Function at 0x6806b8
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x3c
push 0
push 0
dec ecx
jne 0x6806c0
push ebx
push esi
push edi
mov dword [ebp - 4], eax
xor eax, eax
push ebp
push 0x682a06
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x308]
call fcn.004567d4
test eax, eax
jne 0x680720
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x308]
mov edx, 1
call fcn.004567ec
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x304]
mov dl, 1
call fcn.00478a28
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + 0x3c8], edx
jmp 0x6829b1
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x308]
call fcn.004567d4
dec eax
jne 0x680d53
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x39c]
mov edx, dword [eax]
call dword [edx + 0x38c]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x398]
cmp byte [eax + 0x218], 0
jne 0x680797
lea edx, [ebp - 0x30]
mov eax, dword [0x7ba0a8]
call fcn.00407bd4
mov eax, dword [ebp - 0x30]
push eax
push 0xd
push 0
lea edx, [ebp - 0x34]
mov eax, dword [0x7b8b64]
call fcn.00407bd4
mov ecx, dword [ebp - 0x34]
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x39c]
mov eax, dword [0x7b9914]
mov eax, dword [eax]
call fcn.00769244
jmp 0x680be9
lea edx, [ebp - 0x38]
mov eax, dword [0x7b87a4]
call fcn.00407bd4
mov eax, dword [ebp - 0x38]
push eax
push 0xc
push 0
lea edx, [ebp - 0x3c]
mov eax, dword [0x7b8b64]
call fcn.00407bd4
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x39c]
mov eax, dword [0x7b9914]
mov eax, dword [eax]
call fcn.00769244
mov dword [ebp - 0x20], eax
mov eax, dword [0x7b7abc]
mov eax, dword [eax]
mov eax, dword [eax + 0x3c]
push eax
push 9
mov eax, dword [ebp - 0x20]
push eax
lea edx, [ebp - 0x40]
mov eax, dword [0x7ba824]
call fcn.00407bd4
mov ecx, dword [ebp - 0x40]
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x39c]
mov eax, dword [0x7b9914]
mov eax, dword [eax]
call fcn.00769244
mov eax, dword [0x7ba710]
mov eax, dword [eax]
mov ecx, dword [eax + 4]
lea eax, [ebp - 0x44]
mov edx, 0x682a1c
call fcn.00405840
mov eax, dword [ebp - 0x44]
push eax
push 3
mov eax, dword [ebp - 0x20]
push eax
lea edx, [ebp - 0x48]
mov eax, dword [0x7b9664]
call fcn.00407bd4
mov ecx, dword [ebp - 0x48]
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x39c]
mov eax, dword [0x7b9914]
mov eax, dword [eax]
call fcn.00769244
mov eax, dword [0x7b8c4c]
push dword [eax + 4]
push dword [eax]
lea eax, [ebp - 0x4c]
call fcn.0040d7a8
lea eax, [ebp - 0x4c]
mov edx, 0x682a38
call fcn.004057fc
mov eax, dword [ebp - 0x4c]
push eax
push 7
mov eax, dword [ebp - 0x20]
push eax
lea edx, [ebp - 0x50]
mov eax, dword [0x7b93e4]
call fcn.00407bd4
mov ecx, dword [ebp - 0x50]
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x39c]
mov eax, dword [0x7b9914]
mov eax, dword [eax]
call fcn.00769244
lea eax, [ebp - 0x54]
push eax
mov eax, dword [0x7b7abc]
mov eax, dword [eax]
fild qword [eax + 0x78]
fdiv dword [0x682a3c]
fdiv dword [0x682a3c]
fdiv dword [0x682a3c]
fstp xword [ebp - 0x68]
wait
lea eax, [ebp - 0x68]
mov dword [ebp - 0x5c], eax
mov byte [ebp - 0x58], 3
lea edx, [ebp - 0x5c]
xor ecx, ecx
mov eax, 0x682a48
call fcn.0040ef70
mov eax, dword [ebp - 0x54]
push eax
push 0xb
mov eax, dword [ebp - 0x20]
push eax
lea edx, [ebp - 0x6c]
mov eax, dword [0x7b91bc]
call fcn.00407bd4
mov ecx, dword [ebp - 0x6c]
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x39c]
mov eax, dword [0x7b9914]
mov eax, dword [eax]
call fcn.00769244
mov eax, dword [0x7ba710]
mov eax, dword [eax]
cmp dword [eax + 0x10], 4
jne 0x680957
lea edx, [ebp - 0x70]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3a4]
call fcn.00478b08
mov eax, dword [ebp - 0x70]
push eax
push 2
mov eax, dword [ebp - 0x20]
push eax
lea edx, [ebp - 0x74]
mov eax, dword [0x7b8b94]
call fcn.00407bd4
mov ecx, dword [ebp - 0x74]
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x39c]
mov eax, dword [0x7b9914]
mov eax, dword [eax]
call fcn.00769244
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x330]
cmp byte [eax + 0x21d], 0
je 0x6809aa
lea edx, [ebp - 0x78]
mov eax, dword [0x7ba1fc]
call fcn.00407bd4
mov eax, dword [ebp - 0x78]
push eax
push 0xe
mov eax, dword [ebp - 0x20]
push eax
lea edx, [ebp - 0x7c]
mov eax, dword [0x7b92a8]
call fcn.00407bd4
mov ecx, dword [ebp - 0x7c]
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x39c]
mov eax, dword [0x7b9914]
mov eax, dword [eax]
call fcn.00769244
jmp 0x680bd6
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x334]
cmp byte [eax + 0x21d], 0
je 0x680a03
lea edx, [ebp - 0x80]
mov eax, dword [0x7b7ea0]
call fcn.00407bd4
mov eax, dword [ebp - 0x80]
push eax
push 0xe
mov eax, dword [ebp - 0x20]
push eax
lea edx, [ebp - 0x84]
mov eax, dword [0x7b92a8]
call fcn.00407bd4
mov ecx, dword [ebp - 0x84]
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x39c]
mov eax, dword [0x7b9914]
mov eax, dword [eax]
call fcn.00769244
jmp 0x680bd6
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x378]
cmp byte [eax + 0x21d], 0
je 0x680a62
lea edx, [ebp - 0x88]
mov eax, dword [0x7ba62c]
call fcn.00407bd4
mov eax, dword [ebp - 0x88]
push eax
push 0xe
mov eax, dword [ebp - 0x20]
push eax
lea edx, [ebp - 0x8c]
mov eax, dword [0x7b92a8]
call fcn.00407bd4
mov ecx, dword [ebp - 0x8c]
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x39c]
mov eax, dword [0x7b9914]
mov eax, dword [eax]
call fcn.00769244
jmp 0x680bd6
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x338]
cmp byte [eax + 0x21d], 0
je 0x680ac1
lea edx, [ebp - 0x90]
mov eax, dword [0x7b8394]
call fcn.00407bd4
mov eax, dword [ebp - 0x90]
push eax
push 0xe
mov eax, dword [ebp - 0x20]
push eax
lea edx, [ebp - 0x94]
mov eax, dword [0x7b92a8]
call fcn.00407bd4
mov ecx, dword [ebp - 0x94]
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x39c]
mov eax, dword [0x7b9914]
mov eax, dword [eax]
call fcn.00769244
jmp 0x680bd6
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x33c]
cmp byte [eax + 0x21d], 0
je 0x680b20
lea edx, [ebp - 0x98]
mov eax, dword [0x7b8768]
call fcn.00407bd4
mov eax, dword [ebp - 0x98]
push eax
push 0xe
mov eax, dword [ebp - 0x20]
push eax
lea edx, [ebp - 0x9c]
mov eax, dword [0x7b92a8]
call fcn.00407bd4
mov ecx, dword [ebp - 0x9c]
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x39c]
mov eax, dword [0x7b9914]
mov eax, dword [eax]
call fcn.00769244
jmp 0x680bd6
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x340]
cmp byte [eax + 0x21d], 0
je 0x680b7c
lea edx, [ebp - 0xa0]
mov eax, dword [0x7b88b8]
call fcn.00407bd4
mov eax, dword [ebp - 0xa0]
push eax
push 0xe
mov eax, dword [ebp - 0x20]
push eax
lea edx, [ebp - 0xa4]
mov eax, dword [0x7b92a8]
call fcn.00407bd4
mov ecx, dword [ebp - 0xa4]
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x39c]
mov eax, dword [0x7b9914]
mov eax, dword [eax]
call fcn.00769244
jmp 0x680bd6
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x37c]
cmp byte [eax + 0x21d], 0
je 0x680bd6
lea edx, [ebp - 0xa8]
mov eax, dword [0x7ba0e0]
call fcn.00407bd4
mov eax, dword [ebp - 0xa8]
push eax
push 0xe
mov eax, dword [ebp - 0x20]
push eax
lea edx, [ebp - 0xac]
mov eax, dword [0x7b92a8]
call fcn.00407bd4
mov ecx, dword [ebp - 0xac]
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x39c]
mov eax, dword [0x7b9914]
mov eax, dword [eax]
call fcn.00769244
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x39c]
mov cl, 1
mov edx, dword [ebp - 0x20]
call fcn.005481a8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x388]
cmp byte [eax + 0x218], 0
je 0x680c4c
lea edx, [ebp - 0xb0]
mov eax, dword [0x7b87a4]
call fcn.00407bd4
mov eax, dword [ebp - 0xb0]
push eax
push 0xc
push 0
lea edx, [ebp - 0xb4]
mov eax, dword [0x7b7c14]
call fcn.00407bd4
mov ecx, dword [ebp - 0xb4]
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x39c]
mov eax, dword [0x7b9914]
mov eax, dword [eax]
call fcn.00769244
mov eax, dword [ebp - 4]
inc dword [eax + 0x3c8]
jmp 0x680c92
lea edx, [ebp - 0xb8]
mov eax, dword [0x7ba0a8]
call fcn.00407bd4
mov eax, dword [ebp - 0xb8]
push eax
push 0xd
push 0
lea edx, [ebp - 0xbc]
mov eax, dword [0x7b7c14]
call fcn.00407bd4
mov ecx, dword [ebp - 0xbc]
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x39c]
mov eax, dword [0x7b9914]
mov eax, dword [eax]
call fcn.00769244
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x38c]
cmp byte [eax + 0x218], 0
je 0x680cf5
lea edx, [ebp - 0xc0]
mov eax, dword [0x7b87a4]
call fcn.00407bd4
mov eax, dword [ebp - 0xc0]
push eax
push 0xc
push 0
lea edx, [ebp - 0xc4]
mov eax, dword [0x7b7934]
call fcn.00407bd4
mov ecx, dword [ebp - 0xc4]
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x39c]
mov eax, dword [0x7b9914]
mov eax, dword [eax]
call fcn.00769244
mov eax, dword [ebp - 4]
inc dword [eax + 0x3c8]
jmp 0x680d3b
lea edx, [ebp - 0xc8]
mov eax, dword [0x7ba0a8]
call fcn.00407bd4
mov eax, dword [ebp - 0xc8]
push eax
push 0xd
push 0
lea edx, [ebp - 0xcc]
mov eax, dword [0x7b7934]
call fcn.00407bd4
mov ecx, dword [ebp - 0xcc]
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x39c]
mov eax, dword [0x7b9914]
mov eax, dword [eax]
call fcn.00769244
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x308]
mov edx, 2
call fcn.004567ec
jmp 0x6829b1
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x308]
call fcn.004567d4
cmp eax, 2
jne 0x6824b9
lea edx, [ebp - 0xd0]
mov eax, 0x682a58
call fcn.0066af60
mov edx, dword [ebp - 0xd0]
mov eax, dword [0x7b9ca0]
mov eax, dword [eax]
call fcn.00405940
je 0x680e38
mov eax, dword [0x7b8410]
cmp byte [eax], 0
je 0x680e2b
mov dword [ebp - 0x24], 1
xor ecx, ecx
mov dl, 1
mov eax, dword [0x67eb88]
call fcn.00492058
mov dword [ebp - 0x28], eax
xor eax, eax
push ebp
push 0x680dff
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x28]
cmp byte [eax + 0x314], 0
je 0x680de9
mov eax, dword [ebp - 0x28]
mov edx, dword [eax]
call dword [edx + 0xec]
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x320]
mov dword [ebp - 0x24], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x680e06
mov eax, dword [ebp - 0x28]
call fcn.004045cc
ret
mov eax, dword [ebp - 4]
call fcn.00496208
jmp 0x6829b1
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x398]
cmp byte [eax + 0x218], 0
jne 0x680ebb
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x388]
cmp byte [eax + 0x218], 0
jne 0x680ebb
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x38c]
cmp byte [eax + 0x218], 0
jne 0x680ebb
push 0x30
lea edx, [ebp - 0xd4]
mov eax, dword [0x7b8824]
call fcn.00407bd4
mov eax, dword [ebp - 0xd4]
call fcn.004059f4
push eax
lea edx, [ebp - 0xd8]
mov eax, dword [0x7b8c48]
call fcn.00407bd4
mov eax, dword [ebp - 0xd8]
call fcn.004059f4
push eax
mov eax, dword [ebp - 4]
call fcn.0047f48c
push eax
call sub.user32.dll_MessageBoxA_1
jmp 0x6829b1
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x370]
xor edx, edx
call fcn.00478a28
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x304]
xor edx, edx
call fcn.00478a28
xor eax, eax
push ebp
push 0x680f04
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x308]
mov edx, dword [eax]
call dword [edx + 0xc4]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x680f0e
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x394]
xor edx, edx
mov ecx, dword [eax]
call dword [ecx + 0x64]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3a0]
mov edx, 1
call fcn.0045d1bc
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x398]
cmp byte [eax + 0x218], 0
je 0x680f56
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3a0]
mov edx, 0x6f
call fcn.0045d1bc
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x388]
mov al, byte [eax + 0x218]
test al, al
jne 0x680f9d
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x38c]
cmp byte [edx + 0x218], 0
jne 0x680f9d
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x390]
xor edx, edx
call fcn.00478a28
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x394]
xor edx, edx
call fcn.00478a28
jmp 0x680feb
test al, al
je 0x680fbd
mov eax, dword [ebp - 4]
mov ebx, dword [eax + 0x3a0]
mov eax, ebx
call fcn.0045cfe4
mov edx, eax
add edx, 0x14
mov eax, ebx
call fcn.0045d1bc
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x38c]
cmp byte [eax + 0x218], 0
je 0x680feb
mov eax, dword [ebp - 4]
mov ebx, dword [eax + 0x3a0]
mov eax, ebx
call fcn.0045cfe4
mov edx, eax
add edx, 0x14
mov eax, ebx
call fcn.0045d1bc
xor eax, eax
push ebp
push 0x68101d
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
mov ebx, dword [eax + 0x3a0]
mov eax, ebx
call fcn.0045cfe4
mov edx, eax
dec edx
mov eax, ebx
call fcn.0045d1bc
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x681027
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3a0]
xor edx, edx
call fcn.0045d1cc
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x308]
mov edx, 3
call fcn.004567ec
mov eax, dword [0x7b98e0]
mov eax, dword [eax]
call fcn.00499874
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x398]
cmp byte [eax + 0x218], 0
jne 0x68107e
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x388]
cmp byte [eax + 0x218], 0
je 0x681229
push 0x21
lea edx, [ebp - 0xdc]
mov eax, dword [0x7b8824]
call fcn.00407bd4
mov eax, dword [ebp - 0xdc]
call fcn.004059f4
push eax
lea edx, [ebp - 0xe0]
mov eax, dword [0x7b960c]
call fcn.00407bd4
mov eax, dword [ebp - 0xe0]
call fcn.004059f4
push eax
mov eax, dword [ebp - 4]
call fcn.0047f48c
push eax
call sub.user32.dll_MessageBoxA_1
dec eax
jne 0x681229
lea eax, [ebp - 8]
call fcn.00405518
lea edx, [ebp - 0xe8]
mov eax, dword [0x7b98e0]
mov eax, dword [eax]
call fcn.0049a030
mov eax, dword [ebp - 0xe8]
lea edx, [ebp - 0xe4]
call fcn.0040e010
mov edx, dword [ebp - 0xe4]
lea eax, [ebp - 0xc]
mov ecx, 0x682a84
call fcn.00405840
push 0x682aac
mov eax, dword [0x7b9914]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xc]
mov edx, dword [ebp - 8]
call fcn.0075c310
cmp al, 1
jne 0x6811bc
lea eax, [ebp - 0xec]
push eax
lea edx, [ebp - 0xf0]
mov eax, dword [0x7b754c]
call fcn.00407bd4
mov eax, dword [ebp - 0xf0]
push eax
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x5c], eax
mov byte [ebp - 0x58], 0xb
lea edx, [ebp - 0x5c]
xor ecx, ecx
pop eax
call fcn.0040ef70
mov eax, dword [ebp - 0xec]
push eax
lea edx, [ebp - 0xf4]
mov eax, dword [0x7b986c]
call fcn.00407bd4
mov edx, dword [ebp - 0xf4]
mov eax, dword [0x7b9914]
mov eax, dword [eax]
pop ecx
call fcn.00705ccc
lea edx, [ebp - 0xf8]
mov eax, dword [0x7ba6d8]
call fcn.00407bd4
mov eax, dword [ebp - 0xf8]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x384]
mov eax, dword [eax + 0x208]
xor edx, edx
call fcn.00456ae0
pop edx
call fcn.00456a3c
jmp 0x681229
lea edx, [ebp - 0xfc]
mov eax, dword [0x7b9820]
call fcn.00407bd4
mov eax, dword [ebp - 0xfc]
push eax
lea edx, [ebp - 0x100]
mov eax, dword [0x7b986c]
call fcn.00407bd4
mov edx, dword [ebp - 0x100]
mov eax, dword [0x7b9914]
mov eax, dword [eax]
pop ecx
call fcn.00705ccc
lea edx, [ebp - 0x104]
mov eax, dword [0x7b9820]
call fcn.00407bd4
mov eax, dword [ebp - 0x104]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x384]
mov eax, dword [eax + 0x208]
xor edx, edx
call fcn.00456ae0
pop edx
call fcn.00456a3c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x398]
cmp byte [eax + 0x218], 0
je 0x681904
lea edx, [ebp - 0x108]
mov eax, dword [0x7ba4b4]
call fcn.00407bd4
mov edx, dword [ebp - 0x108]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x350]
call fcn.00478b38
mov eax, dword [0x7b98e0]
mov eax, dword [eax]
call fcn.00499874
mov eax, dword [0x7b9914]
mov eax, dword [eax]
xor ecx, ecx
xor edx, edx
call fcn.0078583c
mov eax, dword [0x7b9914]
mov eax, dword [eax]
xor edx, edx
call fcn.00721890
mov eax, 2
call fcn.007936e0
mov eax, dword [ebp - 4]
mov ebx, dword [eax + 0x3a0]
mov eax, ebx
call fcn.0045d01c
mov edx, eax
add edx, 0x14
mov eax, ebx
call fcn.0045d1cc
lea edx, [ebp - 0x10c]
mov eax, dword [0x7b85ec]
call fcn.00407bd4
mov edx, dword [ebp - 0x10c]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x350]
call fcn.00478b38
mov eax, dword [0x7b98e0]
mov eax, dword [eax]
call fcn.00499874
mov eax, dword [0x7b9914]
mov eax, dword [eax]
xor ecx, ecx
xor edx, edx
call fcn.00785638
mov eax, dword [0x7b9914]
mov eax, dword [eax]
xor edx, edx
call fcn.0071a95c
mov eax, 2
call fcn.007936e0
mov eax, dword [ebp - 4]
mov ebx, dword [eax + 0x3a0]
mov eax, ebx
call fcn.0045d01c
mov edx, eax
add edx, 0x14
mov eax, ebx
call fcn.0045d1cc
lea edx, [ebp - 0x110]
mov eax, dword [0x7b83d0]
call fcn.00407bd4
mov edx, dword [ebp - 0x110]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x350]
call fcn.00478b38
mov eax, dword [0x7b98e0]
mov eax, dword [eax]
call fcn.00499874
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x330]
cmp byte [eax + 0x21d], 0
je 0x68137c
mov edx, eax
mov eax, dword [0x7b9914]
mov eax, dword [eax]
call fcn.00755244
jmp 0x68144c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x334]
cmp byte [eax + 0x21d], 0
je 0x6813a1
mov edx, eax
mov eax, dword [0x7b9914]
mov eax, dword [eax]
call fcn.00755244
jmp 0x68144c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x378]
cmp byte [eax + 0x21d], 0
je 0x6813c6
mov edx, eax
mov eax, dword [0x7b9914]
mov eax, dword [eax]
call fcn.00755244
jmp 0x68144c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x338]
cmp byte [eax + 0x21d], 0
je 0x6813e8
mov edx, eax
mov eax, dword [0x7b9914]
mov eax, dword [eax]
call fcn.00755244
jmp 0x68144c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x33c]
cmp byte [eax + 0x21d], 0
je 0x68140a
mov edx, eax
mov eax, dword [0x7b9914]
mov eax, dword [eax]
call fcn.00755244
jmp 0x68144c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x340]
cmp byte [eax + 0x21d], 0
je 0x68142c
mov edx, eax
mov eax, dword [0x7b9914]
mov eax, dword [eax]
call fcn.00755244
jmp 0x68144c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x37c]
cmp byte [eax + 0x21d], 0
je 0x68144c
mov edx, eax
mov eax, dword [0x7b9914]
mov eax, dword [eax]
call fcn.00755244
mov eax, dword [0x7b9914]
mov eax, dword [eax]
mov eax, dword [eax + 0x47c]
mov dl, 1
call fcn.004ece94
mov eax, dword [0x7b9914]
mov eax, dword [eax]
mov eax, dword [eax + 0x488]
mov dl, 1
call fcn.004ece94
mov eax, dword [0x7b9914]
mov eax, dword [eax]
mov eax, dword [eax + 0x45c]
mov dl, 1
call fcn.004ece94
mov eax, dword [0x7ba710]
mov eax, dword [eax]
cmp dword [eax + 0x10], 5
jle 0x6814ac
mov eax, dword [0x7b9914]
mov eax, dword [eax]
mov eax, dword [eax + 0xa78]
mov edx, 0xbb8
call fcn.0050bc20
mov eax, dword [0x7b9914]
mov eax, dword [eax]
mov eax, dword [eax + 0x478]
xor edx, edx
call fcn.004ece94
mov eax, dword [0x7b9914]
mov eax, dword [eax]
mov eax, dword [eax + 0x460]
xor edx, edx
call fcn.004ece94
mov eax, dword [0x7ba710]
mov eax, dword [eax]
cmp dword [eax + 0x10], 4
jne 0x6814f7
mov eax, dword [0x7b9914]
mov eax, dword [eax]
mov eax, dword [eax + 0x470]
mov dl, 1
call fcn.004ece94
jmp 0x681537
mov eax, dword [0x7ba710]
mov eax, dword [eax]
mov eax, dword [eax + 4]
mov edx, 0x682abc
call fcn.00405940
jne 0x681523
mov eax, dword [0x7b9914]
mov eax, dword [eax]
mov eax, dword [eax + 0x470]
mov dl, 1
call fcn.004ece94
jmp 0x681537
mov eax, dword [0x7b9914]
mov eax, dword [eax]
mov eax, dword [eax + 0x470]
xor edx, edx
call fcn.004ece94
mov eax, dword [0x7b9914]
mov eax, dword [eax]
mov eax, dword [eax + 0x464]
mov dl, 1
call fcn.004ece94
mov eax, dword [0x7b9914]
mov eax, dword [eax]
mov eax, dword [eax + 0x460]
xor edx, edx
call fcn.004ece94
mov eax, dword [0x7ba710]
mov eax, dword [eax]
cmp dword [eax + 0x10], 4
jle 0x681580
mov eax, dword [0x7b9914]
mov eax, dword [eax]
mov eax, dword [eax + 0x4ac]
mov dl, 1
call fcn.004ece94
mov eax, dword [0x7b9914]
mov eax, dword [eax]
mov eax, dword [eax + 0x4b0]
mov dl, 1
call fcn.004ece94
mov eax, dword [0x7b9914]
mov eax, dword [eax]
mov ebx, dword [eax + 0x924]
mov eax, dword [ebx + 0x25c]
mov edx, 0x682acc
mov ecx, dword [eax]
call dword [ecx + 0x54]
mov edx, eax
mov eax, dword [0x7b9914]
mov eax, ebx
call fcn.005859c0
mov eax, dword [0x7b9914]
mov eax, dword [eax]
xor edx, edx
call fcn.00777580
mov eax, dword [0x7b9914]
mov eax, dword [eax]
xor edx, edx
call fcn.00725850
mov eax, 2
call fcn.007936e0
mov eax, dword [ebp - 4]
mov ebx, dword [eax + 0x3a0]
mov eax, ebx
call fcn.0045d01c
mov edx, eax
add edx, 0x14
mov eax, ebx
call fcn.0045d1cc
lea edx, [ebp - 0x114]
mov eax, dword [0x7b78c8]
call fcn.00407bd4
mov edx, dword [ebp - 0x114]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x350]
call fcn.00478b38
mov eax, dword [0x7b98e0]
mov eax, dword [eax]
call fcn.00499874
mov eax, dword [0x7ba710]
mov eax, dword [eax]
cmp dword [eax + 0x10], 4
jne 0x68165e
mov eax, dword [0x7b9914]
mov eax, dword [eax]
mov eax, dword [eax + 0x4d0]
mov edx, dword [eax + 0x21c]
mov ecx, dword [0x7b9914]
call fcn.0045c96c
jmp 0x6816cd
mov eax, dword [0x7ba710]
mov eax, dword [eax]
mov eax, dword [eax + 4]
mov edx, 0x682ad8
call fcn.00405940
je 0x6816b6
mov eax, dword [0x7ba710]
mov eax, dword [eax]
mov eax, dword [eax + 4]
mov edx, 0x682ae4
call fcn.00405940
je 0x6816b6
mov eax, dword [0x7ba710]
mov eax, dword [eax]
mov eax, dword [eax + 4]
mov edx, 0x682af4
call fcn.00405940
je 0x6816b6
mov eax, dword [0x7ba710]
mov eax, dword [eax]
mov eax, dword [eax + 4]
mov edx, 0x682b04
call fcn.00405940
jne 0x6816cd
mov eax, dword [0x7b9914]
mov eax, dword [eax]
mov eax, dword [eax + 0x92c]
mov edx, 1
call fcn.005859c0
mov eax, dword [0x7b9914]
mov eax, dword [eax]
mov eax, dword [eax + 0x930]
mov edx, 0x682b14
call fcn.00478b38
mov edx, dword [0x7b80dc]
mov edx, dword [edx]
lea eax, [ebp - 0x118]
mov ecx, 0x682b20
call fcn.00405840
mov eax, dword [ebp - 0x118]
call fcn.0040dcb0
test al, al
jne 0x68172e
mov edx, dword [0x7b80dc]
mov edx, dword [edx]
lea eax, [ebp - 0x11c]
mov ecx, 0x682b20
call fcn.00405840
mov eax, dword [ebp - 0x11c]
call fcn.0040dcd4
mov eax, dword [0x7b9914]
mov eax, dword [eax]
xor edx, edx
call fcn.007518ac
mov eax, dword [0x7b7b90]
cmp dword [eax], 1
jne 0x68182c
mov eax, dword [0x7b8ae4]
mov edx, 0x682b34
call fcn.0040556c
lea ecx, [ebp - 0x120]
mov eax, dword [0x7ba908]
mov eax, dword [eax]
mov edx, 0x10
call fcn.0079596c
mov eax, dword [ebp - 0x120]
lea edx, [ebp - 0x18]
call fcn.0040d0b4
mov dl, 1
mov eax, dword [ebp - 0x18]
call fcn.0066a4bc
mov eax, dword [0x7ba710]
mov eax, dword [eax]
cmp dword [eax + 0x10], 4
jle 0x6817d5
mov eax, dword [0x7b8ae4]
mov eax, dword [eax]
call fcn.004057f4
cmp eax, 0x13
jne 0x6817d5
lea ecx, [ebp - 0x124]
mov eax, dword [0x7ba908]
mov eax, dword [eax]
mov edx, 0x19
call fcn.0079596c
mov eax, dword [ebp - 0x124]
lea edx, [ebp - 0x18]
call fcn.0040d0b4
mov dl, 1
mov eax, dword [ebp - 0x18]
call fcn.0066a4bc
mov eax, dword [0x7b8ae4]
mov eax, dword [eax]
call fcn.004057f4
cmp eax, 0x13
jge 0x68182c
mov dl, 1
mov eax, dword [0x449884]
call fcn.004499f0
mov ebx, eax
mov edx, 0x80000002
mov eax, ebx
call fcn.00449acc
xor ecx, ecx
mov edx, 0x682b50
mov eax, ebx
call fcn.00449c10
test al, al
je 0x681825
mov edx, 0x682b68
mov eax, ebx
call fcn.0044a064
mov eax, ebx
call fcn.00449a9c
mov eax, ebx
call fcn.004045cc
mov eax, 2
call fcn.007936e0
mov eax, dword [ebp - 4]
mov ebx, dword [eax + 0x3a0]
mov eax, ebx
call fcn.0045d01c
mov edx, eax
add edx, 0x14
mov eax, ebx
call fcn.0045d1cc
lea edx, [ebp - 0x128]
mov eax, dword [0x7b9fe4]
call fcn.00407bd4
mov edx, dword [ebp - 0x128]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x350]
call fcn.00478b38
mov eax, dword [0x7b98e0]
mov eax, dword [eax]
call fcn.00499874
mov eax, dword [0x7b9914]
mov eax, dword [eax]
xor ecx, ecx
xor edx, edx
call fcn.00784268
mov eax, 2
call fcn.007936e0
mov eax, dword [ebp - 4]
mov ebx, dword [eax + 0x3a0]
mov eax, ebx
call fcn.0045d01c
mov edx, eax
add edx, 0x14
mov eax, ebx
call fcn.0045d1cc
mov eax, dword [0x7b98e0]
mov eax, dword [eax]
call fcn.00499874
mov eax, dword [0x7b9914]
mov eax, dword [eax]
xor edx, edx
call fcn.0071f894
mov eax, 2
call fcn.007936e0
mov eax, dword [ebp - 4]
mov ebx, dword [eax + 0x3a0]
mov eax, ebx
call fcn.0045d01c
mov edx, eax
add edx, 0xa
mov eax, ebx
call fcn.0045d1cc
mov eax, dword [0x7b98e0]
mov eax, dword [eax]
call fcn.00499874
mov eax, dword [0x7b9914]
mov eax, dword [eax]
mov eax, dword [eax + 0x6ec]
mov byte [eax + 0x3a8], 0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x38c]
cmp byte [eax + 0x218], 0
je 0x68222e
mov eax, dword [0x7b9914]
mov eax, dword [eax]
mov eax, dword [eax + 0x6ec]
cmp byte [eax + 0x3a8], 0
jne 0x68222e
lea edx, [ebp - 0x12c]
mov eax, dword [0x7b8cec]
call fcn.00407bd4
mov edx, dword [ebp - 0x12c]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x390]
call fcn.00478b38
lea edx, [ebp - 0x130]
mov eax, dword [0x7b820c]
call fcn.00407bd4
mov edx, dword [ebp - 0x130]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x350]
call fcn.00478b38
lea edx, [ebp - 0x134]
mov eax, dword [0x7b9e54]
call fcn.00407bd4
mov edx, dword [ebp - 0x134]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x374]
call fcn.00478b38
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x374]
mov dl, 1
mov ecx, dword [eax]
call dword [ecx + 0x64]
mov eax, dword [0x7b8c54]
mov eax, dword [eax]
mov eax, dword [eax + 0x324]
mov edx, 0x10
call fcn.00548438
mov eax, dword [0x7b8c54]
mov eax, dword [eax]
mov eax, dword [eax + 0x324]
mov edx, dword [eax]
call dword [edx + 0x38c]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3a8]
mov dl, 1
call fcn.00478a28
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x3a8]
mov eax, dword [0x7b9914]
mov eax, dword [eax]
mov eax, dword [eax + 0xce8]
mov ecx, dword [eax]
call dword [ecx + 0x68]
mov eax, dword [0x7b9914]
mov eax, dword [eax]
mov eax, dword [eax + 0xce8]
mov eax, dword [eax + 0x220]
mov dl, 1
call fcn.00463784
mov eax, dword [0x7b98e0]
mov eax, dword [eax]
call fcn.00499874
mov eax, dword [0x7b9914]
mov eax, dword [eax]
mov eax, dword [eax + 0x2fc]
call fcn.004864c8
mov eax, dword [0x7b9914]
mov eax, dword [eax]
mov edx, dword [eax + 0x2f8]
mov eax, dword [0x7b9914]
mov eax, dword [eax]
mov eax, dword [eax + 0x2fc]
call fcn.004869e4
mov eax, dword [0x7b9914]
mov eax, dword [eax]
mov eax, dword [eax + 0x2fc]
xor edx, edx
call fcn.0048643c
push 1
mov cl, 1
mov dl, 1
mov eax, dword [0x67a56c]
call fcn.0067ce44
mov edx, dword [0x7b87f4]
mov dword [edx], eax
mov eax, dword [0x7b87f4]
mov eax, dword [eax]
mov byte [eax + 0xf], 1
lea edx, [ebp - 0x138]
mov eax, dword [0x7b821c]
call fcn.00407bd4
lea eax, [ebp - 0x138]
push eax
lea edx, [ebp - 0x13c]
mov eax, dword [0x7b90fc]
call fcn.00407bd4
mov edx, dword [ebp - 0x13c]
pop eax
call fcn.004057fc
mov eax, dword [ebp - 0x138]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x384]
mov eax, dword [eax + 0x208]
xor edx, edx
call fcn.00456ae0
pop edx
call fcn.00456a3c
lea edx, [ebp - 0x140]
mov eax, dword [0x7b821c]
call fcn.00407bd4
lea eax, [ebp - 0x140]
push eax
lea edx, [ebp - 0x144]
mov eax, dword [0x7b90fc]
call fcn.00407bd4
mov edx, dword [ebp - 0x144]
pop eax
call fcn.004057fc
mov edx, dword [ebp - 0x140]
mov eax, dword [0x7b9388]
mov eax, dword [eax]
mov eax, dword [eax + 0x2f8]
call fcn.00478b38
mov eax, dword [0x7b9388]
mov eax, dword [eax]
call fcn.004963b0
mov eax, dword [0x7b9914]
mov eax, dword [eax]
mov eax, dword [eax + 0x6ec]
mov byte [eax + 0x3a8], 0
mov edx, dword [0x7b9914]
mov eax, dword [eax + 0x26c]
xor edx, edx
call fcn.0045901c
mov ebx, eax
mov eax, ebx
call fcn.004582d4
mov ebx, eax
test ebx, ebx
je 0x681bca
mov edx, dword [ebx + 8]
mov eax, 0x682b78
call fcn.00405b38
test eax, eax
je 0x681bbd
mov dl, 1
mov eax, ebx
call fcn.00457fc4
mov eax, dword [0x7b9914]
mov eax, dword [eax]
mov eax, dword [eax + 0x6ec]
mov edx, 2
call fcn.005813e0
mov eax, ebx
call fcn.00458330
mov ebx, eax
test ebx, ebx
jne 0x681b8c
mov eax, dword [ebp - 4]
mov dword [eax + 0x3c0], 1
mov dword [eax + 0x3c4], 0
mov eax, dword [0x7b9914]
mov eax, dword [eax]
mov ebx, dword [eax + 0x6ec]
mov eax, dword [ebp - 4]
mov dword [ebx + 0x3b4], eax
mov dword [ebx + 0x3b0], 0x683294
mov eax, dword [0x7b9914]
mov eax, ebx
call fcn.0058156c
mov edx, dword [0x7b87f4]
mov edx, dword [edx]
mov dword [edx + 0x68], eax
mov eax, dword [0x7b87f4]
mov eax, dword [eax]
mov edx, dword [ebp - 4]
mov dword [eax + 0x1c], edx
mov dword [eax + 0x18], 0x67f6c0
xor eax, eax
push ebp
push 0x681c50
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x7b9388]
mov eax, dword [eax]
call fcn.00496208
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x681c5a
mov eax, dword [0x7b87f4]
mov eax, dword [eax]
mov byte [eax + 0x45], 1
mov eax, dword [0x7b87f4]
mov eax, dword [eax]
mov byte [eax + 0x50], 1
mov eax, dword [0x7b87f4]
mov eax, dword [eax]
mov byte [eax + 0x44], 1
mov eax, dword [0x7b87f4]
mov eax, dword [eax]
mov byte [eax + 0x46], 0
mov eax, dword [0x7b87f4]
mov eax, dword [eax]
mov byte [eax + 0x4f], 0
mov eax, dword [0x7b87f4]
mov eax, dword [eax]
mov byte [eax + 0x47], 0
mov eax, dword [0x7b87f4]
mov eax, dword [eax]
mov byte [eax + 0x4c], 0
mov eax, dword [0x7b87f4]
mov eax, dword [eax]
mov byte [eax + 0x4d], 1
mov eax, dword [0x7b87f4]
mov eax, dword [eax]
mov byte [eax + 0x4e], 0
mov eax, dword [0x7b87f4]
mov eax, dword [eax]
mov byte [eax + 0x51], 0
mov eax, dword [0x7b87f4]
mov eax, dword [eax]
mov byte [eax + 0x52], 0
mov eax, dword [0x7b87f4]
mov eax, dword [eax]
mov byte [eax + 0x53], 0
mov eax, dword [0x7b9914]
mov eax, dword [eax]
mov eax, dword [eax + 0x8a4]
mov eax, dword [eax + 0x22c]
call fcn.0045e5d0
dec eax
test eax, eax
jl 0x681d6e
inc eax
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x1c], 0
xor eax, eax
push ebp
push 0x681d5c
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x7b9914]
mov eax, dword [eax]
mov eax, dword [eax + 0x8a4]
mov eax, dword [eax + 0x22c]
mov edx, dword [ebp - 0x1c]
call fcn.0045e600
mov eax, dword [eax + 0x24]
lea edx, [ebp - 0x148]
call fcn.0040ce6c
mov edx, dword [ebp - 0x148]
mov eax, dword [0x7b87f4]
mov eax, dword [eax]
mov eax, dword [eax + 0x54]
mov ecx, dword [eax]
call dword [ecx + 0x38]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x681d66
inc dword [ebp - 0x1c]
dec dword [ebp - 0x2c]
jne 0x681d06
mov edx, dword [0x7b9d24]
mov edx, dword [edx]
lea eax, [ebp - 0x150]
mov ecx, 0x682b84
call fcn.00405840
mov eax, dword [ebp - 0x150]
lea edx, [ebp - 0x14c]
call fcn.0040ce6c
mov edx, dword [ebp - 0x14c]
mov eax, dword [0x7b87f4]
mov eax, dword [eax]
mov eax, dword [eax + 0x54]
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [0x7b9914]
mov eax, dword [eax]
mov eax, dword [eax + 0x88c]
mov eax, dword [eax + 0x22c]
xor edx, edx
call fcn.0045e600
call fcn.0045df5c
test al, al
je 0x681ec3
mov eax, dword [0x7b87f4]
mov eax, dword [eax]
mov eax, dword [eax + 0x60]
mov edx, 0x682bb4
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [0x7b87f4]
mov eax, dword [eax]
mov eax, dword [eax + 0x60]
mov edx, 0x682bc4
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [0x7b87f4]
mov eax, dword [eax]
mov eax, dword [eax + 0x60]
mov edx, 0x682bd4
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [0x7b87f4]
mov eax, dword [eax]
mov eax, dword [eax + 0x60]
mov edx, 0x682be4
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [0x7b87f4]
mov eax, dword [eax]
mov eax, dword [eax + 0x60]
mov edx, 0x682bf4
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [0x7b87f4]
mov eax, dword [eax]
mov eax, dword [eax + 0x60]
mov edx, 0x682c04
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [0x7b87f4]
mov eax, dword [eax]
mov eax, dword [eax + 0x64]
mov edx, 0x682c14
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [0x7b87f4]
mov eax, dword [eax]
mov eax, dword [eax + 0x64]
mov edx, 0x682c2c
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [0x7b87f4]
mov eax, dword [eax]
mov eax, dword [eax + 0x64]
mov edx, 0x682c40
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [0x7b87f4]
mov eax, dword [eax]
mov eax, dword [eax + 0x64]
mov edx, 0x682c58
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [0x7b87f4]
mov eax, dword [eax]
mov eax, dword [eax + 0x64]
mov edx, 0x682c70
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [0x7b87f4]
mov eax, dword [eax]
mov eax, dword [eax + 0x64]
mov edx, 0x682c88
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [0x7b9914]
mov eax, dword [eax]
mov eax, dword [eax + 0x88c]
mov eax, dword [eax + 0x22c]
call fcn.0045e5d0
dec eax
test eax, eax
jle 0x6820b4
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x1c], 1
mov eax, dword [0x7b9914]
mov eax, dword [eax]
mov eax, dword [eax + 0x88c]
mov eax, dword [eax + 0x22c]
mov edx, dword [ebp - 0x1c]
call fcn.0045e600
call fcn.0045df5c
test al, al
je 0x6820a8
mov eax, dword [0x7b9914]
mov eax, dword [eax]
mov eax, dword [eax + 0x88c]
mov eax, dword [eax + 0x22c]
mov edx, dword [ebp - 0x1c]
call fcn.0045e600
mov eax, dword [eax + 0x24]
lea edx, [ebp - 0x10]
call fcn.0040ce6c
mov eax, dword [ebp - 0x10]
mov edx, 0x682c9c
call fcn.00405940
je 0x6820a8
mov eax, dword [ebp - 0x10]
mov edx, 0x682cac
call fcn.00405940
je 0x6820a8
mov eax, dword [ebp - 0x10]
mov edx, 0x682cbc
call fcn.00405940
je 0x6820a8
mov eax, dword [ebp - 0x10]
mov edx, 0x682ccc
call fcn.00405940
je 0x6820a8
mov eax, dword [ebp - 0x10]
mov edx, 0x682cdc
call fcn.00405940
je 0x6820a8
mov eax, dword [ebp - 0x10]
mov edx, 0x682cec
call fcn.00405940
je 0x6820a8
mov eax, dword [ebp - 0x10]
mov edx, 0x682cfc
call fcn.00405940
je 0x6820a8
mov eax, dword [ebp - 0x10]
mov edx, 0x682d0c
call fcn.00405940
je 0x6820a8
mov eax, dword [ebp - 0x10]
mov edx, 0x682d1c
call fcn.00405940
jne 0x682004
mov eax, dword [0x7b87f4]
mov eax, dword [eax]
cmp byte [eax + 0x7c], 0
jne 0x6820a8
mov eax, dword [0x7b87f4]
mov eax, dword [eax]
mov byte [eax + 0x7c], 1
jmp 0x6820a8
mov edx, dword [ebp - 0x10]
mov eax, 0x682d2c
call fcn.00405b38
test eax, eax
jne 0x682055
mov eax, dword [0x7b9914]
mov eax, dword [eax]
mov eax, dword [eax + 0x88c]
mov eax, dword [eax + 0x22c]
mov edx, dword [ebp - 0x1c]
call fcn.0045e600
mov eax, dword [eax + 0x24]
lea edx, [ebp - 0x154]
call fcn.0040ce6c
mov edx, dword [ebp - 0x154]
mov eax, dword [0x7b87f4]
mov eax, dword [eax]
mov eax, dword [eax + 0x5c]
mov ecx, dword [eax]
call dword [ecx + 0x38]
jmp 0x6820a8
lea edx, [ebp - 0x14]
mov eax, dword [ebp - 0x10]
call fcn.0040e164
mov edx, dword [ebp - 0x14]
mov eax, 0x682d2c
call fcn.00405b38
test eax, eax
jne 0x682096
mov eax, dword [ebp - 0x10]
cmp byte [eax], 0x2a
jne 0x682096
mov eax, dword [ebp - 0x10]
cmp byte [eax + 1], 0x2e
jne 0x682096
mov eax, dword [0x7b87f4]
mov eax, dword [eax]
mov eax, dword [eax + 0x60]
mov edx, dword [ebp - 0x14]
mov ecx, dword [eax]
call dword [ecx + 0x38]
jmp 0x6820a8
mov eax, dword [0x7b87f4]
mov eax, dword [eax]
mov eax, dword [eax + 0x64]
mov edx, dword [ebp - 0x10]
mov ecx, dword [eax]
call dword [ecx + 0x38]
inc dword [ebp - 0x1c]
dec dword [ebp - 0x2c]
jne 0x681eee
mov eax, dword [0x7ba1bc]
mov byte [eax], 1
mov eax, dword [0x7b87f4]
mov eax, dword [eax]
call fcn.0042e298
mov eax, dword [0x7b98e0]
mov eax, dword [eax]
call fcn.00499874
mov eax, dword [0x7b9914]
mov eax, dword [eax]
mov eax, dword [eax + 0x6ec]
cmp byte [eax + 0x3a8], 0
je 0x6820f6
mov eax, dword [0x7b87f4]
mov eax, dword [eax]
call fcn.0042e2c0
mov eax, dword [0x7ba1bc]
cmp byte [eax], 0
jne 0x6820c8
mov eax, dword [0x7b9914]
mov eax, dword [eax]
mov eax, dword [eax + 0xce8]
mov eax, dword [eax + 0x220]
xor edx, edx
call fcn.00463784
mov eax, dword [0x7b9914]
mov eax, dword [eax]
mov eax, dword [eax + 0xce8]
xor edx, edx
mov ecx, dword [eax]
call dword [ecx + 0x68]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3a8]
xor edx, edx
call fcn.00478a28
lea eax, [ebp - 0x158]
push eax
mov eax, dword [0x7b8c54]
mov eax, dword [eax]
mov eax, dword [eax + 0x324]
xor edx, edx
call fcn.005463cc
mov dword [ebp - 0x5c], eax
mov byte [ebp - 0x58], 0
lea eax, [ebp - 0x5c]
push eax
lea edx, [ebp - 0x15c]
mov eax, dword [0x7bac30]
call fcn.00407bd4
mov eax, dword [ebp - 0x15c]
xor ecx, ecx
pop edx
call fcn.0040ef70
mov edx, dword [ebp - 0x158]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x390]
call fcn.00478b38
mov eax, dword [0x7b8c54]
mov eax, dword [eax]
mov eax, dword [eax + 0x324]
xor edx, edx
call fcn.005463cc
test eax, eax
jbe 0x6821d0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x394]
mov dl, 1
mov ecx, dword [eax]
call dword [ecx + 0x64]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x394]
mov dword [eax + 0xc], 2
jmp 0x6821e0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x394]
xor edx, edx
mov ecx, dword [eax]
call dword [ecx + 0x64]
mov eax, dword [0x7b9914]
mov eax, dword [eax]
mov eax, dword [eax + 0x6ec]
cmp byte [eax + 0x3a8], 0
jne 0x682206
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x370]
mov dl, 1
call fcn.00478a28
mov eax, dword [ebp - 4]
mov ebx, dword [eax + 0x3a0]
mov eax, ebx
call fcn.0045d01c
mov edx, eax
add edx, 0x14
mov eax, ebx
call fcn.0045d1cc
mov eax, dword [0x7b98e0]
mov eax, dword [eax]
call fcn.00499874
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x38c]
cmp byte [eax + 0x218], 0
jne 0x682259
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x388]
cmp byte [eax + 0x218], 0
je 0x682259
push ebp
call fcn.0067f6e0
pop ecx
lea edx, [ebp - 0x160]
mov eax, dword [0x7b82d8]
call fcn.00407bd4
mov edx, dword [ebp - 0x160]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x374]
call fcn.00478b38
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x354]
mov dl, 1
call fcn.00478a28
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x358]
mov dl, 1
call fcn.00478a28
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x374]
mov dl, 1
mov ecx, dword [eax]
call dword [ecx + 0x64]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x388]
cmp byte [eax + 0x218], 0
jne 0x6822d5
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x38c]
cmp byte [eax + 0x218], 0
je 0x682423
mov eax, dword [0x7b9914]
mov eax, dword [eax]
mov eax, dword [eax + 0x6ec]
cmp byte [eax + 0x3a8], 0
je 0x68237f
lea edx, [ebp - 0x164]
mov eax, dword [0x7b776c]
call fcn.00407bd4
mov edx, dword [ebp - 0x164]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x350]
call fcn.00478b38
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x354]
xor edx, edx
call fcn.00478a28
lea edx, [ebp - 0x168]
mov eax, dword [0x7b849c]
call fcn.00407bd4
mov edx, dword [ebp - 0x168]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x358]
call fcn.00478b38
lea edx, [ebp - 0x16c]
mov eax, dword [0x7b776c]
call fcn.00407bd4
mov eax, dword [ebp - 0x16c]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x384]
mov eax, dword [eax + 0x208]
xor edx, edx
call fcn.00456ae0
pop edx
call fcn.00456a3c
jmp 0x6829b1
lea edx, [ebp - 0x170]
mov eax, dword [0x7bac0c]
call fcn.00407bd4
mov edx, dword [ebp - 0x170]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x350]
call fcn.00478b38
lea edx, [ebp - 0x174]
mov eax, dword [0x7b8208]
call fcn.00407bd4
mov edx, dword [ebp - 0x174]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x354]
call fcn.00478b38
lea edx, [ebp - 0x178]
mov eax, dword [0x7b7dd4]
call fcn.00407bd4
mov edx, dword [ebp - 0x178]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x358]
call fcn.00478b38
lea edx, [ebp - 0x17c]
mov eax, dword [0x7bac0c]
call fcn.00407bd4
mov eax, dword [ebp - 0x17c]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x384]
mov eax, dword [eax + 0x208]
xor edx, edx
call fcn.00456ae0
pop edx
call fcn.00456a3c
jmp 0x6829b1
lea edx, [ebp - 0x180]
mov eax, dword [0x7b9ec0]
call fcn.00407bd4
mov edx, dword [ebp - 0x180]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x350]
call fcn.00478b38
lea edx, [ebp - 0x184]
mov eax, dword [0x7b7ba8]
call fcn.00407bd4
mov eax, dword [ebp - 0x184]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x384]
mov eax, dword [eax + 0x208]
xor edx, edx
call fcn.00456ae0
pop edx
call fcn.00456a3c
lea edx, [ebp - 0x188]
mov eax, dword [0x7ba4c8]
call fcn.00407bd4
mov eax, dword [ebp - 0x188]
push eax
lea edx, [ebp - 0x18c]
mov eax, dword [0x7b981c]
call fcn.00407bd4
mov edx, dword [ebp - 0x18c]
mov eax, dword [0x7b9914]
mov eax, dword [eax]
pop ecx
call fcn.00705ccc
jmp 0x6829b1
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x308]
call fcn.004567d4
cmp eax, 3
jne 0x6829b1
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3c8]
cmp eax, 2
jne 0x68264a
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x388]
cmp byte [eax + 0x218], 0
je 0x682800
push 0x21
lea edx, [ebp - 0x190]
mov eax, dword [0x7b8824]
call fcn.00407bd4
mov eax, dword [ebp - 0x190]
call fcn.004059f4
push eax
lea edx, [ebp - 0x194]
mov eax, dword [0x7b80f8]
call fcn.00407bd4
mov eax, dword [ebp - 0x194]
call fcn.004059f4
push eax
mov eax, dword [ebp - 4]
call fcn.0047f48c
push eax
call sub.user32.dll_MessageBoxA_1
dec eax
jne 0x682800
push ebp
call fcn.006805b8
pop ecx
mov eax, dword [ebp - 4]
dec dword [eax + 0x3c8]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x38c]
xor edx, edx
call fcn.004ece94
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x370]
xor edx, edx
call fcn.00478a28
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x304]
xor edx, edx
call fcn.00478a28
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x394]
xor edx, edx
mov ecx, dword [eax]
call dword [ecx + 0x64]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x354]
xor edx, edx
call fcn.00478a28
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x358]
xor edx, edx
call fcn.00478a28
push ebp
call fcn.0067f6e0
pop ecx
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x370]
mov dl, 1
call fcn.00478a28
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x354]
mov dl, 1
call fcn.00478a28
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x358]
mov dl, 1
call fcn.00478a28
lea edx, [ebp - 0x198]
mov eax, dword [0x7b82d8]
call fcn.00407bd4
mov edx, dword [ebp - 0x198]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x374]
call fcn.00478b38
lea edx, [ebp - 0x19c]
mov eax, dword [0x7bac0c]
call fcn.00407bd4
mov eax, dword [ebp - 0x19c]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x384]
mov eax, dword [eax + 0x208]
xor edx, edx
call fcn.00456ae0
pop edx
call fcn.00456a3c
jmp 0x682800
dec eax
jne 0x682800
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x38c]
cmp byte [eax + 0x218], 0
je 0x6826c7
push 0x21
lea edx, [ebp - 0x1a0]
mov eax, dword [0x7b8824]
call fcn.00407bd4
mov eax, dword [ebp - 0x1a0]
call fcn.004059f4
push eax
lea edx, [ebp - 0x1a4]
mov eax, dword [0x7b80f8]
call fcn.00407bd4
mov eax, dword [ebp - 0x1a4]
call fcn.004059f4
push eax
mov eax, dword [ebp - 4]
call fcn.0047f48c
push eax
call sub.user32.dll_MessageBoxA_1
dec eax
jne 0x6827f0
push ebp
call fcn.006805b8
pop ecx
mov eax, dword [ebp - 4]
dec dword [eax + 0x3c8]
jmp 0x6827f0
push 0x21
lea edx, [ebp - 0x1a8]
mov eax, dword [0x7b8824]
call fcn.00407bd4
mov eax, dword [ebp - 0x1a8]
call fcn.004059f4
push eax
lea edx, [ebp - 0x1ac]
mov eax, dword [0x7ba988]
call fcn.00407bd4
mov eax, dword [ebp - 0x1ac]
call fcn.004059f4
push eax
mov eax, dword [ebp - 4]
call fcn.0047f48c
push eax
call sub.user32.dll_MessageBoxA_1
dec eax
jne 0x6827f0
lea edx, [ebp - 0x1b0]
mov eax, dword [0x7b9fa0]
call fcn.00407bd4
mov edx, dword [ebp - 0x1b0]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x350]
call fcn.00478b38
lea edx, [ebp - 0x1b4]
mov eax, dword [0x7b9fa0]
call fcn.00407bd4
mov eax, dword [ebp - 0x1b4]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x384]
mov eax, dword [eax + 0x208]
xor edx, edx
call fcn.00456ae0
pop edx
call fcn.00456a3c
mov eax, dword [0x7b98e0]
mov eax, dword [eax]
call fcn.00499874
mov eax, dword [0x7b9914]
mov eax, dword [eax]
mov edx, 1
call fcn.007506e0
mov dword [ebp - 0x1c], eax
mov eax, dword [0x7b9914]
mov eax, dword [eax]
mov eax, dword [eax + 0x774]
mov edx, dword [eax]
call dword [edx + 0x38c]
lea eax, [ebp - 0x1b8]
push eax
lea edx, [ebp - 0x1bc]
mov eax, dword [0x7b91f0]
call fcn.00407bd4
mov eax, dword [ebp - 0x1bc]
mov edx, dword [ebp - 0x1c]
mov dword [ebp - 0x5c], edx
mov byte [ebp - 0x58], 0
lea edx, [ebp - 0x5c]
xor ecx, ecx
call fcn.0040ef70
mov edx, dword [ebp - 0x1b8]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x390]
call fcn.00478b38
mov eax, dword [ebp - 4]
dec dword [eax + 0x3c8]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x370]
xor edx, edx
call fcn.00478a28
mov eax, dword [ebp - 4]
cmp dword [eax + 0x3c8], 0
jne 0x6829b1
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x370]
xor edx, edx
call fcn.00478a28
lea edx, [ebp - 0x1c0]
mov eax, dword [0x7b9f2c]
call fcn.00407bd4
mov edx, dword [ebp - 0x1c0]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x350]
call fcn.00478b38
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x398]
cmp byte [eax + 0x218], 0
je 0x682914
lea edx, [ebp - 0x1c4]
mov eax, dword [0x7b7fe0]
call fcn.00407bd4
mov edx, dword [ebp - 0x1c4]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x354]
call fcn.00478b38
lea edx, [ebp - 0x1c8]
mov eax, dword [0x7b8248]
call fcn.00407bd4
mov edx, dword [ebp - 0x1c8]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x358]
call fcn.00478b38
lea edx, [ebp - 0x1cc]
mov eax, dword [0x7b9f2c]
call fcn.00407bd4
mov eax, dword [ebp - 0x1cc]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x384]
mov eax, dword [eax + 0x208]
xor edx, edx
call fcn.00456ae0
pop edx
call fcn.00456a3c
lea edx, [ebp - 0x1d0]
mov eax, dword [0x7ba4c8]
call fcn.00407bd4
mov eax, dword [ebp - 0x1d0]
push eax
lea edx, [ebp - 0x1d4]
mov eax, dword [0x7b8810]
call fcn.00407bd4
mov edx, dword [ebp - 0x1d4]
mov eax, dword [0x7b9914]
mov eax, dword [eax]
pop ecx
call fcn.00705ccc
jmp 0x6829a1
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x354]
xor edx, edx
call fcn.00478b38
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x358]
xor edx, edx
call fcn.00478b38
lea edx, [ebp - 0x1d8]
mov eax, dword [0x7b99bc]
call fcn.00407bd4
mov eax, dword [ebp - 0x1d8]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x384]
mov eax, dword [eax + 0x208]
xor edx, edx
call fcn.00456ae0
pop edx
call fcn.00456a3c
lea edx, [ebp - 0x1dc]
mov eax, dword [0x7ba4c8]
call fcn.00407bd4
mov eax, dword [ebp - 0x1dc]
push eax
lea edx, [ebp - 0x1e0]
mov eax, dword [0x7b7cb4]
call fcn.00407bd4
mov edx, dword [ebp - 0x1e0]
mov eax, dword [0x7b9914]
mov eax, dword [eax]
pop ecx
call fcn.00705ccc
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x394]
xor edx, edx
call fcn.00478a28
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x682a0d
lea eax, [ebp - 0x1e0]
mov edx, 0x5c
call fcn.0040553c
lea eax, [ebp - 0x70]
call fcn.00405518
lea eax, [ebp - 0x6c]
call fcn.00405518
lea eax, [ebp - 0x54]
mov edx, 6
call fcn.0040553c
lea eax, [ebp - 0x3c]
mov edx, 4
call fcn.0040553c
lea eax, [ebp - 0x18]
mov edx, 5
call fcn.0040553c
ret