Function at 0x4dd3fc
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffa78
push ebx
push esi
push edi
lea edi, [ebp - 0x1c8]
mov eax, 0x6d543c
call fcn.0067eabc
mov dword [ebp - 0x344], 3
lea edx, [ebp + 0x14]
lea eax, [ebp + 0x14]
call fcn.0068e348
inc dword [ebp - 0x344]
lea edx, [ebp + 0x10]
mov word [ebp - 0x350], 0xc
lea eax, [ebp + 0x10]
call fcn.0068e348
inc dword [ebp - 0x344]
lea edx, [ebp + 0xc]
lea eax, [ebp + 0xc]
call fcn.0068e348
inc dword [ebp - 0x344]
cmp dword [ebp + 0x14], 0
je 0x4dd46c
mov edx, dword [ebp + 0x14]
mov ecx, dword [edx - 4]
jmp 0x4dd46e
xor ecx, ecx
test ecx, ecx
jne 0x4dd4d1
mov eax, dword [ebp + 0x10]
push eax
mov edx, dword [ebp + 0xc]
push edx
mov eax, dword [ebp + 8]
push eax
call fcn.004dd2d8
add esp, 0xc
dec dword [ebp - 0x344]
lea eax, [ebp + 0xc]
mov edx, 2
call fcn.0068e424
dec dword [ebp - 0x344]
lea eax, [ebp + 0x10]
mov edx, 2
call fcn.0068e424
dec dword [ebp - 0x344]
lea eax, [ebp + 0x14]
mov edx, 2
call fcn.0068e424
mov ecx, dword [ebp - 0x360]
mov dword fs:[0], ecx
jmp 0x4dfa11
mov word [ebp - 0x350], 0x18
mov word [ebp - 0x350], 0x24
push 0x730ca0
xor esi, esi
mov dword [ebp - 0x100], esi
lea eax, [ebp - 0x100]
push eax
inc dword [ebp - 0x344]
call fcn.0054bc10
add esp, 8
lea edx, [ebp - 0x100]
mov ecx, dword [edx]
push ecx
mov edx, 0x6d4195
lea eax, [ebp - 0x104]
call fcn.0068e308
inc dword [ebp - 0x344]
xor esi, esi
mov ecx, dword [eax]
lea eax, [ebp - 0x108]
push ecx
push 0x730ca0
mov dword [ebp - 0x108], esi
push eax
inc dword [ebp - 0x344]
call fcn.0053af08
xor edx, edx
add esp, 0x10
mov dword [ebp - 0x10c], edx
lea edx, [ebp + 0xc]
inc dword [ebp - 0x344]
lea eax, [ebp - 0x108]
lea ecx, [ebp - 0x10c]
call fcn.0068e474
lea eax, [ebp - 0x10c]
xor ecx, ecx
push eax
push 0x730ca0
mov dword [ebp - 0x110], ecx
lea esi, [ebp - 0x110]
push esi
inc dword [ebp - 0x344]
call fcn.0054bc10
add esp, 8
lea eax, [ebp - 0x110]
mov edx, dword [eax]
push edx
mov edx, 0x6d4225
lea eax, [ebp - 0x114]
call fcn.0068e308
inc dword [ebp - 0x344]
xor esi, esi
mov ecx, dword [eax]
lea eax, [ebp - 0x118]
push ecx
push 0x730ca0
mov dword [ebp - 0x118], esi
push eax
inc dword [ebp - 0x344]
call fcn.0053af08
xor ecx, ecx
add esp, 0x10
mov dword [ebp - 0x11c], ecx
lea ecx, [ebp - 0x11c]
inc dword [ebp - 0x344]
lea edx, [ebp - 0x118]
pop eax
call fcn.0068e474
lea eax, [ebp - 0x11c]
xor edx, edx
mov dword [ebp - 0x120], edx
lea ecx, [ebp - 0x120]
inc dword [ebp - 0x344]
lea edx, [ebp + 0x10]
call fcn.0068e474
lea eax, [ebp - 0x120]
xor ecx, ecx
push eax
push 0x730ca0
mov dword [ebp - 0x124], ecx
lea esi, [ebp - 0x124]
push esi
inc dword [ebp - 0x344]
call fcn.0054bc10
add esp, 8
lea eax, [ebp - 0x124]
mov edx, dword [eax]
push edx
mov edx, 0x6d428a
lea eax, [ebp - 0x128]
call fcn.0068e308
inc dword [ebp - 0x344]
xor esi, esi
mov ecx, dword [eax]
lea eax, [ebp - 0x12c]
push ecx
push 0x730ca0
mov dword [ebp - 0x12c], esi
push eax
inc dword [ebp - 0x344]
call fcn.0053af08
xor ecx, ecx
add esp, 0x10
mov dword [ebp - 0x130], ecx
lea ecx, [ebp - 0x130]
inc dword [ebp - 0x344]
lea edx, [ebp - 0x12c]
pop eax
call fcn.0068e474
lea eax, [ebp - 0x130]
xor edx, edx
mov dword [ebp - 0x134], edx
lea ecx, [ebp - 0x134]
inc dword [ebp - 0x344]
lea edx, [ebp + 0x14]
call fcn.0068e474
lea eax, [ebp - 0x134]
mov ecx, dword [eax]
push ecx
push 0x730cfc
call fcn.0056d518
add esp, 8
dec dword [ebp - 0x344]
lea eax, [ebp - 0x134]
mov edx, 2
call fcn.0068e424
dec dword [ebp - 0x344]
lea eax, [ebp - 0x130]
mov edx, 2
call fcn.0068e424
dec dword [ebp - 0x344]
lea eax, [ebp - 0x12c]
mov edx, 2
call fcn.0068e424
dec dword [ebp - 0x344]
lea eax, [ebp - 0x128]
mov edx, 2
call fcn.0068e424
dec dword [ebp - 0x344]
lea eax, [ebp - 0x124]
mov edx, 2
call fcn.0068e424
dec dword [ebp - 0x344]
lea eax, [ebp - 0x120]
mov edx, 2
call fcn.0068e424
dec dword [ebp - 0x344]
lea eax, [ebp - 0x11c]
mov edx, 2
call fcn.0068e424
dec dword [ebp - 0x344]
lea eax, [ebp - 0x118]
mov edx, 2
call fcn.0068e424
dec dword [ebp - 0x344]
lea eax, [ebp - 0x114]
mov edx, 2
call fcn.0068e424
dec dword [ebp - 0x344]
lea eax, [ebp - 0x110]
mov edx, 2
call fcn.0068e424
dec dword [ebp - 0x344]
lea eax, [ebp - 0x10c]
mov edx, 2
call fcn.0068e424
dec dword [ebp - 0x344]
lea eax, [ebp - 0x108]
mov edx, 2
call fcn.0068e424
dec dword [ebp - 0x344]
lea eax, [ebp - 0x104]
mov edx, 2
call fcn.0068e424
dec dword [ebp - 0x344]
lea eax, [ebp - 0x100]
mov edx, 2
call fcn.0068e424
mov word [ebp - 0x350], 0x3c
mov ecx, dword [ebp + 0x14]
push ecx
lea esi, [ebp - 0x2c]
push esi
call fcn.004134bc
add esp, 8
inc dword [ebp - 0x344]
mov word [ebp - 0x350], 0x30
mov word [ebp - 0x350], 0x48
lea edx, [ebp + 0xc]
lea eax, [ebp - 0x138]
xor ecx, ecx
call fcn.0068c4cc
inc dword [ebp - 0x344]
lea esi, [ebp - 0x138]
inc dword [ebp - 0x344]
mov dword [ebp - 0x364], esi
xor eax, eax
mov dword [ebp - 0x13c], eax
lea eax, [ebp - 0x13c]
mov edx, dword [ebp - 0x364]
call fcn.005a775c
lea ecx, [ebp - 0x13c]
mov dl, 1
inc dword [ebp - 0x344]
mov eax, dword [ecx]
xor ecx, ecx
push eax
mov eax, dword [0x5af628]
push 0xa
call fcn.005baf28
mov dword [ebp - 0x34], eax
inc dword [ebp - 0x344]
dec dword [ebp - 0x344]
lea eax, [ebp - 0x13c]
mov edx, 2
call fcn.0068e424
sub dword [ebp - 0x344], 2
lea eax, [ebp - 0x138]
mov edx, 2
call fcn.00411d10
mov word [ebp - 0x350], 0x30
mov word [ebp - 0x350], 0x54
mov dl, 1
mov eax, dword [0x5af3e0]
call fcn.004dfa18
mov dword [ebp - 0x368], eax
mov ecx, dword [ebp - 0x368]
mov dword [ebp - 0x44], ecx
inc dword [ebp - 0x344]
mov word [ebp - 0x350], 0x30
mov edx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x44]
call fcn.005bad78
mov word [ebp - 0x350], 0x60
mov eax, dword [ebp - 0x44]
mov edx, dword [eax]
call dword [edx]
push eax
call fcn.00678ee4
pop ecx
mov dword [ebp - 0x36c], eax
mov edx, dword [ebp - 0x36c]
mov dword [ebp - 0x54], edx
inc dword [ebp - 0x344]
mov word [ebp - 0x350], 0x30
mov eax, dword [ebp - 0x44]
mov edx, dword [eax]
call dword [edx]
mov ecx, eax
mov edx, dword [ebp - 0x54]
mov eax, dword [ebp - 0x44]
call fcn.005ba2f4
mov eax, dword [ebp - 0x44]
mov edx, dword [eax]
call dword [edx]
cmp edx, 0
jne 0x4dd981
cmp eax, 1
jae 0x4ddbd5
jmp 0x4dd987
jge 0x4ddbd5
mov word [ebp - 0x350], 0x6c
push 0x730ca0
xor ecx, ecx
mov dword [ebp - 0x140], ecx
lea eax, [ebp - 0x140]
push eax
inc dword [ebp - 0x344]
call fcn.0054bc10
add esp, 8
lea edx, [ebp - 0x140]
mov ecx, dword [edx]
push ecx
mov edx, 0x6d42bf
lea eax, [ebp - 0x144]
call fcn.0068e308
inc dword [ebp - 0x344]
lea edx, [ebp - 0x148]
mov ecx, dword [eax]
xor eax, eax
push ecx
push 0x730ca0
mov dword [ebp - 0x148], eax
push edx
inc dword [ebp - 0x344]
call fcn.0053af08
add esp, 0x10
lea ecx, [ebp - 0x148]
mov eax, dword [ecx]
push eax
push 0x730cfc
call fcn.0056d518
add esp, 8
dec dword [ebp - 0x344]
lea eax, [ebp - 0x148]
mov edx, 2
call fcn.0068e424
dec dword [ebp - 0x344]
lea eax, [ebp - 0x144]
mov edx, 2
call fcn.0068e424
dec dword [ebp - 0x344]
lea eax, [ebp - 0x140]
mov edx, 2
call fcn.0068e424
dec dword [ebp - 0x344]
cmp dword [ebp - 0x54], 0
je 0x4dda70
mov ecx, dword [ebp - 0x54]
mov dword [ebp - 0x548], ecx
mov eax, dword [ebp - 0x548]
push eax
call fcn.0067381c
pop ecx
dec dword [ebp - 0x344]
cmp dword [ebp - 0x44], 0
je 0x4ddaca
mov edx, dword [ebp - 0x44]
mov dword [ebp - 0x54c], edx
mov ecx, dword [ebp - 0x54c]
mov dword [ebp - 0x150], ecx
cmp dword [ebp - 0x150], 0
je 0x4ddaca
mov eax, dword [ebp - 0x150]
mov edx, dword [eax]
mov dword [ebp - 0x14c], edx
mov word [ebp - 0x350], 0x90
mov edx, 3
mov eax, dword [ebp - 0x150]
mov ecx, dword [eax]
call dword [ecx - 4]
mov word [ebp - 0x350], 0x78
dec dword [ebp - 0x344]
cmp dword [ebp - 0x34], 0
je 0x4ddb24
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x550], eax
mov edx, dword [ebp - 0x550]
mov dword [ebp - 0x158], edx
cmp dword [ebp - 0x158], 0
je 0x4ddb24
mov ecx, dword [ebp - 0x158]
mov eax, dword [ecx]
mov dword [ebp - 0x154], eax
mov word [ebp - 0x350], 0xa8
mov edx, 3
mov eax, dword [ebp - 0x158]
mov ecx, dword [eax]
call dword [ecx - 4]
mov word [ebp - 0x350], 0x78
dec dword [ebp - 0x344]
cmp dword [ebp - 8], 0x10
jb 0x4ddb52
mov edx, dword [ebp - 0x1c]
mov dword [ebp - 0x554], edx
mov eax, dword [ebp - 0x554]
mov dword [ebp - 0x558], eax
mov edx, dword [ebp - 0x558]
push edx
call fcn.0067381c
pop ecx
mov ecx, 0xf
mov dword [ebp - 8], ecx
mov byte [ebp - 0x559], 0
cmp dword [ebp - 8], 0x10
jb 0x4ddb6c
mov eax, dword [ebp - 0x1c]
jmp 0x4ddb6f
lea eax, [ebp - 0x1c]
xor edx, edx
mov dword [ebp - 0xc], edx
add eax, edx
mov dword [ebp - 0x560], eax
mov edx, 2
mov eax, dword [ebp - 0x560]
mov cl, byte [ebp - 0x559]
mov byte [eax], cl
lea eax, [ebp + 0xc]
dec dword [ebp - 0x344]
call fcn.0068e424
dec dword [ebp - 0x344]
lea eax, [ebp + 0x10]
mov edx, 2
call fcn.0068e424
dec dword [ebp - 0x344]
lea eax, [ebp + 0x14]
mov edx, 2
call fcn.0068e424
mov ecx, dword [ebp - 0x360]
mov dword fs:[0], ecx
jmp 0x4dfa11
xor ebx, ebx
mov word [ebp - 0x350], 0x30
xor esi, esi
jmp 0x4ddc34
cmp esi, dword [ebp - 0xc]
jne 0x4ddbeb
xor esi, esi
mov eax, dword [ebp - 0x54]
cmp byte [eax + ebx], 0
je 0x4ddc32
mov edx, dword [ebp - 0x54]
mov eax, esi
cmp dword [ebp - 8], 0x10
mov cl, byte [edx + ebx]
jb 0x4ddc07
mov edx, dword [ebp - 0x1c]
jmp 0x4ddc0a
lea edx, [ebp - 0x1c]
add edx, eax
cmp cl, byte [edx]
je 0x4ddc32
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x370], esi
cmp dword [ebp - 8], 0x10
jb 0x4ddc24
mov ecx, dword [ebp - 0x1c]
jmp 0x4ddc27
lea ecx, [ebp - 0x1c]
add ecx, dword [ebp - 0x370]
mov dl, byte [ecx]
xor byte [eax + ebx], dl
inc ebx
inc esi
mov eax, dword [ebp - 0x44]
mov edx, dword [eax]
call dword [edx]
push edx
push eax
mov eax, ebx
cdq
cmp edx, dword [esp + 4]
jne 0x4ddc4f
cmp eax, dword [esp]
pop edx
pop eax
jb 0x4ddbe4
jmp 0x4ddc53
pop edx
pop eax
jl 0x4ddbe4
mov word [ebp - 0x350], 0xc0
mov ecx, dword [ebp + 0x10]
push ecx
lea esi, [ebp - 0x180]
push esi
call fcn.004134bc
add esp, 8
lea eax, [ebp - 0x180]
inc dword [ebp - 0x344]
cmp dword [eax + 0x24], 0x10
jb 0x4ddc86
mov edx, dword [eax + 0x10]
jmp 0x4ddc89
lea edx, [eax + 0x10]
mov dword [ebp - 0x374], edx
lea eax, [ebp - 0x9c]
mov dword [ebp - 0xfc], eax
mov ecx, 0x6aa5bc
mov dword [ebp - 0x94], ecx
mov esi, 0x6aa5cc
inc dword [ebp - 0x344]
mov dword [ebp - 0x94], esi
inc dword [ebp - 0x344]
lea eax, [ebp - 0xf4]
mov dword [ebp - 0x378], eax
mov edx, 0x6aa4f8
mov dword [ebp - 0xf8], edx
mov ecx, 0x6aa504
mov ebx, dword [ebp - 0xfc]
mov dword [ebx + 8], ecx
mov ebx, dword [ebp - 0xfc]
push ebx
call fcn.006767ac
pop ecx
mov eax, dword [ebp - 0x378]
mov dword [ebx + 0x30], eax
xor edx, edx
mov dword [ebx + 0x34], edx
mov word [ebp - 0x350], 0xd8
mov ecx, dword [ebx + 0x2c]
push ecx
lea ecx, [ebp - 0x190]
push ecx
call fcn.0040be24
inc dword [ebp - 0x344]
lea eax, [ebp - 0x190]
mov dword [ebp - 0x380], eax
xor edx, edx
mov word [ebp - 0x350], 0xf0
mov dword [ebp - 0x194], edx
add esp, 8
cmp dword [ebp - 0x194], 1
je 0x4ddd4e
cmp dword [ebp - 0x194], 3
jne 0x4ddd5b
mov ecx, dword [ebp - 0x194]
push ecx
call fcn.0067d19c
pop ecx
inc dword [ebp - 0x344]
mov eax, dword [0x69e7cc]
mov word [ebp - 0x350], 0xe4
cmp dword [0x72b6c8], 0
mov dword [ebp - 0x384], eax
jne 0x4dde08
mov word [ebp - 0x350], 0x120
xor edx, edx
mov dword [ebp - 0x19c], edx
cmp dword [ebp - 0x19c], 1
je 0x4ddda5
cmp dword [ebp - 0x19c], 3
jne 0x4dddb2
mov ecx, dword [ebp - 0x19c]
push ecx
call fcn.0067d19c
pop ecx
inc dword [ebp - 0x344]
mov word [ebp - 0x350], 0x114
cmp dword [0x72b6c8], 0
jne 0x4dddda
inc dword [0x72b6c4]
mov eax, dword [0x72b6c4]
mov dword [0x72b6c8], eax
dec dword [ebp - 0x344]
cmp dword [ebp - 0x19c], 1
je 0x4dddf2
cmp dword [ebp - 0x19c], 3
jne 0x4dddff
mov edx, dword [ebp - 0x19c]
push edx
call fcn.0067d1d0
pop ecx
mov word [ebp - 0x350], 0x108
mov ecx, dword [0x72b6c8]
mov dword [ebp - 0x388], ecx
mov word [ebp - 0x350], 0xe4
mov eax, dword [ebp - 0x388]
push eax
mov edx, dword [ebp - 0x380]
push edx
call fcn.00676fcc
add esp, 8
mov dword [ebp - 0x38c], eax
cmp dword [ebp - 0x38c], 0
jne 0x4de503
cmp dword [ebp - 0x384], 0
je 0x4dde60
mov ecx, dword [ebp - 0x384]
mov dword [ebp - 0x38c], ecx
jmp 0x4de503
lea eax, [ebp - 0x384]
test eax, eax
je 0x4de468
cmp dword [ebp - 0x384], 0
jne 0x4de468
push 0x18
call fcn.00678f0c
pop ecx
mov dword [ebp - 0x1a0], eax
test eax, eax
je 0x4de3d5
mov word [ebp - 0x350], 0x150
mov edx, dword [ebp - 0x380]
mov ecx, dword [edx + 8]
add ecx, 0x18
mov dword [ebp - 0x394], ecx
mov ecx, dword [ebp - 0x394]
add ecx, 8
push ecx
lea eax, [ebp - 0x39c]
push eax
call fcn.0040bef4
add esp, 8
lea edx, [ebp - 0x39c]
push edx
lea ecx, [edi + 8]
push ecx
call fcn.0040bef4
add esp, 8
mov eax, 0xf
mov dword [edi + 0x24], eax
mov byte [ebp - 0x39d], 0
cmp dword [edi + 0x24], 0x10
jb 0x4ddef2
mov edx, dword [edi + 0x10]
jmp 0x4ddef5
lea edx, [edi + 0x10]
xor eax, eax
mov dword [edi + 0x20], eax
add edx, eax
mov dword [ebp - 0x3a4], edx
mov edx, dword [ebp - 0x3a4]
mov cl, byte [ebp - 0x39d]
mov byte [edx], cl
mov ecx, dword [ebp - 0x394]
cmp dword [ecx + 0x20], 0
jae 0x4ddf23
push edi
call fcn.00679c38
pop ecx
mov eax, dword [ebp - 0x394]
mov edx, dword [eax + 0x20]
mov dword [ebp - 0x3a8], edx
cmp dword [ebp - 0x3a8], 0xffffffff
jbe 0x4ddf45
mov dword [ebp - 0x3a8], 0xffffffff
cmp edi, dword [ebp - 0x394]
jne 0x4de145
mov dword [ebp - 0x3ac], 0xffffffff
mov ecx, dword [ebp - 0x3a8]
mov dword [ebp - 0x3b0], ecx
mov eax, dword [edi + 0x20]
cmp eax, dword [ebp - 0x3b0]
jae 0x4ddf79
push edi
call fcn.00679c38
pop ecx
mov edx, dword [edi + 0x20]
sub edx, dword [ebp - 0x3b0]
cmp edx, dword [ebp - 0x3ac]
jae 0x4ddf99
mov ecx, dword [edi + 0x20]
sub ecx, dword [ebp - 0x3b0]
mov dword [ebp - 0x3ac], ecx
cmp dword [ebp - 0x3ac], 0
jbe 0x4de061
mov eax, dword [edi + 0x20]
sub eax, dword [ebp - 0x3b0]
sub eax, dword [ebp - 0x3ac]
mov dword [ebp - 0x3b4], eax
cmp dword [edi + 0x24], 0x10
jb 0x4ddfc6
mov edx, dword [edi + 0x10]
jmp 0x4ddfc9
lea edx, [edi + 0x10]
add edx, dword [ebp - 0x3b0]
add edx, dword [ebp - 0x3ac]
mov dword [ebp - 0x3b8], edx
cmp dword [edi + 0x24], 0x10
jb 0x4ddfe6
mov eax, dword [edi + 0x10]
jmp 0x4ddfe9
lea eax, [edi + 0x10]
add eax, dword [ebp - 0x3b0]
mov dword [ebp - 0x3bc], eax
mov edx, dword [ebp - 0x3b4]
push edx
mov ecx, dword [ebp - 0x3b8]
push ecx
mov ecx, dword [ebp - 0x3bc]
push ecx
call fcn.0067e4f5
add esp, 0xc
mov eax, dword [edi + 0x20]
sub eax, dword [ebp - 0x3ac]
mov dword [ebp - 0x3c0], eax
mov edx, dword [ebp - 0x3c0]
mov dword [ebp - 0x3c4], edx
mov byte [ebp - 0x3c5], 0
cmp dword [edi + 0x24], 0x10
jb 0x4de03f
mov ecx, dword [edi + 0x10]
jmp 0x4de042
lea ecx, [edi + 0x10]
mov eax, dword [ebp - 0x3c4]
mov dword [edi + 0x20], eax
add ecx, eax
mov dword [ebp - 0x3cc], ecx
mov edx, dword [ebp - 0x3cc]
mov cl, byte [ebp - 0x3c5]
mov byte [edx], cl
xor ecx, ecx
mov dword [ebp - 0x3d0], ecx
cmp dword [edi + 0x20], 0
jae 0x4de076
push edi
call fcn.00679c38
pop ecx
mov eax, dword [edi + 0x20]
cmp eax, dword [ebp - 0x3d0]
jae 0x4de08a
mov edx, dword [edi + 0x20]
mov dword [ebp - 0x3d0], edx
cmp dword [ebp - 0x3d0], 0
jbe 0x4de333
mov ecx, dword [edi + 0x20]
sub ecx, dword [ebp - 0x3d0]
mov dword [ebp - 0x3d4], ecx
cmp dword [edi + 0x24], 0x10
jb 0x4de0b1
mov eax, dword [edi + 0x10]
jmp 0x4de0b4
lea eax, [edi + 0x10]
add eax, dword [ebp - 0x3d0]
mov dword [ebp - 0x3d8], eax
cmp dword [edi + 0x24], 0x10
jb 0x4de0cb
mov edx, dword [edi + 0x10]
jmp 0x4de0ce
lea edx, [edi + 0x10]
mov dword [ebp - 0x3dc], edx
mov eax, dword [ebp - 0x3d4]
push eax
mov ecx, dword [ebp - 0x3d8]
push ecx
mov ecx, dword [ebp - 0x3dc]
push ecx
call fcn.0067e4f5
add esp, 0xc
mov eax, dword [edi + 0x20]
sub eax, dword [ebp - 0x3d0]
mov dword [ebp - 0x3e0], eax
mov edx, dword [ebp - 0x3e0]
mov dword [ebp - 0x3e4], edx
mov byte [ebp - 0x3e5], 0
cmp dword [edi + 0x24], 0x10
jb 0x4de11e
mov ecx, dword [edi + 0x10]
jmp 0x4de121
lea ecx, [edi + 0x10]
mov eax, dword [ebp - 0x3e4]
mov dword [edi + 0x20], eax
add ecx, eax
mov dword [ebp - 0x3ec], ecx
mov edx, dword [ebp - 0x3ec]
mov cl, byte [ebp - 0x3e5]
mov byte [edx], cl
jmp 0x4de333
mov esi, dword [ebp - 0x3a8]
lea ecx, [edi + 8]
push ecx
call fcn.0040c11c
pop ecx
mov dword [ebp - 0x3f0], eax
cmp dword [ebp - 0x3f0], 1
ja 0x4de16b
mov eax, 1
jmp 0x4de172
mov eax, dword [ebp - 0x3f0]
dec eax
cmp esi, eax
jbe 0x4de17d
push edi
call fcn.00679008
pop ecx
cmp esi, dword [edi + 0x24]
jbe 0x4de24c
mov edx, dword [edi + 0x20]
push edx
push esi
push edi
call fcn.0040bf1c
add esp, 0xc
jmp 0x4de280
test esi, esi
jne 0x4de280
mov byte [ebp - 0x409], 0
cmp dword [edi + 0x24], 0x10
jb 0x4de262
mov ecx, dword [edi + 0x10]
jmp 0x4de265
lea ecx, [edi + 0x10]
xor eax, eax
mov dword [edi + 0x20], eax
add ecx, eax
mov dword [ebp - 0x410], ecx
mov edx, dword [ebp - 0x410]
mov cl, byte [ebp - 0x409]
mov byte [edx], cl
test esi, esi
seta cl
and ecx, 1
test cl, cl
je 0x4de333
mov eax, dword [ebp - 0x3a8]
mov dword [ebp - 0x414], eax
mov edx, dword [ebp - 0x394]
cmp dword [edx + 0x24], 0x10
jb 0x4de2b3
mov ecx, dword [ebp - 0x394]
mov eax, dword [ecx + 0x10]
jmp 0x4de2bc
mov eax, dword [ebp - 0x394]
add eax, 0x10
mov dword [ebp - 0x418], eax
cmp dword [edi + 0x24], 0x10
jb 0x4de2cd
mov edx, dword [edi + 0x10]
jmp 0x4de2d0
lea edx, [edi + 0x10]
mov dword [ebp - 0x41c], edx
mov eax, dword [ebp - 0x414]
push eax
mov ecx, dword [ebp - 0x418]
push ecx
mov ecx, dword [ebp - 0x41c]
push ecx
call fcn.0067e3dc
add esp, 0xc
mov eax, dword [ebp - 0x3a8]
mov dword [ebp - 0x420], eax
mov byte [ebp - 0x421], 0
cmp dword [edi + 0x24], 0x10
jb 0x4de311
mov edx, dword [edi + 0x10]
jmp 0x4de314
lea edx, [edi + 0x10]
mov eax, dword [ebp - 0x420]
mov dword [edi + 0x20], eax
add edx, eax
mov dword [ebp - 0x428], edx
mov edx, dword [ebp - 0x428]
mov cl, byte [ebp - 0x421]
mov byte [edx], cl
dec dword [ebp - 0x344]
push edi
inc dword [ebp - 0x344]
lea ecx, [ebp - 0x228]
push ecx
call fcn.00677ecc
add dword [ebp - 0x344], 4
mov dword [ebp - 0x390], eax
mov eax, 0x6aa528
mov edx, dword [ebp - 0x1a0]
add esp, 8
mov dword [edx], eax
xor eax, eax
mov ecx, dword [ebp - 0x1a0]
mov edx, 0x6aa538
mov dword [ecx + 4], eax
inc dword [ebp - 0x344]
mov eax, dword [ebp - 0x1a0]
mov dword [eax], edx
mov edx, 0x6aa548
inc dword [ebp - 0x344]
mov ecx, dword [ebp - 0x1a0]
mov dword [ecx], edx
mov dword [0x72b6e0], 0x100
mov ecx, dword [ebp - 0x390]
push ecx
mov eax, dword [ebp - 0x1a0]
add eax, 8
push eax
call fcn.0040c148
add esp, 8
add dword [ebp - 0x344], 0xfffffffe
mov word [ebp - 0x350], 0x138
mov edx, dword [ebp - 0x1a0]
jmp 0x4de3db
mov edx, dword [ebp - 0x1a0]
mov dword [ebp - 0x384], edx
sub dword [ebp - 0x344], 4
push 2
lea eax, [ebp - 0x228]
push eax
call fcn.00678c44
add esp, 8
dec dword [ebp - 0x344]
cmp dword [edi + 0x24], 0x10
jb 0x4de427
mov ecx, dword [edi + 0x10]
mov dword [ebp - 0x42c], ecx
mov ecx, dword [ebp - 0x42c]
mov dword [ebp - 0x430], ecx
mov eax, dword [ebp - 0x430]
push eax
call fcn.0067381c
pop ecx
mov edx, 0xf
mov dword [edi + 0x24], edx
mov byte [ebp - 0x431], 0
cmp dword [edi + 0x24], 0x10
jb 0x4de441
mov ecx, dword [edi + 0x10]
jmp 0x4de444
lea ecx, [edi + 0x10]
xor eax, eax
mov dword [edi + 0x20], eax
add ecx, eax
mov dword [ebp - 0x438], ecx
mov edx, dword [ebp - 0x438]
mov cl, byte [ebp - 0x431]
mov byte [edx], cl
mov word [ebp - 0x350], 0xe4
mov ecx, 1
cmp ecx, 0xffffffff
jne 0x4de4c2
lea eax, [ebp - 0x360]
push eax
push 0
push 0
push 0
push 1
push 0x40bebc
push 0
lea edx, [ebp - 0x198]
push edx
call fcn.0040c1b0
pop ecx
lea eax, [ebp - 0x198]
inc dword [ebp - 0x344]
mov ecx, 0x6aa514
mov dword [ebp - 0x198], ecx
inc dword [ebp - 0x344]
push eax
push 0x40be64
call fcn.0068ba9c
add esp, 0x24
jmp 0x4de503
mov edx, dword [ebp - 0x384]
mov dword [ebp - 0x38c], edx
mov ecx, dword [ebp - 0x384]
mov eax, dword [ebp - 0x384]
mov dword [ebp - 0x43c], eax
mov dword [0x69e7cc], ecx
mov edx, dword [ebp - 0x43c]
add edx, 4
push edx
call fcn.0067d1f0
pop ecx
mov ecx, dword [ebp - 0x43c]
push ecx
call fcn.006776c8
pop ecx
mov eax, dword [ebp - 0x38c]
push eax
dec dword [ebp - 0x344]
cmp dword [ebp - 0x194], 1
je 0x4de522
cmp dword [ebp - 0x194], 3
jne 0x4de52f
mov edx, dword [ebp - 0x194]
push edx
call fcn.0067d1d0
pop ecx
pop ecx
mov word [ebp - 0x350], 0xd8
mov dword [ebp - 0x37c], ecx
mov word [ebp - 0x350], 0xcc
push 0x20
mov eax, dword [ebp - 0x37c]
push eax
mov edx, dword [eax]
call dword [edx + 0x14]
add esp, 8
lea ecx, [ebp - 0x190]
push eax
dec dword [ebp - 0x344]
push 2
push ecx
call fcn.0040bda0
add esp, 8
pop eax
mov word [ebp - 0x350], 0xc0
mov byte [ebx + 0x38], al
cmp dword [ebx + 0x30], 0
jne 0x4de5b3
mov edx, dword [ebx + 0x10]
or edx, 4
mov dword [ebp - 0x440], edx
push 0
cmp dword [ebx + 0x30], 0
jne 0x4de5a3
mov ecx, dword [ebp - 0x440]
or ecx, 4
jmp 0x4de5a9
mov ecx, dword [ebp - 0x440]
push ecx
push ebx
call fcn.00673aa0
add esp, 0xc
xor eax, eax
mov edx, 0x6d6aec
mov dword [ebx + 0xc], eax
mov eax, 0x6d6af8
inc dword [ebp - 0x344]
mov dword [ebp - 0xf8], edx
mov edx, dword [ebp - 0xfc]
mov ecx, 0x6aa468
mov dword [edx + 8], eax
mov dword [ebp - 0xf4], ecx
push 0x10
call fcn.00678f0c
pop ecx
mov dword [ebp - 0x22c], eax
test eax, eax
je 0x4de61b
mov word [ebp - 0x350], 0x1c8
mov edx, dword [ebp - 0x22c]
push edx
call fcn.00676f88
pop ecx
mov word [ebp - 0x350], 0x1b0
mov ecx, dword [ebp - 0x22c]
jmp 0x4de621
mov ecx, dword [ebp - 0x22c]
mov dword [ebp - 0xb8], ecx
lea eax, [ebp - 0xe8]
mov word [ebp - 0x350], 0xc0
mov dword [ebp - 0xe0], eax
lea edx, [ebp - 0xe4]
mov dword [ebp - 0xdc], edx
lea eax, [ebp - 0xd8]
mov dword [ebp - 0xd0], eax
lea edx, [ebp - 0xd4]
mov dword [ebp - 0xcc], edx
lea ecx, [ebp - 0xc8]
mov dword [ebp - 0xc0], ecx
lea eax, [ebp - 0xc4]
mov dword [ebp - 0xbc], eax
xor ecx, ecx
mov edx, dword [ebp - 0xdc]
xor ebx, ebx
mov dword [edx], ecx
xor edx, edx
mov eax, dword [ebp - 0xcc]
mov dword [eax], edx
xor edx, edx
mov ecx, dword [ebp - 0xbc]
mov dword [ecx], ebx
xor ebx, ebx
mov eax, dword [ebp - 0xe0]
mov dword [eax], edx
xor edx, edx
mov ecx, dword [ebp - 0xd0]
mov dword [ecx], ebx
mov ecx, 0x6d6aa4
mov eax, dword [ebp - 0xc0]
mov dword [eax], edx
lea eax, [ebp - 0xf4]
inc dword [ebp - 0x344]
mov dword [ebp - 0xf4], ecx
push 0
push 0
push eax
call fcn.004dfa6c
add esp, 0xc
inc dword [ebp - 0x344]
cmp dword [ebp - 0xa4], 0
jne 0x4de70a
push 0x1b6
push 0x82
mov edx, dword [ebp - 0x374]
push edx
call fcn.00673884
add esp, 0xc
mov dword [ebp - 0x444], eax
test eax, eax
jne 0x4de711
xor edx, edx
jmp 0x4df0cd
push 1
mov ecx, dword [ebp - 0x444]
push ecx
lea ecx, [ebp - 0xf4]
push ecx
call fcn.004dfa6c
add esp, 0xc
mov word [ebp - 0x350], 0x1d4
mov eax, dword [ebp - 0xb8]
push eax
lea edx, [ebp - 0x23c]
push edx
call fcn.0040be24
inc dword [ebp - 0x344]
lea ecx, [ebp - 0x23c]
mov dword [ebp - 0x448], ecx
xor eax, eax
mov word [ebp - 0x350], 0x1ec
mov dword [ebp - 0x240], eax
add esp, 8
cmp dword [ebp - 0x240], 1
je 0x4de77d
cmp dword [ebp - 0x240], 3
jne 0x4de78a
mov edx, dword [ebp - 0x240]
push edx
call fcn.0067d19c
pop ecx
inc dword [ebp - 0x344]
mov ecx, dword [0x6d5774]
mov word [ebp - 0x350], 0x1e0
cmp dword [0x6d576c], 0
mov dword [ebp - 0x450], ecx
jne 0x4de83a
mov word [ebp - 0x350], 0x21c
xor eax, eax
mov dword [ebp - 0x248], eax
cmp dword [ebp - 0x248], 1
je 0x4de7d5
cmp dword [ebp - 0x248], 3
jne 0x4de7e2
mov edx, dword [ebp - 0x248]
push edx
call fcn.0067d19c
pop ecx
inc dword [ebp - 0x344]
mov word [ebp - 0x350], 0x210
cmp dword [0x6d576c], 0
jne 0x4de80c
inc dword [0x72b6c4]
mov ecx, dword [0x72b6c4]
mov dword [0x6d576c], ecx
dec dword [ebp - 0x344]
cmp dword [ebp - 0x248], 1
je 0x4de824
cmp dword [ebp - 0x248], 3
jne 0x4de831
mov eax, dword [ebp - 0x248]
push eax
call fcn.0067d1d0
pop ecx
mov word [ebp - 0x350], 0x204
mov edx, dword [0x6d576c]
mov dword [ebp - 0x454], edx
mov word [ebp - 0x350], 0x1e0
mov ecx, dword [ebp - 0x454]
push ecx
mov eax, dword [ebp - 0x448]
push eax
call fcn.00676fcc
add esp, 8
mov dword [ebp - 0x458], eax
cmp dword [ebp - 0x458], 0
jne 0x4defbd
cmp dword [ebp - 0x450], 0
je 0x4de892
mov edx, dword [ebp - 0x450]
mov dword [ebp - 0x458], edx
jmp 0x4defbd
lea ecx, [ebp - 0x450]
test ecx, ecx
je 0x4def23
cmp dword [ebp - 0x450], 0
jne 0x4def23
push 8
call fcn.00678f0c
pop ecx
mov dword [ebp - 0x24c], eax
test eax, eax
je 0x4dee7b
mov word [ebp - 0x350], 0x24c
mov edx, dword [ebp - 0x448]
mov ebx, dword [edx + 8]
add ebx, 0x18
lea eax, [ebx + 8]
push eax
lea edx, [ebp - 0x464]
push edx
call fcn.0040bef4
add esp, 8
lea ecx, [ebp - 0x464]
push ecx
lea ecx, [ebp - 0x26c]
push ecx
call fcn.0040bef4
add esp, 8
mov eax, 0xf
mov dword [ebp - 0x250], eax
mov byte [ebp - 0x465], 0
cmp dword [ebp - 0x250], 0x10
jb 0x4de924
mov edx, dword [ebp - 0x264]
jmp 0x4de92a
lea edx, [ebp - 0x264]
xor eax, eax
mov dword [ebp - 0x254], eax
add edx, eax
mov dword [ebp - 0x46c], edx
mov edx, dword [ebp - 0x46c]
mov cl, byte [ebp - 0x465]
mov byte [edx], cl
cmp dword [ebx + 0x20], 0
jae 0x4de95b
lea ecx, [ebp - 0x274]
push ecx
call fcn.00679c38
pop ecx
mov esi, dword [ebx + 0x20]
cmp esi, 0xffffffff
jbe 0x4de968
mov esi, 0xffffffff
lea eax, [ebp - 0x274]
cmp ebx, eax
jne 0x4debaa
mov edi, 0xffffffff
mov dword [ebp - 0x470], esi
mov edx, dword [ebp - 0x254]
cmp edx, dword [ebp - 0x470]
jae 0x4de99c
lea ecx, [ebp - 0x274]
push ecx
call fcn.00679c38
pop ecx
mov eax, dword [ebp - 0x254]
sub eax, dword [ebp - 0x470]
cmp edi, eax
jbe 0x4de9b8
mov edi, dword [ebp - 0x254]
sub edi, dword [ebp - 0x470]
test edi, edi
jbe 0x4dea93
mov eax, dword [ebp - 0x254]
sub eax, dword [ebp - 0x470]
sub eax, edi
mov dword [ebp - 0x474], eax
cmp dword [ebp - 0x250], 0x10
jb 0x4de9e5
mov edx, dword [ebp - 0x264]
jmp 0x4de9eb
lea edx, [ebp - 0x264]
add edx, dword [ebp - 0x470]
add edx, edi
mov dword [ebp - 0x478], edx
cmp dword [ebp - 0x250], 0x10
jb 0x4dea0a
mov eax, dword [ebp - 0x264]
jmp 0x4dea10
lea eax, [ebp - 0x264]
add eax, dword [ebp - 0x470]
mov dword [ebp - 0x47c], eax
mov edx, dword [ebp - 0x474]
push edx
mov ecx, dword [ebp - 0x478]
push ecx
mov ecx, dword [ebp - 0x47c]
push ecx
call fcn.0067e4f5
add esp, 0xc
mov eax, dword [ebp - 0x254]
sub eax, edi
mov dword [ebp - 0x480], eax
mov edx, dword [ebp - 0x480]
mov dword [ebp - 0x484], edx
mov byte [ebp - 0x485], 0
cmp dword [ebp - 0x250], 0x10
jb 0x4dea6b
mov ecx, dword [ebp - 0x264]
jmp 0x4dea71
lea ecx, [ebp - 0x264]
mov eax, dword [ebp - 0x484]
mov dword [ebp - 0x254], eax
add ecx, eax
mov dword [ebp - 0x48c], ecx
mov edx, dword [ebp - 0x48c]
mov cl, byte [ebp - 0x485]
mov byte [edx], cl
xor ecx, ecx
mov dword [ebp - 0x490], ecx
cmp dword [ebp - 0x254], 0
jae 0x4deab1
lea eax, [ebp - 0x274]
push eax
call fcn.00679c38
pop ecx
mov edx, dword [ebp - 0x254]
cmp edx, dword [ebp - 0x490]
jae 0x4deacb
mov ecx, dword [ebp - 0x254]
mov dword [ebp - 0x490], ecx
cmp dword [ebp - 0x490], 0
jbe 0x4dedf6
mov eax, dword [ebp - 0x254]
sub eax, dword [ebp - 0x490]
mov dword [ebp - 0x494], eax
cmp dword [ebp - 0x250], 0x10
jb 0x4deafb
mov edx, dword [ebp - 0x264]
jmp 0x4deb01
lea edx, [ebp - 0x264]
add edx, dword [ebp - 0x490]
mov dword [ebp - 0x498], edx
cmp dword [ebp - 0x250], 0x10
jb 0x4deb1e
mov eax, dword [ebp - 0x264]
jmp 0x4deb24
lea eax, [ebp - 0x264]
mov dword [ebp - 0x49c], eax
mov edx, dword [ebp - 0x494]
push edx
mov ecx, dword [ebp - 0x498]
push ecx
mov ecx, dword [ebp - 0x49c]
push ecx
call fcn.0067e4f5
add esp, 0xc
mov eax, dword [ebp - 0x254]
sub eax, dword [ebp - 0x490]
mov dword [ebp - 0x4a0], eax
mov edx, dword [ebp - 0x4a0]
mov dword [ebp - 0x4a4], edx
mov byte [ebp - 0x4a5], 0
cmp dword [ebp - 0x250], 0x10
jb 0x4deb7d
mov ecx, dword [ebp - 0x264]
jmp 0x4deb83
lea ecx, [ebp - 0x264]
mov eax, dword [ebp - 0x4a4]
mov dword [ebp - 0x254], eax
add ecx, eax
mov dword [ebp - 0x4ac], ecx
mov edx, dword [ebp - 0x4ac]
mov cl, byte [ebp - 0x4a5]
mov byte [edx], cl
jmp 0x4dedf6
mov dword [ebp - 0x4b0], esi
lea ecx, [ebp - 0x26c]
push ecx
call fcn.0040c11c
pop ecx
mov dword [ebp - 0x4b4], eax
cmp dword [ebp - 0x4b4], 1
ja 0x4debd3
mov eax, 1
jmp 0x4debda
mov eax, dword [ebp - 0x4b4]
dec eax
cmp eax, dword [ebp - 0x4b0]
jae 0x4debef
lea edx, [ebp - 0x274]
push edx
call fcn.00679008
pop ecx
mov ecx, dword [ebp - 0x250]
cmp ecx, dword [ebp - 0x4b0]
jae 0x4ded02
mov ecx, dword [ebp - 0x254]
push ecx
mov eax, dword [ebp - 0x4b0]
push eax
lea edx, [ebp - 0x274]
push edx
call fcn.0040bf1c
add esp, 0xc
jmp 0x4ded47
cmp dword [ebp - 0x4b0], 0
jne 0x4ded47
mov byte [ebp - 0x4cd], 0
cmp dword [ebp - 0x250], 0x10
jb 0x4ded23
mov ecx, dword [ebp - 0x264]
jmp 0x4ded29
lea ecx, [ebp - 0x264]
xor eax, eax
mov dword [ebp - 0x254], eax
add ecx, eax
mov dword [ebp - 0x4d4], ecx
mov edx, dword [ebp - 0x4d4]
mov cl, byte [ebp - 0x4cd]
mov byte [edx], cl
cmp dword [ebp - 0x4b0], 0
seta cl
and ecx, 1
test cl, cl
je 0x4dedf6
mov dword [ebp - 0x4d8], esi
cmp dword [ebx + 0x24], 0x10
jb 0x4ded6d
mov eax, dword [ebx + 0x10]
jmp 0x4ded70
lea eax, [ebx + 0x10]
mov dword [ebp - 0x4dc], eax
cmp dword [ebp - 0x250], 0x10
jb 0x4ded87
mov edx, dword [ebp - 0x264]
jmp 0x4ded8d
lea edx, [ebp - 0x264]
mov dword [ebp - 0x4e0], edx
mov eax, dword [ebp - 0x4d8]
push eax
mov ecx, dword [ebp - 0x4dc]
push ecx
mov eax, dword [ebp - 0x4e0]
push eax
call fcn.0067e3dc
add esp, 0xc
mov dword [ebp - 0x4e4], esi
mov byte [ebp - 0x4e5], 0
cmp dword [ebp - 0x250], 0x10
jb 0x4dedce
mov edx, dword [ebp - 0x264]
jmp 0x4dedd4
lea edx, [ebp - 0x264]
mov eax, dword [ebp - 0x4e4]
mov dword [ebp - 0x254], eax
add edx, eax
mov dword [ebp - 0x4ec], edx
mov edx, dword [ebp - 0x4ec]
mov cl, byte [ebp - 0x4e5]
mov byte [edx], cl
dec dword [ebp - 0x344]
lea eax, [ebp - 0x274]
push eax
inc dword [ebp - 0x344]
lea edx, [ebp - 0x2d4]
push edx
call fcn.00677ecc
add dword [ebp - 0x344], 4
mov dword [ebp - 0x45c], eax
mov ecx, 0x6aa528
mov ebx, dword [ebp - 0x24c]
xor edx, edx
add esp, 8
mov dword [ebx], ecx
mov eax, dword [ebp - 0x24c]
mov ecx, 0x6d6a5c
mov dword [eax + 4], edx
mov eax, 0x6d6a78
inc dword [ebp - 0x344]
mov ebx, dword [ebp - 0x24c]
mov dword [ebx], ecx
inc dword [ebp - 0x344]
mov edx, dword [ebp - 0x24c]
mov dword [edx], eax
add dword [ebp - 0x344], 0xfffffffe
mov word [ebp - 0x350], 0x234
mov ecx, dword [ebp - 0x24c]
jmp 0x4dee81
mov ecx, dword [ebp - 0x24c]
mov dword [ebp - 0x450], ecx
sub dword [ebp - 0x344], 4
push 2
lea eax, [ebp - 0x2d4]
push eax
call fcn.00678c44
add esp, 8
dec dword [ebp - 0x344]
cmp dword [ebp - 0x250], 0x10
jb 0x4deed3
mov edx, dword [ebp - 0x264]
mov dword [ebp - 0x4f0], edx
mov eax, dword [ebp - 0x4f0]
mov dword [ebp - 0x4f4], eax
mov edx, dword [ebp - 0x4f4]
push edx
call fcn.0067381c
pop ecx
mov ecx, 0xf
mov dword [ebp - 0x250], ecx
mov byte [ebp - 0x4f5], 0
cmp dword [ebp - 0x250], 0x10
jb 0x4deef6
mov eax, dword [ebp - 0x264]
jmp 0x4deefc
lea eax, [ebp - 0x264]
xor edx, edx
mov dword [ebp - 0x254], edx
add eax, edx
mov dword [ebp - 0x4fc], eax
mov eax, dword [ebp - 0x4fc]
mov cl, byte [ebp - 0x4f5]
mov byte [eax], cl
mov word [ebp - 0x350], 0x1e0
mov eax, 1
cmp eax, 0xffffffff
jne 0x4def7d
lea edx, [ebp - 0x360]
push edx
push 0
push 0
push 0
push 1
push 0x40bebc
push 0
lea ecx, [ebp - 0x244]
push ecx
call fcn.0040c1b0
pop ecx
mov eax, 0x6aa514
inc dword [ebp - 0x344]
mov dword [ebp - 0x244], eax
inc dword [ebp - 0x344]
lea edx, [ebp - 0x244]
push edx
push 0x40be64
call fcn.0068ba9c
add esp, 0x24
jmp 0x4defbd
mov ecx, dword [ebp - 0x450]
mov dword [ebp - 0x458], ecx
mov eax, dword [ebp - 0x450]
mov edx, dword [ebp - 0x450]
mov dword [ebp - 0x500], edx
mov dword [0x6d5774], eax
mov ecx, dword [ebp - 0x500]
add ecx, 4
push ecx
call fcn.0067d1f0
pop ecx
mov eax, dword [ebp - 0x500]
push eax
call fcn.006776c8
pop ecx
mov edx, dword [ebp - 0x458]
push edx
dec dword [ebp - 0x344]
cmp dword [ebp - 0x240], 1
je 0x4defdc
cmp dword [ebp - 0x240], 3
jne 0x4defe9
mov ecx, dword [ebp - 0x240]
push ecx
call fcn.0067d1d0
pop ecx
pop eax
mov word [ebp - 0x350], 0x1d4
mov dword [ebp - 0x44c], eax
mov edx, dword [ebp - 0x44c]
push edx
call fcn.004dfb2c
pop ecx
test al, al
je 0x4df017
xor ecx, ecx
mov dword [ebp - 0xb4], ecx
jmp 0x4df0a7
mov eax, dword [ebp - 0x44c]
mov dword [ebp - 0xb4], eax
lea edx, [ebp - 0xe8]
mov dword [ebp - 0xe0], edx
lea ecx, [ebp - 0xe4]
mov dword [ebp - 0xdc], ecx
lea eax, [ebp - 0xd8]
mov dword [ebp - 0xd0], eax
lea edx, [ebp - 0xd4]
mov dword [ebp - 0xcc], edx
lea ecx, [ebp - 0xc8]
mov dword [ebp - 0xc0], ecx
lea eax, [ebp - 0xc4]
mov dword [ebp - 0xbc], eax
mov edx, dword [ebp - 0xdc]
xor ecx, ecx
mov dword [edx], ecx
mov eax, dword [ebp - 0xcc]
xor edx, edx
mov dword [eax], edx
mov ecx, dword [ebp - 0xbc]
xor ebx, ebx
mov dword [ecx], ebx
mov eax, dword [ebp - 0xe0]
xor edx, edx
mov dword [eax], edx
mov ecx, dword [ebp - 0xd0]
xor ebx, ebx
mov dword [ecx], ebx
mov eax, dword [ebp - 0xc0]
xor edx, edx
mov dword [eax], edx
dec dword [ebp - 0x344]
push 2
lea ecx, [ebp - 0x23c]
push ecx
call fcn.0040bda0
mov word [ebp - 0x350], 0xc0
add esp, 8
lea edx, [ebp - 0xf4]
test edx, edx
jne 0x4df11e
mov eax, dword [ebp - 0xfc]
mov dword [ebp - 0x504], eax
mov ecx, dword [ebp - 0x504]
mov eax, dword [ecx + 0x10]
or eax, 2
mov dword [ebp - 0x508], eax
push 0
mov edx, dword [ebp - 0x504]
cmp dword [edx + 0x30], 0
jne 0x4df108
mov ecx, dword [ebp - 0x508]
or ecx, 4
jmp 0x4df10e
mov ecx, dword [ebp - 0x508]
push ecx
mov eax, dword [ebp - 0x504]
push eax
call fcn.00673aa0
add esp, 0xc
inc dword [ebp - 0x344]
dec dword [ebp - 0x344]
cmp dword [ebp - 0x15c], 0x10
jb 0x4df158
mov edx, dword [ebp - 0x170]
mov dword [ebp - 0x50c], edx
mov eax, dword [ebp - 0x50c]
mov dword [ebp - 0x510], eax
mov edx, dword [ebp - 0x510]
push edx
call fcn.0067381c
pop ecx
mov ecx, 0xf
mov dword [ebp - 0x15c], ecx
mov byte [ebp - 0x511], 0
cmp dword [ebp - 0x15c], 0x10
jb 0x4df17b
mov eax, dword [ebp - 0x170]
jmp 0x4df181
lea eax, [ebp - 0x170]
xor edx, edx
mov dword [ebp - 0x160], edx
add eax, edx
mov dword [ebp - 0x518], eax
mov eax, dword [ebp - 0x518]
mov cl, byte [ebp - 0x511]
mov byte [eax], cl
mov word [ebp - 0x350], 0x30
mov eax, dword [ebp - 0x44]
mov edx, dword [eax]
call dword [edx]
push eax
mov edx, dword [ebp - 0x54]
push edx
lea ecx, [ebp - 0xfc]
push ecx
call fcn.004dfb58
add esp, 0xc
lea eax, [ebp - 0xf4]
mov dword [ebp - 0x51c], eax
cmp dword [ebp - 0xa4], 0
jne 0x4df1e2
xor edx, edx
mov dword [ebp - 0x51c], edx
jmp 0x4df214
lea ecx, [ebp - 0xf4]
push ecx
call fcn.004dfd14
pop ecx
test al, al
jne 0x4df1fb
xor eax, eax
mov dword [ebp - 0x51c], eax
mov edx, dword [ebp - 0xa4]
push edx
call fcn.006801f0
pop ecx
test eax, eax
je 0x4df214
xor ecx, ecx
mov dword [ebp - 0x51c], ecx
push 2
push 0
lea eax, [ebp - 0xf4]
push eax
call fcn.004dfa6c
add esp, 0xc
cmp dword [ebp - 0x51c], 0
jne 0x4df27d
mov edx, dword [ebp - 0xfc]
mov dword [ebp - 0x520], edx
mov ecx, dword [ebp - 0x520]
mov eax, dword [ecx + 0x10]
or eax, 2
mov dword [ebp - 0x524], eax
push 0
mov edx, dword [ebp - 0x520]
cmp dword [edx + 0x30], 0
jne 0x4df267
mov ecx, dword [ebp - 0x524]
or ecx, 4
jmp 0x4df26d
mov ecx, dword [ebp - 0x524]
push ecx
mov eax, dword [ebp - 0x520]
push eax
call fcn.00673aa0
add esp, 0xc
mov word [ebp - 0x350], 0x2c4
push 0x730ca0
xor edx, edx
mov dword [ebp - 0x2d8], edx
lea eax, [ebp - 0x2d8]
push eax
inc dword [ebp - 0x344]
call fcn.0054bc10
add esp, 8
lea edx, [ebp - 0x2d8]
mov ecx, dword [edx]
push ecx
mov edx, 0x6d437b
lea eax, [ebp - 0x2dc]
call fcn.0068e308
inc dword [ebp - 0x344]
lea edx, [ebp - 0x2e0]
mov ecx, dword [eax]
xor eax, eax
push ecx
push 0x730ca0
mov dword [ebp - 0x2e0], eax
push edx
inc dword [ebp - 0x344]
call fcn.0053af08
xor edx, edx
add esp, 0x10
mov dword [ebp - 0x2e4], edx
lea edx, [ebp + 0x10]
inc dword [ebp - 0x344]
lea eax, [ebp - 0x2e0]
lea ecx, [ebp - 0x2e4]
call fcn.0068e474
lea eax, [ebp - 0x2e4]
xor ecx, ecx
push eax
push 0x730ca0
mov dword [ebp - 0x2e8], ecx
lea eax, [ebp - 0x2e8]
push eax
inc dword [ebp - 0x344]
call fcn.0054bc10
add esp, 8
lea edx, [ebp - 0x2e8]
mov ecx, dword [edx]
push ecx
mov edx, 0x6d43e9
lea eax, [ebp - 0x2ec]
call fcn.0068e308
inc dword [ebp - 0x344]
lea edx, [ebp - 0x2f0]
mov ecx, dword [eax]
xor eax, eax
push ecx
push 0x730ca0
mov dword [ebp - 0x2f0], eax
push edx
inc dword [ebp - 0x344]
call fcn.0053af08
xor eax, eax
add esp, 0x10
mov dword [ebp - 0x2f4], eax
lea edx, [ebp - 0x2f0]
inc dword [ebp - 0x344]
lea ecx, [ebp - 0x2f4]
pop eax
call fcn.0068e474
lea edx, [ebp - 0x2f4]
mov ecx, dword [edx]
push ecx
push 0x730cfc
call fcn.0056d518
add esp, 8
dec dword [ebp - 0x344]
lea eax, [ebp - 0x2f4]
mov edx, 2
call fcn.0068e424
dec dword [ebp - 0x344]
lea eax, [ebp - 0x2f0]
mov edx, 2
call fcn.0068e424
dec dword [ebp - 0x344]
lea eax, [ebp - 0x2ec]
mov edx, 2
call fcn.0068e424
dec dword [ebp - 0x344]
lea eax, [ebp - 0x2e8]
mov edx, 2
call fcn.0068e424
dec dword [ebp - 0x344]
lea eax, [ebp - 0x2e4]
mov edx, 2
call fcn.0068e424
dec dword [ebp - 0x344]
lea eax, [ebp - 0x2e0]
mov edx, 2
call fcn.0068e424
dec dword [ebp - 0x344]
lea eax, [ebp - 0x2dc]
mov edx, 2
call fcn.0068e424
dec dword [ebp - 0x344]
lea eax, [ebp - 0x2d8]
mov edx, 2
call fcn.0068e424
dec dword [ebp - 0x344]
dec dword [ebp - 0x344]
mov ecx, 0x6d6aa4
mov dword [ebp - 0xf4], ecx
cmp byte [ebp - 0xa8], 0
je 0x4df4ee
lea eax, [ebp - 0xf4]
mov dword [ebp - 0x528], eax
mov word [ebp - 0x350], 0x30
cmp dword [ebp - 0xa4], 0
jne 0x4df4a9
xor edx, edx
mov dword [ebp - 0x528], edx
jmp 0x4df4db
lea ecx, [ebp - 0xf4]
push ecx
call fcn.004dfd14
pop ecx
test al, al
jne 0x4df4c2
xor eax, eax
mov dword [ebp - 0x528], eax
mov edx, dword [ebp - 0xa4]
push edx
call fcn.006801f0
pop ecx
test eax, eax
je 0x4df4db
xor ecx, ecx
mov dword [ebp - 0x528], ecx
push 2
push 0
lea eax, [ebp - 0xf4]
push eax
call fcn.004dfa6c
add esp, 0xc
dec dword [ebp - 0x344]
mov edx, 0x6aa468
mov dword [ebp - 0xf4], edx
push 3
mov ecx, dword [ebp - 0xb8]
push ecx
call fcn.0040bda0
add esp, 8
dec dword [ebp - 0x344]
sub dword [ebp - 0x344], 2
push 0
lea eax, [ebp - 0x9c]
push eax
call fcn.0040ec3c
add esp, 8
dec dword [ebp - 0x344]
cmp dword [ebp - 0x54], 0
je 0x4df550
mov edx, dword [ebp - 0x54]
mov dword [ebp - 0x52c], edx
mov ecx, dword [ebp - 0x52c]
push ecx
call fcn.0067381c
pop ecx
dec dword [ebp - 0x344]
cmp dword [ebp - 0x44], 0
je 0x4df5aa
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x530], eax
mov edx, dword [ebp - 0x530]
mov dword [ebp - 0x2fc], edx
cmp dword [ebp - 0x2fc], 0
je 0x4df5aa
mov ecx, dword [ebp - 0x2fc]
mov eax, dword [ecx]
mov dword [ebp - 0x2f8], eax
mov word [ebp - 0x350], 0x2e8
mov edx, 3
mov eax, dword [ebp - 0x2fc]
mov ecx, dword [eax]
call dword [ecx - 4]
mov word [ebp - 0x350], 0x30
dec dword [ebp - 0x344]
cmp dword [ebp - 0x34], 0
je 0x4df604
mov edx, dword [ebp - 0x34]
mov dword [ebp - 0x534], edx
mov eax, dword [ebp - 0x534]
mov dword [ebp - 0x304], eax
cmp dword [ebp - 0x304], 0
je 0x4df604
mov edx, dword [ebp - 0x304]
mov ecx, dword [edx]
mov dword [ebp - 0x300], ecx
mov word [ebp - 0x350], 0x300
mov edx, 3
mov eax, dword [ebp - 0x304]
mov ecx, dword [eax]
call dword [ecx - 4]
mov word [ebp - 0x350], 0x30
dec dword [ebp - 0x344]
cmp dword [ebp - 8], 0x10
jb 0x4df632
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x538], eax
mov edx, dword [ebp - 0x538]
mov dword [ebp - 0x53c], edx
mov ecx, dword [ebp - 0x53c]
push ecx
call fcn.0067381c
pop ecx
mov eax, 0xf
mov dword [ebp - 8], eax
mov byte [ebp - 0x53d], 0
cmp dword [ebp - 8], 0x10
jb 0x4df64c
mov edx, dword [ebp - 0x1c]
jmp 0x4df64f
lea edx, [ebp - 0x1c]
xor eax, eax
mov dword [ebp - 0xc], eax
add edx, eax
mov dword [ebp - 0x544], edx
mov edx, dword [ebp - 0x544]
mov cl, byte [ebp - 0x53d]
mov byte [edx], cl
mov word [ebp - 0x350], 0x18
mov word [ebp - 0x350], 0xc
jmp 0x4df9cb
dec dword [ebp - 0x344]
lea eax, [ebp + 0xc]
mov edx, 2
call fcn.0068e424
dec dword [ebp - 0x344]
lea eax, [ebp + 0x10]
mov edx, 2
call fcn.0068e424
dec dword [ebp - 0x344]
lea eax, [ebp + 0x14]
mov edx, 2
call fcn.0068e424
mov ecx, dword [ebp - 0x360]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret