ecx, dword [ebp + 8]
add ecx, 0x10
push ecx
call fcn.00509bc0
mov dword [ebp - 0x38], eax
mov edx, dword [ebp - 0x1816c]
add edx, dword [ebp - 0x38]
mov byte [edx + 0xa55], 0
jmp 0x42aafd
mov eax, dword [ebp - 0x1816c]
add eax, 0xc2ffa
mov dword [ebp - 0x9d90], eax
mov ecx, dword [ebp - 0x9d90]
movzx edx, byte [ecx + 0x4c]
add edx, 1
mov eax, dword [ebp - 0x9d90]
mov byte [eax + 0x4c], dl
mov ecx, dword [ebp - 0x9d90]
mov byte [ecx + 0x4d], 0
mov edx, dword [ebp - 0x9d90]
mov byte [edx + 0x4e], 0
jmp 0x42aafd
push 0x104
mov eax, dword [ebp - 0x1816c]
add eax, 0xff744
push eax
mov ecx, dword [ebp + 8]
add ecx, 0x10
push ecx
call fcn.00509bc0
jmp 0x42aafd
lea ecx, [ebp - 0x9e54]
call fcn.0043b810
push 0xbe
lea edx, [ebp - 0x9e54]
push edx
mov eax, dword [ebp + 8]
add eax, 0x10
push eax
call fcn.00509bc0
mov dword [ebp - 0x9d94], eax
lea ecx, [ebp - 0x9daa]
push ecx
sub esp, 0xac
mov ecx, 0x2a
lea esi, [ebp - 0x9e54]
mov edi, esp
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov edx, dword [ebp - 0x34]
push edx
mov ecx, dword [ebp - 0x1816c]
add ecx, 0xc29e0
call fcn.004fd6d0
movzx eax, al
test eax, eax
jne 0x423bac
lea ecx, [ebp - 0x9daa]
push ecx
sub esp, 0xac
mov ecx, 0x2a
lea esi, [ebp - 0x9e54]
mov edi, esp
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov edx, dword [ebp - 0x34]
push edx
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x46314
call fcn.004a2790
jmp 0x42aafd
mov byte [ebp - 0x9f64], 0
push 0x103
push 0
lea eax, [ebp - 0x9f63]
push eax
call fcn.005454d0
add esp, 0xc
mov byte [ebp - 0xa06c], 0
push 0x103
push 0
lea ecx, [ebp - 0xa06b]
push ecx
call fcn.005454d0
add esp, 0xc
push 0x104
lea edx, [ebp - 0xa06c]
push edx
mov eax, dword [ebp + 8]
add eax, 0x10
push eax
call fcn.00509bc0
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x9e58], 0
cmp dword [ebp - 0x38], 0
jle 0x423f71
mov ecx, dword [ebp - 0x38]
mov byte [ebp + ecx - 0xa06c], 0
mov byte [ebp - 0xa38c], 0
push 0x103
push 0
lea edx, [ebp - 0xa38b]
push edx
call fcn.005454d0
add esp, 0xc
mov byte [ebp - 0xa494], 0
push 0x103
push 0
lea eax, [ebp - 0xa493]
push eax
call fcn.005454d0
add esp, 0xc
mov byte [ebp - 0xa284], 0
push 0x103
push 0
lea ecx, [ebp - 0xa283]
push ecx
call fcn.005454d0
add esp, 0xc
mov byte [ebp - 0xa17c], 0
push 0x103
push 0
lea edx, [ebp - 0xa17b]
push edx
call fcn.005454d0
add esp, 0xc
lea eax, [ebp - 0xa17c]
push eax
lea ecx, [ebp - 0xa494]
push ecx
lea edx, [ebp - 0xa284]
push edx
lea eax, [ebp - 0xa38c]
push eax
push 0x577f70
lea ecx, [ebp - 0xa06c]
push ecx
call fcn.00548276
add esp, 0x18
mov dword [ebp - 0xa070], eax
lea edx, [ebp - 0xa284]
push edx
call fcn.00547d0c
add esp, 4
mov ecx, dword [ebp - 0x1816c]
mov dword [ecx + 0xff738], eax
movsx edx, byte [ebp - 0xa38c]
test edx, edx
je 0x423d28
lea eax, [ebp - 0xa38c]
push eax
call fcn.00547d17
add esp, 4
mov ecx, dword [ebp - 0x1816c]
add eax, dword [ecx + 0xff520]
adc edx, dword [ecx + 0xff524]
mov ecx, dword [ebp - 0x1816c]
mov dword [ecx + 0xff520], eax
mov dword [ecx + 0xff524], edx
movsx edx, byte [ebp - 0xa17c]
test edx, edx
je 0x423dda
lea eax, [ebp - 0xa17c]
push eax
call fcn.00547d0c
add esp, 4
cmp eax, 1
jne 0x423dda
lea ecx, [ebp - 0xa494]
push ecx
push 0x577f5c
lea edx, [ebp - 0x9f64]
push edx
call fcn.005456a9
add esp, 0xc
lea eax, [ebp - 0xa494]
push eax
call fcn.00547d17
add esp, 4
mov ecx, dword [ebp - 0x1816c]
mov dword [ecx + 0xff520], eax
mov dword [ecx + 0xff524], edx
push 3
call fcn.004764c0
add esp, 4
mov dword [ebp - 0xa498], eax
push 2
call fcn.004764c0
add esp, 4
mov dword [ebp - 0xa49c], eax
push 0
push 0
lea edx, [ebp - 0x9f64]
push edx
mov eax, dword [ebp - 0xa498]
push eax
mov ecx, dword [ebp - 0xa49c]
push ecx
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x41fe0
call fcn.0048ce80
jmp 0x423f6c
movzx edx, byte [0x7d62d4]
test edx, edx
je 0x423f6c
movsx eax, byte [ebp - 0xa38c]
test eax, eax
je 0x423f6c
lea ecx, [ebp - 0xa06c]
push ecx
call fcn.00547d17
add esp, 4
mov dword [ebp - 0x181cc], eax
mov dword [ebp - 0x181c8], edx
cmp dword [ebp - 0x181c8], 0
jl 0x423ec3
jg 0x423e2f
cmp dword [ebp - 0x181cc], 0
jbe 0x423ec3
movzx edx, word [ebp - 0x2c]
test edx, edx
jle 0x423e59
movzx eax, word [ebp - 0x2c]
push eax
lea ecx, [ebp - 0xa38c]
push ecx
push 0x577f38
lea edx, [ebp - 0x9f64]
push edx
call fcn.005456a9
add esp, 0x10
jmp 0x423e74
lea eax, [ebp - 0xa38c]
push eax
push 0x577f28
lea ecx, [ebp - 0x9f64]
push ecx
call fcn.005456a9
add esp, 0xc
push 3
call fcn.004764c0
add esp, 4
mov dword [ebp - 0xa4a0], eax
push 2
call fcn.004764c0
add esp, 4
mov dword [ebp - 0xa4a4], eax
push 0
push 0
lea edx, [ebp - 0x9f64]
push edx
mov eax, dword [ebp - 0xa4a0]
push eax
mov ecx, dword [ebp - 0xa4a4]
push ecx
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x41fe0
call fcn.0048ce80
jmp 0x423f6c
lea edx, [ebp - 0xa06c]
push edx
call fcn.00547d17
add esp, 4
mov dword [ebp - 0x181d4], eax
mov dword [ebp - 0x181d0], edx
cmp dword [ebp - 0x181d0], 0
jg 0x423f6c
jl 0x423ef6
cmp dword [ebp - 0x181d4], 0
jae 0x423f6c
lea eax, [ebp - 0xa06c]
push eax
call fcn.00547d17
add esp, 4
neg eax
adc edx, 0
neg edx
push edx
push eax
push 0x577f18
lea ecx, [ebp - 0x9f64]
push ecx
call fcn.005456a9
add esp, 0x10
push 3
call fcn.004764c0
add esp, 4
mov dword [ebp - 0xa4a8], eax
push 2
call fcn.004764c0
add esp, 4
mov dword [ebp - 0xa4ac], eax
push 0
push 0
lea edx, [ebp - 0x9f64]
push edx
mov eax, dword [ebp - 0xa4a8]
push eax
mov ecx, dword [ebp - 0xa4ac]
push ecx
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x41fe0
call fcn.0048ce80
jmp 0x424019
mov edx, dword [ebp - 0x1816c]
mov eax, dword [edx + 0xff55f]
mov dword [ebp - 0xa4b0], eax
mov ecx, dword [ebp - 0x1816c]
mov edx, dword [ebp - 0x34]
mov dword [ecx + 0xff55f], edx
mov eax, dword [ebp - 0x1816c]
mov ecx, dword [eax + 0xff55f]
sub ecx, dword [ebp - 0xa4b0]
test ecx, ecx
jle 0x424019
mov edx, dword [ebp - 0x1816c]
mov eax, dword [edx + 0xff55f]
sub eax, dword [ebp - 0xa4b0]
push eax
push 0x577f08
lea ecx, [ebp - 0x9f64]
push ecx
call fcn.005456a9
add esp, 0xc
push 3
call fcn.004764c0
add esp, 4
mov dword [ebp - 0xa4b4], eax
push 2
call fcn.004764c0
add esp, 4
mov dword [ebp - 0xa4b8], eax
push 0
push 0
lea edx, [ebp - 0x9f64]
push edx
mov eax, dword [ebp - 0xa4b4]
push eax
mov ecx, dword [ebp - 0xa4b8]
push ecx
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x41fe0
call fcn.0048ce80
movzx edx, word [ebp - 0x2a]
test edx, edx
jne 0x4240d9
mov eax, dword [ebp - 0x1816c]
movzx ecx, byte [eax + 0xc2ff9]
test ecx, ecx
je 0x4240d9
mov edx, dword [ebp - 0x1816c]
add edx, 0xc2ffa
mov dword [ebp - 0xa4bc], edx
mov eax, dword [ebp - 0xa4bc]
movzx ecx, byte [eax + 0x4d]
and ecx, 0xff
movzx edx, cl
mov eax, dword [ebp - 0xa4bc]
movzx ecx, byte [eax + 0x4e]
and ecx, 0xff
movzx eax, cl
shl eax, 8
or edx, eax
movzx ecx, dx
mov dword [ebp - 0xa4c0], ecx
movzx edx, word [ebp - 0x2c]
test edx, edx
je 0x424098
movzx eax, word [ebp - 0x2c]
add eax, dword [ebp - 0xa4c0]
mov dword [ebp - 0xa4c0], eax
mov ecx, dword [ebp - 0xa4c0]
and ecx, 0xffff
movzx edx, cx
mov dword [ebp - 0xa4c0], edx
mov eax, dword [ebp - 0xa4c0]
and eax, 0xff
mov ecx, dword [ebp - 0xa4bc]
mov byte [ecx + 0x4d], al
mov edx, dword [ebp - 0xa4c0]
shr edx, 8
and edx, 0xff
mov eax, dword [ebp - 0xa4bc]
mov byte [eax + 0x4e], dl
jmp 0x42aafd
mov ecx, dword [ebp - 0x34]
and ecx, 0xff
movzx edx, cl
and edx, 0xffff
mov eax, dword [ebp - 0x1816c]
mov word [eax + 0xff593], dx
movzx ecx, word [ebp - 0x2e]
and ecx, 0xff
mov edx, dword [ebp - 0x1816c]
mov byte [edx + 0xff595], cl
movzx eax, word [ebp - 0x2e]
shr eax, 8
and eax, 0xff
mov ecx, dword [ebp - 0x1816c]
mov byte [ecx + 0xff596], al
movzx edx, word [ebp - 0x2c]
and edx, 0xff
mov eax, dword [ebp - 0x1816c]
mov byte [eax + 0xff597], dl
movzx ecx, word [ebp - 0x2c]
shr ecx, 8
and ecx, 0xff
mov edx, dword [ebp - 0x1816c]
mov byte [edx + 0xff598], cl
movzx eax, word [ebp - 0x2a]
and eax, 0xff
mov ecx, dword [ebp - 0x1816c]
mov byte [ecx + 0xff599], al
movzx edx, word [ebp - 0x2a]
shr edx, 8
and edx, 0xff
mov eax, dword [ebp - 0x1816c]
mov byte [eax + 0xff59a], dl
mov ecx, dword [ebp - 0x1816c]
mov edx, dword [ebp - 0x1816c]
mov eax, dword [edx + 0xc303c]
mov dword [ecx + 0xe1eb4], eax
jmp 0x42aafd
mov ecx, dword [ebp - 0x1816c]
cmp dword [ecx + 0xe9c68], 0
je 0x4241e5
mov edx, dword [ebp - 0x1816c]
mov eax, dword [edx + 0xe9c68]
mov dword [ebp - 0x1807c], eax
mov ecx, dword [ebp - 0x1807c]
push ecx
call fcn.00544d5d
add esp, 4
mov edx, dword [ebp - 0x1816c]
mov dword [edx + 0xe9c68], 0
mov eax, dword [ebp - 0x1816c]
mov cl, byte [ebp - 0x2a]
mov byte [eax + 0xe9f98], cl
mov edx, dword [ebp - 0x1816c]
movzx eax, byte [edx + 0xe9f98]
test eax, eax
jle 0x424425
mov ecx, dword [ebp - 0x1816c]
movzx eax, byte [ecx + 0xe9f98]
xor ecx, ecx
mov edx, 0x67
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.00542ae0
add esp, 4
mov dword [ebp - 0x18080], eax
mov eax, dword [ebp - 0x1816c]
mov ecx, dword [ebp - 0x18080]
mov dword [eax + 0xe9c68], ecx
mov edx, dword [ebp - 0x1816c]
movzx eax, byte [edx + 0xe9f98]
imul eax, eax, 0x67
push eax
push 0
mov ecx, dword [ebp - 0x1816c]
mov edx, dword [ecx + 0xe9c68]
push edx
call fcn.005454d0
add esp, 0xc
mov eax, dword [ebp + 8]
add eax, 0x10
mov dword [ebp - 0xa4cc], eax
mov dword [ebp - 0xa4d0], 0
jmp 0x424296
mov ecx, dword [ebp - 0xa4d0]
add ecx, 1
mov dword [ebp - 0xa4d0], ecx
mov edx, dword [ebp - 0x1816c]
movzx eax, byte [edx + 0xe9f98]
cmp dword [ebp - 0xa4d0], eax
jge 0x424425
push 0x2f
mov ecx, dword [ebp - 0xa4cc]
push ecx
call fcn.004372e0
add esp, 8
mov dword [ebp - 0xa4c8], eax
cmp dword [ebp - 0xa4c8], 0
je 0x424420
mov edx, dword [ebp - 0xa4c8]
mov byte [edx], 0
push 0x67
lea eax, [ebp - 0xa53c]
push eax
mov ecx, dword [ebp - 0xa4cc]
push ecx
call fcn.00509bc0
push 0x67
lea edx, [ebp - 0xa53c]
push edx
mov eax, dword [ebp - 0xa4d0]
imul eax, eax, 0x67
mov ecx, dword [ebp - 0x1816c]
add eax, dword [ecx + 0xe9c68]
push eax
call fcn.00545160
add esp, 0xc
mov edx, dword [ebp - 0xa4d0]
imul edx, edx, 0x67
mov eax, dword [ebp - 0x1816c]
mov ecx, dword [eax + 0xe9c68]
movzx edx, word [ecx + edx + 6]
push edx
mov eax, dword [ebp - 0xa4d0]
imul eax, eax, 0x67
mov ecx, dword [ebp - 0x1816c]
mov edx, dword [ecx + 0xe9c68]
movzx eax, byte [edx + eax + 4]
push eax
mov ecx, dword [ebp - 0xa4d0]
push ecx
mov edx, dword [ebp - 0xa4d0]
imul edx, edx, 0x67
mov eax, dword [ebp - 0x1816c]
mov ecx, dword [eax + 0xe9c68]
lea edx, [ecx + edx + 8]
push edx
mov ecx, 0x7d27e8
call fcn.00449190
mov eax, dword [ebp - 0xa4d0]
imul eax, eax, 0x67
mov ecx, dword [ebp - 0x1816c]
mov edx, dword [ecx + 0xe9c68]
movzx eax, word [edx + eax + 6]
cmp eax, 0x6d
jne 0x4243c6
push 0x577efc
push 0x575830
mov ecx, dword [ebp - 0xa4d0]
imul ecx, ecx, 0x67
mov edx, dword [ebp - 0x1816c]
mov eax, dword [edx + 0xe9c68]
lea ecx, [eax + ecx + 8]
push ecx
call fcn.005456a9
add esp, 0xc
jmp 0x424411
mov edx, dword [ebp - 0xa4d0]
imul edx, edx, 0x67
mov eax, dword [ebp - 0x1816c]
mov ecx, dword [eax + 0xe9c68]
movzx edx, word [ecx + edx + 6]
cmp edx, 0x7c
jne 0x424411
push 0x577ef0
push 0x575830
mov eax, dword [ebp - 0xa4d0]
imul eax, eax, 0x67
mov ecx, dword [ebp - 0x1816c]
mov edx, dword [ecx + 0xe9c68]
lea eax, [edx + eax + 8]
push eax
call fcn.005456a9
add esp, 0xc
mov ecx, dword [ebp - 0xa4c8]
add ecx, 1
mov dword [ebp - 0xa4cc], ecx
jmp 0x424287
mov byte [ebp - 0xa4c1], 0
mov dword [ebp - 0xa540], 0
jmp 0x424447
mov edx, dword [ebp - 0xa540]
add edx, 1
mov dword [ebp - 0xa540], edx
cmp dword [ebp - 0xa540], 8
jge 0x424593
mov dword [ebp - 0xa544], 0
jmp 0x42446f
mov eax, dword [ebp - 0xa544]
add eax, 1
mov dword [ebp - 0xa544], eax
cmp dword [ebp - 0xa544], 0x32
jge 0x42458e
mov dword [ebp - 0xa548], 0
jmp 0x424497
mov ecx, dword [ebp - 0xa548]
add ecx, 1
mov dword [ebp - 0xa548], ecx
mov edx, dword [ebp - 0x1816c]
movzx eax, byte [edx + 0xe9f98]
cmp dword [ebp - 0xa548], eax
jge 0x424589
mov ecx, dword [ebp - 0xa540]
imul ecx, ecx, 0x64
mov edx, dword [ebp - 0xa544]
movzx eax, word [ecx + edx*2 + 0x5adf18]
mov ecx, dword [ebp - 0xa548]
imul ecx, ecx, 0x67
mov edx, dword [ebp - 0x1816c]
mov edx, dword [edx + 0xe9c68]
movzx ecx, word [edx + ecx + 6]
cmp eax, ecx
jne 0x424584
movzx edx, byte [ebp - 0xa4c1]
test edx, edx
jne 0x424544
mov eax, dword [ebp - 0xa540]
add eax, 0x2c7
mov ecx, dword [ebp - 0x1816c]
mov dword [ecx + 0xe9f9c], eax
mov edx, dword [ebp - 0x1816c]
mov eax, dword [ebp - 0xa540]
mov dword [edx + 0xe9f8c], eax
push 2
mov ecx, dword [ebp - 0xa540]
imul ecx, ecx, 0x130
mov edx, dword [ebp - 0x1816c]
lea ecx, [edx + ecx + 0xe8804]
call fcn.0043b3f0
mov byte [ebp - 0xa4c1], 1
push 1
mov eax, dword [ebp - 0xa540]
imul eax, eax, 0x130
mov ecx, dword [ebp - 0x1816c]
lea ecx, [ecx + eax + 0xe8804]
call fcn.0043b3f0
push 1
mov edx, dword [ebp - 0xa540]
imul edx, edx, 0x130
mov eax, dword [ebp - 0x1816c]
lea ecx, [eax + edx + 0xe8804]
call fcn.0043b3d0
jmp 0x424488
jmp 0x424460
jmp 0x424438
mov byte [0x7d8065], 1
jmp 0x42aafd
mov dword [ebp - 0xa54c], 0
jmp 0x4245ba
mov ecx, dword [ebp - 0xa54c]
add ecx, 1
mov dword [ebp - 0xa54c], ecx
mov edx, dword [ebp - 0x1816c]
movzx eax, byte [edx + 0xe9f98]
cmp dword [ebp - 0xa54c], eax
jge 0x424648
mov ecx, dword [ebp - 0xa54c]
imul ecx, ecx, 0x67
mov edx, dword [ebp - 0x1816c]
mov eax, dword [edx + 0xe9c68]
movzx ecx, word [eax + ecx + 6]
cmp ecx, dword [ebp - 0x34]
jne 0x424643
movzx edx, word [ebp - 0x2c]
and edx, 0xffff
movzx eax, dx
movzx ecx, word [ebp - 0x2a]
and ecx, 0xffff
movzx edx, cx
shl edx, 0x10
or eax, edx
mov ecx, dword [ebp - 0xa54c]
imul ecx, ecx, 0x67
mov edx, dword [ebp - 0x1816c]
mov edx, dword [edx + 0xe9c68]
mov dword [ecx + edx], eax
mov eax, dword [ebp - 0xa54c]
imul eax, eax, 0x67
mov ecx, dword [ebp - 0x1816c]
mov edx, dword [ecx + 0xe9c68]
mov cl, byte [ebp - 0x2e]
mov byte [edx + eax + 5], cl
jmp 0x424648
jmp 0x4245ab
jmp 0x42aafd
mov edx, dword [ebp + 8]
add edx, 0x10
mov dword [ebp - 0xa890], edx
mov dword [ebp - 0xa550], 0
lea ecx, [ebp - 0xa88c]
call fcn.004a65f0
mov byte [ebp - 4], 0xa
movzx eax, word [ebp - 0x30]
cmp eax, 0xc9
jne 0x4246e9
mov ecx, 0x7d27e8
call fcn.00445770
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x46314
call fcn.004a2b20
mov ecx, dword [ebp - 0x1816c]
add ecx, 0xe2ef4
call fcn.004e37f0
mov dword [ebp - 0xa894], 0
jmp 0x4246c4
mov ecx, dword [ebp - 0xa894]
add ecx, 1
mov dword [ebp - 0xa894], ecx
cmp dword [ebp - 0xa894], 0x258
jge 0x4246e9
mov edx, dword [ebp - 0xa894]
mov eax, dword [ebp - 0x1816c]
mov dword [eax + edx*4 + 0xc2054], 0
jmp 0x4246b5
push 0x2f
mov ecx, dword [ebp - 0xa890]
push ecx
call fcn.004372e0
add esp, 8
mov dword [ebp - 0xa554], eax
cmp dword [ebp - 0xa554], 0
je 0x4248ba
mov edx, dword [ebp - 0xa554]
mov byte [edx], 0
lea ecx, [ebp - 0xa954]
call fcn.0043b810
push 0xbe
push 0
lea eax, [ebp - 0xa954]
push eax
call fcn.005454d0
add esp, 0xc
push 0xbe
lea ecx, [ebp - 0xa954]
push ecx
mov edx, dword [ebp - 0xa890]
push edx
call fcn.00509bc0
mov ecx, 0x2a
lea esi, [ebp - 0xa954]
lea edi, [ebp - 0xa88c]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov eax, dword [ebp - 0xa8aa]
mov dword [ebp - 0xa7e2], eax
mov ecx, dword [ebp - 0xa8a6]
mov dword [ebp - 0xa7de], ecx
mov edx, dword [ebp - 0xa8a2]
mov dword [ebp - 0xa7da], edx
mov eax, dword [ebp - 0xa89e]
mov dword [ebp - 0xa7d6], eax
mov ecx, dword [ebp - 0xa89a]
mov dword [ebp - 0xa7d2], ecx
mov edx, dword [ebp - 0xa84a]
push edx
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x46314
call fcn.004a6420
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0xa88c]
push eax
mov ecx, 0x7d27e8
call fcn.00445540
lea ecx, [ebp - 0xa88c]
call fcn.004a6930
cmp dword [ebp - 0x38], 0
jl 0x424814
cmp dword [ebp - 0x38], 0x258
jge 0x424814
push 1
mov ecx, dword [ebp - 0x38]
push ecx
sub esp, 0x338
mov ecx, 0xce
lea esi, [ebp - 0xa88c]
mov edi, esp
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x46314
call fcn.004a2ba0
jmp 0x42483e
push 0
push 0
sub esp, 0x338
mov ecx, 0xce
lea esi, [ebp - 0xa88c]
mov edi, esp
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x46314
call fcn.004a2ba0
mov edx, dword [ebp - 0xa84a]
push edx
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x46314
call fcn.004a64e0
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0x258
jl 0x42489c
cmp dword [ebp - 0x38], 0x25e
jge 0x42489c
push 1
mov eax, dword [ebp - 0x38]
sub eax, 0x258
push eax
sub esp, 0x338
mov ecx, 0xce
lea esi, [ebp - 0xa88c]
mov edi, esp
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [ebp - 0x1816c]
add ecx, 0xe2ef4
call fcn.004e3860
mov ecx, dword [ebp - 0xa554]
add ecx, 1
mov dword [ebp - 0xa890], ecx
mov edx, dword [ebp - 0xa550]
add edx, 1
mov dword [ebp - 0xa550], edx
movzx eax, word [ebp - 0x2a]
cmp dword [ebp - 0xa550], eax
jge 0x4248d3
cmp dword [ebp - 0xa554], 0
jne 0x4246e9
mov ecx, dword [ebp - 0x1816c]
add ecx, 0xf8ac0
call fcn.0046eb80
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xa88c]
call fcn.004a6680
jmp 0x42aafd
mov ecx, dword [ebp + 8]
add ecx, 0x10
mov dword [ebp - 0xad50], ecx
lea ecx, [ebp - 0xad4c]
call fcn.004a65f0
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0xaa14]
call fcn.0043b810
push 0xbe
lea edx, [ebp - 0xaa14]
push edx
mov eax, dword [ebp - 0xad50]
push eax
call fcn.00509bc0
mov ecx, 0x2a
lea esi, [ebp - 0xaa14]
lea edi, [ebp - 0xad4c]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov ecx, dword [ebp - 0xa96a]
mov dword [ebp - 0xaca2], ecx
mov edx, dword [ebp - 0xa966]
mov dword [ebp - 0xac9e], edx
mov eax, dword [ebp - 0xa962]
mov dword [ebp - 0xac9a], eax
mov ecx, dword [ebp - 0xa95e]
mov dword [ebp - 0xac96], ecx
mov edx, dword [ebp - 0xa95a]
mov dword [ebp - 0xac92], edx
lea eax, [ebp - 0xad4c]
push eax
mov ecx, 0x77b1b8
call fcn.00475290
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xad4c]
call fcn.004a6680
jmp 0x42aafd
mov ecx, 0x77b1b8
call fcn.0043b9f0
movzx ecx, al
test ecx, ecx
je 0x4249e7
mov ecx, 0x77b1b8
call fcn.004753a0
mov ecx, 0x77b1b8
call fcn.004757b0
mov ecx, 0x77b1b8
call fcn.00474ce0
push 3
mov ecx, 0x6eeef8
call fcn.00496ec0
jmp 0x42aafd
mov ecx, 0x77b1b8
call fcn.0043b9f0
movzx edx, al
test edx, edx
je 0x424a40
cmp dword [0x77bae8], 0
jle 0x424a16
mov eax, dword [0x76ec69]
sub eax, dword [0x77bae8]
mov dword [0x76ec69], eax
mov ecx, 0x77b1b8
call fcn.004757b0
mov ecx, 0x77b1b8
call fcn.004756c0
mov ecx, 0x77b1b8
call fcn.00474ce0
push 3
mov ecx, 0x6eeef8
call fcn.00496ec0
jmp 0x42aafd
mov byte [ebp - 0xae5c], 0
push 0x103
push 0
lea ecx, [ebp - 0xae5b]
push ecx
call fcn.005454d0
add esp, 0xc
push 0x577ec4
push 0x575830
lea edx, [ebp - 0xae5c]
push edx
call fcn.005456a9
add esp, 0xc
push 7
call fcn.004764c0
add esp, 4
mov dword [ebp - 0xae60], eax
push 2
call fcn.004764c0
add esp, 4
mov dword [ebp - 0xae64], eax
push 0
push 0
lea eax, [ebp - 0xae5c]
push eax
mov ecx, dword [ebp - 0xae60]
push ecx
mov edx, dword [ebp - 0xae64]
push edx
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x41fe0
call fcn.0048ce80
jmp 0x42aafd
mov ecx, 0x77b1b8
call fcn.0043b9f0
movzx eax, al
test eax, eax
jne 0x424b56
push 3
mov ecx, 0x6eeef8
call fcn.00496ec0
mov ecx, dword [ebp + 8]
add ecx, 0x10
mov dword [ebp - 0xaf70], ecx
mov byte [ebp - 0xaf6c], 0
push 0x103
push 0
lea edx, [ebp - 0xaf6b]
push edx
call fcn.005454d0
add esp, 0xc
push 0x104
lea eax, [ebp - 0xaf6c]
push eax
mov ecx, dword [ebp - 0xaf70]
push ecx
call fcn.00509bc0
lea edx, [ebp - 0xaf6c]
push edx
mov ecx, 0x77b1b8
call fcn.004758f0
mov ecx, 0x6f322c
call fcn.0043b9f0
movzx eax, al
test eax, eax
jne 0x424b56
push 0
mov ecx, 0x6eeef8
call fcn.00496ec0
jmp 0x42aafd
mov ecx, dword [ebp - 0x34]
push ecx
mov ecx, 0x77b1b8
call fcn.004758a0
jmp 0x42aafd
mov ecx, dword [ebp - 0x1816c]
add ecx, 0xe9fa4
call fcn.0043b9f0
movzx edx, al
test edx, edx
jne 0x424b99
push 0x11
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x41fe0
call fcn.00496ec0
mov eax, dword [ebp - 0x1816c]
mov ecx, dword [ebp - 0x1816c]
mov dx, word [ecx + 0xfb2a8]
mov word [eax + 0x1119b8], dx
mov eax, dword [ebp - 0x1816c]
mov ecx, dword [ebp - 0x1816c]
mov dx, word [ecx + 0xfb2aa]
mov word [eax + 0x1119ba], dx
mov ecx, dword [ebp - 0x1816c]
add ecx, 0xe9fa4
call fcn.00472d50
mov eax, dword [ebp - 0x34]
push eax
mov ecx, dword [ebp - 0x1816c]
add ecx, 0xe9fa4
call fcn.00472da0
mov ecx, dword [ebp - 0x34]
push ecx
mov ecx, dword [ebp - 0x1816c]
add ecx, 0xee978
call fcn.004e6b60
mov edx, dword [ebp + 8]
add edx, 0x10
mov dword [ebp - 0xb0c0], edx
mov dword [ebp - 0xaf74], 0
push 0x2f
mov eax, dword [ebp - 0xb0c0]
push eax
call fcn.004372e0
add esp, 8
mov dword [ebp - 0xaf78], eax
cmp dword [ebp - 0xaf78], 0
je 0x424cfd
mov ecx, dword [ebp - 0xaf78]
mov byte [ecx], 0
lea ecx, [ebp - 0xb25c]
call fcn.00437300
push 0x194
lea edx, [ebp - 0xb25c]
push edx
mov eax, dword [ebp - 0xb0c0]
push eax
call fcn.00509bc0
mov ecx, 0x50
lea esi, [ebp - 0xb25c]
lea edi, [ebp - 0xb0bc]
rep movsd dword es:[edi], dword [esi]
mov byte [ebp - 0xb45c], 0
push 0x1ff
push 0
lea ecx, [ebp - 0xb45b]
push ecx
call fcn.005454d0
add esp, 0xc
push 0x200
lea edx, [ebp - 0xb45c]
push edx
mov eax, dword [ebp - 0xb0c0]
push eax
call fcn.00509bc0
mov dword [ebp - 0x38], eax
lea ecx, [ebp - 0xb11c]
push ecx
lea edx, [ebp - 0xb0dc]
push edx
lea eax, [ebp - 0xb0bc]
push eax
mov ecx, dword [ebp - 0x1816c]
add ecx, 0xe9fa4
call fcn.00471fc0
mov ecx, dword [ebp - 0xaf78]
add ecx, 1
mov dword [ebp - 0xb0c0], ecx
mov edx, dword [ebp - 0xaf74]
add edx, 1
mov dword [ebp - 0xaf74], edx
movzx eax, word [ebp - 0x2a]
cmp dword [ebp - 0xaf74], eax
jge 0x424d16
cmp dword [ebp - 0xaf78], 0
jne 0x424c1e
movzx ecx, word [ebp - 0x2c]
push ecx
movzx edx, word [ebp - 0x2e]
push edx
mov ecx, dword [ebp - 0x1816c]
add ecx, 0xe9fa4
call fcn.00472de0
cmp dword [ebp - 0xaf74], 0
jle 0x424d5e
push 0
mov ecx, dword [ebp - 0x1816c]
add ecx, 0xe9fa4
call fcn.00472e30
mov ecx, dword [ebp - 0x1816c]
add ecx, 0xe9fa4
call fcn.004726b0
jmp 0x42aafd
mov ecx, dword [ebp - 0x1816c]
add ecx, 0xe9fa4
call fcn.0043b9f0
movzx eax, al
test eax, eax
jne 0x424d8e
push 0x11
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x41fe0
call fcn.00496ec0
jmp 0x42aafd
push fcn.0043b770
push 0xe
push 0x14
lea ecx, [ebp - 0xbed4]
push ecx
call fcn.0043b1c0
mov edx, dword [ebp + 8]
add edx, 0x10
mov dword [ebp - 0xbdb4], edx
push 0x94c
push 0
lea eax, [ebp - 0xbdac]
push eax
call fcn.005454d0
add esp, 0xc
mov dword [ebp - 0xbed8], 0
jmp 0x424de5
mov ecx, dword [ebp - 0xbed8]
add ecx, 1
mov dword [ebp - 0xbed8], ecx
cmp dword [ebp - 0xbed8], 0xe
jge 0x425108
push 0x2f
mov edx, dword [ebp - 0xbdb4]
push edx
call fcn.004372e0
add esp, 8
mov dword [ebp - 0xbdb8], eax
cmp dword [ebp - 0xbdb8], 0
je 0x425101
mov eax, dword [ebp - 0xbdb8]
mov byte [eax], 0
mov ecx, dword [ebp - 0xbdb8]
add ecx, 1
mov dword [ebp - 0xbdb8], ecx
push 0x2f
mov edx, dword [ebp - 0xbdb8]
push edx
call fcn.004372e0
add esp, 8
mov dword [ebp - 0xbdb0], eax
cmp dword [ebp - 0xbdb0], 0
je 0x4250fd
mov eax, dword [ebp - 0xbdb0]
mov byte [eax], 0
mov ecx, dword [ebp - 0xbdb4]
push ecx
call fcn.00547d0c
add esp, 4
cmp eax, 0x58
je 0x425078
push 0xaa
mov edx, dword [ebp - 0xbed8]
imul edx, edx, 0xaa
lea eax, [ebp + edx - 0xbdac]
push eax
mov ecx, dword [ebp - 0xbdb8]
push ecx
call fcn.00509bc0
push 0
push 0
mov edx, dword [ebp - 0xbed8]
imul edx, edx, 0xaa
lea esi, [ebp + edx - 0xbdac]
sub esp, 0xac
mov ecx, 0x2a
mov edi, esp
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov eax, dword [ebp - 0xbdb4]
push eax
call fcn.00547d0c
add esp, 4
imul eax, eax, 0x339
mov ecx, dword [ebp - 0x1816c]
lea ecx, [ecx + eax + 0xc2cc1]
call fcn.004a6780
mov edx, dword [ebp - 0xbdb4]
push edx
call fcn.00547d0c
add esp, 4
imul eax, eax, 0x339
mov ecx, dword [ebp - 0x1816c]
mov byte [ecx + eax + 0xc2cc0], 1
mov edx, dword [ebp - 0xbdb0]
add edx, 1
mov dword [ebp - 0xbdb4], edx
mov eax, dword [ebp - 0x1816c]
movzx ecx, byte [eax + 0xfe21b]
test ecx, ecx
jne 0x425073
cmp dword [ebp - 0xbed8], 2
jge 0x425073
mov edx, dword [ebp - 0xbed8]
shl edx, 4
mov eax, dword [ebp - 0xbed8]
imul eax, eax, 0xaa
mov ecx, dword [edx + 0x66a7ec]
cmp ecx, dword [ebp + eax - 0xbd6a]
jne 0x424fe6
mov esi, dword [ebp - 0xbed8]
shl esi, 4
mov edx, dword [ebp - 0xbed8]
imul edx, edx, 0xaa
lea ecx, [ebp + edx - 0xbdac]
call fcn.0043b790
cmp dword [esi + 0x66a7f0], eax
jne 0x424fd4
mov eax, dword [ebp - 0xbed8]
shl eax, 4
mov ecx, dword [ebp - 0xbed8]
imul ecx, ecx, 0xaa
mov edx, dword [eax + 0x66a7f4]
cmp edx, dword [ebp + ecx - 0xbd08]
jne 0x424fd4
mov eax, dword [ebp - 0xbed8]
shl eax, 4
mov ecx, dword [ebp - 0xbed8]
imul ecx, ecx, 0xaa
mov edx, dword [eax + 0x66a7f8]
cmp edx, dword [ebp + ecx - 0xbd0c]
je 0x424fe6
mov eax, dword [ebp - 0x1816c]
mov byte [eax + 0xfe21b], 1
jmp 0x425073
mov ecx, dword [ebp - 0xbed8]
imul ecx, ecx, 0xaa
mov edx, dword [ebp - 0xbed8]
shl edx, 4
mov eax, dword [ebp + ecx - 0xbd6a]
mov dword [edx + 0x66a7ec], eax
mov ecx, dword [ebp - 0xbed8]
imul ecx, ecx, 0xaa
lea ecx, [ebp + ecx - 0xbdac]
call fcn.0043b790
mov edx, dword [ebp - 0xbed8]
shl edx, 4
mov dword [edx + 0x66a7f0], eax
mov eax, dword [ebp - 0xbed8]
imul eax, eax, 0xaa
mov ecx, dword [ebp - 0xbed8]
shl ecx, 4
mov edx, dword [ebp + eax - 0xbd08]
mov dword [ecx + 0x66a7f4], edx
mov eax, dword [ebp - 0xbed8]
imul eax, eax, 0xaa
mov ecx, dword [ebp - 0xbed8]
shl ecx, 4
mov edx, dword [ebp + eax - 0xbd0c]
mov dword [ecx + 0x66a7f8], edx
jmp 0x4250fb
push 0x118
lea eax, [ebp - 0xbed4]
push eax
mov ecx, dword [ebp - 0xbdb8]
push ecx
call fcn.00509bc0
mov dword [ebp - 0xbedc], 0
jmp 0x4250ab
mov edx, dword [ebp - 0xbedc]
add edx, 1
mov dword [ebp - 0xbedc], edx
cmp dword [ebp - 0xbedc], 0xe
jge 0x4250fb
mov eax, dword [ebp - 0xbedc]
imul eax, eax, 0x14
lea ecx, [ebp + eax - 0xbed4]
mov edx, dword [ebp - 0xbedc]
imul edx, edx, 0x339
mov eax, dword [ebp - 0x1816c]
lea edx, [eax + edx + 0xc2d6b]
mov eax, dword [ecx]
mov dword [edx], eax
mov eax, dword [ecx + 4]
mov dword [edx + 4], eax
mov eax, dword [ecx + 8]
mov dword [edx + 8], eax
mov eax, dword [ecx + 0xc]
mov dword [edx + 0xc], eax
mov ecx, dword [ecx + 0x10]
mov dword [edx + 0x10], ecx
jmp 0x42509c
jmp 0x4250ff
jmp 0x425108
jmp 0x425103
jmp 0x425108
jmp 0x424dd6
mov edx, dword [ebp - 0x1816c]
mov eax, dword [ebp - 0x1816c]
mov ecx, dword [eax + 0xc303c]
mov dword [edx + 0xe1eb4], ecx
jmp 0x42aafd
mov edx, dword [ebp - 0x1816c]
mov eax, dword [edx + 0xff59c]
sub eax, dword [ebp - 0x34]
mov dword [ebp - 0xbfe8], eax
mov ecx, dword [ebp - 0x1816c]
mov edx, dword [ebp - 0x34]
mov dword [ecx + 0xff59c], edx
push str.GOLD
mov eax, dword [ebp - 0x1816c]
add eax, 0x4203a
push eax
call fcn.00548180
add esp, 8
test eax, eax
jne 0x425182
push 0x67e
push 0
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x4202c
push ecx
call fcn.005454d0
add esp, 0xc
mov edx, dword [ebp - 0x1816c]
mov eax, dword [ebp - 0x34]
mov dword [edx + 0xc1d51], eax
cmp dword [ebp - 0xbfe8], 0
jge 0x425203
mov ecx, dword [ebp - 0xbfe8]
neg ecx
push ecx
push 0x577eb4
lea edx, [ebp - 0xbfe4]
push edx
call fcn.005456a9
add esp, 0xc
push 7
call fcn.004764c0
add esp, 4
mov dword [ebp - 0xbfec], eax
push 2
call fcn.004764c0
add esp, 4
mov dword [ebp - 0xbff0], eax
push 0
push 0
lea eax, [ebp - 0xbfe4]
push eax
mov ecx, dword [ebp - 0xbfec]
push ecx
mov edx, dword [ebp - 0xbff0]
push edx
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x41fe0
call fcn.0048ce80
jmp 0x425271
cmp dword [ebp - 0xbfe8], 0
jle 0x425271
mov eax, dword [ebp - 0xbfe8]
push eax
push 0x577ea4
lea ecx, [ebp - 0xbfe4]
push ecx
call fcn.005456a9
add esp, 0xc
push 7
call fcn.004764c0
add esp, 4
mov dword [ebp - 0xbff4], eax
push 2
call fcn.004764c0
add esp, 4
mov dword [ebp - 0xbff8], eax
push 0
push 0
lea edx, [ebp - 0xbfe4]
push edx
mov eax, dword [ebp - 0xbff4]
push eax
mov ecx, dword [ebp - 0xbff8]
push ecx
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x41fe0
call fcn.0048ce80
push 0
push 0
push 0x64
push 0x6a
push 0
push 0
push 0
push 0
mov ecx, 0x69e668
call fcn.005243a0
jmp 0x42aafd
push 0x67e
push 0
mov edx, dword [ebp - 0x1816c]
add edx, 0x4202c
push edx
call fcn.005454d0
add esp, 0xc
jmp 0x42aafd
lea ecx, [ebp - 0xc4ac]
call fcn.004a65f0
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0xc0bc]
call fcn.0043b810
push 0xbe
lea eax, [ebp - 0xc0bc]
push eax
mov ecx, dword [ebp + 8]
add ecx, 0x10
push ecx
call fcn.00509bc0
mov dword [ebp - 0xc170], eax
mov ecx, 0x2a
lea esi, [ebp - 0xc0bc]
lea edi, [ebp - 0xc16c]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
lea edx, [ebp - 0xc012]
push edx
push 0
sub esp, 0xac
mov ecx, 0x2a
lea esi, [ebp - 0xc16c]
mov edi, esp
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
lea ecx, [ebp - 0xc4ac]
call fcn.004a6780
sub esp, 0x338
mov ecx, 0xce
lea esi, [ebp - 0xc4ac]
mov edi, esp
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [ebp - 0x1816c]
add ecx, 0xc29e0
call fcn.004fd800
movzx eax, al
test eax, eax
jne 0x4254c0
movzx ecx, byte [ebp - 0xc14e]
push ecx
mov ecx, 0x69e668
call fcn.00526520
movzx edx, byte [0x7d83c0]
test edx, edx
je 0x425393
push 0x7d8088
mov eax, dword [0x7d80ca]
push eax
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x46314
call fcn.004a28c0
mov dword [ebp - 0xc4b0], 0
jmp 0x4253ae
mov ecx, dword [ebp - 0xc4b0]
add ecx, 1
mov dword [ebp - 0xc4b0], ecx
cmp dword [ebp - 0xc4b0], 0x258
jge 0x42547a
mov edx, dword [ebp - 0xc4b0]
imul edx, edx, 0x339
mov eax, dword [ebp - 0x1816c]
movzx ecx, byte [eax + edx + 0x48f80]
test ecx, ecx
je 0x425475
lea edx, [ebp - 0xc4ac]
push edx
mov eax, dword [ebp - 0xc4b0]
imul eax, eax, 0x339
mov ecx, dword [ebp - 0x1816c]
lea edx, [ecx + eax + 0x48f81]
push edx
call fcn.00548180
add esp, 8
test eax, eax
jne 0x425475
mov eax, dword [ebp - 0xc4b0]
imul eax, eax, 0x339
mov ecx, dword [ebp - 0x1816c]
mov edx, dword [ecx + eax + 0x48fc3]
cmp edx, dword [ebp - 0xc46a]
jne 0x425475
mov eax, dword [ebp - 0xc4b0]
imul eax, eax, 0x339
mov ecx, dword [ebp - 0x1816c]
lea edx, [ecx + eax + 0x48f81]
push edx
mov eax, dword [ebp - 0xc4b0]
imul eax, eax, 0x339
mov ecx, dword [ebp - 0x1816c]
mov edx, dword [ecx + eax + 0x48fc3]
push edx
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x46314
call fcn.004a28c0
jmp 0x42547a
jmp 0x42539f
lea ecx, [ebp - 0xc4ac]
call fcn.004a6930
push 1
push 0
sub esp, 0x338
mov ecx, 0xce
lea esi, [ebp - 0xc4ac]
mov edi, esp
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x46314
call fcn.004a2ba0
lea eax, [ebp - 0xc4ac]
push eax
mov ecx, 0x7d27e8
call fcn.00445540
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xc4ac]
call fcn.004a6680
jmp 0x42aafd
lea ecx, [ebp - 0xc964]
call fcn.0043b810
mov ecx, dword [ebp + 8]
add ecx, 0x10
mov dword [ebp - 0xc968], ecx
push 0xbe
lea edx, [ebp - 0xc964]
push edx
mov eax, dword [ebp - 0xc968]
push eax
call fcn.00509bc0
mov ecx, 0x2a
lea esi, [ebp - 0xc964]
lea edi, [ebp - 0xc564]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movzx ecx, byte [ebp - 0xc546]
push ecx
mov ecx, 0x69e668
call fcn.00526520
lea ecx, [ebp - 0xc8a4]
call fcn.004a65f0
mov byte [ebp - 4], 0xd
lea edx, [ebp - 0xc8ba]
push edx
push 0
sub esp, 0xac
mov ecx, 0x2a
lea esi, [ebp - 0xc564]
mov edi, esp
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
lea ecx, [ebp - 0xc8a4]
call fcn.004a6780
movzx eax, byte [0x7d83c0]
test eax, eax
je 0x42558c
push 0x7d8088
mov ecx, dword [0x7d80ca]
push ecx
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x46314
call fcn.004a28c0
mov byte [ebp - 0xc565], 0
mov dword [ebp - 0xc96c], 0
jmp 0x4255ae
mov edx, dword [ebp - 0xc96c]
add edx, 1
mov dword [ebp - 0xc96c], edx
cmp dword [ebp - 0xc96c], 0x258
jge 0x425634
mov eax, dword [ebp - 0xc96c]
imul eax, eax, 0x339
mov ecx, dword [ebp - 0x1816c]
movzx edx, byte [ecx + eax + 0x48f80]
test edx, edx
je 0x42562f
lea eax, [ebp - 0xc8a4]
push eax
mov ecx, dword [ebp - 0xc96c]
imul ecx, ecx, 0x339
mov edx, dword [ebp - 0x1816c]
lea eax, [edx + ecx + 0x48f81]
push eax
call fcn.00548180
add esp, 8
test eax, eax
jne 0x42562f
mov ecx, dword [ebp - 0xc96c]
imul ecx, ecx, 0x339
mov edx, dword [ebp - 0x1816c]
mov eax, dword [edx + ecx + 0x48fc3]
cmp eax, dword [ebp - 0xc862]
jne 0x42562f
mov byte [ebp - 0xc565], 1
jmp 0x425634
jmp 0x42559f
movzx ecx, byte [ebp - 0xc565]
test ecx, ecx
jne 0x425685
lea ecx, [ebp - 0xc8a4]
call fcn.004a6930
push 0
push 0
sub esp, 0x338
mov ecx, 0xce
lea esi, [ebp - 0xc8a4]
mov edi, esp
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x46314
call fcn.004a2ba0
lea edx, [ebp - 0xc8a4]
push edx
mov ecx, 0x7d27e8
call fcn.00445540
movzx eax, word [ebp - 0x30]
cmp eax, 0xc8
jne 0x42574a
movzx ecx, byte [ebp - 0xc867]
cmp ecx, 1
jg 0x4256bd
lea edx, [ebp - 0xc8a4]
push edx
push 0x577e94
lea eax, [ebp - 0xca7c]
push eax
call fcn.005456a9
add esp, 0xc
jmp 0x425700
movzx ecx, byte [ebp - 0xc857]
and ecx, 0xff
movzx edx, cl
movzx eax, byte [ebp - 0xc856]
and eax, 0xff
movzx ecx, al
shl ecx, 8
or edx, ecx
movzx edx, dx
push edx
lea eax, [ebp - 0xc8a4]
push eax
push 0x577e80
lea ecx, [ebp - 0xca7c]
push ecx
call fcn.005456a9
add esp, 0x10
push 7
call fcn.004764c0
add esp, 4
mov dword [ebp - 0xc970], eax
push 2
call fcn.004764c0
add esp, 4
mov dword [ebp - 0xc974], eax
push 0
push 0
lea edx, [ebp - 0xca7c]
push edx
mov eax, dword [ebp - 0xc970]
push eax
mov ecx, dword [ebp - 0xc974]
push ecx
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x41fe0
call fcn.0048ce80
mov ecx, dword [ebp - 0x1816c]
add ecx, 0xf8ac0
call fcn.0046eb80
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xc8a4]
call fcn.004a6680
jmp 0x42aafd
mov dword [ebp - 0xca80], 0
jmp 0x42578a
mov edx, dword [ebp - 0xca80]
add edx, 1
mov dword [ebp - 0xca80], edx
cmp dword [ebp - 0xca80], 0x259
jge 0x4259df
mov eax, dword [ebp - 0xca80]
imul eax, eax, 0x339
mov ecx, dword [ebp - 0x1816c]
mov edx, dword [ecx + eax + 0x48fc3]
cmp edx, dword [ebp - 0x34]
jne 0x4259da
mov eax, dword [ebp - 0xca80]
imul eax, eax, 0x339
mov ecx, dword [ebp - 0x1816c]
movzx edx, byte [ecx + eax + 0x48f9f]
push edx
mov ecx, 0x69e668
call fcn.00526520
mov eax, dword [ebp - 0xca80]
imul eax, eax, 0x339
mov ecx, dword [ebp - 0x1816c]
movzx edx, byte [ecx + eax + 0x48fce]
and edx, 0xff
movzx eax, dl
mov ecx, dword [ebp - 0xca80]
imul ecx, ecx, 0x339
mov edx, dword [ebp - 0x1816c]
movzx ecx, byte [edx + ecx + 0x48fcf]
and ecx, 0xff
movzx edx, cl
shl edx, 8
or eax, edx
movzx eax, ax
mov dword [ebp - 0xcb90], eax
movzx ecx, word [ebp - 0x2e]
and ecx, 0xff
mov edx, dword [ebp - 0xca80]
imul edx, edx, 0x339
mov eax, dword [ebp - 0x1816c]
mov byte [eax + edx + 0x48fce], cl
movzx ecx, word [ebp - 0x2e]
shr ecx, 8
and ecx, 0xff
mov edx, dword [ebp - 0xca80]
imul edx, edx, 0x339
mov eax, dword [ebp - 0x1816c]
mov byte [eax + edx + 0x48fcf], cl
movzx ecx, word [ebp - 0x2e]
sub ecx, dword [ebp - 0xcb90]
test ecx, ecx
jle 0x425918
movzx edx, word [ebp - 0x2e]
sub edx, dword [ebp - 0xcb90]
push edx
mov eax, dword [ebp - 0xca80]
imul eax, eax, 0x339
mov ecx, dword [ebp - 0x1816c]
lea edx, [ecx + eax + 0x48f81]
push edx
push 0x577e80
lea eax, [ebp - 0xcb8c]
push eax
call fcn.005456a9
add esp, 0x10
push 7
call fcn.004764c0
add esp, 4
mov dword [ebp - 0xcb94], eax
push 2
call fcn.004764c0
add esp, 4
mov dword [ebp - 0xcb98], eax
push 0
push 0
lea ecx, [ebp - 0xcb8c]
push ecx
mov edx, dword [ebp - 0xcb94]
push edx
mov eax, dword [ebp - 0xcb98]
push eax
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x41fe0
call fcn.0048ce80
jmp 0x4259b4
movzx ecx, word [ebp - 0x2e]
sub ecx, dword [ebp - 0xcb90]
jns 0x4259b4
movzx edx, word [ebp - 0x2e]
sub edx, dword [ebp - 0xcb90]
push edx
call fcn.00547835
add esp, 4
push eax
mov eax, dword [ebp - 0xca80]
imul eax, eax, 0x339
mov ecx, dword [ebp - 0x1816c]
lea edx, [ecx + eax + 0x48f81]
push edx
push 0x577e6c
lea eax, [ebp - 0xcb8c]
push eax
call fcn.005456a9
add esp, 0x10
push 7
call fcn.004764c0
add esp, 4
mov dword [ebp - 0xcb9c], eax
push 2
call fcn.004764c0
add esp, 4
mov dword [ebp - 0xcba0], eax
push 0
push 0
lea ecx, [ebp - 0xcb8c]
push ecx
mov edx, dword [ebp - 0xcb9c]
push edx
mov eax, dword [ebp - 0xcba0]
push eax
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x41fe0
call fcn.0048ce80
mov ecx, dword [ebp - 0xca80]
imul ecx, ecx, 0x339
mov edx, dword [ebp - 0x1816c]
lea eax, [edx + ecx + 0x48f81]
push eax
mov ecx, 0x7d27e8
call fcn.00445540
jmp 0x4259df
jmp 0x42577b
mov dword [ebp - 0xcba4], 0
jmp 0x4259fa
mov ecx, dword [ebp - 0xcba4]
add ecx, 1
mov dword [ebp - 0xcba4], ecx
cmp dword [ebp - 0xcba4], 6
jge 0x425b0f
mov edx, dword [ebp - 0xcba4]
imul edx, edx, 0x339
mov eax, dword [ebp - 0x1816c]
movzx ecx, byte [eax + edx + 0xe30d4]
test ecx, ecx
je 0x425b0a
mov edx, dword [ebp - 0xcba4]
imul edx, edx, 0x339
mov eax, dword [ebp - 0x1816c]
mov ecx, dword [eax + edx + 0xe3117]
cmp ecx, dword [ebp - 0x34]
jne 0x425b0a
mov edx, dword [ebp - 0xcba4]
imul edx, edx, 0x339
mov eax, dword [ebp - 0x1816c]
movzx ecx, byte [eax + edx + 0xe30f3]
push ecx
mov ecx, 0x69e668
call fcn.00526520
mov edx, dword [ebp - 0xcba4]
imul edx, edx, 0x339
mov eax, dword [ebp - 0x1816c]
movzx ecx, byte [eax + edx + 0xe3122]
and ecx, 0xff
movzx edx, cl
mov eax, dword [ebp - 0xcba4]
imul eax, eax, 0x339
mov ecx, dword [ebp - 0x1816c]
movzx eax, byte [ecx + eax + 0xe3123]
and eax, 0xff
movzx ecx, al
shl ecx, 8
or edx, ecx
movzx edx, dx
mov dword [ebp - 0xcba8], edx
movzx eax, word [ebp - 0x2e]
and eax, 0xff
mov ecx, dword [ebp - 0xcba4]
imul ecx, ecx, 0x339
mov edx, dword [ebp - 0x1816c]
mov byte [edx + ecx + 0xe3122], al
movzx eax, word [ebp - 0x2e]
shr eax, 8
and eax, 0xff
mov ecx, dword [ebp - 0xcba4]
imul ecx, ecx, 0x339
mov edx, dword [ebp - 0x1816c]
mov byte [edx + ecx + 0xe3123], al
jmp 0x4259eb
mov ecx, dword [ebp - 0x1816c]
add ecx, 0xf8ac0
call fcn.0046eb80
jmp 0x42aafd
mov eax, dword [ebp + 8]
add eax, 0x10
mov dword [ebp - 0xcdd0], eax
mov dword [ebp - 0xccb8], 0
push 0x2f
mov ecx, dword [ebp - 0xcdd0]
push ecx
call fcn.004372e0
add esp, 8
mov dword [ebp - 0xccbc], eax
cmp dword [ebp - 0xccbc], 0
je 0x425cbd
mov edx, dword [ebp - 0xccbc]
mov byte [edx], 0
mov eax, dword [ebp - 0xccbc]
add eax, 1
mov dword [ebp - 0xccbc], eax
push 0x104
lea ecx, [ebp - 0xccb4]
push ecx
mov edx, dword [ebp - 0xcdd0]
push edx
call fcn.00509bc0
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
mov byte [ebp + eax - 0xccb4], 0
push 0x2f
mov ecx, dword [ebp - 0xccbc]
push ecx
call fcn.004372e0
add esp, 8
mov dword [ebp - 0xcdd0], eax
cmp dword [ebp - 0xcdd0], 0
je 0x425cbd
mov edx, dword [ebp - 0xcdd0]
mov byte [edx], 0
mov eax, dword [ebp - 0xcdd0]
add eax, 1
mov dword [ebp - 0xcdd0], eax
push 0x104
lea ecx, [ebp - 0xcdcc]
push ecx
mov edx, dword [ebp - 0xcdd0]
push edx
call fcn.00509bc0
mov eax, dword [ebp - 0x38]
mov byte [ebp + eax - 0xcdcc], 0
lea ecx, [ebp - 0xcdcc]
push ecx
call fcn.00547d0c
add esp, 4
mov byte [ebp - 0xccbd], al
lea edx, [ebp - 0xccb4]
push edx
movsx eax, byte [ebp - 0xccbd]
push eax
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x46314
call fcn.004a28c0
lea ecx, [ebp - 0xccb4]
push ecx
movsx edx, byte [ebp - 0xccbd]
push edx
mov ecx, dword [ebp - 0x1816c]
add ecx, 0xc29e0
call fcn.004fd5e0
mov eax, dword [ebp - 0x1816c]
movzx ecx, byte [eax + 0xfe115]
test ecx, ecx
je 0x425c7b
movsx edx, byte [ebp - 0xccbd]
push edx
mov ecx, dword [ebp - 0x1816c]
add ecx, 0xf23d0
call fcn.00532410
lea eax, [ebp - 0xccb4]
push eax
push 0x577e60
lea ecx, [ebp - 0xcedc]
push ecx
call fcn.005456a9
add esp, 0xc
lea edx, [ebp - 0xcedc]
push edx
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x41fe0
call fcn.0046cd50
mov eax, dword [ebp - 0xccb8]
add eax, 1
mov dword [ebp - 0xccb8], eax
movzx ecx, word [ebp - 0x2a]
cmp dword [ebp - 0xccb8], ecx
jge 0x425cd6
cmp dword [ebp - 0xcdd0], 0
jne 0x425b3b
mov ecx, dword [ebp - 0x1816c]
add ecx, 0xf8ac0
call fcn.0046eb80
jmp 0x42aafd
mov edx, dword [0x577e58]
mov dword [ebp - 0xd5fc], edx
mov al, byte [0x577e5c]
mov byte [ebp - 0xd5f8], al
push 0xff
push 0
lea ecx, [ebp - 0xd5f7]
push ecx
call fcn.005454d0
add esp, 0xc
mov edx, dword [0x577e48]
mov dword [ebp - 0xd4f8], edx
mov eax, dword [0x577e4c]
mov dword [ebp - 0xd4f4], eax
mov ecx, dword [0x577e50]
mov dword [ebp - 0xd4f0], ecx
mov dl, byte [0x577e54]
mov byte [ebp - 0xd4ec], dl
push 0xf7
push 0
lea eax, [ebp - 0xd4eb]
push eax
call fcn.005454d0
add esp, 0xc
mov ecx, 7
mov esi, 0x577e28
lea edi, [ebp - 0xd3f4]
rep movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
push 0xe7
push 0
lea ecx, [ebp - 0xd3d7]
push ecx
call fcn.005454d0
add esp, 0xc
mov edx, dword [0x577e18]
mov dword [ebp - 0xd2f0], edx
mov eax, dword [0x577e1c]
mov dword [ebp - 0xd2ec], eax
mov ecx, dword [0x577e20]
mov dword [ebp - 0xd2e8], ecx
mov dx, word [0x577e24]
mov word [ebp - 0xd2e4], dx
mov al, byte [0x577e26]
mov byte [ebp - 0xd2e2], al
push 0xf5
push 0
lea ecx, [ebp - 0xd2e1]
push ecx
call fcn.005454d0
add esp, 0xc
mov ecx, 6
mov esi, 0x577dfc
lea edi, [ebp - 0xd1ec]
rep movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
push 0xeb
push 0
lea edx, [ebp - 0xd1d3]
push edx
call fcn.005454d0
add esp, 0xc
mov eax, dword [0x577dec]
mov dword [ebp - 0xd0e8], eax
mov ecx, dword [0x577df0]
mov dword [ebp - 0xd0e4], ecx
mov edx, dword [0x577df4]
mov dword [ebp - 0xd0e0], edx
mov al, byte [0x577df8]
mov byte [ebp - 0xd0dc], al
push 0xf7
push 0
lea ecx, [ebp - 0xd0db]
push ecx
call fcn.005454d0
add esp, 0xc
mov ecx, 6
mov esi, 0x577dd0
lea edi, [ebp - 0xcfe4]
rep movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
push 0xeb
push 0
lea edx, [ebp - 0xcfcb]
push edx
call fcn.005454d0
add esp, 0xc
push 0x7ad726
push 0x577dc4
lea eax, [ebp - 0xd0e8]
push eax
call fcn.005456a9
add esp, 0xc
movzx ecx, word [ebp - 0x2e]
test ecx, ecx
jl 0x425f0f
movzx edx, word [ebp - 0x2e]
cmp edx, 7
jge 0x425f0f
movzx eax, word [ebp - 0x2e]
mov dword [ebp - 0x181d8], eax
cmp dword [ebp - 0x181d8], 0
je 0x425eae
jmp 0x425ee5
movzx ecx, word [ebp - 0x2c]
and ecx, 0xffff
movzx edx, cx
movzx eax, word [ebp - 0x2a]
and eax, 0xffff
movzx ecx, ax
shl ecx, 0x10
or edx, ecx
mov dword [ebp - 0xd600], edx
mov edx, dword [ebp - 0xd600]
push edx
mov ecx, 0x79c200
call fcn.004f8e40
jmp 0x425f0f
push 0x1a4
push 0
movzx eax, word [ebp - 0x2e]
imul eax, eax, 0x104
lea ecx, [ebp + eax - 0xd5fc]
push ecx
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x43aac
call fcn.00513b70
jmp 0x42aafd
mov edx, dword [ebp - 0x34]
mov dword [ebp - 0xd94c], edx
movzx eax, word [ebp - 0x2e]
mov dword [ebp - 0xd604], eax
mov ecx, dword [ebp - 0xd94c]
push ecx
mov ecx, dword [ebp - 0x1816c]
add ecx, 0xef2e8
call fcn.0043bb30
mov ecx, dword [ebp - 0x1816c]
add ecx, 0xef2e8
call fcn.004f90b0
mov ecx, dword [ebp - 0x1816c]
add ecx, 0xef2e8
call fcn.004f8ed0
mov edx, dword [ebp + 8]
add edx, 0x10
mov dword [ebp - 0xd948], edx
mov dword [ebp - 0xd608], 0
lea ecx, [ebp - 0xd944]
call fcn.004a65f0
mov byte [ebp - 4], 0xe
push 0x2f
mov eax, dword [ebp - 0xd948]
push eax
call fcn.004372e0
add esp, 8
mov dword [ebp - 0xd60c], eax
cmp dword [ebp - 0xd60c], 0
je 0x42605d
mov ecx, dword [ebp - 0xd60c]
mov byte [ecx], 0
lea ecx, [ebp - 0xda0c]
call fcn.0043b810
push 0xbe
lea edx, [ebp - 0xda0c]
push edx
mov eax, dword [ebp - 0xd948]
push eax
call fcn.00509bc0
mov ecx, 0x2a
lea esi, [ebp - 0xda0c]
lea edi, [ebp - 0xd944]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov ecx, dword [ebp - 0xd962]
mov dword [ebp - 0xd89a], ecx
mov edx, dword [ebp - 0xd95e]
mov dword [ebp - 0xd896], edx
mov eax, dword [ebp - 0xd95a]
mov dword [ebp - 0xd892], eax
mov ecx, dword [ebp - 0xd956]
mov dword [ebp - 0xd88e], ecx
mov edx, dword [ebp - 0xd952]
mov dword [ebp - 0xd88a], edx
lea eax, [ebp - 0xd944]
push eax
mov ecx, dword [ebp - 0x1816c]
add ecx, 0xef2e8
call fcn.004f8f30
mov ecx, dword [ebp - 0xd60c]
add ecx, 1
mov dword [ebp - 0xd948], ecx
mov edx, dword [ebp - 0xd608]
add edx, 1
mov dword [ebp - 0xd608], edx
mov eax, dword [ebp - 0xd608]
cmp eax, dword [ebp - 0xd604]
jge 0x426078
cmp dword [ebp - 0xd60c], 0
jne 0x425f86
mov ecx, dword [ebp - 0x1816c]
add ecx, 0xef2e8
call fcn.0043b9f0
movzx ecx, al
test ecx, ecx
jne 0x4260a3
push 0x17
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x41fe0
call fcn.00496ec0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xd944]
call fcn.004a6680
jmp 0x42aafd
movzx edx, word [ebp - 0x2e]
test edx, edx
jne 0x426117
push 0x18
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x41fe0
call fcn.00496ec0
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x46314
call fcn.0043b9f0
movzx eax, al
test eax, eax
jne 0x426115
mov ecx, dword [ebp - 0x1816c]
add ecx, 0xf23d0
call fcn.0043b9f0
movzx ecx, al
test ecx, ecx
je 0x426115
push 0
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x41fe0
call fcn.00496ec0
jmp 0x42613d
movzx edx, word [ebp - 0x2e]
cmp edx, 1
jne 0x42613d
push 0x1a4
push 0
push 0x577dac
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x43aac
call fcn.00513b70
jmp 0x42aafd
mov eax, dword [0x577e58]
mov dword [ebp - 0xdf24], eax
mov cl, byte [0x577e5c]
mov byte [ebp - 0xdf20], cl
push 0xff
push 0
lea edx, [ebp - 0xdf1f]
push edx
call fcn.005454d0
add esp, 0xc
mov eax, dword [0x577d98]
mov dword [ebp - 0xde20], eax
mov ecx, dword [0x577d9c]
mov dword [ebp - 0xde1c], ecx
mov edx, dword [0x577da0]
mov dword [ebp - 0xde18], edx
mov eax, dword [0x577da4]
mov dword [ebp - 0xde14], eax
mov cx, word [0x577da8]
mov word [ebp - 0xde10], cx
mov dl, byte [0x577daa]
mov byte [ebp - 0xde0e], dl
push 0xf1
push 0
lea eax, [ebp - 0xde0d]
push eax
call fcn.005454d0
add esp, 0xc
mov ecx, dword [0x577dac]
mov dword [ebp - 0xdd1c], ecx
mov edx, dword [0x577db0]
mov dword [ebp - 0xdd18], edx
mov eax, dword [0x577db4]
mov dword [ebp - 0xdd14], eax
mov ecx, dword [0x577db8]
mov dword [ebp - 0xdd10], ecx
mov edx, dword [0x577dbc]
mov dword [ebp - 0xdd0c], edx
mov ax, word [0x577dc0]
mov word [ebp - 0xdd08], ax
push 0xee
push 0
lea ecx, [ebp - 0xdd06]
push ecx
call fcn.005454d0
add esp, 0xc
mov ecx, 7
mov esi, 0x577d78
lea edi, [ebp - 0xdc18]
rep movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
push 0xe7
push 0
lea edx, [ebp - 0xdbfb]
push edx
call fcn.005454d0
add esp, 0xc
mov eax, dword [0x577d6c]
mov dword [ebp - 0xdb14], eax
mov ecx, dword [0x577d70]
mov dword [ebp - 0xdb10], ecx
mov dx, word [0x577d74]
mov word [ebp - 0xdb0c], dx
mov al, byte [0x577d76]
mov byte [ebp - 0xdb0a], al
push 0xf9
push 0
lea ecx, [ebp - 0xdb09]
push ecx
call fcn.005454d0
add esp, 0xc
movzx edx, word [ebp - 0x2e]
test edx, edx
jl 0x426301
movzx eax, word [ebp - 0x2e]
cmp eax, 5
jge 0x426301
movzx ecx, word [ebp - 0x2e]
mov dword [ebp - 0x181dc], ecx
cmp dword [ebp - 0x181dc], 0
je 0x4262c9
cmp dword [ebp - 0x181dc], 4
je 0x4262d5
jmp 0x4262d7
mov ecx, 0x79f2e8
call fcn.00532490
jmp 0x426301
jmp 0x426301
push 0x1a4
push 0
movzx edx, word [ebp - 0x2e]
imul edx, edx, 0x104
lea eax, [ebp + edx - 0xdf24]
push eax
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x43aac
call fcn.00513b70
jmp 0x42aafd
mov ecx, dword [0x577d60]
mov dword [ebp - 0xe234], ecx
mov edx, dword [0x577d64]
mov dword [ebp - 0xe230], edx
mov al, byte [0x577d68]
mov byte [ebp - 0xe22c], al
push 0xfb
push 0
lea ecx, [ebp - 0xe22b]
push ecx
call fcn.005454d0
add esp, 0xc
mov edx, dword [0x577e48]
mov dword [ebp - 0xe130], edx
mov eax, dword [0x577e4c]
mov dword [ebp - 0xe12c], eax
mov ecx, dword [0x577e50]
mov dword [ebp - 0xe128], ecx
mov dl, byte [0x577e54]
mov byte [ebp - 0xe124], dl
push 0xf7
push 0
lea eax, [ebp - 0xe123]
push eax
call fcn.005454d0
add esp, 0xc
mov ecx, dword [0x577d50]
mov dword [ebp - 0xe02c], ecx
mov edx, dword [0x577d54]
mov dword [ebp - 0xe028], edx
mov eax, dword [0x577d58]
mov dword [ebp - 0xe024], eax
mov cl, byte [0x577d5c]
mov byte [ebp - 0xe020], cl
push 0xf7
push 0
lea edx, [ebp - 0xe01f]
push edx
call fcn.005454d0
add esp, 0xc
movzx eax, word [ebp - 0x2e]
test eax, eax
jl 0x42645d
movzx ecx, word [ebp - 0x2e]
cmp ecx, 3
jge 0x42645d
movzx edx, word [ebp - 0x2e]
mov dword [ebp - 0x181e0], edx
cmp dword [ebp - 0x181e0], 0
je 0x4263fc
cmp dword [ebp - 0x181e0], 1
je 0x426433
jmp 0x42645d
movzx eax, word [ebp - 0x2c]
and eax, 0xffff
movzx ecx, ax
movzx edx, word [ebp - 0x2a]
and edx, 0xffff
movzx eax, dx
shl eax, 0x10
or ecx, eax
mov dword [ebp - 0xe238], ecx
mov ecx, dword [ebp - 0xe238]
push ecx
mov ecx, 0x79f2e8
call fcn.00532550
jmp 0x42645d
push 0x1a4
push 0
movzx edx, word [ebp - 0x2e]
imul edx, edx, 0x104
lea eax, [ebp + edx - 0xe234]
push eax
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x43aac
call fcn.00513b70
jmp 0x42aafd
mov ecx, 0x79f2e8
call fcn.00532650
push 0
push 0
mov ecx, 0x7a8020
call fcn.0047cf10
mov byte [0x7ab02d], 0
jmp 0x42aafd
mov ecx, dword [0x577e58]
mov dword [ebp - 0xe854], ecx
mov dl, byte [0x577e5c]
mov byte [ebp - 0xe850], dl
push 0xff
push 0
lea eax, [ebp - 0xe84f]
push eax
call fcn.005454d0
add esp, 0xc
mov ecx, 5
mov esi, 0x577d38
lea edi, [ebp - 0xe750]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
push 0xed
push 0
lea ecx, [ebp - 0xe739]
push ecx
call fcn.005454d0
add esp, 0xc
mov edx, dword [0x577dac]
mov dword [ebp - 0xe64c], edx
mov eax, dword [0x577db0]
mov dword [ebp - 0xe648], eax
mov ecx, dword [0x577db4]
mov dword [ebp - 0xe644], ecx
mov edx, dword [0x577db8]
mov dword [ebp - 0xe640], edx
mov eax, dword [0x577dbc]
mov dword [ebp - 0xe63c], eax
mov cx, word [0x577dc0]
mov word [ebp - 0xe638], cx
push 0xee
push 0
lea edx, [ebp - 0xe636]
push edx
call fcn.005454d0
add esp, 0xc
mov ecx, 6
mov esi, 0x577d1c
lea edi, [ebp - 0xe548]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0xea
push 0
lea eax, [ebp - 0xe52e]
push eax
call fcn.005454d0
add esp, 0xc
mov ecx, dword [0x577d08]
mov dword [ebp - 0xe444], ecx
mov edx, dword [0x577d0c]
mov dword [ebp - 0xe440], edx
mov eax, dword [0x577d10]
mov dword [ebp - 0xe43c], eax
mov ecx, dword [0x577d14]
mov dword [ebp - 0xe438], ecx
mov dx, word [0x577d18]
mov word [ebp - 0xe434], dx
mov al, byte [0x577d1a]
mov byte [ebp - 0xe432], al
push 0xf1
push 0
lea ecx, [ebp - 0xe431]
push ecx
call fcn.005454d0
add esp, 0xc
mov edx, dword [0x577cf8]
mov dword [ebp - 0xe340], edx
mov eax, dword [0x577cfc]
mov dword [ebp - 0xe33c], eax
mov ecx, dword [0x577d00]
mov dword [ebp - 0xe338], ecx
mov dx, word [0x577d04]
mov word [ebp - 0xe334], dx
mov al, byte [0x577d06]
mov byte [ebp - 0xe332], al
push 0xf5
push 0
lea ecx, [ebp - 0xe331]
push ecx
call fcn.005454d0
add esp, 0xc
movzx edx, word [ebp - 0x2e]
test edx, edx
jle 0x426652
movzx eax, word [ebp - 0x2e]
cmp eax, 6
jge 0x426652
push 0x1a4
push 0
movzx ecx, word [ebp - 0x2e]
imul ecx, ecx, 0x104
lea edx, [ebp + ecx - 0xe854]
push edx
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x43aac
call fcn.00513b70
jmp 0x42aafd
mov byte [ebp - 0xe964], 0
push 0x103
push 0
lea eax, [ebp - 0xe963]
push eax
call fcn.005454d0
add esp, 0xc
mov dword [0x7d8060], 0
mov ecx, dword [ebp - 0x1816c]
mov edx, dword [ecx + 0x4207c]
cmp edx, dword [ebp - 0x34]
jne 0x4267c8
movzx eax, word [ebp - 0x2e]
test eax, eax
jle 0x4267c8
movzx ecx, word [ebp - 0x2e]
push ecx
mov edx, dword [ebp - 0x1816c]
add edx, 0x4203a
push edx
push 0x577ce0
lea eax, [ebp - 0xe964]
push eax
call fcn.005456a9
add esp, 0x10
movzx ecx, word [ebp - 0x2e]
and ecx, 0xff
mov edx, dword [ebp - 0x1816c]
mov byte [edx + 0x42087], cl
movzx eax, word [ebp - 0x2e]
shr eax, 8
and eax, 0xff
mov ecx, dword [ebp - 0x1816c]
mov byte [ecx + 0x42088], al
mov edx, dword [ebp - 0x1816c]
movzx eax, byte [edx + 0x42030]
test eax, eax
je 0x426764
movzx ecx, word [ebp - 0x2e]
test ecx, ecx
jle 0x426748
push 1
mov edx, dword [ebp - 0x1816c]
movsx eax, word [edx + 0x42348]
push eax
mov esi, dword [ebp - 0x1816c]
add esi, 0x4203a
sub esp, 0x338
mov ecx, 0xce
mov edi, esp
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [ebp - 0x1816c]
add ecx, 0xe2ef4
call fcn.004e3860
movzx ecx, word [ebp - 0x2e]
push ecx
mov edx, dword [ebp - 0x34]
push edx
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x46314
call fcn.004a29b0
jmp 0x4267a8
movzx eax, word [ebp - 0x2e]
test eax, eax
jle 0x4267a8
push 1
mov ecx, dword [ebp - 0x1816c]
movsx edx, word [ecx + 0x42348]
push edx
mov esi, dword [ebp - 0x1816c]
add esi, 0x4203a
sub esp, 0x338
mov ecx, 0xce
mov edi, esp
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x46314
call fcn.004a2ba0
push 0x67e
push 0
mov eax, dword [ebp - 0x1816c]
add eax, 0x4202c
push eax
call fcn.005454d0
add esp, 0xc
jmp 0x42689f
cmp dword [0x7d805c], 0
jl 0x4267ec
mov ecx, dword [0x7d805c]
push ecx
mov ecx, 0x7d27e8
call fcn.00445880
mov dword [0x7d805c], 0xffffffff
movzx edx, word [ebp - 0x2e]
push edx
mov eax, dword [ebp - 0x34]
push eax
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x41fe0
call fcn.0049e400
movzx ecx, word [ebp - 0x2e]
push ecx
mov edx, dword [ebp - 0x34]
push edx
mov ecx, dword [ebp - 0x1816c]
add ecx, 0xe2ef4
call fcn.004e40b0
mov byte [ebp - 0xea64], 0
push 0xff
push 0
lea eax, [ebp - 0xea63]
push eax
call fcn.005454d0
add esp, 0xc
movzx ecx, word [ebp - 0x2e]
push ecx
mov edx, dword [ebp - 0x34]
push edx
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x46314
call fcn.004a29b0
push eax
push 0x575830
lea eax, [ebp - 0xea64]
push eax
call fcn.005456a9
add esp, 0xc
movsx ecx, byte [ebp - 0xea64]
test ecx, ecx
je 0x42689f
movzx edx, word [ebp - 0x2e]
test edx, edx
jle 0x42689f
movzx eax, word [ebp - 0x2e]
push eax
lea ecx, [ebp - 0xea64]
push ecx
push 0x577ce0
lea edx, [ebp - 0xe964]
push edx
call fcn.005456a9
add esp, 0x10
push 7
call fcn.004764c0
add esp, 4
mov dword [ebp - 0xe858], eax
push 2
call fcn.004764c0
add esp, 4
mov dword [ebp - 0xe85c], eax
push 0
push 0
lea eax, [ebp - 0xe964]
push eax
mov ecx, dword [ebp - 0xe858]
push ecx
mov edx, dword [ebp - 0xe85c]
push edx
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x41fe0
call fcn.0048ce80
mov ecx, dword [ebp - 0x1816c]
add ecx, 0xf8ac0
call fcn.0046eb80
jmp 0x42aafd
mov ecx, 0x7d27e8
call fcn.00445400
mov eax, dword [ebp - 0x1816c]
movsx ecx, byte [eax + 0x4203a]
test ecx, ecx
je 0x4269e5
mov dword [ebp - 0xea70], 0
mov edx, dword [ebp - 0x1816c]
movzx eax, byte [edx + 0x42058]
cmp eax, 0x33
jne 0x426955
push 0x577cd0
push 0x575830
mov ecx, dword [ebp - 0xea70]
push ecx
call fcn.005456a9
add esp, 0xc
jmp 0x42699b
mov edx, dword [ebp - 0x1816c]
movzx eax, byte [edx + 0x42058]
cmp eax, 4
jne 0x426982
push 0x577cc0
push 0x575830
mov ecx, dword [ebp - 0xea70]
push ecx
call fcn.005456a9
add esp, 0xc
jmp 0x42699b
push 0x577cb4
push 0x575830
mov edx, dword [ebp - 0xea70]
push edx
call fcn.005456a9
add esp, 0xc
push 2
call fcn.004764c0
add esp, 4
mov dword [ebp - 0xea6c], eax
push 3
call fcn.004764c0
add esp, 4
mov dword [ebp - 0xea68], eax
push 0
push 0
mov eax, dword [ebp - 0xea70]
push eax
mov ecx, dword [ebp - 0xea68]
push ecx
mov edx, dword [ebp - 0xea6c]
push edx
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x41fe0
call fcn.0048ce80
jmp 0x42aafd
mov eax, dword [ebp - 0x1816c]
cmp dword [eax + 0xe9c68], 0
je 0x426b88
mov ecx, dword [ebp - 0x1816c]
mov dl, byte [ecx + 0xe9f98]
add dl, 1
mov eax, dword [ebp - 0x1816c]
mov byte [eax + 0xe9f98], dl
mov ecx, dword [ebp - 0x1816c]
movzx eax, byte [ecx + 0xe9f98]
xor ecx, ecx
mov edx, 0x67
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.00542ae0
add esp, 4
mov dword [ebp - 0x18084], eax
mov eax, dword [ebp - 0x18084]
mov dword [ebp - 0xea74], eax
mov ecx, dword [ebp - 0x1816c]
movzx edx, byte [ecx + 0xe9f98]
sub edx, 1
imul edx, edx, 0x67
push edx
mov eax, dword [ebp - 0x1816c]
mov ecx, dword [eax + 0xe9c68]
push ecx
mov edx, dword [ebp - 0xea74]
push edx
call fcn.00545160
add esp, 0xc
mov eax, dword [ebp - 0x1816c]
cmp dword [eax + 0xe9c68], 0
je 0x426ac0
mov ecx, dword [ebp - 0x1816c]
mov edx, dword [ecx + 0xe9c68]
mov dword [ebp - 0x18088], edx
mov eax, dword [ebp - 0x18088]
push eax
call fcn.00544d5d
add esp, 4
mov ecx, dword [ebp - 0x1816c]
mov dword [ecx + 0xe9c68], 0
push 0x67
mov edx, dword [ebp - 0x1816c]
movzx eax, byte [edx + 0xe9f98]
sub eax, 1
imul eax, eax, 0x67
add eax, dword [ebp - 0xea74]
push eax
mov ecx, dword [ebp + 8]
add ecx, 0x10
push ecx
call fcn.00509bc0
mov edx, dword [ebp - 0x1816c]
mov eax, dword [ebp - 0xea74]
mov dword [edx + 0xe9c68], eax
mov ecx, dword [ebp - 0x1816c]
movzx edx, byte [ecx + 0xe9f98]
sub edx, 1
imul edx, edx, 0x67
mov eax, dword [ebp - 0x1816c]
mov ecx, dword [eax + 0xe9c68]
movzx edx, word [ecx + edx + 6]
push edx
mov eax, dword [ebp - 0x1816c]
movzx ecx, byte [eax + 0xe9f98]
sub ecx, 1
imul ecx, ecx, 0x67
mov edx, dword [ebp - 0x1816c]
mov eax, dword [edx + 0xe9c68]
movzx ecx, byte [eax + ecx + 4]
push ecx
mov edx, dword [ebp - 0x1816c]
movzx eax, byte [edx + 0xe9f98]
sub eax, 1
push eax
mov ecx, dword [ebp - 0x1816c]
movzx edx, byte [ecx + 0xe9f98]
sub edx, 1
imul edx, edx, 0x67
mov eax, dword [ebp - 0x1816c]
mov ecx, dword [eax + 0xe9c68]
lea edx, [ecx + edx + 8]
push edx
mov ecx, 0x7d27e8
call fcn.00449190
jmp 0x426c85
mov eax, dword [ebp - 0x1816c]
mov cl, byte [eax + 0xe9f98]
add cl, 1
mov edx, dword [ebp - 0x1816c]
mov byte [edx + 0xe9f98], cl
mov eax, dword [ebp - 0x1816c]
movzx eax, byte [eax + 0xe9f98]
xor ecx, ecx
mov edx, 0x67
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.00542ae0
add esp, 4
mov dword [ebp - 0x1808c], eax
mov eax, dword [ebp - 0x1816c]
mov ecx, dword [ebp - 0x1808c]
mov dword [eax + 0xe9c68], ecx
push 0x67
mov edx, dword [ebp - 0x1816c]
mov eax, dword [edx + 0xe9c68]
push eax
mov ecx, dword [ebp + 8]
add ecx, 0x10
push ecx
call fcn.00509bc0
mov edx, dword [ebp - 0x1816c]
movzx eax, byte [edx + 0xe9f98]
sub eax, 1
imul eax, eax, 0x67
mov ecx, dword [ebp - 0x1816c]
mov edx, dword [ecx + 0xe9c68]
movzx eax, word [edx + eax + 6]
push eax
mov ecx, dword [ebp - 0x1816c]
movzx edx, byte [ecx + 0xe9f98]
sub edx, 1
imul edx, edx, 0x67
mov eax, dword [ebp - 0x1816c]
mov ecx, dword [eax + 0xe9c68]
movzx edx, byte [ecx + edx + 4]
push edx
mov eax, dword [ebp - 0x1816c]
movzx ecx, byte [eax + 0xe9f98]
sub ecx, 1
push ecx
mov edx, dword [ebp - 0x1816c]
movzx eax, byte [edx + 0xe9f98]
sub eax, 1
imul eax, eax, 0x67
mov ecx, dword [ebp - 0x1816c]
mov edx, dword [ecx + 0xe9c68]
lea eax, [edx + eax + 8]
push eax
mov ecx, 0x7d27e8
call fcn.00449190
mov dword [ebp - 0xea78], 0
jmp 0x426ca0
mov ecx, dword [ebp - 0xea78]
add ecx, 1
mov dword [ebp - 0xea78], ecx
cmp dword [ebp - 0xea78], 8
jge 0x426d89
mov dword [ebp - 0xea7c], 0
jmp 0x426cc8
mov edx, dword [ebp - 0xea7c]
add edx, 1
mov dword [ebp - 0xea7c], edx
cmp dword [ebp - 0xea7c], 0x32
jge 0x426d84
mov dword [ebp - 0xea80], 0
jmp 0x426cf0
mov eax, dword [ebp - 0xea80]
add eax, 1
mov dword [ebp - 0xea80], eax
mov ecx, dword [ebp - 0x1816c]
movzx edx, byte [ecx + 0xe9f98]
cmp dword [ebp - 0xea80], edx
jge 0x426d7f
mov eax, dword [ebp - 0xea78]
imul eax, eax, 0x64
mov ecx, dword [ebp - 0xea7c]
movzx edx, word [eax + ecx*2 + 0x5adf18]
mov eax, dword [ebp - 0xea80]
imul eax, eax, 0x67
mov ecx, dword [ebp - 0x1816c]
mov ecx, dword [ecx + 0xe9c68]
movzx eax, word [ecx + eax + 6]
cmp edx, eax
jne 0x426d7a
push 1
mov ecx, dword [ebp - 0xea78]
imul ecx, ecx, 0x130
mov edx, dword [ebp - 0x1816c]
lea ecx, [edx + ecx + 0xe8804]
call fcn.0043b3f0
push 1
mov eax, dword [ebp - 0xea78]
imul eax, eax, 0x130
mov ecx, dword [ebp - 0x1816c]
lea ecx, [ecx + eax + 0xe8804]
call fcn.0043b3d0
jmp 0x426ce1
jmp 0x426cb9
jmp 0x426c91
jmp 0x42aafd
mov dword [ebp - 0xea84], 0
jmp 0x426da9
mov edx, dword [ebp - 0xea84]
add edx, 1
mov dword [ebp - 0xea84], edx
mov eax, dword [ebp - 0x1816c]
movzx ecx, byte [eax + 0xe9f98]
cmp dword [ebp - 0xea84], ecx
jge 0x426f5b
mov edx, dword [ebp - 0xea84]
imul edx, edx, 0x67
mov eax, dword [ebp - 0x1816c]
mov ecx, dword [eax + 0xe9c68]
movzx edx, word [ecx + edx + 6]
cmp edx, dword [ebp - 0x34]
jne 0x426f56
push 7
call fcn.004764c0
add esp, 4
mov dword [ebp - 0xea88], eax
push 2
call fcn.004764c0
add esp, 4
mov dword [ebp - 0xea8c], eax
mov byte [ebp - 0xeb8c], 0
push 0xff
push 0
lea eax, [ebp - 0xeb8b]
push eax
call fcn.005454d0
add esp, 0xc
mov ecx, dword [ebp - 0xea84]
imul ecx, ecx, 0x67
mov edx, dword [ebp - 0x1816c]
mov eax, dword [edx + 0xe9c68]
lea ecx, [eax + ecx + 8]
push ecx
push 0x577c9c
lea edx, [ebp - 0xeb8c]
push edx
call fcn.005456a9
add esp, 0xc
push 0
push 0
lea eax, [ebp - 0xeb8c]
push eax
mov ecx, dword [ebp - 0xea88]
push ecx
mov edx, dword [ebp - 0xea8c]
push edx
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x41fe0
call fcn.0048ce80
mov eax, dword [ebp - 0xea84]
mov dword [ebp - 0xeb90], eax
jmp 0x426e97
mov ecx, dword [ebp - 0xeb90]
add ecx, 1
mov dword [ebp - 0xeb90], ecx
mov edx, dword [ebp - 0x1816c]
movzx eax, byte [edx + 0xe9f98]
sub eax, 1
cmp dword [ebp - 0xeb90], eax
jge 0x426eec
mov ecx, dword [ebp - 0xeb90]
add ecx, 1
imul ecx, ecx, 0x67
mov edx, dword [ebp - 0x1816c]
mov esi, dword [edx + 0xe9c68]
add esi, ecx
mov eax, dword [ebp - 0xeb90]
imul eax, eax, 0x67
mov ecx, dword [ebp - 0x1816c]
mov edi, dword [ecx + 0xe9c68]
add edi, eax
mov ecx, 0x19
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
jmp 0x426e88
push 0x67
push 0
mov edx, dword [ebp - 0x1816c]
movzx eax, byte [edx + 0xe9f98]
sub eax, 1
imul eax, eax, 0x67
mov ecx, dword [ebp - 0x1816c]
add eax, dword [ecx + 0xe9c68]
push eax
call fcn.005454d0
add esp, 0xc
mov edx, dword [ebp - 0x1816c]
movzx eax, byte [edx + 0xe9f98]
sub eax, 1
push eax
mov ecx, dword [ebp - 0xea84]
push ecx
mov ecx, 0x7d27e8
call fcn.00448cd0
mov edx, dword [ebp - 0x1816c]
mov al, byte [edx + 0xe9f98]
sub al, 1
mov ecx, dword [ebp - 0x1816c]
mov byte [ecx + 0xe9f98], al
jmp 0x426f5b
jmp 0x426d9a
mov dword [ebp - 0xeb94], 0
jmp 0x426f76
mov edx, dword [ebp - 0xeb94]
add edx, 1
mov dword [ebp - 0xeb94], edx
cmp dword [ebp - 0xeb94], 8
jge 0x42709f
push 0
mov eax, dword [ebp - 0xeb94]
imul eax, eax, 0x130
mov ecx, dword [ebp - 0x1816c]
lea ecx, [ecx + eax + 0xe8804]
call fcn.0043b3f0
push 0
mov edx, dword [ebp - 0xeb94]
imul edx, edx, 0x130
mov eax, dword [ebp - 0x1816c]
lea ecx, [eax + edx + 0xe8804]
call fcn.0043b3d0
mov dword [ebp - 0xeb98], 0
jmp 0x426fde
mov ecx, dword [ebp - 0xeb98]
add ecx, 1
mov dword [ebp - 0xeb98], ecx
cmp dword [ebp - 0xeb98], 0x32
jge 0x42709a
mov dword [ebp - 0xeb9c], 0
jmp 0x427006
mov edx, dword [ebp - 0xeb9c]
add edx, 1
mov dword [ebp - 0xeb9c], edx
mov eax, dword [ebp - 0x1816c]
movzx ecx, byte [eax + 0xe9f98]
cmp dword [ebp - 0xeb9c], ecx
jge 0x427095
mov edx, dword [ebp - 0xeb94]
imul edx, edx, 0x64
mov eax, dword [ebp - 0xeb98]
movzx ecx, word [edx + eax*2 + 0x5adf18]
mov edx, dword [ebp - 0xeb9c]
imul edx, edx, 0x67
mov eax, dword [ebp - 0x1816c]
mov eax, dword [eax + 0xe9c68]
movzx edx, word [eax + edx + 6]
cmp ecx, edx
jne 0x427090
push 1
mov eax, dword [ebp - 0xeb94]
imul eax, eax, 0x130
mov ecx, dword [ebp - 0x1816c]
lea ecx, [ecx + eax + 0xe8804]
call fcn.0043b3f0
push 1
mov edx, dword [ebp - 0xeb94]
imul edx, edx, 0x130
mov eax, dword [ebp - 0x1816c]
lea ecx, [eax + edx + 0xe8804]
call fcn.0043b3d0
jmp 0x426ff7
jmp 0x426fcf
jmp 0x426f67
mov ecx, 0x7d27e8
call fcn.00446ed0
jmp 0x42aafd
lea ecx, [ebp - 0xeba0]
call fcn.0043b010
push 4
lea ecx, [ebp - 0x34]
push ecx
lea edx, [ebp - 0xeba0]
push edx
call fcn.00545160
add esp, 4
mov eax, esp
mov ecx, dword [0x7aaf68]
mov dword [eax], ecx
mov dx, word [0x7aaf6c]
mov word [eax + 4], dx
mov eax, dword [ebp - 0xeba0]
push eax
mov ecx, 0x7a8020
call fcn.00483610
movzx ecx, byte [0x7d83c0]
test ecx, ecx
je 0x42715c
mov dword [ebp - 0xeba4], 0x7718d9
mov edx, dword [ebp - 0xeba4]
mov byte [edx], 1
push 0x7d8088
mov ecx, dword [ebp - 0xeba4]
add ecx, 1
call fcn.0043b8e0
mov byte [0x7d83c0], 0
push 0x7d8088
mov eax, dword [0x7d80ca]
push eax
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x46314
call fcn.004a28c0
push 0x338
push 0
push 0x7d8088
call fcn.005454d0
add esp, 0xc
movzx ecx, byte [0x7d83ec]
test ecx, ecx
je 0x4271ab
push 0xb
sub esp, 0x338
mov ecx, 0xce
mov esi, 0x7d83fb
mov edi, esp
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [ebp - 0x1816c]
add ecx, 0xc29e0
call fcn.004fd9c0
push 0x339
push 0
push 0x7d83ed
call fcn.005454d0
add esp, 0xc
mov byte [0x7d83ec], 0
jmp 0x42721f
mov edx, dword [ebp - 0x1816c]
movzx eax, byte [edx + 0x4202c]
test eax, eax
je 0x42721f
mov ecx, dword [ebp - 0x1816c]
cmp dword [ecx + 0xc5aec], 0
jl 0x42721f
mov edx, dword [ebp - 0x1816c]
cmp dword [edx + 0xc5aec], 0xe
jge 0x42721f
mov eax, dword [ebp - 0x1816c]
add eax, 0x4202c
push eax
mov ecx, dword [ebp - 0x1816c]
mov edx, dword [ecx + 0xc5aec]
push edx
mov ecx, dword [ebp - 0x1816c]
add ecx, 0xc29e0
call fcn.004fdcc0
push 0x339
push 0
mov eax, dword [ebp - 0x1816c]
add eax, 0x4202c
push eax
call fcn.005454d0
add esp, 0xc
jmp 0x42aafd
movzx ecx, byte [0x7d83c0]
test ecx, ecx
je 0x42724a
mov byte [0x7d83c0], 0
push 0x338
push 0
push 0x7d8088
call fcn.005454d0
add esp, 0xc
mov edx, dword [ebp - 0x1816c]
movzx eax, byte [edx + 0x4202c]
test eax, eax
je 0x42732e
mov ecx, dword [ebp - 0x1816c]
mov edx, dword [ecx + 0x42032]
mov dword [ebp - 0x181e4], edx
cmp dword [ebp - 0x181e4], 1
je 0x427291
cmp dword [ebp - 0x181e4], 2
je 0x4272bd
cmp dword [ebp - 0x181e4], 3
je 0x4272e9
jmp 0x427313
mov eax, dword [ebp - 0x1816c]
add eax, 0x4202c
push eax
mov ecx, dword [ebp - 0x1816c]
mov edx, dword [ecx + 0x42036]
push edx
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x46314
call fcn.004a3760
jmp 0x427313
mov eax, dword [ebp - 0x1816c]
add eax, 0x4202c
push eax
mov ecx, dword [ebp - 0x1816c]
mov edx, dword [ecx + 0x42036]
push edx
mov ecx, dword [ebp - 0x1816c]
add ecx, 0xe2ef4
call fcn.004e3ad0
jmp 0x427313
mov eax, dword [ebp - 0x1816c]
add eax, 0x4202c
push eax
mov ecx, dword [ebp - 0x1816c]
mov edx, dword [ecx + 0x42036]
push edx
mov ecx, dword [ebp - 0x1816c]
add ecx, 0xc29e0
call fcn.004fdcc0
push 0x339
push 0
mov eax, dword [ebp - 0x1816c]
add eax, 0x4202c
push eax
call fcn.005454d0
add esp, 0xc
jmp 0x42aafd
lea ecx, [ebp - 0xeba8]
call fcn.0043b010
push 4
lea ecx, [ebp - 0x34]
push ecx
lea edx, [ebp - 0xeba8]
push edx
call fcn.00545160
add esp, 4
mov eax, esp
mov ecx, dword [0x7aaf68]
mov dword [eax], ecx
mov dx, word [0x7aaf6c]
mov word [eax + 4], dx
mov eax, dword [ebp - 0xeba8]
push eax
mov ecx, 0x7a8020
call fcn.00483610
mov ecx, dword [ebp - 0x1816c]
movzx edx, byte [ecx + 0x4202c]
test edx, edx
je 0x4273a5
push 0x339
push 0
mov eax, dword [ebp - 0x1816c]
add eax, 0x4202c
push eax
call fcn.005454d0
add esp, 0xc
movzx ecx, byte [0x7d83c0]
test ecx, ecx
je 0x4273cb
mov byte [0x7d83c0], 0
push 0x338
push 0
push 0x7d8088
call fcn.005454d0
add esp, 0xc
jmp 0x42aafd
mov edx, dword [ebp - 0x1816c]
movzx eax, byte [edx + 0x4202c]
test eax, eax
je 0x427429
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x4202c
push ecx
mov edx, dword [ebp - 0x1816c]
movsx eax, word [edx + 0x42348]
push eax
mov ecx, dword [ebp - 0x1816c]
add ecx, 0xc29e0
call fcn.004fdcc0
push 0x339
push 0
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x4202c
push ecx
call fcn.005454d0
add esp, 0xc
movzx edx, byte [0x7d83c0]
test edx, edx
je 0x42744f
mov byte [0x7d83c0], 0
push 0x338
push 0
push 0x7d8088
call fcn.005454d0
add esp, 0xc
jmp 0x42aafd
mov dword [ebp - 0xebb0], 0
lea ecx, [ebp - 0xebac]
call fcn.00437db0
lea eax, [ebp - 0x18090]
push eax
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x1bf78
call fcn.00437d00
mov ecx, dword [eax]
mov dword [ebp - 0xebac], ecx
jmp 0x42749f
push 0
lea edx, [ebp - 0x18094]
push edx
lea ecx, [ebp - 0xebac]
call fcn.00437dd0
lea eax, [ebp - 0x18098]
push eax
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x1bf78
call fcn.0051cb30
push eax
lea ecx, [ebp - 0xebac]
call fcn.00405200
movzx ecx, al
test ecx, ecx
je 0x427524
lea ecx, [ebp - 0xebac]
call fcn.00438780
mov edx, dword [eax]
mov dword [ebp - 0xebb0], edx
mov eax, dword [ebp - 0xebb0]
mov ecx, dword [eax]
cmp ecx, dword [ebp - 0x34]
jne 0x42751f
lea edx, [ebp - 0xebb0]
push edx
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x1bf78
call fcn.0044a210
mov eax, dword [ebp - 0xebb0]
mov dword [ebp - 0x1809c], eax
mov ecx, dword [ebp - 0x1809c]
push ecx
call fcn.00544d52
add esp, 4
jmp 0x427524
jmp 0x42748b
push 0x2b
call fcn.00545848
add esp, 4
mov dword [ebp - 0x180a4], eax
mov byte [ebp - 4], 0xf
cmp dword [ebp - 0x180a4], 0
je 0x427554
mov ecx, dword [ebp - 0x180a4]
call fcn.0043b840
mov dword [ebp - 0x181e8], eax
jmp 0x42755e
mov dword [ebp - 0x181e8], 0
mov edx, dword [ebp - 0x181e8]
mov dword [ebp - 0x180a0], edx
mov byte [ebp - 4], 0
mov eax, dword [ebp - 0x180a0]
mov dword [ebp - 0xebb0], eax
cmp dword [ebp - 0xebb0], 0
je 0x42766d
mov ecx, dword [ebp - 0xebb0]
mov edx, dword [ebp - 0x34]
mov dword [ecx], edx
mov eax, dword [ebp - 0xebb0]
mov cx, word [ebp - 0x2e]
mov word [eax + 4], cx
mov edx, dword [ebp - 0xebb0]
mov ax, word [ebp - 0x2c]
mov word [edx + 6], ax
mov ecx, dword [ebp - 0xebb0]
mov dx, word [ebp - 0x2a]
mov word [ecx + 8], dx
mov eax, dword [ebp + 8]
push eax
call fcn.00545a90
add esp, 4
push eax
lea ecx, [ebp - 0xecbc]
push ecx
mov edx, dword [ebp + 8]
add edx, 0x10
push edx
call fcn.00509bc0
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
mov byte [ebp + eax - 0xecbc], 0
push 0x2f
lea ecx, [ebp - 0xecbc]
push ecx
call fcn.004372e0
add esp, 8
mov dword [ebp - 0xecc0], eax
cmp dword [ebp - 0xecc0], 0
je 0x427655
mov edx, dword [ebp - 0xecc0]
mov byte [edx], 0
mov eax, dword [ebp - 0xecc0]
add eax, 1
mov dword [ebp - 0xecc0], eax
lea ecx, [ebp - 0xecbc]
push ecx
call fcn.00547d0c
add esp, 4
mov edx, dword [ebp - 0xebb0]
mov byte [edx + 0xa], al
mov eax, dword [ebp - 0xecc0]
push eax
push 0x1f
mov ecx, dword [ebp - 0xebb0]
add ecx, 0xb
push ecx
call fcn.005477d6
add esp, 0xc
lea edx, [ebp - 0xebb0]
push edx
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x1bf78
call fcn.00437b70
jmp 0x42aafd
lea ecx, [ebp - 0xecc4]
call fcn.00437db0
lea eax, [ebp - 0x180a8]
push eax
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x1bf78
call fcn.00437d00
mov ecx, dword [eax]
mov dword [ebp - 0xecc4], ecx
jmp 0x4276b3
push 0
lea edx, [ebp - 0x180ac]
push edx
lea ecx, [ebp - 0xecc4]
call fcn.00437dd0
lea eax, [ebp - 0x180b0]
push eax
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x1bf78
call fcn.0051cb30
push eax
lea ecx, [ebp - 0xecc4]
call fcn.00405200
movzx ecx, al
test ecx, ecx
je 0x42771a
lea ecx, [ebp - 0xecc4]
call fcn.00438780
mov edx, dword [eax]
mov dword [ebp - 0xecc8], edx
mov eax, dword [ebp - 0xecc8]
mov ecx, dword [eax]
cmp ecx, dword [ebp - 0x34]
jne 0x427718
lea edx, [ebp - 0xecc8]
push edx
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x1bf78
call fcn.0044a210
jmp 0x42771a
jmp 0x42769f
jmp 0x42aafd
movzx eax, word [ebp - 0x2e]
mov dword [ebp - 0xecd8], eax
movzx ecx, word [ebp - 0x2c]
mov dword [ebp - 0xecd0], ecx
movzx edx, word [ebp - 0x2a]
add edx, 0x1f4
mov dword [ebp - 0xecd4], edx
mov eax, dword [ebp - 0xecd4]
push eax
mov ecx, 0x7c0f70
call fcn.004f3d70
mov dword [ebp - 0xeccc], eax
cmp dword [ebp - 0xeccc], 0
je 0x42787b
push 0x278
call fcn.00545848
add esp, 4
mov dword [ebp - 0x180b8], eax
mov byte [ebp - 4], 0x10
cmp dword [ebp - 0x180b8], 0
je 0x42779a
mov ecx, dword [ebp - 0x180b8]
call fcn.004b2720
mov dword [ebp - 0x181ec], eax
jmp 0x4277a4
mov dword [ebp - 0x181ec], 0
mov ecx, dword [ebp - 0x181ec]
mov dword [ebp - 0x180b4], ecx
mov byte [ebp - 4], 0
mov edx, dword [ebp - 0x180b4]
mov dword [ebp - 0xecdc], edx
push 0
push 0xffffffffffffffff
push 0
push 0xa
push 0x1f4
push 0
push 0
movzx eax, word [ebp - 0xecd0]
push eax
movzx ecx, word [ebp - 0xecd8]
push ecx
movzx edx, word [ebp - 0xecd0]
push edx
movzx eax, word [ebp - 0xecd8]
push eax
mov ecx, dword [ebp - 0xeccc]
push ecx
mov edx, dword [ebp - 0xecdc]
mov eax, dword [edx]
mov ecx, dword [ebp - 0xecdc]
mov edx, dword [eax]
call edx
call fcn.005480af
and eax, 0x8000000f
jns 0x42781b
dec eax
or eax, 0xfffffff0
inc eax
add eax, 0xa
imul eax, eax, 0xa
mov ecx, dword [ebp - 0xecdc]
mov byte [ecx + 0x48], al
call fcn.005480af
and eax, 0x8000000f
jns 0x42783b
dec eax
or eax, 0xfffffff0
inc eax
add eax, 0xa
imul eax, eax, 0xa
mov edx, dword [ebp - 0xecdc]
mov byte [edx + 0x49], al
call fcn.005480af
and eax, 0x8000000f
jns 0x42785b
dec eax
or eax, 0xfffffff0
inc eax
add eax, 0xa
imul eax, eax, 0xa
mov ecx, dword [ebp - 0xecdc]
mov byte [ecx + 0x4a], al
lea edx, [ebp - 0xecdc]
push edx
mov ecx, 0x6c8e78
call fcn.00437b70
jmp 0x42aafd
mov byte [ebp - 0xece1], 0
lea ecx, [ebp - 0xecec]
call fcn.0043b350
push 4
lea eax, [ebp - 0xecec]
push eax
mov ecx, dword [ebp + 8]
add ecx, 0x10
push ecx
call fcn.00509bc0
lea ecx, [ebp - 0xece0]
call fcn.00437db0
lea edx, [ebp - 0x180bc]
push edx
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x1bf6c
call fcn.00437d00
mov eax, dword [eax]
mov dword [ebp - 0xece0], eax
jmp 0x4278e8
push 0
lea ecx, [ebp - 0x180c0]
push ecx
lea ecx, [ebp - 0xece0]
call fcn.00437dd0
lea edx, [ebp - 0x180c4]
push edx
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x1bf6c
call fcn.0051cb30
push eax
lea ecx, [ebp - 0xece0]
call fcn.00405200
movzx eax, al
test eax, eax
je 0x4279a3
lea ecx, [ebp - 0xece0]
call fcn.00438780
mov ecx, dword [eax]
mov dword [ebp - 0xece8], ecx
mov edx, dword [ebp - 0xece8]
movzx eax, word [edx + 8]
mov dword [ebp - 0x181f0], eax
cmp dword [ebp - 0x181f0], 0x72
jg 0x427960
cmp dword [ebp - 0x181f0], 0x72
je 0x42797a
cmp dword [ebp - 0x181f0], 0x10
je 0x42797a
cmp dword [ebp - 0x181f0], 0x16
je 0x42797a
jmp 0x42799e
cmp dword [ebp - 0x181f0], 0x97
je 0x42797a
cmp dword [ebp - 0x181f0], 0x14f
je 0x42797a
jmp 0x42799e
mov ecx, dword [ebp - 0xece8]
mov dword [ebp - 0xecf0], ecx
mov edx, dword [ebp - 0xecf0]
mov eax, dword [edx + 0x27c]
cmp eax, dword [ebp - 0x34]
jne 0x42799e
mov byte [ebp - 0xece1], 1
jmp 0x4278d4
movzx ecx, byte [ebp - 0xece1]
test ecx, ecx
jne 0x427f2f
xor edx, edx
mov word [ebp - 0xecf4], dx
movzx eax, word [ebp - 0x2e]
cmp eax, 3
jne 0x427a8b
push 0x14f
mov ecx, 0x7c0f70
call fcn.004f3d70
mov dword [ebp - 0xecf8], eax
push 0x280
call fcn.00545848
add esp, 4
mov dword [ebp - 0x180cc], eax
mov byte [ebp - 4], 0x11
cmp dword [ebp - 0x180cc], 0
je 0x427a10
mov ecx, dword [ebp - 0x180cc]
call fcn.0043bc20
mov dword [ebp - 0x181f4], eax
jmp 0x427a1a
mov dword [ebp - 0x181f4], 0
mov ecx, dword [ebp - 0x181f4]
mov dword [ebp - 0x180c8], ecx
mov byte [ebp - 4], 0
mov edx, dword [ebp - 0x180c8]
mov dword [ebp - 0xecfc], edx
push 0xffffffffffffffff
push 0
push 0
push 0xffffffffffffffff
movzx eax, word [ebp - 0x2a]
push eax
movzx ecx, word [ebp - 0x2c]
push ecx
push 0
push 0
mov edx, dword [ebp - 0xecf8]
push edx
mov eax, dword [ebp - 0x34]
push eax
mov ecx, dword [ebp - 0xecfc]
call fcn.004b6b20
mov ecx, dword [ebp - 0xecfc]
mov dword [ebp - 0x180d0], ecx
lea edx, [ebp - 0x180d0]
push edx
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x1bf6c
call fcn.00437b70
jmp 0x427f2f
movzx eax, word [ebp - 0x2e]
cmp eax, 5
jne 0x427b76
push 0x16
mov ecx, 0x7c0f70
call fcn.004f42e0
mov dword [ebp - 0xed00], eax
push 0x280
call fcn.00545848
add esp, 4
mov dword [ebp - 0x180d8], eax
mov byte [ebp - 4], 0x12
cmp dword [ebp - 0x180d8], 0
je 0x427add
mov ecx, dword [ebp - 0x180d8]
call fcn.0043bc20
mov dword [ebp - 0x181f8], eax
jmp 0x427ae7
mov dword [ebp - 0x181f8], 0
mov ecx, dword [ebp - 0x181f8]
mov dword [ebp - 0x180d4], ecx
mov byte [ebp - 4], 0
mov edx, dword [ebp - 0x180d4]
mov dword [ebp - 0xed04], edx
push 0xffffffffffffffff
push 0
push 0
push 0xffffffffffffffff
movzx eax, word [ebp - 0x2a]
push eax
movzx ecx, word [ebp - 0x2c]
push ecx
push 0
push 0
mov edx, dword [ebp - 0xed00]
push edx
mov eax, dword [ebp - 0x34]
push eax
mov ecx, dword [ebp - 0xed04]
call fcn.004b6b20
push 8
push 1
call fcn.0053e280
add esp, 8
mov ecx, dword [ebp - 0xed04]
add eax, dword [ecx + 0x54]
mov edx, dword [ebp - 0xed04]
mov dword [edx + 0x54], eax
mov eax, dword [ebp - 0xed04]
mov dword [ebp - 0x180dc], eax
lea ecx, [ebp - 0x180dc]
push ecx
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x1bf6c
call fcn.00437b70
jmp 0x427f2f
movzx edx, word [ebp - 0x2e]
cmp edx, 9
jne 0x427c61
push 0x35
mov ecx, 0x7c0f70
call fcn.004f42e0
mov dword [ebp - 0xed08], eax
push 0x280
call fcn.00545848
add esp, 4
mov dword [ebp - 0x180e4], eax
mov byte [ebp - 4], 0x13
cmp dword [ebp - 0x180e4], 0
je 0x427bc8
mov ecx, dword [ebp - 0x180e4]
call fcn.0043bc20
mov dword [ebp - 0x181fc], eax
jmp 0x427bd2
mov dword [ebp - 0x181fc], 0
mov eax, dword [ebp - 0x181fc]
mov dword [ebp - 0x180e0], eax
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x180e0]
mov dword [ebp - 0xed0c], ecx
push 0xffffffffffffffff
push 0
push 0
push 0xffffffffffffffff
movzx edx, word [ebp - 0x2a]
push edx
movzx eax, word [ebp - 0x2c]
push eax
push 0
push 0
mov ecx, dword [ebp - 0xed08]
push ecx
mov edx, dword [ebp - 0x34]
push edx
mov ecx, dword [ebp - 0xed0c]
call fcn.004b6b20
push 8
push 1
call fcn.0053e280
add esp, 8
mov ecx, dword [ebp - 0xed0c]
add eax, dword [ecx + 0x54]
mov edx, dword [ebp - 0xed0c]
mov dword [edx + 0x54], eax
mov eax, dword [ebp - 0xed0c]
mov dword [ebp - 0x180e8], eax
lea ecx, [ebp - 0x180e8]
push ecx
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x1bf6c
call fcn.00437b70
jmp 0x427f2f
movzx edx, word [ebp - 0x2e]
cmp edx, 4
jne 0x427d4c
push 0x10
mov ecx, 0x7c0f70
call fcn.004f42e0
mov dword [ebp - 0xed10], eax
push 0x280
call fcn.00545848
add esp, 4
mov dword [ebp - 0x180f0], eax
mov byte [ebp - 4], 0x14
cmp dword [ebp - 0x180f0], 0
je 0x427cb3
mov ecx, dword [ebp - 0x180f0]
call fcn.0043bc20
mov dword [ebp - 0x18200], eax
jmp 0x427cbd
mov dword [ebp - 0x18200], 0
mov eax, dword [ebp - 0x18200]
mov dword [ebp - 0x180ec], eax
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x180ec]
mov dword [ebp - 0xed14], ecx
push 0xffffffffffffffff
push 0
push 0
push 0xffffffffffffffff
movzx edx, word [ebp - 0x2a]
push edx
movzx eax, word [ebp - 0x2c]
push eax
push 0
push 0
mov ecx, dword [ebp - 0xed10]
push ecx
mov edx, dword [ebp - 0x34]
push edx
mov ecx, dword [ebp - 0xed14]
call fcn.004b6b20
push 8
push 1
call fcn.0053e280
add esp, 8
mov ecx, dword [ebp - 0xed14]
add eax, dword [ecx + 0x54]
mov edx, dword [ebp - 0xed14]
mov dword [edx + 0x54], eax
mov eax, dword [ebp - 0xed14]
mov dword [ebp - 0x180f4], eax
lea ecx, [ebp - 0x180f4]
push ecx
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x1bf6c
call fcn.00437b70
jmp 0x427f2f
movzx edx, word [ebp - 0x2e]
cmp edx, 0xa
jne 0x427e37
push 0x72
mov ecx, 0x7c0f70
call fcn.004f42e0
mov dword [ebp - 0xed18], eax
push 0x280
call fcn.00545848
add esp, 4
mov dword [ebp - 0x180fc], eax
mov byte [ebp - 4], 0x15
cmp dword [ebp - 0x180fc], 0
je 0x427d9e
mov ecx, dword [ebp - 0x180fc]
call fcn.0043bc20
mov dword [ebp - 0x18204], eax
jmp 0x427da8
mov dword [ebp - 0x18204], 0
mov eax, dword [ebp - 0x18204]
mov dword [ebp - 0x180f8], eax
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x180f8]
mov dword [ebp - 0xed1c], ecx
push 0xffffffffffffffff
push 0
push 0
push 0xffffffffffffffff
movzx edx, word [ebp - 0x2a]
push edx
movzx eax, word [ebp - 0x2c]
push eax
push 0
push 0
mov ecx, dword [ebp - 0xed18]
push ecx
mov edx, dword [ebp - 0x34]
push edx
mov ecx, dword [ebp - 0xed1c]
call fcn.004b6b20
push 8
push 1
call fcn.0053e280
add esp, 8
mov ecx, dword [ebp - 0xed1c]
add eax, dword [ecx + 0x54]
mov edx, dword [ebp - 0xed1c]
mov dword [edx + 0x54], eax
mov eax, dword [ebp - 0xed1c]
mov dword [ebp - 0x18100], eax
lea ecx, [ebp - 0x18100]
push ecx
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x1bf6c
call fcn.00437b70
jmp 0x427f2f
movzx edx, word [ebp - 0x2e]
cmp edx, 0x64
je 0x427e4d
movzx eax, word [ebp - 0x2e]
cmp eax, 0xb
jne 0x427f2f
push 0x97
mov ecx, 0x7c0f70
call fcn.004f42e0
mov dword [ebp - 0xed20], eax
push 0x280
call fcn.00545848
add esp, 4
mov dword [ebp - 0x18108], eax
mov byte [ebp - 4], 0x16
cmp dword [ebp - 0x18108], 0
je 0x427e95
mov ecx, dword [ebp - 0x18108]
call fcn.0043bc20
mov dword [ebp - 0x18208], eax
jmp 0x427e9f
mov dword [ebp - 0x18208], 0
mov ecx, dword [ebp - 0x18208]
mov dword [ebp - 0x18104], ecx
mov byte [ebp - 4], 0
mov edx, dword [ebp - 0x18104]
mov dword [ebp - 0xed24], edx
movzx eax, word [ebp - 0xecec]
push eax
push 0
push 0
push 0xffffffffffffffff
movzx ecx, word [ebp - 0x2a]
push ecx
movzx edx, word [ebp - 0x2c]
push edx
push 0
push 0
mov eax, dword [ebp - 0xed20]
push eax
mov ecx, dword [ebp - 0x34]
push ecx
mov ecx, dword [ebp - 0xed24]
call fcn.004b6b20
push 8
push 1
call fcn.0053e280
add esp, 8
mov edx, dword [ebp - 0xed24]
add eax, dword [edx + 0x54]
mov ecx, dword [ebp - 0xed24]
mov dword [ecx + 0x54], eax
mov edx, dword [ebp - 0xed24]
mov dword [ebp - 0x1810c], edx
lea eax, [ebp - 0x1810c]
push eax
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x1bf6c
call fcn.00437b70
jmp 0x42aafd
lea ecx, [ebp - 0xed28]
call fcn.00437db0
lea ecx, [ebp - 0x18110]
push ecx
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x1bf6c
call fcn.00437d00
mov edx, dword [eax]
mov dword [ebp - 0xed28], edx
jmp 0x427f75
push 0
lea eax, [ebp - 0x18114]
push eax
lea ecx, [ebp - 0xed28]
call fcn.00437dd0
lea ecx, [ebp - 0x18118]
push ecx
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x1bf6c
call fcn.0051cb30
push eax
lea ecx, [ebp - 0xed28]
call fcn.00405200
movzx edx, al
test edx, edx
je 0x428057
lea ecx, [ebp - 0xed28]
call fcn.00438780
mov eax, dword [eax]
mov dword [ebp - 0xed2c], eax
mov dword [ebp - 0xed30], 0
mov ecx, dword [ebp - 0xed2c]
movzx edx, word [ecx + 8]
mov dword [ebp - 0x1820c], edx
cmp dword [ebp - 0x1820c], 0x72
jg 0x428000
cmp dword [ebp - 0x1820c], 0x72
je 0x42801a
cmp dword [ebp - 0x1820c], 0x10
je 0x42801a
cmp dword [ebp - 0x1820c], 0x16
je 0x42801a
cmp dword [ebp - 0x1820c], 0x35
je 0x42801a
jmp 0x428026
cmp dword [ebp - 0x1820c], 0x97
je 0x42801a
cmp dword [ebp - 0x1820c], 0x14f
je 0x42801a
jmp 0x428026
mov eax, dword [ebp - 0xed2c]
mov dword [ebp - 0xed30], eax
cmp dword [ebp - 0xed30], 0
je 0x428052
mov ecx, dword [ebp - 0xed30]
mov edx, dword [ecx + 0x27c]
cmp edx, dword [ebp - 0x34]
jne 0x428052
mov eax, dword [ebp - 0xed30]
mov dword [eax + 0x278], 0
jmp 0x428057
jmp 0x427f61
jmp 0x42aafd
mov ecx, dword [ebp - 0x34]
push ecx
mov ecx, dword [ebp - 0x1816c]
add ecx, 0xf83c0
call fcn.0043bb50
jmp 0x42aafd
mov edx, dword [ebp - 0x34]
and edx, 0xffff
movzx eax, dx
mov dword [ebp - 0xed44], eax
mov ecx, dword [ebp - 0x34]
shr ecx, 0x10
and ecx, 0xffff
movzx edx, cx
mov dword [ebp - 0xed38], edx
movzx eax, word [ebp - 0x2e]
and eax, 0xff
mov byte [ebp - 0xed32], al
movzx ecx, word [ebp - 0x2c]
and ecx, 0xff
mov byte [ebp - 0xed31], cl
mov dword [ebp - 0xed40], 0
mov dword [ebp - 0xed3c], 0
movzx edx, byte [ebp - 0xed32]
mov dword [ebp - 0x18210], edx
cmp dword [ebp - 0x18210], 6
ja case.default.0x4280f0
mov eax, dword [ebp - 0x18210]
jmp dword [eax*4 + 0x42afc8]
mov ecx, dword [ebp - 0xed44]
mov dword [ebp - 0xed40], ecx
mov edx, dword [ebp - 0xed38]
add edx, 9
mov dword [ebp - 0xed3c], edx
jmp 0x4281f2
mov eax, dword [ebp - 0xed44]
sub eax, 9
mov dword [ebp - 0xed40], eax
mov ecx, dword [ebp - 0xed38]
add ecx, 9
mov dword [ebp - 0xed3c], ecx
jmp 0x4281f2
mov edx, dword [ebp - 0xed44]
sub edx, 9
mov dword [ebp - 0xed40], edx
mov eax, dword [ebp - 0xed38]
mov dword [ebp - 0xed3c], eax
jmp 0x4281f2
mov ecx, dword [ebp - 0xed44]
sub ecx, 9
mov dword [ebp - 0xed40], ecx
mov edx, dword [ebp - 0xed38]
sub edx, 9
mov dword [ebp - 0xed3c], edx
jmp 0x4281f2
mov eax, dword [ebp - 0xed44]
mov dword [ebp - 0xed40], eax
mov ecx, dword [ebp - 0xed38]
sub ecx, 9
mov dword [ebp - 0xed3c], ecx
jmp 0x4281f2
mov edx, dword [ebp - 0xed44]
add edx, 9
mov dword [ebp - 0xed40], edx
mov eax, dword [ebp - 0xed38]
sub eax, 9
mov dword [ebp - 0xed3c], eax
jmp 0x4281f2
mov ecx, dword [ebp - 0xed44]
add ecx, 9
mov dword [ebp - 0xed40], ecx
mov edx, dword [ebp - 0xed38]
mov dword [ebp - 0xed3c], edx
jmp 0x4281f2
mov eax, dword [ebp - 0xed44]
add eax, 9
mov dword [ebp - 0xed40], eax
mov ecx, dword [ebp - 0xed38]
add ecx, 9
mov dword [ebp - 0xed3c], ecx
mov dl, byte [ebp - 0xed31]
mov byte [ebp - 0x18214], dl
cmp byte [ebp - 0x18214], 0xa
je 0x428219
cmp byte [ebp - 0x18214], 0x14
je 0x4282e7
jmp 0x428776
push 0x3ea
mov ecx, 0x7c0f70
call fcn.004f3e50
mov dword [ebp - 0xed48], eax
push 0x278
call fcn.00545848
add esp, 4
mov dword [ebp - 0x18120], eax
mov byte [ebp - 4], 0x17
cmp dword [ebp - 0x18120], 0
je 0x428261
mov ecx, dword [ebp - 0x18120]
call fcn.004b2720
mov dword [ebp - 0x18218], eax
jmp 0x42826b
mov dword [ebp - 0x18218], 0
mov eax, dword [ebp - 0x18218]
mov dword [ebp - 0x1811c], eax
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x1811c]
mov dword [ebp - 0xed4c], ecx
push 0
push 0xffffffffffffffff
push 0
push 0xa
push 0x1f4
push 0
push 0
movzx edx, word [ebp - 0xed38]
push edx
movzx eax, word [ebp - 0xed44]
push eax
movzx ecx, word [ebp - 0xed38]
push ecx
movzx edx, word [ebp - 0xed44]
push edx
mov eax, dword [ebp - 0xed48]
push eax
mov ecx, dword [ebp - 0xed4c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xed4c]
mov eax, dword [edx]
call eax
lea ecx, [ebp - 0xed4c]
push ecx
mov ecx, 0x6c8e78
call fcn.00437b70
jmp 0x428776
mov byte [ebp - 0xf03c], 0
push 0x207
push 0
lea edx, [ebp - 0xf03b]
push edx
call fcn.005454d0
add esp, 0xc
push 0x208
lea eax, [ebp - 0xf03c]
push eax
mov ecx, dword [ebp + 8]
add ecx, 0x10
push ecx
call fcn.00509bc0
mov dword [ebp - 0xf060], 0
xor edx, edx
mov dword [ebp - 0xf05c], edx
mov dword [ebp - 0xf058], edx
mov dword [ebp - 0xf054], edx
mov dword [ebp - 0xf050], edx
mov dword [ebp - 0xf04c], edx
mov dword [ebp - 0xf048], edx
mov dword [ebp - 0xf044], edx
mov dword [ebp - 0xf040], edx
mov dword [ebp - 0xee30], 0
xor eax, eax
mov dword [ebp - 0xee2c], eax
mov dword [ebp - 0xee28], eax
mov dword [ebp - 0xee24], eax
mov dword [ebp - 0xee20], eax
mov dword [ebp - 0xee1c], eax
mov dword [ebp - 0xee18], eax
mov dword [ebp - 0xee14], eax
mov dword [ebp - 0xee10], eax
mov byte [ebp - 0xf11c], 0
push 0xb3
push 0
lea ecx, [ebp - 0xf11b]
push ecx
call fcn.005454d0
add esp, 0xc
mov byte [ebp - 0xee0c], 0
push 0xb3
push 0
lea edx, [ebp - 0xee0b]
push edx
call fcn.005454d0
add esp, 0xc
lea eax, [ebp - 0xed6c]
push eax
lea ecx, [ebp - 0xf07c]
push ecx
lea edx, [ebp - 0xed80]
push edx
lea eax, [ebp - 0xf090]
push eax
lea ecx, [ebp - 0xed94]
push ecx
lea edx, [ebp - 0xf0a4]
push edx
lea eax, [ebp - 0xeda8]
push eax
lea ecx, [ebp - 0xf0b8]
push ecx
lea edx, [ebp - 0xedbc]
push edx
lea eax, [ebp - 0xf0cc]
push eax
lea ecx, [ebp - 0xedd0]
push ecx
lea edx, [ebp - 0xf0e0]
push edx
lea eax, [ebp - 0xede4]
push eax
lea ecx, [ebp - 0xf0f4]
push ecx
lea edx, [ebp - 0xedf8]
push edx
lea eax, [ebp - 0xf108]
push eax
lea ecx, [ebp - 0xee0c]
push ecx
lea edx, [ebp - 0xf11c]
push edx
push str._s__s__s__s__s__s__s__s__s__s__s__s__s__s__s__s__s__s
lea eax, [ebp - 0xf03c]
push eax
call fcn.00548276
add esp, 0x50
mov dword [ebp - 0xed50], eax
mov dword [ebp - 0xf120], 0
jmp 0x428481
mov ecx, dword [ebp - 0xf120]
add ecx, 1
mov dword [ebp - 0xf120], ecx
cmp dword [ebp - 0xf120], 9
jge 0x428776
mov edx, dword [ebp - 0xf120]
imul edx, edx, 0x14
lea eax, [ebp + edx - 0xf11c]
push eax
call fcn.00547d0c
add esp, 4
mov ecx, dword [ebp - 0xf120]
mov dword [ebp + ecx*4 - 0xf060], eax
mov edx, dword [ebp - 0xf120]
imul edx, edx, 0x14
lea eax, [ebp + edx - 0xee0c]
push eax
call fcn.00547d0c
add esp, 4
mov ecx, dword [ebp - 0xf120]
mov dword [ebp + ecx*4 - 0xee30], eax
movzx edx, byte [ebp - 0xed32]
mov dword [ebp - 0x1821c], edx
cmp dword [ebp - 0x1821c], 6
ja case.default.0x4284fa
mov eax, dword [ebp - 0x1821c]
jmp dword [eax*4 + 0x42afe4]
mov ecx, dword [ebp - 0xf120]
mov edx, dword [ebp + ecx*4 - 0xf060]
mov dword [ebp - 0xed40], edx
mov eax, dword [ebp - 0xf120]
mov ecx, dword [ebp + eax*4 - 0xee30]
add ecx, 9
mov dword [ebp - 0xed3c], ecx
jmp 0x428672
mov edx, dword [ebp - 0xf120]
mov eax, dword [ebp + edx*4 - 0xf060]
sub eax, 9
mov dword [ebp - 0xed40], eax
mov ecx, dword [ebp - 0xf120]
mov edx, dword [ebp + ecx*4 - 0xee30]
add edx, 9
mov dword [ebp - 0xed3c], edx
jmp 0x428672
mov eax, dword [ebp - 0xf120]
mov ecx, dword [ebp + eax*4 - 0xf060]
sub ecx, 9
mov dword [ebp - 0xed40], ecx
mov edx, dword [ebp - 0xf120]
mov eax, dword [ebp + edx*4 - 0xee30]
mov dword [ebp - 0xed3c], eax
jmp 0x428672
mov ecx, dword [ebp - 0xf120]
mov edx, dword [ebp + ecx*4 - 0xf060]
sub edx, 9
mov dword [ebp - 0xed40], edx
mov eax, dword [ebp - 0xf120]
mov ecx, dword [ebp + eax*4 - 0xee30]
sub ecx, 9
mov dword [ebp - 0xed3c], ecx
jmp 0x428672
mov edx, dword [ebp - 0xf120]
mov eax, dword [ebp + edx*4 - 0xf060]
mov dword [ebp - 0xed40], eax
mov ecx, dword [ebp - 0xf120]
mov edx, dword [ebp + ecx*4 - 0xee30]
sub edx, 9
mov dword [ebp - 0xed3c], edx
jmp 0x428672
mov eax, dword [ebp - 0xf120]
mov ecx, dword [ebp + eax*4 - 0xf060]
add ecx, 9
mov dword [ebp - 0xed40], ecx
mov edx, dword [ebp - 0xf120]
mov eax, dword [ebp + edx*4 - 0xee30]
sub eax, 9
mov dword [ebp - 0xed3c], eax
jmp 0x428672
mov ecx, dword [ebp - 0xf120]
mov edx, dword [ebp + ecx*4 - 0xf060]
add edx, 9
mov dword [ebp - 0xed40], edx
mov eax, dword [ebp - 0xf120]
mov ecx, dword [ebp + eax*4 - 0xee30]
mov dword [ebp - 0xed3c], ecx
jmp 0x428672
mov edx, dword [ebp - 0xf120]
mov eax, dword [ebp + edx*4 - 0xf060]
add eax, 9
mov dword [ebp - 0xed40], eax
mov ecx, dword [ebp - 0xf120]
mov edx, dword [ebp + ecx*4 - 0xee30]
add edx, 9
mov dword [ebp - 0xed3c], edx
mov eax, dword [ebp - 0xf120]
cmp dword [ebp + eax*4 - 0xf060], 0
jle 0x428771
mov ecx, dword [ebp - 0xf120]
cmp dword [ebp + ecx*4 - 0xee30], 0
jle 0x428771
push 0x3eb
mov ecx, 0x7c0f70
call fcn.004f3e50
mov dword [ebp - 0xf124], eax
push 0x278
call fcn.00545848
add esp, 4
mov dword [ebp - 0x18128], eax
mov byte [ebp - 4], 0x18
cmp dword [ebp - 0x18128], 0
je 0x4286e2
mov ecx, dword [ebp - 0x18128]
call fcn.004b2720
mov dword [ebp - 0x18220], eax
jmp 0x4286ec
mov dword [ebp - 0x18220], 0
mov edx, dword [ebp - 0x18220]
mov dword [ebp - 0x18124], edx
mov byte [ebp - 4], 0
mov eax, dword [ebp - 0x18124]
mov dword [ebp - 0xf128], eax
push 0
push 0xffffffffffffffff
push 0
push 0xa
push 0x1f4
push 0
push 0
mov ecx, dword [ebp - 0xf120]
movzx edx, word [ebp + ecx*4 - 0xee30]
push edx
mov eax, dword [ebp - 0xf120]
movzx ecx, word [ebp + eax*4 - 0xf060]
push ecx
movzx edx, word [ebp - 0xed3c]
push edx
movzx eax, word [ebp - 0xed40]
push eax
mov ecx, dword [ebp - 0xf124]
push ecx
mov edx, dword [ebp - 0xf128]
mov eax, dword [edx]
mov ecx, dword [ebp - 0xf128]
mov edx, dword [eax]
call edx
lea eax, [ebp - 0xf128]
push eax
mov ecx, 0x6c8e78
call fcn.00437b70
jmp 0x428472
jmp 0x42aafd
mov ecx, dword [ebp - 0x1816c]
mov dl, byte [ebp - 0x2e]
mov byte [ecx + 0x100b3d], dl
mov eax, dword [ebp - 0x1816c]
mov cl, byte [ebp - 0x2c]
mov byte [eax + 0x100b3e], cl
push 0
push 0x32
push 1
mov ecx, 0x69ec08
call fcn.004edfb0
push eax
call dword [sym.imp.USER32.dll_SetTimer]
jmp 0x42aafd
mov edx, dword [ebp - 0x34]
mov dword [0x664d58], edx
jmp 0x42aafd
mov eax, dword [ebp + 8]
add eax, 0x10
push eax
lea ecx, [ebp - 0x34]
push ecx
mov ecx, dword [ebp - 0x1816c]
call fcn.0042e4c0
mov byte [0x7d83e4], 1
jmp 0x42aafd
mov edx, dword [ebp + 8]
add edx, 0x10
push edx
lea eax, [ebp - 0x34]
push eax
mov ecx, dword [ebp - 0x1816c]
call fcn.0042e4c0
jmp 0x42aafd
push 0xc
call fcn.00545848
add esp, 4
mov dword [ebp - 0x18130], eax
mov byte [ebp - 4], 0x19
cmp dword [ebp - 0x18130], 0
je 0x428830
mov ecx, dword [ebp - 0x18130]
call fcn.0043b330
mov dword [ebp - 0x18224], eax
jmp 0x42883a
mov dword [ebp - 0x18224], 0
mov ecx, dword [ebp - 0x18224]
mov dword [ebp - 0x1812c], ecx
mov byte [ebp - 4], 0
mov edx, dword [ebp - 0x1812c]
mov dword [ebp - 0xf12c], edx
cmp dword [ebp - 0xf12c], 0
je 0x42888e
push 0xc
lea eax, [ebp - 0x34]
push eax
mov ecx, dword [ebp - 0xf12c]
push ecx
call fcn.00545160
add esp, 0xc
mov edx, dword [ebp - 0xf12c]
push edx
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x1102d0
call fcn.0040ea20
jmp 0x42889f
push 0
push 0
push str.can_not_allocate_memory_
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x42aafd
mov eax, dword [ebp - 0x34]
push eax
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x46314
call fcn.0043ba40
push 1
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x46314
call fcn.004a6370
mov ecx, dword [ebp - 0x1816c]
mov dword [ecx + 0xc29bc], 0xffffffff
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x46314
call fcn.0043b9f0
movzx edx, al
test edx, edx
jne 0x428926
push 0
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x41fe0
call fcn.00496c40
push 1
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x46314
mov eax, dword [ebp - 0x1816c]
mov edx, dword [eax + 0x46314]
mov eax, dword [edx + 0xc]
call eax
jmp 0x42aafd
mov ecx, dword [ebp - 0x1816c]
mov edx, dword [ebp - 0x34]
mov dword [ecx + 0xc29c0], edx
jmp 0x42aafd
movzx eax, word [ebp - 0x2e]
mov ecx, dword [ebp - 0x1816c]
mov dword [ecx + 0xc29c4], eax
jmp 0x42aafd
movzx edx, word [ebp - 0x2e]
test edx, edx
jne 0x428a09
mov byte [ebp - 0xf194], 0
push 0x63
push 0
lea eax, [ebp - 0xf193]
push eax
call fcn.005454d0
add esp, 0xc
movzx ecx, byte [0x69d4b5]
cmp ecx, 1
jne 0x4289a1
push 0x7ad726
push 0x577c38
lea edx, [ebp - 0xf194]
push edx
call fcn.005456a9
add esp, 0xc
jmp 0x4289ba
push 0x7ad726
push 0x577c28
lea eax, [ebp - 0xf194]
push eax
call fcn.005456a9
add esp, 0xc
push 3
call fcn.004764c0
add esp, 4
mov dword [ebp - 0xf198], eax
push 2
call fcn.004764c0
add esp, 4
mov dword [ebp - 0xf19c], eax
push 0
push 0
lea ecx, [ebp - 0xf194]
push ecx
mov edx, dword [ebp - 0xf198]
push edx
mov eax, dword [ebp - 0xf19c]
push eax
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x41fe0
call fcn.0048ce80
jmp 0x428aad
mov byte [ebp - 0xf204], 0
push 0x63
push 0
lea ecx, [ebp - 0xf203]
push ecx
call fcn.005454d0
add esp, 0xc
movzx edx, byte [0x69d4b5]
cmp edx, 1
jne 0x428a4a
push 0x7ad726
push 0x577c18
lea eax, [ebp - 0xf204]
push eax
call fcn.005456a9
add esp, 0xc
jmp 0x428a63
push 0x7ad726
push 0x577c08
lea ecx, [ebp - 0xf204]
push ecx
call fcn.005456a9
add esp, 0xc
push 3
call fcn.004764c0
add esp, 4
mov dword [ebp - 0xf208], eax
push 2
call fcn.004764c0
add esp, 4
mov dword [ebp - 0xf20c], eax
push 0
push 0
lea edx, [ebp - 0xf204]
push edx
mov eax, dword [ebp - 0xf208]
push eax
mov ecx, dword [ebp - 0xf20c]
push ecx
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x41fe0
call fcn.0048ce80
jmp 0x42aafd
mov edx, dword [ebp - 0x1816c]
mov eax, dword [edx + 0xc29bc]
imul eax, eax, 0x339
mov ecx, dword [ebp - 0x1816c]
lea edx, [ecx + eax + 0x48f81]
push edx
mov eax, dword [ebp - 0x1816c]
mov ecx, dword [eax + 0xc29bc]
imul ecx, ecx, 0x339
mov edx, dword [ebp - 0x1816c]
mov eax, dword [edx + ecx + 0x48fc3]
push eax
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x46314
call fcn.004a28c0
jmp 0x42aafd
mov ecx, dword [ebp - 0x34]
push ecx
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x46314
call fcn.0043ba40
push 3
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x46314
call fcn.004a6370
mov edx, dword [ebp - 0x1816c]
mov dword [edx + 0xc29bc], 0xffffffff
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x46314
call fcn.0043b9f0
movzx eax, al
test eax, eax
jne 0x428b8a
push 0
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x41fe0
call fcn.00496c40
push 1
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x46314
mov edx, dword [ebp - 0x1816c]
mov eax, dword [edx + 0x46314]
mov edx, dword [eax + 0xc]
call edx
jmp 0x42aafd
mov eax, dword [ebp - 0x1816c]
mov ecx, dword [eax + 0xc29bc]
imul ecx, ecx, 0x339
mov edx, dword [ebp - 0x1816c]
mov ax, word [ebp - 0x2e]
mov word [edx + ecx + 0x48fc7], ax
mov ecx, dword [ebp - 0x1816c]
mov edx, dword [ecx + 0xc29bc]
imul edx, edx, 0x339
mov eax, dword [ebp - 0x1816c]
mov cx, word [ebp - 0x2c]
mov word [eax + edx + 0x48fc9], cx
jmp 0x42aafd
cmp dword [ebp - 0x34], 0
jge 0x428be9
mov dword [ebp - 0x34], 0
mov edx, dword [ebp - 0x1816c]
mov eax, dword [ebp - 0x34]
mov dword [edx + 0xc29c8], eax
jmp 0x42aafd
mov ecx, dword [ebp - 0x34]
push ecx
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x46314
call fcn.0043ba40
push 2
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x46314
call fcn.004a6370
mov edx, dword [ebp - 0x1816c]
mov dword [edx + 0xc29bc], 0xffffffff
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x46314
call fcn.0043b9f0
movzx eax, al
test eax, eax
jne 0x428c7f
push 0
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x41fe0
call fcn.00496c40
push 1
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x46314
mov edx, dword [ebp - 0x1816c]
mov eax, dword [edx + 0x46314]
mov edx, dword [eax + 0xc]
call edx
jmp 0x42aafd
mov byte [ebp - 0xf314], 0
push 0x103
push 0
lea eax, [ebp - 0xf313]
push eax
call fcn.005454d0
add esp, 0xc
mov ecx, dword [ebp - 0x1816c]
mov edx, dword [ecx + 0xc29bc]
imul edx, edx, 0x339
mov eax, dword [ebp - 0x1816c]
lea ecx, [eax + edx + 0x48f81]
mov dword [ebp - 0xf320], ecx
mov edx, dword [ebp - 0xf320]
movzx eax, byte [edx + 0x3d]
cmp eax, 2
jl 0x428d10
movzx ecx, word [ebp - 0x2c]
push ecx
mov edx, dword [ebp - 0x1816c]
mov eax, dword [edx + 0xc29bc]
imul eax, eax, 0x339
mov ecx, dword [ebp - 0x1816c]
lea edx, [ecx + eax + 0x48f81]
push edx
push 0x577bf4
lea eax, [ebp - 0xf314]
push eax
call fcn.005456a9
add esp, 0x10
jmp 0x428d2b
mov ecx, dword [ebp - 0xf320]
push ecx
push 0x577be8
lea edx, [ebp - 0xf314]
push edx
call fcn.005456a9
add esp, 0xc
mov eax, dword [ebp - 0x1816c]
mov ecx, dword [eax + 0xc29bc]
imul ecx, ecx, 0x339
mov edx, dword [ebp - 0x1816c]
movzx eax, byte [edx + ecx + 0x48fbe]
cmp eax, 1
jle 0x428db2
mov ecx, dword [ebp - 0x1816c]
mov edx, dword [ecx + 0xc29bc]
imul edx, edx, 0x339
mov eax, dword [ebp - 0x1816c]
movzx ecx, byte [eax + edx + 0x48fce]
and ecx, 0xff
movzx edx, cl
mov eax, dword [ebp - 0x1816c]
mov ecx, dword [eax + 0xc29bc]
imul ecx, ecx, 0x339
mov eax, dword [ebp - 0x1816c]
movzx ecx, byte [eax + ecx + 0x48fcf]
and ecx, 0xff
movzx eax, cl
shl eax, 8
or edx, eax
movzx ecx, dx
movzx edx, word [ebp - 0x2c]
cmp ecx, edx
jne 0x428e05
mov eax, dword [ebp - 0x1816c]
mov ecx, dword [eax + 0xc29bc]
imul ecx, ecx, 0x339
mov edx, dword [ebp - 0x1816c]
lea eax, [edx + ecx + 0x48f81]
push eax
mov ecx, dword [ebp - 0x1816c]
mov edx, dword [ecx + 0xc29bc]
imul edx, edx, 0x339
mov eax, dword [ebp - 0x1816c]
mov ecx, dword [eax + edx + 0x48fc3]
push ecx
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x46314
call fcn.004a28c0
jmp 0x428e5a
movzx edx, word [ebp - 0x2e]
and edx, 0xff
mov eax, dword [ebp - 0x1816c]
mov ecx, dword [eax + 0xc29bc]
imul ecx, ecx, 0x339
mov eax, dword [ebp - 0x1816c]
mov byte [eax + ecx + 0x48fce], dl
movzx ecx, word [ebp - 0x2e]
shr ecx, 8
and ecx, 0xff
mov edx, dword [ebp - 0x1816c]
mov eax, dword [edx + 0xc29bc]
imul eax, eax, 0x339
mov edx, dword [ebp - 0x1816c]
mov byte [edx + eax + 0x48fcf], cl
push 7
call fcn.004764c0
add esp, 4
mov dword [ebp - 0xf318], eax
push 2
call fcn.004764c0
add esp, 4
mov dword [ebp - 0xf31c], eax
push 0
push 0
lea eax, [ebp - 0xf314]
push eax
mov ecx, dword [ebp - 0xf318]
push ecx
mov edx, dword [ebp - 0xf31c]
push edx
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x41fe0
call fcn.0048ce80
jmp 0x42aafd
mov eax, dword [ebp - 0x1816c]
mov dword [eax + 0x46310], 0x17
push 0x577bd8
push 0x575830
lea ecx, [ebp - 0xf42c]
push ecx
call fcn.005456a9
add esp, 0xc
push 0x1a4
push 1
lea edx, [ebp - 0xf42c]
push edx
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x43aac
call fcn.00513b70
jmp 0x42aafd
mov eax, dword [ebp - 0x1816c]
mov dword [eax + 0x46310], 0x17
push 0x577bcc
push 0x575830
lea ecx, [ebp - 0xf534]
push ecx
call fcn.005456a9
add esp, 0xc
push 0x1a4
push 1
lea edx, [ebp - 0xf534]
push edx
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x43aac
call fcn.00513b70
jmp 0x42aafd
mov eax, dword [ebp - 0x1816c]
mov dword [eax + 0x46310], 0x17
push 0x577bb4
push 0x575830
lea ecx, [ebp - 0xf63c]
push ecx
call fcn.005456a9
add esp, 0xc
push 0x1a4
push 1
lea edx, [ebp - 0xf63c]
push edx
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x43aac
call fcn.00513b70
jmp 0x42aafd
mov eax, dword [ebp - 0x1816c]
mov dword [eax + 0x46310], 0x17
push 0x577b9c
push 0x575830
lea ecx, [ebp - 0xf744]
push ecx
call fcn.005456a9
add esp, 0xc
push 0x1a4
push 1
lea edx, [ebp - 0xf744]
push edx
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x43aac
call fcn.00513b70
jmp 0x42aafd
mov eax, dword [ebp - 0x1816c]
mov cx, word [ebp - 0x2e]
mov word [eax + 0xfe053], cx
jmp 0x42aafd
mov edx, dword [ebp - 0x1816c]
mov ax, word [ebp - 0x2e]
mov word [edx + 0xfe051], ax
jmp 0x42aafd
mov ecx, dword [ebp - 0x1816c]
mov dl, byte [ebp - 0x2e]
mov byte [ecx + 0xfb23d], dl
jmp 0x42aafd
mov ecx, dword [ebp - 0x1816c]
add ecx, 0xe1cbc
call fcn.004d4b70
mov eax, dword [ebp - 0x1816c]
mov ecx, dword [ebp - 0x1816c]
mov dx, word [ecx + 0xfb2a8]
mov word [eax + 0x1119b8], dx
mov eax, dword [ebp - 0x1816c]
mov ecx, dword [ebp - 0x1816c]
mov dx, word [ecx + 0xfb2aa]
mov word [eax + 0x1119ba], dx
push 0x2000
push 0
lea eax, [ebp - 0x1174c]
push eax
call fcn.005454d0
add esp, 0xc
push 0x2000
lea ecx, [ebp - 0x1174c]
push ecx
mov edx, dword [ebp + 8]
add edx, 0x10
push edx
call fcn.00509bc0
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0x1fff
jl 0x4290a1
jmp 0x42aafd
mov eax, dword [ebp - 0x38]
mov byte [ebp + eax - 0x1174c], 0x5c
mov ecx, dword [ebp - 0x38]
mov byte [ebp + ecx - 0x1174b], 0
push 0x577b98
lea edx, [ebp - 0x1174c]
push edx
call fcn.004372c0
add esp, 8
mov dword [ebp - 0xf748], eax
cmp dword [ebp - 0xf748], 0
je 0x42928b
push 0x577b98
mov eax, dword [ebp - 0xf748]
add eax, 2
push eax
call fcn.004372c0
add esp, 8
mov dword [ebp - 0x11754], eax
cmp dword [ebp - 0x11754], 0
je 0x42928b
mov ecx, dword [ebp - 0xf748]
add ecx, 2
mov edx, dword [ebp - 0x11754]
sub edx, ecx
mov dword [ebp - 0x11758], edx
mov eax, dword [ebp - 0x11758]
add eax, 1
push eax
call fcn.00542ae0
add esp, 4
mov dword [ebp - 0x18134], eax
mov ecx, dword [ebp - 0x18134]
mov dword [ebp - 0x1175c], ecx
mov edx, dword [ebp - 0x11758]
add edx, 1
push edx
push 0
mov eax, dword [ebp - 0x1175c]
push eax
call fcn.005454d0
add esp, 0xc
mov ecx, dword [ebp - 0x11758]
push ecx
mov edx, dword [ebp - 0xf748]
add edx, 2
push edx
mov eax, dword [ebp - 0x1175c]
push eax
call fcn.00549970
add esp, 0xc
mov ecx, dword [ebp - 0x11754]
add ecx, 2
mov dword [ebp - 0x11754], ecx
mov edx, dword [ebp - 0x11754]
movsx eax, byte [edx]
test eax, eax
je 0x4291ca
mov ecx, dword [ebp - 0xf748]
mov edx, dword [ebp - 0x11754]
mov al, byte [edx]
mov byte [ecx], al
mov ecx, dword [ebp - 0xf748]
add ecx, 1
mov dword [ebp - 0xf748], ecx
mov edx, dword [ebp - 0x11754]
add edx, 1
mov dword [ebp - 0x11754], edx
jmp 0x42918d
mov eax, dword [ebp - 0xf748]
mov byte [eax], 0
push str.closecomposewnd
mov ecx, dword [ebp - 0x1175c]
push ecx
call fcn.00547bb6
add esp, 8
test eax, eax
jne 0x429218
mov ecx, dword [ebp - 0x1816c]
add ecx, 0xf8ac0
call fcn.0043b9f0
movzx edx, al
test edx, edx
je 0x429216
push 0x1b
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x41fe0
call fcn.00496ec0
jmp 0x42928b
mov eax, dword [ebp - 0x34]
push eax
mov ecx, dword [ebp - 0x1816c]
add ecx, 0xf8ac0
call fcn.0043bbb0
mov ecx, dword [ebp - 0x1175c]
push ecx
mov ecx, dword [ebp - 0x1816c]
add ecx, 0xf8ac0
call fcn.0046e880
mov edx, dword [ebp - 0x1175c]
mov dword [ebp - 0x18138], edx
mov eax, dword [ebp - 0x18138]
push eax
call fcn.00544d5d
add esp, 4
mov ecx, dword [ebp - 0x1816c]
add ecx, 0xf8ac0
call fcn.0043b9f0
movzx ecx, al
test ecx, ecx
jne 0x42928b
push 0x1b
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x41fe0
call fcn.00496ec0
push 0x2f
lea edx, [ebp - 0x1174c]
push edx
call fcn.004372e0
add esp, 8
mov dword [ebp - 0x11750], eax
cmp dword [ebp - 0x11750], 0
je 0x4293be
mov eax, dword [ebp - 0x11750]
mov byte [eax], 0
mov ecx, dword [ebp - 0x11750]
add ecx, 1
mov dword [ebp - 0x11750], ecx
push 0x577b84
mov edx, dword [ebp - 0x11750]
push edx
call fcn.00548180
add esp, 8
test eax, eax
jne 0x429333
mov ecx, dword [ebp - 0x1816c]
add ecx, 0xe1cbc
call fcn.0043b9f0
movzx eax, al
test eax, eax
je 0x42931f
push 9
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x41fe0
call fcn.00496ec0
mov ecx, dword [ebp - 0x34]
push ecx
mov ecx, dword [ebp - 0x1816c]
add ecx, 0xe1cbc
call fcn.0043ba60
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd]
call fcn.00402620
jmp 0x42ab0c
cmp dword [ebp - 0x11750], 0
je 0x42934b
mov edx, dword [ebp - 0x11750]
push edx
call fcn.004d1bd0
add esp, 4
mov ecx, dword [ebp - 0x1816c]
add ecx, 0xe1cbc
call fcn.004d5990
mov dword [ebp - 0x11760], eax
mov ecx, dword [ebp - 0x1816c]
add ecx, 0xe1cbc
call fcn.004d4f20
mov ecx, dword [ebp - 0x1816c]
add ecx, 0xe1cbc
call fcn.004d5fb0
mov eax, dword [ebp - 0x11760]
sub eax, 5
test eax, eax
jle 0x4293a2
mov ecx, dword [ebp - 0x11760]
sub ecx, 5
mov dword [ebp - 0x18228], ecx
jmp 0x4293ac
mov dword [ebp - 0x18228], 0
mov edx, dword [ebp - 0x1816c]
mov eax, dword [ebp - 0x18228]
mov dword [edx + 0xe1e80], eax
mov ecx, dword [ebp - 0x1816c]
add ecx, 0xe1cbc
call fcn.0043b9f0
movzx ecx, al
test ecx, ecx
jne 0x4293fe
push 9
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x41fe0
call fcn.00496ec0
mov edx, dword [ebp - 0x34]
push edx
mov ecx, dword [ebp - 0x1816c]
add ecx, 0xe1cbc
call fcn.0043ba60
mov ecx, dword [ebp - 0x1816c]
add ecx, 0xe1cbc
call fcn.0043b9f0
movzx eax, al
test eax, eax
je 0x4299c8
mov ecx, dword [ebp - 0x34]
push ecx
mov ecx, dword [ebp - 0x1816c]
add ecx, 0xe1cbc
call fcn.0043ba60
mov edx, dword [ebp - 0x34]
push edx
mov ecx, dword [ebp - 0x1816c]
call fcn.00420900
mov dword [ebp - 0x11764], eax
cmp dword [ebp - 0x11764], 0
je 0x4299c8
push 0x577b7c
mov eax, dword [ebp - 0x11764]
add eax, 8
push eax
call fcn.004372c0
add esp, 8
test eax, eax
je 0x4299c8
mov ecx, dword [ebp - 0x1816c]
cmp dword [ecx + 0xe1e7c], 1
jle 0x4299c8
push 3
call fcn.004764c0
add esp, 4
mov dword [ebp - 0x11768], eax
push 2
call fcn.004764c0
add esp, 4
mov dword [ebp - 0x1176c], eax
mov edx, dword [ebp - 0x1816c]
mov eax, dword [edx + 0xe1e7c]
mov dword [ebp - 0x1822c], eax
mov ecx, dword [ebp - 0x1822c]
sub ecx, 2
mov dword [ebp - 0x1822c], ecx
cmp dword [ebp - 0x1822c], 0x17
ja case.default.0x4294d7
mov edx, dword [ebp - 0x1822c]
jmp dword [edx*4 + 0x42b000]
push str._SRepairFunc_51_
push 0
mov eax, dword [ebp - 0x1816c]
mov ecx, dword [eax + 0xe1d6c]
push ecx
push 0x3f3
mov ecx, 0x7c46b0
call fcn.00508040
jmp case.default.0x4294d7
push str._SRepairNow
push 0
mov edx, dword [ebp - 0x1816c]
mov eax, dword [edx + 0xe1d6c]
push eax
push 0x3f3
mov ecx, 0x7c46b0
call fcn.00508040
jmp case.default.0x4294d7
push 0
push 0
push 0x577b48
mov ecx, dword [ebp - 0x11768]
push ecx
mov edx, dword [ebp - 0x1176c]
push edx
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x41fe0
call fcn.0048ce80
push str._SpecialRepairitem
push 0
mov eax, dword [ebp - 0x1816c]
mov ecx, dword [eax + 0xe1d6c]
push ecx
push 0x3f3
mov ecx, 0x7c46b0
call fcn.00508040
jmp case.default.0x4294d7
push str._SRepairFunc_52_
push 0
mov edx, dword [ebp - 0x1816c]
mov eax, dword [edx + 0xe1d6c]
push eax
push 0x3f3
mov ecx, 0x7c46b0
call fcn.00508040
jmp case.default.0x4294d7
push str._SRepairNow
push 0
mov ecx, dword [ebp - 0x1816c]
mov edx, dword [ecx + 0xe1d6c]
push edx
push 0x3f3
mov ecx, 0x7c46b0
call fcn.00508040
jmp case.default.0x4294d7
push 0
push 0
push 0x577b0c
mov eax, dword [ebp - 0x11768]
push eax
mov ecx, dword [ebp - 0x1176c]
push ecx
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x41fe0
call fcn.0048ce80
push str._SpecialRepairitem
push 0
mov edx, dword [ebp - 0x1816c]
mov eax, dword [edx + 0xe1d6c]
push eax
push 0x3f3
mov ecx, 0x7c46b0
call fcn.00508040
jmp case.default.0x4294d7
push str._SRepairFunc_53_
push 0
mov ecx, dword [ebp - 0x1816c]
mov edx, dword [ecx + 0xe1d6c]
push edx
push 0x3f3
mov ecx, 0x7c46b0
call fcn.00508040
jmp case.default.0x4294d7
push str._SRepairNow
push 0
mov eax, dword [ebp - 0x1816c]
mov ecx, dword [eax + 0xe1d6c]
push ecx
push 0x3f3
mov ecx, 0x7c46b0
call fcn.00508040
jmp case.default.0x4294d7
push 0
push 0
push 0x577ae4
mov edx, dword [ebp - 0x11768]
push edx
mov eax, dword [ebp - 0x1176c]
push eax
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x41fe0
call fcn.0048ce80
push str._SpecialRepairitem
push 0
mov ecx, dword [ebp - 0x1816c]
mov edx, dword [ecx + 0xe1d6c]
push edx
push 0x3f3
mov ecx, 0x7c46b0
call fcn.00508040
jmp case.default.0x4294d7
push str._SRepairFunc_54_
push 0
mov eax, dword [ebp - 0x1816c]
mov ecx, dword [eax + 0xe1d6c]
push ecx
push 0x3f3
mov ecx, 0x7c46b0
call fcn.00508040
jmp case.default.0x4294d7
push str._SRepairNow
push 0
mov edx, dword [ebp - 0x1816c]
mov eax, dword [edx + 0xe1d6c]
push eax
push 0x3f3
mov ecx, 0x7c46b0
call fcn.00508040
jmp case.default.0x4294d7
push 0
push 0
push 0x577abc
mov ecx, dword [ebp - 0x11768]
push ecx
mov edx, dword [ebp - 0x1176c]
push edx
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x41fe0
call fcn.0048ce80
push str._SpecialRepairitem
push 0
mov eax, dword [ebp - 0x1816c]
mov ecx, dword [eax + 0xe1d6c]
push ecx
push 0x3f3
mov ecx, 0x7c46b0
call fcn.00508040
jmp case.default.0x4294d7
push str._SRepairFunc_55_
push 0
mov edx, dword [ebp - 0x1816c]
mov eax, dword [edx + 0xe1d6c]
push eax
push 0x3f3
mov ecx, 0x7c46b0
call fcn.00508040
jmp case.default.0x4294d7
push str._SRepairNow
push 0
mov ecx, dword [ebp - 0x1816c]
mov edx, dword [ecx + 0xe1d6c]
push edx
push 0x3f3
mov ecx, 0x7c46b0
call fcn.00508040
jmp case.default.0x4294d7
push 0
push 0
push 0x577a94
mov eax, dword [ebp - 0x11768]
push eax
mov ecx, dword [ebp - 0x1176c]
push ecx
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x41fe0
call fcn.0048ce80
push str._SpecialRepairitem
push 0
mov edx, dword [ebp - 0x1816c]
mov eax, dword [edx + 0xe1d6c]
push eax
push 0x3f3
mov ecx, 0x7c46b0
call fcn.00508040
jmp case.default.0x4294d7
push str._SRepairFunc_56_
push 0
mov ecx, dword [ebp - 0x1816c]
mov edx, dword [ecx + 0xe1d6c]
push edx
push 0x3f3
mov ecx, 0x7c46b0
call fcn.00508040
jmp case.default.0x4294d7
push str._SRepairNow
push 0
mov eax, dword [ebp - 0x1816c]
mov ecx, dword [eax + 0xe1d6c]
push ecx
push 0x3f3
mov ecx, 0x7c46b0
call fcn.00508040
jmp case.default.0x4294d7
push 0
push 0
push 0x577a6c
mov edx, dword [ebp - 0x11768]
push edx
mov eax, dword [ebp - 0x1176c]
push eax
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x41fe0
call fcn.0048ce80
push str._SpecialRepairitem
push 0
mov ecx, dword [ebp - 0x1816c]
mov edx, dword [ecx + 0xe1d6c]
push edx
push 0x3f3
mov ecx, 0x7c46b0
call fcn.00508040
jmp case.default.0x4294d7
push str._SRepairFunc_57_
push 0
mov eax, dword [ebp - 0x1816c]
mov ecx, dword [eax + 0xe1d6c]
push ecx
push 0x3f3
mov ecx, 0x7c46b0
call fcn.00508040
jmp case.default.0x4294d7
push str._SRepairNow
push 0
mov edx, dword [ebp - 0x1816c]
mov eax, dword [edx + 0xe1d6c]
push eax
push 0x3f3
mov ecx, 0x7c46b0
call fcn.00508040
jmp case.default.0x4294d7
push 0
push 0
push 0x577a44
mov ecx, dword [ebp - 0x11768]
push ecx
mov edx, dword [ebp - 0x1176c]
push edx
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x41fe0
call fcn.0048ce80
push str._SpecialRepairitem
push 0
mov eax, dword [ebp - 0x1816c]
mov ecx, dword [eax + 0xe1d6c]
push ecx
push 0x3f3
mov ecx, 0x7c46b0
call fcn.00508040
jmp case.default.0x4294d7
push str._SRepairFunc_58_
push 0
mov edx, dword [ebp - 0x1816c]
mov eax, dword [edx + 0xe1d6c]
push eax
push 0x3f3
mov ecx, 0x7c46b0
call fcn.00508040
jmp case.default.0x4294d7
push str._SRepairNow
push 0
mov ecx, dword [ebp - 0x1816c]
mov edx, dword [ecx + 0xe1d6c]
push edx
push 0x3f3
mov ecx, 0x7c46b0
call fcn.00508040
jmp case.default.0x4294d7
push 0
push 0
push 0x577a1c
mov eax, dword [ebp - 0x11768]
push eax
mov ecx, dword [ebp - 0x1176c]
push ecx
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x41fe0
call fcn.0048ce80
mov edx, dword [ebp - 0x1816c]
mov eax, dword [edx + 0xe1e7c]
add eax, 1
mov ecx, dword [ebp - 0x1816c]
mov dword [ecx + 0xe1e7c], eax
jmp 0x42aafd
mov ecx, dword [ebp - 0x1816c]
call fcn.004184a0
jmp 0x42aafd
push 0x2010
call fcn.00545848
add esp, 4
mov dword [ebp - 0x18140], eax
mov byte [ebp - 4], 0x1a
cmp dword [ebp - 0x18140], 0
je 0x429a10
mov ecx, dword [ebp - 0x18140]
call fcn.0043b370
mov dword [ebp - 0x18230], eax
jmp 0x429a1a
mov dword [ebp - 0x18230], 0
mov edx, dword [ebp - 0x18230]
mov dword [ebp - 0x1813c], edx
mov byte [ebp - 4], 0
mov eax, dword [ebp - 0x1813c]
mov dword [ebp - 0x11770], eax
mov ecx, dword [ebp - 0x11770]
mov edx, dword [ebp - 0x34]
mov dword [ecx], edx
mov eax, dword [ebp - 0x30]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x2c]
mov dword [ecx + 8], edx
mov eax, dword [ebp + 8]
add eax, 0x10
push eax
mov ecx, dword [ebp - 0x11770]
add ecx, 0xc
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov edx, dword [ebp - 0x11770]
push edx
mov ecx, dword [ebp - 0x1816c]
add ecx, 0xcb418
call fcn.0040ea20
mov ecx, dword [ebp - 0x1816c]
add ecx, 0xca6e0
call fcn.0043b9f0
movzx eax, al
test eax, eax
jne 0x429abc
push 2
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x41fe0
call fcn.00496ec0
mov ecx, dword [ebp - 0x34]
push ecx
mov ecx, dword [ebp - 0x1816c]
add ecx, 0xca6e0
call fcn.0043ba60
jmp 0x42aafd
push 0x2010
call fcn.00545848
add esp, 4
mov dword [ebp - 0x18148], eax
mov byte [ebp - 4], 0x1b
cmp dword [ebp - 0x18148], 0
je 0x429af4
mov ecx, dword [ebp - 0x18148]
call fcn.0043b370
mov dword [ebp - 0x18234], eax
jmp 0x429afe
mov dword [ebp - 0x18234], 0
mov edx, dword [ebp - 0x18234]
mov dword [ebp - 0x18144], edx
mov byte [ebp - 4], 0
mov eax, dword [ebp - 0x18144]
mov dword [ebp - 0x11774], eax
mov ecx, dword [ebp - 0x11774]
mov edx, dword [ebp - 0x34]
mov dword [ecx], edx
mov eax, dword [ebp - 0x30]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x2c]
mov dword [ecx + 8], edx
mov eax, dword [ebp + 8]
add eax, 0x10
push eax
mov ecx, dword [ebp - 0x11774]
add ecx, 0xc
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov edx, dword [ebp - 0x11774]
push edx
mov ecx, dword [ebp - 0x1816c]
add ecx, 0xcd2d9
call fcn.0040ea20
mov ecx, dword [ebp - 0x1816c]
add ecx, 0xcc3dc
call fcn.0043b9f0
movzx eax, al
test eax, eax
jne 0x429bc1
movzx ecx, word [ebp - 0x30]
cmp ecx, 0x2c0
jne 0x429b99
push 2
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x41fe0
call fcn.00496ec0
jmp 0x429bac
push 0xf
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x41fe0
call fcn.00496ec0
mov edx, dword [ebp - 0x34]
push edx
mov ecx, dword [ebp - 0x1816c]
add ecx, 0xcc3dc
call fcn.0043ba60
jmp 0x42aafd
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x11778], eax
movzx ecx, word [ebp - 0x2a]
mov dword [ebp - 0x38], ecx
push 0xaa
lea edx, [ebp - 0x1182c]
push edx
mov eax, dword [ebp + 8]
add eax, 0x10
push eax
call fcn.00509bc0
mov dword [ebp - 0x1177c], eax
lea ecx, [ebp - 0x1182c]
push ecx
mov edx, dword [ebp - 0x117ea]
push edx
mov ecx, dword [ebp - 0x1816c]
add ecx, 0xc29e0
call fcn.004fd5e0
lea eax, [ebp - 0x1182c]
push eax
mov ecx, dword [ebp - 0x117ea]
push ecx
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x46314
call fcn.004a28c0
mov edx, dword [ebp - 0x1816c]
movzx eax, byte [edx + 0xfe115]
test eax, eax
je 0x429c5b
mov ecx, dword [ebp - 0x117ea]
push ecx
mov ecx, dword [ebp - 0x1816c]
add ecx, 0xf23d0
call fcn.00532410
mov ecx, dword [ebp - 0x1816c]
add ecx, 0xf8ac0
call fcn.0046eb80
jmp 0x42aafd
mov edx, dword [ebp - 0x1816c]
movzx eax, byte [edx + 0x4202d]
test eax, eax
je 0x429d17
mov ecx, dword [ebp - 0x1816c]
movzx edx, byte [ecx + 0x4202c]
test edx, edx
je 0x429d0a
mov eax, dword [ebp - 0x1816c]
mov ecx, dword [eax + 0x4207c]
cmp ecx, dword [ebp - 0x34]
jne 0x429d0a
push 0x104
lea edx, [ebp - 0x11934]
push edx
mov eax, dword [ebp + 8]
add eax, 0x10
push eax
call fcn.00509bc0
mov dword [ebp - 0x38], eax
mov ecx, dword [ebp - 0x38]
mov byte [ebp + ecx - 0x11934], 0
mov edx, dword [ebp - 0x1816c]
add edx, 0x4203a
push edx
lea eax, [ebp - 0x11934]
push eax
call fcn.00548180
add esp, 8
test eax, eax
jne 0x429d0a
push 0x67e
push 0
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x4202c
push ecx
call fcn.005454d0
add esp, 0xc
mov edx, dword [ebp - 0x1816c]
mov byte [edx + 0x4202d], 0
mov ecx, dword [ebp - 0x1816c]
add ecx, 0xf8ac0
call fcn.0046eb80
jmp 0x42aafd
mov eax, dword [ebp - 0x1816c]
movzx ecx, byte [eax + 0x4202d]
test ecx, ecx
je 0x429e26
mov edx, dword [ebp - 0x1816c]
movzx eax, byte [edx + 0x4202c]
test eax, eax
je 0x429e19
mov ecx, dword [ebp - 0x1816c]
mov edx, dword [ecx + 0x4207c]
cmp edx, dword [ebp - 0x34]
jne 0x429e19
push 0x104
lea eax, [ebp - 0x11a3c]
push eax
mov ecx, dword [ebp + 8]
add ecx, 0x10
push ecx
call fcn.00509bc0
mov dword [ebp - 0x38], eax
mov edx, dword [ebp - 0x38]
mov byte [ebp + edx - 0x11a3c], 0
mov eax, dword [ebp - 0x1816c]
add eax, 0x4203a
push eax
lea ecx, [ebp - 0x11a3c]
push ecx
call fcn.00548180
add esp, 8
test eax, eax
jne 0x429e19
mov edx, dword [ebp - 0x1816c]
movzx eax, byte [edx + 0x4202f]
test eax, eax
jne 0x429dfe
push 1
mov ecx, dword [ebp - 0x1816c]
movsx edx, word [ecx + 0x42348]
push edx
mov esi, dword [ebp - 0x1816c]
add esi, 0x4203a
sub esp, 0x338
mov ecx, 0xce
mov edi, esp
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x46314
call fcn.004a2ba0
push 0x67e
push 0
mov eax, dword [ebp - 0x1816c]
add eax, 0x4202c
push eax
call fcn.005454d0
add esp, 0xc
mov ecx, dword [ebp - 0x1816c]
mov byte [ecx + 0x4202d], 0
jmp 0x42aafd
movzx edx, word [ebp - 0x2e]
imul edx, edx, 0x339
mov eax, dword [ebp - 0x1816c]
movzx ecx, byte [eax + edx + 0xc2cc0]
test ecx, ecx
je 0x429e7f
movzx edx, word [ebp - 0x2e]
imul edx, edx, 0x339
mov eax, dword [ebp - 0x1816c]
mov cx, word [ebp - 0x34]
mov word [eax + edx + 0xc2d07], cx
movzx edx, word [ebp - 0x2e]
imul edx, edx, 0x339
mov eax, dword [ebp - 0x1816c]
mov cx, word [ebp - 0x2c]
mov word [eax + edx + 0xc2d09], cx
jmp 0x42aafd
mov edx, dword [ebp - 0x1816c]
mov eax, dword [ebp - 0x34]
mov dword [edx + 0xff567], eax
movzx cx, byte [ebp - 0x2e]
mov edx, dword [ebp - 0x1816c]
mov word [edx + 0xff56f], cx
movzx ax, byte [ebp - 0x2c]
mov ecx, dword [ebp - 0x1816c]
mov word [ecx + 0xff573], ax
jmp 0x42aafd
mov edx, dword [ebp - 0x1816c]
mov al, byte [ebp - 0x34]
mov byte [edx + 0xfe050], al
mov ecx, dword [ebp - 0x1816c]
movzx edx, byte [ecx + 0xfe050]
test edx, edx
je 0x42a04c
mov eax, dword [ebp - 0x1816c]
movzx ecx, byte [eax + 0xfe050]
cmp ecx, 0xb
jl 0x429f16
mov edx, dword [ebp - 0x1816c]
movzx eax, byte [edx + 0xfe050]
cmp eax, 0xc
jg 0x429f16
mov ecx, dword [ebp - 0x1816c]
mov byte [ecx + 0xfe058], 0xa
jmp 0x42a025
mov edx, dword [ebp - 0x1816c]
movzx eax, byte [edx + 0xfe050]
cmp eax, 0xd
jne 0x429f3a
mov ecx, dword [ebp - 0x1816c]
mov byte [ecx + 0xfe058], 0xd0
jmp 0x42a025
mov edx, dword [ebp - 0x1816c]
movzx eax, byte [edx + 0xfe050]
cmp eax, 6
jl 0x429f80
mov ecx, dword [ebp - 0x1816c]
movzx edx, byte [ecx + 0xfe050]
cmp edx, 0xa
jg 0x429f80
mov eax, dword [ebp - 0x1816c]
mov byte [eax + 0xfe058], 0xc9
mov ecx, dword [ebp - 0x1816c]
mov dword [ecx + 0xfe09c], 0
jmp 0x42a025
mov edx, dword [ebp - 0x1816c]
movzx eax, byte [edx + 0xfe036]
test eax, eax
jne 0x429fc4
mov ecx, dword [ebp - 0x1816c]
movzx edx, byte [ecx + 0xfe050]
cmp edx, 1
jl 0x429fc4
mov eax, dword [ebp - 0x1816c]
movzx ecx, byte [eax + 0xfe050]
cmp ecx, 6
jge 0x429fc4
mov edx, dword [ebp - 0x1816c]
mov byte [edx + 0xfe058], 0xa
jmp 0x42a025
mov eax, dword [ebp - 0x1816c]
movzx ecx, byte [eax + 0xfe036]
cmp ecx, 1
jne 0x429fe5
mov edx, dword [ebp - 0x1816c]
mov byte [edx + 0xfe058], 0x9b
jmp 0x42a025
mov eax, dword [ebp - 0x1816c]
movzx ecx, byte [eax + 0xfe036]
cmp ecx, 2
jne 0x42a006
mov edx, dword [ebp - 0x1816c]
mov byte [edx + 0xfe058], 0x9c
jmp 0x42a025
mov eax, dword [ebp - 0x1816c]
movzx ecx, byte [eax + 0xfe036]
cmp ecx, 3
jne 0x42a025
mov edx, dword [ebp - 0x1816c]
mov byte [edx + 0xfe058], 0x9d
mov eax, dword [ebp - 0x1816c]
movzx ecx, byte [eax + 0xfe058]
imul ecx, ecx, 0x2a5
add ecx, 0x6cbbb0
mov edx, dword [ebp - 0x1816c]
mov dword [edx + 0xfe098], ecx
jmp 0x42a05c
mov eax, dword [ebp - 0x1816c]
mov dword [eax + 0xfe098], 0
mov ecx, dword [ebp - 0x1816c]
movzx edx, byte [ecx + 0xfe050]
test edx, edx
je 0x42a09c
mov eax, dword [ebp - 0x1816c]
movzx ecx, byte [eax + 0xfb299]
push ecx
push 0x1d
mov ecx, dword [ebp - 0x1816c]
add ecx, 0xfb108
mov edx, dword [ebp - 0x1816c]
mov eax, dword [edx + 0xfb108]
mov edx, dword [eax + 0x24]
call edx
jmp 0x42a0c9
mov eax, dword [ebp - 0x1816c]
movzx ecx, byte [eax + 0xfb299]
push ecx
push 0
mov ecx, dword [ebp - 0x1816c]
add ecx, 0xfb108
mov edx, dword [ebp - 0x1816c]
mov eax, dword [edx + 0xfb108]
mov edx, dword [eax + 0x24]
call edx
call fcn.0040ada0
mov ecx, dword [ebp - 0x1816c]
mov dword [ecx + 0xff6ec], eax
jmp 0x42aafd
mov edx, dword [ebp - 0x34]
push edx
push 0x577a08
lea eax, [ebp - 0x11b44]
push eax
call fcn.005456a9
add esp, 0xc
lea ecx, [ebp - 0x11b44]
push ecx
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x41fe0
call fcn.0046cd50
jmp 0x42aafd
push 3
call fcn.004764c0
add esp, 4
mov dword [ebp - 0x11b48], eax
push 2
call fcn.004764c0
add esp, 4
mov dword [ebp - 0x11b4c], eax
movzx edx, word [ebp - 0x2e]
test edx, edx
je 0x42a17a
mov byte [0x663c13], 1
mov eax, dword [ebp - 0x1816c]
mov byte [eax + 0xe5196], 1
push 0
push 0
push 0x5779fc
mov ecx, dword [ebp - 0x11b48]
push ecx
mov edx, dword [ebp - 0x11b4c]
push edx
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x41fe0
call fcn.0048ce80
jmp 0x42a1b6
mov byte [0x663c13], 0
mov eax, dword [ebp - 0x1816c]
mov byte [eax + 0xe5196], 0
push 0
push 0
push 0x5779f0
mov ecx, dword [ebp - 0x11b48]
push ecx
mov edx, dword [ebp - 0x11b4c]
push edx
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x41fe0
call fcn.0048ce80
jmp 0x42aafd
mov eax, dword [ebp - 0x1816c]
mov byte [eax + 0xff734], 1
jmp 0x42aafd
mov ecx, dword [ebp - 0x34]
mov dword [ebp - 0x18238], ecx
mov edx, dword [ebp - 0x18238]
add edx, 5
mov dword [ebp - 0x18238], edx
cmp dword [ebp - 0x18238], 4
ja case.default.0x42a1f8
mov eax, dword [ebp - 0x18238]
jmp dword [eax*4 + 0x42b060]
mov dword [0x6f3228], 0x1e
push 0x1a4
push 0
push 0x5779d0
mov ecx, 0x6f09c4
call fcn.00513b70
jmp case.default.0x42a1f8
mov dword [0x6f3228], 0x1e
push 0x1a4
push 0
push 0x5779b0
mov ecx, 0x6f09c4
call fcn.00513b70
jmp case.default.0x42a1f8
mov dword [0x6f3228], 0x1e
push 0x1a4
push 0
push 0x57799c
mov ecx, 0x6f09c4
call fcn.00513b70
jmp case.default.0x42a1f8
mov dword [0x6f3228], 0x1e
push 0x1a4
push 0
push 0x577988
mov ecx, 0x6f09c4
call fcn.00513b70
jmp case.default.0x42a1f8
mov dword [0x6f3228], 0x1e
push 0x1a4
push 0
push 0x577974
mov ecx, 0x6f09c4
call fcn.00513b70
jmp 0x42aafd
mov ecx, dword [ebp - 0x34]
mov dword [ebp - 0x1823c], ecx
cmp dword [ebp - 0x1823c], 0xfffffffd
je 0x42a319
cmp dword [ebp - 0x1823c], 0xfffffffe
je 0x42a2f7
cmp dword [ebp - 0x1823c], 0xffffffff
je 0x42a2d5
jmp 0x42a339
mov dword [0x6f3228], 0x1e
push 0x1a4
push 0
push 0x577958
mov ecx, 0x6f09c4
call fcn.00513b70
jmp 0x42a339
mov dword [0x6f3228], 0x1e
push 0x1a4
push 0
push 0x57793c
mov ecx, 0x6f09c4
call fcn.00513b70
jmp 0x42a339
mov dword [0x6f3228], 0x1e
push 0x1a4
push 0
push 0x577924
mov ecx, 0x6f09c4
call fcn.00513b70
jmp 0x42aafd
mov ecx, dword [ebp - 0x1816c]
add ecx, 0xdfdd4
call fcn.0043c3d0
push 0x2000
lea edx, [ebp - 0x13b4c]
push edx
mov eax, dword [ebp + 8]
add eax, 0x10
push eax
call fcn.00509bc0
mov dword [ebp - 0x38], eax
mov ecx, dword [ebp - 0x38]
mov byte [ebp + ecx - 0x13b4c], 0
lea edx, [ebp - 0x13b4c]
mov dword [ebp - 0x13b58], edx
mov dword [ebp - 0x13b54], 0
push 0x2f
mov eax, dword [ebp - 0x13b58]
push eax
call fcn.004372e0
add esp, 8
mov dword [ebp - 0x13b50], eax
cmp dword [ebp - 0x13b50], 0
je 0x42a47c
mov ecx, dword [ebp - 0x13b50]
mov byte [ecx], 0
mov edx, dword [ebp - 0x13b50]
add edx, 1
mov dword [ebp - 0x13b50], edx
push 0x104
call fcn.00545848
add esp, 4
mov dword [ebp - 0x18150], eax
mov byte [ebp - 4], 0x1c
cmp dword [ebp - 0x18150], 0
je 0x42a3fa
mov ecx, dword [ebp - 0x18150]
call fcn.0043baa0
mov dword [ebp - 0x18240], eax
jmp 0x42a404
mov dword [ebp - 0x18240], 0
mov eax, dword [ebp - 0x18240]
mov dword [ebp - 0x1814c], eax
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x1814c]
mov dword [ebp - 0x13b5c], ecx
cmp dword [ebp - 0x13b5c], 0
je 0x42a45c
mov edx, dword [ebp - 0x13b58]
push edx
push 0x104
mov eax, dword [ebp - 0x13b5c]
push eax
call fcn.005477d6
add esp, 0xc
mov ecx, dword [ebp - 0x13b5c]
push ecx
mov ecx, dword [ebp - 0x1816c]
add ecx, 0xdfdd4
call fcn.00437890
mov edx, dword [ebp - 0x13b54]
add edx, 1
mov dword [ebp - 0x13b54], edx
mov eax, dword [ebp - 0x13b50]
mov dword [ebp - 0x13b58], eax
jmp 0x42a38b
jmp 0x42aafd
mov ecx, dword [ebp - 0x1816c]
add ecx, 0xdfdd4
call fcn.0043c3d0
lea ecx, [ebp - 0x13b60]
call fcn.00466d40
lea ecx, [ebp - 0x18154]
push ecx
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x1bfb4
call fcn.00437d00
mov edx, dword [eax]
mov dword [ebp - 0x13b60], edx
jmp 0x42a4d3
push 0
lea eax, [ebp - 0x18158]
push eax
lea ecx, [ebp - 0x13b60]
call fcn.004f6740
lea ecx, [ebp - 0x1815c]
push ecx
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x1bfb4
call fcn.0051cb30
push eax
lea ecx, [ebp - 0x13b60]
call fcn.00405200
movzx edx, al
test edx, edx
je 0x42a522
lea ecx, [ebp - 0x13b60]
call fcn.0044a2c0
mov eax, dword [eax]
mov dword [ebp - 0x18160], eax
mov ecx, dword [ebp - 0x18160]
push ecx
call fcn.00544d52
add esp, 4
jmp 0x42a4bf
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x1bfb4
call fcn.00437c60
mov edx, dword [ebp - 0x1816c]
mov byte [edx + 0xff734], 0
jmp 0x42aafd
jmp 0x42aafd
jmp 0x42aafd
mov byte [ebp - 0x15b64], 0
push 0x1fff
push 0
lea eax, [ebp - 0x15b63]
push eax
call fcn.005454d0
add esp, 0xc
mov dword [ebp - 0x15b68], 0
push 0x2000
lea ecx, [ebp - 0x15b64]
push ecx
mov edx, dword [ebp + 8]
add edx, 0x10
push edx
call fcn.00509bc0
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
mov byte [ebp + eax - 0x15b64], 0
lea ecx, [ebp - 0x15b64]
push ecx
mov ecx, dword [ebp - 0x1816c]
add ecx, 0xd9028
call fcn.0047b3e0
mov ecx, dword [ebp - 0x1816c]
add ecx, 0xd9028
call fcn.0043b9f0
movzx edx, al
test edx, edx
jne 0x42a5df
push 5
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x41fe0
call fcn.00496ec0
mov eax, dword [ebp - 0x1816c]
mov byte [eax + 0xdfd20], 0
jmp 0x42aafd
mov dword [0x6f3228], 0x1e
push 0x1a4
push 0
push 0x577910
mov ecx, 0x6f09c4
call fcn.00513b70
jmp 0x42aafd
mov dword [ebp - 0x17b70], 0
push 0x2000
lea ecx, [ebp - 0x17b6c]
push ecx
mov edx, dword [ebp + 8]
add edx, 0x10
push edx
call fcn.00509bc0
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
mov byte [ebp + eax - 0x17b6c], 0
lea ecx, [ebp - 0x17b6c]
push ecx
push 0x2000
mov edx, dword [ebp - 0x1816c]
add edx, 0xddd20
push edx
call fcn.005477d6
add esp, 0xc
mov eax, dword [ebp - 0x1816c]
mov byte [eax + 0xdfd20], 1
lea ecx, [ebp - 0x17b6c]
push ecx
mov ecx, dword [ebp - 0x1816c]
add ecx, 0xd9028
call fcn.0047a270
jmp 0x42aafd
mov dword [0x6f3228], 0x1e
mov edx, dword [ebp - 0x34]
mov dword [ebp - 0x18244], edx
mov eax, dword [ebp - 0x18244]
sub eax, 2
mov dword [ebp - 0x18244], eax
cmp dword [ebp - 0x18244], 3
ja case.default.0x42a6c2
mov ecx, dword [ebp - 0x18244]
jmp dword [ecx*4 + 0x42b074]
push 0x1a4
push 0
push 0x5778fc
mov ecx, 0x6f09c4
call fcn.00513b70
jmp 0x42a73f
push 0x1a4
push 0
push 0x5778e8
mov ecx, 0x6f09c4
call fcn.00513b70
jmp 0x42a73f
push 0x1a4
push 0
push 0x5778d0
mov ecx, 0x6f09c4
call fcn.00513b70
jmp 0x42a73f
push 0x1a4
push 0
push 0x5778bc
mov ecx, 0x6f09c4
call fcn.00513b70
jmp 0x42a73f
push 0x1a4
push 0
push 0x5778ac
mov ecx, 0x6f09c4
call fcn.00513b70
jmp 0x42aafd
mov byte [ebp - 0x17f74], 0
push 0x3ff
push 0
lea edx, [ebp - 0x17f73]
push edx
call fcn.005454d0
add esp, 0xc
push 0x400
lea eax, [ebp - 0x17f74]
push eax
mov ecx, dword [ebp + 8]
add ecx, 0x10
push ecx
call fcn.00509bc0
mov dword [ebp - 0x38], eax
mov edx, dword [ebp - 0x38]
mov byte [ebp + edx - 0x17f74], 0
push 0x2f
lea eax, [ebp - 0x17f74]
push eax
call fcn.004372e0
add esp, 8
mov dword [ebp - 0x17f78], eax
cmp dword [ebp - 0x17f78], 0
je 0x42a8ec
mov ecx, dword [ebp - 0x17f78]
mov byte [ecx], 0
mov edx, dword [ebp - 0x17f78]
add edx, 1
mov dword [ebp - 0x17f78], edx
mov eax, dword [ebp - 0x17f78]
movsx ecx, byte [eax]
cmp ecx, 0x2a
jne 0x42a837
mov edx, dword [ebp - 0x17f78]
add edx, 1
mov dword [ebp - 0x17f78], edx
mov eax, dword [ebp - 0x17f78]
push eax
push 0x40
mov ecx, dword [ebp - 0x1816c]
add ecx, 0xfdfe8
push ecx
call fcn.005477d6
add esp, 0xc
push 0x40
push 0
mov edx, dword [ebp - 0x1816c]
add edx, 0xfdfa8
push edx
call fcn.005454d0
add esp, 0xc
push 0x100
push 0
mov eax, dword [ebp - 0x1816c]
add eax, 0xfdea8
push eax
call fcn.005454d0
add esp, 0xc
jmp 0x42a8ec
push 0x5778a8
mov ecx, dword [ebp - 0x17f78]
push ecx
call fcn.004372c0
add esp, 8
mov dword [ebp - 0x17f7c], eax
cmp dword [ebp - 0x17f7c], 0
je 0x42a890
mov edx, dword [ebp - 0x17f7c]
mov byte [edx], 0
mov eax, dword [ebp - 0x17f7c]
add eax, 2
mov dword [ebp - 0x17f7c], eax
mov ecx, dword [ebp - 0x17f7c]
push ecx
push 0x40
mov edx, dword [ebp - 0x1816c]
add edx, 0xfdfe8
push edx
call fcn.005477d6
add esp, 0xc
mov eax, dword [ebp - 0x17f78]
push eax
call fcn.00545a90
add esp, 4
cmp eax, 0x18
jbe 0x42a8ae
mov ecx, dword [ebp - 0x17f78]
mov byte [ecx + 0x18], 0
mov edx, dword [ebp - 0x17f78]
push edx
push 0x100
mov eax, dword [ebp - 0x1816c]
add eax, 0xfdea8
push eax
call fcn.005477d6
add esp, 0xc
lea ecx, [ebp - 0x17f74]
push ecx
push 0x40
mov edx, dword [ebp - 0x1816c]
add edx, 0xfdfa8
push edx
call fcn.005477d6
add esp, 0xc
jmp 0x42aafd
mov eax, dword [ebp - 0x34]
push eax
mov ecx, dword [ebp - 0x1816c]
call fcn.00420900
mov dword [ebp - 0x17f80], eax
cmp dword [ebp - 0x17f80], 0
je case.0x420e24.6
mov ecx, dword [ebp - 0x17f80]
mov dx, word [ebp - 0x2e]
mov word [ecx + 0x1a8], dx
mov eax, dword [ebp - 0x17f80]
mov cx, word [ebp - 0x2c]
mov word [eax + 0x1aa], cx
mov edx, dword [ebp - 0x17f80]
movzx eax, byte [edx + 0x190]
cmp eax, 0x13
jne 0x42a977
mov ecx, dword [ebp - 0x17f80]
mov byte [ecx + 0x29c], 0
mov edx, dword [ebp - 0x17f80]
movzx eax, byte [edx + 0x191]
push eax
push 0
mov ecx, dword [ebp - 0x17f80]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x17f80]
mov eax, dword [edx + 0x24]
call eax
mov ecx, dword [ebp - 0x17f80]
movsx edx, byte [ecx + 8]
test edx, edx
je case.0x420e24.6
movzx eax, word [ebp - 0x2a]
and eax, 0xff
mov byte [ebp - 0x17f94], al
mov ecx, dword [ebp - 0x17f80]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x17f80]
mov eax, dword [edx + 0x20]
call eax
mov byte [ebp - 0x17f8b], al
movzx ecx, word [ebp - 0x2e]
mov dword [ebp - 0x17f93], ecx
movzx edx, word [ebp - 0x2c]
mov dword [ebp - 0x17f8f], edx
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x17ffc], eax
mov ecx, dword [ebp - 0x17f80]
add ecx, 8
push ecx
push 0x64
lea edx, [ebp - 0x17ff8]
push edx
call fcn.005477d6
add esp, 0xc
push 1
sub esp, 0x74
mov ecx, 0x1d
lea esi, [ebp - 0x17ffc]
mov edi, esp
rep movsd dword es:[edi], dword [esi]
call dword [0x69d47c]
movzx eax, byte [0x69ee7a]
test eax, eax
je 0x42aa27
cmp dword [0x6658d4], 0
je 0x42aa27
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd]
call fcn.00402620
jmp 0x42ab0c
push 0x2010
call fcn.00545848
add esp, 4
mov dword [ebp - 0x18168], eax
mov byte [ebp - 4], 0x1d
cmp dword [ebp - 0x18168], 0
je 0x42aa5a
mov ecx, dword [ebp - 0x18168]
call fcn.0043b370
mov dword [ebp - 0x18248], eax
jmp 0x42aa64
mov dword [ebp - 0x18248], 0
mov ecx, dword [ebp - 0x18248]
mov dword [ebp - 0x18164], ecx
mov byte [ebp - 4], 0
mov edx, dword [ebp - 0x18164]
mov dword [ebp - 0x18000], edx
cmp dword [ebp - 0x18000], 0
je 0x42aafd
mov eax, dword [ebp - 0x18000]
mov ecx, dword [ebp - 0x34]
mov dword [eax], ecx
mov edx, dword [ebp - 0x30]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x2c]
mov dword [eax + 8], ecx
mov edx, dword [ebp - 0x18000]
mov byte [edx + 0xc], 0
movzx eax, word [ebp - 0x30]
cmp eax, 0xe
je 0x42aae5
movzx ecx, word [ebp - 0x30]
cmp ecx, 9
je 0x42aae5
movzx edx, word [ebp - 0x30]
cmp edx, 0x23
je 0x42aae5
movzx eax, word [ebp - 0x30]
cmp eax, 6
je 0x42aae5
mov ecx, dword [ebp + 8]
add ecx, 0x10
push ecx
mov edx, dword [ebp - 0x18000]
add edx, 0xc
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov eax, dword [ebp - 0x18000]
push eax
mov ecx, dword [ebp - 0x1816c]
add ecx, 0x10f30c
call fcn.0040ea20
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd]
call fcn.00402620
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x3c]
xor ecx, ebp
call fcn.0054514c
mov esp, ebp
pop ebp
ret 4