Function at 0x77a028
Capabilities:
Get geographical location

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffff7f8
push ebx
xor ebx, ebx
mov dword [ebp - 0x6f0], ebx
mov dword [ebp - 0x6f4], ebx
mov dword [ebp - 0x808], ebx
mov dword [ebp - 0x6f8], ebx
mov dword [ebp - 0x6fc], ebx
mov dword [ebp - 0x700], ebx
mov dword [ebp - 0x704], ebx
mov dword [ebp - 0x7c], ebx
mov dword [ebp - 0x98], ebx
mov dword [ebp - 0x9c], ebx
mov byte [ebp - 9], cl
mov dword [ebp - 8], edx
mov dword [ebp - 4], eax
xor eax, eax
push ebp
push 0x77c607
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x842118]
cmp byte [eax], 0
jne 0x77a098
xor eax, eax
mov dword [ebp - 0x20], eax
jmp 0x77c5c6
mov eax, dword [0x842118]
mov byte [eax], 0
lea eax, [ebp - 0x98]
mov edx, dword [0x841bac]
mov edx, dword [edx]
call fcn.00403f0c
mov eax, dword [0x841bac]
mov eax, dword [eax + 4]
mov dword [ebp - 0xa4], eax
mov eax, dword [0x841710]
cmp byte [eax], 0
jne 0x77a139
cmp dword [ebp - 0xa4], 0xffffffff
jle 0x77a139
mov eax, dword [0x955898]
mov eax, dword [eax + 0xb84]
cmp byte [eax + 0x2c], 0
je 0x77c5c6
cmp byte [ebp - 9], 0
jne 0x77c5c6
call fcn.006571c8
mov eax, dword [ebp - 0xa4]
shl eax, 4
mov edx, dword [0x840ecc]
mov dword [edx + eax*8 - 0x20], 1
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x394]
mov eax, dword [eax + 0xb4]
push eax
push 1
push 0
mov ecx, dword [ebp - 0x68]
mov edx, dword [ebp - 0x64]
mov eax, dword [ebp - 0xa4]
call fcn.00707ce8
jmp 0x77c5c6
xor eax, eax
mov dword [ebp - 0x64], eax
xor eax, eax
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x304]
cmp byte [eax + 0x160], 0
je 0x77a19d
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x304]
call fcn.0057832c
add dword [ebp + 0xc], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x304]
call fcn.005782ec
add dword [ebp + 8], eax
mov eax, dword [0x955898]
mov eax, dword [eax + 0x304]
call fcn.0057832c
mov dword [ebp - 0x64], eax
mov eax, dword [0x955898]
mov eax, dword [eax + 0x304]
call fcn.005782ec
mov dword [ebp - 0x68], eax
fld dword [0x77c618]
mov eax, dword [0x84208c]
fdiv qword [eax]
fild dword [ebp + 0xc]
fmulp st(1)
call fcn.00402c90
mov dword [ebp - 0x30], eax
fld dword [0x77c618]
mov eax, dword [0x84208c]
fdiv qword [eax]
fild dword [ebp + 8]
fmulp st(1)
call fcn.00402c90
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0xa4], 0
jle 0x77a217
mov eax, dword [0x841710]
cmp byte [eax], 0
jne 0x77a217
mov eax, dword [0x955898]
mov eax, dword [eax + 0xb84]
cmp byte [eax + 0x2c], 0
je 0x77a217
cmp byte [ebp - 9], 0
jne 0x77a217
call fcn.006571c8
mov eax, dword [ebp - 0xa4]
shl eax, 4
mov edx, dword [0x840ecc]
mov dword [edx + eax*8 - 0x20], 1
mov eax, dword [0x841710]
cmp byte [eax], 0
je 0x77a270
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x820]
cmp byte [eax + 0xc0], 0
jne 0x77a239
test byte [ebp + 0x10], 1
je 0x77a270
cmp dword [ebp - 0xa4], 0
jl 0x77a270
mov edx, dword [ebp + 8]
mov eax, dword [ebp + 0xc]
call fcn.0063cec4
mov eax, dword [0x841710]
mov byte [eax], 0
mov eax, dword [0x842354]
mov dword [eax], 0xffffffff
mov eax, dword [0x842144]
mov dword [eax], 0xffffffff
jmp 0x77c5c6
mov eax, dword [ebp - 4]
cmp byte [eax + 0xe74], 0
je 0x77a663
mov eax, dword [0x841cd4]
cmp byte [eax], 0
jne 0x77a2cf
mov eax, dword [0x8421ac]
cmp byte [eax], 0
jne 0x77a2cf
mov eax, dword [0x841a5c]
cmp dword [eax], 0
jg 0x77a2cf
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xb84]
cmp byte [eax + 0x2c], 0
jne 0x77a2cf
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xb88]
cmp byte [eax + 0x2c], 0
jne 0x77a2cf
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xd80]
cmp byte [eax + 0x2c], 0
je 0x77a663
cmp byte [ebp - 9], 0
jne 0x77a663
mov eax, dword [ebp - 4]
cmp byte [eax + 0xe74], 0
je 0x77a663
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x394]
mov edx, dword [eax + 0xb4]
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 4]
call fcn.0076bb9c
call sub.USER32.DLL_ReleaseCapture
mov eax, dword [ebp - 4]
mov byte [eax + 0xe74], 0
fld dword [0x77c618]
mov eax, dword [0x84208c]
fdiv qword [eax]
mov eax, dword [ebp - 4]
fild dword [eax + 0xe7c]
fmulp st(1)
call fcn.00402c90
push eax
fld dword [0x77c618]
mov eax, dword [0x84208c]
fdiv qword [eax]
mov eax, dword [ebp - 4]
fild dword [eax + 0xe78]
fmulp st(1)
call fcn.00402c90
pop edx
call fcn.0078df3c
mov eax, dword [0x841040]
fstp qword [eax]
wait
fld dword [0x77c618]
mov eax, dword [0x84208c]
fdiv qword [eax]
mov eax, dword [ebp - 4]
fild dword [eax + 0xe7c]
fmulp st(1)
call fcn.00402c90
push eax
fld dword [0x77c618]
mov eax, dword [0x84208c]
fdiv qword [eax]
mov eax, dword [ebp - 4]
fild dword [eax + 0xe78]
fmulp st(1)
call fcn.00402c90
pop edx
call fcn.0078e204
mov eax, dword [0x8407f0]
fstp qword [eax]
wait
fld dword [0x77c618]
mov eax, dword [0x84208c]
fdiv qword [eax]
mov eax, dword [ebp - 4]
fild dword [eax + 0xe84]
fmulp st(1)
call fcn.00402c90
push eax
fld dword [0x77c618]
mov eax, dword [0x84208c]
fdiv qword [eax]
mov eax, dword [ebp - 4]
fild dword [eax + 0xe80]
fmulp st(1)
call fcn.00402c90
pop edx
call fcn.0078df3c
mov eax, dword [0x841198]
fstp qword [eax]
wait
fld dword [0x77c618]
mov eax, dword [0x84208c]
fdiv qword [eax]
mov eax, dword [ebp - 4]
fild dword [eax + 0xe84]
fmulp st(1)
call fcn.00402c90
push eax
fld dword [0x77c618]
mov eax, dword [0x84208c]
fdiv qword [eax]
mov eax, dword [ebp - 4]
fild dword [eax + 0xe80]
fmulp st(1)
call fcn.00402c90
pop edx
call fcn.0078e204
mov eax, dword [0x84091c]
fstp qword [eax]
wait
mov eax, dword [0x8407f0]
mov edx, dword [eax]
mov dword [ebp - 0x6e8], edx
mov edx, dword [eax + 4]
mov dword [ebp - 0x6e4], edx
mov eax, dword [0x841040]
mov edx, dword [eax]
mov dword [ebp - 0x6e0], edx
mov edx, dword [eax + 4]
mov dword [ebp - 0x6dc], edx
mov eax, dword [0x84091c]
mov edx, dword [eax]
mov dword [ebp - 0x6d8], edx
mov edx, dword [eax + 4]
mov dword [ebp - 0x6d4], edx
mov eax, dword [0x841040]
mov edx, dword [eax]
mov dword [ebp - 0x6d0], edx
mov edx, dword [eax + 4]
mov dword [ebp - 0x6cc], edx
mov eax, dword [0x84091c]
mov edx, dword [eax]
mov dword [ebp - 0x6c8], edx
mov edx, dword [eax + 4]
mov dword [ebp - 0x6c4], edx
mov eax, dword [0x841198]
mov edx, dword [eax]
mov dword [ebp - 0x6c0], edx
mov edx, dword [eax + 4]
mov dword [ebp - 0x6bc], edx
mov eax, dword [0x8407f0]
mov edx, dword [eax]
mov dword [ebp - 0x6b8], edx
mov edx, dword [eax + 4]
mov dword [ebp - 0x6b4], edx
mov eax, dword [0x841198]
mov edx, dword [eax]
mov dword [ebp - 0x6b0], edx
mov edx, dword [eax + 4]
mov dword [ebp - 0x6ac], edx
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x394]
mov eax, dword [eax + 0xb4]
mov dword [ebp - 0xa8], eax
push 0xa
mov eax, dword [ebp - 0xa8]
call fcn.0041b8cc
push eax
call sub.GDI32.DLL_SetROP2
mov eax, dword [ebp - 0xa8]
mov eax, dword [eax + 0x10]
mov dl, 2
call fcn.0041aa58
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xe80]
sub eax, dword [ebp - 0x64]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xe84]
sub eax, dword [ebp - 0x68]
push eax
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0xe7c]
sub ecx, dword [ebp - 0x68]
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0xe78]
sub edx, dword [ebp - 0x64]
mov eax, dword [ebp - 0xa8]
call fcn.0041b4f4
mov eax, dword [ebp - 0xa8]
mov eax, dword [eax + 0x10]
xor edx, edx
call fcn.0041aa58
mov eax, dword [ebp - 0xa8]
mov eax, dword [eax + 0x14]
xor edx, edx
call fcn.0041ad70
mov eax, dword [0x8421ac]
cmp byte [eax], 0
je 0x77a5cd
mov eax, dword [0x840668]
mov eax, dword [eax]
mov eax, dword [eax + 0x214]
cmp byte [eax + 0xc0], 0
je 0x77a5bd
lea edx, [ebp - 0x6e8]
mov eax, 1
call fcn.0071a53c
jmp 0x77a5cd
lea edx, [ebp - 0x6e8]
mov eax, 1
call fcn.0071a2bc
mov eax, dword [0x841cd4]
cmp byte [eax], 0
je 0x77a5e7
lea edx, [ebp - 0x6e8]
mov eax, 1
call fcn.0070939c
lea eax, [ebp - 0x6e8]
call fcn.0065788c
mov eax, dword [0x841a5c]
cmp dword [eax], 2
jne 0x77a626
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xe84]
push eax
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0xe80]
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0xe7c]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xe78]
call fcn.006c3854
mov eax, dword [0x841a5c]
cmp dword [eax], 3
jne 0x77c5c6
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xe84]
push eax
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0xe80]
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0xe7c]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xe78]
call fcn.006b75e0
jmp 0x77c5c6
mov eax, dword [0x841710]
cmp byte [eax], 0
je 0x77a6ae
mov eax, dword [ebp + 0xc]
push eax
mov eax, dword [ebp + 8]
push eax
mov cl, byte [ebp + 0x10]
mov dl, byte [ebp - 9]
mov eax, dword [ebp - 8]
call fcn.0068d00c
mov eax, dword [0x841358]
mov byte [eax], 0
mov eax, dword [0x841710]
mov byte [eax], 0
mov eax, dword [0x842354]
mov dword [eax], 0xffffffff
mov eax, dword [0x842144]
mov dword [eax], 0xffffffff
jmp 0x77c5c6
mov eax, dword [0x8410b0]
cmp dword [eax], 4
jne 0x77a746
fld dword [0x77c618]
mov eax, dword [0x84208c]
fdiv qword [eax]
fild dword [ebp + 0xc]
fmulp st(1)
call fcn.00402c90
mov dword [ebp + 0xc], eax
fld dword [0x77c618]
mov eax, dword [0x84208c]
fdiv qword [eax]
fild dword [ebp + 8]
fmulp st(1)
call fcn.00402c90
mov dword [ebp + 8], eax
mov edx, dword [ebp + 8]
mov eax, dword [ebp + 0xc]
call fcn.0078df3c
fstp qword [ebp - 0x14]
wait
mov edx, dword [ebp + 8]
mov eax, dword [ebp + 0xc]
call fcn.0078e204
fstp qword [ebp - 0x1c]
wait
mov eax, dword [0x8415e8]
mov edx, dword [ebp - 0x14]
mov dword [eax], edx
mov edx, dword [ebp - 0x10]
mov dword [eax + 4], edx
mov eax, dword [0x840d7c]
mov edx, dword [ebp - 0x1c]
mov dword [eax], edx
mov edx, dword [ebp - 0x18]
mov dword [eax + 4], edx
push dword [ebp - 0x10]
push dword [ebp - 0x14]
push dword [ebp - 0x18]
push dword [ebp - 0x1c]
xor edx, edx
mov eax, 0x77c624
call fcn.00798270
mov eax, dword [0x842104]
cmp byte [eax], 0
je 0x77a876
cmp byte [ebp - 9], 0
jne 0x77a876
call fcn.00796764
mov edx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x30]
call fcn.0078df3c
fstp qword [ebp - 0x70]
wait
mov edx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x30]
call fcn.0078e204
fstp qword [ebp - 0x78]
wait
lea eax, [ebp - 0x78]
push eax
mov eax, 0x77c634
call fcn.00558658
mov edx, eax
lea ecx, [ebp - 0x70]
mov eax, dword [0x84125c]
mov eax, dword [eax]
call fcn.0055a94c
mov eax, dword [0x84126c]
mov eax, dword [eax]
mov eax, dword [eax + 0x1dc]
call fcn.0048ffe4
push dword [ebp - 0x6c]
push dword [ebp - 0x70]
lea ecx, [ebp - 0x6f0]
mov edx, 5
mov eax, 0xa
call fcn.007876e8
mov eax, dword [ebp - 0x6f0]
push eax
mov eax, dword [0x84126c]
mov eax, dword [eax]
mov eax, dword [eax + 0x1dc]
mov edx, 0x77c644
call fcn.0048ef48
pop edx
mov ecx, dword [eax]
call dword [ecx + 0x78]
push dword [ebp - 0x74]
push dword [ebp - 0x78]
lea ecx, [ebp - 0x6f0]
mov edx, 5
mov eax, 0xa
call fcn.007876e8
mov eax, dword [ebp - 0x6f0]
push eax
mov eax, dword [0x84126c]
mov eax, dword [eax]
mov eax, dword [eax + 0x1dc]
mov edx, 0x77c658
call fcn.0048ef48
pop edx
mov ecx, dword [eax]
call dword [ecx + 0x78]
mov eax, dword [0x84126c]
mov eax, dword [eax]
mov eax, dword [eax + 0x1dc]
mov edx, dword [eax]
call dword [edx + 0x1a0]
mov eax, dword [0x8418e4]
mov edx, dword [ebp - 0x70]
mov dword [eax], edx
mov edx, dword [ebp - 0x6c]
mov dword [eax + 4], edx
mov eax, dword [0x841078]
mov edx, dword [ebp - 0x78]
mov dword [eax], edx
mov edx, dword [ebp - 0x74]
mov dword [eax + 4], edx
call fcn.007a753c
push 0
call sub.USER32.DLL_MessageBeep
jmp 0x77c5c6
mov eax, dword [0x841a74]
cmp byte [eax], 0
je 0x77a8e5
cmp byte [ebp - 9], 0
jne 0x77a8e5
mov eax, dword [0x841a74]
mov byte [eax], 0
call fcn.00796764
mov edx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x30]
call fcn.0078df3c
mov eax, dword [0x841458]
fstp qword [eax]
wait
mov edx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x30]
call fcn.0078e204
mov eax, dword [0x840ba0]
fstp qword [eax]
wait
mov eax, dword [0x840ba0]
push eax
mov ecx, dword [0x841458]
mov edx, dword [0x841054]
mov edx, dword [edx]
mov eax, dword [0x84125c]
mov eax, dword [eax]
call fcn.0055a94c
push 0
call sub.USER32.DLL_MessageBeep
jmp 0x77c5c6
test byte [ebp + 0x10], 4
je 0x77a926
test byte [ebp + 0x10], 2
jne 0x77a926
test byte [ebp + 0x10], 1
jne 0x77a926
mov eax, dword [0x8417e4]
mov eax, dword [eax]
call fcn.0042d188
mov eax, dword [0x841358]
mov byte [eax], 1
mov eax, dword [ebp + 0xc]
push eax
mov eax, dword [ebp + 8]
push eax
mov cl, byte [ebp + 0x10]
mov dl, byte [ebp - 9]
mov eax, dword [ebp - 8]
call fcn.0068cfdc
jmp 0x77c5c6
mov eax, dword [0x84211c]
mov eax, dword [eax]
cmp eax, dword [ebp - 0x30]
jl 0x77c5c6
mov eax, dword [0x8420d0]
mov eax, dword [eax]
cmp eax, dword [ebp - 0x34]
jl 0x77c5c6
mov eax, 0x77c66c
call fcn.00798864
test al, al
je 0x77a9a8
cmp byte [ebp - 9], 0
jne 0x77a9a8
mov edx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x30]
call fcn.0078df3c
fstp qword [ebp - 0x70]
wait
mov edx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x30]
call fcn.0078e204
fstp qword [ebp - 0x78]
wait
push dword [ebp - 0x6c]
push dword [ebp - 0x70]
push dword [ebp - 0x74]
push dword [ebp - 0x78]
push 0xc12e847e
push 0
mov eax, dword [0x841310]
mov eax, dword [eax]
call fcn.00618c58
call fcn.007a753c
push 0
call sub.USER32.DLL_MessageBeep
jmp 0x77c5c6
mov dword [ebp - 0x24], 0xffffffff
mov dword [ebp - 0x20], 1
mov eax, dword [0x840e00]
mov edx, dword [ebp - 0x20]
cmp byte [eax + edx - 1], 0
je 0x77aa73
cmp byte [ebp - 9], 0
jne 0x77aa73
lea edx, [ebp - 0x6f0]
mov eax, dword [ebp - 0x30]
call fcn.004094a8
mov eax, dword [ebp - 0x6f0]
push eax
lea edx, [ebp - 0x6f8]
mov eax, dword [ebp - 0x20]
call fcn.004094a8
mov ecx, dword [ebp - 0x6f8]
lea eax, [ebp - 0x6f4]
mov edx, 0x77c684
call fcn.0040413c
mov eax, dword [ebp - 0x6f4]
pop edx
call fcn.007989e4
lea edx, [ebp - 0x6f0]
mov eax, dword [ebp - 0x34]
call fcn.004094a8
mov eax, dword [ebp - 0x6f0]
push eax
lea edx, [ebp - 0x6f8]
mov eax, dword [ebp - 0x20]
call fcn.004094a8
mov ecx, dword [ebp - 0x6f8]
lea eax, [ebp - 0x6f4]
mov edx, 0x77c690
call fcn.0040413c
mov eax, dword [ebp - 0x6f4]
pop edx
call fcn.007989e4
call fcn.007a753c
mov eax, dword [0x841774]
mov eax, dword [eax]
call fcn.00720128
jmp 0x77c5c6
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0xa
jne 0x77a9b6
mov eax, dword [0x84229c]
cmp byte [eax], 0
je 0x77c5c6
cmp byte [ebp - 9], 0
jne 0x77aaba
push 0x3ff00000
push 0
push 0x3ff00000
push 0
push 0x3ff00000
push 0
push 0x3ff00000
push 0
mov dl, 0x72
mov eax, dword [ebp - 4]
call fcn.0076a9d0
mov eax, 0x77c69c
call fcn.00798864
test al, al
je 0x77ab4f
cmp byte [ebp - 9], 0
jne 0x77ab4f
mov eax, dword [0x841e18]
mov eax, dword [eax]
mov eax, dword [eax + 0x1f4]
cmp dword [eax + 0x124], 0
jle 0x77ab4f
mov edx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x30]
call fcn.0078df3c
fstp qword [ebp - 0x70]
wait
mov edx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x30]
call fcn.0078e204
fstp qword [ebp - 0x78]
wait
push dword [ebp - 0x6c]
push dword [ebp - 0x70]
push dword [ebp - 0x74]
push dword [ebp - 0x78]
mov eax, dword [0x841e18]
mov eax, dword [eax]
call fcn.0061e31c
mov eax, dword [0x841694]
push dword [eax + 4]
push dword [eax]
mov eax, dword [0x841030]
push dword [eax + 4]
push dword [eax]
xor edx, edx
mov eax, 0x77c6b4
call fcn.00798270
call fcn.007a753c
push 0
call sub.USER32.DLL_MessageBeep
jmp 0x77c5c6
mov edx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x30]
call fcn.0078df3c
mov eax, dword [0x841694]
fstp qword [eax]
wait
mov edx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x30]
call fcn.0078e204
mov eax, dword [0x841030]
fstp qword [eax]
wait
mov eax, dword [0x841694]
fld qword [eax]
fcomp dword [0x77c6b8]
fnstsw ax
sahf
je 0x77c5c6
mov eax, dword [0x841030]
fld qword [eax]
fcomp dword [0x77c6b8]
fnstsw ax
sahf
je 0x77c5c6
mov eax, dword [0x840b9c]
cmp byte [eax], 0
je 0x77af49
cmp byte [ebp - 9], 0
jne 0x77af49
mov eax, dword [0x841d84]
cmp dword [eax], 0
je 0x77ad2c
mov eax, dword [0x841694]
push dword [eax + 4]
push dword [eax]
mov eax, dword [0x841030]
push dword [eax + 4]
push dword [eax]
mov eax, dword [0x84125c]
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0x8c]
lea edx, [ebp - 0x84]
lea eax, [ebp - 0x7c]
call fcn.00559a90
push 0x77c6c4
lea edx, [ebp - 0x6f0]
mov eax, dword [ebp - 0x30]
call fcn.004094a8
push dword [ebp - 0x6f0]
push 0x77c6d8
push 0x77c6e4
lea edx, [ebp - 0x6f4]
mov eax, dword [ebp - 0x34]
call fcn.004094a8
push dword [ebp - 0x6f4]
push 0x77c6d8
push 0x77c6e4
mov eax, dword [0x841694]
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x6f8]
mov edx, 0xb
mov eax, 0x14
call fcn.007876e8
push dword [ebp - 0x6f8]
push 0x77c6d8
push 0x77c6e4
mov eax, dword [0x841030]
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x6fc]
mov edx, 0xb
mov eax, 0x14
call fcn.007876e8
push dword [ebp - 0x6fc]
push 0x77c6d8
push 0x77c6e4
push dword [ebp - 0x7c]
push 0x77c6d8
push 0x77c6e4
push dword [ebp - 0x80]
push dword [ebp - 0x84]
lea ecx, [ebp - 0x700]
mov edx, 1
mov eax, 0x14
call fcn.007876e8
push dword [ebp - 0x700]
push 0x77c6d8
push 0x77c6e4
push dword [ebp - 0x88]
push dword [ebp - 0x8c]
lea ecx, [ebp - 0x704]
mov edx, 1
mov eax, 0x14
call fcn.007876e8
push dword [ebp - 0x704]
push 0x77c6d8
push 0x77c6e4
push 0x77c6f0
lea eax, [ebp - 0x98]
mov edx, 0x17
call fcn.004041b0
mov edx, dword [ebp - 0x98]
mov eax, 0xa0
call fcn.006699f8
jmp 0x77af49
call fcn.0046a908
call fcn.0046a248
xor eax, eax
push ebp
push 0x77ad9f
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.0046a908
mov dx, 1
call fcn.0046a7a4
mov dword [ebp - 0x90], eax
mov eax, dword [ebp - 0x90]
push eax
call sub.KERNEL32.DLL_GlobalLock
mov dword [ebp - 0x94], eax
lea edx, [ebp - 0x98]
mov eax, dword [ebp - 0x94]
call fcn.0040a21c
mov eax, dword [ebp - 0x90]
push eax
call sub.KERNEL32.DLL_GlobalUnlock
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x77ada6
call fcn.0046a908
call fcn.0046a21c
ret
mov eax, dword [0x8410b0]
cmp dword [eax], 4
je 0x77af79
cmp byte [ebp - 9], 0
jne 0x77af79
mov eax, dword [0x841694]
push dword [eax + 4]
push dword [eax]
mov eax, dword [0x841030]
push dword [eax + 4]
push dword [eax]
xor edx, edx
mov eax, 0x77c6b4
call fcn.00798270
mov eax, dword [0x8410b0]
cmp dword [eax], 4
jne 0x77b075
cmp byte [ebp - 9], 0
jne 0x77b075
mov eax, dword [0x8415d0]
mov edx, dword [0x841694]
mov ecx, dword [edx]
mov dword [eax], ecx
mov ecx, dword [edx + 4]
mov dword [eax + 4], ecx
mov eax, dword [0x840d54]
mov edx, dword [0x841030]
mov ecx, dword [edx]
mov dword [eax], ecx
mov ecx, dword [edx + 4]
mov dword [eax + 4], ecx
mov eax, dword [0x8415e8]
mov edx, dword [0x841694]
mov ecx, dword [edx]
mov dword [eax], ecx
mov ecx, dword [edx + 4]
mov dword [eax + 4], ecx
mov eax, dword [0x840d7c]
mov edx, dword [0x841030]
mov ecx, dword [edx]
mov dword [eax], ecx
mov ecx, dword [edx + 4]
mov dword [eax + 4], ecx
mov eax, dword [0x840e80]
xor edx, edx
mov dword [eax], edx
mov dword [eax + 4], edx
mov eax, dword [0x8412ac]
mov edx, dword [0x841030]
mov ecx, dword [edx]
mov dword [eax], ecx
mov ecx, dword [edx + 4]
mov dword [eax + 4], ecx
mov eax, dword [0x8418e0]
mov edx, dword [0x841694]
mov ecx, dword [edx]
mov dword [eax], ecx
mov ecx, dword [edx + 4]
mov dword [eax + 4], ecx
mov eax, dword [0x8417e4]
mov eax, dword [eax]
call fcn.0042d188
mov eax, dword [0x841030]
push dword [eax + 4]
push dword [eax]
call fcn.0073ce30
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0
jge 0x77b04f
mov eax, dword [ebp - 0x40]
add eax, 0x130b916
add eax, 0x130b916
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x40]
call fcn.0073fab4
mov eax, dword [0x841694]
push dword [eax + 4]
push dword [eax]
call fcn.0073cd04
call fcn.0073fb68
call fcn.007400b8
jmp 0x77c5c6
mov eax, dword [0x8410b0]
cmp dword [eax], 2
jne 0x77b29d
cmp byte [ebp - 9], 0
jne 0x77b29d
mov dword [ebp - 0x20], 1
imul eax, dword [ebp - 0x20], 0x17
mov edx, dword [0x840e58]
fld qword [edx + eax*4]
fcomp dword [0x77c70c]
fnstsw ax
sahf
jne 0x77b0b4
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x24], eax
jmp 0x77b0c0
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0x1f5
jne 0x77b094
cmp dword [ebp - 0x24], 0xffffffff
jne 0x77b0f8
push 0
call sub.USER32.DLL_MessageBeep
push 0
lea edx, [ebp - 0x6f0]
mov eax, dword [0x841724]
call fcn.00405e74
mov eax, dword [ebp - 0x6f0]
mov cx, word [0x77c710]
mov dl, 1
call fcn.0044b300
jmp 0x77b29d
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x20], eax
mov eax, dword [0x841694]
push dword [eax + 4]
push dword [eax]
mov eax, dword [0x841030]
push dword [eax + 4]
push dword [eax]
mov edx, dword [ebp - 0x20]
mov eax, 0x77c71c
call fcn.00798270
imul eax, dword [ebp - 0x20], 0x17
mov edx, dword [0x840e58]
mov ecx, dword [0x841030]
mov ebx, dword [ecx]
mov dword [edx + eax*4], ebx
mov ebx, dword [ecx + 4]
mov dword [edx + eax*4 + 4], ebx
imul eax, dword [ebp - 0x20], 0x17
mov edx, dword [0x840e58]
mov ecx, dword [0x841694]
mov ebx, dword [ecx]
mov dword [edx + eax*4 + 8], ebx
mov ebx, dword [ecx + 4]
mov dword [edx + eax*4 + 0xc], ebx
lea edx, [ebp - 0x6f0]
mov eax, dword [ebp - 0x20]
call fcn.004094a8
mov ecx, dword [ebp - 0x6f0]
imul eax, dword [ebp - 0x20], 0x17
mov edx, dword [0x840e58]
lea eax, [edx + eax*4 + 0x2c]
mov edx, 0x77c728
call fcn.0040413c
lea edx, [ebp - 0x6f4]
mov eax, dword [ebp - 0x20]
call fcn.004094a8
mov ecx, dword [ebp - 0x6f4]
lea eax, [ebp - 0x6f0]
mov edx, 0x77c734
call fcn.0040413c
mov edx, dword [ebp - 0x6f0]
lea eax, [ebp - 0x804]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x804]
imul eax, dword [ebp - 0x20], 0x17
mov ecx, dword [0x840e58]
lea eax, [ecx + eax*4 + 0x44]
mov cl, 0xe
call fcn.00402d1c
imul eax, dword [ebp - 0x20], 0x17
mov edx, dword [0x840e58]
lea eax, [edx + eax*4 + 0x30]
call fcn.00403e74
imul eax, dword [ebp - 0x20], 0x17
mov edx, dword [0x840e58]
lea eax, [edx + eax*4 + 0x34]
call fcn.00403e74
imul eax, dword [ebp - 0x20], 0x17
mov edx, dword [0x840e58]
lea eax, [edx + eax*4 + 0x38]
mov edx, dword [0x84063c]
call fcn.00404094
imul eax, dword [ebp - 0x20], 0x17
mov edx, dword [0x840e58]
mov ecx, dword [0x8421f0]
mov ecx, dword [ecx]
mov dword [edx + eax*4 + 0x20], ecx
imul eax, dword [ebp - 0x20], 0x17
mov edx, dword [0x840e58]
mov ecx, dword [0x8411f8]
mov ecx, dword [ecx]
mov dword [edx + eax*4 + 0x24], ecx
imul eax, dword [ebp - 0x20], 0x17
mov edx, dword [0x840e58]
mov ecx, dword [0x842160]
mov ecx, dword [ecx]
mov dword [edx + eax*4 + 0x28], ecx
call fcn.0078ea80
mov eax, dword [ebp + 8]
push eax
mov eax, dword [0x841694]
push dword [eax + 4]
push dword [eax]
mov eax, dword [0x841030]
push dword [eax + 4]
push dword [eax]
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 4]
call fcn.0076c6c4
mov eax, dword [0x841774]
mov eax, dword [eax]
call fcn.0071f640
call fcn.007400b8
xor eax, eax
call fcn.00792f90
mov eax, dword [0x8410b0]
cmp dword [eax], 6
jne 0x77b48e
cmp byte [ebp - 9], 0
jne 0x77b48e
mov dword [ebp - 0x20], 1
imul eax, dword [ebp - 0x20], 0xd
mov edx, dword [0x841344]
fld qword [edx + eax*4]
fcomp dword [0x77c70c]
fnstsw ax
sahf
jne 0x77b2dc
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x24], eax
jmp 0x77b2e8
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0x1f5
jne 0x77b2bc
cmp dword [ebp - 0x24], 0xffffffff
jne 0x77b320
push 0
call sub.USER32.DLL_MessageBeep
push 0
lea edx, [ebp - 0x6f0]
mov eax, dword [0x841820]
call fcn.00405e74
mov eax, dword [ebp - 0x6f0]
mov cx, word [0x77c710]
mov dl, 1
call fcn.0044b300
jmp 0x77b48e
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x20], eax
mov eax, dword [0x841694]
push dword [eax + 4]
push dword [eax]
mov eax, dword [0x841030]
push dword [eax + 4]
push dword [eax]
mov edx, dword [ebp - 0x20]
mov eax, 0x77c740
call fcn.00798270
imul eax, dword [ebp - 0x20], 0xd
mov edx, dword [0x841344]
mov ecx, dword [0x841030]
mov ebx, dword [ecx]
mov dword [edx + eax*4], ebx
mov ebx, dword [ecx + 4]
mov dword [edx + eax*4 + 4], ebx
imul eax, dword [ebp - 0x20], 0xd
mov edx, dword [0x841344]
mov ecx, dword [0x841694]
mov ebx, dword [ecx]
mov dword [edx + eax*4 + 8], ebx
mov ebx, dword [ecx + 4]
mov dword [edx + eax*4 + 0xc], ebx
lea edx, [ebp - 0x6f0]
mov eax, dword [0x841424]
call fcn.00405e74
push dword [ebp - 0x6f0]
push 0x77c6d8
lea edx, [ebp - 0x6f4]
mov eax, dword [ebp - 0x20]
call fcn.004094a8
push dword [ebp - 0x6f4]
imul eax, dword [ebp - 0x20], 0xd
mov edx, dword [0x841344]
lea eax, [edx + eax*4 + 0x2c]
mov edx, 3
call fcn.004041b0
imul eax, dword [ebp - 0x20], 0xd
mov edx, dword [0x841344]
mov ecx, dword [0x84088c]
mov ecx, dword [ecx]
mov dword [edx + eax*4 + 0x10], ecx
imul eax, dword [ebp - 0x20], 0xd
mov edx, dword [0x841344]
mov ecx, dword [0x841618]
mov ecx, dword [ecx]
mov dword [edx + eax*4 + 0x14], ecx
imul eax, dword [ebp - 0x20], 0xd
mov edx, dword [0x841344]
mov ecx, dword [0x8407d0]
mov ecx, dword [ecx]
mov dword [edx + eax*4 + 0x18], ecx
imul eax, dword [ebp - 0x20], 0xd
mov edx, dword [0x841344]
mov ecx, dword [0x842364]
mov ecx, dword [ecx]
mov dword [edx + eax*4 + 0x1c], ecx
imul eax, dword [ebp - 0x20], 0xd
mov edx, dword [0x841344]
mov ecx, dword [0x842300]
mov ecx, dword [ecx]
mov dword [edx + eax*4 + 0x20], ecx
imul eax, dword [ebp - 0x20], 0xd
mov edx, dword [0x841344]
mov ecx, dword [0x8408d0]
mov ecx, dword [ecx]
mov dword [edx + eax*4 + 0x24], ecx
imul eax, dword [ebp - 0x20], 0xd
mov edx, dword [0x841344]
mov ecx, dword [0x84102c]
mov ecx, dword [ecx]
mov dword [edx + eax*4 + 0x28], ecx
mov eax, dword [ebp + 8]
push eax
mov eax, dword [0x841694]
push dword [eax + 4]
push dword [eax]
mov eax, dword [0x841030]
push dword [eax + 4]
push dword [eax]
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 4]
call fcn.0076c3dc
xor eax, eax
call fcn.00792f90
mov eax, dword [0x8410b0]
cmp dword [eax], 3
jne 0x77bda7
cmp byte [ebp - 9], 0
jne 0x77bda7
mov eax, dword [0x955898]
mov eax, dword [eax + 0x3c0]
cmp byte [eax + 0x2c], 0
jne 0x77b4f4
mov eax, dword [0x955898]
mov eax, dword [eax + 0x3c0]
mov dl, 1
call fcn.0042f884
mov eax, dword [0x955898]
mov eax, dword [eax + 0x804]
mov dl, 1
call fcn.00456fd4
mov eax, dword [0x840668]
mov eax, dword [eax]
mov eax, dword [eax + 0x1e0]
mov dl, 1
call fcn.00456fd4
call fcn.007a753c
mov byte [ebp - 0x59], 0
test byte [ebp + 0x10], 1
je 0x77b51a
test byte [ebp + 0x10], 4
jne 0x77b51a
mov edx, dword [0x841030]
mov eax, dword [0x841694]
xor ecx, ecx
call fcn.0071b638
mov byte [ebp - 0x59], 1
test byte [ebp + 0x10], 1
je 0x77b53c
test byte [ebp + 0x10], 4
je 0x77b53c
mov edx, dword [0x841030]
mov eax, dword [0x841694]
xor ecx, ecx
call fcn.0071b738
mov byte [ebp - 0x59], 1
mov dword [ebp - 0xa0], 0xc4424000
xor eax, eax
mov dword [ebp - 0x60], eax
mov eax, dword [0x841694]
push dword [eax + 4]
push dword [eax]
mov eax, dword [0x841030]
push dword [eax + 4]
push dword [eax]
push dword [ebp - 0xa0]
call fcn.0040b02c
add esp, 0xfffffff8
fstp qword [esp]
wait
call fcn.007a5264
add esp, 0xfffffff8
fstp qword [esp]
wait
xor edx, edx
mov eax, 1
call fcn.0071b178
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x4c]
mov edx, dword [eax]
mov dword [ebp - 0x70], edx
mov edx, dword [eax + 4]
mov dword [ebp - 0x6c], edx
mov eax, dword [ebp - 0x4c]
mov edx, dword [eax + 8]
mov dword [ebp - 0x78], edx
mov edx, dword [eax + 0xc]
mov dword [ebp - 0x74], edx
cmp dword [ebp - 0x4c], 0
jne 0x77b5e1
push 0
call sub.USER32.DLL_MessageBeep
push 0
lea edx, [ebp - 0x6f0]
mov eax, dword [0x840e68]
call fcn.00405e74
mov eax, dword [ebp - 0x6f0]
mov cx, word [0x77c710]
mov dl, 1
call fcn.0044b300
jmp 0x77bda7
mov eax, dword [0x841694]
push dword [eax + 4]
push dword [eax]
mov eax, dword [0x841030]
push dword [eax + 4]
push dword [eax]
xor edx, edx
mov eax, 0x77c74c
call fcn.00798270
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax + 0x34]
mov dword [ebp - 0x50], eax
mov edx, dword [0x840a4c]
mov edx, dword [edx + 4]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x394]
mov eax, dword [eax + 0xb4]
mov eax, dword [eax + 0x10]
call fcn.0041a958
mov edx, dword [0x840eec]
mov edx, dword [edx + 4]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x394]
mov eax, dword [eax + 0xb4]
mov eax, dword [eax + 0x10]
call fcn.0041aa88
cmp dword [ebp - 0x50], 0
je 0x77b65a
test byte [ebp + 0x10], 2
je 0x77b7af
cmp dword [ebp - 0x50], 0
jne 0x77b6c5
lea eax, [ebp - 0x6f0]
mov edx, dword [0x84163c]
add edx, 0x24
call fcn.00404094
mov eax, dword [ebp - 0x6f0]
call fcn.0044c49c
test al, al
je 0x77b6c5
call fcn.0040b02c
add esp, 0xfffffff8
fstp qword [esp]
wait
lea eax, [ebp - 0x6f0]
call fcn.0040bbec
mov edx, dword [ebp - 0x6f0]
lea eax, [ebp - 0x804]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x804]
mov eax, dword [0x84163c]
add eax, 0x24
mov cl, 0x23
call fcn.00402d1c
mov eax, dword [0x841f7c]
mov byte [eax + 1], 1
mov eax, dword [ebp - 0x4c]
mov dword [eax + 0x18], 1
mov edx, dword [0x840a4c]
mov edx, dword [edx + 4]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x394]
mov eax, dword [eax + 0xb4]
mov eax, dword [eax + 0x14]
call fcn.0041ac54
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x394]
mov eax, dword [eax + 0xb4]
mov eax, dword [eax + 0x10]
mov edx, 1
call fcn.0041aa88
mov eax, dword [ebp - 0x4c]
push dword [eax + 4]
push dword [eax]
mov eax, dword [ebp - 0x4c]
push dword [eax + 0xc]
push dword [eax + 8]
lea edx, [ebp - 0x3c]
lea eax, [ebp - 0x38]
call fcn.0078d700
mov eax, dword [ebp - 0x38]
add eax, 3
sub eax, dword [ebp - 0x64]
push eax
mov eax, dword [ebp - 0x3c]
add eax, 3
sub eax, dword [ebp - 0x68]
push eax
push 3
push 3
mov ecx, dword [ebp - 0x3c]
sub ecx, 2
sub ecx, dword [ebp - 0x68]
mov edx, dword [ebp - 0x38]
sub edx, 2
sub edx, dword [ebp - 0x64]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x394]
mov eax, dword [eax + 0xb4]
call fcn.0041b544
mov edx, dword [0x840eec]
mov edx, dword [edx + 4]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x394]
mov eax, dword [eax + 0xb4]
mov eax, dword [eax + 0x10]
call fcn.0041aa88
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x394]
mov eax, dword [eax + 0xb4]
mov eax, dword [eax + 0x14]
mov edx, 0xffffff
call fcn.0041ac54
jmp 0x77b88c
mov eax, dword [ebp - 0x50]
push dword [eax + 4]
push dword [eax]
mov eax, dword [ebp - 0x50]
push dword [eax + 0xc]
push dword [eax + 8]
lea edx, [ebp - 0x3c]
lea eax, [ebp - 0x38]
call fcn.0078d700
mov ecx, dword [ebp - 0x3c]
sub ecx, dword [ebp - 0x68]
mov edx, dword [ebp - 0x38]
sub edx, dword [ebp - 0x64]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x394]
mov eax, dword [eax + 0xb4]
call fcn.0041b458
mov eax, dword [ebp - 0x4c]
push dword [eax + 4]
push dword [eax]
mov eax, dword [ebp - 0x4c]
push dword [eax + 0xc]
push dword [eax + 8]
lea edx, [ebp - 0x3c]
lea eax, [ebp - 0x38]
call fcn.0078d700
mov ecx, dword [ebp - 0x3c]
sub ecx, dword [ebp - 0x68]
mov edx, dword [ebp - 0x38]
sub edx, dword [ebp - 0x64]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x394]
mov eax, dword [eax + 0xb4]
call fcn.0041b3f8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x394]
mov eax, dword [eax + 0xb4]
mov eax, dword [eax + 0x10]
xor edx, edx
call fcn.0041a958
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x394]
mov eax, dword [eax + 0xb4]
mov eax, dword [eax + 0x10]
mov edx, 1
call fcn.0041aa88
mov eax, dword [0x840668]
mov eax, dword [eax]
mov eax, dword [eax + 0x1e8]
cmp byte [eax + 0xc0], 0
je 0x77b88c
cmp dword [ebp - 0x50], 0
je 0x77b88c
mov eax, dword [ebp - 0x50]
cmp dword [eax + 0x2c], 0
je 0x77b88c
mov eax, dword [ebp - 0x50]
mov eax, dword [eax + 0x2c]
mov edx, dword [eax]
call dword [edx + 0x44]
mov eax, dword [0x840668]
mov eax, dword [eax]
mov eax, dword [eax + 0x1ec]
cmp byte [eax + 0xc0], 0
je 0x77b9b4
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x394]
mov eax, dword [eax + 0xb4]
mov eax, dword [eax + 0x14]
mov edx, 0xff0000
call fcn.0041ac54
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x394]
mov eax, dword [eax + 0xb4]
mov eax, dword [eax + 0x10]
mov edx, 0xffffff
call fcn.0041a958
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x394]
mov eax, dword [eax + 0xb4]
mov eax, dword [eax + 0x10]
mov edx, 1
call fcn.0041aa88
mov eax, dword [ebp - 0x4c]
push dword [eax + 4]
push dword [eax]
mov eax, dword [ebp - 0x4c]
push dword [eax + 0xc]
push dword [eax + 8]
lea edx, [ebp - 0x3c]
lea eax, [ebp - 0x38]
call fcn.0078d700
mov eax, dword [ebp - 0x38]
add eax, 3
sub eax, dword [ebp - 0x64]
push eax
mov eax, dword [ebp - 0x3c]
add eax, 3
sub eax, dword [ebp - 0x68]
push eax
push 3
push 3
mov ecx, dword [ebp - 0x3c]
sub ecx, 2
sub ecx, dword [ebp - 0x68]
mov edx, dword [ebp - 0x38]
sub edx, 2
sub edx, dword [ebp - 0x64]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x394]
mov eax, dword [eax + 0xb4]
call fcn.0041b544
cmp dword [ebp - 0x50], 0
je 0x77b9b4
mov eax, dword [ebp - 0x50]
push dword [eax + 4]
push dword [eax]
mov eax, dword [ebp - 0x50]
push dword [eax + 0xc]
push dword [eax + 8]
lea edx, [ebp - 0x3c]
lea eax, [ebp - 0x38]
call fcn.0078d700
mov eax, dword [ebp - 0x38]
add eax, 3
sub eax, dword [ebp - 0x64]
push eax
mov eax, dword [ebp - 0x3c]
add eax, 3
sub eax, dword [ebp - 0x68]
push eax
push 3
push 3
mov ecx, dword [ebp - 0x3c]
sub ecx, 2
sub ecx, dword [ebp - 0x68]
mov edx, dword [ebp - 0x38]
sub edx, 2
sub edx, dword [ebp - 0x64]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x394]
mov eax, dword [eax + 0xb4]
call fcn.0041b544
mov eax, dword [0x840668]
mov eax, dword [eax]
mov eax, dword [eax + 0x27c]
cmp byte [eax + 0xc0], 0
jne 0x77b9e4
mov eax, dword [0x840668]
mov eax, dword [eax]
mov eax, dword [eax + 0x228]
cmp byte [eax + 0xc0], 0
je 0x77bba3
mov eax, dword [ebp - 0x4c]
push dword [eax + 4]
push dword [eax]
mov eax, dword [ebp - 0x4c]
push dword [eax + 0xc]
push dword [eax + 8]
lea edx, [ebp - 0x3c]
lea eax, [ebp - 0x38]
call fcn.0078d700
mov eax, dword [ebp - 0x3c]
push eax
mov eax, dword [0x841694]
push dword [eax + 4]
push dword [eax]
mov eax, dword [0x841030]
push dword [eax + 4]
push dword [eax]
push 0x77c758
push 0
mov ecx, dword [ebp - 0x38]
mov edx, dword [ebp - 0x4c]
mov eax, dword [ebp - 4]
call fcn.0076bf48
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax + 0x2c]
mov edx, dword [0x8414e8]
mov dword [edx], eax
mov eax, dword [0x840668]
mov eax, dword [eax]
mov eax, dword [eax + 0x27c]
cmp byte [eax + 0xc0], 0
je 0x77bba3
mov eax, 0x77c768
call fcn.00798864
test al, al
jne 0x77ba7b
mov ecx, dword [0x840f28]
mov eax, dword [0x8417e4]
mov eax, dword [eax]
mov edx, dword [0x604cc0]
call fcn.0042d2e8
mov eax, dword [0x840f28]
mov eax, dword [eax]
mov edx, dword [ebp - 0x4c]
mov dword [eax + 0x210], edx
mov eax, dword [ebp - 0x4c]
fld dword [eax + 0x1c]
fcomp dword [0x77c6b8]
fnstsw ax
sahf
jne 0x77bab2
mov eax, dword [0x840f28]
mov eax, dword [eax]
mov eax, dword [eax + 0x1f4]
xor edx, edx
call fcn.004340a4
jmp 0x77bb27
mov eax, dword [ebp - 0x4c]
fld dword [eax + 0x1c]
add esp, 0xfffffff8
fstp qword [esp]
wait
lea edx, [ebp - 0x808]
mov eax, dword [0x840f28]
mov eax, dword [eax]
mov eax, dword [eax + 0x1f0]
call fcn.00434064
mov eax, dword [ebp - 0x808]
call fcn.007a562c
add esp, 0xfffffff8
fstp qword [esp]
wait
lea ecx, [ebp - 0x6f4]
mov edx, 1
mov eax, 0xf
call fcn.007876e8
mov eax, dword [ebp - 0x6f4]
lea edx, [ebp - 0x6f0]
call fcn.0044c290
mov edx, dword [ebp - 0x6f0]
mov eax, dword [0x840f28]
mov eax, dword [eax]
mov eax, dword [eax + 0x1f4]
call fcn.004340a4
mov eax, dword [0x840f28]
mov eax, dword [eax]
mov edx, dword [ebp - 0x4c]
mov ecx, dword [edx]
mov dword [eax + 0x1f8], ecx
mov ecx, dword [edx + 4]
mov dword [eax + 0x1fc], ecx
mov eax, dword [0x840f28]
mov eax, dword [eax]
mov edx, dword [ebp - 0x4c]
mov ecx, dword [edx + 8]
mov dword [eax + 0x200], ecx
mov ecx, dword [edx + 0xc]
mov dword [eax + 0x204], ecx
mov eax, dword [0x840f28]
mov eax, dword [eax]
mov edx, dword [ebp - 0x4c]
mov ecx, dword [edx + 0x20]
mov dword [eax + 0x208], ecx
mov ecx, dword [edx + 0x24]
mov dword [eax + 0x20c], ecx
mov eax, dword [ebp - 0x4c]
mov edx, dword [eax]
mov dword [ebp - 0x70], edx
mov edx, dword [eax + 4]
mov dword [ebp - 0x6c], edx
mov eax, dword [ebp - 0x4c]
mov edx, dword [eax + 8]
mov dword [ebp - 0x78], edx
mov edx, dword [eax + 0xc]
mov dword [ebp - 0x74], edx
mov eax, dword [0x840f28]
mov eax, dword [eax]
call fcn.0042a82c
cmp byte [ebp - 0x59], 0
je 0x77bc75
mov edx, dword [0x840a4c]
mov edx, dword [edx + 4]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x394]
mov eax, dword [eax + 0xb4]
mov eax, dword [eax + 0x14]
call fcn.0041ac54
mov edx, dword [0x840a4c]
mov edx, dword [edx + 4]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x394]
mov eax, dword [eax + 0xb4]
mov eax, dword [eax + 0x10]
call fcn.0041a958
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x394]
mov eax, dword [eax + 0xb4]
mov eax, dword [eax + 0x14]
mov dl, 1
call fcn.0041ad70
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x394]
mov eax, dword [eax + 0xb4]
mov eax, dword [eax + 0x10]
mov edx, 2
call fcn.0041aa88
mov eax, dword [ebp - 0x38]
add eax, 0xa
sub eax, dword [ebp - 0x64]
push eax
mov eax, dword [ebp - 0x3c]
add eax, 0xa
sub eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x3c]
sub ecx, 9
sub ecx, dword [ebp - 0x68]
mov edx, dword [ebp - 0x38]
sub edx, 9
sub edx, dword [ebp - 0x64]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x394]
mov eax, dword [eax + 0xb4]
call fcn.0041b338
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x394]
mov eax, dword [eax + 0xb4]
mov eax, dword [eax + 0x14]
xor edx, edx
call fcn.0041ad70
mov eax, dword [0x841d04]
inc dword [eax + 4]
mov eax, 1
call fcn.0071ae18
mov eax, dword [0x841158]
fstp qword [eax + 8]
wait
mov eax, dword [0x840668]
mov eax, dword [eax]
mov edx, 1
call fcn.007001a4
mov eax, dword [0x840668]
mov eax, dword [eax]
mov eax, dword [eax + 0x228]
cmp byte [eax + 0xc0], 0
je 0x77bcc5
mov eax, dword [0x8414e8]
mov eax, dword [eax]
mov edx, dword [eax]
call dword [edx + 0x44]
jmp 0x77bcd8
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax + 0x2c]
call fcn.004032dc
mov eax, dword [ebp - 0x4c]
xor edx, edx
mov dword [eax + 0x2c], edx
mov eax, dword [0x8417c0]
cmp byte [eax], 0
je 0x77bcec
mov eax, dword [0x8409ec]
mov byte [eax], 0
jmp 0x77bcf3
xor eax, eax
call fcn.0079303c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x394]
mov eax, dword [eax + 0xb4]
mov eax, dword [eax + 0x10]
xor edx, edx
call fcn.0041a958
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x394]
mov eax, dword [eax + 0xb4]
mov eax, dword [eax + 0x10]
mov edx, 1
call fcn.0041aa88
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x394]
mov eax, dword [eax + 0xb4]
mov eax, dword [eax + 0x14]
mov edx, 0xffffff
call fcn.0041ac54
mov eax, dword [0x840af4]
mov byte [eax], 0
mov eax, dword [0x84203c]
cmp byte [eax], 0
je 0x77bd5b
call fcn.007a753c
mov eax, dword [0x8420d8]
cmp dword [eax + 4], 0xa
jne 0x77bd6b
call fcn.007a753c
mov eax, dword [0x8420d8]
cmp dword [eax + 4], 0x14
jne 0x77bd7b
call fcn.007a753c
fld qword [ebp - 0x70]
mov eax, dword [ebp - 0x4c]
fcomp qword [eax]
fnstsw ax
sahf
jne 0x77bd96
fld qword [ebp - 0x78]
mov eax, dword [ebp - 0x4c]
fcomp qword [eax + 8]
fnstsw ax
sahf
je 0x77bd9b
call fcn.007a753c
mov eax, dword [0x841774]
mov eax, dword [eax]
call fcn.0071f640
mov eax, dword [0x8410b0]
cmp dword [eax], 7
jne 0x77c223
cmp byte [ebp - 9], 0
jne 0x77c223
mov eax, dword [0x955898]
mov eax, dword [eax + 0xa9c]
cmp byte [eax + 0x2c], 0
jne 0x77be0d
mov eax, dword [0x955898]
mov eax, dword [eax + 0xa9c]
mov dl, 1
call fcn.0042f884
mov eax, dword [0x955898]
mov eax, dword [eax + 0xaa8]
mov dl, 1
call fcn.00456fd4
mov eax, dword [0x842044]
mov eax, dword [eax]
mov eax, dword [eax + 0x1e0]
mov dl, 1
call fcn.00456fd4
call fcn.007a753c
mov dword [ebp - 0xa0], 0xc4424000
xor eax, eax
mov dword [ebp - 0x60], eax
mov eax, dword [0x841694]
push dword [eax + 4]
push dword [eax]
mov eax, dword [0x841030]
push dword [eax + 4]
push dword [eax]
push 0
push 0
push dword [ebp - 0xa0]
push 0
xor ecx, ecx
xor edx, edx
mov eax, 1
call fcn.007099e0
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0
jne 0x77be85
push 0
call sub.USER32.DLL_MessageBeep
push 0
lea edx, [ebp - 0x6f0]
mov eax, dword [0x840760]
call fcn.00405e74
mov eax, dword [ebp - 0x6f0]
mov cx, word [0x77c710]
mov dl, 1
call fcn.0044b300
jmp 0x77c223
mov eax, dword [0x841694]
push dword [eax + 4]
push dword [eax]
mov eax, dword [0x841030]
push dword [eax + 4]
push dword [eax]
lea edx, [ebp - 0x3c]
lea eax, [ebp - 0x38]
call fcn.0078d700
mov eax, dword [0x842044]
mov eax, dword [eax]
mov eax, dword [eax + 0x234]
cmp byte [eax + 0xc0], 0
jne 0x77bed4
mov eax, dword [0x842044]
mov eax, dword [eax]
mov eax, dword [eax + 0x214]
cmp byte [eax + 0xc0], 0
je 0x77bfdd
mov eax, dword [ebp - 0x3c]
push eax
mov eax, dword [0x841694]
push dword [eax + 4]
push dword [eax]
mov eax, dword [0x841030]
push dword [eax + 4]
push dword [eax]
push 0x77c758
push 0
mov ecx, dword [ebp - 0x38]
mov edx, dword [ebp - 0x54]
mov eax, dword [ebp - 4]
call fcn.0076bd8c
mov eax, dword [ebp - 0x54]
mov eax, dword [eax + 0x2c]
mov edx, dword [0x8414e8]
mov dword [edx], eax
mov eax, dword [0x842044]
mov eax, dword [eax]
mov eax, dword [eax + 0x234]
cmp byte [eax + 0xc0], 0
je 0x77bfdd
mov eax, 0x77c780
call fcn.00798864
test al, al
jne 0x77bf4f
mov ecx, dword [0x840f2c]
mov eax, dword [0x8417e4]
mov eax, dword [eax]
mov edx, dword [0x603b48]
call fcn.0042d2e8
mov eax, dword [0x840f2c]
mov eax, dword [eax]
mov edx, dword [ebp - 0x54]
mov dword [eax + 0x210], edx
mov eax, dword [0x840f2c]
mov eax, dword [eax]
mov eax, dword [eax + 0x1e8]
xor edx, edx
call fcn.004340a4
push 0
push 0
mov eax, dword [0x840f2c]
mov eax, dword [eax]
mov eax, dword [eax + 0x1ec]
call fcn.0054e448
mov eax, dword [0x840f2c]
mov eax, dword [eax]
mov edx, dword [0x841694]
mov ecx, dword [edx]
mov dword [eax + 0x200], ecx
mov ecx, dword [edx + 4]
mov dword [eax + 0x204], ecx
mov eax, dword [0x840f2c]
mov eax, dword [eax]
mov edx, dword [0x841030]
mov ecx, dword [edx]
mov dword [eax + 0x208], ecx
mov ecx, dword [edx + 4]
mov dword [eax + 0x20c], ecx
mov eax, dword [0x840f2c]
mov eax, dword [eax]
call fcn.0042a82c
mov eax, dword [0x8414e8]
mov eax, dword [eax]
call fcn.0078c0f8
mov eax, dword [0x841694]
push dword [eax + 4]
push dword [eax]
mov eax, dword [0x841030]
push dword [eax + 4]
push dword [eax]
xor edx, edx
mov eax, 0x77c798
call fcn.00798270
mov eax, dword [ebp - 0x54]
cmp dword [eax + 0x34], 0
jne 0x77c03d
mov eax, dword [0x841278]
mov eax, dword [eax]
call fcn.0044c49c
test al, al
je 0x77c03d
call fcn.0040b02c
add esp, 0xfffffff8
fstp qword [esp]
wait
lea eax, [ebp - 0x6f0]
call fcn.0040bbec
mov edx, dword [ebp - 0x6f0]
mov eax, dword [0x841278]
call fcn.00403ec8
mov eax, dword [0x841a70]
mov byte [eax], 1
mov edx, dword [0x841bd0]
mov edx, dword [edx]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x394]
mov eax, dword [eax + 0xb4]
mov eax, dword [eax + 0xc]
call fcn.0041a484
mov edx, dword [0x841bd0]
mov edx, dword [edx]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x394]
mov eax, dword [eax + 0xb4]
mov eax, dword [eax + 0x10]
call fcn.0041a958
mov edx, dword [0x840d38]
mov edx, dword [edx]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x394]
mov eax, dword [eax + 0xb4]
mov eax, dword [eax + 0x14]
call fcn.0041ac54
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x394]
mov eax, dword [eax + 0xb4]
mov eax, dword [eax + 0xc]
mov edx, 0x77c7a4
call fcn.0041a6a0
mov edx, dword [0x840e0c]
mov edx, dword [edx]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x394]
mov eax, dword [eax + 0xb4]
mov eax, dword [eax + 0xc]
call fcn.0041a718
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x394]
mov eax, dword [eax + 0xb4]
mov eax, dword [eax + 0x10]
mov edx, 1
call fcn.0041aa88
mov eax, dword [0x8416d4]
mov eax, dword [eax]
push eax
mov eax, dword [0x8409ac]
mov eax, dword [eax]
push eax
push 0
mov eax, dword [ebp - 0x54]
mov eax, dword [eax + 0x10]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x394]
mov eax, dword [eax + 0xb4]
push eax
mov ecx, dword [0x841ffc]
mov ecx, dword [ecx]
mov edx, dword [ebp - 0x3c]
sub edx, dword [ebp - 0x68]
mov eax, dword [ebp - 0x38]
sub eax, dword [ebp - 0x64]
call fcn.007088f4
mov eax, dword [0x842330]
inc dword [eax]
mov eax, dword [0x842044]
mov eax, dword [eax]
mov edx, 1
call fcn.00696680
mov eax, dword [0x842044]
mov eax, dword [eax]
mov eax, dword [eax + 0x214]
cmp byte [eax + 0xc0], 0
je 0x77c177
mov eax, dword [0x8414e8]
mov eax, dword [eax]
mov edx, dword [eax]
call dword [edx + 0x44]
jmp 0x77c18a
mov eax, dword [ebp - 0x54]
mov eax, dword [eax + 0x2c]
call fcn.004032dc
mov eax, dword [ebp - 0x54]
xor edx, edx
mov dword [eax + 0x2c], edx
mov eax, dword [0x8417c0]
cmp byte [eax], 0
je 0x77c19e
mov eax, dword [0x8405f8]
mov byte [eax], 0
jmp 0x77c1a5
xor eax, eax
call fcn.0079318c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x394]
mov eax, dword [eax + 0xb4]
mov eax, dword [eax + 0xc]
xor edx, edx
call fcn.0041a484
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x394]
mov eax, dword [eax + 0xb4]
mov eax, dword [eax + 0x10]
xor edx, edx
call fcn.0041a958
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x394]
mov eax, dword [eax + 0xb4]
mov eax, dword [eax + 0x10]
mov edx, 1
call fcn.0041aa88
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x394]
mov eax, dword [eax + 0xb4]
mov eax, dword [eax + 0x14]
mov edx, 0xffffff
call fcn.0041ac54
mov eax, dword [0x840af4]
mov byte [eax], 0
mov eax, dword [0x841774]
mov eax, dword [eax]
call fcn.0071f640
mov eax, dword [0x8410b0]
cmp dword [eax], 5
jne 0x77c239
cmp byte [ebp - 9], 0
jne 0x77c239
test byte [ebp + 0x10], 2
je 0x77c25b
mov eax, dword [0x8410b0]
cmp dword [eax], 1
jne 0x77c3b5
cmp byte [ebp - 9], 0
jne 0x77c3b5
test byte [ebp + 0x10], 2
je 0x77c3b5
call fcn.0078cf8c
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0xffffffff
jne 0x77c29b
push 0
call sub.USER32.DLL_MessageBeep
push 0
lea edx, [ebp - 0x6f0]
mov eax, dword [0x84140c]
call fcn.00405e74
mov eax, dword [ebp - 0x6f0]
mov cx, word [0x77c710]
mov dl, 1
call fcn.0044b300
jmp 0x77c3b5
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x20], eax
mov eax, dword [0x841694]
push dword [eax + 4]
push dword [eax]
mov eax, dword [0x841030]
push dword [eax + 4]
push dword [eax]
mov edx, dword [ebp - 0x20]
mov eax, 0x77c7b4
call fcn.00798270
imul eax, dword [ebp - 0x20], 0xb
mov edx, dword [0x840bac]
mov ecx, dword [0x841924]
mov cx, word [ecx]
mov word [edx + eax*4 - 0x2c], cx
imul eax, dword [ebp - 0x20], 0xb
mov edx, dword [0x840bac]
mov ecx, dword [0x841030]
mov ebx, dword [ecx]
mov dword [edx + eax*4 - 0x28], ebx
mov ebx, dword [ecx + 4]
mov dword [edx + eax*4 - 0x24], ebx
imul eax, dword [ebp - 0x20], 0xb
mov edx, dword [0x840bac]
mov ecx, dword [0x841694]
mov ebx, dword [ecx]
mov dword [edx + eax*4 - 0x20], ebx
mov ebx, dword [ecx + 4]
mov dword [edx + eax*4 - 0x1c], ebx
imul eax, dword [ebp - 0x20], 0xb
mov edx, dword [0x840bac]
mov ecx, dword [0x840e3c]
mov ecx, dword [ecx]
mov dword [edx + eax*4 - 0x18], ecx
imul eax, dword [ebp - 0x20], 0xb
mov edx, dword [0x840bac]
mov ecx, dword [0x841c74]
mov ecx, dword [ecx]
mov dword [edx + eax*4 - 0x14], ecx
imul eax, dword [ebp - 0x20], 0xb
mov edx, dword [0x840bac]
mov ecx, dword [0x840da0]
mov ecx, dword [ecx]
mov dword [edx + eax*4 - 0x10], ecx
imul eax, dword [ebp - 0x20], 0xb
mov edx, dword [0x840bac]
mov ecx, dword [0x840bdc]
mov ecx, dword [ecx]
mov dword [edx + eax*4 - 0xc], ecx
mov eax, dword [ebp + 8]
push eax
mov eax, dword [0x841694]
push dword [eax + 4]
push dword [eax]
mov eax, dword [0x841030]
push dword [eax + 4]
push dword [eax]
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 4]
call fcn.0076c118
mov eax, dword [0x841774]
mov eax, dword [eax]
mov edx, dword [ebp - 0x20]
call fcn.0071f040
mov eax, dword [ebp - 0x20]
call fcn.00740054
call fcn.007a7460
xor eax, eax
call fcn.00792ec4
mov eax, dword [0x8410b0]
cmp dword [eax], 1
jne 0x77c3cb
cmp byte [ebp - 9], 0
jne 0x77c3cb
test byte [ebp + 0x10], 2
je 0x77c3ed
mov eax, dword [0x8410b0]
cmp dword [eax], 5
jne 0x77c5c6
cmp byte [ebp - 9], 0
jne 0x77c5c6
test byte [ebp + 0x10], 2
je 0x77c5c6
call fcn.0078ceec
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0xffffffff
jne 0x77c42d
push 0
call sub.USER32.DLL_MessageBeep
push 0
lea edx, [ebp - 0x6f0]
mov eax, dword [0x841180]
call fcn.00405e74
mov eax, dword [ebp - 0x6f0]
mov cx, word [0x77c710]
mov dl, 1
call fcn.0044b300
jmp 0x77c5c6
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x20], eax
mov eax, dword [0x841694]
push dword [eax + 4]
push dword [eax]
mov eax, dword [0x841030]
push dword [eax + 4]
push dword [eax]
mov edx, dword [ebp - 0x20]
mov eax, 0x77c7c0
call fcn.00798270
mov eax, dword [ebp - 0x20]
call fcn.007075d4
mov eax, dword [ebp - 0x20]
shl eax, 4
mov edx, dword [0x840ecc]
mov ecx, dword [0x841030]
mov ebx, dword [ecx]
mov dword [edx + eax*8 - 0x74], ebx
mov ebx, dword [ecx + 4]
mov dword [edx + eax*8 - 0x70], ebx
mov eax, dword [ebp - 0x20]
shl eax, 4
mov edx, dword [0x840ecc]
mov ecx, dword [0x841694]
mov ebx, dword [ecx]
mov dword [edx + eax*8 - 0x6c], ebx
mov ebx, dword [ecx + 4]
mov dword [edx + eax*8 - 0x68], ebx
lea edx, [ebp - 0x6f4]
mov eax, dword [ebp - 0x20]
call fcn.004094a8
mov eax, dword [ebp - 0x6f4]
lea edx, [ebp - 0x6f0]
call fcn.0078cd88
mov edx, dword [ebp - 0x6f0]
mov eax, dword [ebp - 0x20]
shl eax, 4
mov ecx, dword [0x840ecc]
lea eax, [ecx + eax*8 - 0x80]
call fcn.00403ec8
mov eax, dword [ebp - 0x20]
shl eax, 4
mov edx, dword [0x840ecc]
lea eax, [edx + eax*8 - 0x34]
call fcn.00403e74
mov dword [ebp - 0xa0], 0xc4424000
xor eax, eax
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x20]
shl eax, 4
mov edx, dword [0x840ecc]
mov ecx, dword [ebp - 0xa0]
mov dword [edx + eax*8 - 0x5c], ecx
mov eax, dword [ebp + 8]
push eax
mov eax, dword [0x841694]
push dword [eax + 4]
push dword [eax]
mov eax, dword [0x841030]
push dword [eax + 4]
push dword [eax]
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 4]
call fcn.0076c300
mov eax, dword [0x840af4]
cmp byte [eax], 0
je 0x77c582
mov eax, dword [0x841fb8]
mov eax, dword [eax]
call fcn.004202f0
push eax
push 1
push 1
mov eax, dword [0x955898]
mov eax, dword [eax + 0x304]
call fcn.005782ec
push eax
mov eax, dword [0x955898]
mov eax, dword [eax + 0x304]
call fcn.0057832c
mov edx, eax
mov eax, dword [ebp - 0x20]
pop ecx
call fcn.00707ce8
call fcn.007a7558
jmp 0x77c5a4
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x394]
mov eax, dword [eax + 0xb4]
push eax
push 1
push 0
mov ecx, dword [ebp - 0x68]
mov edx, dword [ebp - 0x64]
mov eax, dword [ebp - 0x20]
call fcn.00707ce8
call fcn.0078ea80
mov eax, dword [0x841774]
mov eax, dword [eax]
call fcn.0071f640
call fcn.007400b8
call fcn.007a7350
xor eax, eax
call fcn.00792df8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x77c60e
lea eax, [ebp - 0x808]
call fcn.00403e74
lea eax, [ebp - 0x704]
mov edx, 6
call fcn.00403e98
lea eax, [ebp - 0x9c]
mov edx, 2
call fcn.00403e98
lea eax, [ebp - 0x7c]
call fcn.00403e74
ret