Function at 0x639dec
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffab4
push esi
push edi
xor ecx, ecx
mov dword [ebp - 0x448], ecx
mov dword [ebp - 0x44c], ecx
mov dword [ebp - 0x10], ecx
mov dword [ebp - 0x254], ecx
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x278], ecx
mov dword [ebp - 0x27c], ecx
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 0x6c], ecx
mov dword [ebp - 8], edx
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
call fcn.004042a4
mov eax, dword [ebp - 8]
call fcn.004042a4
lea eax, [ebp - 0x404]
mov edx, dword [0x408370]
call fcn.00404770
xor eax, eax
push ebp
push 0x63ac0d
push dword fs:[eax]
mov dword fs:[eax], esp
xor eax, eax
mov dword [ebp - 0xc], eax
mov byte [ebp - 0x4d], 0
lea eax, [ebp - 0x10]
mov edx, dword [ebp - 4]
call fcn.00403f0c
lea edx, [ebp - 0x448]
mov eax, dword [ebp - 0x10]
call fcn.00409be0
mov eax, dword [ebp - 0x448]
lea edx, [ebp - 0x4c]
call fcn.0044bf5c
mov eax, dword [ebp - 8]
call fcn.004040f0
dec eax
jle 0x639ec4
mov eax, dword [ebp - 8]
call fcn.004040f0
mov edx, dword [ebp - 8]
cmp byte [edx + eax - 1], 0x5c
jne 0x639ec4
lea eax, [ebp - 8]
push eax
mov eax, dword [ebp - 8]
call fcn.004040f0
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.004042f4
mov eax, dword [ebp - 8]
mov edx, 0x63ac28
call fcn.00404200
jne 0x639edb
lea eax, [ebp - 8]
call fcn.00403e74
lea ecx, [ebp - 0x18]
mov edx, 0x63ac34
mov eax, dword [ebp - 0x10]
call fcn.00409a28
mov eax, dword [ebp - 8]
call fcn.0044c49c
test al, al
je 0x639f30
lea eax, [ebp - 0x448]
call fcn.0044c07c
push dword [ebp - 0x448]
push 0x63ac28
lea edx, [ebp - 0x44c]
mov eax, dword [ebp - 0x18]
call fcn.00409be0
push dword [ebp - 0x44c]
lea eax, [ebp - 0x18]
mov edx, 3
call fcn.004041b0
jmp 0x639f59
push dword [ebp - 8]
push 0x63ac28
lea edx, [ebp - 0x448]
mov eax, dword [ebp - 0x18]
call fcn.00409be0
push dword [ebp - 0x448]
lea eax, [ebp - 0x18]
mov edx, 3
call fcn.004041b0
lea edx, [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.00409abc
mov eax, dword [ebp - 0x14]
call fcn.004040f0
dec eax
jle 0x639f9d
mov eax, dword [ebp - 0x14]
call fcn.004040f0
mov edx, dword [ebp - 0x14]
cmp byte [edx + eax - 1], 0x5c
jne 0x639f9d
lea eax, [ebp - 0x14]
push eax
mov eax, dword [ebp - 0x14]
call fcn.004040f0
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 0x14]
call fcn.004042f4
mov eax, dword [0x841c58]
xor edx, edx
mov dword [eax], edx
mov dword [eax + 4], 0x40884800
mov eax, dword [0x841dbc]
xor edx, edx
mov dword [eax], edx
mov dword [eax + 4], 0x40884800
mov eax, dword [0x840868]
xor edx, edx
mov dword [eax], edx
mov dword [eax + 4], 0x40884800
mov eax, dword [0x841d00]
xor edx, edx
mov dword [eax], edx
mov dword [eax + 4], 0x40884800
mov eax, dword [0x841b8c]
xor edx, edx
mov dword [eax], edx
mov dword [eax + 4], 0x40884800
mov eax, dword [0x841918]
xor edx, edx
mov dword [eax], edx
mov dword [eax + 4], 0x40884800
mov eax, dword [0x842240]
xor edx, edx
mov dword [eax], edx
mov dword [eax + 4], 0x40884800
mov eax, dword [0x84145c]
xor edx, edx
mov dword [eax], edx
mov dword [eax + 4], 0x40884800
mov eax, dword [0x841224]
mov dword [eax], 0x309
mov eax, dword [0x8416d8]
mov dword [eax], 0x309
xor eax, eax
mov dword [ebp - 0xc], eax
lea ecx, [ebp - 0x20]
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 4]
call fcn.00706ec0
test eax, eax
jne 0x63a056
mov dword [ebp - 0xc], 1
jmp 0x63ab99
mov eax, dword [0x840b78]
mov eax, dword [eax]
push eax
mov eax, dword [fcn.009503c8]
mov eax, dword [eax]
call eax
mov dword [ebp - 0x70], eax
xor eax, eax
mov dword [ebp - 0x78], eax
xor eax, eax
mov dword [ebp - 0x74], eax
lea eax, [ebp - 0x414]
push eax
lea eax, [ebp - 0x78]
push eax
mov eax, dword [0x840b78]
mov eax, dword [eax]
push eax
mov eax, dword [0x841418]
mov eax, dword [eax]
call eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x78], eax
xor eax, eax
mov dword [ebp - 0x74], eax
lea eax, [ebp - 0x424]
push eax
lea eax, [ebp - 0x78]
push eax
mov eax, dword [0x840b78]
mov eax, dword [eax]
push eax
mov eax, dword [0x841418]
mov eax, dword [eax]
call eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x78], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x74], eax
lea eax, [ebp - 0x434]
push eax
lea eax, [ebp - 0x78]
push eax
mov eax, dword [0x840b78]
mov eax, dword [eax]
push eax
mov eax, dword [0x841418]
mov eax, dword [eax]
call eax
xor eax, eax
mov dword [ebp - 0x78], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x74], eax
lea eax, [ebp - 0x444]
push eax
lea eax, [ebp - 0x78]
push eax
mov eax, dword [0x840b78]
mov eax, dword [eax]
push eax
mov eax, dword [0x841418]
mov eax, dword [eax]
call eax
lea eax, [ebp - 0x18]
mov edx, dword [ebp - 0x70]
mov edx, dword [edx + 0x1c]
call fcn.00404028
lea eax, [ebp - 0x54c]
mov edx, dword [ebp - 0x70]
mov edx, dword [edx + 0x1c]
call fcn.00403034
lea edx, [ebp - 0x54c]
mov eax, dword [0x8408e0]
mov cl, 0x3c
call fcn.00402d1c
lea edx, [ebp - 0x448]
mov eax, dword [ebp - 0x18]
call fcn.00639bfc
mov edx, dword [ebp - 0x448]
lea eax, [ebp - 0x18]
call fcn.00403f0c
mov eax, dword [ebp - 0x18]
call fcn.0044c49c
test al, al
je 0x63a16c
lea eax, [ebp - 0x18]
mov edx, 0x63ac44
call fcn.00403f0c
lea eax, [ebp - 0x54c]
mov edx, dword [ebp - 0x18]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x54c]
mov eax, dword [0x841478]
mov cl, 0x32
call fcn.00402d1c
lea eax, [ebp - 0x18]
mov edx, 0x63ac34
call fcn.004040f8
mov eax, dword [ebp - 8]
call fcn.0044c49c
test al, al
je 0x63a1e3
lea eax, [ebp - 0x448]
call fcn.0044c07c
push dword [ebp - 0x448]
push 0x63ac28
lea edx, [ebp - 0x44c]
mov eax, dword [ebp - 0x18]
call fcn.00409be0
push dword [ebp - 0x44c]
lea eax, [ebp - 0x18]
mov edx, 3
call fcn.004041b0
jmp 0x63a20c
push dword [ebp - 8]
push 0x63ac28
lea edx, [ebp - 0x448]
mov eax, dword [ebp - 0x18]
call fcn.00409be0
push dword [ebp - 0x448]
lea eax, [ebp - 0x18]
mov edx, 3
call fcn.004041b0
call fcn.0070708c
xor eax, eax
push ebp
push 0x63ab92
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x841578]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x84138c]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x84208c]
xor edx, edx
mov dword [eax], edx
mov dword [eax + 4], 0x40590000
mov eax, dword [0x842028]
mov byte [eax], 0
mov eax, dword [0x841698]
mov byte [eax], 0
mov eax, dword [0x841364]
mov byte [eax], 0
mov eax, dword [0x84177c]
xor edx, edx
mov dword [eax], edx
mov dword [eax + 4], edx
mov eax, dword [0x840ebc]
xor edx, edx
mov dword [eax], edx
mov dword [eax + 4], edx
mov eax, dword [0x84072c]
mov byte [eax], 0
mov eax, dword [0x840940]
mov dword [eax], 0x73655903
mov eax, dword [0x840fb8]
mov byte [eax], 0
mov eax, dword [0x841de0]
mov byte [eax], 0
mov eax, dword [0x841bbc]
mov word [eax], 0x4501
mov eax, dword [0x841dc0]
mov edx, dword [ebp - 4]
call fcn.00403ec8
mov eax, 0x1e
call fcn.00798d60
mov eax, dword [0x840cf8]
mov eax, dword [eax]
mov eax, dword [eax + 0x1e8]
call fcn.00444b04
mov eax, dword [0x840bb0]
mov edi, eax
mov esi, 0x63ac48
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
lea eax, [ebp - 0x448]
mov edx, dword [0x840bb0]
call fcn.00404094
mov eax, dword [ebp - 0x448]
call fcn.00558658
mov edx, dword [0x84125c]
mov dword [edx], eax
mov eax, dword [0x841c80]
mov dword [eax], 4
mov eax, dword [0x841d58]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x841ab8]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x841d58]
mov edx, dword [ebp - 0x1c]
mov dword [eax + 4], edx
mov eax, dword [0x841ab8]
xor edx, edx
mov dword [eax + 4], edx
mov eax, dword [0x841d58]
xor edx, edx
mov dword [eax + 0xc], edx
mov eax, dword [0x841ab8]
mov edx, dword [ebp - 0x20]
mov dword [eax + 0xc], edx
mov eax, dword [0x841d58]
mov edx, dword [ebp - 0x1c]
mov dword [eax + 8], edx
mov eax, dword [0x841ab8]
mov edx, dword [ebp - 0x20]
mov dword [eax + 8], edx
mov eax, dword [0x840940]
mov dword [eax], 0x73655903
mov byte [ebp - 0x4d], 1
mov eax, dword [0x841d5c]
mov edx, 0x63ac58
call fcn.00403ec8
xor eax, eax
mov dword [ebp - 0x3c], eax
xor eax, eax
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x48], eax
lea edx, [ebp - 0x448]
mov eax, dword [ebp - 0x3c]
call fcn.004094a8
mov edx, dword [ebp - 0x448]
lea eax, [ebp - 0x54c]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x54c]
mov eax, dword [0x842148]
mov cl, 0xf
call fcn.00402d1c
lea edx, [ebp - 0x448]
mov eax, dword [ebp - 0x40]
call fcn.004094a8
mov edx, dword [ebp - 0x448]
lea eax, [ebp - 0x54c]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x54c]
mov eax, dword [0x841ea0]
mov cl, 0xf
call fcn.00402d1c
lea edx, [ebp - 0x448]
mov eax, dword [ebp - 0x44]
call fcn.004094a8
mov edx, dword [ebp - 0x448]
lea eax, [ebp - 0x54c]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x54c]
mov eax, dword [0x842148]
add eax, 0x10
mov cl, 0xf
call fcn.00402d1c
lea edx, [ebp - 0x448]
mov eax, dword [ebp - 0x40]
call fcn.004094a8
mov edx, dword [ebp - 0x448]
lea eax, [ebp - 0x54c]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x54c]
mov eax, dword [0x841ea0]
add eax, 0x10
mov cl, 0xf
call fcn.00402d1c
lea edx, [ebp - 0x448]
mov eax, dword [ebp - 0x44]
call fcn.004094a8
mov edx, dword [ebp - 0x448]
lea eax, [ebp - 0x54c]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x54c]
mov eax, dword [0x842148]
add eax, 0x20
mov cl, 0xf
call fcn.00402d1c
lea edx, [ebp - 0x448]
mov eax, dword [ebp - 0x48]
call fcn.004094a8
mov edx, dword [ebp - 0x448]
lea eax, [ebp - 0x54c]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x54c]
mov eax, dword [0x841ea0]
add eax, 0x20
mov cl, 0xf
call fcn.00402d1c
lea edx, [ebp - 0x448]
mov eax, dword [ebp - 0x3c]
call fcn.004094a8
mov edx, dword [ebp - 0x448]
lea eax, [ebp - 0x54c]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x54c]
mov eax, dword [0x842148]
add eax, 0x30
mov cl, 0xf
call fcn.00402d1c
lea edx, [ebp - 0x448]
mov eax, dword [ebp - 0x48]
call fcn.004094a8
mov edx, dword [ebp - 0x448]
lea eax, [ebp - 0x54c]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x54c]
mov eax, dword [0x841ea0]
add eax, 0x30
mov cl, 0xf
call fcn.00402d1c
mov eax, dword [ebp - 0x414]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x410]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x40c]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x408]
mov dword [ebp - 0x34], eax
push dword [ebp - 0x34]
push dword [ebp - 0x38]
lea eax, [ebp - 0x448]
call fcn.00787dd0
mov edx, dword [ebp - 0x448]
lea eax, [ebp - 0x54c]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x54c]
mov eax, dword [0x841868]
mov cl, 0xf
call fcn.00402d1c
push dword [ebp - 0x34]
push dword [ebp - 0x38]
lea eax, [ebp - 0x448]
call fcn.00787e34
mov edx, dword [ebp - 0x448]
lea eax, [ebp - 0x54c]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x54c]
mov eax, dword [0x840960]
mov cl, 0xf
call fcn.00402d1c
fld qword [ebp - 0x38]
fcomp dword [0x63ac7c]
fnstsw ax
sahf
jae 0x63a5fe
mov eax, dword [0x840c14]
mov word [eax], 0x5301
jmp 0x63a608
mov eax, dword [0x840c14]
mov word [eax], 0x4e01
push dword [ebp - 0x2c]
push dword [ebp - 0x30]
lea eax, [ebp - 0x448]
call fcn.00787dd0
mov edx, dword [ebp - 0x448]
lea eax, [ebp - 0x54c]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x54c]
mov eax, dword [0x841254]
mov cl, 0xf
call fcn.00402d1c
push dword [ebp - 0x2c]
push dword [ebp - 0x30]
lea eax, [ebp - 0x448]
call fcn.00787e34
mov edx, dword [ebp - 0x448]
lea eax, [ebp - 0x54c]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x54c]
mov eax, dword [0x8420d4]
mov cl, 0xf
call fcn.00402d1c
fld qword [ebp - 0x30]
fcomp dword [0x63ac7c]
fnstsw ax
sahf
jae 0x63a694
mov eax, dword [0x841eb8]
mov word [eax], 0x5701
jmp 0x63a69e
mov eax, dword [0x841eb8]
mov word [eax], 0x4501
mov eax, dword [ebp - 0x424]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x420]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x41c]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x418]
mov dword [ebp - 0x34], eax
push dword [ebp - 0x34]
push dword [ebp - 0x38]
lea eax, [ebp - 0x448]
call fcn.00787dd0
mov edx, dword [ebp - 0x448]
lea eax, [ebp - 0x54c]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x54c]
mov eax, dword [0x841868]
add eax, 0x10
mov cl, 0xf
call fcn.00402d1c
push dword [ebp - 0x34]
push dword [ebp - 0x38]
lea eax, [ebp - 0x448]
call fcn.00787e34
mov edx, dword [ebp - 0x448]
lea eax, [ebp - 0x54c]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x54c]
mov eax, dword [0x840960]
add eax, 0x10
mov cl, 0xf
call fcn.00402d1c
fld qword [ebp - 0x38]
fcomp dword [0x63ac7c]
fnstsw ax
sahf
jae 0x63a755
mov eax, dword [0x840c14]
mov word [eax + 0x10], 0x5301
jmp 0x63a760
mov eax, dword [0x840c14]
mov word [eax + 0x10], 0x4e01
push dword [ebp - 0x2c]
push dword [ebp - 0x30]
lea eax, [ebp - 0x448]
call fcn.00787dd0
mov edx, dword [ebp - 0x448]
lea eax, [ebp - 0x54c]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x54c]
mov eax, dword [0x841254]
add eax, 0x10
mov cl, 0xf
call fcn.00402d1c
push dword [ebp - 0x2c]
push dword [ebp - 0x30]
lea eax, [ebp - 0x448]
call fcn.00787e34
mov edx, dword [ebp - 0x448]
lea eax, [ebp - 0x54c]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x54c]
mov eax, dword [0x8420d4]
add eax, 0x10
mov cl, 0xf
call fcn.00402d1c
fld qword [ebp - 0x30]
fcomp dword [0x63ac7c]
fnstsw ax
sahf
jae 0x63a7f3
mov eax, dword [0x841eb8]
mov word [eax + 0x10], 0x5701
jmp 0x63a7fe
mov eax, dword [0x841eb8]
mov word [eax + 0x10], 0x4501
mov eax, dword [ebp - 0x434]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x430]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x42c]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x428]
mov dword [ebp - 0x34], eax
push dword [ebp - 0x34]
push dword [ebp - 0x38]
lea eax, [ebp - 0x448]
call fcn.00787dd0
mov edx, dword [ebp - 0x448]
lea eax, [ebp - 0x54c]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x54c]
mov eax, dword [0x841868]
add eax, 0x20
mov cl, 0xf
call fcn.00402d1c
push dword [ebp - 0x34]
push dword [ebp - 0x38]
lea eax, [ebp - 0x448]
call fcn.00787e34
mov edx, dword [ebp - 0x448]
lea eax, [ebp - 0x54c]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x54c]
mov eax, dword [0x840960]
add eax, 0x20
mov cl, 0xf
call fcn.00402d1c
fld qword [ebp - 0x38]
fcomp dword [0x63ac7c]
fnstsw ax
sahf
jae 0x63a8b5
mov eax, dword [0x840c14]
mov word [eax + 0x20], 0x5301
jmp 0x63a8c0
mov eax, dword [0x840c14]
mov word [eax + 0x20], 0x4e01
push dword [ebp - 0x2c]
push dword [ebp - 0x30]
lea eax, [ebp - 0x448]
call fcn.00787dd0
mov edx, dword [ebp - 0x448]
lea eax, [ebp - 0x54c]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x54c]
mov eax, dword [0x841254]
add eax, 0x20
mov cl, 0xf
call fcn.00402d1c
push dword [ebp - 0x2c]
push dword [ebp - 0x30]
lea eax, [ebp - 0x448]
call fcn.00787e34
mov edx, dword [ebp - 0x448]
lea eax, [ebp - 0x54c]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x54c]
mov eax, dword [0x8420d4]
add eax, 0x20
mov cl, 0xf
call fcn.00402d1c
fld qword [ebp - 0x30]
fcomp dword [0x63ac7c]
fnstsw ax
sahf
jae 0x63a953
mov eax, dword [0x841eb8]
mov word [eax + 0x20], 0x5701
jmp 0x63a95e
mov eax, dword [0x841eb8]
mov word [eax + 0x20], 0x4501
mov eax, dword [ebp - 0x444]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x440]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x43c]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x438]
mov dword [ebp - 0x34], eax
push dword [ebp - 0x34]
push dword [ebp - 0x38]
lea eax, [ebp - 0x448]
call fcn.00787dd0
mov edx, dword [ebp - 0x448]
lea eax, [ebp - 0x54c]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x54c]
mov eax, dword [0x841868]
add eax, 0x30
mov cl, 0xf
call fcn.00402d1c
push dword [ebp - 0x34]
push dword [ebp - 0x38]
lea eax, [ebp - 0x448]
call fcn.00787e34
mov edx, dword [ebp - 0x448]
lea eax, [ebp - 0x54c]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x54c]
mov eax, dword [0x840960]
add eax, 0x30
mov cl, 0xf
call fcn.00402d1c
fld qword [ebp - 0x38]
fcomp dword [0x63ac7c]
fnstsw ax
sahf
jae 0x63aa15
mov eax, dword [0x840c14]
mov word [eax + 0x30], 0x5301
jmp 0x63aa20
mov eax, dword [0x840c14]
mov word [eax + 0x30], 0x4e01
push dword [ebp - 0x2c]
push dword [ebp - 0x30]
lea eax, [ebp - 0x448]
call fcn.00787dd0
mov edx, dword [ebp - 0x448]
lea eax, [ebp - 0x54c]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x54c]
mov eax, dword [0x841254]
add eax, 0x30
mov cl, 0xf
call fcn.00402d1c
push dword [ebp - 0x2c]
push dword [ebp - 0x30]
lea eax, [ebp - 0x448]
call fcn.00787e34
mov edx, dword [ebp - 0x448]
lea eax, [ebp - 0x54c]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x54c]
mov eax, dword [0x8420d4]
add eax, 0x30
mov cl, 0xf
call fcn.00402d1c
fld qword [ebp - 0x30]
fcomp dword [0x63ac7c]
fnstsw ax
sahf
jae 0x63aab3
mov eax, dword [0x841eb8]
mov word [eax + 0x30], 0x5701
jmp 0x63aabe
mov eax, dword [0x841eb8]
mov word [eax + 0x30], 0x4501
cmp byte [ebp - 0x4d], 0
jne 0x63aad5
mov dword [ebp - 0xc], 2
call fcn.0040396c
jmp 0x63ab99
lea eax, [ebp - 0x448]
mov edx, dword [0x842148]
call fcn.00404094
mov eax, dword [ebp - 0x448]
call fcn.00409514
mov edx, dword [0x841c7c]
mov dword [edx], eax
lea eax, [ebp - 0x448]
mov edx, dword [0x841ea0]
call fcn.00404094
mov eax, dword [ebp - 0x448]
call fcn.00409514
mov edx, dword [0x8419f8]
mov dword [edx], eax
xor eax, eax
call fcn.006a0380
mov eax, dword [0x84211c]
mov eax, dword [eax]
mov dword [ebp - 0x24], eax
mov eax, dword [0x8420d0]
mov eax, dword [eax]
mov dword [ebp - 0x28], eax
mov eax, dword [0x84211c]
mov edx, dword [ebp - 0x1c]
mov dword [eax], edx
mov eax, dword [0x8420d0]
mov edx, dword [ebp - 0x20]
mov dword [eax], edx
mov eax, dword [0x8415a0]
mov eax, dword [eax]
xor ecx, ecx
xor edx, edx
call fcn.00762f84
call fcn.007a11a0
mov eax, dword [0x8415a0]
mov eax, dword [eax]
mov edx, dword [ebp - 0x18]
call fcn.00760cc8
mov eax, dword [0x84211c]
mov edx, dword [ebp - 0x24]
mov dword [eax], edx
mov eax, dword [0x8420d0]
mov edx, dword [ebp - 0x28]
mov dword [eax], edx
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x63ab99
ret
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x63ac14
lea eax, [ebp - 0x44c]
mov edx, 2
call fcn.00403e98
lea eax, [ebp - 0x404]
mov edx, dword [0x408370]
call fcn.00404838
lea eax, [ebp - 0x27c]
mov edx, 2
call fcn.00403e98
lea eax, [ebp - 0x254]
call fcn.00403e74
lea eax, [ebp - 0x6c]
call fcn.00403e74
lea eax, [ebp - 0x4c]
call fcn.00403e74
lea eax, [ebp - 0x18]
mov edx, 3
call fcn.00403e98
lea eax, [ebp - 8]
mov edx, 2
call fcn.00403e98
ret