Function at 0x987ca8
Capabilities:
Encode data using base64

Disassembly:
mov eax, 0xaee2c0
call fcn.00a6fc7c
sub esp, 0x18c
push ebx
push esi
mov esi, ecx
push edi
lea ecx, [esi + 0x28f8]
xor ebx, ebx
push ebx
mov dword [ebp - 0x3c], esi
mov dword [ebp - 0x38], ecx
call fcn.00444866
test al, al
mov edi, dword [ebp + 8]
jne 0x987d24
cmp edi, dword [0xbe25d4]
jne 0x987d24
push ebx
lea ecx, [esi + 0x28ec]
mov dword [esi + 0x28e8], ebx
call fcn.00429919
push ebx
lea ecx, [esi + 0x28f0]
call fcn.00429919
push ebx
lea ecx, [esi + 0x28f4]
call fcn.00429919
mov ecx, dword [ebp - 0x38]
push ebx
call fcn.00429919
push ebx
lea ecx, [esi + 0x28fc]
call fcn.00429919
jmp 0x989630
mov eax, dword [ebp + 0xc]
mov dword [esi + 0x28e8], eax
mov esi, 0xbe7330
push esi
lea ecx, [ebp - 0x118]
mov dword [0xbe25d4], edi
call fcn.0040318f
push esi
lea ecx, [ebp - 0x108]
mov dword [ebp - 4], ebx
call fcn.0040318f
push ebx
push ebx
lea eax, [ebp - 0x118]
push eax
lea eax, [ebp - 0x108]
push eax
push ecx
mov eax, esp
mov dword [ebp + 0xc], esp
push 0xc7d
push eax
mov byte [ebp - 4], 1
call fcn.007a48d0
mov ecx, eax
call fcn.00406368
lea eax, [ebp - 0x138]
push eax
mov byte [ebp - 4], 1
call fcn.00406548
mov ecx, eax
call fcn.00402680
mov ecx, eax
call fcn.00404a75
mov ecx, eax
mov byte [ebp - 4], 3
call fcn.004032b2
cmp eax, ebx
mov dword [ebp - 0xf4], eax
mov dword [ebp - 0x94], ebx
mov esi, 0x80004002
je 0x987ddd
lea eax, [ebp - 0xf4]
push eax
lea ecx, [ebp - 0x94]
call fcn.004053ee
cmp eax, ebx
jge 0x987ddd
cmp eax, esi
je 0x987ddd
push eax
call fcn.00a6ef01
lea eax, [ebp - 0x138]
push eax
mov byte [ebp - 4], 7
call fcn.004029b7
cmp eax, ebx
pop ecx
jge 0x987df8
push eax
call fcn.00a6ef01
lea eax, [ebp - 0x108]
push eax
mov byte [ebp - 4], 6
call fcn.004029b7
cmp eax, ebx
pop ecx
jge 0x987e13
push eax
call fcn.00a6ef01
lea eax, [ebp - 0x118]
push eax
mov byte [ebp - 4], 5
call fcn.004029b7
cmp eax, ebx
pop ecx
jge 0x987e2e
push eax
call fcn.00a6ef01
mov dword [ebp - 0x80], ebx
lea eax, [ebp + 0xc]
push 0xc81
push eax
mov byte [ebp - 4], 8
call fcn.007a48d0
mov ecx, eax
call fcn.0040652b
mov ecx, dword [eax]
push 0x64
mov eax, edi
cdq
pop edi
idiv edi
lea eax, [ebp - 0x80]
mov byte [ebp - 4], 9
push edx
push ecx
push eax
call fcn.0044549c
mov eax, dword [ebp + 0xc]
add esp, 0xc
cmp eax, ebx
mov byte [ebp - 4], 8
je 0x987e7b
add eax, 0xfffffff4
push eax
call fcn.00429f5a
pop ecx
push ebx
push ebx
push 0xffffffffffffffff
push dword [ebp - 0x80]
push ebx
push ebx
call dword [fcn.00be1670]
shl eax, 1
add eax, 3
and eax, 0xfffffffc
call fcn.00a70270
mov eax, esp
push ebx
push ebx
push 0xffffffffffffffff
push eax
lea ecx, [ebp - 0x80]
call fcn.00429475
push eax
call fcn.0046a4b6
pop ecx
pop ecx
mov ecx, esp
mov dword [ebp + 0xc], esp
push eax
call fcn.0040339f
lea eax, [ebp - 0x188]
push eax
lea ecx, [ebp - 0x94]
mov byte [ebp - 4], 8
call fcn.0040263b
mov ecx, eax
call fcn.00403ac7
mov ecx, eax
mov byte [ebp - 4], 0xb
call fcn.004032b2
cmp eax, ebx
mov dword [ebp - 0xec], eax
mov dword [ebp - 0x48], ebx
je 0x987f0b
lea eax, [ebp - 0xec]
push eax
lea ecx, [ebp - 0x48]
call fcn.004053ee
cmp eax, ebx
jge 0x987f0b
cmp eax, esi
je 0x987f0b
push eax
call fcn.00a6ef01
lea eax, [ebp - 0x188]
push eax
mov byte [ebp - 4], 0xd
call fcn.004029b7
cmp eax, ebx
pop ecx
jge 0x987f26
push eax
call fcn.00a6ef01
push ebx
push ebx
push ecx
mov eax, esp
mov dword [ebp + 0xc], esp
push 0x5e4
push eax
call fcn.007a48d0
mov ecx, eax
call fcn.00406368
lea eax, [ebp - 0x168]
push eax
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0xd
call fcn.0040263b
mov ecx, eax
call fcn.00403ac7
mov ecx, eax
mov byte [ebp - 4], 0xf
call fcn.004032b2
cmp eax, ebx
mov dword [ebp - 0xf8], eax
mov dword [ebp - 0x1c], ebx
je 0x987f8f
lea eax, [ebp - 0xf8]
push eax
lea ecx, [ebp - 0x1c]
call fcn.0041f042
cmp eax, ebx
jge 0x987f8f
cmp eax, esi
je 0x987f8f
push eax
call fcn.00a6ef01
lea eax, [ebp - 0x168]
push eax
mov byte [ebp - 4], 0x11
call fcn.004029b7
cmp eax, ebx
pop ecx
jge 0x987faa
push eax
call fcn.00a6ef01
push ebx
push ebx
push ecx
mov eax, esp
mov dword [ebp - 0x20], esp
push 0x4f1
push eax
call fcn.007a48d0
mov ecx, eax
call fcn.00406368
lea eax, [ebp - 0xa8]
push eax
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x11
call fcn.0040263b
mov ecx, eax
call fcn.00403ac7
mov ecx, eax
mov byte [ebp - 4], 0x13
call fcn.004032b2
cmp eax, ebx
mov dword [ebp + 0xc], eax
mov dword [ebp - 0x8c], ebx
je 0x988013
lea eax, [ebp + 0xc]
push eax
lea ecx, [ebp - 0x8c]
call fcn.0041f042
cmp eax, ebx
jge 0x988013
cmp eax, esi
je 0x988013
push eax
call fcn.00a6ef01
lea eax, [ebp - 0xa8]
push eax
mov byte [ebp - 4], 0x15
call fcn.004029b7
cmp eax, ebx
pop ecx
jge 0x98802e
push eax
call fcn.00a6ef01
push ebx
push ebx
push ecx
mov eax, esp
mov dword [ebp - 0x20], esp
push 0xc83
push eax
call fcn.007a48d0
mov ecx, eax
call fcn.00406368
lea eax, [ebp - 0x148]
push eax
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x15
call fcn.0040263b
mov ecx, eax
call fcn.00403ac7
mov ecx, eax
mov byte [ebp - 4], 0x17
call fcn.004032b2
cmp eax, ebx
mov dword [ebp - 0xf0], eax
mov dword [ebp - 0x98], ebx
je 0x98809d
lea eax, [ebp - 0xf0]
push eax
lea ecx, [ebp - 0x98]
call fcn.0041f042
cmp eax, ebx
jge 0x98809d
cmp eax, esi
je 0x98809d
push eax
call fcn.00a6ef01
lea eax, [ebp - 0x148]
push eax
mov byte [ebp - 4], 0x19
call fcn.004029b7
cmp eax, ebx
pop ecx
jge 0x9880b8
push eax
call fcn.00a6ef01
cmp dword [ebp - 0x1c], ebx
mov edi, 0x80004003
jne 0x9880c8
push edi
call fcn.00a6ef01
mov ecx, dword [ebp - 0x1c]
call fcn.0040c250
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x20], ebx
fild qword [ebp - 0x24]
fmul qword [0xb06520]
call fcn.00a70f94
cmp dword [ebp - 0x1c], ebx
mov dword [ebp + 0xc], eax
jne 0x9880f2
push edi
call fcn.00a6ef01
mov ecx, dword [ebp - 0x1c]
call fcn.0040c2e7
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x20], ebx
fild qword [ebp - 0x24]
fmul qword [0xb06520]
call fcn.00a70f94
cmp dword [ebp - 0x1c], ebx
mov dword [ebp - 0x34], eax
jne 0x98811c
push edi
call fcn.00a6ef01
mov eax, dword [ebp - 0x1c]
cmp eax, ebx
mov dword [ebp - 0x6c], eax
jne 0x98812c
push edi
call fcn.00a6ef01
mov eax, dword [ebp - 0x3c]
mov esi, dword [ebp - 0x1c]
lea edi, [eax + 4]
mov eax, dword [edi]
mov ecx, edi
mov dword [ebp - 0x20], edi
call dword [eax + 0x10]
fild dword [eax]
mov ecx, dword [ebp - 0x6c]
fstp qword [ebp - 0x2c]
call fcn.0040c250
mov edx, eax
shr edx, 1
mov ecx, esi
mov dword [ebp - 0x6c], edx
call fcn.004100a1
mov ecx, dword [ebp - 0x6c]
sub ecx, eax
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x14], ebx
fild qword [ebp - 0x18]
fmul qword [0xb06520]
fsubr qword [ebp - 0x2c]
call fcn.00a70f94
cmp dword [ebp - 0x1c], ebx
mov dword [ebp - 0x28], eax
jne 0x988188
push 0x80004003
call fcn.00a6ef01
mov eax, dword [ebp - 0x1c]
cmp eax, ebx
mov dword [ebp - 0x6c], eax
jne 0x98819c
push 0x80004003
call fcn.00a6ef01
mov eax, dword [edi]
mov esi, dword [ebp - 0x1c]
mov ecx, edi
call dword [eax + 0x10]
fild dword [eax + 4]
mov ecx, esi
fstp qword [ebp - 0xb0]
call fcn.004100c8
mov ecx, dword [ebp - 0x6c]
mov esi, eax
call fcn.0040c2e7
sub eax, esi
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], ebx
fild qword [ebp - 0x18]
fmul qword [0xb06520]
fsubr qword [ebp - 0xb0]
call fcn.00a70f94
mov edi, dword [ebp - 0x3c]
mov esi, eax
mov eax, dword [edi + 0xf28]
mov ecx, eax
add eax, 0xfffffff4
neg ecx
sbb ecx, ecx
and ecx, eax
mov dword [ebp - 0x90], ecx
push 0xbe7330
lea ecx, [ebp - 0x58]
call fcn.0040318f
push 1
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x68]
call fcn.00411fe1
cmp dword [0xbe2788], ebx
mov byte [ebp - 4], 0x1b
jne 0x988228
push 0x80004003
call fcn.00a6ef01
mov eax, dword [ebp - 0x34]
cdq
sub eax, edx
sar eax, 1
sub esi, eax
mov eax, dword [ebp + 0xc]
cdq
sub eax, edx
mov ecx, eax
mov eax, dword [ebp - 0x28]
sar ecx, 1
sub eax, ecx
lea ecx, [ebp - 0x58]
push ecx
lea ecx, [ebp - 0x68]
push ecx
mov ecx, dword [0xbe2788]
push ebx
push dword [ebp - 0x34]
mov dword [ebp - 0x6c], eax
push dword [ebp + 0xc]
mov dword [ebp - 0xac], esi
push esi
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.00427eb3
push dword [eax]
lea esi, [edi + 0x28ec]
mov ecx, esi
call fcn.00429919
lea ecx, [ebp - 0x14]
call fcn.00415ceb
lea eax, [ebp - 0x68]
push eax
mov byte [ebp - 4], 0x1a
call fcn.004029b7
cmp eax, ebx
pop ecx
jge 0x988299
push eax
call fcn.00a6ef01
lea eax, [ebp - 0x58]
push eax
mov byte [ebp - 4], 0x19
call fcn.004029b7
cmp eax, ebx
pop ecx
jge 0x9882b1
push eax
call fcn.00a6ef01
cmp dword [esi], ebx
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0x134]
mov edi, dword [eax + 0x130]
mov dword [ebp - 0x14], ecx
jne 0x9882d4
push 0x80004003
call fcn.00a6ef01
mov eax, dword [esi]
imul edi, edi, 0xbb8
sub edi, dword [ebp - 0x14]
mov ecx, dword [eax]
lea edx, [edi + edi*4]
lea edx, [edx + edx - 0x3fff8ad4]
push edx
push eax
mov dword [ebp - 0x28], eax
call dword [ecx + 0xb4]
cmp eax, ebx
jge 0x988308
push 0xba0510
push dword [ebp - 0x28]
push eax
call fcn.00a6ef0f
cmp dword [esi], ebx
jne 0x988316
push 0x80004003
call fcn.00a6ef01
mov esi, dword [esi]
mov eax, dword [esi]
push 0xffffffffffffffff
push esi
call dword [eax + 0xe0]
cmp eax, ebx
jge 0x988333
push 0xba0510
push esi
push eax
call fcn.00a6ef0f
push 0xbe7330
lea ecx, [ebp - 0x68]
call fcn.0040318f
push 1
push dword [ebp - 0x8c]
lea ecx, [ebp - 0x58]
call fcn.00411fe1
cmp dword [0xbe2788], ebx
mov byte [ebp - 4], 0x1d
jne 0x988366
push 0x80004003
call fcn.00a6ef01
mov ecx, dword [0xbe2788]
lea eax, [ebp - 0x68]
push eax
lea eax, [ebp - 0x58]
push eax
push ebx
push dword [ebp - 0x34]
lea eax, [ebp - 0x14]
push dword [ebp + 0xc]
push dword [ebp - 0xac]
push dword [ebp - 0x6c]
push eax
call fcn.00427eb3
mov ecx, dword [ebp - 0x3c]
push dword [eax]
lea esi, [ecx + 0x28f0]
mov ecx, esi
call fcn.00429919
lea ecx, [ebp - 0x14]
call fcn.00415ceb
lea eax, [ebp - 0x58]
push eax
mov byte [ebp - 4], 0x1c
call fcn.004029b7
cmp eax, ebx
pop ecx
jge 0x9883bf
push eax
call fcn.00a6ef01
lea eax, [ebp - 0x68]
push eax
mov byte [ebp - 4], 0x19
call fcn.004029b7
cmp eax, ebx
pop ecx
jge 0x9883d7
push eax
call fcn.00a6ef01
cmp dword [esi], ebx
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0x134]
mov edi, dword [eax + 0x130]
mov dword [ebp - 0x14], ecx
jne 0x9883fa
push 0x80004003
call fcn.00a6ef01
mov eax, dword [esi]
imul edi, edi, 0xbb8
sub edi, dword [ebp - 0x14]
mov ecx, dword [eax]
sub edi, 0x6665aaf
lea edx, [edi + edi*4]
shl edx, 1
push edx
push eax
mov dword [ebp - 0x28], eax
call dword [ecx + 0xb4]
cmp eax, ebx
jge 0x98842f
push 0xba0510
push dword [ebp - 0x28]
push eax
call fcn.00a6ef0f
cmp dword [esi], ebx
mov edi, 0x80004003
jne 0x98843e
push edi
call fcn.00a6ef01
mov esi, dword [esi]
mov eax, dword [esi]
push 0xffffffffffffffff
push esi
call dword [eax + 0xe0]
cmp eax, ebx
jge 0x98845b
push 0xba0510
push esi
push eax
call fcn.00a6ef0f
push 0xbe7330
lea ecx, [ebp - 0x68]
call fcn.0040318f
push 1
push dword [ebp - 0x98]
lea ecx, [ebp - 0x58]
call fcn.00411fe1
cmp dword [0xbe2788], ebx
mov byte [ebp - 4], 0x1f
jne 0x98848a
push edi
call fcn.00a6ef01
mov ecx, dword [0xbe2788]
lea eax, [ebp - 0x68]
push eax
lea eax, [ebp - 0x58]
push eax
push ebx
push dword [ebp - 0x34]
lea eax, [ebp - 0x14]
push dword [ebp + 0xc]
push dword [ebp - 0xac]
push dword [ebp - 0x6c]
push eax
call fcn.00427eb3
mov ecx, dword [ebp - 0x3c]
push dword [eax]
lea esi, [ecx + 0x28f4]
mov ecx, esi
call fcn.00429919
lea ecx, [ebp - 0x14]
call fcn.00415ceb
lea eax, [ebp - 0x58]
push eax
mov byte [ebp - 4], 0x1e
call fcn.004029b7
cmp eax, ebx
pop ecx
jge 0x9884e3
push eax
call fcn.00a6ef01
lea eax, [ebp - 0x68]
push eax
mov byte [ebp - 4], 0x19
call fcn.004029b7
cmp eax, ebx
pop ecx
jge 0x9884fb
push eax
call fcn.00a6ef01
cmp dword [esi], ebx
jne 0x988505
push edi
call fcn.00a6ef01
mov edi, dword [esi]
mov eax, dword [edi]
push 0xc006143f
push edi
call dword [eax + 0xb4]
cmp eax, ebx
jge 0x988525
push 0xba0510
push edi
push eax
call fcn.00a6ef0f
cmp dword [esi], ebx
mov edi, 0x80004003
jne 0x988534
push edi
call fcn.00a6ef01
mov esi, dword [esi]
mov eax, dword [esi]
push 0xffffffffffffffff
push esi
call dword [eax + 0xe0]
cmp eax, ebx
jge 0x988551
push 0xba0510
push esi
push eax
call fcn.00a6ef0f
mov dword [ebp - 0x84], ebx
lea eax, [ebp + 0xc]
push 0xc7f
push eax
mov byte [ebp - 4], 0x20
call fcn.007a48d0
mov ecx, eax
call fcn.0040652b
mov eax, dword [eax]
push dword [ebp + 8]
mov byte [ebp - 4], 0x21
push eax
lea eax, [ebp - 0x84]
push eax
call fcn.0044549c
mov eax, dword [ebp + 0xc]
add esp, 0xc
cmp eax, ebx
mov byte [ebp - 4], 0x20
je 0x98859e
add eax, 0xfffffff4
push eax
call fcn.00429f5a
pop ecx
mov esi, 0xbe7330
push esi
lea ecx, [ebp - 0x68]
call fcn.0040318f
push esi
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x22
call fcn.0040318f
push ebx
push ebx
push 0xffffffffffffffff
push dword [ebp - 0x84]
mov byte [ebp - 4], 0x23
push ebx
push ebx
call dword [fcn.00be1670]
shl eax, 1
add eax, 3
and eax, 0xfffffffc
call fcn.00a70270
mov eax, esp
push ebx
push ebx
lea ecx, [ebp - 0x68]
push ecx
lea ecx, [ebp - 0x58]
push ecx
push 0xffffffffffffffff
push eax
lea ecx, [ebp - 0x84]
call fcn.00429475
push eax
call fcn.0046a4b6
pop ecx
pop ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push eax
call fcn.0040339f
lea eax, [ebp - 0xa8]
push eax
mov byte [ebp - 4], 0x23
call fcn.00406548
mov ecx, eax
call fcn.00402680
mov ecx, eax
call fcn.00404a75
mov ecx, eax
mov byte [ebp - 4], 0x25
call fcn.004032b2
cmp eax, ebx
mov dword [ebp + 0xc], eax
mov dword [ebp - 0x88], ebx
je 0x988663
lea eax, [ebp + 0xc]
push eax
lea ecx, [ebp - 0x88]
call fcn.004053ee
cmp eax, ebx
jge 0x988663
mov esi, 0x80004002
cmp eax, esi
je 0x988668
push eax
call fcn.00a6ef01
jmp 0x988668
mov esi, 0x80004002
lea eax, [ebp - 0xa8]
push eax
mov byte [ebp - 4], 0x29
call fcn.004029b7
cmp eax, ebx
pop ecx
jge 0x988683
push eax
call fcn.00a6ef01
lea eax, [ebp - 0x58]
push eax
mov byte [ebp - 4], 0x28
call fcn.004029b7
cmp eax, ebx
pop ecx
jge 0x98869b
push eax
call fcn.00a6ef01
lea eax, [ebp - 0x68]
push eax
mov byte [ebp - 4], 0x27
call fcn.004029b7
cmp eax, ebx
pop ecx
jge 0x9886b3
push eax
call fcn.00a6ef01
push ebx
push ebx
push ecx
mov eax, esp
mov dword [ebp - 0x28], esp
push 0x157c
push eax
call fcn.007a48d0
mov ecx, eax
call fcn.00406368
lea eax, [ebp - 0xc8]
push eax
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 0x27
call fcn.0040263b
mov ecx, eax
call fcn.00403ac7
mov ecx, eax
mov byte [ebp - 4], 0x2b
call fcn.004032b2
cmp eax, ebx
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x44], ebx
je 0x988719
lea eax, [ebp - 0x14]
push eax
lea ecx, [ebp - 0x44]
call fcn.004053ee
cmp eax, ebx
jge 0x988719
cmp eax, esi
je 0x988719
push eax
call fcn.00a6ef01
lea eax, [ebp - 0xc8]
push eax
mov byte [ebp - 4], 0x2d
call fcn.004029b7
cmp eax, ebx
pop ecx
jge 0x988734
push eax
call fcn.00a6ef01
push 0x20
pop eax
call fcn.00a70270
mov eax, esp
push ebx
push ebx
push eax
push ebx
call fcn.004150a7
pop ecx
mov ecx, esp
mov dword [ebp + 0xc], esp
push eax
call fcn.0040339f
lea eax, [ebp - 0xa8]
push eax
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x2d
call fcn.0040263b
mov ecx, eax
call fcn.00403ac7
mov ecx, eax
mov byte [ebp - 4], 0x2f
call fcn.004032b2
cmp eax, ebx
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x10], ebx
je 0x98879c
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x10]
call fcn.0041f042
cmp eax, ebx
jge 0x98879c
cmp eax, esi
je 0x98879c
push eax
call fcn.00a6ef01
lea eax, [ebp - 0xa8]
push eax
mov byte [ebp - 4], 0x31
call fcn.004029b7
cmp eax, ebx
pop ecx
jge 0x9887b7
push eax
call fcn.00a6ef01
cmp dword [ebp - 0x10], ebx
jne 0x9887c2
push edi
call fcn.00a6ef01
mov ecx, dword [ebp - 0x10]
call fcn.0040c250
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], ebx
fild qword [ebp - 0x18]
fmul qword [0xb06520]
call fcn.00a70f94
cmp dword [ebp - 0x10], ebx
mov dword [ebp + 0xc], eax
jne 0x9887ec
push edi
call fcn.00a6ef01
mov ecx, dword [ebp - 0x10]
call fcn.0040c2e7
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], ebx
fild qword [ebp - 0x18]
fmul qword [0xb06520]
call fcn.00a70f94
cmp dword [ebp - 0x10], ebx
mov dword [ebp - 0x34], eax
jne 0x988816
push edi
call fcn.00a6ef01
mov eax, dword [ebp - 0x10]
cmp eax, ebx
mov dword [ebp - 0x14], eax
jne 0x988826
push edi
call fcn.00a6ef01
mov esi, dword [ebp - 0x20]
mov eax, dword [esi]
mov edi, dword [ebp - 0x10]
mov ecx, esi
call dword [eax + 0x10]
fild dword [eax]
mov ecx, dword [ebp - 0x14]
fstp qword [ebp - 0x70]
call fcn.0040c250
mov edx, eax
shr edx, 1
mov ecx, edi
mov dword [ebp - 0x20], edx
call fcn.004100a1
mov ecx, dword [ebp - 0x20]
sub ecx, eax
mov dword [ebp - 0x20], ecx
fild dword [ebp - 0x20]
fmul qword [0xb06520]
fsubr qword [ebp - 0x70]
call fcn.00a70f94
cmp dword [ebp - 0x10], ebx
mov edi, eax
jne 0x988878
push 0x80004003
call fcn.00a6ef01
mov eax, dword [ebp - 0x10]
cmp eax, ebx
mov dword [ebp - 0x14], eax
jne 0x98888c
push 0x80004003
call fcn.00a6ef01
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x20], eax
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x10]
fild dword [eax + 4]
mov ecx, dword [ebp - 0x20]
fstp qword [ebp - 0x70]
call fcn.004100c8
mov ecx, dword [ebp - 0x14]
mov esi, eax
call fcn.0040c2e7
sub eax, esi
mov dword [ebp - 0x20], eax
fild dword [ebp - 0x20]
fmul qword [0xb06520]
fsubr qword [ebp - 0x70]
call fcn.00a70f94
push 0xbe7330
lea ecx, [ebp - 0x68]
mov esi, eax
call fcn.0040318f
push 3
push ebx
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x32
call fcn.004031b5
cmp dword [0xbe2788], ebx
mov byte [ebp - 4], 0x33
jne 0x9888fb
push 0x80004003
call fcn.00a6ef01
lea eax, [ebp - 0x68]
push eax
mov ecx, dword [0xbe2788]
lea eax, [ebp - 0x58]
push eax
mov eax, dword [ebp - 0x34]
push ebx
push eax
push dword [ebp + 0xc]
cdq
sub eax, edx
sar eax, 1
sub esi, eax
mov eax, dword [ebp + 0xc]
cdq
sub eax, edx
sar eax, 1
push esi
sub edi, eax
push edi
lea eax, [ebp - 0x20]
push eax
call fcn.00427eb3
push dword [eax]
mov ecx, dword [ebp - 0x38]
call fcn.00429919
lea ecx, [ebp - 0x20]
call fcn.00415ceb
lea eax, [ebp - 0x58]
push eax
mov byte [ebp - 4], 0x32
call fcn.004029b7
cmp eax, ebx
pop ecx
jge 0x988957
push eax
call fcn.00a6ef01
lea eax, [ebp - 0x68]
push eax
mov byte [ebp - 4], 0x31
call fcn.004029b7
cmp eax, ebx
pop ecx
jge 0x98896f
push eax
call fcn.00a6ef01
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0x134]
mov esi, dword [eax + 0x130]
mov eax, dword [ebp - 0x38]
cmp dword [eax], ebx
mov dword [ebp + 0xc], ecx
jne 0x988995
push 0x80004003
call fcn.00a6ef01
mov eax, dword [ebp - 0x38]
imul esi, esi, 0xbb8
sub esi, dword [ebp + 0xc]
mov edi, dword [eax]
mov eax, dword [edi]
lea ecx, [esi + esi*4]
lea ecx, [ecx + ecx - 0x3fff8ad5]
push ecx
push edi
call dword [eax + 0xb4]
cmp eax, ebx
jge 0x9889c7
push 0xba0510
push edi
push eax
call fcn.00a6ef0f
mov esi, dword [ebp - 0x38]
cmp dword [esi], ebx
jne 0x9889d8
push 0x80004003
call fcn.00a6ef01
mov esi, dword [esi]
mov eax, dword [esi]
push 0xffffffffffffffff
push esi
call dword [eax + 0xe0]
cmp eax, ebx
jge 0x9889f5
push 0xba0510
push esi
push eax
call fcn.00a6ef0f
mov dword [ebp - 0x30], ebx
mov byte [ebp - 4], 0x34
mov dword [ebp + 0xc], ebx
mov edi, 0xbe7330
cmp dword [ebp - 0x44], ebx
mov esi, 0x80004003
jne 0x988a14
push esi
call fcn.00a6ef01
mov ecx, dword [ebp - 0x44]
call fcn.00409ffd
cmp dword [ebp + 0xc], eax
jae 0x988cd4
push 0x20
pop eax
call fcn.00a70270
mov eax, esp
push eax
push dword [ebp + 0xc]
call fcn.004150a7
add esp, 4
mov dword [ebp - 0x28], esp
mov ecx, esp
push eax
call fcn.00402c82
lea eax, [ebp - 0xd8]
push eax
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x34
call fcn.0040263b
mov ecx, eax
call fcn.00403ac7
lea eax, [ebp - 0xd8]
push eax
lea eax, [ebp - 0x20]
push eax
mov byte [ebp - 4], 0x36
call fcn.0041511b
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x37
call fcn.0041ef46
cmp eax, ebx
jge 0x988a94
cmp eax, 0x80004002
je 0x988a94
push eax
call fcn.00a6ef01
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x36
call fcn.004027b1
cmp dword [ebp - 0x10], ebx
jne 0x988aab
push esi
call fcn.00a6ef01
cmp dword [ebp - 0x30], ebx
jne 0x988ab6
push esi
call fcn.00a6ef01
mov ecx, dword [ebp - 0x10]
mov esi, dword [ebp - 0x30]
call fcn.0040c250
mov ecx, dword [esi]
push eax
push esi
call dword [ecx + 0x44]
cmp eax, ebx
jge 0x988ad8
push 0xba0338
push esi
push eax
call fcn.00a6ef0f
cmp dword [ebp - 0x10], ebx
jne 0x988ae7
push 0x80004003
call fcn.00a6ef01
cmp dword [ebp - 0x30], ebx
jne 0x988af6
push 0x80004003
call fcn.00a6ef01
mov ecx, dword [ebp - 0x10]
mov esi, dword [ebp - 0x30]
call fcn.0040c2e7
mov ecx, dword [esi]
push eax
push esi
call dword [ecx + 0x4c]
cmp eax, ebx
jge 0x988b18
push 0xba0338
push esi
push eax
call fcn.00a6ef0f
push 0x78
push ecx
mov eax, esp
mov dword [ebp - 0x28], esp
push 0x155d
push eax
call fcn.007a48d0
mov ecx, eax
call fcn.00406368
lea eax, [ebp - 0x14]
push eax
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x38
call fcn.00414a49
mov ecx, eax
call fcn.00404ba3
lea ecx, [ebp - 0xa8]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0x3a
call fcn.0040263b
mov ecx, eax
call fcn.00403ac7
push eax
mov byte [ebp - 4], 0x3b
call fcn.00415344
mov esi, eax
lea eax, [ebp - 0xa8]
push eax
mov byte [ebp - 4], 0x3a
call fcn.004029b7
add esp, 0xc
cmp eax, ebx
jge 0x988b8b
push eax
call fcn.00a6ef01
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x36
call fcn.004027e9
push edi
lea ecx, [ebp - 0xe8]
call fcn.0040318f
push edi
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 0x3c
call fcn.0040318f
push edi
lea ecx, [ebp - 0x78]
mov byte [ebp - 4], 0x3d
call fcn.0040318f
push edi
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 0x3e
call fcn.0040318f
push 3
push esi
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x3f
call fcn.004031b5
mov esi, dword [ebp - 0x38]
cmp dword [esi], ebx
mov byte [ebp - 4], 0x40
jne 0x988bf1
push 0x80004003
call fcn.00a6ef01
mov ecx, dword [esi]
lea eax, [ebp - 0xe8]
push eax
lea eax, [ebp - 0xb8]
push eax
lea eax, [ebp - 0x78]
push eax
lea eax, [ebp - 0x68]
push eax
lea eax, [ebp - 0x58]
push eax
push dword [ebp - 0x30]
lea eax, [ebp - 0xc8]
push eax
call fcn.00427de0
lea eax, [ebp - 0xc8]
push eax
call fcn.004029b7
cmp eax, ebx
pop ecx
jge 0x988c33
push eax
call fcn.00a6ef01
lea eax, [ebp - 0x58]
push eax
mov byte [ebp - 4], 0x3f
call fcn.004029b7
cmp eax, ebx
pop ecx
jge 0x988c4b
push eax
call fcn.00a6ef01
lea eax, [ebp - 0x68]
push eax
mov byte [ebp - 4], 0x3e
call fcn.004029b7
cmp eax, ebx
pop ecx
jge 0x988c63
push eax
call fcn.00a6ef01
lea eax, [ebp - 0x78]
push eax
mov byte [ebp - 4], 0x3d
call fcn.004029b7
cmp eax, ebx
pop ecx
jge 0x988c7b
push eax
call fcn.00a6ef01
lea eax, [ebp - 0xb8]
push eax
mov byte [ebp - 4], 0x3c
call fcn.004029b7
cmp eax, ebx
pop ecx
jge 0x988c96
push eax
call fcn.00a6ef01
lea eax, [ebp - 0xe8]
push eax
mov byte [ebp - 4], 0x36
call fcn.004029b7
cmp eax, ebx
pop ecx
jge 0x988cb1
push eax
call fcn.00a6ef01
lea eax, [ebp - 0xd8]
push eax
mov byte [ebp - 4], 0x34
call fcn.004029b7
cmp eax, ebx
pop ecx
jge 0x988ccc
push eax
call fcn.00a6ef01
inc dword [ebp + 0xc]
jmp 0x988a04
push edi
lea ecx, [ebp - 0xe8]
call fcn.0040318f
push edi
lea ecx, [ebp - 0xd8]
mov byte [ebp - 4], 0x41
call fcn.0040318f
mov eax, dword [ebp - 0x38]
cmp dword [eax], ebx
mov byte [ebp - 4], 0x42
jne 0x988d01
push esi
call fcn.00a6ef01
sub esp, 0x10
mov edi, esp
mov eax, dword [ebp - 0x38]
mov eax, dword [eax]
lea esi, [ebp - 0xe8]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov ecx, dword [eax]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
sub esp, 0x10
mov edi, esp
lea esi, [ebp - 0xd8]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x20
push eax
mov dword [ebp + 0xc], eax
movsd dword es:[edi], dword [esi]
call dword [ecx + 0x110]
cmp eax, ebx
jge 0x988d44
push 0xba0510
push dword [ebp + 0xc]
push eax
call fcn.00a6ef0f
lea eax, [ebp - 0xd8]
push eax
mov byte [ebp - 4], 0x41
call fcn.004029b7
cmp eax, ebx
pop ecx
jge 0x988d5f
push eax
call fcn.00a6ef01
lea eax, [ebp - 0xe8]
push eax
mov byte [ebp - 4], 0x34
call fcn.004029b7
cmp eax, ebx
pop ecx
jge 0x988d7a
push eax
call fcn.00a6ef01
mov dword [ebp - 0x7c], ebx
lea eax, [ebp + 0xc]
push 0xc80
push eax
mov byte [ebp - 4], 0x43
call fcn.007a48d0
mov ecx, eax
call fcn.0040652b
mov eax, dword [eax]
push dword [ebp + 8]
mov byte [ebp - 4], 0x44
push eax
lea eax, [ebp - 0x7c]
push eax
call fcn.0044549c
mov eax, dword [ebp + 0xc]
add esp, 0xc
cmp eax, ebx
mov byte [ebp - 4], 0x43
je 0x988dc1
add eax, 0xfffffff4
push eax
call fcn.00429f5a
pop ecx
mov esi, 0xbe7330
push esi
lea ecx, [ebp - 0xe8]
call fcn.0040318f
push esi
lea ecx, [ebp - 0xd8]
mov byte [ebp - 4], 0x45
call fcn.0040318f
push ebx
push ebx
push 0xffffffffffffffff
push dword [ebp - 0x7c]
mov byte [ebp - 4], 0x46
push ebx
push ebx
call dword [fcn.00be1670]
shl eax, 1
add eax, 3
and eax, 0xfffffffc
call fcn.00a70270
mov eax, esp
push ebx
push ebx
lea ecx, [ebp - 0xe8]
push ecx
lea ecx, [ebp - 0xd8]
push ecx
push 0xffffffffffffffff
push eax
lea ecx, [ebp - 0x7c]
call fcn.00429475
push eax
call fcn.0046a4b6
pop ecx
pop ecx
mov ecx, esp
mov dword [ebp + 8], esp
push eax
call fcn.0040339f
lea eax, [ebp - 0x158]
push eax
mov byte [ebp - 4], 0x46
call fcn.00406548
mov ecx, eax
call fcn.00402680
mov ecx, eax
call fcn.00404a75
mov ecx, eax
mov byte [ebp - 4], 0x48
call fcn.004032b2
cmp eax, ebx
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x40], ebx
je 0x988e82
lea eax, [ebp - 0x20]
push eax
lea ecx, [ebp - 0x40]
call fcn.004053ee
cmp eax, ebx
jge 0x988e82
cmp eax, 0x80004002
je 0x988e82
push eax
call fcn.00a6ef01
lea eax, [ebp - 0x158]
push eax
mov byte [ebp - 4], 0x4c
call fcn.004029b7
cmp eax, ebx
pop ecx
jge 0x988e9d
push eax
call fcn.00a6ef01
lea eax, [ebp - 0xd8]
push eax
mov byte [ebp - 4], 0x4b
call fcn.004029b7
cmp eax, ebx
pop ecx
jge 0x988eb8
push eax
call fcn.00a6ef01
lea eax, [ebp - 0xe8]
push eax
mov byte [ebp - 4], 0x4a
call fcn.004029b7
cmp eax, ebx
pop ecx
jge 0x988ed3
push eax
call fcn.00a6ef01
cmp dword [ebp - 0x40], ebx
je 0x989551
push 0x20
pop eax
call fcn.00a70270
mov eax, esp
push ebx
push ebx
push eax
push ebx
call fcn.004150a7
pop ecx
mov ecx, esp
mov dword [ebp - 0x28], esp
push eax
call fcn.0040339f
lea eax, [ebp - 0xa8]
push eax
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x4a
call fcn.0040263b
mov ecx, eax
call fcn.00403ac7
mov ecx, eax
mov byte [ebp - 4], 0x4e
call fcn.004032b2
cmp eax, ebx
mov dword [ebp - 0x14], eax
mov dword [ebp + 0xc], ebx
je 0x988f47
lea eax, [ebp - 0x14]
push eax
lea ecx, [ebp + 0xc]
call fcn.0041f042
cmp eax, ebx
jge 0x988f47
cmp eax, 0x80004002
je 0x988f47
push eax
call fcn.00a6ef01
push dword [ebp + 0xc]
lea ecx, [ebp - 0x10]
call fcn.00405326
lea ecx, [ebp + 0xc]
call fcn.00415cd1
lea eax, [ebp - 0xa8]
push eax
mov byte [ebp - 4], 0x4a
call fcn.004029b7
cmp eax, ebx
pop ecx
jge 0x988f75
push eax
call fcn.00a6ef01
cmp dword [ebp - 0x10], ebx
mov esi, 0x80004003
jne 0x988f85
push esi
call fcn.00a6ef01
mov ecx, dword [ebp - 0x10]
call fcn.0040c250
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], ebx
fild qword [ebp - 0x18]
fmul qword [0xb06520]
call fcn.00a70f94
cmp dword [ebp - 0x10], ebx
mov dword [ebp + 0xc], eax
jne 0x988faf
push esi
call fcn.00a6ef01
mov ecx, dword [ebp - 0x10]
call fcn.0040c2e7
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], ebx
fild qword [ebp - 0x18]
fmul qword [0xb06520]
call fcn.00a70f94
cmp dword [ebp - 0x10], ebx
mov dword [ebp - 0x34], eax
jne 0x988fd9
push esi
call fcn.00a6ef01
mov eax, dword [ebp - 0x10]
cmp eax, ebx
mov dword [ebp - 0x14], eax
jne 0x988fe9
push esi
call fcn.00a6ef01
mov eax, dword [ebp - 0x3c]
mov edi, dword [ebp - 0x10]
lea esi, [eax + 4]
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x10]
fild dword [eax]
mov ecx, dword [ebp - 0x14]
fstp qword [ebp - 0x2c]
call fcn.0040c250
mov edx, eax
shr edx, 1
mov ecx, edi
mov dword [ebp - 0x14], edx
call fcn.004100a1
mov ecx, dword [ebp - 0x14]
sub ecx, eax
mov dword [ebp - 0x14], ecx
fild dword [ebp - 0x14]
fmul qword [0xb06520]
fsubr qword [ebp - 0x2c]
call fcn.00a70f94
cmp dword [ebp - 0x10], ebx
mov edi, eax
jne 0x98903e
push 0x80004003
call fcn.00a6ef01
mov eax, dword [ebp - 0x10]
cmp eax, ebx
mov dword [ebp - 0x28], eax
jne 0x989052
push 0x80004003
call fcn.00a6ef01
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x14], eax
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x10]
fild dword [eax + 4]
mov ecx, dword [ebp - 0x14]
fstp qword [ebp - 0x70]
call fcn.004100c8
mov ecx, dword [ebp - 0x28]
mov esi, eax
call fcn.0040c2e7
sub eax, esi
mov dword [ebp - 0x14], eax
fild dword [ebp - 0x14]
fmul qword [0xb06520]
fsubr qword [ebp - 0x70]
call fcn.00a70f94
push 0xbe7330
lea ecx, [ebp - 0x68]
mov esi, eax
call fcn.0040318f
push 3
push ebx
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x4f
call fcn.004031b5
cmp dword [0xbe2788], ebx
mov byte [ebp - 4], 0x50
jne 0x9890c1
push 0x80004003
call fcn.00a6ef01
lea eax, [ebp - 0x68]
push eax
mov ecx, dword [0xbe2788]
lea eax, [ebp - 0x58]
push eax
mov eax, dword [ebp - 0x34]
push ebx
push eax
push dword [ebp + 0xc]
cdq
sub eax, edx
sar eax, 1
sub esi, eax
mov eax, dword [ebp + 0xc]
cdq
sub eax, edx
sar eax, 1
push esi
sub edi, eax
push edi
lea eax, [ebp - 0x14]
push eax
call fcn.00427eb3
mov edi, dword [ebp - 0x3c]
push dword [eax]
lea esi, [edi + 0x28fc]
mov ecx, esi
call fcn.00429919
lea ecx, [ebp - 0x14]
call fcn.00415ceb
lea eax, [ebp - 0x58]
push eax
mov byte [ebp - 4], 0x4f
call fcn.004029b7
cmp eax, ebx
pop ecx
jge 0x989125
push eax
call fcn.00a6ef01
lea eax, [ebp - 0x68]
push eax
mov byte [ebp - 4], 0x4a
call fcn.004029b7
cmp eax, ebx
pop ecx
jge 0x98913d
push eax
call fcn.00a6ef01
add edi, 0x28ec
cmp dword [edi], ebx
jne 0x989151
push 0x80004003
call fcn.00a6ef01
cmp dword [esi], ebx
mov eax, dword [edi]
mov dword [ebp + 0xc], eax
jne 0x989164
push 0x80004003
call fcn.00a6ef01
mov ecx, dword [ebp + 0xc]
mov edi, dword [esi]
call fcn.00442396
mov ecx, dword [edi]
push eax
push edi
call dword [ecx + 0xb4]
cmp eax, ebx
jge 0x989188
push 0xba0510
push edi
push eax
call fcn.00a6ef0f
cmp dword [esi], ebx
jne 0x989196
push 0x80004003
call fcn.00a6ef01
mov edi, dword [esi]
mov eax, dword [edi]
push 0xffffffffffffffff
push edi
call dword [eax + 0xe0]
cmp eax, ebx
jge 0x9891b3
push 0xba0510
push edi
push eax
call fcn.00a6ef0f
mov dword [ebp + 8], ebx
mov byte [ebp - 4], 0x51
mov dword [ebp + 0xc], ebx
cmp dword [ebp - 0x40], ebx
mov edi, 0x80004003
jne 0x9891cd
push edi
call fcn.00a6ef01
mov ecx, dword [ebp - 0x40]
call fcn.00409ffd
cmp dword [ebp + 0xc], eax
jae 0x98949b
push 0x20
pop eax
call fcn.00a70270
mov eax, esp
push eax
push dword [ebp + 0xc]
call fcn.004150a7
add esp, 4
mov dword [ebp - 0x6c], esp
mov ecx, esp
push eax
call fcn.00402c82
lea eax, [ebp - 0xa8]
push eax
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x51
call fcn.0040263b
mov ecx, eax
call fcn.00403ac7
lea eax, [ebp - 0xa8]
push eax
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 4], 0x53
call fcn.0041511b
pop ecx
pop ecx
push eax
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x54
call fcn.0041ef46
cmp eax, ebx
jge 0x98924d
cmp eax, 0x80004002
je 0x98924d
push eax
call fcn.00a6ef01
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x53
call fcn.004027b1
cmp dword [ebp - 0x10], ebx
jne 0x989264
push edi
call fcn.00a6ef01
cmp dword [ebp + 8], ebx
jne 0x98926f
push edi
call fcn.00a6ef01
mov ecx, dword [ebp - 0x10]
mov edi, dword [ebp + 8]
call fcn.0040c250
mov ecx, dword [edi]
push eax
push edi
call dword [ecx + 0x44]
cmp eax, ebx
jge 0x989291
push 0xba0338
push edi
push eax
call fcn.00a6ef0f
cmp dword [ebp - 0x10], ebx
jne 0x9892a0
push 0x80004003
call fcn.00a6ef01
cmp dword [ebp + 8], ebx
jne 0x9892af
push 0x80004003
call fcn.00a6ef01
mov ecx, dword [ebp - 0x10]
mov edi, dword [ebp + 8]
call fcn.0040c2e7
mov ecx, dword [edi]
push eax
push edi
call dword [ecx + 0x4c]
cmp eax, ebx
jge 0x9892d1
push 0xba0338
push edi
push eax
call fcn.00a6ef0f
push 0x78
push ecx
mov eax, esp
mov dword [ebp - 0x6c], esp
push 0x155d
push eax
call fcn.007a48d0
mov ecx, eax
call fcn.00406368
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x55
call fcn.00414a49
mov ecx, eax
call fcn.00404ba3
lea ecx, [ebp - 0x178]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0x57
call fcn.0040263b
mov ecx, eax
call fcn.00403ac7
push eax
mov byte [ebp - 4], 0x58
call fcn.00415344
mov dword [ebp - 0x6c], eax
lea eax, [ebp - 0x178]
push eax
mov byte [ebp - 4], 0x57
call fcn.004029b7
add esp, 0xc
cmp eax, ebx
jge 0x989345
push eax
call fcn.00a6ef01
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x53
call fcn.004027e9
mov edi, 0xbe7330
push edi
lea ecx, [ebp - 0xc8]
call fcn.0040318f
push edi
lea ecx, [ebp - 0x128]
mov byte [ebp - 4], 0x59
call fcn.0040318f
push edi
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 0x5a
call fcn.0040318f
push edi
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 0x5b
call fcn.0040318f
push 3
push dword [ebp - 0x6c]
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x5c
call fcn.004031b5
cmp dword [esi], ebx
mov byte [ebp - 4], 0x5d
jne 0x9893b2
push 0x80004003
call fcn.00a6ef01
mov ecx, dword [esi]
lea eax, [ebp - 0xc8]
push eax
lea eax, [ebp - 0x128]
push eax
lea eax, [ebp - 0xb8]
push eax
lea eax, [ebp - 0x68]
push eax
lea eax, [ebp - 0x58]
push eax
push dword [ebp + 8]
lea eax, [ebp - 0x198]
push eax
call fcn.00427de0
lea eax, [ebp - 0x198]
push eax
call fcn.004029b7
cmp eax, ebx
pop ecx
jge 0x9893f7
push eax
call fcn.00a6ef01
lea eax, [ebp - 0x58]
push eax
mov byte [ebp - 4], 0x5c
call fcn.004029b7
cmp eax, ebx
pop ecx
jge 0x98940f
push eax
call fcn.00a6ef01
lea eax, [ebp - 0x68]
push eax
mov byte [ebp - 4], 0x5b
call fcn.004029b7
cmp eax, ebx
pop ecx
jge 0x989427
push eax
call fcn.00a6ef01
lea eax, [ebp - 0xb8]
push eax
mov byte [ebp - 4], 0x5a
call fcn.004029b7
cmp eax, ebx
pop ecx
jge 0x989442
push eax
call fcn.00a6ef01
lea eax, [ebp - 0x128]
push eax
mov byte [ebp - 4], 0x59
call fcn.004029b7
cmp eax, ebx
pop ecx
jge 0x98945d
push eax
call fcn.00a6ef01
lea eax, [ebp - 0xc8]
push eax
mov byte [ebp - 4], 0x53
call fcn.004029b7
cmp eax, ebx
pop ecx
jge 0x989478
push eax
call fcn.00a6ef01
lea eax, [ebp - 0xa8]
push eax
mov byte [ebp - 4], 0x51
call fcn.004029b7
cmp eax, ebx
pop ecx
jge 0x989493
push eax
call fcn.00a6ef01
inc dword [ebp + 0xc]
jmp 0x9891bd
push 0xbe7330
lea ecx, [ebp - 0xc8]
call fcn.0040318f
push 0xbe7330
lea ecx, [ebp - 0xa8]
mov byte [ebp - 4], 0x5e
call fcn.0040318f
cmp dword [esi], ebx
mov byte [ebp - 4], 0x5f
jne 0x9894cd
push edi
call fcn.00a6ef01
mov eax, dword [esi]
sub esp, 0x10
mov edi, esp
lea esi, [ebp - 0xc8]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov ecx, dword [eax]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
sub esp, 0x10
mov edi, esp
lea esi, [ebp - 0xa8]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x20
push eax
mov dword [ebp + 0xc], eax
movsd dword es:[edi], dword [esi]
call dword [ecx + 0x110]
cmp eax, ebx
jge 0x98950d
push 0xba0510
push dword [ebp + 0xc]
push eax
call fcn.00a6ef0f
lea eax, [ebp - 0xa8]
push eax
mov byte [ebp - 4], 0x5e
call fcn.004029b7
cmp eax, ebx
pop ecx
jge 0x989528
push eax
call fcn.00a6ef01
lea eax, [ebp - 0xc8]
push eax
mov byte [ebp - 4], 0x51
call fcn.004029b7
cmp eax, ebx
pop ecx
jge 0x989543
push eax
call fcn.00a6ef01
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x4a
call fcn.00415cd1
jmp 0x989560
mov eax, dword [ebp - 0x3c]
push ebx
lea ecx, [eax + 0x28fc]
call fcn.00429919
call fcn.00994c7a
mov ecx, dword [ebp - 0x3c]
mov dword [ecx + 0x2914], eax
lea ecx, [ebp - 0x40]
call fcn.004027e9
mov eax, dword [ebp - 0x7c]
cmp eax, ebx
mov byte [ebp - 4], 0x34
je 0x98958b
add eax, 0xfffffff4
push eax
call fcn.00429f5a
pop ecx
lea ecx, [ebp - 0x30]
call fcn.00415cd1
lea ecx, [ebp - 0x10]
call fcn.00415cd1
lea ecx, [ebp - 0x44]
call fcn.004027e9
lea ecx, [ebp - 0x88]
call fcn.004027e9
mov eax, dword [ebp - 0x84]
cmp eax, ebx
mov byte [ebp - 4], 0x19
je 0x9895c6
add eax, 0xfffffff4
push eax
call fcn.00429f5a
pop ecx
lea ecx, [ebp - 0x98]
call fcn.00415cd1
mov eax, dword [ebp - 0x8c]
cmp eax, ebx
mov byte [ebp - 4], 0x11
je 0x9895e5
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x1c]
cmp eax, ebx
mov byte [ebp - 4], 0xd
je 0x9895f6
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x48]
cmp eax, ebx
mov byte [ebp - 4], 8
je 0x989607
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x80]
cmp eax, ebx
mov byte [ebp - 4], 5
je 0x98961c
add eax, 0xfffffff4
push eax
call fcn.00429f5a
pop ecx
mov eax, dword [ebp - 0x94]
or dword [ebp - 4], 0xffffffff
cmp eax, ebx
je 0x989630
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov ecx, dword [ebp - 0xc]
lea esp, [ebp - 0x1a4]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
leave
ret 8