Function at 0x6ca688
Capabilities:
Check http status code

Disassembly:
push ebp
mov ebp, esp
push ecx
mov ecx, 0x59
push 0
push 0
dec ecx
jne 0x6ca691
push ecx
xchg dword [ebp - 4], ecx
push ebx
push esi
push edi
mov dword [ebp - 0x1c8], ecx
mov edi, edx
mov dword [ebp - 0x1c4], eax
lea eax, [ebp - 0x1c0]
mov edx, dword [0x6c42d0]
call fcn.00408b60
lea esi, [ebp - 0x1d4]
xor eax, eax
push ebp
push 0x6cc903
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x200]
xor ecx, ecx
mov edx, 0x18
call fcn.0040e580
lea eax, [ebp - 0x1c0]
xor ecx, ecx
mov edx, 0x1c0
call fcn.0040e580
lea eax, [ebp - 0x218]
xor ecx, ecx
mov edx, 0x18
call fcn.0040e580
lea eax, [ebp - 0x230]
xor ecx, ecx
mov edx, 0x18
call fcn.0040e580
mov eax, dword [ebp - 0x1c8]
xor edx, edx
mov dword [eax], edx
xor edx, edx
push ebp
push 0x6cc8aa
push dword fs:[edx]
mov dword fs:[edx], esp
mov eax, dword [ebp + 0x20]
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x1fc], edi
cmp byte [ebp + 0x10], 0
je 0x6ca759
mov eax, edi
call fcn.00440538
mov dword [ebp - 0x1f0], eax
mov dword [ebp - 0x1ec], edx
jmp 0x6ca76d
mov dword [ebp - 0x1f0], 0
mov dword [ebp - 0x1ec], 0
lea edx, [ebp - 0x1d0]
mov ecx, 8
mov eax, edi
mov ebx, dword [eax]
call dword [ebx + 0xc]
movzx eax, word [ebp - 0x1d0]
cmp ax, 0x4949
je 0x6ca7a5
cmp ax, 0x4d4d
je 0x6ca7a5
mov eax, dword [ebp + 0x1c]
mov eax, dword [eax + 0x28]
mov byte [eax], 1
call fcn.004064e8
jmp 0x6cc8b4
cmp word [ebp - 0x1d0], 0x4949
sete al
mov byte [ebp - 0x200], al
mov byte [ebp - 0x44], al
test al, al
jne 0x6ca7cf
mov eax, dword [ebp - 0x1cc]
call fcn.00868a78
mov dword [ebp - 0x1cc], eax
xor eax, eax
mov dword [ebp - 0x1f8], eax
mov edi, dword [ebp - 0x1cc]
mov ebx, edi
test ebx, ebx
jne 0x6ca7ed
call fcn.004064e8
jmp 0x6cc8b4
cmp dword [ebp + 0x20], 0
je 0x6ca7fd
mov eax, dword [ebp + 0x20]
mov eax, dword [eax + 0x40]
mov dword [esi], eax
jmp 0x6ca803
mov dword [esi], 0xffffffff
mov eax, dword [ebp - 0x1c8]
push eax
lea ecx, [ebp - 0x200]
mov edx, edi
mov eax, dword [esi]
call fcn.006ca448
test al, al
jne 0x6ca827
call fcn.004064e8
jmp 0x6cc8b4
mov eax, dword [ebp + 0x20]
mov eax, dword [eax + 0x44]
cmp eax, 0xffffffff
jle 0x6ca867
push 0
mov ecx, eax
lea eax, [ebp - 0x200]
mov edx, 0x14a
call fcn.006c4b94
mov ebx, eax
test ebx, ebx
jbe 0x6ca867
mov eax, dword [ebp - 0x1f8]
call fcn.0040437c
push esi
lea ecx, [ebp - 0x200]
mov edx, ebx
xor eax, eax
call fcn.006ca448
lea eax, [ebp - 0x200]
xor ecx, ecx
mov edx, 0x8769
call fcn.006c497c
mov ebx, eax
test ebx, ebx
jbe 0x6ca8c6
movzx eax, byte [ebp - 0x200]
mov byte [ebp - 0x218], al
mov eax, dword [ebp - 0x1fc]
mov dword [ebp - 0x214], eax
mov dword [ebp - 0x208], 0
mov dword [ebp - 0x204], 0
push esi
lea ecx, [ebp - 0x218]
mov edx, ebx
xor eax, eax
call fcn.006ca448
mov eax, dword [ebp + 0x20]
mov byte [eax + 0x194], 1
lea eax, [ebp - 0x200]
xor ecx, ecx
mov edx, 0x8825
call fcn.006c497c
mov ebx, eax
test ebx, ebx
jbe 0x6ca91b
movzx eax, byte [ebp - 0x200]
mov byte [ebp - 0x230], al
mov eax, dword [ebp - 0x1fc]
mov dword [ebp - 0x22c], eax
mov dword [ebp - 0x220], 0
mov dword [ebp - 0x21c], 0
push esi
lea ecx, [ebp - 0x230]
mov edx, ebx
xor eax, eax
call fcn.006ca448
lea eax, [ebp - 0x200]
or ecx, 0xffffffff
mov edx, 0x142
call fcn.006c497c
mov dword [ebp - 0x1ac], eax
lea eax, [ebp - 0x200]
or ecx, 0xffffffff
mov edx, 0x143
call fcn.006c497c
mov dword [ebp - 0x1a8], eax
mov eax, dword [ebp + 0x20]
cmp dword [eax + 0x58], 0xffffffff
jne 0x6ca988
lea eax, [ebp - 0x200]
xor ecx, ecx
mov edx, pe_nt_image_headers32
call fcn.006c497c
mov dword [ebp - 0x1c0], eax
lea eax, [ebp - 0x200]
xor ecx, ecx
mov edx, 0x101
call fcn.006c497c
mov dword [ebp - 0x1bc], eax
jmp 0x6ca9a0
mov eax, dword [ebp - 0x1ac]
mov dword [ebp - 0x1c0], eax
mov eax, dword [ebp - 0x1a8]
mov dword [ebp - 0x1bc], eax
lea eax, [ebp - 0x200]
mov ecx, 1
mov edx, 0x115
call fcn.006c497c
mov dword [ebp - 0x1b8], eax
lea edx, [ebp - 0x1c0]
lea eax, [ebp - 0x200]
call fcn.006c57a8
test al, al
jne 0x6ca9e3
mov eax, dword [ebp + 0x1c]
mov eax, dword [eax + 0x28]
mov byte [eax], 1
call fcn.004064e8
jmp 0x6cc8b4
lea eax, [ebp - 0x200]
mov ecx, dword [ebp - 0x1bc]
mov edx, 0x116
call fcn.006c497c
mov edx, dword [ebp - 0x1bc]
call fcn.00805a1c
mov dword [ebp - 0x1b0], eax
mov eax, dword [ebp - 0x1b0]
cmp eax, 0xffffffff
je 0x6caa19
test eax, eax
jne 0x6caa25
mov eax, dword [ebp - 0x1bc]
mov dword [ebp - 0x1b0], eax
lea eax, [ebp - 0x200]
mov ecx, 2
mov edx, 0x106
call fcn.006c497c
mov word [ebp - 0x1a4], ax
lea eax, [ebp - 0x200]
mov ecx, 1
mov edx, 0x11c
call fcn.006c497c
mov word [ebp - 0x1a2], ax
lea eax, [ebp - 0x200]
mov ecx, 1
mov edx, 0x112
call fcn.006c497c
mov word [ebp - 0x1a0], ax
lea eax, [ebp - 0x200]
mov ecx, 1
mov edx, 0x103
call fcn.006c497c
mov word [ebp - 0x19e], ax
lea eax, [ebp - 0x200]
mov ecx, 1
mov edx, 0x13d
call fcn.006c497c
mov dword [ebp - 0x158], eax
lea eax, [ebp - 0x200]
mov ecx, 2
mov edx, 0x128
call fcn.006c497c
mov dword [ebp - 0x16c], eax
mov eax, dword [0x8e6f98]
fild dword [eax]
add esp, 0xfffffff8
fstp qword [esp]
wait
lea eax, [ebp - 0x200]
mov edx, 0x11a
call fcn.006c4a24
fstp qword [ebp - 0x168]
wait
mov eax, dword [0x8e6e78]
fild dword [eax]
add esp, 0xfffffff8
fstp qword [esp]
wait
lea eax, [ebp - 0x200]
mov edx, 0x11b
call fcn.006c4a24
fstp qword [ebp - 0x160]
wait
lea eax, [ebp - 0x200]
xor ecx, ecx
mov edx, 0x124
call fcn.006c497c
mov dword [ebp - 0x14c], eax
lea eax, [ebp - 0x200]
xor ecx, ecx
mov edx, 0x125
call fcn.006c497c
mov dword [ebp - 0x148], eax
lea eax, [ebp - 0x200]
mov ecx, 1
mov edx, 0x10a
call fcn.006c497c
mov dword [ebp - 0x144], eax
mov eax, dword [ebp - 0x144]
cmp eax, 1
je 0x6cab7a
cmp eax, 2
je 0x6cab7a
mov dword [ebp - 0x144], 1
push 0
push 0
lea eax, [ebp - 0x200]
mov edx, 0x11e
call fcn.006c4a24
fstp qword [ebp - 0x140]
wait
push 0
push 0
lea eax, [ebp - 0x200]
mov edx, 0x11f
call fcn.006c4a24
fstp qword [ebp - 0x138]
wait
lea eax, [ebp - 0x234]
push eax
lea eax, [ebp - 0x200]
mov cl, 1
mov edx, 0x10d
call fcn.006c512c
mov edx, dword [ebp - 0x234]
lea eax, [ebp - 0x130]
call fcn.00406ccc
lea eax, [ebp - 0x238]
push eax
lea eax, [ebp - 0x200]
mov cl, 1
mov edx, 0x10e
call fcn.006c512c
mov edx, dword [ebp - 0x238]
lea eax, [ebp - 0x12c]
call fcn.00406ccc
lea eax, [ebp - 0x23c]
push eax
lea eax, [ebp - 0x200]
mov cl, 1
mov edx, 0x11d
call fcn.006c512c
mov edx, dword [ebp - 0x23c]
lea eax, [ebp - 0x128]
call fcn.00406ccc
push 0
lea eax, [ebp - 0x200]
xor ecx, ecx
mov edx, 0x129
call fcn.006c4b94
mov dword [ebp - 0x124], eax
push 0
lea eax, [ebp - 0x200]
mov ecx, 1
mov edx, 0x129
call fcn.006c4b94
mov dword [ebp - 0x120], eax
lea eax, [ebp - 0x240]
push eax
lea eax, [ebp - 0x200]
mov cl, 1
mov edx, 0x131
call fcn.006c512c
mov edx, dword [ebp - 0x240]
lea eax, [ebp - 0x11c]
call fcn.00406ccc
lea eax, [ebp - 0x244]
push eax
lea eax, [ebp - 0x200]
mov cl, 1
mov edx, 0x13b
call fcn.006c512c
mov edx, dword [ebp - 0x244]
lea eax, [ebp - 0xf0]
call fcn.00406ccc
lea eax, [ebp - 0x200]
mov ecx, 1
mov edx, 0x14c
call fcn.006c497c
mov dword [ebp - 0x118], eax
lea eax, [ebp - 0x200]
mov ecx, 4
mov edx, 0x14e
call fcn.006c497c
mov dword [ebp - 0x114], eax
lea eax, [ebp - 0x200]
xor ecx, ecx
mov edx, 0x200
call fcn.006c497c
mov dword [ebp - 0xe4], eax
lea eax, [ebp - 0x200]
xor ecx, ecx
mov edx, 0x201
call fcn.006c497c
mov dword [ebp - 0xe0], eax
lea eax, [ebp - 0x200]
xor ecx, ecx
mov edx, 0x202
call fcn.006c497c
mov dword [ebp - 0xdc], eax
lea eax, [ebp - 0x200]
xor ecx, ecx
mov edx, 0x203
call fcn.006c497c
mov dword [ebp - 0xd8], eax
mov edx, 7
mov eax, dword [ebp - 0x1b8]
call fcn.00805a1c
dec eax
test eax, eax
jl 0x6cadfa
inc eax
mov dword [ebp - 0x1e8], eax
mov dword [esi], 0
lea edi, [ebp - 0xd4]
push 0
lea eax, [ebp - 0x200]
mov ecx, dword [esi]
mov edx, 0x205
call fcn.006c4b94
mov dword [edi], eax
push 0
lea eax, [ebp - 0x200]
mov ecx, dword [esi]
mov edx, 0x206
call fcn.006c4b94
mov dword [edi + 0x1c], eax
push 0
lea eax, [ebp - 0x200]
mov ecx, dword [esi]
mov edx, 0x207
call fcn.006c4b94
mov dword [edi + 0x38], eax
push 0
lea eax, [ebp - 0x200]
mov ecx, dword [esi]
mov edx, 0x208
call fcn.006c4b94
mov dword [edi + 0x54], eax
push 0
lea eax, [ebp - 0x200]
mov ecx, dword [esi]
mov edx, 0x209
call fcn.006c4b94
mov dword [edi + 0x70], eax
inc dword [esi]
add edi, 4
dec dword [ebp - 0x1e8]
jne 0x6cad7b
lea eax, [ebp - 0x200]
xor ecx, ecx
mov edx, 0x152
call fcn.006c497c
mov dword [ebp - 0x34], eax
lea edx, [ebp - 0x1c0]
lea eax, [ebp - 0x200]
call fcn.006c5678
push 0
lea eax, [ebp - 0x200]
xor ecx, ecx
mov edx, 0x212
call fcn.006c4b94
mov edi, eax
mov dword [ebp - 0xec], edi
test edi, edi
jne 0x6cae4a
mov dword [ebp - 0xec], 2
push 0
lea eax, [ebp - 0x200]
mov ecx, 1
mov edx, 0x212
call fcn.006c4b94
mov edi, eax
mov dword [ebp - 0xe8], edi
test edi, edi
jne 0x6cae77
mov dword [ebp - 0xe8], 2
xor eax, eax
mov dword [esi], eax
lea edi, [ebp - 0x110]
push 0
lea eax, [ebp - 0x200]
mov ecx, dword [esi]
mov edx, 0x150
call fcn.006c4b94
mov dword [edi], eax
inc dword [esi]
add edi, 4
cmp dword [esi], 8
jne 0x6cae81
lea edx, [ebp - 0x19c]
lea eax, [ebp - 0x200]
mov ecx, 0x111
call fcn.006c4e4c
mov dword [ebp - 0x198], eax
lea edx, [ebp - 0x194]
lea eax, [ebp - 0x200]
mov ecx, 0x117
call fcn.006c4e4c
mov dword [ebp - 0x190], eax
lea edx, [ebp - 0x18c]
lea eax, [ebp - 0x200]
mov ecx, 0x144
call fcn.006c4e4c
mov dword [ebp - 0x188], eax
lea edx, [ebp - 0x184]
lea eax, [ebp - 0x200]
mov ecx, 0x145
call fcn.006c4e4c
mov dword [ebp - 0x180], eax
cmp dword [ebp - 0x1b8], 1
jne 0x6caf4a
cmp dword [ebp - 0x1b4], 1
jne 0x6caf4a
cmp word [ebp - 0x19e], 0
jbe 0x6caf4a
cmp word [ebp - 0x19e], 5
jae 0x6caf4a
cmp word [ebp - 0x1a4], 2
jne 0x6caf4a
mov word [ebp - 0x1a4], 0
lea ecx, [ebp - 0x150]
lea eax, [ebp - 0x200]
mov edx, 0x15b
call fcn.006c4f08
mov dword [ebp - 0x154], eax
lea edx, [ebp - 0x1c0]
lea eax, [ebp - 0x200]
call fcn.006c5508
lea edx, [ebp - 0x1c0]
lea eax, [ebp - 0x200]
call fcn.006c56e8
lea edx, [ebp - 0x1c0]
lea eax, [ebp - 0x200]
mov ecx, dword [ebp + 0x20]
call fcn.006ca0dc
lea edx, [ebp - 0x1c0]
lea eax, [ebp - 0x200]
mov ecx, dword [ebp + 0x20]
call fcn.006ca1bc
lea eax, [ebp - 0x200]
mov edx, dword [ebp + 0x20]
call fcn.006c5018
lea eax, [ebp - 0x200]
mov edx, dword [ebp + 0x20]
call fcn.006c50a0
mov eax, dword [ebp + 0x20]
mov edx, dword [ebp - 0x1b4]
mov dword [eax + 8], edx
mov eax, dword [ebp + 0x20]
mov edx, dword [ebp - 0x1b8]
mov dword [eax + 0x10], edx
mov eax, dword [ebp + 0x20]
mov edx, dword [ebp - 0x1c0]
mov dword [eax + 0x14], edx
mov eax, dword [ebp + 0x20]
mov edx, dword [ebp - 0x1bc]
mov dword [eax + 0x18], edx
mov eax, dword [ebp + 0x20]
mov edx, dword [ebp - 0x1c0]
mov dword [eax + 0x34], edx
mov eax, dword [ebp + 0x20]
mov edx, dword [ebp - 0x1bc]
mov dword [eax + 0x38], edx
cmp byte [ebp - 0x44], 0
je 0x6cb026
mov eax, dword [ebp + 0x20]
mov byte [eax + 0x94], 1
jmp 0x6cb030
mov eax, dword [ebp + 0x20]
mov byte [eax + 0x94], 0
mov edx, dword [ebp - 0x1c8]
mov edx, dword [edx]
mov eax, dword [ebp + 0x20]
call fcn.007cf074
movzx edx, word [ebp - 0x1a0]
mov eax, dword [ebp + 0x20]
call fcn.007cf0b8
movzx eax, word [ebp - 0x19e]
cmp eax, 6
jg 0x6cb085
je 0x6cb0dc
cmp eax, 5
ja case.0x6cb066.0
jmp dword [eax*4 + 0x6cb06d]
sub eax, 7
je 0x6cb0e5
dec eax
je 0x6cb100
sub eax, 0x7ffd
je 0x6cb0ee
sub eax, 0xad
je 0x6cb0f7
jmp case.0x6cb066.0
mov eax, dword [ebp + 0x20]
mov byte [eax + 0x3c], 0
jmp 0x6cb110
mov eax, dword [ebp + 0x20]
mov byte [eax + 0x3c], 1
jmp 0x6cb110
test byte [ebp - 0x14c], 1
jne 0x6cb0c1
mov eax, dword [ebp + 0x20]
mov byte [eax + 0x3c], 2
jmp 0x6cb110
mov eax, dword [ebp + 0x20]
mov byte [eax + 0x3c], 3
jmp 0x6cb110
mov eax, dword [ebp + 0x20]
mov byte [eax + 0x3c], 4
jmp 0x6cb110
mov eax, dword [ebp + 0x20]
mov byte [eax + 0x3c], 5
jmp 0x6cb110
mov eax, dword [ebp + 0x20]
mov byte [eax + 0x3c], 6
jmp 0x6cb110
mov eax, dword [ebp + 0x20]
mov byte [eax + 0x3c], 7
jmp 0x6cb110
mov eax, dword [ebp + 0x20]
mov byte [eax + 0x3c], 8
jmp 0x6cb110
mov eax, dword [ebp + 0x20]
mov byte [eax + 0x3c], 9
jmp 0x6cb110
mov eax, dword [ebp + 0x20]
mov byte [eax + 0x3c], 0xa
jmp 0x6cb110
mov eax, dword [ebp + 0x20]
mov byte [eax + 0x3c], 0xb
movzx eax, word [ebp - 0x1a4]
cmp eax, 8
ja case.0x6cb11c.7
jmp dword [eax*4 + 0x6cb123]
mov eax, dword [ebp + 0x20]
mov byte [eax + 0x48], 0
jmp case.0x6cb11c.7
mov eax, dword [ebp + 0x20]
mov byte [eax + 0x48], 1
jmp case.0x6cb11c.7
mov eax, dword [ebp + 0x20]
mov byte [eax + 0x48], 2
jmp case.0x6cb11c.7
mov eax, dword [ebp + 0x20]
mov byte [eax + 0x48], 3
jmp case.0x6cb11c.7
mov eax, dword [ebp + 0x20]
mov byte [eax + 0x48], 4
jmp case.0x6cb11c.7
mov eax, dword [ebp + 0x20]
mov byte [eax + 0x48], 5
jmp case.0x6cb11c.7
mov eax, dword [ebp + 0x20]
mov byte [eax + 0x48], 6
jmp case.0x6cb11c.7
mov eax, dword [ebp + 0x20]
mov byte [eax + 0x48], 7
movzx eax, word [ebp - 0x1a2]
mov edx, dword [ebp + 0x20]
mov dword [edx + 0x4c], eax
mov eax, dword [ebp + 0x20]
add eax, 0x5c
mov edx, dword [ebp - 0x130]
call fcn.00406c70
mov eax, dword [ebp + 0x20]
add eax, 0x60
mov edx, dword [ebp - 0x12c]
call fcn.00406c70
mov eax, dword [ebp + 0x20]
add eax, 0x64
mov edx, dword [ebp - 0x128]
call fcn.00406c70
mov eax, dword [ebp + 0x20]
mov edx, dword [ebp - 0x124]
mov dword [eax + 0x68], edx
mov eax, dword [ebp + 0x20]
mov edx, dword [ebp - 0x120]
mov dword [eax + 0x6c], edx
mov eax, dword [ebp + 0x20]
mov edx, dword [ebp - 0x144]
mov dword [eax + 0x90], edx
mov eax, dword [ebp + 0x20]
add eax, 0x1a0
mov edx, dword [ebp + 0x20]
mov edx, dword [edx + 0x60]
call fcn.00406c70
lea eax, [ebp - 0x248]
push eax
lea eax, [ebp - 0x200]
mov cl, 1
mov edx, 0x10f
call fcn.006c512c
mov edx, dword [ebp - 0x248]
mov eax, dword [ebp + 0x20]
add eax, 0x1a4
call fcn.00406c70
lea eax, [ebp - 0x24c]
push eax
lea eax, [ebp - 0x200]
mov cl, 1
mov edx, 0x110
call fcn.006c512c
mov edx, dword [ebp - 0x24c]
mov eax, dword [ebp + 0x20]
add eax, 0x1a8
call fcn.00406c70
lea eax, [ebp - 0x250]
push eax
lea eax, [ebp - 0x200]
mov cl, 1
mov edx, 0x132
call fcn.006c512c
mov edx, dword [ebp - 0x250]
mov eax, dword [ebp + 0x20]
add eax, 0x1cc
call fcn.00406c70
movzx edx, word [ebp - 0x1a0]
mov eax, dword [ebp + 0x20]
call fcn.007cf0c4
push dword [ebp - 0x164]
push dword [ebp - 0x168]
mov eax, dword [ebp + 0x20]
call fcn.007cf0d0
push dword [ebp - 0x15c]
push dword [ebp - 0x160]
mov eax, dword [ebp + 0x20]
call fcn.007cf100
mov eax, dword [ebp + 0x20]
mov edx, dword [ebp - 0x16c]
mov dword [eax + 0x1c0], edx
mov eax, dword [ebp + 0x20]
add eax, 0x1c4
mov edx, dword [ebp - 0x11c]
call fcn.00406c70
lea eax, [ebp - 0x200]
or ecx, 0xffffffff
mov edx, 0x4746
call fcn.006c497c
mov edx, dword [ebp + 0x20]
mov dword [edx + 0x338], eax
lea ecx, [ebp - 0x254]
lea eax, [ebp - 0x200]
mov edx, 0x9c9b
call fcn.006c5204
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp + 0x20]
add eax, 0x33c
call fcn.00407808
lea ecx, [ebp - 0x258]
lea eax, [ebp - 0x200]
mov edx, 0x9c9c
call fcn.006c5204
mov edx, dword [ebp - 0x258]
mov eax, dword [ebp + 0x20]
add eax, 0x340
call fcn.00407808
lea ecx, [ebp - 0x25c]
lea eax, [ebp - 0x200]
mov edx, 0x9c9d
call fcn.006c5204
mov edx, dword [ebp - 0x25c]
mov eax, dword [ebp + 0x20]
add eax, 0x344
call fcn.00407808
lea ecx, [ebp - 0x260]
lea eax, [ebp - 0x200]
mov edx, 0x9c9e
call fcn.006c5204
mov edx, dword [ebp - 0x260]
mov eax, dword [ebp + 0x20]
add eax, 0x348
call fcn.00407808
lea ecx, [ebp - 0x264]
lea eax, [ebp - 0x200]
mov edx, 0x9c9f
call fcn.006c5204
mov edx, dword [ebp - 0x264]
mov eax, dword [ebp + 0x20]
add eax, 0x34c
call fcn.00407808
mov eax, dword [ebp + 0x20]
add eax, 0x1c8
mov edx, dword [ebp - 0xf0]
call fcn.00406c70
push 0xbff00000
push 0
lea eax, [ebp - 0x200]
xor ecx, ecx
mov edx, 0x13e
call fcn.006c4ac8
add esp, 0xfffffff8
fstp qword [esp]
wait
xor edx, edx
mov eax, dword [ebp + 0x20]
call fcn.007cedc8
push 0xbff00000
push 0
lea eax, [ebp - 0x200]
mov ecx, 1
mov edx, 0x13e
call fcn.006c4ac8
add esp, 0xfffffff8
fstp qword [esp]
wait
mov edx, 1
mov eax, dword [ebp + 0x20]
call fcn.007cedc8
lea eax, [ebp - 0x200]
or ecx, 0xffffffff
mov edx, 0x213
call fcn.006c497c
mov edx, dword [ebp + 0x20]
mov dword [edx + 0x228], eax
xor eax, eax
mov dword [esi], eax
push 0xbff00000
push 0
lea eax, [ebp - 0x200]
mov ecx, dword [esi]
mov edx, 0x13f
call fcn.006c4ac8
add esp, 0xfffffff8
fstp qword [esp]
wait
mov edx, dword [esi]
mov eax, dword [ebp + 0x20]
call fcn.007cee04
inc dword [esi]
cmp dword [esi], 6
jne 0x6cb45a
xor eax, eax
mov dword [esi], eax
push 0xbff00000
push 0
lea eax, [ebp - 0x200]
mov ecx, dword [esi]
mov edx, 0x211
call fcn.006c4ac8
add esp, 0xfffffff8
fstp qword [esp]
wait
mov edx, dword [esi]
mov eax, dword [ebp + 0x20]
call fcn.007cee40
inc dword [esi]
cmp dword [esi], 3
jne 0x6cb48f
xor eax, eax
mov dword [esi], eax
push 0xbff00000
push 0
lea eax, [ebp - 0x200]
mov ecx, dword [esi]
mov edx, 0x214
call fcn.006c4ac8
add esp, 0xfffffff8
fstp qword [esp]
wait
mov edx, dword [esi]
mov eax, dword [ebp + 0x20]
call fcn.007ced8c
inc dword [esi]
cmp dword [esi], 6
jne 0x6cb4c4
lea eax, [ebp - 0x268]
push eax
lea eax, [ebp - 0x200]
mov cl, 1
mov edx, 0x8298
call fcn.006c512c
mov edx, dword [ebp - 0x268]
mov eax, dword [ebp + 0x20]
add eax, 0x260
call fcn.00406c70
push 0xbff00000
push 0
lea eax, [ebp - 0x218]
mov edx, 0x829a
call fcn.006c4a24
add esp, 0xfffffff8
fstp qword [esp]
wait
mov eax, dword [ebp + 0x20]
call fcn.007db810
push 0xbff00000
push 0
lea eax, [ebp - 0x218]
mov edx, 0x829d
call fcn.006c4a24
add esp, 0xfffffff8
fstp qword [esp]
wait
mov eax, dword [ebp + 0x20]
call fcn.007db858
lea eax, [ebp - 0x218]
or ecx, 0xffffffff
mov edx, 0x8822
call fcn.006c497c
mov edx, eax
mov eax, dword [ebp + 0x20]
call fcn.007db8a0
push 0
lea eax, [ebp - 0x218]
xor ecx, ecx
mov edx, 0x8827
call fcn.006c4b94
mov ecx, eax
xor edx, edx
mov eax, dword [ebp + 0x20]
call fcn.007ced7c
push 0
lea eax, [ebp - 0x218]
mov ecx, 1
mov edx, 0x8827
call fcn.006c4b94
mov ecx, eax
mov edx, 1
mov eax, dword [ebp + 0x20]
call fcn.007ced7c
lea ecx, [ebp - 0x26c]
lea eax, [ebp - 0x218]
mov edx, 0x9000
call fcn.006c52a8
mov edx, dword [ebp - 0x26c]
mov eax, dword [ebp + 0x20]
add eax, 0x284
call fcn.00406c70
lea eax, [ebp - 0x270]
push eax
lea eax, [ebp - 0x218]
mov cl, 1
mov edx, 0x9003
call fcn.006c512c
mov edx, dword [ebp - 0x270]
mov eax, dword [ebp + 0x20]
add eax, 0x288
call fcn.00406c70
lea eax, [ebp - 0x274]
push eax
lea eax, [ebp - 0x218]
mov cl, 1
mov edx, 0x9004
call fcn.006c512c
mov edx, dword [ebp - 0x274]
mov eax, dword [ebp + 0x20]
add eax, 0x28c
call fcn.00406c70
push 0
push 0
lea eax, [ebp - 0x218]
mov edx, 0x9102
call fcn.006c4a24
add esp, 0xfffffff8
fstp qword [esp]
wait
mov eax, dword [ebp + 0x20]
call fcn.007db8c0
push 0xbff00000
push 0
lea eax, [ebp - 0x218]
mov edx, 0x9201
call fcn.006c4a24
add esp, 0xfffffff8
fstp qword [esp]
wait
mov eax, dword [ebp + 0x20]
call fcn.007db908
push 0xbff00000
push 0
lea eax, [ebp - 0x218]
mov edx, 0x9202
call fcn.006c4a24
add esp, 0xfffffff8
fstp qword [esp]
wait
mov eax, dword [ebp + 0x20]
call fcn.007db950
push 0xc08f4000
push 0
lea eax, [ebp - 0x218]
mov edx, 0x9203
call fcn.006c4a24
add esp, 0xfffffff8
fstp qword [esp]
wait
mov eax, dword [ebp + 0x20]
call fcn.007db998
push 0xc08f4000
push 0
lea eax, [ebp - 0x218]
mov edx, 0x9204
call fcn.006c4a24
add esp, 0xfffffff8
fstp qword [esp]
wait
mov eax, dword [ebp + 0x20]
call fcn.007db9e0
push 0xc08f4000
push 0
lea eax, [ebp - 0x218]
mov edx, 0x9205
call fcn.006c4a24
add esp, 0xfffffff8
fstp qword [esp]
wait
mov eax, dword [ebp + 0x20]
call fcn.007dba28
push 0xbff00000
push 0
lea eax, [ebp - 0x218]
mov edx, 0x9206
call fcn.006c4a24
add esp, 0xfffffff8
fstp qword [esp]
wait
mov eax, dword [ebp + 0x20]
call fcn.007dba70
lea eax, [ebp - 0x218]
or ecx, 0xffffffff
mov edx, 0x9207
call fcn.006c497c
mov edx, eax
mov eax, dword [ebp + 0x20]
call fcn.007dbab8
lea eax, [ebp - 0x218]
or ecx, 0xffffffff
mov edx, 0x9208
call fcn.006c497c
mov edx, eax
mov eax, dword [ebp + 0x20]
call fcn.007dbad8
lea eax, [ebp - 0x218]
or ecx, 0xffffffff
mov edx, 0x9209
call fcn.006c497c
mov edx, eax
mov eax, dword [ebp + 0x20]
call fcn.007dbaf8
push 0xbff00000
push 0
lea eax, [ebp - 0x218]
mov edx, 0x920a
call fcn.006c4a24
add esp, 0xfffffff8
fstp qword [esp]
wait
mov eax, dword [ebp + 0x20]
call fcn.007dbb18
lea eax, [ebp - 0x278]
push eax
lea eax, [ebp - 0x218]
mov cl, 1
mov edx, 0x9290
call fcn.006c512c
mov edx, dword [ebp - 0x278]
mov eax, dword [ebp + 0x20]
add eax, 0x2e0
call fcn.00406c70
lea eax, [ebp - 0x27c]
push eax
lea eax, [ebp - 0x218]
mov cl, 1
mov edx, 0x9291
call fcn.006c512c
mov edx, dword [ebp - 0x27c]
mov eax, dword [ebp + 0x20]
add eax, 0x2e4
call fcn.00406c70
lea eax, [ebp - 0x280]
push eax
lea eax, [ebp - 0x218]
mov cl, 1
mov edx, 0x9292
call fcn.006c512c
mov edx, dword [ebp - 0x280]
mov eax, dword [ebp + 0x20]
add eax, 0x2e8
call fcn.00406c70
lea ecx, [ebp - 0x284]
lea eax, [ebp - 0x218]
mov edx, 0xa000
call fcn.006c52a8
mov edx, dword [ebp - 0x284]
mov eax, dword [ebp + 0x20]
add eax, 0x2ec
call fcn.00406c70
lea eax, [ebp - 0x218]
or ecx, 0xffffffff
mov edx, 0xa001
call fcn.006c497c
mov edx, eax
mov eax, dword [ebp + 0x20]
call fcn.007dbb60
lea eax, [ebp - 0x218]
xor ecx, ecx
mov edx, 0xa002
call fcn.006c497c
mov edx, eax
mov eax, dword [ebp + 0x20]
call fcn.007dbb80
lea eax, [ebp - 0x218]
xor ecx, ecx
mov edx, 0xa003
call fcn.006c497c
mov edx, eax
mov eax, dword [ebp + 0x20]
call fcn.007dbba0
lea eax, [ebp - 0x288]
push eax
lea eax, [ebp - 0x218]
mov cl, 1
mov edx, 0xa004
call fcn.006c512c
mov edx, dword [ebp - 0x288]
mov eax, dword [ebp + 0x20]
add eax, 0x2fc
call fcn.00406c70
push 0xbff00000
push 0
lea eax, [ebp - 0x218]
mov edx, 0xa20e
call fcn.006c4a24
add esp, 0xfffffff8
fstp qword [esp]
wait
mov eax, dword [ebp + 0x20]
call fcn.007dbbc0
push 0xbff00000
push 0
lea eax, [ebp - 0x218]
mov edx, 0xa20f
call fcn.006c4a24
add esp, 0xfffffff8
fstp qword [esp]
wait
mov eax, dword [ebp + 0x20]
call fcn.007dbc08
lea eax, [ebp - 0x218]
or ecx, 0xffffffff
mov edx, 0xa210
call fcn.006c497c
mov edx, eax
mov eax, dword [ebp + 0x20]
call fcn.007dbc50
push 0xbff00000
push 0
lea eax, [ebp - 0x218]
mov edx, 0xa215
call fcn.006c4a24
add esp, 0xfffffff8
fstp qword [esp]
wait
mov eax, dword [ebp + 0x20]
call fcn.007dbc70
lea eax, [ebp - 0x218]
or ecx, 0xffffffff
mov edx, 0xa217
call fcn.006c497c
mov edx, eax
mov eax, dword [ebp + 0x20]
call fcn.007dbcb8
lea eax, [ebp - 0x218]
or ecx, 0xffffffff
mov edx, 0xa300
call fcn.006c497c
mov edx, eax
mov eax, dword [ebp + 0x20]
call fcn.007dbcd8
lea eax, [ebp - 0x218]
or ecx, 0xffffffff
mov edx, 0xa301
call fcn.006c497c
mov edx, eax
mov eax, dword [ebp + 0x20]
call fcn.007dbcf8
lea eax, [ebp - 0x218]
or ecx, 0xffffffff
mov edx, 0xa402
call fcn.006c497c
mov edx, dword [ebp + 0x20]
mov dword [edx + 0x350], eax
lea eax, [ebp - 0x218]
or ecx, 0xffffffff
mov edx, 0xa403
call fcn.006c497c
mov edx, dword [ebp + 0x20]
mov dword [edx + 0x354], eax
push 0xbff00000
push 0
lea eax, [ebp - 0x218]
mov edx, 0xa404
call fcn.006c4a24
mov eax, dword [ebp + 0x20]
fstp qword [eax + 0x358]
wait
lea eax, [ebp - 0x218]
or ecx, 0xffffffff
mov edx, 0xa405
call fcn.006c497c
mov edx, dword [ebp + 0x20]
mov dword [edx + 0x360], eax
lea eax, [ebp - 0x218]
or ecx, 0xffffffff
mov edx, 0xa406
call fcn.006c497c
mov edx, dword [ebp + 0x20]
mov dword [edx + 0x364], eax
lea eax, [ebp - 0x218]
or ecx, 0xffffffff
mov edx, 0xa407
call fcn.006c497c
mov edx, dword [ebp + 0x20]
mov dword [edx + 0x368], eax
lea eax, [ebp - 0x218]
or ecx, 0xffffffff
mov edx, 0xa408
call fcn.006c497c
mov edx, dword [ebp + 0x20]
mov dword [edx + 0x36c], eax
lea eax, [ebp - 0x218]
or ecx, 0xffffffff
mov edx, 0xa409
call fcn.006c497c
mov edx, dword [ebp + 0x20]
mov dword [edx + 0x370], eax
lea eax, [ebp - 0x218]
or ecx, 0xffffffff
mov edx, 0xa40a
call fcn.006c497c
mov edx, dword [ebp + 0x20]
mov dword [edx + 0x374], eax
lea eax, [ebp - 0x218]
or ecx, 0xffffffff
mov edx, 0xa40c
call fcn.006c497c
mov edx, dword [ebp + 0x20]
mov dword [edx + 0x378], eax
lea eax, [ebp - 0x28c]
push eax
lea eax, [ebp - 0x218]
mov cl, 1
mov edx, 0xa420
call fcn.006c512c
mov edx, dword [ebp - 0x28c]
mov eax, dword [ebp + 0x20]
add eax, 0x37c
call fcn.00406c70
lea eax, [ebp - 0x218]
mov edx, dword [ebp + 0x20]
call fcn.006ca2a0
mov eax, dword [ebp + 0x20]
mov ecx, dword [eax + 0x334]
lea eax, [ebp - 0x218]
mov edx, 0x927c
call fcn.006c4f84
lea ecx, [ebp - 0x294]
lea eax, [ebp - 0x230]
xor edx, edx
call fcn.006c52a8
mov eax, dword [ebp - 0x294]
lea edx, [ebp - 0x290]
call fcn.006c5320
mov edx, dword [ebp - 0x290]
mov eax, dword [ebp + 0x20]
add eax, 0x380
call fcn.00406c70
lea ecx, [ebp - 0x298]
lea eax, [ebp - 0x230]
mov edx, 1
call fcn.006c52a8
mov edx, dword [ebp - 0x298]
mov eax, dword [ebp + 0x20]
add eax, 0x384
call fcn.00406c70
push 0
push 0
lea eax, [ebp - 0x230]
xor ecx, ecx
mov edx, 2
call fcn.006c4ac8
mov eax, dword [ebp + 0x20]
fstp qword [eax + 0x388]
wait
push 0
push 0
lea eax, [ebp - 0x230]
mov ecx, 1
mov edx, 2
call fcn.006c4ac8
mov eax, dword [ebp + 0x20]
fstp qword [eax + 0x390]
wait
push 0
push 0
lea eax, [ebp - 0x230]
mov ecx, 2
mov edx, 2
call fcn.006c4ac8
mov eax, dword [ebp + 0x20]
fstp qword [eax + 0x398]
wait
lea ecx, [ebp - 0x29c]
lea eax, [ebp - 0x230]
mov edx, 3
call fcn.006c52a8
mov edx, dword [ebp - 0x29c]
mov eax, dword [ebp + 0x20]
add eax, 0x3a0
call fcn.00406c70
push 0
push 0
lea eax, [ebp - 0x230]
xor ecx, ecx
mov edx, 4
call fcn.006c4ac8
mov eax, dword [ebp + 0x20]
fstp qword [eax + 0x3a8]
wait
push 0
push 0
lea eax, [ebp - 0x230]
mov ecx, 1
mov edx, 4
call fcn.006c4ac8
mov eax, dword [ebp + 0x20]
fstp qword [eax + 0x3b0]
wait
push 0
push 0
lea eax, [ebp - 0x230]
mov ecx, 2
mov edx, 4
call fcn.006c4ac8
mov eax, dword [ebp + 0x20]
fstp qword [eax + 0x3b8]
wait
lea eax, [ebp - 0x230]
xor ecx, ecx
mov edx, 5
call fcn.006c497c
lea edx, [ebp - 0x2a0]
call fcn.0088f548
mov edx, dword [ebp - 0x2a0]
mov eax, dword [ebp + 0x20]
add eax, 0x3c0
call fcn.00406c70
push 0
push 0
lea eax, [ebp - 0x230]
mov edx, 6
call fcn.006c4a24
mov eax, dword [ebp + 0x20]
fstp qword [eax + 0x3c8]
wait
push 0
push 0
lea eax, [ebp - 0x230]
xor ecx, ecx
mov edx, 7
call fcn.006c4ac8
mov eax, dword [ebp + 0x20]
fstp qword [eax + 0x3d0]
wait
push 0
push 0
lea eax, [ebp - 0x230]
mov ecx, 1
mov edx, 7
call fcn.006c4ac8
mov eax, dword [ebp + 0x20]
fstp qword [eax + 0x3d8]
wait
push 0
push 0
lea eax, [ebp - 0x230]
mov ecx, 2
mov edx, 7
call fcn.006c4ac8
mov eax, dword [ebp + 0x20]
fstp qword [eax + 0x3e0]
wait
lea eax, [ebp - 0x2a4]
push eax
lea eax, [ebp - 0x230]
mov cl, 1
mov edx, 8
call fcn.006c512c
mov edx, dword [ebp - 0x2a4]
mov eax, dword [ebp + 0x20]
add eax, 0x3e8
call fcn.00406c70
lea ecx, [ebp - 0x2a8]
lea eax, [ebp - 0x230]
mov edx, 9
call fcn.006c52a8
mov edx, dword [ebp - 0x2a8]
mov eax, dword [ebp + 0x20]
add eax, 0x3ec
call fcn.00406c70
lea ecx, [ebp - 0x2ac]
lea eax, [ebp - 0x230]
mov edx, 0xa
call fcn.006c52a8
mov edx, dword [ebp - 0x2ac]
mov eax, dword [ebp + 0x20]
add eax, 0x3f0
call fcn.00406c70
push 0
push 0
lea eax, [ebp - 0x230]
mov edx, 0xb
call fcn.006c4a24
mov eax, dword [ebp + 0x20]
fstp qword [eax + 0x3f8]
wait
lea ecx, [ebp - 0x2b0]
lea eax, [ebp - 0x230]
mov edx, 0xc
call fcn.006c52a8
mov edx, dword [ebp - 0x2b0]
mov eax, dword [ebp + 0x20]
add eax, 0x400
call fcn.00406c70
push 0
push 0
lea eax, [ebp - 0x230]
mov edx, 0xd
call fcn.006c4a24
mov eax, dword [ebp + 0x20]
fstp qword [eax + 0x408]
wait
lea ecx, [ebp - 0x2b4]
lea eax, [ebp - 0x230]
mov edx, 0xe
call fcn.006c52a8
mov edx, dword [ebp - 0x2b4]
mov eax, dword [ebp + 0x20]
add eax, 0x410
call fcn.00406c70
push 0
push 0
lea eax, [ebp - 0x230]
mov edx, 0xf
call fcn.006c4a24
mov eax, dword [ebp + 0x20]
fstp qword [eax + 0x418]
wait
lea ecx, [ebp - 0x2b8]
lea eax, [ebp - 0x230]
mov edx, 0x10
call fcn.006c52a8
mov edx, dword [ebp - 0x2b8]
mov eax, dword [ebp + 0x20]
add eax, 0x420
call fcn.00406c70
push 0
push 0
lea eax, [ebp - 0x230]
mov edx, 0x11
call fcn.006c4a24
mov eax, dword [ebp + 0x20]
fstp qword [eax + 0x428]
wait
lea eax, [ebp - 0x2bc]
push eax
lea eax, [ebp - 0x230]
mov cl, 1
mov edx, 0x12
call fcn.006c512c
mov edx, dword [ebp - 0x2bc]
mov eax, dword [ebp + 0x20]
add eax, 0x430
call fcn.00406c70
lea ecx, [ebp - 0x2c0]
lea eax, [ebp - 0x230]
mov edx, 0x13
call fcn.006c52a8
mov edx, dword [ebp - 0x2c0]
mov eax, dword [ebp + 0x20]
add eax, 0x434
call fcn.00406c70
push 0
push 0
lea eax, [ebp - 0x230]
xor ecx, ecx
mov edx, 0x14
call fcn.006c4ac8
mov eax, dword [ebp + 0x20]
fstp qword [eax + 0x438]
wait
push 0
push 0
lea eax, [ebp - 0x230]
mov ecx, 1
mov edx, 0x14
call fcn.006c4ac8
mov eax, dword [ebp + 0x20]
fstp qword [eax + 0x440]
wait
push 0
push 0
lea eax, [ebp - 0x230]
mov ecx, 2
mov edx, 0x14
call fcn.006c4ac8
mov eax, dword [ebp + 0x20]
fstp qword [eax + 0x448]
wait
lea ecx, [ebp - 0x2c4]
lea eax, [ebp - 0x230]
mov edx, 0x15
call fcn.006c52a8
mov edx, dword [ebp - 0x2c4]
mov eax, dword [ebp + 0x20]
add eax, 0x434
call fcn.00406c70
push 0
push 0
lea eax, [ebp - 0x230]
xor ecx, ecx
mov edx, 0x16
call fcn.006c4ac8
mov eax, dword [ebp + 0x20]
fstp qword [eax + 0x458]
wait
push 0
push 0
lea eax, [ebp - 0x230]
mov ecx, 1
mov edx, 0x16
call fcn.006c4ac8
mov eax, dword [ebp + 0x20]
fstp qword [eax + 0x460]
wait
push 0
push 0
lea eax, [ebp - 0x230]
mov ecx, 2
mov edx, 0x16
call fcn.006c4ac8
mov eax, dword [ebp + 0x20]
fstp qword [eax + 0x468]
wait
lea ecx, [ebp - 0x2c8]
lea eax, [ebp - 0x230]
mov edx, 0x17
call fcn.006c52a8
mov edx, dword [ebp - 0x2c8]
mov eax, dword [ebp + 0x20]
add eax, 0x470
call fcn.00406c70
push 0
push 0
lea eax, [ebp - 0x230]
mov edx, 0x18
call fcn.006c4a24
mov eax, dword [ebp + 0x20]
fstp qword [eax + 0x478]
wait
lea ecx, [ebp - 0x2cc]
lea eax, [ebp - 0x230]
mov edx, 0x19
call fcn.006c52a8
mov edx, dword [ebp - 0x2cc]
mov eax, dword [ebp + 0x20]
add eax, 0x480
call fcn.00406c70
push 0
push 0
lea eax, [ebp - 0x230]
mov edx, 0x1a
call fcn.006c4a24
mov eax, dword [ebp + 0x20]
fstp qword [eax + 0x488]
wait
lea eax, [ebp - 0x2d0]
push eax
lea eax, [ebp - 0x230]
mov cl, 1
mov edx, 0x1d
call fcn.006c512c
mov edx, dword [ebp - 0x2d0]
mov eax, dword [ebp + 0x20]
add eax, 0x490
call fcn.00406c70
mov eax, dword [ebp + 0x20]
call fcn.007ccd5c
mov eax, dword [ebp - 0x178]
test eax, eax
jle 0x6cc121
mov edx, dword [ebp + 0x20]
mov dword [edx + 0x538], eax
mov eax, dword [ebp - 0x178]
lea eax, [eax + eax*2]
call fcn.00404360
mov edi, eax
mov eax, dword [ebp + 0x20]
mov dword [eax + 0x534], edi
mov ecx, dword [ebp - 0x178]
lea ecx, [ecx + ecx*2]
mov eax, edi
mov edx, dword [ebp - 0x17c]
call fcn.0040e578
cmp dword [ebp - 0x16c], 3
jne 0x6cc140
mov dword [ebp - 0x1e0], 0x851eb852
mov dword [ebp - 0x1dc], 0x400451eb
jmp 0x6cc152
xor eax, eax
mov dword [ebp - 0x1e0], eax
mov dword [ebp - 0x1dc], 0x3ff00000
fld qword [ebp - 0x168]
fmul qword [ebp - 0x1e0]
call fcn.00404888
mov edx, eax
mov eax, dword [ebp + 0x20]
call fcn.007cef54
fld qword [ebp - 0x160]
fmul qword [ebp - 0x1e0]
call fcn.00404888
mov edx, eax
mov eax, dword [ebp + 0x20]
call fcn.007cefcc
mov eax, dword [ebp + 0x20]
cmp dword [eax + 0x1c], 0
jne 0x6cc1a1
mov edx, dword [0x8e6f98]
mov edx, dword [edx]
mov eax, dword [ebp + 0x20]
call fcn.007cef54
mov eax, dword [ebp + 0x20]
cmp dword [eax + 0x20], 0
jne 0x6cc1ba
mov edx, dword [0x8e6e78]
mov edx, dword [edx]
mov eax, dword [ebp + 0x20]
call fcn.007cefcc
fld qword [ebp - 0x168]
fmul qword [ebp - 0x1e0]
add esp, 0xfffffff8
fstp qword [esp]
wait
mov eax, dword [ebp + 0x20]
call fcn.007cf0d0
fld qword [ebp - 0x160]
fmul qword [ebp - 0x1e0]
add esp, 0xfffffff8
fstp qword [esp]
wait
mov eax, dword [ebp + 0x20]
call fcn.007cf100
fld qword [ebp - 0x140]
fmul qword [ebp - 0x1e0]
call fcn.00404894
mov edx, dword [ebp + 0x20]
mov dword [edx + 0x50], eax
fld qword [ebp - 0x138]
fmul qword [ebp - 0x1e0]
call fcn.00404894
mov edx, dword [ebp + 0x20]
mov dword [edx + 0x54], eax
mov eax, dword [ebp + 0x20]
cmp dword [eax + 0x14], 0
je 0x6cc230
mov eax, dword [ebp + 0x20]
cmp dword [eax + 0x18], 0
jne 0x6cc249
cmp byte [ebp + 8], 0
jne 0x6cc249
mov eax, dword [ebp + 0x1c]
mov eax, dword [eax + 0x28]
mov byte [eax], 1
call fcn.004064e8
jmp 0x6cc8b4
cmp word [ebp - 0x19e], 5
jne 0x6cc290
mov eax, dword [ebp + 0x20]
cmp dword [eax + 0x74], 0
je 0x6cc267
mov eax, dword [ebp + 0x20]
mov eax, dword [eax + 0x74]
mov dword [ebp - 0x48], eax
jmp 0x6cc290
mov eax, dword [0x8e67a0]
cmp dword [eax], 0
je 0x6cc27d
mov eax, dword [0x8e67a0]
mov eax, dword [eax]
mov dword [ebp - 0x48], eax
jmp 0x6cc290
mov eax, dword [ebp + 0x1c]
mov eax, dword [eax + 0x28]
mov byte [eax], 1
call fcn.004064e8
jmp 0x6cc8b4
movzx eax, byte [ebp + 0xc]
mov byte [ebp - 0x38], al
cmp byte [ebp + 0x18], 0
jne 0x6cc7b3
cmp byte [ebp + 0xc], 0
jne 0x6cc351
cmp dword [ebp - 0x1b8], 4
jne 0x6cc2ba
cmp dword [ebp - 0x34], 2
je 0x6cc303
cmp dword [ebp - 0x1b8], 3
jle 0x6cc2c9
cmp dword [ebp - 0x30], 0
jg 0x6cc303
cmp dword [ebp - 0x1b8], 2
jne 0x6cc2db
cmp dword [ebp - 0x1b4], 8
je 0x6cc303
cmp dword [ebp - 0x1b8], 1
jle 0x6cc2f0
cmp dword [ebp - 0x30], 0
jle 0x6cc2f0
cmp dword [ebp - 0x2c], 1
je 0x6cc303
cmp dword [ebp - 0x1b8], 4
jne 0x6cc31c
cmp word [ebp - 0x1a4], 2
jne 0x6cc31c
mov eax, dword [ebp + 0x14]
cmp dword [eax], 0
jne 0x6cc31c
mov dl, 1
mov eax, dword [0x86132c]
call fcn.0086beb0
mov edx, dword [ebp + 0x14]
mov dword [edx], eax
mov eax, dword [ebp + 0x14]
cmp dword [eax], 0
je 0x6cc34d
push 8
mov eax, dword [ebp + 0x14]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x1bc]
mov edx, dword [ebp - 0x1c0]
call fcn.0086c6b4
mov eax, dword [ebp + 0x14]
mov eax, dword [eax]
mov edx, 0xff
call fcn.0086ea54
jmp 0x6cc351
mov byte [ebp - 0x38], 1
mov eax, dword [ebp + 0x14]
mov eax, dword [eax]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x1c4]
movzx eax, byte [eax + 4]
mov byte [ebp - 0x1e1], al
mov eax, dword [ebp - 0x1c4]
movzx edx, byte [0x6cc914]
mov byte [eax + 4], dl
cmp dword [ebp - 0x1c0], 0x190
jg 0x6cc391
cmp dword [ebp - 0x1bc], 0x190
jle 0x6cc3aa
cmp byte [ebp + 8], 0
je 0x6cc3aa
mov eax, dword [ebp + 0x1c]
mov eax, dword [eax + 0x28]
mov byte [eax], 1
call fcn.004064e8
jmp 0x6cc8b4
cmp word [ebp - 0x19e], 6
je 0x6cc3c7
cmp dword [ebp - 0xe0], 0
je 0x6cc3f0
cmp word [ebp - 0x19e], 5
je 0x6cc3f0
cmp dword [ebp - 0xe4], 2
jge 0x6cc3f0
mov eax, dword [ebp + 0x1c]
push eax
lea ecx, [ebp - 0x1c4]
lea edx, [ebp - 0x1c0]
lea eax, [ebp - 0x200]
call fcn.006c9d84
jmp 0x6cc77f
cmp dword [ebp - 0x1c0], 0
je 0x6cc402
cmp dword [ebp - 0x1bc], 0
jne 0x6cc415
mov eax, dword [ebp + 0x1c]
mov eax, dword [eax + 0x28]
mov byte [eax], 1
call fcn.004064e8
jmp 0x6cc8b4
cmp dword [ebp - 0x1b4], 1
jne 0x6cc455
cmp dword [ebp - 0x1b8], 1
jne 0x6cc455
cmp word [ebp - 0x1a4], 3
je 0x6cc455
push 1
mov ecx, dword [ebp - 0x1bc]
mov edx, dword [ebp - 0x1c0]
mov eax, dword [ebp - 0x1c4]
mov ebx, dword [eax]
call dword [ebx + 0x28]
mov byte [ebp - 0x1e2], al
jmp 0x6cc674
mov eax, dword [ebp + 0x20]
cmp byte [eax + 0x530], 0
je 0x6cc655
cmp dword [ebp - 0x1b4], 8
jne 0x6cc4fa
cmp dword [ebp - 0x1b8], 1
jne 0x6cc4fa
cmp word [ebp - 0x1a4], 3
jne 0x6cc4fa
push 2
mov ecx, dword [ebp - 0x1bc]
mov edx, dword [ebp - 0x1c0]
mov eax, dword [ebp - 0x1c4]
mov ebx, dword [eax]
call dword [ebx + 0x28]
mov byte [ebp - 0x1e2], al
mov eax, dword [ebp + 0x20]
mov eax, dword [eax + 0x538]
dec eax
test eax, eax
jl 0x6cc674
inc eax
mov dword [ebp - 0x1e8], eax
mov dword [esi], 0
mov eax, dword [esi]
lea eax, [eax + eax*2]
mov edx, dword [ebp + 0x20]
mov edx, dword [edx + 0x534]
movzx ecx, byte [edx + eax + 2]
shl ecx, 0x10
mov cx, word [edx + eax]
push ecx
mov edx, dword [esi]
mov eax, dword [ebp - 0x1c4]
mov ecx, dword [eax]
call dword [ecx + 0x20]
inc dword [esi]
dec dword [ebp - 0x1e8]
jne 0x6cc4c3
jmp 0x6cc674
cmp dword [ebp - 0x1b4], 8
jne 0x6cc53a
cmp dword [ebp - 0x1b8], 1
jne 0x6cc53a
cmp word [ebp - 0x1a4], 2
jae 0x6cc53a
push 3
mov ecx, dword [ebp - 0x1bc]
mov edx, dword [ebp - 0x1c0]
mov eax, dword [ebp - 0x1c4]
mov ebx, dword [eax]
call dword [ebx + 0x28]
mov byte [ebp - 0x1e2], al
jmp 0x6cc674
cmp dword [ebp - 0x1b4], 0x10
jne 0x6cc57a
cmp dword [ebp - 0x1b8], 1
jne 0x6cc57a
cmp word [ebp - 0x1a4], 2
jae 0x6cc57a
push 4
mov ecx, dword [ebp - 0x1bc]
mov edx, dword [ebp - 0x1c0]
mov eax, dword [ebp - 0x1c4]
mov ebx, dword [eax]
call dword [ebx + 0x28]
mov byte [ebp - 0x1e2], al
jmp 0x6cc674
cmp dword [ebp - 0x1b4], 8
jne 0x6cc5ba
cmp dword [ebp - 0x1b8], 4
jl 0x6cc5ba
cmp word [ebp - 0x1a4], 5
jne 0x6cc5ba
push 7
mov ecx, dword [ebp - 0x1bc]
mov edx, dword [ebp - 0x1c0]
mov eax, dword [ebp - 0x1c4]
mov ebx, dword [eax]
call dword [ebx + 0x28]
mov byte [ebp - 0x1e2], al
jmp 0x6cc674
cmp dword [ebp - 0x1b4], 0x10
jne 0x6cc5f7
cmp dword [ebp - 0x1b8], 4
jne 0x6cc5f7
cmp word [ebp - 0x1a4], 5
jne 0x6cc5f7
push 7
mov ecx, dword [ebp - 0x1bc]
mov edx, dword [ebp - 0x1c0]
mov eax, dword [ebp - 0x1c4]
mov ebx, dword [eax]
call dword [ebx + 0x28]
mov byte [ebp - 0x1e2], al
jmp 0x6cc674
cmp dword [ebp - 0x1b4], 0x10
jne 0x6cc634
cmp dword [ebp - 0x1b8], 3
jne 0x6cc634
cmp word [ebp - 0x1a4], 2
jne 0x6cc634
push 8
mov ecx, dword [ebp - 0x1bc]
mov edx, dword [ebp - 0x1c0]
mov eax, dword [ebp - 0x1c4]
mov ebx, dword [eax]
call dword [ebx + 0x28]
mov byte [ebp - 0x1e2], al
jmp 0x6cc674
push 5
mov ecx, dword [ebp - 0x1bc]
mov edx, dword [ebp - 0x1c0]
mov eax, dword [ebp - 0x1c4]
mov ebx, dword [eax]
call dword [ebx + 0x28]
mov byte [ebp - 0x1e2], al
jmp 0x6cc674
push 5
mov ecx, dword [ebp - 0x1bc]
mov edx, dword [ebp - 0x1c0]
mov eax, dword [ebp - 0x1c4]
mov ebx, dword [eax]
call dword [ebx + 0x28]
mov byte [ebp - 0x1e2], al
cmp byte [ebp - 0x1e2], 0
jne 0x6cc690
mov eax, dword [ebp + 0x1c]
mov eax, dword [eax + 0x28]
mov byte [eax], 1
call fcn.004064e8
jmp 0x6cc8b4
cmp byte [ebp + 8], 0
je 0x6cc6a5
push 0
push 0
mov eax, dword [ebp - 0x1c4]
call fcn.0087a234
cmp dword [ebp - 0x1ac], 0
jg 0x6cc6bb
cmp dword [ebp - 0x1a8], 0
jle 0x6cc746
cmp dword [ebp - 0x188], 0
jle 0x6cc6e4
mov eax, dword [ebp + 0x1c]
push eax
lea ecx, [ebp - 0x1c4]
lea edx, [ebp - 0x1c0]
lea eax, [ebp - 0x200]
call fcn.006c5850
jmp 0x6cc77f
cmp dword [ebp - 0x198], 0
jle 0x6cc77f
lea edx, [ebp - 0x18c]
lea eax, [ebp - 0x200]
mov ecx, 0x111
call fcn.006c4e4c
mov dword [ebp - 0x188], eax
lea edx, [ebp - 0x184]
lea eax, [ebp - 0x200]
mov ecx, 0x117
call fcn.006c4e4c
mov dword [ebp - 0x180], eax
mov eax, dword [ebp + 0x1c]
push eax
lea ecx, [ebp - 0x1c4]
lea edx, [ebp - 0x1c0]
lea eax, [ebp - 0x200]
call fcn.006c5850
jmp 0x6cc77f
cmp dword [ebp - 0x198], 0
jle 0x6cc76c
mov eax, dword [ebp + 0x1c]
push eax
lea ecx, [ebp - 0x1c4]
lea edx, [ebp - 0x1c0]
lea eax, [ebp - 0x200]
call fcn.006c5a94
jmp 0x6cc77f
mov eax, dword [ebp + 0x1c]
mov eax, dword [eax + 0x28]
mov byte [eax], 1
call fcn.004064e8
jmp 0x6cc8b4
mov eax, dword [ebp - 0x1c4]
movzx edx, byte [ebp - 0x1e1]
mov byte [eax + 4], dl
mov eax, dword [ebp + 0x20]
cmp byte [eax + 0x7c], 0
je 0x6cc7b3
movzx edx, word [ebp - 0x1a0]
mov eax, dword [ebp - 0x1c4]
call fcn.0088c858
mov word [ebp - 0x1a0], 1
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x6cc8b4
cmp dword [ebp + 0x20], 0
je 0x6cc7f0
mov eax, dword [ebp + 0x20]
cmp dword [eax + 0x5fc], 0
je 0x6cc7f0
mov eax, dword [ebp + 0x20]
call fcn.007cf130
call fcn.0088b8c4
test al, al
je 0x6cc7f0
mov eax, dword [ebp + 0x20]
call fcn.007cf130
call fcn.0088b8dc
mov eax, dword [ebp - 0x1f8]
test eax, eax
je 0x6cc7ff
call fcn.0040437c
mov eax, dword [ebp - 0x210]
test eax, eax
je 0x6cc80e
call fcn.0040437c
mov eax, dword [ebp - 0x228]
test eax, eax
je 0x6cc81d
call fcn.0040437c
cmp dword [ebp - 0x198], 0
jle 0x6cc831
mov eax, dword [ebp - 0x19c]
call fcn.0040437c
cmp dword [ebp - 0x190], 0
jle 0x6cc845
mov eax, dword [ebp - 0x194]
call fcn.0040437c
cmp dword [ebp - 0x188], 0
jle 0x6cc859
mov eax, dword [ebp - 0x18c]
call fcn.0040437c
cmp dword [ebp - 0x180], 0
jle 0x6cc86d
mov eax, dword [ebp - 0x184]
call fcn.0040437c
cmp dword [ebp - 0x178], 0
jle 0x6cc881
mov eax, dword [ebp - 0x17c]
call fcn.0040437c
cmp dword [ebp - 0x170], 0
jle 0x6cc895
mov eax, dword [ebp - 0x174]
call fcn.0040437c
cmp dword [ebp - 0x154], 0
je 0x6cc8a9
mov eax, dword [ebp - 0x154]
call fcn.0040437c
ret
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x6cc90a
lea eax, [ebp - 0x2d0]
mov edx, 0x1b
call fcn.00406c40
lea eax, [ebp - 0x264]
mov edx, 5
call fcn.004077e4
lea eax, [ebp - 0x250]
mov edx, 8
call fcn.00406c40
lea eax, [ebp - 0x1c0]
mov edx, dword [0x6c42d0]
call fcn.00408c38
ret