Function at 0x600d60
Capabilities:
Reference sql statements
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [0x93ee7c]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
lea eax, [esp - 0x134]
cmp eax, dword [ecx + 8]
jbe 0x603dd7
sub esp, 0x1b4
lea edi, [esp + 0x9c]
xor eax, eax
call fcn.00471ac5
mov ecx, dword [esp + 0x1b8]
mov edx, dword [ecx + 0x44]
test edx, edx
je 0x600f37
nop
mov word [esp + 0x4e], 0
mov edx, dword [esp + 0x9c]
test edx, edx
jne 0x600ef3
mov edx, dword [esp + 0xb4]
test edx, edx
jne 0x603dbe
mov edx, dword [esp + 0xa8]
add edx, 2
cmp edx, 2
jge 0x600e14
lea eax, [0x6e6720]
mov dword [esp], eax
call fcn.0040bb90
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x1b
lea ecx, [0x7256d4]
mov dword [eax], ecx
lea edx, [0x78aa3c]
mov dword [esp + 0x9c], edx
mov dword [esp + 0xa0], eax
xor eax, eax
mov ecx, dword [esp + 0x1b8]
movzx edx, byte [esp + 0xb0]
test dl, dl
je 0x600e74
mov edx, dword [esp + 0xa8]
add edx, 2
lea ebx, [esp + 0x9c]
cmp dword [ebx + 0x10], edx
jge 0x600e74
lea eax, [0x6e6720]
mov dword [esp], eax
call fcn.0040bb90
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x36
lea ecx, [0x72fbd1]
mov dword [eax], ecx
lea edx, [0x78aa3c]
mov dword [esp + 0x9c], edx
mov dword [esp + 0xa0], eax
mov ecx, dword [esp + 0x1b8]
jmp 0x600ef3
mov edx, dword [esp + 0xac]
mov ebx, dword [esp + 0xa8]
lea ebp, [ebx + 2]
mov esi, dword [esp + 0xa4]
cmp edx, ebp
jae 0x600ed5
mov dword [esp + 0x94], ebx
mov dword [esp], esi
mov dword [esp + 4], ebp
mov dword [esp + 8], edx
mov dword [esp + 0xc], 2
lea eax, [0x6db200]
mov dword [esp + 0x10], eax
call fcn.0046c670
mov esi, dword [esp + 0x14]
mov ebp, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
xor eax, eax
mov ecx, dword [esp + 0x1b8]
mov ebx, dword [esp + 0x94]
movzx edi, word [esp + 0x4e]
mov word [esi + ebx], di
mov dword [esp + 0xa8], ebp
mov dword [esp + 0xac], edx
mov dword [esp + 0xa4], esi
lea eax, [0x606db0]
mov dword [esp + 0x1ac], eax
mov dword [esp + 0x1b0], ecx
lea eax, [esp + 0x9c]
mov dword [esp], eax
mov dword [esp + 4], 2
mov byte [esp + 8], 0
lea eax, [esp + 0x1ac]
mov dword [esp + 0xc], eax
call fcn.005a6290
xor eax, eax
mov ecx, dword [esp + 0x1b8]
mov edx, dword [ecx + 0x5c]
test edx, edx
je 0x601108
movzx edx, byte [esp + 0x1bc]
test dl, dl
jne 0x601110
nop
mov word [esp + 0x4c], 0
mov byte [esp + 0x4d], 0xb
mov ebx, dword [esp + 0x9c]
test ebx, ebx
jne 0x6010ba
mov ebx, dword [esp + 0xb4]
test ebx, ebx
jne 0x603da6
mov ebx, dword [esp + 0xa8]
add ebx, 2
cmp ebx, 2
jge 0x600fd2
lea eax, [0x6e6720]
mov dword [esp], eax
call fcn.0040bb90
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x1b
lea ecx, [0x7256d4]
mov dword [eax], ecx
lea edx, [0x78aa3c]
mov dword [esp + 0x9c], edx
mov dword [esp + 0xa0], eax
xor eax, eax
mov ecx, dword [esp + 0x1b8]
movzx edx, byte [esp + 0x1bc]
movzx ebx, byte [esp + 0xb0]
test bl, bl
je 0x601035
mov ebx, dword [esp + 0xa8]
add ebx, 2
lea ebp, [esp + 0x9c]
cmp dword [ebp + 0x10], ebx
jge 0x601035
lea eax, [0x6e6720]
mov dword [esp], eax
call fcn.0040bb90
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x36
lea ecx, [0x72fbd1]
mov dword [eax], ecx
lea edx, [0x78aa3c]
mov dword [esp + 0x9c], edx
mov dword [esp + 0xa0], eax
mov ecx, dword [esp + 0x1b8]
jmp 0x6010ba
mov ebx, dword [esp + 0xac]
mov ebp, dword [esp + 0xa8]
lea esi, [ebp + 2]
mov edi, dword [esp + 0xa4]
cmp ebx, esi
jae 0x60109c
mov dword [esp + 0x94], ebp
mov dword [esp], edi
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 2
lea eax, [0x6db200]
mov dword [esp + 0x10], eax
call fcn.0046c670
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x1b8]
movzx edx, byte [esp + 0x1bc]
mov ebp, dword [esp + 0x94]
movzx eax, word [esp + 0x4c]
mov word [edi + ebp], ax
mov dword [esp + 0xa8], esi
mov dword [esp + 0xac], ebx
mov dword [esp + 0xa4], edi
lea eax, [0x606ba0]
mov dword [esp + 0x1a4], eax
mov dword [esp + 0x1a8], ecx
lea eax, [esp + 0x9c]
mov dword [esp], eax
mov dword [esp + 4], 2
mov byte [esp + 8], 0
lea eax, [esp + 0x1a4]
mov dword [esp + 0xc], eax
call fcn.005a6290
xor eax, eax
mov ecx, dword [esp + 0x1b8]
movzx edx, byte [esp + 0x1bc]
jmp 0x601110
movzx edx, byte [esp + 0x1bc]
movzx ebx, byte [ecx + 0x64]
test bl, bl
je 0x6012d8
test dl, dl
jne 0x6012d8
nop
mov word [esp + 0x4a], 0
mov byte [esp + 0x4b], 0x23
mov ebx, dword [esp + 0x9c]
test ebx, ebx
jne 0x60128c
mov ebx, dword [esp + 0xb4]
test ebx, ebx
jne 0x603d8e
mov ebx, dword [esp + 0xa8]
add ebx, 2
cmp ebx, 2
jge 0x6011a4
lea eax, [0x6e6720]
mov dword [esp], eax
call fcn.0040bb90
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x1b
lea ecx, [0x7256d4]
mov dword [eax], ecx
lea edx, [0x78aa3c]
mov dword [esp + 0x9c], edx
mov dword [esp + 0xa0], eax
xor eax, eax
mov ecx, dword [esp + 0x1b8]
movzx edx, byte [esp + 0x1bc]
movzx ebx, byte [esp + 0xb0]
test bl, bl
je 0x601207
mov ebx, dword [esp + 0xa8]
add ebx, 2
lea ebp, [esp + 0x9c]
cmp dword [ebp + 0x10], ebx
jge 0x601207
lea eax, [0x6e6720]
mov dword [esp], eax
call fcn.0040bb90
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x36
lea ecx, [0x72fbd1]
mov dword [eax], ecx
lea edx, [0x78aa3c]
mov dword [esp + 0x9c], edx
mov dword [esp + 0xa0], eax
mov ecx, dword [esp + 0x1b8]
jmp 0x60128c
mov ebx, dword [esp + 0xac]
mov ebp, dword [esp + 0xa8]
lea esi, [ebp + 2]
mov edi, dword [esp + 0xa4]
cmp ebx, esi
jae 0x60126e
mov dword [esp + 0x94], ebp
mov dword [esp], edi
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 2
lea eax, [0x6db200]
mov dword [esp + 0x10], eax
call fcn.0046c670
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x1b8]
movzx edx, byte [esp + 0x1bc]
mov ebp, dword [esp + 0x94]
movzx eax, word [esp + 0x4a]
mov word [edi + ebp], ax
mov dword [esp + 0xa8], esi
mov dword [esp + 0xac], ebx
mov dword [esp + 0xa4], edi
lea eax, [0x6069e0]
mov dword [esp + 0x19c], eax
mov dword [esp + 0x1a0], ecx
lea eax, [esp + 0x9c]
mov dword [esp], eax
mov dword [esp + 4], 2
mov byte [esp + 8], 0
lea eax, [esp + 0x19c]
mov dword [esp + 0xc], eax
call fcn.005a6290
xor eax, eax
mov ecx, dword [esp + 0x1b8]
movzx edx, byte [esp + 0x1bc]
movzx ebx, byte [ecx + 0x8c]
test bl, bl
je 0x60149e
test dl, dl
jne 0x60149e
nop
mov word [esp + 0x48], 0x1ff
mov ebx, dword [esp + 0x9c]
test ebx, ebx
jne 0x601452
mov ebx, dword [esp + 0xb4]
test ebx, ebx
jne 0x603d76
mov ebx, dword [esp + 0xa8]
add ebx, 2
cmp ebx, 2
jge 0x60136a
lea eax, [0x6e6720]
mov dword [esp], eax
call fcn.0040bb90
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x1b
lea ecx, [0x7256d4]
mov dword [eax], ecx
lea edx, [0x78aa3c]
mov dword [esp + 0x9c], edx
mov dword [esp + 0xa0], eax
xor eax, eax
mov ecx, dword [esp + 0x1b8]
movzx edx, byte [esp + 0x1bc]
movzx ebx, byte [esp + 0xb0]
test bl, bl
je 0x6013cd
mov ebx, dword [esp + 0xa8]
add ebx, 2
lea ebp, [esp + 0x9c]
cmp dword [ebp + 0x10], ebx
jge 0x6013cd
lea eax, [0x6e6720]
mov dword [esp], eax
call fcn.0040bb90
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x36
lea ecx, [0x72fbd1]
mov dword [eax], ecx
lea edx, [0x78aa3c]
mov dword [esp + 0x9c], edx
mov dword [esp + 0xa0], eax
mov ecx, dword [esp + 0x1b8]
jmp 0x601452
mov ebx, dword [esp + 0xac]
mov ebp, dword [esp + 0xa8]
lea esi, [ebp + 2]
mov edi, dword [esp + 0xa4]
cmp ebx, esi
jae 0x601434
mov dword [esp + 0x94], ebp
mov dword [esp], edi
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 2
lea eax, [0x6db200]
mov dword [esp + 0x10], eax
call fcn.0046c670
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x1b8]
movzx edx, byte [esp + 0x1bc]
mov ebp, dword [esp + 0x94]
movzx eax, word [esp + 0x48]
mov word [edi + ebp], ax
mov dword [esp + 0xa8], esi
mov dword [esp + 0xac], ebx
mov dword [esp + 0xa4], edi
lea eax, [0x6067c0]
mov dword [esp + 0x194], eax
mov dword [esp + 0x198], ecx
lea eax, [esp + 0x9c]
mov dword [esp], eax
mov dword [esp + 4], 2
mov byte [esp + 8], 0
lea eax, [esp + 0x194]
mov dword [esp + 0xc], eax
call fcn.005a6290
xor eax, eax
mov ecx, dword [esp + 0x1b8]
movzx edx, byte [esp + 0x1bc]
movzx ebx, byte [ecx + 0x9c]
test bl, bl
je 0x60178e
test dl, dl
jne 0x60178e
nop
mov word [esp + 0x46], 0
mov byte [esp + 0x47], 0x17
mov ebx, dword [esp + 0x9c]
test ebx, ebx
jne 0x601625
mov ebx, dword [esp + 0xb4]
test ebx, ebx
jne 0x603d5e
mov ebx, dword [esp + 0xa8]
add ebx, 2
cmp ebx, 2
jge 0x601535
lea eax, [0x6e6720]
mov dword [esp], eax
call fcn.0040bb90
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x1b
lea ecx, [0x7256d4]
mov dword [eax], ecx
lea edx, [0x78aa3c]
mov dword [esp + 0x9c], edx
mov dword [esp + 0xa0], eax
xor eax, eax
mov ecx, dword [esp + 0x1b8]
movzx edx, byte [esp + 0x1bc]
movzx ebx, byte [esp + 0xb0]
test bl, bl
je 0x6015a0
mov ebx, dword [esp + 0xa8]
add ebx, 2
lea ebp, [esp + 0x9c]
cmp dword [ebp + 0x10], ebx
jge 0x6015a0
lea eax, [0x6e6720]
mov dword [esp], eax
call fcn.0040bb90
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x36
lea ecx, [0x72fbd1]
mov dword [eax], ecx
lea edx, [0x78aa3c]
mov dword [esp + 0x9c], edx
mov dword [esp + 0xa0], eax
mov ecx, dword [esp + 0x1b8]
movzx edx, byte [esp + 0x1bc]
jmp 0x601625
mov ebx, dword [esp + 0xac]
mov ebp, dword [esp + 0xa8]
lea esi, [ebp + 2]
mov edi, dword [esp + 0xa4]
cmp ebx, esi
jae 0x601607
mov dword [esp + 0x94], ebp
mov dword [esp], edi
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 2
lea eax, [0x6db200]
mov dword [esp + 0x10], eax
call fcn.0046c670
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x1b8]
movzx edx, byte [esp + 0x1bc]
mov ebp, dword [esp + 0x94]
movzx eax, word [esp + 0x46]
mov word [edi + ebp], ax
mov dword [esp + 0xa8], esi
mov dword [esp + 0xac], ebx
mov dword [esp + 0xa4], edi
nop
mov word [esp + 0x44], 0
mov ebx, dword [esp + 0x9c]
test ebx, ebx
jne 0x60178e
mov ebx, dword [esp + 0xb4]
test ebx, ebx
jne 0x603d46
mov ebx, dword [esp + 0xa8]
add ebx, 2
cmp ebx, 2
jge 0x60169e
lea eax, [0x6e6720]
mov dword [esp], eax
call fcn.0040bb90
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x1b
lea ecx, [0x7256d4]
mov dword [eax], ecx
lea edx, [0x78aa3c]
mov dword [esp + 0x9c], edx
mov dword [esp + 0xa0], eax
mov ecx, dword [esp + 0x1b8]
movzx edx, byte [esp + 0x1bc]
movzx ebx, byte [esp + 0xb0]
test bl, bl
je 0x601709
mov ebx, dword [esp + 0xa8]
add ebx, 2
lea ebp, [esp + 0x9c]
cmp dword [ebp + 0x10], ebx
jge 0x601709
lea eax, [0x6e6720]
mov dword [esp], eax
call fcn.0040bb90
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x36
lea ecx, [0x72fbd1]
mov dword [eax], ecx
lea edx, [0x78aa3c]
mov dword [esp + 0x9c], edx
mov dword [esp + 0xa0], eax
mov ecx, dword [esp + 0x1b8]
movzx edx, byte [esp + 0x1bc]
jmp 0x60178e
mov ebx, dword [esp + 0xac]
mov ebp, dword [esp + 0xa8]
lea esi, [ebp + 2]
mov eax, dword [esp + 0xa4]
cmp ebx, esi
jae 0x601770
mov dword [esp + 0x94], ebp
mov dword [esp], eax
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 2
lea eax, [0x6db200]
mov dword [esp + 0x10], eax
call fcn.0046c670
mov eax, dword [esp + 0x14]
mov esi, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x1b8]
movzx edx, byte [esp + 0x1bc]
mov ebp, dword [esp + 0x94]
movzx edi, word [esp + 0x44]
mov word [eax + ebp], di
mov dword [esp + 0xa8], esi
mov dword [esp + 0xac], ebx
mov dword [esp + 0xa4], eax
movzx ebx, byte [ecx + 0xac]
test bl, bl
je 0x601a74
nop
mov word [esp + 0x42], 0
mov byte [esp + 0x43], 0x12
mov ebx, dword [esp + 0x9c]
test ebx, ebx
jne 0x60190b
mov ebx, dword [esp + 0xb4]
test ebx, ebx
jne 0x603d2e
mov ebx, dword [esp + 0xa8]
add ebx, 2
cmp ebx, 2
jge 0x60181b
lea eax, [0x6e6720]
mov dword [esp], eax
call fcn.0040bb90
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x1b
lea ecx, [0x7256d4]
mov dword [eax], ecx
lea edx, [0x78aa3c]
mov dword [esp + 0x9c], edx
mov dword [esp + 0xa0], eax
mov ecx, dword [esp + 0x1b8]
movzx edx, byte [esp + 0x1bc]
movzx ebx, byte [esp + 0xb0]
test bl, bl
je 0x601886
mov ebx, dword [esp + 0xa8]
add ebx, 2
lea ebp, [esp + 0x9c]
cmp dword [ebp + 0x10], ebx
jge 0x601886
lea eax, [0x6e6720]
mov dword [esp], eax
call fcn.0040bb90
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x36
lea ecx, [0x72fbd1]
mov dword [eax], ecx
lea edx, [0x78aa3c]
mov dword [esp + 0x9c], edx
mov dword [esp + 0xa0], eax
mov ecx, dword [esp + 0x1b8]
movzx edx, byte [esp + 0x1bc]
jmp 0x60190b
mov ebx, dword [esp + 0xac]
mov ebp, dword [esp + 0xa8]
lea esi, [ebp + 2]
mov eax, dword [esp + 0xa4]
cmp ebx, esi
jae 0x6018ed
mov dword [esp + 0x94], ebp
mov dword [esp], eax
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 2
lea eax, [0x6db200]
mov dword [esp + 0x10], eax
call fcn.0046c670
mov eax, dword [esp + 0x14]
mov esi, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x1b8]
movzx edx, byte [esp + 0x1bc]
mov ebp, dword [esp + 0x94]
movzx edi, word [esp + 0x42]
mov word [eax + ebp], di
mov dword [esp + 0xa8], esi
mov dword [esp + 0xac], ebx
mov dword [esp + 0xa4], eax
nop
mov word [esp + 0x40], 0
mov ebx, dword [esp + 0x9c]
test ebx, ebx
jne 0x601a74
mov ebx, dword [esp + 0xb4]
test ebx, ebx
jne 0x603d16
mov ebx, dword [esp + 0xa8]
add ebx, 2
cmp ebx, 2
jge 0x601984
lea eax, [0x6e6720]
mov dword [esp], eax
call fcn.0040bb90
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x1b
lea ecx, [0x7256d4]
mov dword [eax], ecx
lea edx, [0x78aa3c]
mov dword [esp + 0x9c], edx
mov dword [esp + 0xa0], eax
mov ecx, dword [esp + 0x1b8]
movzx edx, byte [esp + 0x1bc]
movzx ebx, byte [esp + 0xb0]
test bl, bl
je 0x6019ef
mov ebx, dword [esp + 0xa8]
add ebx, 2
lea ebp, [esp + 0x9c]
cmp dword [ebp + 0x10], ebx
jge 0x6019ef
lea eax, [0x6e6720]
mov dword [esp], eax
call fcn.0040bb90
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x36
lea ecx, [0x72fbd1]
mov dword [eax], ecx
lea edx, [0x78aa3c]
mov dword [esp + 0x9c], edx
mov dword [esp + 0xa0], eax
mov ecx, dword [esp + 0x1b8]
movzx edx, byte [esp + 0x1bc]
jmp 0x601a74
mov ebx, dword [esp + 0xac]
mov ebp, dword [esp + 0xa8]
lea esi, [ebp + 2]
mov eax, dword [esp + 0xa4]
cmp ebx, esi
jae 0x601a56
mov dword [esp + 0x94], ebp
mov dword [esp], eax
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 2
lea eax, [0x6db200]
mov dword [esp + 0x10], eax
call fcn.0046c670
mov eax, dword [esp + 0x14]
mov esi, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x1b8]
movzx edx, byte [esp + 0x1bc]
mov ebp, dword [esp + 0x94]
movzx edi, word [esp + 0x40]
mov word [eax + ebp], di
mov dword [esp + 0xa8], esi
mov dword [esp + 0xac], ebx
mov dword [esp + 0xa4], eax
movzx ebx, byte [ecx + 0xd4]
test bl, bl
je 0x601d5a
nop
mov word [esp + 0x3e], 0
mov byte [esp + 0x3f], 0x2a
mov ebx, dword [esp + 0x9c]
test ebx, ebx
jne 0x601bf1
mov ebx, dword [esp + 0xb4]
test ebx, ebx
jne 0x603cfe
mov ebx, dword [esp + 0xa8]
add ebx, 2
cmp ebx, 2
jge 0x601b01
lea eax, [0x6e6720]
mov dword [esp], eax
call fcn.0040bb90
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x1b
lea ecx, [0x7256d4]
mov dword [eax], ecx
lea edx, [0x78aa3c]
mov dword [esp + 0x9c], edx
mov dword [esp + 0xa0], eax
mov ecx, dword [esp + 0x1b8]
movzx edx, byte [esp + 0x1bc]
movzx ebx, byte [esp + 0xb0]
test bl, bl
je 0x601b6c
mov ebx, dword [esp + 0xa8]
add ebx, 2
lea ebp, [esp + 0x9c]
cmp dword [ebp + 0x10], ebx
jge 0x601b6c
lea eax, [0x6e6720]
mov dword [esp], eax
call fcn.0040bb90
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x36
lea ecx, [0x72fbd1]
mov dword [eax], ecx
lea edx, [0x78aa3c]
mov dword [esp + 0x9c], edx
mov dword [esp + 0xa0], eax
mov ecx, dword [esp + 0x1b8]
movzx edx, byte [esp + 0x1bc]
jmp 0x601bf1
mov ebx, dword [esp + 0xac]
mov ebp, dword [esp + 0xa8]
lea esi, [ebp + 2]
mov eax, dword [esp + 0xa4]
cmp ebx, esi
jae 0x601bd3
mov dword [esp + 0x94], ebp
mov dword [esp], eax
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 2
lea eax, [0x6db200]
mov dword [esp + 0x10], eax
call fcn.0046c670
mov eax, dword [esp + 0x14]
mov esi, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x1b8]
movzx edx, byte [esp + 0x1bc]
mov ebp, dword [esp + 0x94]
movzx edi, word [esp + 0x3e]
mov word [eax + ebp], di
mov dword [esp + 0xa8], esi
mov dword [esp + 0xac], ebx
mov dword [esp + 0xa4], eax
nop
mov word [esp + 0x3c], 0
mov ebx, dword [esp + 0x9c]
test ebx, ebx
jne 0x601d5a
mov ebx, dword [esp + 0xb4]
test ebx, ebx
jne 0x603ce6
mov ebx, dword [esp + 0xa8]
add ebx, 2
cmp ebx, 2
jge 0x601c6a
lea eax, [0x6e6720]
mov dword [esp], eax
call fcn.0040bb90
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x1b
lea ecx, [0x7256d4]
mov dword [eax], ecx
lea edx, [0x78aa3c]
mov dword [esp + 0x9c], edx
mov dword [esp + 0xa0], eax
mov ecx, dword [esp + 0x1b8]
movzx edx, byte [esp + 0x1bc]
movzx ebx, byte [esp + 0xb0]
test bl, bl
je 0x601cd5
mov ebx, dword [esp + 0xa8]
add ebx, 2
lea ebp, [esp + 0x9c]
cmp dword [ebp + 0x10], ebx
jge 0x601cd5
lea eax, [0x6e6720]
mov dword [esp], eax
call fcn.0040bb90
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x36
lea ecx, [0x72fbd1]
mov dword [eax], ecx
lea edx, [0x78aa3c]
mov dword [esp + 0x9c], edx
mov dword [esp + 0xa0], eax
mov ecx, dword [esp + 0x1b8]
movzx edx, byte [esp + 0x1bc]
jmp 0x601d5a
mov ebx, dword [esp + 0xac]
mov ebp, dword [esp + 0xa8]
lea esi, [ebp + 2]
mov eax, dword [esp + 0xa4]
cmp ebx, esi
jae 0x601d3c
mov dword [esp + 0x94], ebp
mov dword [esp], eax
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 2
lea eax, [0x6db200]
mov dword [esp + 0x10], eax
call fcn.0046c670
mov eax, dword [esp + 0x14]
mov esi, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x1b8]
movzx edx, byte [esp + 0x1bc]
mov ebp, dword [esp + 0x94]
movzx edi, word [esp + 0x3c]
mov word [eax + ebp], di
mov dword [esp + 0xa8], esi
mov dword [esp + 0xac], ebx
mov dword [esp + 0xa4], eax
mov ebx, dword [ecx + 0xfc]
test ebx, ebx
je 0x601f18
nop
mov word [esp + 0x3a], 0
mov byte [esp + 0x3b], 0x39
mov eax, dword [esp + 0x9c]
test eax, eax
jne 0x601ece
mov eax, dword [esp + 0xb4]
test eax, eax
jne 0x603cce
mov eax, dword [esp + 0xa8]
add eax, 2
cmp eax, 2
jge 0x601de6
lea eax, [0x6e6720]
mov dword [esp], eax
call fcn.0040bb90
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x1b
lea ecx, [0x7256d4]
mov dword [eax], ecx
lea edx, [0x78aa3c]
mov dword [esp + 0x9c], edx
mov dword [esp + 0xa0], eax
mov ecx, dword [esp + 0x1b8]
movzx edx, byte [esp + 0x1bc]
movzx eax, byte [esp + 0xb0]
test al, al
je 0x601e49
mov eax, dword [esp + 0xa8]
add eax, 2
lea ebx, [esp + 0x9c]
cmp dword [ebx + 0x10], eax
jge 0x601e49
lea eax, [0x6e6720]
mov dword [esp], eax
call fcn.0040bb90
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x36
lea ecx, [0x72fbd1]
mov dword [eax], ecx
lea edx, [0x78aa3c]
mov dword [esp + 0x9c], edx
mov dword [esp + 0xa0], eax
mov ecx, dword [esp + 0x1b8]
jmp 0x601ece
mov eax, dword [esp + 0xac]
mov ebx, dword [esp + 0xa8]
lea ebp, [ebx + 2]
mov esi, dword [esp + 0xa4]
cmp eax, ebp
jae 0x601eb0
mov dword [esp + 0x94], ebx
mov dword [esp], esi
mov dword [esp + 4], ebp
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
lea eax, [0x6db200]
mov dword [esp + 0x10], eax
call fcn.0046c670
mov esi, dword [esp + 0x14]
mov ebp, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x1b8]
movzx edx, byte [esp + 0x1bc]
mov ebx, dword [esp + 0x94]
movzx edi, word [esp + 0x3a]
mov word [esi + ebx], di
mov dword [esp + 0xa8], ebp
mov dword [esp + 0xac], eax
mov dword [esp + 0xa4], esi
lea eax, [0x6065f0]
mov dword [esp + 0x18c], eax
mov dword [esp + 0x190], ecx
lea eax, [esp + 0x9c]
mov dword [esp], eax
mov dword [esp + 4], 2
mov byte [esp + 8], 0
lea eax, [esp + 0x18c]
mov dword [esp + 0xc], eax
call fcn.005a6290
mov ecx, dword [esp + 0x1b8]
movzx edx, byte [esp + 0x1bc]
mov ebx, dword [ecx + 0x10c]
test ebx, ebx
je 0x6020d1
nop
mov word [esp + 0x38], 0xdfe
mov eax, dword [esp + 0x9c]
test eax, eax
jne 0x602087
mov eax, dword [esp + 0xb4]
test eax, eax
jne 0x603cb6
mov eax, dword [esp + 0xa8]
add eax, 2
cmp eax, 2
jge 0x601f9f
lea eax, [0x6e6720]
mov dword [esp], eax
call fcn.0040bb90
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x1b
lea ecx, [0x7256d4]
mov dword [eax], ecx
lea edx, [0x78aa3c]
mov dword [esp + 0x9c], edx
mov dword [esp + 0xa0], eax
mov ecx, dword [esp + 0x1b8]
movzx edx, byte [esp + 0x1bc]
movzx eax, byte [esp + 0xb0]
test al, al
je 0x602002
mov eax, dword [esp + 0xa8]
add eax, 2
lea ebx, [esp + 0x9c]
cmp dword [ebx + 0x10], eax
jge 0x602002
lea eax, [0x6e6720]
mov dword [esp], eax
call fcn.0040bb90
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x36
lea ecx, [0x72fbd1]
mov dword [eax], ecx
lea edx, [0x78aa3c]
mov dword [esp + 0x9c], edx
mov dword [esp + 0xa0], eax
mov ecx, dword [esp + 0x1b8]
jmp 0x602087
mov eax, dword [esp + 0xac]
mov ebx, dword [esp + 0xa8]
lea ebp, [ebx + 2]
mov esi, dword [esp + 0xa4]
cmp eax, ebp
jae 0x602069
mov dword [esp + 0x94], ebx
mov dword [esp], esi
mov dword [esp + 4], ebp
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
lea eax, [0x6db200]
mov dword [esp + 0x10], eax
call fcn.0046c670
mov esi, dword [esp + 0x14]
mov ebp, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x1b8]
movzx edx, byte [esp + 0x1bc]
mov ebx, dword [esp + 0x94]
movzx edi, word [esp + 0x38]
mov word [esi + ebx], di
mov dword [esp + 0xa8], ebp
mov dword [esp + 0xac], eax
mov dword [esp + 0xa4], esi
lea eax, [0x606420]
mov dword [esp + 0x184], eax
mov dword [esp + 0x188], ecx
lea eax, [esp + 0x9c]
mov dword [esp], eax
mov dword [esp + 4], 2
mov byte [esp + 8], 0
lea eax, [esp + 0x184]
mov dword [esp + 0xc], eax
call fcn.005a6290
mov ecx, dword [esp + 0x1b8]
movzx edx, byte [esp + 0x1bc]
movzx ebx, byte [ecx + 0x48]
test bl, bl
je 0x6022cb
test dl, dl
jne 0x602272
nop
mov word [esp + 0x36], 0
mov byte [esp + 0x37], 5
mov eax, dword [esp + 0x9c]
test eax, eax
jne 0x602244
mov eax, dword [esp + 0xb4]
test eax, eax
jne 0x603c9e
mov eax, dword [esp + 0xa8]
add eax, 2
cmp eax, 2
jge 0x602163
lea eax, [0x6e6720]
mov dword [esp], eax
call fcn.0040bb90
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x1b
lea ecx, [0x7256d4]
mov dword [eax], ecx
lea edx, [0x78aa3c]
mov dword [esp + 0x9c], edx
mov dword [esp + 0xa0], eax
mov ecx, dword [esp + 0x1b8]
movzx edx, byte [esp + 0x1bc]
movzx eax, byte [esp + 0xb0]
test al, al
je 0x6021bf
mov eax, dword [esp + 0xa8]
add eax, 2
lea ebx, [esp + 0x9c]
cmp dword [ebx + 0x10], eax
jge 0x6021bf
lea eax, [0x6e6720]
mov dword [esp], eax
call fcn.0040bb90
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x36
lea ecx, [0x72fbd1]
mov dword [eax], ecx
lea edx, [0x78aa3c]
mov dword [esp + 0x9c], edx
mov dword [esp + 0xa0], eax
jmp 0x602244
mov eax, dword [esp + 0xac]
mov ebx, dword [esp + 0xa8]
lea ebp, [ebx + 2]
mov esi, dword [esp + 0xa4]
cmp eax, ebp
jae 0x602226
mov dword [esp + 0x94], ebx
mov dword [esp], esi
mov dword [esp + 4], ebp
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
lea eax, [0x6db200]
mov dword [esp + 0x10], eax
call fcn.0046c670
mov esi, dword [esp + 0x14]
mov ebp, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x1b8]
movzx edx, byte [esp + 0x1bc]
mov ebx, dword [esp + 0x94]
movzx edi, word [esp + 0x36]
mov word [esi + ebx], di
mov dword [esp + 0xa8], ebp
mov dword [esp + 0xac], eax
mov dword [esp + 0xa4], esi
lea eax, [esp + 0x9c]
mov dword [esp], eax
mov dword [esp + 4], 2
mov byte [esp + 8], 0
lea eax, [0x7387e8]
mov dword [esp + 0xc], eax
call fcn.005a6290
xor eax, eax
xor ecx, ecx
xor edx, edx
jmp 0x6022b4
mov dword [esp], 0
mov dword [esp + 4], 1
mov dword [esp + 8], 0
mov dword [esp + 0xc], 1
lea eax, [0x6db280]
mov dword [esp + 0x10], eax
call fcn.0046c670
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x1c]
mov word [eax], 5
mov edx, eax
mov eax, 1
mov ebx, edx
mov ebp, eax
movzx edx, byte [esp + 0x1bc]
mov eax, ecx
mov ecx, dword [esp + 0x1b8]
jmp 0x6022d1
xor eax, eax
xor ebx, ebx
xor ebp, ebp
mov esi, dword [ecx + 0x50]
test esi, esi
je 0x602510
test dl, dl
je 0x60232e
inc ebp
cmp eax, ebp
jae 0x602322
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
lea eax, [0x6db280]
mov dword [esp + 0x10], eax
call fcn.0046c670
mov ebx, dword [esp + 0x14]
mov ebp, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x1b8]
movzx edx, byte [esp + 0x1bc]
mov word [ebx + ebp*2 - 2], 0xa
jmp 0x602510
mov dword [esp + 0x54], ebp
mov dword [esp + 0x58], eax
mov dword [esp + 0xc8], ebx
nop
mov word [esp + 0x34], 0
mov byte [esp + 0x35], 0xa
mov esi, dword [esp + 0x9c]
test esi, esi
jne 0x6024b7
mov esi, dword [esp + 0xb4]
test esi, esi
jne 0x603c86
mov esi, dword [esp + 0xa8]
add esi, 2
cmp esi, 2
jge 0x6023ca
lea eax, [0x6e6720]
mov dword [esp], eax
call fcn.0040bb90
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x1b
lea ecx, [0x7256d4]
mov dword [eax], ecx
lea edx, [0x78aa3c]
mov dword [esp + 0x9c], edx
mov dword [esp + 0xa0], eax
mov eax, dword [esp + 0x58]
mov ecx, dword [esp + 0x1b8]
movzx edx, byte [esp + 0x1bc]
mov ebx, dword [esp + 0xc8]
mov ebp, dword [esp + 0x54]
movzx esi, byte [esp + 0xb0]
xchg esi, eax
test al, al
xchg esi, eax
je 0x60242f
mov esi, dword [esp + 0xa8]
add esi, 2
lea edi, [esp + 0x9c]
cmp dword [edi + 0x10], esi
jge 0x60242f
lea eax, [0x6e6720]
mov dword [esp], eax
call fcn.0040bb90
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x36
lea ecx, [0x72fbd1]
mov dword [eax], ecx
lea edx, [0x78aa3c]
mov dword [esp + 0x9c], edx
mov dword [esp + 0xa0], eax
mov ecx, dword [esp + 0x1b8]
jmp 0x6024b7
mov esi, dword [esp + 0xac]
mov edi, dword [esp + 0xa8]
lea edx, [edi + 2]
mov eax, dword [esp + 0xa4]
cmp esi, edx
jae 0x602499
mov dword [esp + 0x94], edi
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], esi
mov dword [esp + 0xc], 2
lea eax, [0x6db200]
mov dword [esp + 0x10], eax
call fcn.0046c670
mov eax, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
mov ecx, dword [esp + 0x1b8]
mov ebx, dword [esp + 0xc8]
mov ebp, dword [esp + 0x54]
mov edi, dword [esp + 0x94]
movzx ebx, word [esp + 0x34]
mov word [eax + edi], bx
mov dword [esp + 0xa8], edx
mov dword [esp + 0xac], esi
mov dword [esp + 0xa4], eax
lea eax, [0x6061f0]
mov dword [esp + 0x17c], eax
mov dword [esp + 0x180], ecx
lea eax, [esp + 0x9c]
mov dword [esp], eax
mov dword [esp + 4], 2
mov byte [esp + 8], 0
lea eax, [esp + 0x17c]
mov dword [esp + 0xc], eax
call fcn.005a6290
mov ecx, dword [esp + 0x1b8]
movzx edx, byte [esp + 0x1bc]
mov ebp, dword [esp + 0x54]
mov eax, dword [esp + 0x58]
mov ebx, dword [esp + 0xc8]
mov esi, dword [ecx + 0x78]
test esi, esi
je 0x602764
test dl, dl
je 0x60256d
inc ebp
cmp eax, ebp
jae 0x602561
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
lea eax, [0x6db280]
mov dword [esp + 0x10], eax
call fcn.0046c670
mov ebx, dword [esp + 0x14]
mov ebp, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x1b8]
movzx edx, byte [esp + 0x1bc]
mov word [ebx + ebp*2 - 2], 0xd
jmp 0x602764
mov dword [esp + 0x90], eax
mov dword [esp + 0x110], ebx
mov dword [esp + 0x8c], ebp
nop
mov word [esp + 0x32], 0
mov byte [esp + 0x33], 0xd
mov esi, dword [esp + 0x9c]
test esi, esi
jne 0x602705
mov esi, dword [esp + 0xb4]
test esi, esi
jne 0x603c6e
mov esi, dword [esp + 0xa8]
add esi, 2
cmp esi, 2
jge 0x602615
lea eax, [0x6e6720]
mov dword [esp], eax
call fcn.0040bb90
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x1b
lea ecx, [0x7256d4]
mov dword [eax], ecx
lea edx, [0x78aa3c]
mov dword [esp + 0x9c], edx
mov dword [esp + 0xa0], eax
mov eax, dword [esp + 0x90]
mov ecx, dword [esp + 0x1b8]
movzx edx, byte [esp + 0x1bc]
mov ebx, dword [esp + 0x110]
mov ebp, dword [esp + 0x8c]
movzx esi, byte [esp + 0xb0]
xchg esi, eax
test al, al
xchg esi, eax
je 0x60267a
mov esi, dword [esp + 0xa8]
add esi, 2
lea edi, [esp + 0x9c]
cmp dword [edi + 0x10], esi
jge 0x60267a
lea eax, [0x6e6720]
mov dword [esp], eax
call fcn.0040bb90
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x36
lea ecx, [0x72fbd1]
mov dword [eax], ecx
lea edx, [0x78aa3c]
mov dword [esp + 0x9c], edx
mov dword [esp + 0xa0], eax
mov ecx, dword [esp + 0x1b8]
jmp 0x602705
mov esi, dword [esp + 0xac]
mov edi, dword [esp + 0xa8]
lea edx, [edi + 2]
mov eax, dword [esp + 0xa4]
cmp esi, edx
jae 0x6026e7
mov dword [esp + 0x94], edi
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], esi
mov dword [esp + 0xc], 2
lea eax, [0x6db200]
mov dword [esp + 0x10], eax
call fcn.0046c670
mov eax, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
mov ecx, dword [esp + 0x1b8]
mov ebx, dword [esp + 0x110]
mov ebp, dword [esp + 0x8c]
mov edi, dword [esp + 0x94]
movzx ebx, word [esp + 0x32]
mov word [eax + edi], bx
mov dword [esp + 0xa8], edx
mov dword [esp + 0xac], esi
mov dword [esp + 0xa4], eax
lea eax, [0x605fc0]
mov dword [esp + 0x174], eax
mov dword [esp + 0x178], ecx
lea eax, [esp + 0x9c]
mov dword [esp], eax
mov dword [esp + 4], 2
mov byte [esp + 8], 0
lea eax, [esp + 0x174]
mov dword [esp + 0xc], eax
call fcn.005a6290
mov ecx, dword [esp + 0x1b8]
movzx edx, byte [esp + 0x1bc]
mov ebp, dword [esp + 0x8c]
mov eax, dword [esp + 0x90]
mov ebx, dword [esp + 0x110]
mov esi, dword [ecx + 0x84]
test esi, esi
je 0x6029bb
test dl, dl
je 0x6027c4
inc ebp
cmp eax, ebp
jae 0x6027b8
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
lea eax, [0x6db280]
mov dword [esp + 0x10], eax
call fcn.0046c670
mov ebx, dword [esp + 0x14]
mov ebp, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x1b8]
movzx edx, byte [esp + 0x1bc]
mov word [ebx + ebp*2 - 2], 0x32
jmp 0x6029bb
mov dword [esp + 0x10c], ebx
mov dword [esp + 0x88], ebp
mov dword [esp + 0x84], eax
nop
mov word [esp + 0x30], 0
mov byte [esp + 0x31], 0x32
mov esi, dword [esp + 0x9c]
test esi, esi
jne 0x60295c
mov esi, dword [esp + 0xb4]
test esi, esi
jne 0x603c56
mov esi, dword [esp + 0xa8]
add esi, 2
cmp esi, 2
jge 0x60286c
lea eax, [0x6e6720]
mov dword [esp], eax
call fcn.0040bb90
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x1b
lea ecx, [0x7256d4]
mov dword [eax], ecx
lea edx, [0x78aa3c]
mov dword [esp + 0x9c], edx
mov dword [esp + 0xa0], eax
mov eax, dword [esp + 0x84]
mov ecx, dword [esp + 0x1b8]
movzx edx, byte [esp + 0x1bc]
mov ebx, dword [esp + 0x10c]
mov ebp, dword [esp + 0x88]
movzx esi, byte [esp + 0xb0]
xchg esi, eax
test al, al
xchg esi, eax
je 0x6028d1
mov esi, dword [esp + 0xa8]
add esi, 2
lea edi, [esp + 0x9c]
cmp dword [edi + 0x10], esi
jge 0x6028d1
lea eax, [0x6e6720]
mov dword [esp], eax
call fcn.0040bb90
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x36
lea ecx, [0x72fbd1]
mov dword [eax], ecx
lea edx, [0x78aa3c]
mov dword [esp + 0x9c], edx
mov dword [esp + 0xa0], eax
mov ecx, dword [esp + 0x1b8]
jmp 0x60295c
mov esi, dword [esp + 0xac]
mov edi, dword [esp + 0xa8]
lea edx, [edi + 2]
mov eax, dword [esp + 0xa4]
cmp esi, edx
jae 0x60293e
mov dword [esp + 0x94], edi
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], esi
mov dword [esp + 0xc], 2
lea eax, [0x6db200]
mov dword [esp + 0x10], eax
call fcn.0046c670
mov eax, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
mov ecx, dword [esp + 0x1b8]
mov ebx, dword [esp + 0x10c]
mov ebp, dword [esp + 0x88]
mov edi, dword [esp + 0x94]
movzx ebx, word [esp + 0x30]
mov word [eax + edi], bx
mov dword [esp + 0xa8], edx
mov dword [esp + 0xac], esi
mov dword [esp + 0xa4], eax
lea eax, [0x605d90]
mov dword [esp + 0x16c], eax
mov dword [esp + 0x170], ecx
lea eax, [esp + 0x9c]
mov dword [esp], eax
mov dword [esp + 4], 2
mov byte [esp + 8], 0
lea eax, [esp + 0x16c]
mov dword [esp + 0xc], eax
call fcn.005a6290
mov ecx, dword [esp + 0x1b8]
movzx edx, byte [esp + 0x1bc]
mov eax, dword [esp + 0x84]
mov ebp, dword [esp + 0x88]
mov ebx, dword [esp + 0x10c]
mov esi, dword [ecx + 0xa4]
test esi, esi
je 0x602c09
test dl, dl
je 0x602a1b
inc ebp
cmp eax, ebp
jae 0x602a0f
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
lea eax, [0x6db280]
mov dword [esp + 0x10], eax
call fcn.0046c670
mov ebx, dword [esp + 0x14]
mov ebp, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x1b8]
movzx edx, byte [esp + 0x1bc]
mov word [ebx + ebp*2 - 2], 0x10
jmp 0x602c09
mov dword [esp + 0x80], ebp
mov dword [esp + 0x7c], eax
mov dword [esp + 0x108], ebx
nop
mov word [esp + 0x2e], 0
mov byte [esp + 0x2f], 0x10
mov esi, dword [esp + 0x9c]
test esi, esi
jne 0x602bad
mov esi, dword [esp + 0xb4]
test esi, esi
jne 0x603c3e
mov esi, dword [esp + 0xa8]
add esi, 2
cmp esi, 2
jge 0x602abd
lea eax, [0x6e6720]
mov dword [esp], eax
call fcn.0040bb90
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x1b
lea ecx, [0x7256d4]
mov dword [eax], ecx
lea edx, [0x78aa3c]
mov dword [esp + 0x9c], edx
mov dword [esp + 0xa0], eax
mov eax, dword [esp + 0x7c]
mov ecx, dword [esp + 0x1b8]
movzx edx, byte [esp + 0x1bc]
mov ebx, dword [esp + 0x108]
mov ebp, dword [esp + 0x80]
movzx esi, byte [esp + 0xb0]
xchg esi, eax
test al, al
xchg esi, eax
je 0x602b22
mov esi, dword [esp + 0xa8]
add esi, 2
lea edi, [esp + 0x9c]
cmp dword [edi + 0x10], esi
jge 0x602b22
lea eax, [0x6e6720]
mov dword [esp], eax
call fcn.0040bb90
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x36
lea ecx, [0x72fbd1]
mov dword [eax], ecx
lea edx, [0x78aa3c]
mov dword [esp + 0x9c], edx
mov dword [esp + 0xa0], eax
mov ecx, dword [esp + 0x1b8]
jmp 0x602bad
mov esi, dword [esp + 0xac]
mov edi, dword [esp + 0xa8]
lea edx, [edi + 2]
mov eax, dword [esp + 0xa4]
cmp esi, edx
jae 0x602b8f
mov dword [esp + 0x94], edi
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], esi
mov dword [esp + 0xc], 2
lea eax, [0x6db200]
mov dword [esp + 0x10], eax
call fcn.0046c670
mov eax, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
mov ecx, dword [esp + 0x1b8]
mov ebx, dword [esp + 0x108]
mov ebp, dword [esp + 0x80]
mov edi, dword [esp + 0x94]
movzx ebx, word [esp + 0x2e]
mov word [eax + edi], bx
mov dword [esp + 0xa8], edx
mov dword [esp + 0xac], esi
mov dword [esp + 0xa4], eax
lea eax, [0x605ae0]
mov dword [esp + 0x164], eax
mov dword [esp + 0x168], ecx
lea eax, [esp + 0x9c]
mov dword [esp], eax
mov dword [esp + 4], 2
mov byte [esp + 8], 0
lea eax, [esp + 0x164]
mov dword [esp + 0xc], eax
call fcn.005a6290
mov ecx, dword [esp + 0x1b8]
movzx edx, byte [esp + 0x1bc]
mov ebp, dword [esp + 0x80]
mov eax, dword [esp + 0x7c]
mov ebx, dword [esp + 0x108]
mov esi, dword [ecx + 0xb4]
test esi, esi
je 0x602e4b
test dl, dl
je 0x602c69
inc ebp
cmp eax, ebp
jae 0x602c5d
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
lea eax, [0x6db280]
mov dword [esp + 0x10], eax
call fcn.0046c670
mov ebx, dword [esp + 0x14]
mov ebp, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x1b8]
movzx edx, byte [esp + 0x1bc]
mov word [ebx + ebp*2 - 2], 0x2b
jmp 0x602e4b
mov dword [esp + 0x104], ebx
mov dword [esp + 0x78], ebp
mov dword [esp + 0x74], eax
nop
mov word [esp + 0x2c], 0
mov byte [esp + 0x2d], 0x2b
mov esi, dword [esp + 0x9c]
test esi, esi
jne 0x602df2
mov esi, dword [esp + 0xb4]
test esi, esi
jne 0x603c26
mov esi, dword [esp + 0xa8]
add esi, 2
cmp esi, 2
jge 0x602d05
lea eax, [0x6e6720]
mov dword [esp], eax
call fcn.0040bb90
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x1b
lea ecx, [0x7256d4]
mov dword [eax], ecx
lea edx, [0x78aa3c]
mov dword [esp + 0x9c], edx
mov dword [esp + 0xa0], eax
mov eax, dword [esp + 0x74]
mov ecx, dword [esp + 0x1b8]
movzx edx, byte [esp + 0x1bc]
mov ebx, dword [esp + 0x104]
mov ebp, dword [esp + 0x78]
movzx esi, byte [esp + 0xb0]
xchg esi, eax
test al, al
xchg esi, eax
je 0x602d6a
mov esi, dword [esp + 0xa8]
add esi, 2
lea edi, [esp + 0x9c]
cmp dword [edi + 0x10], esi
jge 0x602d6a
lea eax, [0x6e6720]
mov dword [esp], eax
call fcn.0040bb90
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x36
lea ecx, [0x72fbd1]
mov dword [eax], ecx
lea edx, [0x78aa3c]
mov dword [esp + 0x9c], edx
mov dword [esp + 0xa0], eax
mov ecx, dword [esp + 0x1b8]
jmp 0x602df2
mov esi, dword [esp + 0xac]
mov edi, dword [esp + 0xa8]
lea edx, [edi + 2]
mov eax, dword [esp + 0xa4]
cmp esi, edx
jae 0x602dd4
mov dword [esp + 0x94], edi
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], esi
mov dword [esp + 0xc], 2
lea eax, [0x6db200]
mov dword [esp + 0x10], eax
call fcn.0046c670
mov eax, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
mov ecx, dword [esp + 0x1b8]
mov ebx, dword [esp + 0x104]
mov ebp, dword [esp + 0x78]
mov edi, dword [esp + 0x94]
movzx ebx, word [esp + 0x2c]
mov word [eax + edi], bx
mov dword [esp + 0xa8], edx
mov dword [esp + 0xac], esi
mov dword [esp + 0xa4], eax
lea eax, [0x6058b0]
mov dword [esp + 0x15c], eax
mov dword [esp + 0x160], ecx
lea eax, [esp + 0x9c]
mov dword [esp], eax
mov dword [esp + 4], 2
mov byte [esp + 8], 0
lea eax, [esp + 0x15c]
mov dword [esp + 0xc], eax
call fcn.005a6290
mov ecx, dword [esp + 0x1b8]
movzx edx, byte [esp + 0x1bc]
mov eax, dword [esp + 0x74]
mov ebp, dword [esp + 0x78]
mov ebx, dword [esp + 0x104]
mov esi, dword [ecx + 0xc0]
test esi, esi
je 0x60308d
test dl, dl
je 0x602eab
inc ebp
cmp eax, ebp
jae 0x602e9f
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
lea eax, [0x6db280]
mov dword [esp + 0x10], eax
call fcn.0046c670
mov ebx, dword [esp + 0x14]
mov ebp, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x1b8]
movzx edx, byte [esp + 0x1bc]
mov word [ebx + ebp*2 - 2], 0x2c
jmp 0x60308d
mov dword [esp + 0x70], eax
mov dword [esp + 0x6c], ebp
mov dword [esp + 0x100], ebx
nop
mov word [esp + 0x2a], 0
mov byte [esp + 0x2b], 0x2c
mov esi, dword [esp + 0x9c]
test esi, esi
jne 0x603034
mov esi, dword [esp + 0xb4]
test esi, esi
jne 0x603c0e
mov esi, dword [esp + 0xa8]
add esi, 2
cmp esi, 2
jge 0x602f47
lea eax, [0x6e6720]
mov dword [esp], eax
call fcn.0040bb90
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x1b
lea ecx, [0x7256d4]
mov dword [eax], ecx
lea edx, [0x78aa3c]
mov dword [esp + 0x9c], edx
mov dword [esp + 0xa0], eax
mov eax, dword [esp + 0x70]
mov ecx, dword [esp + 0x1b8]
movzx edx, byte [esp + 0x1bc]
mov ebx, dword [esp + 0x100]
mov ebp, dword [esp + 0x6c]
movzx esi, byte [esp + 0xb0]
xchg esi, eax
test al, al
xchg esi, eax
je 0x602fac
mov esi, dword [esp + 0xa8]
add esi, 2
lea edi, [esp + 0x9c]
cmp dword [edi + 0x10], esi
jge 0x602fac
lea eax, [0x6e6720]
mov dword [esp], eax
call fcn.0040bb90
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x36
lea ecx, [0x72fbd1]
mov dword [eax], ecx
lea edx, [0x78aa3c]
mov dword [esp + 0x9c], edx
mov dword [esp + 0xa0], eax
mov ecx, dword [esp + 0x1b8]
jmp 0x603034
mov esi, dword [esp + 0xac]
mov edi, dword [esp + 0xa8]
lea edx, [edi + 2]
mov eax, dword [esp + 0xa4]
cmp esi, edx
jae 0x603016
mov dword [esp + 0x94], edi
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], esi
mov dword [esp + 0xc], 2
lea eax, [0x6db200]
mov dword [esp + 0x10], eax
call fcn.0046c670
mov eax, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
mov ecx, dword [esp + 0x1b8]
mov ebx, dword [esp + 0x100]
mov ebp, dword [esp + 0x6c]
mov edi, dword [esp + 0x94]
movzx ebx, word [esp + 0x2a]
mov word [eax + edi], bx
mov dword [esp + 0xa8], edx
mov dword [esp + 0xac], esi
mov dword [esp + 0xa4], eax
lea eax, [0x605690]
mov dword [esp + 0x154], eax
mov dword [esp + 0x158], ecx
lea eax, [esp + 0x9c]
mov dword [esp], eax
mov dword [esp + 4], 2
mov byte [esp + 8], 0
lea eax, [esp + 0x154]
mov dword [esp + 0xc], eax
call fcn.005a6290
mov ecx, dword [esp + 0x1b8]
movzx edx, byte [esp + 0x1bc]
mov eax, dword [esp + 0x70]
mov ebp, dword [esp + 0x6c]
mov ebx, dword [esp + 0x100]
mov esi, dword [ecx + 0xcc]
test esi, esi
je 0x6032cf
test dl, dl
je 0x6030ed
inc ebp
cmp eax, ebp
jae 0x6030e1
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
lea eax, [0x6db280]
mov dword [esp + 0x10], eax
call fcn.0046c670
mov ebx, dword [esp + 0x14]
mov ebp, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x1b8]
movzx edx, byte [esp + 0x1bc]
mov word [ebx + ebp*2 - 2], 0x33
jmp 0x6032cf
mov dword [esp + 0xfc], ebx
mov dword [esp + 0x68], ebp
mov dword [esp + 0x64], eax
nop
mov word [esp + 0x28], 0
mov byte [esp + 0x29], 0x33
mov esi, dword [esp + 0x9c]
test esi, esi
jne 0x603276
mov esi, dword [esp + 0xb4]
test esi, esi
jne 0x603bf6
mov esi, dword [esp + 0xa8]
add esi, 2
cmp esi, 2
jge 0x603189
lea eax, [0x6e6720]
mov dword [esp], eax
call fcn.0040bb90
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x1b
lea ecx, [0x7256d4]
mov dword [eax], ecx
lea edx, [0x78aa3c]
mov dword [esp + 0x9c], edx
mov dword [esp + 0xa0], eax
mov eax, dword [esp + 0x64]
mov ecx, dword [esp + 0x1b8]
movzx edx, byte [esp + 0x1bc]
mov ebx, dword [esp + 0xfc]
mov ebp, dword [esp + 0x68]
movzx esi, byte [esp + 0xb0]
xchg esi, eax
test al, al
xchg esi, eax
je 0x6031ee
mov esi, dword [esp + 0xa8]
add esi, 2
lea edi, [esp + 0x9c]
cmp dword [edi + 0x10], esi
jge 0x6031ee
lea eax, [0x6e6720]
mov dword [esp], eax
call fcn.0040bb90
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x36
lea ecx, [0x72fbd1]
mov dword [eax], ecx
lea edx, [0x78aa3c]
mov dword [esp + 0x9c], edx
mov dword [esp + 0xa0], eax
mov ecx, dword [esp + 0x1b8]
jmp 0x603276
mov esi, dword [esp + 0xac]
mov edi, dword [esp + 0xa8]
lea edx, [edi + 2]
mov eax, dword [esp + 0xa4]
cmp esi, edx
jae 0x603258
mov dword [esp + 0x94], edi
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], esi
mov dword [esp + 0xc], 2
lea eax, [0x6db200]
mov dword [esp + 0x10], eax
call fcn.0046c670
mov eax, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
mov ecx, dword [esp + 0x1b8]
mov ebx, dword [esp + 0xfc]
mov ebp, dword [esp + 0x68]
mov edi, dword [esp + 0x94]
movzx ebx, word [esp + 0x28]
mov word [eax + edi], bx
mov dword [esp + 0xa8], edx
mov dword [esp + 0xac], esi
mov dword [esp + 0xa4], eax
lea eax, [0x605210]
mov dword [esp + 0x14c], eax
mov dword [esp + 0x150], ecx
lea eax, [esp + 0x9c]
mov dword [esp], eax
mov dword [esp + 4], 2
mov byte [esp + 8], 0
lea eax, [esp + 0x14c]
mov dword [esp + 0xc], eax
call fcn.005a6290
mov ecx, dword [esp + 0x1b8]
movzx edx, byte [esp + 0x1bc]
mov ebp, dword [esp + 0x68]
mov eax, dword [esp + 0x64]
mov ebx, dword [esp + 0xfc]
mov esi, dword [ecx + 0xdc]
test esi, esi
je 0x603511
test dl, dl
je 0x60332f
inc ebp
cmp eax, ebp
jae 0x603323
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
lea eax, [0x6db280]
mov dword [esp + 0x10], eax
call fcn.0046c670
mov ebx, dword [esp + 0x14]
mov ebp, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x1b8]
movzx edx, byte [esp + 0x1bc]
mov word [ebx + ebp*2 - 2], 0x2d
jmp 0x603511
mov dword [esp + 0xf8], ebx
mov dword [esp + 0x60], ebp
mov dword [esp + 0x5c], eax
nop
mov word [esp + 0x26], 0
mov byte [esp + 0x27], 0x2d
mov esi, dword [esp + 0x9c]
test esi, esi
jne 0x6034b8
mov esi, dword [esp + 0xb4]
test esi, esi
jne 0x603bde
mov esi, dword [esp + 0xa8]
add esi, 2
cmp esi, 2
jge 0x6033cb
lea eax, [0x6e6720]
mov dword [esp], eax
call fcn.0040bb90
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x1b
lea ecx, [0x7256d4]
mov dword [eax], ecx
lea edx, [0x78aa3c]
mov dword [esp + 0x9c], edx
mov dword [esp + 0xa0], eax
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x1b8]
movzx edx, byte [esp + 0x1bc]
mov ebx, dword [esp + 0xf8]
mov ebp, dword [esp + 0x60]
movzx esi, byte [esp + 0xb0]
xchg esi, eax
test al, al
xchg esi, eax
je 0x603430
mov esi, dword [esp + 0xa8]
add esi, 2
lea edi, [esp + 0x9c]
cmp dword [edi + 0x10], esi
jge 0x603430
lea eax, [0x6e6720]
mov dword [esp], eax
call fcn.0040bb90
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x36
lea ecx, [0x72fbd1]
mov dword [eax], ecx
lea edx, [0x78aa3c]
mov dword [esp + 0x9c], edx
mov dword [esp + 0xa0], eax
mov ecx, dword [esp + 0x1b8]
jmp 0x6034b8
mov esi, dword [esp + 0xac]
mov edi, dword [esp + 0xa8]
lea edx, [edi + 2]
mov eax, dword [esp + 0xa4]
cmp esi, edx
jae 0x60349a
mov dword [esp + 0x94], edi
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], esi
mov dword [esp + 0xc], 2
lea eax, [0x6db200]
mov dword [esp + 0x10], eax
call fcn.0046c670
mov eax, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
mov ecx, dword [esp + 0x1b8]
mov ebx, dword [esp + 0xf8]
mov ebp, dword [esp + 0x60]
mov edi, dword [esp + 0x94]
movzx ebx, word [esp + 0x26]
mov word [eax + edi], bx
mov dword [esp + 0xa8], edx
mov dword [esp + 0xac], esi
mov dword [esp + 0xa4], eax
lea eax, [0x604ff0]
mov dword [esp + 0x144], eax
mov dword [esp + 0x148], ecx
lea eax, [esp + 0x9c]
mov dword [esp], eax
mov dword [esp + 4], 2
mov byte [esp + 8], 0
lea eax, [esp + 0x144]
mov dword [esp + 0xc], eax
call fcn.005a6290
mov ecx, dword [esp + 0x1b8]
movzx edx, byte [esp + 0x1bc]
mov eax, dword [esp + 0x5c]
mov ebp, dword [esp + 0x60]
mov ebx, dword [esp + 0xf8]
test ebp, ebp
je 0x603719
test dl, dl
je 0x603719
nop
mov word [esp + 0x24], 0
mov byte [esp + 0x24], 0xfd
mov esi, dword [esp + 0x9c]
test esi, esi
jne 0x6036b6
mov esi, dword [esp + 0xb4]
test esi, esi
jne 0x603bc6
mov dword [esp + 0xc8], ebx
mov dword [esp + 0x54], ebp
mov dword [esp + 0x58], eax
mov esi, dword [esp + 0xa8]
add esi, 2
cmp esi, 2
jge 0x6035bd
lea eax, [0x6e6720]
mov dword [esp], eax
call fcn.0040bb90
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x1b
lea ecx, [0x7256d4]
mov dword [eax], ecx
lea edx, [0x78aa3c]
mov dword [esp + 0x9c], edx
mov dword [esp + 0xa0], eax
mov eax, dword [esp + 0x58]
mov ecx, dword [esp + 0x1b8]
movzx edx, byte [esp + 0x1bc]
mov ebx, dword [esp + 0xc8]
mov ebp, dword [esp + 0x54]
movzx esi, byte [esp + 0xb0]
xchg esi, eax
test al, al
xchg esi, eax
je 0x60362a
mov esi, dword [esp + 0xa8]
add esi, 2
lea edi, [esp + 0x9c]
cmp dword [edi + 0x10], esi
jge 0x60362a
lea eax, [0x6e6720]
mov dword [esp], eax
call fcn.0040bb90
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x36
lea ecx, [0x72fbd1]
mov dword [eax], ecx
lea edx, [0x78aa3c]
mov dword [esp + 0x9c], edx
mov dword [esp + 0xa0], eax
mov eax, dword [esp + 0x58]
mov ebx, dword [esp + 0xc8]
mov ebp, dword [esp + 0x54]
jmp 0x6036b6
mov esi, dword [esp + 0xac]
mov edi, dword [esp + 0xa8]
lea edx, [edi + 2]
mov ecx, dword [esp + 0xa4]
cmp esi, edx
jae 0x603691
mov dword [esp + 0x94], edi
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], esi
mov dword [esp + 0xc], 2
lea eax, [0x6db200]
mov dword [esp + 0x10], eax
call fcn.0046c670
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
mov eax, dword [esp + 0x58]
mov ebx, dword [esp + 0xc8]
mov ebp, dword [esp + 0x54]
mov edi, dword [esp + 0x94]
movzx ebx, word [esp + 0x24]
mov word [ecx + edi], bx
mov dword [esp + 0xa8], edx
mov dword [esp + 0xac], esi
mov dword [esp + 0xa4], ecx
mov ebx, dword [esp + 0xc8]
mov dword [esp + 0x140], 0
lea ecx, [0x604da0]
mov dword [esp + 0x134], ecx
mov dword [esp + 0x13c], ebp
mov dword [esp + 0x140], eax
mov dword [esp + 0x138], ebx
lea eax, [esp + 0x9c]
mov dword [esp], eax
mov dword [esp + 4], 2
mov byte [esp + 8], 0
lea eax, [esp + 0x134]
mov dword [esp + 0xc], eax
call fcn.005a6290
mov ecx, dword [esp + 0x1b8]
movzx edx, byte [esp + 0x1bc]
mov ebx, dword [ecx + 0xe8]
test ebx, ebx
je 0x6038d7
nop
mov word [esp + 0x22], 0
mov byte [esp + 0x23], 0x29
mov eax, dword [esp + 0x9c]
test eax, eax
jne 0x60388d
mov eax, dword [esp + 0xb4]
test eax, eax
jne 0x603bae
mov eax, dword [esp + 0xa8]
add eax, 2
cmp eax, 2
jge 0x6037a5
lea eax, [0x6e6720]
mov dword [esp], eax
call fcn.0040bb90
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x1b
lea ecx, [0x7256d4]
mov dword [eax], ecx
lea ecx, [0x78aa3c]
mov dword [esp + 0x9c], ecx
mov dword [esp + 0xa0], eax
mov ecx, dword [esp + 0x1b8]
movzx edx, byte [esp + 0x1bc]
movzx eax, byte [esp + 0xb0]
test al, al
je 0x603808
mov eax, dword [esp + 0xa8]
add eax, 2
lea ebx, [esp + 0x9c]
cmp dword [ebx + 0x10], eax
jge 0x603808
lea eax, [0x6e6720]
mov dword [esp], eax
call fcn.0040bb90
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x36
lea ecx, [0x72fbd1]
mov dword [eax], ecx
lea edx, [0x78aa3c]
mov dword [esp + 0x9c], edx
mov dword [esp + 0xa0], eax
mov ecx, dword [esp + 0x1b8]
jmp 0x60388d
mov eax, dword [esp + 0xac]
mov ebx, dword [esp + 0xa8]
lea ebp, [ebx + 2]
mov esi, dword [esp + 0xa4]
cmp eax, ebp
jae 0x60386f
mov dword [esp + 0x94], ebx
mov dword [esp], esi
mov dword [esp + 4], ebp
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
lea eax, [0x6db200]
mov dword [esp + 0x10], eax
call fcn.0046c670
mov esi, dword [esp + 0x14]
mov ebp, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x1b8]
movzx edx, byte [esp + 0x1bc]
mov ebx, dword [esp + 0x94]
movzx edi, word [esp + 0x22]
mov word [esi + ebx], di
mov dword [esp + 0xa8], ebp
mov dword [esp + 0xac], eax
mov dword [esp + 0xa4], esi
lea eax, [0x604820]
mov dword [esp + 0x12c], eax
mov dword [esp + 0x130], ecx
lea eax, [esp + 0x9c]
mov dword [esp], eax
mov dword [esp + 4], 2
mov byte [esp + 8], 0
lea eax, [esp + 0x12c]
mov dword [esp + 0xc], eax
call fcn.005a6290
mov ecx, dword [esp + 0x1b8]
movzx edx, byte [esp + 0x1bc]
mov ebx, dword [esp + 0x9c]
test ebx, ebx
je 0x6038f3
mov ebp, dword [esp + 0xa0]
mov eax, ebx
xor edi, edi
xor ebx, ebx
xor esi, esi
jmp 0x60392e
mov ebx, dword [esp + 0xa8]
mov eax, dword [esp + 0xb8]
cmp eax, ebx
ja 0x603ba7
mov esi, dword [esp + 0xa4]
mov ebp, dword [esp + 0xac]
sub ebp, eax
mov edi, ebp
xchg ebp, ebx
neg ebx
xchg ebp, ebx
sar ebp, 0x1f
and ebp, eax
sub ebx, eax
add esi, ebp
xor eax, eax
xor ebp, ebp
test eax, eax
jne 0x603b54
xor eax, eax
mov ebp, edi
lea edi, [esp + 0xcc]
call fcn.00471ac5
mov ecx, dword [esp + 0xe4]
nop
mov byte [esp + 0x21], 1
test ecx, ecx
jne 0x603b8f
mov dword [esp + 0x94], ebp
mov dword [esp + 0x50], ebx
mov dword [esp + 0x98], esi
movzx ecx, byte [esp + 0xe0]
test cl, cl
je 0x6039d3
mov ecx, dword [esp + 0xd8]
inc ecx
mov edi, esi
lea esi, [esp + 0xcc]
cmp dword [esi + 0x10], ecx
jge 0x6039d5
lea eax, [0x6e6720]
mov dword [esp], eax
call fcn.0040bb90
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x36
lea ecx, [0x72fbd1]
mov dword [eax], ecx
lea ecx, [0x78aa3c]
mov dword [esp + 0xcc], ecx
mov dword [esp + 0xd0], eax
xor eax, eax
movzx edx, byte [esp + 0x1bc]
jmp 0x603a59
mov edi, esi
mov ecx, dword [esp + 0xdc]
mov esi, dword [esp + 0xd8]
lea edi, [esi + 1]
mov ebp, dword [esp + 0xd4]
cmp ecx, edi
jae 0x603a3b
mov dword [esp + 0x90], esi
mov dword [esp], ebp
mov dword [esp + 4], edi
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 1
lea eax, [0x6db200]
mov dword [esp + 0x10], eax
call fcn.0046c670
mov ebp, dword [esp + 0x14]
mov edi, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
xor eax, eax
movzx edx, byte [esp + 0x1bc]
mov ebx, dword [esp + 0x50]
mov esi, dword [esp + 0x90]
movzx ebx, byte [esp + 0x21]
mov byte [ebp + esi], bl
mov dword [esp + 0xd8], edi
mov dword [esp + 0xdc], ecx
mov dword [esp + 0xd4], ebp
lea edi, [esp + 0x114]
call fcn.00471aca
lea ecx, [0x603df0]
mov dword [esp + 0x114], ecx
mov ecx, dword [esp + 0x1b8]
mov dword [esp + 0x118], ecx
mov byte [esp + 0x11c], dl
mov ecx, dword [esp + 0x50]
mov dword [esp + 0x124], ecx
mov ecx, dword [esp + 0x94]
mov dword [esp + 0x128], ecx
mov ecx, dword [esp + 0x98]
mov dword [esp + 0x120], ecx
lea ecx, [esp + 0xcc]
mov dword [esp], ecx
mov dword [esp + 4], 3
mov byte [esp + 8], 0
lea ecx, [esp + 0x114]
mov dword [esp + 0xc], ecx
call fcn.005a6290
mov ecx, dword [esp + 0xcc]
test ecx, ecx
je 0x603af3
mov eax, dword [esp + 0xd0]
xor ebp, ebp
mov ebx, eax
xor edx, edx
mov eax, ecx
xor ecx, ecx
jmp 0x603b2a
mov ecx, dword [esp + 0xd8]
mov eax, dword [esp + 0xe8]
cmp eax, ecx
ja 0x603b8a
mov edx, dword [esp + 0xd4]
mov ebx, dword [esp + 0xdc]
sub ebx, eax
mov ebp, ebx
neg ebx
sar ebx, 0x1f
and ebx, eax
sub ecx, eax
add edx, ebx
xor eax, eax
xor ebx, ebx
mov dword [esp + 0x1c0], edx
mov dword [esp + 0x1c4], ecx
mov dword [esp + 0x1c8], ebp
mov dword [esp + 0x1cc], eax
mov dword [esp + 0x1d0], ebx
add esp, 0x1b4
ret
mov dword [esp + 0x1c0], 0
mov dword [esp + 0x1c4], 0
mov dword [esp + 0x1c8], 0
mov dword [esp + 0x1cc], eax
mov dword [esp + 0x1d0], ebp
add esp, 0x1b4
ret
call fcn.00471910
lea eax, [0x6db180]
mov dword [esp], eax
lea eax, [0x78a4f8]
mov dword [esp + 4], eax
call fcn.0046a9e0
mov ecx, ebx
call fcn.00471910
lea eax, [0x6db180]
mov dword [esp], eax
lea eax, [0x78a4f8]
mov dword [esp + 4], eax
call fcn.0046a9e0
lea eax, [0x6db180]
mov dword [esp], eax
lea eax, [0x78a4f8]
mov dword [esp + 4], eax
call fcn.0046a9e0
lea eax, [0x6db180]
mov dword [esp], eax
lea eax, [0x78a4f8]
mov dword [esp + 4], eax
call fcn.0046a9e0
lea eax, [0x6db180]
mov dword [esp], eax
lea eax, [0x78a4f8]
mov dword [esp + 4], eax
call fcn.0046a9e0
lea eax, [0x6db180]
mov dword [esp], eax
lea eax, [0x78a4f8]
mov dword [esp + 4], eax
call fcn.0046a9e0
lea eax, [0x6db180]
mov dword [esp], eax
lea eax, [0x78a4f8]
mov dword [esp + 4], eax
call fcn.0046a9e0
lea eax, [0x6db180]
mov dword [esp], eax
lea eax, [0x78a4f8]
mov dword [esp + 4], eax
call fcn.0046a9e0
lea eax, [0x6db180]
mov dword [esp], eax
lea eax, [0x78a4f8]
mov dword [esp + 4], eax
call fcn.0046a9e0
lea eax, [0x6db180]
mov dword [esp], eax
lea eax, [0x78a4f8]
mov dword [esp + 4], eax
call fcn.0046a9e0
lea eax, [0x6db180]
mov dword [esp], eax
lea eax, [0x78a4f8]
mov dword [esp + 4], eax
call fcn.0046a9e0
lea eax, [0x6db180]
mov dword [esp], eax
lea eax, [0x78a4f8]
mov dword [esp + 4], eax
call fcn.0046a9e0
lea eax, [0x6db180]
mov dword [esp], eax
lea eax, [0x78a4f8]
mov dword [esp + 4], eax
call fcn.0046a9e0
lea eax, [0x6db180]
mov dword [esp], eax
lea eax, [0x78a4f8]
mov dword [esp + 4], eax
call fcn.0046a9e0
lea eax, [0x6db180]
mov dword [esp], eax
lea eax, [0x78a4f8]
mov dword [esp + 4], eax
call fcn.0046a9e0
lea eax, [0x6db180]
mov dword [esp], eax
lea eax, [0x78a4f8]
mov dword [esp + 4], eax
call fcn.0046a9e0
lea eax, [0x6db180]
mov dword [esp], eax
lea eax, [0x78a4f8]
mov dword [esp + 4], eax
call fcn.0046a9e0
lea eax, [0x6db180]
mov dword [esp], eax
lea eax, [0x78a4f8]
mov dword [esp + 4], eax
call fcn.0046a9e0
lea eax, [0x6db180]
mov dword [esp], eax
lea eax, [0x78a4f8]
mov dword [esp + 4], eax
call fcn.0046a9e0
lea eax, [0x6db180]
mov dword [esp], eax
lea eax, [0x78a4f8]
mov dword [esp + 4], eax
call fcn.0046a9e0
lea eax, [0x6db180]
mov dword [esp], eax
lea eax, [0x78a4f8]
mov dword [esp + 4], eax
call fcn.0046a9e0
lea eax, [0x6db180]
mov dword [esp], eax
lea eax, [0x78a4f8]
mov dword [esp + 4], eax
call fcn.0046a9e0
lea eax, [0x6db180]
mov dword [esp], eax
lea eax, [0x78a4f8]
mov dword [esp + 4], eax
call fcn.0046a9e0
lea eax, [0x6db180]
mov dword [esp], eax
lea eax, [0x78a4f8]
mov dword [esp + 4], eax
call fcn.0046a9e0
nop
call fcn.00470430
jmp fcn.00600d60