Function at 0x413198
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x6442f5
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xa30
push esi
mov dword [ebp - 0xa04], ecx
call fcn.0040ebf0
mov dword [ebp - 0x90], eax
call fcn.0040ebf0
mov eax, dword [eax + 0x1c]
mov dword [ebp - 0xcc], eax
push 0
push 0
mov ecx, dword [ebp - 0xcc]
add ecx, 0xbc
call fcn.0062dfb0
mov dword [ebp - 0xf4], eax
mov ecx, dword [ebp - 0xcc]
call fcn.0040351e
mov ecx, dword [ebp + 8]
push ecx
mov ecx, dword [ebp - 0xcc]
add ecx, 0x194
call fcn.0061ee57
lea ecx, [ebp - 0xbc]
call fcn.0062451b
mov dword [ebp - 4], 0
push 0
push 0xffffffffffffffff
push 0
lea ecx, [ebp - 0xac]
call fcn.004166f0
mov byte [ebp - 4], 1
lea edx, [ebp - 0xac]
push edx
push 0
mov eax, dword [ebp + 8]
push eax
lea ecx, [ebp - 0xbc]
call fcn.0062462d
test eax, eax
jne 0x413366
lea ecx, [ebp - 0x108]
call fcn.004086f0
mov byte [ebp - 4], 2
push 0
push 0xc8
push 0xc8
lea ecx, [ebp - 0x108]
call fcn.0061f0fe
push eax
lea ecx, [ebp - 0xac]
call fcn.00625119
push 0xffffffffffffffff
lea ecx, [ebp - 0x108]
call fcn.0061f14d
push 0
push 0
lea ecx, [ebp - 0x108]
push ecx
push 0x68a9c0
xor edx, edx
mov dl, byte [0x6dfa28]
lea eax, [edx*4 + 0x6dfa94]
push eax
lea ecx, [ebp - 0x9e4]
push ecx
call fcn.0061ef63
mov dword [ebp - 0xa08], eax
mov edx, dword [ebp - 0xa08]
mov dword [ebp - 0xa0c], edx
mov byte [ebp - 4], 3
mov eax, dword [ebp - 0xa0c]
push eax
lea ecx, [ebp - 0x9e8]
push ecx
call fcn.0061eefd
mov dword [ebp - 0xa10], eax
mov edx, dword [ebp - 0xa10]
mov dword [ebp - 0xa14], edx
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0xa14]
call fcn.0041e980
push eax
call fcn.006308c8
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x9e8]
call fcn.0061ecce
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x9e4]
call fcn.0061ecce
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x108]
call fcn.0061ecce
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xac]
call fcn.004167c0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xbc]
call fcn.00624570
jmp 0x415e1e
xor eax, eax
test eax, eax
je 0x4133b9
lea ecx, [ebp - 0xbc]
call fcn.00624927
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 0x62821
je 0x4133b9
lea ecx, [ebp - 0xbc]
call fcn.00624848
push 0
push 0
xor ecx, ecx
mov cl, byte [0x6dfa28]
lea ecx, [ecx*4 + 0x6dfadc]
call fcn.0041e980
push eax
call fcn.006308c8
push 0xffffffffffffffff
call fcn.00607fcc
mov edx, dword [ebp + 8]
push edx
mov ecx, dword [ebp - 0xa04]
call fcn.00413164
mov dword [ebp - 0xf0], 0
lea ecx, [ebp - 0xbc]
call fcn.00624927
mov dword [ebp - 0xd8], eax
mov dword [ebp - 0xc8], 0
jmp 0x4133fe
mov eax, dword [ebp - 0xc8]
add eax, 1
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 0xf4240
jge 0x41343a
mov ecx, dword [ebp - 0xc8]
mov edx, dword [ebp - 0xf4]
mov dword [edx + ecx*4 + 0x3d1b04], 0
mov eax, dword [ebp - 0xc8]
mov ecx, dword [ebp - 0xf4]
mov dword [ecx + eax*4 + 0x1204], 0
jmp 0x4133ef
mov ecx, dword [ebp - 0xf4]
add ecx, 0x320
call fcn.00416950
mov ecx, dword [ebp - 0xf4]
call fcn.005c5655
mov ecx, dword [ebp - 0xf4]
add ecx, 0x7a2bdc
call fcn.00416ae0
mov ecx, dword [ebp - 0xf4]
add ecx, 0x7a2bf0
call fcn.00416ae0
mov edx, dword [ebp - 0xf4]
mov byte [edx + 0x7a2878], 0
mov ecx, dword [ebp - 0xf4]
add ecx, 0x7a2c18
call fcn.00416b20
mov eax, dword [ebp - 0xf4]
mov byte [eax + 0x48c], 0
mov ecx, dword [ebp - 0xf4]
add ecx, 0x7a2c04
call fcn.00416b00
mov ecx, dword [ebp - 0xf4]
add ecx, 0x7a2404
call fcn.00408970
mov dword [0x6b87a0], 0xffffffff
mov ecx, dword [ebp - 0xf4]
mov dword [ecx + 0x7a2a98], 0
mov edx, dword [ebp - 0xf4]
mov byte [edx + 0x7a287c], 0
mov eax, dword [ebp - 0xf4]
mov dword [eax + 0x7a26ac], 0
mov ecx, dword [ebp - 0xf4]
mov dword [ecx + 0x7a26b0], 0
mov edx, dword [ebp - 0xf4]
mov dword [edx + 0x10bc], 0
mov eax, dword [ebp - 0xf4]
mov dword [eax + 0x10c0], 0
mov ecx, dword [ebp - 0xf4]
mov byte [ecx + 0x7a2620], 0
mov edx, dword [ebp - 0xf4]
mov dword [edx + 0x10dc], 0xffffffff
mov dword [ebp - 0xe0], 0
jmp 0x413564
mov eax, dword [ebp - 0xe0]
add eax, 1
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 0x15
jge 0x413582
mov ecx, dword [ebp - 0xf4]
add ecx, dword [ebp - 0xe0]
mov byte [ecx + 0x10e0], 1
jmp 0x413555
mov edx, dword [ebp - 0xf4]
mov dword [edx + 0x480], 0
mov eax, dword [ebp - 0xa04]
mov dword [eax + 0x60], 0
push 0x7f00
call fcn.0040ebf0
mov ecx, eax
call fcn.00416860
push 0x7f02
push 0
call dword [0x6594f8]
mov dword [ebp - 0x104], eax
mov ecx, dword [ebp - 0x104]
push ecx
call dword [0x6594f4]
mov dword [ebp - 0xd0], eax
mov edx, dword [ebp - 0xf4]
mov dword [edx + 0x7a2438], 0
mov eax, dword [ebp - 0xf4]
mov dword [eax + 0x7a243c], 0xfffffc18
mov ecx, dword [ebp - 0xf4]
mov dword [ecx + 0x7a2618], 0
mov dword [0x72e774], 0xffffffff
mov edx, dword [ebp - 0xf4]
mov byte [edx + 0x7a2878], 1
mov eax, dword [ebp - 0xf4]
mov byte [eax + 0x7a2886], 0
mov ecx, dword [ebp - 0xf4]
call fcn.0056c47d
mov ecx, dword [ebp - 0xf4]
call fcn.0056c9f7
mov ecx, dword [ebp - 0xf4]
call fcn.00571bc1
mov ecx, dword [ebp - 0xf4]
call fcn.00573abe
mov ecx, dword [ebp - 0xcc]
mov byte [ecx + 0x188], 0
mov edx, dword [ebp - 0xcc]
add edx, 0x194
push edx
push 0x6dfa70
lea eax, [ebp - 0x9ec]
push eax
call fcn.0061eefd
mov dword [ebp - 0xa18], eax
mov ecx, dword [ebp - 0xa18]
mov dword [ebp - 0xa1c], ecx
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0xa1c]
call fcn.0041e980
push eax
mov ecx, dword [ebp - 0xcc]
call fcn.006227dd
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x9ec]
call fcn.0061ecce
mov edx, dword [ebp - 0xf4]
mov dword [edx + 0x490], 0
mov eax, dword [ebp - 0xf4]
mov dword [eax + 0x494], 0
mov ecx, dword [ebp - 0xf4]
mov dword [ecx + 0x498], 0
mov edx, dword [ebp - 0xf4]
mov dword [edx + 0x49c], 0
mov eax, dword [ebp - 0xf4]
mov dword [eax + 0x4a0], 0
mov ecx, dword [ebp - 0xf4]
mov dword [ecx + 0x4a4], 0
mov edx, dword [ebp - 0xf4]
mov dword [edx + 0x4a8], 0
mov eax, dword [ebp - 0xf4]
mov dword [eax + 0x4ac], 0
mov ecx, dword [ebp - 0xf4]
mov dword [ecx + 0x4b0], 0
mov edx, dword [ebp - 0xf4]
mov dword [edx + 0x4b4], 0
mov eax, dword [ebp - 0xf4]
mov dword [eax + 0x4b8], 0
mov ecx, dword [ebp - 0xf4]
mov dword [ecx + 0x4bc], 0
mov edx, dword [ebp - 0xf4]
mov dword [edx + 0x4c0], 0
mov eax, dword [ebp - 0xf4]
mov dword [eax + 0x4c4], 0
mov ecx, dword [ebp - 0xf4]
mov dword [ecx + 0x4c8], 0
mov edx, dword [ebp - 0xf4]
mov dword [edx + 0x4cc], 0
mov eax, dword [ebp - 0xf4]
mov dword [eax + 0x4d0], 0
mov ecx, dword [ebp - 0xf4]
mov dword [ecx + 0x4d4], 0
mov edx, dword [ebp - 0xf4]
mov dword [edx + 0x4d8], 0
mov eax, dword [ebp - 0xf4]
mov dword [eax + 0x4dc], 0
mov ecx, dword [ebp - 0xf4]
mov dword [ecx + 0x4e0], 0
mov edx, dword [ebp - 0xf4]
mov dword [edx + 0x4e4], 0
mov eax, dword [ebp - 0xf4]
mov dword [eax + 0x4e8], 0
mov ecx, dword [ebp - 0xf4]
mov dword [ecx + 0x4ec], 0
mov edx, dword [ebp - 0xf4]
mov dword [edx + 0x4f0], 0
mov eax, dword [ebp - 0xf4]
mov dword [eax + 0x4f4], 0
mov ecx, dword [ebp - 0xf4]
mov dword [ecx + 0x4f8], 0
mov edx, dword [ebp - 0xf4]
mov dword [edx + 0x4fc], 0
mov eax, dword [ebp - 0xf4]
mov dword [eax + 0x500], 0
mov ecx, dword [ebp - 0xf4]
add ecx, 0x350
call fcn.00416aa0
mov ecx, dword [ebp - 0xf4]
add ecx, 0x364
call fcn.00416ac0
mov ecx, dword [ebp - 0xf4]
call fcn.0056f4bf
mov ecx, dword [0x6e2ab8]
call fcn.0047e83d
push 4
lea ecx, [ebp - 0xf8]
push ecx
lea ecx, [ebp - 0xbc]
call fcn.0062474a
mov edx, dword [ebp - 0xf8]
and edx, 0xff
cmp edx, 0xa1
jne 0x414457
mov eax, dword [ebp - 0xf7]
and eax, 0xff
cmp eax, 0xb2
jne 0x414457
mov ecx, dword [ebp - 0xf6]
and ecx, 0xff
cmp ecx, 0xc3
jne 0x414457
mov edx, dword [ebp - 0xf5]
and edx, 0xff
cmp edx, 0xd4
jne 0x414457
mov dword [ebp - 0x900], 0
mov ecx, dword [ebp - 0xf4]
call fcn.0056549c
mov eax, dword [ebp - 0xd8]
push eax
mov ecx, dword [ebp - 0xf4]
call fcn.00565431
mov byte [ebp - 0x11c], 0
lea ecx, [ebp - 0xbc]
call fcn.00624927
mov dword [ebp - 0x904], eax
push 0
push 0x18
lea ecx, [ebp - 0xbc]
call fcn.006247cf
push 0x1c
mov ecx, dword [ebp - 0xf4]
call fcn.005654be
mov dword [ebp - 0x900], 0x1c
mov byte [ebp - 0x120], 1
mov dword [ebp - 0x908], 0
lea ecx, [ebp - 0x124]
call fcn.00494db0
mov ecx, dword [ebp - 0x120]
and ecx, 0xff
test ecx, ecx
je 0x4142dc
mov edx, dword [ebp - 0x908]
add edx, 1
mov dword [ebp - 0x908], edx
mov eax, dword [0x6b87a0]
add eax, 1
mov dword [0x6b87a0], eax
mov ecx, dword [0x72e774]
add ecx, 1
mov dword [0x72e774], ecx
push 4
lea edx, [ebp - 0x8f4]
push edx
lea ecx, [ebp - 0xbc]
call fcn.0062474a
mov eax, dword [ebp - 0x11c]
and eax, 0xff
test eax, eax
jne 0x413a60
mov ecx, dword [ebp - 0x8f4]
and ecx, 0xff
shl ecx, 0x18
mov edx, dword [ebp - 0x8f3]
and edx, 0xff
shl edx, 0x10
or ecx, edx
mov eax, dword [ebp - 0x8f2]
and eax, 0xff
shl eax, 8
or ecx, eax
mov edx, dword [ebp - 0x8f1]
and edx, 0xff
or ecx, edx
mov dword [ebp - 0x8f8], ecx
jmp 0x413aa4
mov eax, dword [ebp - 0x8f1]
and eax, 0xff
shl eax, 0x18
mov ecx, dword [ebp - 0x8f2]
and ecx, 0xff
shl ecx, 0x10
or eax, ecx
mov edx, dword [ebp - 0x8f3]
and edx, 0xff
shl edx, 8
or eax, edx
mov ecx, dword [ebp - 0x8f4]
and ecx, 0xff
or eax, ecx
mov dword [ebp - 0x8f8], eax
push 4
lea edx, [ebp - 0x8f4]
push edx
lea ecx, [ebp - 0xbc]
call fcn.0062474a
mov eax, dword [ebp - 0x11c]
and eax, 0xff
test eax, eax
jne 0x413b0d
mov ecx, dword [ebp - 0x8f4]
and ecx, 0xff
shl ecx, 0x18
mov edx, dword [ebp - 0x8f3]
and edx, 0xff
shl edx, 0x10
or ecx, edx
mov eax, dword [ebp - 0x8f2]
and eax, 0xff
shl eax, 8
or ecx, eax
mov edx, dword [ebp - 0x8f1]
and edx, 0xff
or ecx, edx
mov dword [ebp - 0x8fc], ecx
jmp 0x413b51
mov eax, dword [ebp - 0x8f1]
and eax, 0xff
shl eax, 0x18
mov ecx, dword [ebp - 0x8f2]
and ecx, 0xff
shl ecx, 0x10
or eax, ecx
mov edx, dword [ebp - 0x8f3]
and edx, 0xff
shl edx, 8
or eax, edx
mov ecx, dword [ebp - 0x8f4]
and ecx, 0xff
or eax, ecx
mov dword [ebp - 0x8fc], eax
push 4
lea edx, [ebp - 0x8f4]
push edx
lea ecx, [ebp - 0xbc]
call fcn.0062474a
push 4
lea eax, [ebp - 0x90c]
push eax
lea ecx, [ebp - 0xbc]
call fcn.0062474a
mov ecx, dword [ebp - 0x11c]
and ecx, 0xff
test ecx, ecx
jne 0x413bce
mov edx, dword [ebp - 0x8f4]
and edx, 0xff
shl edx, 0x18
mov eax, dword [ebp - 0x8f3]
and eax, 0xff
shl eax, 0x10
or edx, eax
mov ecx, dword [ebp - 0x8f2]
and ecx, 0xff
shl ecx, 8
or edx, ecx
mov eax, dword [ebp - 0x8f1]
and eax, 0xff
or edx, eax
mov dword [ebp - 0x110], edx
jmp 0x413c12
mov ecx, dword [ebp - 0x8f1]
and ecx, 0xff
shl ecx, 0x18
mov edx, dword [ebp - 0x8f2]
and edx, 0xff
shl edx, 0x10
or ecx, edx
mov eax, dword [ebp - 0x8f3]
and eax, 0xff
shl eax, 8
or ecx, eax
mov edx, dword [ebp - 0x8f4]
and edx, 0xff
or ecx, edx
mov dword [ebp - 0x110], ecx
lea ecx, [ebp - 0x910]
call fcn.00494db0
mov eax, dword [ebp - 0x8f8]
push eax
lea ecx, [ebp - 0x9f0]
call fcn.00494d90
push eax
lea ecx, [ebp - 0x910]
call fcn.00416970
mov ecx, dword [ebp - 0xa04]
mov edx, dword [ecx + 0x60]
add edx, dword [ebp - 0x110]
mov eax, dword [0x6dfb58]
imul eax, eax, 0x226
sub eax, 1
cmp edx, eax
ja 0x413c6e
mov ecx, dword [ebp - 0x908]
cmp ecx, dword [0x6dfb58]
jbe 0x413d4b
mov byte [ebp - 0x120], 0
lea ecx, [ebp - 0x910]
call fcn.00416990
mov edx, dword [ebp - 0xf4]
mov word [edx + 0x7a263e], ax
lea ecx, [ebp - 0x910]
call fcn.004169b0
mov ecx, dword [ebp - 0xf4]
mov word [ecx + 0x7a2640], ax
lea ecx, [ebp - 0x910]
call fcn.004169d0
mov edx, dword [ebp - 0xf4]
mov word [edx + 0x7a2644], ax
lea ecx, [ebp - 0x910]
call fcn.004169f0
mov ecx, dword [ebp - 0xf4]
mov word [ecx + 0x7a2646], ax
lea ecx, [ebp - 0x910]
call fcn.00416a10
mov edx, dword [ebp - 0xf4]
mov word [edx + 0x7a2648], ax
lea ecx, [ebp - 0x910]
call fcn.00416a30
mov ecx, dword [ebp - 0xf4]
mov word [ecx + 0x7a264a], ax
mov edx, dword [ebp - 0xf4]
mov ax, word [ebp - 0x8fc]
mov word [edx + 0x7a264c], ax
mov ecx, dword [0x6b87a0]
sub ecx, 1
mov dword [0x6b87a0], ecx
push 0
push 0
xor edx, edx
mov dl, byte [0x6dfa28]
lea ecx, [edx*4 + 0x6dfac4]
call fcn.0041e980
push eax
call fcn.006308c8
jmp 0x4142d7
mov eax, dword [ebp - 0x110]
push eax
mov ecx, dword [ebp - 0xa04]
mov edx, dword [ecx + 0x78]
push edx
lea ecx, [ebp - 0xbc]
call fcn.0062474a
mov eax, dword [ebp - 0xa04]
mov ecx, dword [eax + 0x68]
mov edx, dword [0x6b87a0]
mov eax, dword [ebp - 0x110]
mov dword [ecx + edx*4], eax
mov ecx, dword [ebp - 0xa04]
mov edx, dword [ecx + 0x6c]
mov eax, dword [ebp - 0x908]
mov ecx, dword [ebp - 0xa04]
mov ecx, dword [ecx + 0x60]
mov dword [edx + eax*4 - 4], ecx
mov dword [ebp - 0x920], 0
jmp 0x413db6
mov edx, dword [ebp - 0x920]
add edx, 1
mov dword [ebp - 0x920], edx
mov eax, dword [ebp - 0x920]
cmp eax, dword [ebp - 0x110]
jae 0x413df3
mov ecx, dword [ebp - 0xa04]
mov edx, dword [ecx + 0x78]
mov eax, dword [ebp - 0xa04]
mov ecx, dword [eax + 0x60]
add ecx, dword [ebp - 0x920]
mov eax, dword [ebp - 0xa04]
mov eax, dword [eax + 0x74]
mov esi, dword [ebp - 0x920]
mov dl, byte [edx + esi]
mov byte [eax + ecx], dl
jmp 0x413da7
cmp dword [ebp - 0x908], 1
jne 0x413f36
lea eax, [ebp - 0x910]
push eax
lea ecx, [ebp - 0x124]
call fcn.00416970
lea ecx, [ebp - 0x928]
call fcn.004086f0
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x8fc]
push ecx
mov edx, dword [ebp - 0x8f8]
push edx
push 0x68a9c4
lea eax, [ebp - 0x928]
push eax
call fcn.0061bac6
add esp, 0x10
lea ecx, [ebp - 0x928]
call fcn.0041e980
push eax
call fcn.00608334
add esp, 4
fstp qword [ebp - 0x118]
lea ecx, [ebp - 0x910]
call fcn.00416990
mov ecx, dword [ebp - 0xf4]
mov word [ecx + 0x7a2622], ax
lea ecx, [ebp - 0x910]
call fcn.004169b0
mov edx, dword [ebp - 0xf4]
mov word [edx + 0x7a2624], ax
lea ecx, [ebp - 0x910]
call fcn.004169d0
mov ecx, dword [ebp - 0xf4]
mov word [ecx + 0x7a2628], ax
lea ecx, [ebp - 0x910]
call fcn.004169f0
mov edx, dword [ebp - 0xf4]
mov word [edx + 0x7a262a], ax
lea ecx, [ebp - 0x910]
call fcn.00416a10
mov ecx, dword [ebp - 0xf4]
mov word [ecx + 0x7a262c], ax
lea ecx, [ebp - 0x910]
call fcn.00416a30
mov edx, dword [ebp - 0xf4]
mov word [edx + 0x7a262e], ax
mov eax, dword [ebp - 0x8fc]
xor edx, edx
mov ecx, 0x3e8
div ecx
mov edx, dword [ebp - 0xf4]
mov word [edx + 0x7a2630], ax
mov eax, dword [ebp - 0xf4]
mov ecx, dword [ebp - 0x118]
mov dword [eax + 0x7a2930], ecx
mov edx, dword [ebp - 0x114]
mov dword [eax + 0x7a2934], edx
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x928]
call fcn.0061ecce
lea ecx, [ebp - 0x924]
call fcn.004086f0
mov byte [ebp - 4], 7
mov eax, dword [ebp - 0x8fc]
push eax
mov ecx, dword [ebp - 0x8f8]
push ecx
push str._d._06d
lea edx, [ebp - 0x924]
push edx
call fcn.0061bac6
add esp, 0x10
lea ecx, [ebp - 0x924]
call fcn.0041e980
push eax
call fcn.00608334
add esp, 4
fstp qword [ebp - 0x918]
mov eax, dword [ebp - 0xa04]
mov ecx, dword [eax + 0x70]
mov edx, dword [0x6b87a0]
mov eax, dword [ebp - 0x918]
mov dword [ecx + edx*8], eax
mov eax, dword [ebp - 0x914]
mov dword [ecx + edx*8 + 4], eax
mov ecx, dword [0x6b87a0]
push ecx
mov ecx, dword [ebp - 0xf4]
call fcn.00564e44
mov ecx, dword [ebp - 0xf4]
call fcn.005719cb
mov edx, dword [ebp - 0xa04]
mov eax, dword [edx + 0x68]
mov ecx, dword [0x6b87a0]
mov edx, dword [eax + ecx*4]
push edx
mov eax, dword [0x6b87a0]
push eax
mov ecx, dword [ebp - 0xf4]
call fcn.00564e6b
mov ecx, dword [ebp - 0xf4]
mov edx, dword [ecx + 0x11fc]
push edx
mov ecx, dword [ebp - 0xf4]
call fcn.005768ad
and eax, 0xff
test eax, eax
je 0x4140aa
mov ecx, dword [ebp - 0xf4]
add ecx, 0x7a2404
call fcn.00408950
test eax, eax
jne 0x414030
mov eax, dword [ebp - 0xf4]
mov ecx, dword [0x6b87a0]
mov dword [eax + 0x7a2438], ecx
mov edx, dword [0x6b87a0]
push edx
mov ecx, dword [ebp - 0xf4]
add ecx, 0x7a2404
call fcn.00408990
mov eax, dword [ebp - 0xf4]
xor ecx, ecx
mov cl, byte [eax + 0x7a287d]
test ecx, ecx
je 0x4140aa
mov dword [ebp - 0x92c], 0
jmp 0x414075
mov edx, dword [ebp - 0x92c]
add edx, 1
mov dword [ebp - 0x92c], edx
mov eax, dword [ebp - 0xf4]
mov ecx, dword [eax + 0x11fc]
xor edx, edx
mov dl, byte [ecx + 0xe8]
cmp dword [ebp - 0x92c], edx
jge 0x4140aa
mov eax, dword [0x6b87a0]
push eax
mov ecx, dword [ebp - 0xf4]
add ecx, 0x7a2404
call fcn.00408990
jmp 0x414066
mov ecx, dword [ebp - 0xa04]
mov edx, dword [ecx + 0x70]
mov eax, dword [0x6b87a0]
fld qword [edx + eax*8]
fsub qword [ebp - 0x118]
call fcn.0060838c
cmp eax, 0xf4240
jge 0x41419a
mov ecx, dword [ebp - 0xa04]
mov edx, dword [ecx + 0x70]
mov eax, dword [0x6b87a0]
fld qword [edx + eax*8]
fsub qword [ebp - 0x118]
call fcn.0060838c
mov ecx, dword [ebp - 0xa04]
mov edx, dword [ecx + 0x68]
mov ecx, dword [ebp - 0xf4]
mov eax, dword [ecx + eax*4 + 0x1204]
mov ecx, dword [0x6b87a0]
mov edx, dword [edx + ecx*4]
lea esi, [eax + edx + 0x18]
mov eax, dword [ebp - 0xa04]
mov ecx, dword [eax + 0x70]
mov edx, dword [0x6b87a0]
fld qword [ecx + edx*8]
fsub qword [ebp - 0x118]
call fcn.0060838c
mov ecx, dword [ebp - 0xf4]
mov dword [ecx + eax*4 + 0x1204], esi
mov edx, dword [ebp - 0xa04]
mov eax, dword [edx + 0x70]
mov ecx, dword [0x6b87a0]
fld qword [eax + ecx*8]
fsub qword [ebp - 0x118]
call fcn.0060838c
mov edx, dword [ebp - 0xf4]
mov esi, dword [edx + eax*4 + 0x3d1b04]
add esi, dword [0x6b87a0]
sub esi, dword [ebp - 0xf0]
mov eax, dword [ebp - 0xa04]
mov ecx, dword [eax + 0x70]
mov edx, dword [0x6b87a0]
fld qword [ecx + edx*8]
fsub qword [ebp - 0x118]
call fcn.0060838c
mov ecx, dword [ebp - 0xf4]
mov dword [ecx + eax*4 + 0x3d1b04], esi
mov edx, dword [0x6b87a0]
mov dword [ebp - 0xf0], edx
mov eax, dword [ebp - 0xa04]
mov ecx, dword [eax + 0x60]
add ecx, dword [ebp - 0x110]
mov edx, dword [ebp - 0xa04]
mov dword [edx + 0x60], ecx
mov eax, dword [ebp - 0x110]
mov ecx, dword [ebp - 0x900]
lea edx, [ecx + eax + 0xc]
mov dword [ebp - 0x900], edx
mov eax, dword [ebp - 0x908]
cdq
mov ecx, 0xc8
idiv ecx
mov dword [ebp - 0x91c], edx
cmp dword [ebp - 0x91c], 0
jne 0x414203
mov edx, dword [ebp - 0x900]
push edx
mov ecx, dword [ebp - 0xf4]
call fcn.005654be
lea ecx, [ebp - 0xbc]
call fcn.006247fe
add eax, 0x10
cmp eax, dword [ebp - 0x904]
jbe 0x4142c8
mov byte [ebp - 0x120], 0
lea ecx, [ebp - 0x910]
call fcn.00416990
mov ecx, dword [ebp - 0xf4]
mov word [ecx + 0x7a263e], ax
lea ecx, [ebp - 0x910]
call fcn.004169b0
mov edx, dword [ebp - 0xf4]
mov word [edx + 0x7a2640], ax
lea ecx, [ebp - 0x910]
call fcn.004169d0
mov ecx, dword [ebp - 0xf4]
mov word [ecx + 0x7a2644], ax
lea ecx, [ebp - 0x910]
call fcn.004169f0
mov edx, dword [ebp - 0xf4]
mov word [edx + 0x7a2646], ax
lea ecx, [ebp - 0x910]
call fcn.00416a10
mov ecx, dword [ebp - 0xf4]
mov word [ecx + 0x7a2648], ax
lea ecx, [ebp - 0x910]
call fcn.00416a30
mov edx, dword [ebp - 0xf4]
mov word [edx + 0x7a264a], ax
mov eax, dword [ebp - 0xf4]
mov cx, word [ebp - 0x8fc]
mov word [eax + 0x7a264c], cx
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x924]
call fcn.0061ecce
jmp 0x4139b8
lea ecx, [ebp - 0xbc]
call fcn.00624848
mov ecx, dword [ebp - 0xf4]
call fcn.0056549c
mov edx, dword [0x6b87a0]
add edx, 1
mov eax, dword [ebp - 0xf4]
mov dword [eax + 0x10c0], edx
mov ecx, dword [ebp - 0xf4]
mov edx, dword [ebp - 0xa04]
mov eax, dword [edx + 0x60]
mov dword [ecx + 0x10bc], eax
push 0x7f00
call fcn.0040ebf0
mov ecx, eax
call fcn.00416860
mov ecx, dword [ebp - 0xf4]
mov dword [ecx + 0x7a2424], 0
mov ecx, dword [ebp - 0xf4]
call fcn.0056549c
mov edx, dword [ebp - 0xf4]
mov byte [edx + 0x7a2888], 0
mov ecx, dword [ebp - 0xf4]
add ecx, 0x7a2404
call fcn.00408950
mov ecx, dword [ebp - 0xf4]
sub eax, dword [ecx + 0x7a25f0]
push eax
mov ecx, dword [ebp - 0xf4]
call fcn.005654e0
push 0
mov ecx, dword [ebp - 0xf4]
call fcn.00574ab9
mov edx, dword [ebp - 0xf4]
mov eax, dword [ebp - 0xa04]
mov ecx, dword [eax + 0x60]
mov dword [edx + 0x480], ecx
mov edx, dword [0x72e774]
mov dword [0x72e7bc], edx
mov ecx, dword [ebp - 0xf4]
call fcn.00573abe
mov dword [0x6e6a50], 0xfffffc19
mov byte [0x6dfb54], 1
mov eax, dword [ebp - 0xf4]
xor ecx, ecx
mov cl, byte [eax + 0x7a2877]
test ecx, ecx
je 0x414431
push 0
push 1
mov ecx, dword [ebp - 0xcc]
add ecx, 0xbc
call fcn.0062dfb0
mov dword [ebp - 0x934], eax
push 0
push 2
mov ecx, dword [ebp - 0xcc]
add ecx, 0xbc
call fcn.0062dfb0
mov dword [ebp - 0x930], eax
mov ecx, dword [ebp - 0x930]
call fcn.005c7fed
mov ecx, dword [ebp - 0x934]
call fcn.005c6d76
mov ecx, dword [ebp - 0x934]
call fcn.005c7936
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xac]
call fcn.004167c0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xbc]
call fcn.00624570
jmp 0x415e1e
lea ecx, [ebp - 0xbc]
call fcn.00416a50
push 2
lea edx, [ebp - 0xc4]
push edx
lea ecx, [ebp - 0xbc]
call fcn.0062474a
mov eax, dword [ebp - 0xc4]
and eax, 0xff
mov ecx, dword [ebp - 0xc3]
and ecx, 0xff
shl ecx, 8
or eax, ecx
mov edx, dword [ebp - 0xf4]
mov word [edx + 0x7a2622], ax
push 2
lea eax, [ebp - 0xc4]
push eax
lea ecx, [ebp - 0xbc]
call fcn.0062474a
mov ecx, dword [ebp - 0xc4]
and ecx, 0xff
mov edx, dword [ebp - 0xc3]
and edx, 0xff
shl edx, 8
or ecx, edx
mov eax, dword [ebp - 0xf4]
mov word [eax + 0x7a2624], cx
push 2
lea ecx, [ebp - 0xc4]
push ecx
lea ecx, [ebp - 0xbc]
call fcn.0062474a
mov edx, dword [ebp - 0xc4]
and edx, 0xff
mov eax, dword [ebp - 0xc3]
and eax, 0xff
shl eax, 8
or edx, eax
mov ecx, dword [ebp - 0xf4]
mov word [ecx + 0x7a2626], dx
push 2
lea edx, [ebp - 0xc4]
push edx
lea ecx, [ebp - 0xbc]
call fcn.0062474a
mov eax, dword [ebp - 0xc4]
and eax, 0xff
mov ecx, dword [ebp - 0xc3]
and ecx, 0xff
shl ecx, 8
or eax, ecx
mov edx, dword [ebp - 0xf4]
mov word [edx + 0x7a2628], ax
push 2
lea eax, [ebp - 0xc4]
push eax
lea ecx, [ebp - 0xbc]
call fcn.0062474a
mov ecx, dword [ebp - 0xc4]
and ecx, 0xff
mov edx, dword [ebp - 0xc3]
and edx, 0xff
shl edx, 8
or ecx, edx
mov eax, dword [ebp - 0xf4]
mov word [eax + 0x7a262a], cx
push 2
lea ecx, [ebp - 0xc4]
push ecx
lea ecx, [ebp - 0xbc]
call fcn.0062474a
mov edx, dword [ebp - 0xc4]
and edx, 0xff
mov eax, dword [ebp - 0xc3]
and eax, 0xff
shl eax, 8
or edx, eax
mov ecx, dword [ebp - 0xf4]
mov word [ecx + 0x7a262c], dx
push 2
lea edx, [ebp - 0xc4]
push edx
lea ecx, [ebp - 0xbc]
call fcn.0062474a
mov eax, dword [ebp - 0xc4]
and eax, 0xff
mov ecx, dword [ebp - 0xc3]
and ecx, 0xff
shl ecx, 8
or eax, ecx
mov edx, dword [ebp - 0xf4]
mov word [edx + 0x7a262e], ax
push 2
lea eax, [ebp - 0xc4]
push eax
lea ecx, [ebp - 0xbc]
call fcn.0062474a
mov ecx, dword [ebp - 0xc4]
and ecx, 0xff
mov edx, dword [ebp - 0xc3]
and edx, 0xff
shl edx, 8
or ecx, edx
mov eax, dword [ebp - 0xf4]
mov word [eax + 0x7a2630], cx
push 0xffffffffffffffff
mov ecx, dword [ebp - 0xf4]
add ecx, 0x7a2622
push ecx
lea ecx, [ebp - 0xdc]
call fcn.0061bbc3
lea ecx, [ebp - 0xdc]
call fcn.00416a90
mov dword [ebp - 0xa20], eax
fild dword [ebp - 0xa20]
mov edx, dword [ebp - 0xf4]
xor eax, eax
mov ax, word [edx + 0x7a2630]
mov dword [ebp - 0xa24], eax
fild dword [ebp - 0xa24]
fdiv qword [0x65a6d8]
faddp st(1)
mov ecx, dword [ebp - 0xf4]
fstp qword [ecx + 0x7a2930]
push 2
lea edx, [ebp - 0xc4]
push edx
lea ecx, [ebp - 0xbc]
call fcn.0062474a
mov eax, dword [ebp - 0xc4]
and eax, 0xff
mov ecx, dword [ebp - 0xc3]
and ecx, 0xff
shl ecx, 8
or eax, ecx
mov edx, dword [ebp - 0xf4]
mov word [edx + 0x7a263e], ax
push 2
lea eax, [ebp - 0xc4]
push eax
lea ecx, [ebp - 0xbc]
call fcn.0062474a
mov ecx, dword [ebp - 0xc4]
and ecx, 0xff
mov edx, dword [ebp - 0xc3]
and edx, 0xff
shl edx, 8
or ecx, edx
mov eax, dword [ebp - 0xf4]
mov word [eax + 0x7a2640], cx
push 2
lea ecx, [ebp - 0xc4]
push ecx
lea ecx, [ebp - 0xbc]
call fcn.0062474a
mov edx, dword [ebp - 0xc4]
and edx, 0xff
mov eax, dword [ebp - 0xc3]
and eax, 0xff
shl eax, 8
or edx, eax
mov ecx, dword [ebp - 0xf4]
mov word [ecx + 0x7a2642], dx
push 2
lea edx, [ebp - 0xc4]
push edx
lea ecx, [ebp - 0xbc]
call fcn.0062474a
mov eax, dword [ebp - 0xc4]
and eax, 0xff
mov ecx, dword [ebp - 0xc3]
and ecx, 0xff
shl ecx, 8
or eax, ecx
mov edx, dword [ebp - 0xf4]
mov word [edx + 0x7a2644], ax
push 2
lea eax, [ebp - 0xc4]
push eax
lea ecx, [ebp - 0xbc]
call fcn.0062474a
mov ecx, dword [ebp - 0xc4]
and ecx, 0xff
mov edx, dword [ebp - 0xc3]
and edx, 0xff
shl edx, 8
or ecx, edx
mov eax, dword [ebp - 0xf4]
mov word [eax + 0x7a2646], cx
push 2
lea ecx, [ebp - 0xc4]
push ecx
lea ecx, [ebp - 0xbc]
call fcn.0062474a
mov edx, dword [ebp - 0xc4]
and edx, 0xff
mov eax, dword [ebp - 0xc3]
and eax, 0xff
shl eax, 8
or edx, eax
mov ecx, dword [ebp - 0xf4]
mov word [ecx + 0x7a2648], dx
push 2
lea edx, [ebp - 0xc4]
push edx
lea ecx, [ebp - 0xbc]
call fcn.0062474a
mov eax, dword [ebp - 0xc4]
and eax, 0xff
mov ecx, dword [ebp - 0xc3]
and ecx, 0xff
shl ecx, 8
or eax, ecx
mov edx, dword [ebp - 0xf4]
mov word [edx + 0x7a264a], ax
push 2
lea eax, [ebp - 0xc4]
push eax
lea ecx, [ebp - 0xbc]
call fcn.0062474a
mov ecx, dword [ebp - 0xc4]
and ecx, 0xff
mov edx, dword [ebp - 0xc3]
and edx, 0xff
shl edx, 8
or ecx, edx
mov eax, dword [ebp - 0xf4]
mov word [eax + 0x7a264c], cx
push 4
lea ecx, [ebp - 0xf8]
push ecx
lea ecx, [ebp - 0xbc]
call fcn.0062474a
mov edx, dword [ebp - 0xf8]
and edx, 0xff
mov eax, dword [ebp - 0xf7]
and eax, 0xff
shl eax, 8
or edx, eax
mov ecx, dword [ebp - 0xf6]
and ecx, 0xff
shl ecx, 0x10
or edx, ecx
mov eax, dword [ebp - 0xf5]
and eax, 0xff
shl eax, 0x18
or edx, eax
mov dword [ebp - 0x100], edx
mov ecx, 1
test ecx, ecx
je 0x41492d
xor edx, edx
test edx, edx
je 0x41492d
lea ecx, [ebp - 0xbc]
call fcn.00624848
push 0
push 0
xor eax, eax
mov al, byte [0x6dfa28]
lea ecx, [eax*4 + 0x6dfadc]
call fcn.0041e980
push eax
call fcn.006308c8
push 0xffffffffffffffff
call fcn.00607fcc
mov ecx, dword [0x6dfb58]
add ecx, 5
cmp dword [ebp - 0x100], ecx
jbe 0x41498d
lea ecx, [ebp - 0xbc]
call fcn.00624848
push 0
push 0
xor edx, edx
mov dl, byte [0x6dfa28]
lea ecx, [edx*4 + 0x6dfac4]
call fcn.0041e980
push eax
call fcn.006308c8
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xac]
call fcn.004167c0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xbc]
call fcn.00624570
jmp 0x415e1e
mov eax, dword [ebp - 0x100]
push eax
mov ecx, dword [ebp - 0xf4]
call fcn.00565431
mov dword [ebp - 0x98], 0
jmp 0x4149ba
mov ecx, dword [ebp - 0x98]
add ecx, 1
mov dword [ebp - 0x98], ecx
mov edx, dword [ebp - 0x98]
cmp edx, dword [ebp - 0x100]
jge 0x414ef4
mov eax, dword [0x6b87a0]
add eax, 1
mov dword [0x6b87a0], eax
mov ecx, dword [0x72e774]
add ecx, 1
mov dword [0x72e774], ecx
mov eax, dword [ebp - 0x98]
cdq
mov ecx, 0x7d0
idiv ecx
mov dword [ebp - 0x93c], edx
cmp dword [ebp - 0x93c], 0
jne 0x414a17
mov edx, dword [ebp - 0x98]
push edx
mov ecx, dword [ebp - 0xf4]
call fcn.005654be
push 1
lea eax, [ebp - 0xfc]
push eax
lea ecx, [ebp - 0xbc]
call fcn.0062474a
mov ecx, dword [ebp - 0xfc]
and ecx, 0xff
add ecx, 4
push ecx
mov edx, dword [ebp - 0xa04]
mov eax, dword [edx + 0x78]
push eax
lea ecx, [ebp - 0xbc]
call fcn.0062474a
mov ecx, dword [ebp - 0xfc]
and ecx, 0xff
mov dword [ebp - 0x954], ecx
push 0x6dfb88
lea ecx, [ebp - 0x944]
call fcn.0061ed3c
mov byte [ebp - 4], 8
mov dword [ebp - 0x94c], 0
jmp 0x414a91
mov edx, dword [ebp - 0x94c]
add edx, 1
mov dword [ebp - 0x94c], edx
mov eax, dword [ebp - 0x94c]
cmp eax, dword [ebp - 0x954]
jge 0x414ac6
mov ecx, dword [ebp - 0xa04]
mov edx, dword [ecx + 0x78]
mov eax, dword [ebp - 0x94c]
mov cl, byte [edx + eax]
push ecx
mov edx, dword [ebp - 0x94c]
push edx
lea ecx, [ebp - 0x944]
call fcn.0061b3a5
jmp 0x414a82
lea ecx, [ebp - 0x944]
call fcn.0041e980
push eax
call fcn.00608334
add esp, 4
mov eax, dword [ebp - 0xa04]
mov ecx, dword [eax + 0x70]
mov edx, dword [0x6b87a0]
fstp qword [ecx + edx*8]
mov eax, dword [ebp - 0x954]
mov dword [ebp - 0x948], eax
mov dword [ebp - 0x954], 4
mov dword [ebp - 0x94c], 0
jmp 0x414b1d
mov ecx, dword [ebp - 0x94c]
add ecx, 1
mov dword [ebp - 0x94c], ecx
mov edx, dword [ebp - 0x94c]
cmp edx, dword [ebp - 0x954]
jge 0x414b52
mov eax, dword [ebp - 0x948]
add eax, dword [ebp - 0x94c]
mov ecx, dword [ebp - 0xa04]
mov edx, dword [ecx + 0x78]
mov ecx, dword [ebp - 0x94c]
mov dl, byte [edx + eax]
mov byte [ebp + ecx - 0x950], dl
jmp 0x414b0e
mov eax, dword [ebp - 0x950]
and eax, 0xff
mov ecx, dword [ebp - 0x94f]
and ecx, 0xff
shl ecx, 8
or eax, ecx
mov edx, dword [ebp - 0x94e]
and edx, 0xff
shl edx, 0x10
or eax, edx
mov ecx, dword [ebp - 0x94d]
and ecx, 0xff
shl ecx, 0x18
or eax, ecx
mov dword [ebp - 0x938], eax
mov edx, dword [ebp - 0xa04]
mov eax, dword [edx + 0x68]
mov ecx, dword [0x6b87a0]
mov edx, dword [ebp - 0x938]
mov dword [eax + ecx*4], edx
mov eax, dword [ebp - 0x938]
mov dword [ebp - 0x954], eax
mov ecx, dword [ebp - 0x954]
push ecx
mov edx, dword [ebp - 0xa04]
mov eax, dword [edx + 0x78]
push eax
lea ecx, [ebp - 0xbc]
call fcn.0062474a
mov ecx, dword [ebp - 0xa04]
mov edx, dword [ecx + 0x6c]
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0xa04]
mov ecx, dword [ecx + 0x60]
mov dword [edx + eax*4], ecx
mov dword [ebp - 0x940], 0
jmp 0x414c0c
mov edx, dword [ebp - 0x940]
add edx, 1
mov dword [ebp - 0x940], edx
mov eax, dword [ebp - 0x940]
cmp eax, dword [ebp - 0x954]
jge 0x414c49
mov ecx, dword [ebp - 0xa04]
mov edx, dword [ecx + 0x78]
mov eax, dword [ebp - 0xa04]
mov ecx, dword [eax + 0x60]
add ecx, dword [ebp - 0x940]
mov eax, dword [ebp - 0xa04]
mov eax, dword [eax + 0x74]
mov esi, dword [ebp - 0x940]
mov dl, byte [edx + esi]
mov byte [eax + ecx], dl
jmp 0x414bfd
mov eax, dword [0x6b87a0]
push eax
mov ecx, dword [ebp - 0xf4]
call fcn.00564e44
mov ecx, dword [ebp - 0xf4]
call fcn.005719cb
mov ecx, dword [ebp - 0xa04]
mov edx, dword [ecx + 0x68]
mov eax, dword [0x6b87a0]
mov ecx, dword [edx + eax*4]
push ecx
mov edx, dword [0x6b87a0]
push edx
mov ecx, dword [ebp - 0xf4]
call fcn.00564e6b
mov eax, dword [ebp - 0xf4]
mov ecx, dword [eax + 0x11fc]
push ecx
mov ecx, dword [ebp - 0xf4]
call fcn.005768ad
and eax, 0xff
test eax, eax
je 0x414d51
mov ecx, dword [ebp - 0xf4]
add ecx, 0x7a2404
call fcn.00408950
test eax, eax
jne 0x414cd4
mov edx, dword [ebp - 0xf4]
mov eax, dword [0x6b87a0]
mov dword [edx + 0x7a2438], eax
mov ecx, dword [0x6b87a0]
push ecx
mov ecx, dword [ebp - 0xf4]
add ecx, 0x7a2404
call fcn.00408990
mov edx, dword [ebp - 0xf4]
xor eax, eax
mov al, byte [edx + 0x7a287d]
test eax, eax
je 0x414d4f
mov dword [ebp - 0x958], 0
jmp 0x414d19
mov ecx, dword [ebp - 0x958]
add ecx, 1
mov dword [ebp - 0x958], ecx
mov edx, dword [ebp - 0xf4]
mov eax, dword [edx + 0x11fc]
xor ecx, ecx
mov cl, byte [eax + 0xe8]
cmp dword [ebp - 0x958], ecx
jge 0x414d4f
mov edx, dword [0x6b87a0]
push edx
mov ecx, dword [ebp - 0xf4]
add ecx, 0x7a2404
call fcn.00408990
jmp 0x414d0a
jmp 0x414d5b
mov dword [ebp - 0x95c], 0
mov eax, dword [ebp - 0xa04]
mov ecx, dword [eax + 0x70]
mov edx, dword [0x6b87a0]
mov eax, dword [ebp - 0xf4]
fld qword [ecx + edx*8]
fsub qword [eax + 0x7a2930]
fcomp qword [0x65a6d0]
fnstsw ax
test ah, 1
je 0x414dad
mov ecx, dword [ebp - 0xa04]
mov edx, dword [ecx + 0x70]
mov eax, dword [0x6b87a0]
mov ecx, dword [ebp - 0xf4]
mov esi, dword [edx + eax*8]
mov dword [ecx + 0x7a2930], esi
mov edx, dword [edx + eax*8 + 4]
mov dword [ecx + 0x7a2934], edx
mov eax, dword [ebp - 0xa04]
mov ecx, dword [eax + 0x70]
mov edx, dword [0x6b87a0]
mov eax, dword [ebp - 0xf4]
fld qword [ecx + edx*8]
fsub qword [eax + 0x7a2930]
call fcn.0060838c
cmp eax, 0xf4240
jge 0x414ebc
mov ecx, dword [ebp - 0xa04]
mov edx, dword [ecx + 0x70]
mov eax, dword [0x6b87a0]
mov ecx, dword [ebp - 0xf4]
fld qword [edx + eax*8]
fsub qword [ecx + 0x7a2930]
call fcn.0060838c
mov edx, dword [ebp - 0xa04]
mov ecx, dword [edx + 0x68]
mov edx, dword [ebp - 0xf4]
mov eax, dword [edx + eax*4 + 0x1204]
mov edx, dword [0x6b87a0]
mov ecx, dword [ecx + edx*4]
lea esi, [eax + ecx + 0x18]
mov edx, dword [ebp - 0xa04]
mov eax, dword [edx + 0x70]
mov ecx, dword [0x6b87a0]
mov edx, dword [ebp - 0xf4]
fld qword [eax + ecx*8]
fsub qword [edx + 0x7a2930]
call fcn.0060838c
mov ecx, dword [ebp - 0xf4]
mov dword [ecx + eax*4 + 0x1204], esi
mov edx, dword [ebp - 0xa04]
mov eax, dword [edx + 0x70]
mov ecx, dword [0x6b87a0]
mov edx, dword [ebp - 0xf4]
fld qword [eax + ecx*8]
fsub qword [edx + 0x7a2930]
call fcn.0060838c
mov ecx, dword [ebp - 0xf4]
mov esi, dword [ecx + eax*4 + 0x3d1b04]
add esi, dword [0x6b87a0]
sub esi, dword [ebp - 0xf0]
mov edx, dword [ebp - 0xa04]
mov eax, dword [edx + 0x70]
mov ecx, dword [0x6b87a0]
mov edx, dword [ebp - 0xf4]
fld qword [eax + ecx*8]
fsub qword [edx + 0x7a2930]
call fcn.0060838c
mov ecx, dword [ebp - 0xf4]
mov dword [ecx + eax*4 + 0x3d1b04], esi
mov edx, dword [0x6b87a0]
mov dword [ebp - 0xf0], edx
mov eax, dword [ebp - 0xa04]
mov ecx, dword [eax + 0x60]
add ecx, dword [ebp - 0x954]
mov edx, dword [ebp - 0xa04]
mov dword [edx + 0x60], ecx
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x944]
call fcn.0061ecce
jmp 0x4149ab
push 4
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0xbc]
call fcn.0062474a
push 4
lea ecx, [ebp - 0x18]
push ecx
lea ecx, [ebp - 0xbc]
call fcn.0062474a
mov edx, dword [ebp - 0x10]
and edx, 0xff
mov eax, dword [ebp - 0xf]
and eax, 0xff
shl eax, 8
add edx, eax
mov ecx, dword [ebp - 0xe]
and ecx, 0xff
shl ecx, 0x10
add edx, ecx
mov eax, dword [ebp - 0xd]
and eax, 0xff
shl eax, 0x18
add edx, eax
mov ecx, dword [ebp - 0xf4]
mov dword [ecx + 0x10c0], edx
mov edx, dword [ebp - 0x18]
and edx, 0xff
mov eax, dword [ebp - 0x17]
and eax, 0xff
shl eax, 8
add edx, eax
mov ecx, dword [ebp - 0x16]
and ecx, 0xff
shl ecx, 0x10
add edx, ecx
mov eax, dword [ebp - 0x15]
and eax, 0xff
shl eax, 0x18
add edx, eax
mov ecx, dword [ebp - 0xf4]
mov dword [ecx + 0x10bc], edx
mov dword [ebp - 0xc0], 0
jmp 0x414fab
mov edx, dword [ebp - 0xc0]
add edx, 1
mov dword [ebp - 0xc0], edx
cmp dword [ebp - 0xc0], 0x1d
jge 0x414fd1
push 4
mov eax, dword [ebp - 0xc0]
lea ecx, [ebp + eax*4 - 0x8c]
push ecx
lea ecx, [ebp - 0xbc]
call fcn.0062474a
jmp 0x414f9c
mov edx, dword [ebp - 0x8c]
and edx, 0xff
mov eax, dword [ebp - 0x8b]
and eax, 0xff
shl eax, 8
add edx, eax
mov ecx, dword [ebp - 0x8a]
and ecx, 0xff
shl ecx, 0x10
add edx, ecx
mov eax, dword [ebp - 0x89]
and eax, 0xff
shl eax, 0x18
add edx, eax
mov ecx, dword [ebp - 0xf4]
mov dword [ecx + 0x490], edx
mov edx, dword [ebp - 0x88]
and edx, 0xff
mov eax, dword [ebp - 0x87]
and eax, 0xff
shl eax, 8
add edx, eax
mov ecx, dword [ebp - 0x86]
and ecx, 0xff
shl ecx, 0x10
add edx, ecx
mov eax, dword [ebp - 0x85]
and eax, 0xff
shl eax, 0x18
add edx, eax
mov ecx, dword [ebp - 0xf4]
mov dword [ecx + 0x494], edx
mov edx, dword [ebp - 0x84]
and edx, 0xff
mov eax, dword [ebp - 0x83]
and eax, 0xff
shl eax, 8
add edx, eax
mov ecx, dword [ebp - 0x82]
and ecx, 0xff
shl ecx, 0x10
add edx, ecx
mov eax, dword [ebp - 0x81]
and eax, 0xff
shl eax, 0x18
add edx, eax
mov ecx, dword [ebp - 0xf4]
mov dword [ecx + 0x498], edx
mov edx, dword [ebp - 0x80]
and edx, 0xff
mov eax, dword [ebp - 0x7f]
and eax, 0xff
shl eax, 8
add edx, eax
mov ecx, dword [ebp - 0x7e]
and ecx, 0xff
shl ecx, 0x10
add edx, ecx
mov eax, dword [ebp - 0x7d]
and eax, 0xff
shl eax, 0x18
add edx, eax
mov ecx, dword [ebp - 0xf4]
mov dword [ecx + 0x49c], edx
mov edx, dword [ebp - 0x7c]
and edx, 0xff
mov eax, dword [ebp - 0x7b]
and eax, 0xff
shl eax, 8
add edx, eax
mov ecx, dword [ebp - 0x7a]
and ecx, 0xff
shl ecx, 0x10
add edx, ecx
mov eax, dword [ebp - 0x79]
and eax, 0xff
shl eax, 0x18
add edx, eax
mov ecx, dword [ebp - 0xf4]
mov dword [ecx + 0x4a0], edx
mov edx, dword [ebp - 0x78]
and edx, 0xff
mov eax, dword [ebp - 0x77]
and eax, 0xff
shl eax, 8
add edx, eax
mov ecx, dword [ebp - 0x76]
and ecx, 0xff
shl ecx, 0x10
add edx, ecx
mov eax, dword [ebp - 0x75]
and eax, 0xff
shl eax, 0x18
add edx, eax
mov ecx, dword [ebp - 0xf4]
mov dword [ecx + 0x4a4], edx
mov edx, dword [ebp - 0x74]
and edx, 0xff
mov eax, dword [ebp - 0x73]
and eax, 0xff
shl eax, 8
add edx, eax
mov ecx, dword [ebp - 0x72]
and ecx, 0xff
shl ecx, 0x10
add edx, ecx
mov eax, dword [ebp - 0x71]
and eax, 0xff
shl eax, 0x18
add edx, eax
mov ecx, dword [ebp - 0xf4]
mov dword [ecx + 0x4a8], edx
mov edx, dword [ebp - 0x70]
and edx, 0xff
mov eax, dword [ebp - 0x6f]
and eax, 0xff
shl eax, 8
add edx, eax
mov ecx, dword [ebp - 0x6e]
and ecx, 0xff
shl ecx, 0x10
add edx, ecx
mov eax, dword [ebp - 0x6d]
and eax, 0xff
shl eax, 0x18
add edx, eax
mov ecx, dword [ebp - 0xf4]
mov dword [ecx + 0x4ac], edx
mov edx, dword [ebp - 0x6c]
and edx, 0xff
mov eax, dword [ebp - 0x6b]
and eax, 0xff
shl eax, 8
add edx, eax
mov ecx, dword [ebp - 0x6a]
and ecx, 0xff
shl ecx, 0x10
add edx, ecx
mov eax, dword [ebp - 0x69]
and eax, 0xff
shl eax, 0x18
add edx, eax
mov ecx, dword [ebp - 0xf4]
mov dword [ecx + 0x4b0], edx
mov edx, dword [ebp - 0x68]
and edx, 0xff
mov eax, dword [ebp - 0x67]
and eax, 0xff
shl eax, 8
add edx, eax
mov ecx, dword [ebp - 0x66]
and ecx, 0xff
shl ecx, 0x10
add edx, ecx
mov eax, dword [ebp - 0x65]
and eax, 0xff
shl eax, 0x18
add edx, eax
mov ecx, dword [ebp - 0xf4]
mov dword [ecx + 0x4b4], edx
mov edx, dword [ebp - 0x64]
and edx, 0xff
mov eax, dword [ebp - 0x63]
and eax, 0xff
shl eax, 8
add edx, eax
mov ecx, dword [ebp - 0x62]
and ecx, 0xff
shl ecx, 0x10
add edx, ecx
mov eax, dword [ebp - 0x61]
and eax, 0xff
shl eax, 0x18
add edx, eax
mov ecx, dword [ebp - 0xf4]
mov dword [ecx + 0x4b8], edx
mov edx, dword [ebp - 0x60]
and edx, 0xff
mov eax, dword [ebp - 0x5f]
and eax, 0xff
shl eax, 8
add edx, eax
mov ecx, dword [ebp - 0x5e]
and ecx, 0xff
shl ecx, 0x10
add edx, ecx
mov eax, dword [ebp - 0x5d]
and eax, 0xff
shl eax, 0x18
add edx, eax
mov ecx, dword [ebp - 0xf4]
mov dword [ecx + 0x4bc], edx
mov edx, dword [ebp - 0x5c]
and edx, 0xff
mov eax, dword [ebp - 0x5b]
and eax, 0xff
shl eax, 8
add edx, eax
mov ecx, dword [ebp - 0x5a]
and ecx, 0xff
shl ecx, 0x10
add edx, ecx
mov eax, dword [ebp - 0x59]
and eax, 0xff
shl eax, 0x18
add edx, eax
mov ecx, dword [ebp - 0xf4]
mov dword [ecx + 0x4c0], edx
mov edx, dword [ebp - 0x58]
and edx, 0xff
mov eax, dword [ebp - 0x57]
and eax, 0xff
shl eax, 8
add edx, eax
mov ecx, dword [ebp - 0x56]
and ecx, 0xff
shl ecx, 0x10
add edx, ecx
mov eax, dword [ebp - 0x55]
and eax, 0xff
shl eax, 0x18
add edx, eax
mov ecx, dword [ebp - 0xf4]
mov dword [ecx + 0x4c4], edx
mov edx, dword [ebp - 0x54]
and edx, 0xff
mov eax, dword [ebp - 0x53]
and eax, 0xff
shl eax, 8
add edx, eax
mov ecx, dword [ebp - 0x52]
and ecx, 0xff
shl ecx, 0x10
add edx, ecx
mov eax, dword [ebp - 0x51]
and eax, 0xff
shl eax, 0x18
add edx, eax
mov ecx, dword [ebp - 0xf4]
mov dword [ecx + 0x4c8], edx
mov edx, dword [ebp - 0x50]
and edx, 0xff
mov eax, dword [ebp - 0x4f]
and eax, 0xff
shl eax, 8
add edx, eax
mov ecx, dword [ebp - 0x4e]
and ecx, 0xff
shl ecx, 0x10
add edx, ecx
mov eax, dword [ebp - 0x4d]
and eax, 0xff
shl eax, 0x18
add edx, eax
mov ecx, dword [ebp - 0xf4]
mov dword [ecx + 0x4cc], edx
mov edx, dword [ebp - 0x4c]
and edx, 0xff
mov eax, dword [ebp - 0x4b]
and eax, 0xff
shl eax, 8
add edx, eax
mov ecx, dword [ebp - 0x4a]
and ecx, 0xff
shl ecx, 0x10
add edx, ecx
mov eax, dword [ebp - 0x49]
and eax, 0xff
shl eax, 0x18
add edx, eax
mov ecx, dword [ebp - 0xf4]
mov dword [ecx + 0x4d0], edx
mov edx, dword [ebp - 0x48]
and edx, 0xff
mov eax, dword [ebp - 0x47]
and eax, 0xff
shl eax, 8
add edx, eax
mov ecx, dword [ebp - 0x46]
and ecx, 0xff
shl ecx, 0x10
add edx, ecx
mov eax, dword [ebp - 0x45]
and eax, 0xff
shl eax, 0x18
add edx, eax
mov ecx, dword [ebp - 0xf4]
mov dword [ecx + 0x4d4], edx
mov edx, dword [ebp - 0x44]
and edx, 0xff
mov eax, dword [ebp - 0x43]
and eax, 0xff
shl eax, 8
add edx, eax
mov ecx, dword [ebp - 0x42]
and ecx, 0xff
shl ecx, 0x10
add edx, ecx
mov eax, dword [ebp - 0x41]
and eax, 0xff
shl eax, 0x18
add edx, eax
mov ecx, dword [ebp - 0xf4]
mov dword [ecx + 0x4d8], edx
mov edx, dword [ebp - 0x40]
and edx, 0xff
mov eax, dword [ebp - 0x3f]
and eax, 0xff
shl eax, 8
add edx, eax
mov ecx, dword [ebp - 0x3e]
and ecx, 0xff
shl ecx, 0x10
add edx, ecx
mov eax, dword [ebp - 0x3d]
and eax, 0xff
shl eax, 0x18
add edx, eax
mov ecx, dword [ebp - 0xf4]
mov dword [ecx + 0x4dc], edx
mov edx, dword [ebp - 0x3c]
and edx, 0xff
mov eax, dword [ebp - 0x3b]
and eax, 0xff
shl eax, 8
add edx, eax
mov ecx, dword [ebp - 0x3a]
and ecx, 0xff
shl ecx, 0x10
add edx, ecx
mov eax, dword [ebp - 0x39]
and eax, 0xff
shl eax, 0x18
add edx, eax
mov ecx, dword [ebp - 0xf4]
mov dword [ecx + 0x4e0], edx
mov edx, dword [ebp - 0x38]
and edx, 0xff
mov eax, dword [ebp - 0x37]
and eax, 0xff
shl eax, 8
add edx, eax
mov ecx, dword [ebp - 0x36]
and ecx, 0xff
shl ecx, 0x10
add edx, ecx
mov eax, dword [ebp - 0x35]
and eax, 0xff
shl eax, 0x18
add edx, eax
mov ecx, dword [ebp - 0xf4]
mov dword [ecx + 0x4e4], edx
mov edx, dword [ebp - 0x34]
and edx, 0xff
mov eax, dword [ebp - 0x33]
and eax, 0xff
shl eax, 8
add edx, eax
mov ecx, dword [ebp - 0x32]
and ecx, 0xff
shl ecx, 0x10
add edx, ecx
mov eax, dword [ebp - 0x31]
and eax, 0xff
shl eax, 0x18
add edx, eax
mov ecx, dword [ebp - 0xf4]
mov dword [ecx + 0x4e8], edx
mov edx, dword [ebp - 0x30]
and edx, 0xff
mov eax, dword [ebp - 0x2f]
and eax, 0xff
shl eax, 8
add edx, eax
mov ecx, dword [ebp - 0x2e]
and ecx, 0xff
shl ecx, 0x10
add edx, ecx
mov eax, dword [ebp - 0x2d]
and eax, 0xff
shl eax, 0x18
add edx, eax
mov ecx, dword [ebp - 0xf4]
mov dword [ecx + 0x4ec], edx
mov edx, dword [ebp - 0x2c]
and edx, 0xff
mov eax, dword [ebp - 0x2b]
and eax, 0xff
shl eax, 8
add edx, eax
mov ecx, dword [ebp - 0x2a]
and ecx, 0xff
shl ecx, 0x10
add edx, ecx
mov eax, dword [ebp - 0x29]
and eax, 0xff
shl eax, 0x18
add edx, eax
mov ecx, dword [ebp - 0xf4]
mov dword [ecx + 0x4f0], edx
mov edx, dword [ebp - 0x28]
and edx, 0xff
mov eax, dword [ebp - 0x27]
and eax, 0xff
shl eax, 8
add edx, eax
mov ecx, dword [ebp - 0x26]
and ecx, 0xff
shl ecx, 0x10
add edx, ecx
mov eax, dword [ebp - 0x25]
and eax, 0xff
shl eax, 0x18
add edx, eax
mov ecx, dword [ebp - 0xf4]
mov dword [ecx + 0x4f4], edx
mov edx, dword [ebp - 0x24]
and edx, 0xff
mov eax, dword [ebp - 0x23]
and eax, 0xff
shl eax, 8
add edx, eax
mov ecx, dword [ebp - 0x22]
and ecx, 0xff
shl ecx, 0x10
add edx, ecx
mov eax, dword [ebp - 0x21]
and eax, 0xff
shl eax, 0x18
add edx, eax
mov ecx, dword [ebp - 0xf4]
mov dword [ecx + 0x4f8], edx
mov edx, dword [ebp - 0x20]
and edx, 0xff
mov eax, dword [ebp - 0x1f]
and eax, 0xff
shl eax, 8
add edx, eax
mov ecx, dword [ebp - 0x1e]
and ecx, 0xff
shl ecx, 0x10
add edx, ecx
mov eax, dword [ebp - 0x1d]
and eax, 0xff
shl eax, 0x18
add edx, eax
mov ecx, dword [ebp - 0xf4]
mov dword [ecx + 0x4fc], edx
mov edx, dword [ebp - 0x1c]
and edx, 0xff
mov eax, dword [ebp - 0x1b]
and eax, 0xff
shl eax, 8
add edx, eax
mov ecx, dword [ebp - 0x1a]
and ecx, 0xff
shl ecx, 0x10
add edx, ecx
mov eax, dword [ebp - 0x19]
and eax, 0xff
shl eax, 0x18
add edx, eax
mov ecx, dword [ebp - 0xf4]
mov dword [ecx + 0x500], edx
mov dword [ebp - 0x14], 0
push 4
lea edx, [ebp - 0xd4]
push edx
lea ecx, [ebp - 0xbc]
call fcn.0062474a
mov dword [ebp - 0x94], 0
jmp 0x415714
mov eax, dword [ebp - 0x94]
add eax, 1
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 4
jge 0x415741
mov ecx, dword [ebp - 0x94]
xor edx, edx
mov dl, byte [ebp + ecx - 0xd4]
mov ecx, dword [ebp - 0x94]
shl ecx, 3
shl edx, cl
mov eax, dword [ebp - 0x14]
add eax, edx
mov dword [ebp - 0x14], eax
jmp 0x415705
mov dword [ebp - 0x94], 0
jmp 0x41575c
mov ecx, dword [ebp - 0x94]
add ecx, 1
mov dword [ebp - 0x94], ecx
mov edx, dword [ebp - 0x94]
cmp edx, dword [ebp - 0x14]
jge 0x415b72
push 4
lea eax, [ebp - 0x960]
push eax
lea ecx, [ebp - 0xbc]
call fcn.0062474a
lea ecx, [ebp - 0x964]
call fcn.004086f0
mov byte [ebp - 4], 9
mov ecx, dword [ebp - 0x95d]
and ecx, 0xff
push ecx
mov edx, dword [ebp - 0x95e]
and edx, 0xff
push edx
mov eax, dword [ebp - 0x95f]
and eax, 0xff
push eax
mov ecx, dword [ebp - 0x960]
and ecx, 0xff
push ecx
push 0x68a9d4
lea edx, [ebp - 0x964]
push edx
call fcn.0061bac6
add esp, 0x18
push 0x68a9e0
lea eax, [ebp - 0x964]
push eax
call fcn.00408710
and eax, 0xff
test eax, eax
je 0x415808
push 2
lea ecx, [ebp - 0x960]
push ecx
lea ecx, [ebp - 0xbc]
call fcn.0062474a
jmp 0x415b5e
push 0x6dfb8c
lea ecx, [ebp - 0x978]
call fcn.0061ed3c
mov byte [ebp - 4], 0xa
push 0x6dfb90
lea ecx, [ebp - 0x968]
call fcn.0061ed3c
mov byte [ebp - 4], 0xb
push 1
lea edx, [ebp - 0x970]
push edx
lea ecx, [ebp - 0xbc]
call fcn.0062474a
mov byte [ebp - 0x96c], 0
jmp 0x41585b
mov al, byte [ebp - 0x96c]
add al, 1
mov byte [ebp - 0x96c], al
mov ecx, dword [ebp - 0x96c]
and ecx, 0xff
mov edx, dword [ebp - 0x970]
and edx, 0xff
cmp ecx, edx
jge 0x415924
push 1
lea eax, [ebp - 0x980]
push eax
lea ecx, [ebp - 0xbc]
call fcn.0062474a
lea ecx, [ebp - 0x97c]
call fcn.004086f0
mov byte [ebp - 4], 0xc
mov ecx, dword [ebp - 0x980]
and ecx, 0xff
push ecx
push 0x68a9e8
lea edx, [ebp - 0x97c]
push edx
call fcn.0061bac6
add esp, 0xc
lea eax, [ebp - 0x97c]
push eax
lea ecx, [ebp - 0x978]
push ecx
lea edx, [ebp - 0x9f4]
push edx
call fcn.0061eefd
mov dword [ebp - 0xa28], eax
mov eax, dword [ebp - 0xa28]
mov dword [ebp - 0xa2c], eax
mov byte [ebp - 4], 0xd
mov ecx, dword [ebp - 0xa2c]
push ecx
lea ecx, [ebp - 0x978]
call fcn.0061ee07
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x9f4]
call fcn.0061ecce
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x97c]
call fcn.0061ecce
jmp 0x41584d
push 1
lea edx, [ebp - 0x970]
push edx
lea ecx, [ebp - 0xbc]
call fcn.0062474a
mov byte [ebp - 0x96c], 0
jmp 0x41594f
mov al, byte [ebp - 0x96c]
add al, 1
mov byte [ebp - 0x96c], al
mov ecx, dword [ebp - 0x96c]
and ecx, 0xff
mov edx, dword [ebp - 0x970]
and edx, 0xff
cmp ecx, edx
jge 0x415a18
push 1
lea eax, [ebp - 0x988]
push eax
lea ecx, [ebp - 0xbc]
call fcn.0062474a
lea ecx, [ebp - 0x984]
call fcn.004086f0
mov byte [ebp - 4], 0xe
mov ecx, dword [ebp - 0x988]
and ecx, 0xff
push ecx
push 0x68a9ec
lea edx, [ebp - 0x984]
push edx
call fcn.0061bac6
add esp, 0xc
lea eax, [ebp - 0x984]
push eax
lea ecx, [ebp - 0x968]
push ecx
lea edx, [ebp - 0x9f8]
push edx
call fcn.0061eefd
mov dword [ebp - 0xa30], eax
mov eax, dword [ebp - 0xa30]
mov dword [ebp - 0xa34], eax
mov byte [ebp - 4], 0xf
mov ecx, dword [ebp - 0xa34]
push ecx
lea ecx, [ebp - 0x968]
call fcn.0061ee07
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x9f8]
call fcn.0061ecce
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x984]
call fcn.0061ecce
jmp 0x415941
mov dword [ebp - 0x974], 0
jmp 0x415a33
mov edx, dword [ebp - 0x974]
add edx, 1
mov dword [ebp - 0x974], edx
mov ecx, dword [ebp - 0xf4]
add ecx, 0x7a2c18
call fcn.00474580
cmp dword [ebp - 0x974], eax
jge 0x415b40
mov eax, dword [ebp - 0x974]
push eax
lea ecx, [ebp - 0x9c8]
push ecx
mov ecx, dword [ebp - 0xf4]
add ecx, 0x7a2c18
call fcn.00416b40
mov byte [ebp - 4], 0x10
lea edx, [ebp - 0x964]
push edx
lea eax, [ebp - 0xa00]
push eax
lea ecx, [ebp - 0x9c4]
call fcn.00475271
mov dword [ebp - 0xa38], eax
mov ecx, dword [ebp - 0xa38]
mov dword [ebp - 0xa3c], ecx
mov byte [ebp - 4], 0x11
mov edx, dword [ebp - 0xa3c]
push edx
call fcn.00416a70
mov byte [ebp - 0x9fc], al
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0xa00]
call fcn.0061ecce
mov eax, dword [ebp - 0x9fc]
and eax, 0xff
test eax, eax
je 0x415b2c
lea ecx, [ebp - 0x978]
push ecx
lea ecx, [ebp - 0x9a8]
call fcn.0061ee07
lea edx, [ebp - 0x968]
push edx
lea ecx, [ebp - 0x9a4]
call fcn.0061ee07
lea eax, [ebp - 0x9c8]
push eax
mov ecx, dword [ebp - 0x974]
push ecx
mov ecx, dword [ebp - 0xf4]
add ecx, 0x7a2c18
call fcn.00416b80
mov ecx, dword [ebp - 0xf4]
add ecx, 0x7a2c18
call fcn.00474580
mov dword [ebp - 0x974], eax
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x9c8]
call fcn.004757c0
jmp 0x415a24
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x968]
call fcn.0061ecce
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x978]
call fcn.0061ecce
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x964]
call fcn.0061ecce
jmp 0x41574d
mov dword [ebp - 0xe0], 0
jmp 0x415b8d
mov edx, dword [ebp - 0xe0]
add edx, 1
mov dword [ebp - 0xe0], edx
cmp dword [ebp - 0xe0], 0xc
jge 0x415c3b
push 1
lea eax, [ebp - 0x9cc]
push eax
lea ecx, [ebp - 0xbc]
call fcn.0062474a
push 0x6dfb94
mov ecx, dword [ebp - 0xe0]
mov edx, dword [ebp - 0xf4]
lea ecx, [edx + ecx*4 + 0x7a28a4]
call fcn.0061ee57
mov dword [ebp - 0x9d0], 0
jmp 0x415be6
mov eax, dword [ebp - 0x9d0]
add eax, 1
mov dword [ebp - 0x9d0], eax
mov ecx, dword [ebp - 0x9cc]
and ecx, 0xff
cmp dword [ebp - 0x9d0], ecx
jge 0x415c36
push 1
lea edx, [ebp - 0x9d4]
push edx
lea ecx, [ebp - 0xbc]
call fcn.0062474a
mov al, byte [ebp - 0x9d4]
push eax
mov ecx, dword [ebp - 0x9d0]
push ecx
mov edx, dword [ebp - 0xe0]
mov eax, dword [ebp - 0xf4]
lea ecx, [eax + edx*4 + 0x7a28a4]
call fcn.0061b3a5
jmp 0x415bd7
jmp 0x415b7e
push 4
lea ecx, [ebp - 0xec]
push ecx
lea ecx, [ebp - 0xbc]
call fcn.0062474a
mov edx, dword [ebp - 0xec]
and edx, 0xff
mov eax, dword [ebp - 0xeb]
and eax, 0xff
shl eax, 8
add edx, eax
mov ecx, dword [ebp - 0xea]
and ecx, 0xff
shl ecx, 0x10
add edx, ecx
mov eax, dword [ebp - 0xe9]
and eax, 0xff
shl eax, 0x18
add edx, eax
mov dword [ebp - 0xe8], edx
mov dword [ebp - 0xe4], 0
jmp 0x415cad
mov ecx, dword [ebp - 0xe4]
add ecx, 1
mov dword [ebp - 0xe4], ecx
mov edx, dword [ebp - 0xe4]
cmp edx, dword [ebp - 0xe8]
jge 0x415cf0
push 1
lea eax, [ebp - 0x9d8]
push eax
lea ecx, [ebp - 0xbc]
call fcn.0062474a
mov cl, byte [ebp - 0x9d8]
push ecx
mov edx, dword [ebp - 0xe4]
push edx
mov ecx, dword [ebp - 0xf4]
add ecx, 0x7a28d4
call fcn.0061b3a5
jmp 0x415c9e
lea ecx, [ebp - 0xbc]
call fcn.00624848
mov eax, dword [ebp - 0xf4]
mov dword [eax + 0x7a2424], 0
mov ecx, dword [ebp - 0xf4]
call fcn.0056549c
mov ecx, dword [ebp - 0xf4]
mov byte [ecx + 0x7a2888], 0
mov ecx, dword [ebp - 0xf4]
add ecx, 0x7a2404
call fcn.00408950
mov edx, dword [ebp - 0xf4]
sub eax, dword [edx + 0x7a25f0]
push eax
mov ecx, dword [ebp - 0xf4]
call fcn.005654e0
push 0
mov ecx, dword [ebp - 0xf4]
call fcn.00574ab9
mov eax, dword [ebp - 0xf4]
mov ecx, dword [ebp - 0xa04]
mov edx, dword [ecx + 0x60]
mov dword [eax + 0x480], edx
mov eax, dword [0x72e774]
mov dword [0x72e7bc], eax
mov ecx, dword [ebp - 0xf4]
call fcn.00573abe
mov dword [0x6e6a50], 0xfffffc19
mov byte [0x6dfb54], 1
mov ecx, dword [ebp - 0xf4]
xor edx, edx
mov dl, byte [ecx + 0x7a2877]
test edx, edx
je 0x415dfd
push 0
push 1
mov ecx, dword [ebp - 0xcc]
add ecx, 0xbc
call fcn.0062dfb0
mov dword [ebp - 0x9e0], eax
push 0
push 2
mov ecx, dword [ebp - 0xcc]
add ecx, 0xbc
call fcn.0062dfb0
mov dword [ebp - 0x9dc], eax
mov ecx, dword [ebp - 0x9dc]
call fcn.005c7fed
mov ecx, dword [ebp - 0x9e0]
call fcn.005c6d76
mov ecx, dword [ebp - 0x9e0]
call fcn.005c7936
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xac]
call fcn.004167c0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xbc]
call fcn.00624570
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret 4