Function at 0x669be0
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
push 0x40baf6
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x12c
push ebx
push esi
push edi
mov dword [ebp - 8], esp
mov dword [ebp - 4], 0x406f98
xor eax, eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x78], eax
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x98], eax
mov dword [ebp - 0xa8], eax
mov dword [ebp - 0xb8], eax
mov dword [ebp - 0xc8], eax
mov dword [ebp - 0xdc], eax
mov dword [ebp - 0xe0], eax
mov dword [ebp - 0xe4], eax
mov dword [ebp - 0xe8], eax
mov dword [ebp - 0xec], eax
mov dword [ebp - 0xf0], eax
mov dword [ebp - 0x11c], eax
cmp dword [0x78bbd0], 1
je case.default.0x66d626
mov ebx, dword [ebp + 8]
mov edx, ebx
lea ecx, [ebp - 0xa8]
call dword [fcn.004010a0]
mov edx, eax
lea ecx, [ebp - 0x11c]
call dword [fcn.0040145c]
mov esi, dword [fcn.0040125c]
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0xa8]
mov edi, 0x8002
push ecx
mov dword [ebp - 0xa0], 0x51
mov dword [ebp - 0xa8], edi
call esi
test ax, ax
je 0x669ea2
mov eax, dword [0x78c578]
test eax, eax
jne 0x669cef
push 0x78c578
push 0x42df24
call dword [fcn.004013a0]
mov eax, dword [0x78c578]
mov edx, dword [eax]
push eax
call dword [edx + 0x3b0]
mov edi, dword [int.004011a0]
push eax
lea eax, [ebp - 0x3c]
push eax
call edi
lea edx, [ebp - 0x40]
push edx
mov esi, eax
mov ecx, dword [esi]
push 0
push esi
call dword [ecx + 0x40]
fnclex
test eax, eax
jge 0x669d2c
mov ebx, dword [fcn.00401140]
push 0x40
push 0x4420d4
push esi
push eax
call ebx
jmp 0x669d32
mov ebx, dword [fcn.00401140]
mov eax, dword [ebp - 0x40]
push 0x443848
push 0
push 3
push eax
lea ecx, [ebp - 0x98]
push ecx
call dword [0x4012a8]
add esp, 0x10
push eax
call dword [0x40128c]
push eax
lea edx, [ebp - 0x44]
push edx
call edi
push 1
push 1
mov esi, eax
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp - 0x58]
push ecx
lea edx, [ebp - 0x78]
push edx
mov dword [ebp - 0xc0], 0x443844
mov dword [ebp - 0xc8], 8
mov dword [ebp - 0x60], 0x80020004
mov dword [ebp - 0x68], 0xa
mov dword [ebp - 0x50], 0xc
mov dword [ebp - 0x58], 2
call dword [fcn.00401130]
mov edi, dword [esi]
lea eax, [ebp - 0x48]
push eax
lea ecx, [ebp - 0xc8]
push ecx
lea edx, [ebp - 0x78]
push edx
lea eax, [ebp - 0x88]
push eax
call dword [fcn.0040141c]
push eax
push esi
call dword [edi + 0x24]
fnclex
xor edi, edi
cmp eax, edi
jge 0x669ddb
push 0x24
push 0x443848
push esi
push eax
call ebx
mov eax, dword [ebp - 0x48]
mov ecx, dword [eax]
lea edx, [ebp - 0xe4]
push edx
push eax
mov esi, eax
call dword [ecx + 0x7c]
fnclex
cmp eax, edi
jge 0x669dfe
push 0x7c
push 0x443858
push esi
push eax
call ebx
mov edx, dword [ebp - 0xe4]
xor eax, eax
cmp edx, edi
sete al
lea ecx, [ebp - 0x48]
push ecx
lea edx, [ebp - 0x44]
push edx
lea ecx, [ebp - 0x3c]
neg eax
mov esi, eax
lea eax, [ebp - 0x40]
push eax
push ecx
push 4
call dword [fcn.004010f0]
lea edx, [ebp - 0x88]
push edx
lea eax, [ebp - 0x98]
push eax
lea ecx, [ebp - 0x78]
push ecx
lea edx, [ebp - 0x68]
push edx
lea eax, [ebp - 0x58]
push eax
push 5
call dword [fcn.004010d4]
add esp, 0x2c
cmp si, di
je 0x669e92
mov dword [ebp - 0xe0], 0xffffffff
mov dword [ebp - 0xdc], edi
mov dword [ebp - 0xe8], 0xc
lea ecx, [ebp - 0xe0]
push ecx
lea edx, [ebp - 0xdc]
push edx
lea eax, [ebp - 0xe8]
push eax
lea ecx, [ebp - 0xe4]
push ecx
mov dword [ebp - 0xe4], edi
call fcn.005eca30
call fcn.00669740
wait
push 0x66d916
jmp 0x66d8fd
lea edx, [ebp - 0x11c]
push edx
lea eax, [ebp - 0xa8]
push eax
mov dword [ebp - 0xa0], 0x57
mov dword [ebp - 0xa8], edi
call esi
test ax, ax
je 0x66a06e
mov eax, dword [0x78c578]
test eax, eax
jne 0x669ee9
push 0x78c578
push 0x42df24
call dword [fcn.004013a0]
mov eax, dword [0x78c578]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x3b0]
mov edi, dword [int.004011a0]
push eax
lea edx, [ebp - 0x3c]
push edx
call edi
lea ecx, [ebp - 0x40]
push ecx
mov esi, eax
mov eax, dword [esi]
push 0
push esi
call dword [eax + 0x40]
fnclex
test eax, eax
jge 0x669f26
mov ebx, dword [fcn.00401140]
push 0x40
push 0x4420d4
push esi
push eax
call ebx
jmp 0x669f2c
mov ebx, dword [fcn.00401140]
mov edx, dword [ebp - 0x40]
push 0x443848
push 0
push 3
push edx
lea eax, [ebp - 0x98]
push eax
call dword [0x4012a8]
add esp, 0x10
push eax
call dword [0x40128c]
push eax
lea ecx, [ebp - 0x44]
push ecx
call edi
push 1
push 1
lea edx, [ebp - 0x68]
mov esi, eax
push edx
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0x78]
push ecx
mov dword [ebp - 0xc0], 0x443844
mov dword [ebp - 0xc8], 8
mov dword [ebp - 0x60], 0x80020004
mov dword [ebp - 0x68], 0xa
mov dword [ebp - 0x50], 0xd
mov dword [ebp - 0x58], 2
call dword [fcn.00401130]
mov edi, dword [esi]
lea edx, [ebp - 0x48]
push edx
lea eax, [ebp - 0xc8]
push eax
lea ecx, [ebp - 0x78]
push ecx
lea edx, [ebp - 0x88]
push edx
call dword [fcn.0040141c]
push eax
push esi
call dword [edi + 0x24]
fnclex
test eax, eax
jge 0x669fd3
push 0x24
push 0x443848
push esi
push eax
call ebx
mov eax, dword [ebp - 0x48]
mov ecx, dword [eax]
lea edx, [ebp - 0xe4]
push edx
push eax
mov esi, eax
call dword [ecx + 0x7c]
fnclex
xor edi, edi
cmp eax, edi
jge 0x669ff8
push 0x7c
push 0x443858
push esi
push eax
call ebx
mov edx, dword [ebp - 0xe4]
xor eax, eax
cmp edx, edi
sete al
lea ecx, [ebp - 0x48]
push ecx
lea edx, [ebp - 0x44]
push edx
lea ecx, [ebp - 0x3c]
neg eax
mov esi, eax
lea eax, [ebp - 0x40]
push eax
push ecx
push 4
call dword [fcn.004010f0]
lea edx, [ebp - 0x88]
push edx
lea eax, [ebp - 0x98]
push eax
lea ecx, [ebp - 0x78]
push ecx
lea edx, [ebp - 0x68]
push edx
lea eax, [ebp - 0x58]
push eax
push 5
call dword [fcn.004010d4]
add esp, 0x2c
cmp si, di
je 0x669e92
mov dword [ebp - 0xe0], 0xffffffff
mov dword [ebp - 0xdc], edi
mov dword [ebp - 0xe8], 0xd
jmp 0x669e6b
lea edx, [ebp - 0x11c]
push edx
lea eax, [ebp - 0xa8]
push eax
mov dword [ebp - 0xa0], 0x45
mov dword [ebp - 0xa8], edi
call esi
test ax, ax
je 0x66a23a
mov eax, dword [0x78c578]
test eax, eax
jne 0x66a0b5
push 0x78c578
push 0x42df24
call dword [fcn.004013a0]
mov eax, dword [0x78c578]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x3b0]
mov edi, dword [int.004011a0]
push eax
lea edx, [ebp - 0x3c]
push edx
call edi
lea ecx, [ebp - 0x40]
push ecx
mov esi, eax
mov eax, dword [esi]
push 0
push esi
call dword [eax + 0x40]
fnclex
test eax, eax
jge 0x66a0f2
mov ebx, dword [fcn.00401140]
push 0x40
push 0x4420d4
push esi
push eax
call ebx
jmp 0x66a0f8
mov ebx, dword [fcn.00401140]
mov edx, dword [ebp - 0x40]
push 0x443848
push 0
push 3
push edx
lea eax, [ebp - 0x98]
push eax
call dword [0x4012a8]
add esp, 0x10
push eax
call dword [0x40128c]
push eax
lea ecx, [ebp - 0x44]
push ecx
call edi
push 1
push 1
lea edx, [ebp - 0x68]
mov esi, eax
push edx
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0x78]
push ecx
mov dword [ebp - 0xc0], 0x443844
mov dword [ebp - 0xc8], 8
mov dword [ebp - 0x60], 0x80020004
mov dword [ebp - 0x68], 0xa
mov dword [ebp - 0x50], 0xe
mov dword [ebp - 0x58], 2
call dword [fcn.00401130]
mov edi, dword [esi]
lea edx, [ebp - 0x48]
push edx
lea eax, [ebp - 0xc8]
push eax
lea ecx, [ebp - 0x78]
push ecx
lea edx, [ebp - 0x88]
push edx
call dword [fcn.0040141c]
push eax
push esi
call dword [edi + 0x24]
fnclex
xor edi, edi
cmp eax, edi
jge 0x66a1a1
push 0x24
push 0x443848
push esi
push eax
call ebx
mov eax, dword [ebp - 0x48]
mov ecx, dword [eax]
lea edx, [ebp - 0xe4]
push edx
push eax
mov esi, eax
call dword [ecx + 0x7c]
fnclex
cmp eax, edi
jge 0x66a1c4
push 0x7c
push 0x443858
push esi
push eax
call ebx
mov edx, dword [ebp - 0xe4]
xor eax, eax
cmp edx, edi
sete al
lea ecx, [ebp - 0x48]
push ecx
lea edx, [ebp - 0x44]
push edx
lea ecx, [ebp - 0x3c]
neg eax
mov esi, eax
lea eax, [ebp - 0x40]
push eax
push ecx
push 4
call dword [fcn.004010f0]
lea edx, [ebp - 0x88]
push edx
lea eax, [ebp - 0x98]
push eax
lea ecx, [ebp - 0x78]
push ecx
lea edx, [ebp - 0x68]
push edx
lea eax, [ebp - 0x58]
push eax
push 5
call dword [fcn.004010d4]
add esp, 0x2c
cmp si, di
je 0x669e92
mov dword [ebp - 0xe0], 0xffffffff
mov dword [ebp - 0xdc], edi
mov dword [ebp - 0xe8], 0xe
jmp 0x669e6b
lea edx, [ebp - 0x11c]
push edx
lea eax, [ebp - 0xa8]
push eax
mov dword [ebp - 0xa0], 0x52
mov dword [ebp - 0xa8], edi
call esi
test ax, ax
je 0x66a406
mov eax, dword [0x78c578]
test eax, eax
jne 0x66a281
push 0x78c578
push 0x42df24
call dword [fcn.004013a0]
mov eax, dword [0x78c578]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x3b0]
mov edi, dword [int.004011a0]
push eax
lea edx, [ebp - 0x3c]
push edx
call edi
lea ecx, [ebp - 0x40]
push ecx
mov esi, eax
mov eax, dword [esi]
push 0
push esi
call dword [eax + 0x40]
fnclex
test eax, eax
jge 0x66a2be
mov ebx, dword [fcn.00401140]
push 0x40
push 0x4420d4
push esi
push eax
call ebx
jmp 0x66a2c4
mov ebx, dword [fcn.00401140]
mov edx, dword [ebp - 0x40]
push 0x443848
push 0
push 3
push edx
lea eax, [ebp - 0x98]
push eax
call dword [0x4012a8]
add esp, 0x10
push eax
call dword [0x40128c]
push eax
lea ecx, [ebp - 0x44]
push ecx
call edi
push 1
push 1
lea edx, [ebp - 0x68]
mov esi, eax
push edx
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0x78]
push ecx
mov dword [ebp - 0xc0], 0x443844
mov dword [ebp - 0xc8], 8
mov dword [ebp - 0x60], 0x80020004
mov dword [ebp - 0x68], 0xa
mov dword [ebp - 0x50], 0xf
mov dword [ebp - 0x58], 2
call dword [fcn.00401130]
mov edi, dword [esi]
lea edx, [ebp - 0x48]
push edx
lea eax, [ebp - 0xc8]
push eax
lea ecx, [ebp - 0x78]
push ecx
lea edx, [ebp - 0x88]
push edx
call dword [fcn.0040141c]
push eax
push esi
call dword [edi + 0x24]
fnclex
xor edi, edi
cmp eax, edi
jge 0x66a36d
push 0x24
push 0x443848
push esi
push eax
call ebx
mov eax, dword [ebp - 0x48]
mov ecx, dword [eax]
lea edx, [ebp - 0xe4]
push edx
push eax
mov esi, eax
call dword [ecx + 0x7c]
fnclex
cmp eax, edi
jge 0x66a390
push 0x7c
push 0x443858
push esi
push eax
call ebx
mov edx, dword [ebp - 0xe4]
xor eax, eax
cmp edx, edi
sete al
lea ecx, [ebp - 0x48]
push ecx
lea edx, [ebp - 0x44]
push edx
lea ecx, [ebp - 0x3c]
neg eax
mov esi, eax
lea eax, [ebp - 0x40]
push eax
push ecx
push 4
call dword [fcn.004010f0]
lea edx, [ebp - 0x88]
push edx
lea eax, [ebp - 0x98]
push eax
lea ecx, [ebp - 0x78]
push ecx
lea edx, [ebp - 0x68]
push edx
lea eax, [ebp - 0x58]
push eax
push 5
call dword [fcn.004010d4]
add esp, 0x2c
cmp si, di
je 0x669e92
mov dword [ebp - 0xe0], 0xffffffff
mov dword [ebp - 0xdc], edi
mov dword [ebp - 0xe8], 0xf
jmp 0x669e6b
lea edx, [ebp - 0x11c]
push edx
lea eax, [ebp - 0xa8]
push eax
mov dword [ebp - 0xa0], 0x54
mov dword [ebp - 0xa8], edi
call esi
test ax, ax
je 0x66a5d2
mov eax, dword [0x78c578]
test eax, eax
jne 0x66a44d
push 0x78c578
push 0x42df24
call dword [fcn.004013a0]
mov eax, dword [0x78c578]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x3b0]
mov edi, dword [int.004011a0]
push eax
lea edx, [ebp - 0x3c]
push edx
call edi
lea ecx, [ebp - 0x40]
push ecx
mov esi, eax
mov eax, dword [esi]
push 0
push esi
call dword [eax + 0x40]
fnclex
test eax, eax
jge 0x66a48a
mov ebx, dword [fcn.00401140]
push 0x40
push 0x4420d4
push esi
push eax
call ebx
jmp 0x66a490
mov ebx, dword [fcn.00401140]
mov edx, dword [ebp - 0x40]
push 0x443848
push 0
push 3
push edx
lea eax, [ebp - 0x98]
push eax
call dword [0x4012a8]
add esp, 0x10
push eax
call dword [0x40128c]
push eax
lea ecx, [ebp - 0x44]
push ecx
call edi
push 1
push 1
lea edx, [ebp - 0x68]
mov esi, eax
push edx
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0x78]
push ecx
mov dword [ebp - 0xc0], 0x443844
mov dword [ebp - 0xc8], 8
mov dword [ebp - 0x60], 0x80020004
mov dword [ebp - 0x68], 0xa
mov dword [ebp - 0x50], 0x10
mov dword [ebp - 0x58], 2
call dword [fcn.00401130]
mov edi, dword [esi]
lea edx, [ebp - 0x48]
push edx
lea eax, [ebp - 0xc8]
push eax
lea ecx, [ebp - 0x78]
push ecx
lea edx, [ebp - 0x88]
push edx
call dword [fcn.0040141c]
push eax
push esi
call dword [edi + 0x24]
fnclex
xor edi, edi
cmp eax, edi
jge 0x66a539
push 0x24
push 0x443848
push esi
push eax
call ebx
mov eax, dword [ebp - 0x48]
mov ecx, dword [eax]
lea edx, [ebp - 0xe4]
push edx
push eax
mov esi, eax
call dword [ecx + 0x7c]
fnclex
cmp eax, edi
jge 0x66a55c
push 0x7c
push 0x443858
push esi
push eax
call ebx
mov edx, dword [ebp - 0xe4]
xor eax, eax
cmp edx, edi
sete al
lea ecx, [ebp - 0x48]
push ecx
lea edx, [ebp - 0x44]
push edx
lea ecx, [ebp - 0x3c]
neg eax
mov esi, eax
lea eax, [ebp - 0x40]
push eax
push ecx
push 4
call dword [fcn.004010f0]
lea edx, [ebp - 0x88]
push edx
lea eax, [ebp - 0x98]
push eax
lea ecx, [ebp - 0x78]
push ecx
lea edx, [ebp - 0x68]
push edx
lea eax, [ebp - 0x58]
push eax
push 5
call dword [fcn.004010d4]
add esp, 0x2c
cmp si, di
je 0x669e92
mov dword [ebp - 0xe0], 0xffffffff
mov dword [ebp - 0xdc], edi
mov dword [ebp - 0xe8], 0x10
jmp 0x669e6b
lea edx, [ebp - 0x11c]
push edx
lea eax, [ebp - 0xa8]
push eax
mov dword [ebp - 0xa0], 0x59
mov dword [ebp - 0xa8], edi
call esi
test ax, ax
je 0x66a79e
mov eax, dword [0x78c578]
test eax, eax
jne 0x66a619
push 0x78c578
push 0x42df24
call dword [fcn.004013a0]
mov eax, dword [0x78c578]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x3b0]
mov edi, dword [int.004011a0]
push eax
lea edx, [ebp - 0x3c]
push edx
call edi
lea ecx, [ebp - 0x40]
push ecx
mov esi, eax
mov eax, dword [esi]
push 0
push esi
call dword [eax + 0x40]
fnclex
test eax, eax
jge 0x66a656
mov ebx, dword [fcn.00401140]
push 0x40
push 0x4420d4
push esi
push eax
call ebx
jmp 0x66a65c
mov ebx, dword [fcn.00401140]
mov edx, dword [ebp - 0x40]
push 0x443848
push 0
push 3
push edx
lea eax, [ebp - 0x98]
push eax
call dword [0x4012a8]
add esp, 0x10
push eax
call dword [0x40128c]
push eax
lea ecx, [ebp - 0x44]
push ecx
call edi
push 1
push 1
lea edx, [ebp - 0x68]
mov esi, eax
push edx
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0x78]
push ecx
mov dword [ebp - 0xc0], 0x443844
mov dword [ebp - 0xc8], 8
mov dword [ebp - 0x60], 0x80020004
mov dword [ebp - 0x68], 0xa
mov dword [ebp - 0x50], 0x11
mov dword [ebp - 0x58], 2
call dword [fcn.00401130]
mov edi, dword [esi]
lea edx, [ebp - 0x48]
push edx
lea eax, [ebp - 0xc8]
push eax
lea ecx, [ebp - 0x78]
push ecx
lea edx, [ebp - 0x88]
push edx
call dword [fcn.0040141c]
push eax
push esi
call dword [edi + 0x24]
fnclex
xor edi, edi
cmp eax, edi
jge 0x66a705
push 0x24
push 0x443848
push esi
push eax
call ebx
mov eax, dword [ebp - 0x48]
mov ecx, dword [eax]
lea edx, [ebp - 0xe4]
push edx
push eax
mov esi, eax
call dword [ecx + 0x7c]
fnclex
cmp eax, edi
jge 0x66a728
push 0x7c
push 0x443858
push esi
push eax
call ebx
mov edx, dword [ebp - 0xe4]
xor eax, eax
cmp edx, edi
sete al
lea ecx, [ebp - 0x48]
push ecx
lea edx, [ebp - 0x44]
push edx
lea ecx, [ebp - 0x3c]
neg eax
mov esi, eax
lea eax, [ebp - 0x40]
push eax
push ecx
push 4
call dword [fcn.004010f0]
lea edx, [ebp - 0x88]
push edx
lea eax, [ebp - 0x98]
push eax
lea ecx, [ebp - 0x78]
push ecx
lea edx, [ebp - 0x68]
push edx
lea eax, [ebp - 0x58]
push eax
push 5
call dword [fcn.004010d4]
add esp, 0x2c
cmp si, di
je 0x669e92
mov dword [ebp - 0xe0], 0xffffffff
mov dword [ebp - 0xdc], edi
mov dword [ebp - 0xe8], 0x11
jmp 0x669e6b
lea edx, [ebp - 0x11c]
push edx
lea eax, [ebp - 0xa8]
push eax
mov dword [ebp - 0xa0], 0x55
mov dword [ebp - 0xa8], edi
call esi
test ax, ax
je 0x66a967
mov eax, dword [0x78c578]
test eax, eax
jne 0x66a7e5
push 0x78c578
push 0x42df24
call dword [fcn.004013a0]
mov eax, dword [0x78c578]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x3b0]
mov edi, dword [int.004011a0]
push eax
lea edx, [ebp - 0x3c]
push edx
call edi
lea ecx, [ebp - 0x40]
push ecx
mov esi, eax
mov eax, dword [esi]
push 0
push esi
call dword [eax + 0x40]
fnclex
test eax, eax
jge 0x66a822
mov ebx, dword [fcn.00401140]
push 0x40
push 0x4420d4
push esi
push eax
call ebx
jmp 0x66a828
mov ebx, dword [fcn.00401140]
mov edx, dword [ebp - 0x40]
push 0x443848
push 0
push 3
push edx
lea eax, [ebp - 0x98]
push eax
call dword [0x4012a8]
add esp, 0x10
push eax
call dword [0x40128c]
push eax
lea ecx, [ebp - 0x44]
push ecx
call edi
push 1
mov esi, eax
mov eax, 8
push 1
lea edx, [ebp - 0x68]
mov dword [ebp - 0xc8], eax
mov dword [ebp - 0x50], eax
push edx
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0x78]
push ecx
mov dword [ebp - 0xc0], 0x443844
mov dword [ebp - 0x60], 0x80020004
mov dword [ebp - 0x68], 0xa
mov dword [ebp - 0x58], 2
call dword [fcn.00401130]
mov edi, dword [esi]
lea edx, [ebp - 0x48]
push edx
lea eax, [ebp - 0xc8]
push eax
lea ecx, [ebp - 0x78]
push ecx
lea edx, [ebp - 0x88]
push edx
call dword [fcn.0040141c]
push eax
push esi
call dword [edi + 0x24]
fnclex
xor edi, edi
cmp eax, edi
jge 0x66a8ce
push 0x24
push 0x443848
push esi
push eax
call ebx
mov eax, dword [ebp - 0x48]
mov ecx, dword [eax]
lea edx, [ebp - 0xe4]
push edx
push eax
mov esi, eax
call dword [ecx + 0x7c]
fnclex
cmp eax, edi
jge 0x66a8f1
push 0x7c
push 0x443858
push esi
push eax
call ebx
mov edx, dword [ebp - 0xe4]
xor eax, eax
cmp edx, edi
sete al
lea ecx, [ebp - 0x48]
push ecx
lea edx, [ebp - 0x44]
push edx
lea ecx, [ebp - 0x3c]
neg eax
mov esi, eax
lea eax, [ebp - 0x40]
push eax
push ecx
push 4
call dword [fcn.004010f0]
lea edx, [ebp - 0x88]
push edx
lea eax, [ebp - 0x98]
push eax
lea ecx, [ebp - 0x78]
push ecx
lea edx, [ebp - 0x68]
push edx
lea eax, [ebp - 0x58]
push eax
push 5
call dword [fcn.004010d4]
add esp, 0x2c
cmp si, di
je 0x669e92
mov dword [ebp - 0xe0], 0xffffffff
mov dword [ebp - 0xdc], edi
mov dword [ebp - 0xe8], 8
jmp 0x669e6b
lea edx, [ebp - 0x11c]
push edx
lea eax, [ebp - 0xa8]
push eax
mov dword [ebp - 0xa0], 0x38
mov dword [ebp - 0xa8], edi
call esi
test ax, ax
jne 0x66d84e
lea ecx, [ebp - 0x11c]
push ecx
lea edx, [ebp - 0xb8]
push edx
mov dword [ebp - 0xb0], 0x60
mov dword [ebp - 0xb8], edi
call esi
test ax, ax
jne 0x66d84e
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0xa8]
push ecx
mov dword [ebp - 0xa0], 0x31
mov dword [ebp - 0xa8], edi
call esi
test ax, ax
jne 0x66d82e
lea edx, [ebp - 0x11c]
push edx
lea eax, [ebp - 0xb8]
push eax
mov dword [ebp - 0xb0], 0x61
mov dword [ebp - 0xb8], edi
call esi
test ax, ax
jne 0x66d82e
lea ecx, [ebp - 0x11c]
push ecx
lea edx, [ebp - 0xa8]
push edx
mov dword [ebp - 0xa0], 0x32
mov dword [ebp - 0xa8], edi
call esi
test ax, ax
jne 0x66d80e
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0xb8]
push ecx
mov dword [ebp - 0xb0], 0x62
mov dword [ebp - 0xb8], edi
call esi
test ax, ax
jne 0x66d80e
lea edx, [ebp - 0x11c]
push edx
lea eax, [ebp - 0xa8]
push eax
mov dword [ebp - 0xa0], 0x33
mov dword [ebp - 0xa8], edi
call esi
test ax, ax
jne 0x66d7ee
lea ecx, [ebp - 0x11c]
push ecx
lea edx, [ebp - 0xb8]
push edx
mov dword [ebp - 0xb0], 0x63
mov dword [ebp - 0xb8], edi
call esi
test ax, ax
jne 0x66d7ee
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0xa8]
push ecx
mov dword [ebp - 0xa0], 0x34
mov dword [ebp - 0xa8], edi
call esi
test ax, ax
jne 0x66d7ce
lea edx, [ebp - 0x11c]
push edx
lea eax, [ebp - 0xb8]
push eax
mov dword [ebp - 0xb0], 0x64
mov dword [ebp - 0xb8], edi
call esi
test ax, ax
jne 0x66d7ce
lea ecx, [ebp - 0x11c]
push ecx
lea edx, [ebp - 0xa8]
push edx
mov dword [ebp - 0xa0], 0x35
mov dword [ebp - 0xa8], edi
call esi
test ax, ax
jne 0x66d7ab
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0xb8]
push ecx
mov dword [ebp - 0xb0], 0x65
mov dword [ebp - 0xb8], edi
call esi
test ax, ax
jne 0x66d7ab
lea edx, [ebp - 0x11c]
push edx
lea eax, [ebp - 0xa8]
push eax
mov dword [ebp - 0xa0], 0x36
mov dword [ebp - 0xa8], edi
call esi
test ax, ax
jne 0x66d788
lea ecx, [ebp - 0x11c]
push ecx
lea edx, [ebp - 0xb8]
push edx
mov dword [ebp - 0xb0], 0x66
mov dword [ebp - 0xb8], edi
call esi
test ax, ax
jne 0x66d788
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0xa8]
push ecx
mov dword [ebp - 0xa0], 0x37
mov dword [ebp - 0xa8], edi
call esi
test ax, ax
jne 0x66d765
lea edx, [ebp - 0x11c]
push edx
lea eax, [ebp - 0xb8]
push eax
mov dword [ebp - 0xb0], 0x67
mov dword [ebp - 0xb8], edi
call esi
test ax, ax
jne 0x66d765
lea ecx, [ebp - 0x11c]
push ecx
lea edx, [ebp - 0xa8]
mov ebx, 0x41
push edx
mov dword [ebp - 0xa0], ebx
mov dword [ebp - 0xa8], edi
call esi
test ax, ax
je 0x66adf8
mov eax, dword [0x78c578]
test eax, eax
jne 0x66ac3f
push 0x78c578
push 0x42df24
call dword [fcn.004013a0]
mov eax, dword [0x78c578]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x3b0]
mov edi, dword [int.004011a0]
push eax
lea edx, [ebp - 0x3c]
push edx
call edi
lea ecx, [ebp - 0x40]
push ecx
mov esi, eax
mov eax, dword [esi]
push 2
push esi
call dword [eax + 0x40]
fnclex
test eax, eax
jge 0x66ac7c
mov ebx, dword [fcn.00401140]
push 0x40
push 0x4420d4
push esi
push eax
call ebx
jmp 0x66ac82
mov ebx, dword [fcn.00401140]
mov edx, dword [ebp - 0x40]
push 0x443848
push 0
push 3
push edx
lea eax, [ebp - 0x98]
push eax
call dword [0x4012a8]
add esp, 0x10
push eax
call dword [0x40128c]
push eax
lea ecx, [ebp - 0x44]
push ecx
call edi
push 1
push 1
lea edx, [ebp - 0x68]
mov esi, eax
push edx
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0x78]
push ecx
mov dword [ebp - 0xc0], 0x443844
mov dword [ebp - 0xc8], 8
mov dword [ebp - 0x60], 0x80020004
mov dword [ebp - 0x68], 0xa
mov dword [ebp - 0x50], 0x49
mov dword [ebp - 0x58], 2
call dword [fcn.00401130]
mov edi, dword [esi]
lea edx, [ebp - 0x48]
push edx
lea eax, [ebp - 0xc8]
push eax
lea ecx, [ebp - 0x78]
push ecx
lea edx, [ebp - 0x88]
push edx
call dword [fcn.0040141c]
push eax
push esi
call dword [edi + 0x24]
fnclex
test eax, eax
jge 0x66ad29
push 0x24
push 0x443848
push esi
push eax
call ebx
mov eax, dword [ebp - 0x48]
mov ecx, dword [eax]
lea edx, [ebp - 0xe4]
push edx
push eax
mov esi, eax
call dword [ecx + 0x7c]
fnclex
test eax, eax
jge 0x66ad4c
push 0x7c
push 0x443858
push esi
push eax
call ebx
mov edx, dword [ebp - 0xe4]
xor eax, eax
test edx, edx
sete al
lea ecx, [ebp - 0x48]
push ecx
lea edx, [ebp - 0x44]
push edx
lea ecx, [ebp - 0x3c]
neg eax
mov esi, eax
lea eax, [ebp - 0x40]
push eax
push ecx
push 4
call dword [fcn.004010f0]
lea edx, [ebp - 0x88]
push edx
lea eax, [ebp - 0x98]
push eax
lea ecx, [ebp - 0x78]
push ecx
lea edx, [ebp - 0x68]
push edx
lea eax, [ebp - 0x58]
push eax
push 5
call dword [fcn.004010d4]
add esp, 0x2c
test si, si
je 0x66ade8
mov dword [ebp - 0xe0], 0xffffffff
mov dword [ebp - 0xdc], 2
mov dword [ebp - 0xe8], 0x49
lea ecx, [ebp - 0xe0]
push ecx
lea edx, [ebp - 0xdc]
push edx
lea eax, [ebp - 0xe8]
push eax
lea ecx, [ebp - 0xe4]
push ecx
mov dword [ebp - 0xe4], 0
call fcn.005eca30
call fcn.00669890
wait
push 0x66d916
jmp 0x66d8fd
lea edx, [ebp - 0x11c]
push edx
lea eax, [ebp - 0xa8]
push eax
mov dword [ebp - 0xa0], 0x53
mov dword [ebp - 0xa8], edi
call esi
test ax, ax
je 0x66afc6
mov eax, dword [0x78c578]
test eax, eax
jne 0x66ae3f
push 0x78c578
push 0x42df24
call dword [fcn.004013a0]
mov eax, dword [0x78c578]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x3b0]
mov edi, dword [int.004011a0]
push eax
lea edx, [ebp - 0x3c]
push edx
call edi
lea ecx, [ebp - 0x40]
push ecx
mov esi, eax
mov eax, dword [esi]
push 2
push esi
call dword [eax + 0x40]
fnclex
test eax, eax
jge 0x66ae7c
mov ebx, dword [fcn.00401140]
push 0x40
push 0x4420d4
push esi
push eax
call ebx
jmp 0x66ae82
mov ebx, dword [fcn.00401140]
mov edx, dword [ebp - 0x40]
push 0x443848
push 0
push 3
push edx
lea eax, [ebp - 0x98]
push eax
call dword [0x4012a8]
add esp, 0x10
push eax
call dword [0x40128c]
push eax
lea ecx, [ebp - 0x44]
push ecx
call edi
push 1
push 1
lea edx, [ebp - 0x68]
mov esi, eax
push edx
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0x78]
push ecx
mov dword [ebp - 0xc0], 0x443844
mov dword [ebp - 0xc8], 8
mov dword [ebp - 0x60], 0x80020004
mov dword [ebp - 0x68], 0xa
mov dword [ebp - 0x50], 0x4a
mov dword [ebp - 0x58], 2
call dword [fcn.00401130]
mov edi, dword [esi]
lea edx, [ebp - 0x48]
push edx
lea eax, [ebp - 0xc8]
push eax
lea ecx, [ebp - 0x78]
push ecx
lea edx, [ebp - 0x88]
push edx
call dword [fcn.0040141c]
push eax
push esi
call dword [edi + 0x24]
fnclex
test eax, eax
jge 0x66af29
push 0x24
push 0x443848
push esi
push eax
call ebx
mov eax, dword [ebp - 0x48]
mov ecx, dword [eax]
lea edx, [ebp - 0xe4]
push edx
push eax
mov esi, eax
call dword [ecx + 0x7c]
fnclex
test eax, eax
jge 0x66af4c
push 0x7c
push 0x443858
push esi
push eax
call ebx
mov edx, dword [ebp - 0xe4]
xor eax, eax
test edx, edx
sete al
lea ecx, [ebp - 0x48]
push ecx
lea edx, [ebp - 0x44]
push edx
lea ecx, [ebp - 0x3c]
neg eax
mov esi, eax
lea eax, [ebp - 0x40]
push eax
push ecx
push 4
call dword [fcn.004010f0]
lea edx, [ebp - 0x88]
push edx
lea eax, [ebp - 0x98]
push eax
lea ecx, [ebp - 0x78]
push ecx
lea edx, [ebp - 0x68]
push edx
lea eax, [ebp - 0x58]
push eax
push 5
call dword [fcn.004010d4]
add esp, 0x2c
test si, si
je 0x66ade8
mov dword [ebp - 0xe0], 0xffffffff
mov dword [ebp - 0xdc], 2
mov dword [ebp - 0xe8], 0x4a
jmp 0x66adbd
lea edx, [ebp - 0x11c]
push edx
lea eax, [ebp - 0xa8]
push eax
mov dword [ebp - 0xa0], 0x44
mov dword [ebp - 0xa8], edi
call esi
test ax, ax
je 0x66b194
mov eax, dword [0x78c578]
test eax, eax
jne 0x66b00d
push 0x78c578
push 0x42df24
call dword [fcn.004013a0]
mov eax, dword [0x78c578]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x3b0]
mov edi, dword [int.004011a0]
push eax
lea edx, [ebp - 0x3c]
push edx
call edi
lea ecx, [ebp - 0x40]
push ecx
mov esi, eax
mov eax, dword [esi]
push 2
push esi
call dword [eax + 0x40]
fnclex
test eax, eax
jge 0x66b04a
mov ebx, dword [fcn.00401140]
push 0x40
push 0x4420d4
push esi
push eax
call ebx
jmp 0x66b050
mov ebx, dword [fcn.00401140]
mov edx, dword [ebp - 0x40]
push 0x443848
push 0
push 3
push edx
lea eax, [ebp - 0x98]
push eax
call dword [0x4012a8]
add esp, 0x10
push eax
call dword [0x40128c]
push eax
lea ecx, [ebp - 0x44]
push ecx
call edi
push 1
push 1
lea edx, [ebp - 0x68]
mov esi, eax
push edx
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0x78]
push ecx
mov dword [ebp - 0xc0], 0x443844
mov dword [ebp - 0xc8], 8
mov dword [ebp - 0x60], 0x80020004
mov dword [ebp - 0x68], 0xa
mov dword [ebp - 0x50], 0x4b
mov dword [ebp - 0x58], 2
call dword [fcn.00401130]
mov edi, dword [esi]
lea edx, [ebp - 0x48]
push edx
lea eax, [ebp - 0xc8]
push eax
lea ecx, [ebp - 0x78]
push ecx
lea edx, [ebp - 0x88]
push edx
call dword [fcn.0040141c]
push eax
push esi
call dword [edi + 0x24]
fnclex
test eax, eax
jge 0x66b0f7
push 0x24
push 0x443848
push esi
push eax
call ebx
mov eax, dword [ebp - 0x48]
mov ecx, dword [eax]
lea edx, [ebp - 0xe4]
push edx
push eax
mov esi, eax
call dword [ecx + 0x7c]
fnclex
test eax, eax
jge 0x66b11a
push 0x7c
push 0x443858
push esi
push eax
call ebx
mov edx, dword [ebp - 0xe4]
xor eax, eax
test edx, edx
sete al
lea ecx, [ebp - 0x48]
push ecx
lea edx, [ebp - 0x44]
push edx
lea ecx, [ebp - 0x3c]
neg eax
mov esi, eax
lea eax, [ebp - 0x40]
push eax
push ecx
push 4
call dword [fcn.004010f0]
lea edx, [ebp - 0x88]
push edx
lea eax, [ebp - 0x98]
push eax
lea ecx, [ebp - 0x78]
push ecx
lea edx, [ebp - 0x68]
push edx
lea eax, [ebp - 0x58]
push eax
push 5
call dword [fcn.004010d4]
add esp, 0x2c
test si, si
je 0x66ade8
mov dword [ebp - 0xe0], 0xffffffff
mov dword [ebp - 0xdc], 2
mov dword [ebp - 0xe8], 0x4b
jmp 0x66adbd
lea edx, [ebp - 0x11c]
push edx
lea eax, [ebp - 0xa8]
push eax
mov dword [ebp - 0xa0], 0x46
mov dword [ebp - 0xa8], edi
call esi
test ax, ax
je 0x66b362
mov eax, dword [0x78c578]
test eax, eax
jne 0x66b1db
push 0x78c578
push 0x42df24
call dword [fcn.004013a0]
mov eax, dword [0x78c578]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x3b0]
mov edi, dword [int.004011a0]
push eax
lea edx, [ebp - 0x3c]
push edx
call edi
lea ecx, [ebp - 0x40]
push ecx
mov esi, eax
mov eax, dword [esi]
push 2
push esi
call dword [eax + 0x40]
fnclex
test eax, eax
jge 0x66b218
mov ebx, dword [fcn.00401140]
push 0x40
push 0x4420d4
push esi
push eax
call ebx
jmp 0x66b21e
mov ebx, dword [fcn.00401140]
mov edx, dword [ebp - 0x40]
push 0x443848
push 0
push 3
push edx
lea eax, [ebp - 0x98]
push eax
call dword [0x4012a8]
add esp, 0x10
push eax
call dword [0x40128c]
push eax
lea ecx, [ebp - 0x44]
push ecx
call edi
push 1
push 1
lea edx, [ebp - 0x68]
mov esi, eax
push edx
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0x78]
push ecx
mov dword [ebp - 0xc0], 0x443844
mov dword [ebp - 0xc8], 8
mov dword [ebp - 0x60], 0x80020004
mov dword [ebp - 0x68], 0xa
mov dword [ebp - 0x50], 0x4c
mov dword [ebp - 0x58], 2
call dword [fcn.00401130]
mov edi, dword [esi]
lea edx, [ebp - 0x48]
push edx
lea eax, [ebp - 0xc8]
push eax
lea ecx, [ebp - 0x78]
push ecx
lea edx, [ebp - 0x88]
push edx
call dword [fcn.0040141c]
push eax
push esi
call dword [edi + 0x24]
fnclex
test eax, eax
jge 0x66b2c5
push 0x24
push 0x443848
push esi
push eax
call ebx
mov eax, dword [ebp - 0x48]
mov ecx, dword [eax]
lea edx, [ebp - 0xe4]
push edx
push eax
mov esi, eax
call dword [ecx + 0x7c]
fnclex
test eax, eax
jge 0x66b2e8
push 0x7c
push 0x443858
push esi
push eax
call ebx
mov edx, dword [ebp - 0xe4]
xor eax, eax
test edx, edx
sete al
lea ecx, [ebp - 0x48]
push ecx
lea edx, [ebp - 0x44]
push edx
lea ecx, [ebp - 0x3c]
neg eax
mov esi, eax
lea eax, [ebp - 0x40]
push eax
push ecx
push 4
call dword [fcn.004010f0]
lea edx, [ebp - 0x88]
push edx
lea eax, [ebp - 0x98]
push eax
lea ecx, [ebp - 0x78]
push ecx
lea edx, [ebp - 0x68]
push edx
lea eax, [ebp - 0x58]
push eax
push 5
call dword [fcn.004010d4]
add esp, 0x2c
test si, si
je 0x66ade8
mov dword [ebp - 0xe0], 0xffffffff
mov dword [ebp - 0xdc], 2
mov dword [ebp - 0xe8], 0x4c
jmp 0x66adbd
lea edx, [ebp - 0x11c]
push edx
lea eax, [ebp - 0xa8]
push eax
mov dword [ebp - 0xa0], 0x47
mov dword [ebp - 0xa8], edi
call esi
test ax, ax
je 0x66b530
mov eax, dword [0x78c578]
test eax, eax
jne 0x66b3a9
push 0x78c578
push 0x42df24
call dword [fcn.004013a0]
mov eax, dword [0x78c578]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x3b0]
mov edi, dword [int.004011a0]
push eax
lea edx, [ebp - 0x3c]
push edx
call edi
lea ecx, [ebp - 0x40]
push ecx
mov esi, eax
mov eax, dword [esi]
push 2
push esi
call dword [eax + 0x40]
fnclex
test eax, eax
jge 0x66b3e6
mov ebx, dword [fcn.00401140]
push 0x40
push 0x4420d4
push esi
push eax
call ebx
jmp 0x66b3ec
mov ebx, dword [fcn.00401140]
mov edx, dword [ebp - 0x40]
push 0x443848
push 0
push 3
push edx
lea eax, [ebp - 0x98]
push eax
call dword [0x4012a8]
add esp, 0x10
push eax
call dword [0x40128c]
push eax
lea ecx, [ebp - 0x44]
push ecx
call edi
push 1
push 1
lea edx, [ebp - 0x68]
mov esi, eax
push edx
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0x78]
push ecx
mov dword [ebp - 0xc0], 0x443844
mov dword [ebp - 0xc8], 8
mov dword [ebp - 0x60], 0x80020004
mov dword [ebp - 0x68], 0xa
mov dword [ebp - 0x50], 0x4d
mov dword [ebp - 0x58], 2
call dword [fcn.00401130]
mov edi, dword [esi]
lea edx, [ebp - 0x48]
push edx
lea eax, [ebp - 0xc8]
push eax
lea ecx, [ebp - 0x78]
push ecx
lea edx, [ebp - 0x88]
push edx
call dword [fcn.0040141c]
push eax
push esi
call dword [edi + 0x24]
fnclex
test eax, eax
jge 0x66b493
push 0x24
push 0x443848
push esi
push eax
call ebx
mov eax, dword [ebp - 0x48]
mov ecx, dword [eax]
lea edx, [ebp - 0xe4]
push edx
push eax
mov esi, eax
call dword [ecx + 0x7c]
fnclex
test eax, eax
jge 0x66b4b6
push 0x7c
push 0x443858
push esi
push eax
call ebx
mov edx, dword [ebp - 0xe4]
xor eax, eax
test edx, edx
sete al
lea ecx, [ebp - 0x48]
push ecx
lea edx, [ebp - 0x44]
push edx
lea ecx, [ebp - 0x3c]
neg eax
mov esi, eax
lea eax, [ebp - 0x40]
push eax
push ecx
push 4
call dword [fcn.004010f0]
lea edx, [ebp - 0x88]
push edx
lea eax, [ebp - 0x98]
push eax
lea ecx, [ebp - 0x78]
push ecx
lea edx, [ebp - 0x68]
push edx
lea eax, [ebp - 0x58]
push eax
push 5
call dword [fcn.004010d4]
add esp, 0x2c
test si, si
je 0x66ade8
mov dword [ebp - 0xe0], 0xffffffff
mov dword [ebp - 0xdc], 2
mov dword [ebp - 0xe8], 0x4d
jmp 0x66adbd
lea edx, [ebp - 0x11c]
push edx
lea eax, [ebp - 0xa8]
push eax
mov dword [ebp - 0xa0], 0x48
mov dword [ebp - 0xa8], edi
call esi
test ax, ax
je 0x66b6fe
mov eax, dword [0x78c578]
test eax, eax
jne 0x66b577
push 0x78c578
push 0x42df24
call dword [fcn.004013a0]
mov eax, dword [0x78c578]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x3b0]
mov edi, dword [int.004011a0]
push eax
lea edx, [ebp - 0x3c]
push edx
call edi
lea ecx, [ebp - 0x40]
push ecx
mov esi, eax
mov eax, dword [esi]
push 2
push esi
call dword [eax + 0x40]
fnclex
test eax, eax
jge 0x66b5b4
mov ebx, dword [fcn.00401140]
push 0x40
push 0x4420d4
push esi
push eax
call ebx
jmp 0x66b5ba
mov ebx, dword [fcn.00401140]
mov edx, dword [ebp - 0x40]
push 0x443848
push 0
push 3
push edx
lea eax, [ebp - 0x98]
push eax
call dword [0x4012a8]
add esp, 0x10
push eax
call dword [0x40128c]
push eax
lea ecx, [ebp - 0x44]
push ecx
call edi
push 1
push 1
lea edx, [ebp - 0x68]
mov esi, eax
push edx
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0x78]
push ecx
mov dword [ebp - 0xc0], 0x443844
mov dword [ebp - 0xc8], 8
mov dword [ebp - 0x60], 0x80020004
mov dword [ebp - 0x68], 0xa
mov dword [ebp - 0x50], 0x4e
mov dword [ebp - 0x58], 2
call dword [fcn.00401130]
mov edi, dword [esi]
lea edx, [ebp - 0x48]
push edx
lea eax, [ebp - 0xc8]
push eax
lea ecx, [ebp - 0x78]
push ecx
lea edx, [ebp - 0x88]
push edx
call dword [fcn.0040141c]
push eax
push esi
call dword [edi + 0x24]
fnclex
test eax, eax
jge 0x66b661
push 0x24
push 0x443848
push esi
push eax
call ebx
mov eax, dword [ebp - 0x48]
mov ecx, dword [eax]
lea edx, [ebp - 0xe4]
push edx
push eax
mov esi, eax
call dword [ecx + 0x7c]
fnclex
test eax, eax
jge 0x66b684
push 0x7c
push 0x443858
push esi
push eax
call ebx
mov edx, dword [ebp - 0xe4]
xor eax, eax
test edx, edx
sete al
lea ecx, [ebp - 0x48]
push ecx
lea edx, [ebp - 0x44]
push edx
lea ecx, [ebp - 0x3c]
neg eax
mov esi, eax
lea eax, [ebp - 0x40]
push eax
push ecx
push 4
call dword [fcn.004010f0]
lea edx, [ebp - 0x88]
push edx
lea eax, [ebp - 0x98]
push eax
lea ecx, [ebp - 0x78]
push ecx
lea edx, [ebp - 0x68]
push edx
lea eax, [ebp - 0x58]
push eax
push 5
call dword [fcn.004010d4]
add esp, 0x2c
test si, si
je 0x66ade8
mov dword [ebp - 0xe0], 0xffffffff
mov dword [ebp - 0xdc], 2
mov dword [ebp - 0xe8], 0x4e
jmp 0x66adbd
lea edx, [ebp - 0x11c]
push edx
lea eax, [ebp - 0xa8]
push eax
mov dword [ebp - 0xa0], 0x4a
mov dword [ebp - 0xa8], edi
call esi
test ax, ax
je 0x66b8cc
mov eax, dword [0x78c578]
test eax, eax
jne 0x66b745
push 0x78c578
push 0x42df24
call dword [fcn.004013a0]
mov eax, dword [0x78c578]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x3b0]
mov edi, dword [int.004011a0]
push eax
lea edx, [ebp - 0x3c]
push edx
call edi
lea ecx, [ebp - 0x40]
push ecx
mov esi, eax
mov eax, dword [esi]
push 2
push esi
call dword [eax + 0x40]
fnclex
test eax, eax
jge 0x66b782
mov ebx, dword [fcn.00401140]
push 0x40
push 0x4420d4
push esi
push eax
call ebx
jmp 0x66b788
mov ebx, dword [fcn.00401140]
mov edx, dword [ebp - 0x40]
push 0x443848
push 0
push 3
push edx
lea eax, [ebp - 0x98]
push eax
call dword [0x4012a8]
add esp, 0x10
push eax
call dword [0x40128c]
push eax
lea ecx, [ebp - 0x44]
push ecx
call edi
push 1
push 1
lea edx, [ebp - 0x68]
mov esi, eax
push edx
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0x78]
push ecx
mov dword [ebp - 0xc0], 0x443844
mov dword [ebp - 0xc8], 8
mov dword [ebp - 0x60], 0x80020004
mov dword [ebp - 0x68], 0xa
mov dword [ebp - 0x50], 0x4f
mov dword [ebp - 0x58], 2
call dword [fcn.00401130]
mov edi, dword [esi]
lea edx, [ebp - 0x48]
push edx
lea eax, [ebp - 0xc8]
push eax
lea ecx, [ebp - 0x78]
push ecx
lea edx, [ebp - 0x88]
push edx
call dword [fcn.0040141c]
push eax
push esi
call dword [edi + 0x24]
fnclex
test eax, eax
jge 0x66b82f
push 0x24
push 0x443848
push esi
push eax
call ebx
mov eax, dword [ebp - 0x48]
mov ecx, dword [eax]
lea edx, [ebp - 0xe4]
push edx
push eax
mov esi, eax
call dword [ecx + 0x7c]
fnclex
test eax, eax
jge 0x66b852
push 0x7c
push 0x443858
push esi
push eax
call ebx
mov edx, dword [ebp - 0xe4]
xor eax, eax
test edx, edx
sete al
lea ecx, [ebp - 0x48]
push ecx
lea edx, [ebp - 0x44]
push edx
lea ecx, [ebp - 0x3c]
neg eax
mov esi, eax
lea eax, [ebp - 0x40]
push eax
push ecx
push 4
call dword [fcn.004010f0]
lea edx, [ebp - 0x88]
push edx
lea eax, [ebp - 0x98]
push eax
lea ecx, [ebp - 0x78]
push ecx
lea edx, [ebp - 0x68]
push edx
lea eax, [ebp - 0x58]
push eax
push 5
call dword [fcn.004010d4]
add esp, 0x2c
test si, si
je 0x66ade8
mov dword [ebp - 0xe0], 0xffffffff
mov dword [ebp - 0xdc], 2
mov dword [ebp - 0xe8], 0x4f
jmp 0x66adbd
lea edx, [ebp - 0x11c]
push edx
lea eax, [ebp - 0xa8]
push eax
mov dword [ebp - 0xa0], 0x4b
mov dword [ebp - 0xa8], edi
call esi
test ax, ax
jne case.default.0x66d626
lea ecx, [ebp - 0x11c]
push ecx
lea edx, [ebp - 0xa8]
push edx
mov dword [ebp - 0xa0], 0x5a
mov dword [ebp - 0xa8], edi
call esi
test ax, ax
jne case.default.0x66d626
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0xa8]
push ecx
mov dword [ebp - 0xa0], 0x58
mov dword [ebp - 0xa8], edi
call esi
test ax, ax
jne case.default.0x66d626
lea edx, [ebp - 0x11c]
push edx
lea eax, [ebp - 0xa8]
push eax
mov dword [ebp - 0xa0], 0x43
mov dword [ebp - 0xa8], edi
call esi
test ax, ax
jne case.default.0x66d626
lea ecx, [ebp - 0x11c]
push ecx
lea edx, [ebp - 0xa8]
push edx
mov dword [ebp - 0xa0], 0x56
mov dword [ebp - 0xa8], edi
call esi
test ax, ax
jne case.default.0x66d626
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0xa8]
push ecx
mov dword [ebp - 0xa0], 0x42
mov dword [ebp - 0xa8], edi
call esi
test ax, ax
jne case.default.0x66d626
lea edx, [ebp - 0x11c]
push edx
lea eax, [ebp - 0xa8]
push eax
mov dword [ebp - 0xa0], 0x4e
mov dword [ebp - 0xa8], edi
call esi
test ax, ax
jne case.default.0x66d626
lea ecx, [ebp - 0x11c]
push ecx
lea edx, [ebp - 0xa8]
push edx
mov dword [ebp - 0xa0], 0x4d
mov dword [ebp - 0xa8], edi
call esi
test ax, ax
jne case.default.0x66d626
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0xa8]
push ecx
mov dword [ebp - 0xa0], 0x4c
mov dword [ebp - 0xa8], edi
call esi
test ax, ax
je 0x66ba66
mov dword [ebp - 0xe0], 0xffffffff
mov dword [ebp - 0xdc], 1
mov dword [ebp - 0xe8], 0x33
mov dword [ebp - 0xe4], 0
jmp 0x66d651
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0xa8]
push ecx
mov dword [ebp - 0xa0], 0xbc
mov dword [ebp - 0xa8], edi
call esi
test ax, ax
je 0x66bab8
mov dword [ebp - 0xe0], 0xffffffff
mov dword [ebp - 0xdc], 1
mov dword [ebp - 0xe8], 0x23
mov dword [ebp - 0xe4], 0
jmp 0x66d651
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0xa8]
push ecx
mov dword [ebp - 0xa0], 0xbf
mov dword [ebp - 0xa8], edi
call esi
test ax, ax
je 0x66bb04
xor eax, eax
mov dword [ebp - 0xe0], 0xffffffff
mov dword [ebp - 0xdc], eax
mov dword [ebp - 0xe8], 0xa
mov dword [ebp - 0xe4], eax
jmp 0x66d651
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0xa8]
push ecx
mov dword [ebp - 0xa0], 0x49
mov dword [ebp - 0xa8], edi
call esi
test ax, ax
je 0x66bb56
mov dword [ebp - 0xe0], 0xffffffff
mov dword [ebp - 0xdc], 1
mov dword [ebp - 0xe8], 0x22
mov dword [ebp - 0xe4], 0
jmp 0x66d651
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0xa8]
push ecx
mov dword [ebp - 0xa0], 0x4f
mov dword [ebp - 0xa8], edi
call esi
test ax, ax
je 0x66bba8
mov dword [ebp - 0xe0], 0xffffffff
mov dword [ebp - 0xdc], 2
mov dword [ebp - 0xe8], 0x40
mov dword [ebp - 0xe4], 0
jmp 0x66d651
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0xa8]
push ecx
mov dword [ebp - 0xa0], 0x50
mov dword [ebp - 0xa8], edi
call esi
test ax, ax
je 0x66bbf6
mov dword [ebp - 0xe0], 0xffffffff
mov dword [ebp - 0xdc], 2
mov dword [ebp - 0xe8], ebx
mov dword [ebp - 0xe4], 0
jmp 0x66d651
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0xa8]
push ecx
mov dword [ebp - 0xa0], 0xd
mov dword [ebp - 0xa8], edi
call esi
test ax, ax
je 0x66bff3
push 0x78c3e0
lea edx, [ebp - 0xa8]
push edx
push 0x78c3ec
push 0x78c3e4
mov dword [ebp - 0xa0], 0x78c3e8
mov dword [ebp - 0xa8], 0x4003
call fcn.006b9f90
test eax, eax
je 0x66bd97
mov eax, dword [0x78c578]
xor ebx, ebx
cmp eax, ebx
jne 0x66bc76
push 0x78c578
push 0x42df24
call dword [fcn.004013a0]
mov eax, dword [0x78c578]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x39c]
push eax
lea edx, [ebp - 0x3c]
push edx
call dword [int.004011a0]
mov edi, eax
cmp dword [0x78c578], ebx
jne 0x66bca4
push 0x78c578
push 0x42df24
call dword [fcn.004013a0]
mov edx, dword [0x78b798]
mov esi, dword [0x78c578]
mov eax, dword [esi]
lea ecx, [ebp - 0xe4]
push ecx
push edx
push esi
call dword [eax + 0x2e4]
fnclex
cmp eax, ebx
jge 0x66bcd9
push 0x2e4
push 0x43f3b0
push esi
push eax
call dword [fcn.00401140]
mov ecx, dword [ebp - 0xe4]
mov eax, dword [edi]
push ecx
push edi
call dword [eax + 0x84]
fnclex
cmp eax, ebx
jge 0x66bd01
push 0x84
push 0x442c0c
push edi
push eax
call dword [fcn.00401140]
lea ecx, [ebp - 0x3c]
call dword [fcn.004014c4]
mov eax, dword [0x78c578]
cmp eax, ebx
jne 0x66bd28
push 0x78c578
push 0x42df24
call dword [fcn.004013a0]
mov eax, dword [0x78c578]
mov edx, dword [eax]
push eax
call dword [edx + 0x39c]
push eax
lea eax, [ebp - 0x3c]
push eax
call dword [int.004011a0]
mov edx, dword [0x78b798]
mov esi, eax
mov ecx, dword [esi]
push edx
push esi
call dword [ecx + 0x54]
fnclex
cmp eax, ebx
jge 0x66bd60
push 0x54
push 0x442c0c
push esi
push eax
call dword [fcn.00401140]
lea ecx, [ebp - 0x3c]
call dword [fcn.004014c4]
mov eax, dword [0x78c3e8]
mov ecx, dword [0x78c3e0]
mov dword [0x78cb2c], ebx
mov dword [0x78cb30], ebx
mov dword [0x78cb34], eax
mov dword [0x78cb3c], ecx
mov dword [0x78bbf0], 1
jmp 0x66bd99
xor ebx, ebx
push 0x78c3e0
lea edx, [ebp - 0xa8]
push edx
push 0x78c3ec
push 0x78c3e4
mov dword [ebp - 0xa0], 0x78c3e8
mov dword [ebp - 0xa8], 0x4003
call fcn.006b9f90
test eax, eax
jne case.default.0x66d626
cmp dword [0x78bbf0], 1
jne case.default.0x66d626
mov eax, dword [0x78c578]
cmp eax, ebx
jne 0x66bdfb
push 0x78c578
push 0x42df24
call dword [fcn.004013a0]
mov eax, dword [0x78c578]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x39c]
push eax
lea edx, [ebp - 0x3c]
push edx
call dword [int.004011a0]
mov edi, eax
cmp dword [0x78c578], ebx
jne 0x66be29
push 0x78c578
push 0x42df24
call dword [fcn.004013a0]
mov esi, dword [0x78c578]
mov eax, dword [esi]
lea ecx, [ebp - 0xe4]
push ecx
push 0x45b2dc
push esi
call dword [eax + 0x2e4]
fnclex
cmp eax, ebx
jge 0x66be5c
push 0x2e4
push 0x43f3b0
push esi
push eax
call dword [fcn.00401140]
mov eax, dword [ebp - 0xe4]
mov edx, dword [edi]
push eax
push edi
call dword [edx + 0x84]
fnclex
cmp eax, ebx
jge 0x66be84
push 0x84
push 0x442c0c
push edi
push eax
call dword [fcn.00401140]
lea ecx, [ebp - 0x3c]
call dword [fcn.004014c4]
mov eax, dword [0x78c578]
cmp eax, ebx
jne 0x66beab
push 0x78c578
push 0x42df24
call dword [fcn.004013a0]
mov eax, dword [0x78c578]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x39c]
push eax
lea edx, [ebp - 0x3c]
push edx
call dword [int.004011a0]
mov esi, eax
mov eax, dword [esi]
push 0x45b2dc
push esi
call dword [eax + 0x54]
fnclex
cmp eax, ebx
jge 0x66bee1
push 0x54
push 0x442c0c
push esi
push eax
call dword [fcn.00401140]
lea ecx, [ebp - 0x3c]
call dword [fcn.004014c4]
call fcn.0067ba70
push 0x78c3e0
push 0x78c3e8
push 0x78c3ec
push 0x78c3e4
call fcn.0067ba00
push 0x78cb3c
push 0x78cb34
push 0x78cb30
push 0x78cb2c
call fcn.0067ba00
push 0x78cb3c
lea ecx, [ebp - 0xb8]
push ecx
push 0x78cb30
push 0x78cb2c
push 0x78c3e0
lea edx, [ebp - 0xa8]
push edx
mov eax, 0x4003
push 0x78c3ec
push 0x78c3e4
mov dword [ebp - 0xb0], 0x78cb34
mov dword [ebp - 0xb8], eax
mov dword [ebp - 0xa0], 0x78c3e8
mov dword [ebp - 0xa8], eax
call fcn.006ca0e0
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0xa8]
push ecx
lea edx, [ebp - 0xf0]
push edx
lea eax, [ebp - 0xec]
push eax
lea ecx, [ebp - 0xe8]
push ecx
lea edx, [ebp - 0xe4]
push edx
mov dword [0x78bbf0], ebx
mov dword [ebp - 0x50], ebx
mov dword [ebp - 0x58], 2
mov dword [ebp - 0xa0], 0x78bb4c
mov dword [ebp - 0xa8], 0x4002
mov dword [ebp - 0xf0], ebx
mov dword [ebp - 0xec], ebx
mov dword [ebp - 0xe8], ebx
mov dword [ebp - 0xe4], ebx
call fcn.005e4120
lea ecx, [ebp - 0x58]
call dword [fcn.004010a8]
wait
push 0x66d916
jmp 0x66d8fd
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0xa8]
push ecx
mov dword [ebp - 0xa0], 0xdc
mov dword [ebp - 0xa8], edi
call esi
test ax, ax
je 0x66c148
push 0x78c3e0
lea edx, [ebp - 0xa8]
push edx
push 0x78c3ec
push 0x78c3e4
lea eax, [ebp - 0x58]
push eax
mov dword [ebp - 0xa0], 0x78c3e8
mov dword [ebp - 0xa8], 0x4003
call fcn.006ca680
lea ecx, [ebp - 0x58]
push ecx
call dword [fcn.00401204]
mov esi, dword [fcn.004010a8]
lea ecx, [ebp - 0x58]
mov edi, eax
call esi
xor ebx, ebx
cmp di, bx
jne case.default.0x66d626
mov edi, 2
lea edx, [ebp - 0xa8]
lea ecx, [ebp - 0x38]
mov dword [ebp - 0xa0], 4
mov dword [ebp - 0xa8], edi
call dword [fcn.00401098]
lea edx, [ebp - 0x58]
push edx
lea eax, [ebp - 0x20]
push eax
push 0x78c3e0
lea ecx, [ebp - 0xe4]
push ecx
push 0x78c3e8
push 0x78c3ec
lea edx, [ebp - 0x38]
push edx
mov dword [ebp - 0x50], 1
mov dword [ebp - 0x58], edi
mov dword [ebp - 0xe4], 0x41
call fcn.00705180
lea ecx, [ebp - 0x58]
call esi
call fcn.005de530
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0xa8]
push ecx
lea edx, [ebp - 0xf0]
push edx
lea eax, [ebp - 0xec]
push eax
lea ecx, [ebp - 0xe8]
push ecx
lea edx, [ebp - 0xe4]
push edx
mov dword [ebp - 0x50], ebx
mov dword [ebp - 0x58], edi
mov dword [ebp - 0xa0], 0x78bb4c
mov dword [ebp - 0xa8], 0x4002
mov dword [ebp - 0xf0], ebx
mov dword [ebp - 0xec], ebx
mov dword [ebp - 0xe8], ebx
mov dword [ebp - 0xe4], ebx
call fcn.005e4120
lea ecx, [ebp - 0x58]
call esi
wait
push 0x66d916
jmp 0x66d8fd
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0xa8]
push ecx
mov dword [ebp - 0xa0], 0xdb
mov dword [ebp - 0xa8], edi
call esi
test ax, ax
je 0x66c29a
lea edx, [ebp - 0xa8]
push edx
mov dword [ebp - 0xa0], 0x78c3e4
mov dword [ebp - 0xa8], 0x4003
call fcn.00665ea0
test ax, ax
jne case.default.0x66d626
mov eax, dword [0x78c3e0]
mov ecx, dword [0x78c3e8]
mov edx, dword [0x78c3ec]
push 2
mov edi, 0x17
push edi
push eax
mov eax, dword [0x78c3e4]
push ecx
push edx
push eax
call fcn.006bf070
cmp eax, 0xffffffff
jne 0x66c1fc
sub esp, 0x10
mov ecx, 8
mov edx, esp
mov dword [edx], ecx
mov dword [ebp - 0xa8], ecx
mov ecx, dword [ebp - 0xa4]
mov eax, 0x458664
mov dword [edx + 4], ecx
mov dword [edx + 8], eax
mov dword [ebp - 0xa0], eax
mov eax, dword [ebp - 0x9c]
mov dword [edx + 0xc], eax
push 4
jmp 0x66c230
sub esp, 0x10
mov ecx, 2
mov edx, esp
mov dword [edx], ecx
mov dword [ebp - 0xa8], ecx
mov ecx, dword [ebp - 0xa4]
mov eax, 0x1e
mov dword [edx + 4], ecx
mov dword [edx + 8], eax
mov dword [ebp - 0xa0], eax
mov eax, dword [ebp - 0x9c]
mov dword [edx + 0xc], eax
push 2
mov ecx, dword [0x78c3e0]
mov edx, dword [0x78c3e8]
mov eax, dword [0x78c3ec]
push edi
push ecx
mov ecx, dword [0x78c3e4]
push edx
push eax
push ecx
call fcn.006ba0d0
mov edx, dword [0x78c3e4]
mov eax, dword [0x78c3ec]
mov dword [0x78b974], 2
mov dword [0x78bb00], edx
fild dword [0x78c3e8]
mov ecx, dword [0x78c3e0]
mov dword [0x78bb04], eax
wait
fstp dword [0x78bb08]
mov dword [0x78bb0c], ecx
mov dword [0x78bb10], edi
push 0x66d916
jmp 0x66d8fd
lea edx, [ebp - 0x11c]
push edx
lea eax, [ebp - 0xa8]
push eax
mov dword [ebp - 0xa0], 0xdd
mov dword [ebp - 0xa8], edi
call esi
test ax, ax
je 0x66c6dd
lea ecx, [ebp - 0xa8]
push ecx
mov dword [ebp - 0xa0], 0x78c3e4
mov dword [ebp - 0xa8], 0x4003
call fcn.00665ea0
test ax, ax
jne case.default.0x66d626
cmp dword [0x78b974], 1
jne 0x66c557
fild dword [0x78c3e8]
fstp qword [ebp - 0x138]
fld dword [0x78bb08]
call dword [0x401200]
fcomp qword [ebp - 0x138]
fnstsw ax
test ah, 1
mov eax, dword [0x78c3e0]
je 0x66c32b
cmp eax, dword [0x78bb0c]
je 0x66c337
cmp eax, dword [0x78bb0c]
jle 0x66c3e9
mov edx, dword [0x78c3e8]
mov ecx, dword [0x78c3e4]
push 2
mov edi, 0x17
push edi
push eax
mov eax, dword [0x78c3ec]
push edx
push eax
push ecx
call fcn.006bf070
cmp eax, 0xffffffff
jne 0x66c394
sub esp, 0x10
mov ecx, 8
mov edx, esp
mov dword [edx], ecx
mov dword [ebp - 0xa8], ecx
mov ecx, dword [ebp - 0xa4]
mov eax, 0x458670
mov dword [edx + 4], ecx
mov dword [edx + 8], eax
mov dword [ebp - 0xa0], eax
mov eax, dword [ebp - 0x9c]
mov dword [edx + 0xc], eax
push 4
jmp 0x66c3c8
sub esp, 0x10
mov ecx, 2
mov edx, esp
mov dword [edx], ecx
mov dword [ebp - 0xa8], ecx
mov ecx, dword [ebp - 0xa4]
mov eax, 0x1f
mov dword [edx + 4], ecx
mov dword [edx + 8], eax
mov dword [ebp - 0xa0], eax
mov eax, dword [ebp - 0x9c]
mov dword [edx + 0xc], eax
push 2
mov ecx, dword [0x78c3e0]
mov edx, dword [0x78c3e8]
mov eax, dword [0x78c3ec]
push edi
push ecx
mov ecx, dword [0x78c3e4]
push edx
push eax
push ecx
call fcn.006ba0d0
mov edx, dword [0x78bb10]
fld dword [0x78bb08]
mov eax, dword [0x78bb0c]
mov esi, dword [fcn.00401454]
push 2
dec edx
push edx
push eax
call esi
mov ecx, dword [0x78bb04]
mov edx, dword [0x78bb00]
push eax
push ecx
push edx
call fcn.006bd2a0
mov ecx, dword [0x78c3e0]
mov edx, dword [0x78c3e8]
mov edi, eax
mov eax, dword [0x78bb10]
push 2
dec eax
push eax
mov eax, dword [0x78c3ec]
push ecx
mov ecx, dword [0x78c3e4]
push edx
push eax
push ecx
call fcn.006bd2a0
fld dword [0x78bb08]
mov edx, dword [0x78bb10]
push 3
xor ebx, ebx
cmp eax, edi
mov eax, dword [0x78bb0c]
push edx
push eax
setne bl
call esi
mov ecx, dword [0x78bb04]
mov edx, dword [0x78bb00]
push eax
push ecx
push edx
call fcn.006bd2a0
mov ecx, dword [0x78c3e0]
mov edx, dword [0x78c3e8]
push 3
mov esi, eax
mov eax, dword [0x78bb10]
push eax
mov eax, dword [0x78c3ec]
push ecx
mov ecx, dword [0x78c3e4]
push edx
push eax
push ecx
call fcn.006bd2a0
mov ecx, dword [0x78c3e0]
xor edx, edx
cmp eax, esi
mov eax, dword [0x78bb10]
setne dl
push 3
push eax
mov eax, dword [0x78c3ec]
push ecx
mov ecx, dword [0x78c3e4]
or ebx, edx
mov edx, dword [0x78c3e8]
push edx
neg ebx
push eax
sbb ebx, ebx
push ecx
neg ebx
call fcn.006bd2a0
neg eax
sbb eax, eax
inc eax
or ebx, eax
jne 0x66c54d
mov eax, dword [0x78ba48]
test eax, eax
jne 0x66c54d
mov eax, 0xa
mov ecx, 0x80020004
lea edx, [ebp - 0x78]
push edx
mov dword [ebp - 0x78], eax
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x58], eax
lea eax, [ebp - 0x68]
push eax
mov dword [ebp - 0x70], ecx
mov dword [ebp - 0x60], ecx
mov dword [ebp - 0x50], ecx
lea ecx, [ebp - 0x58]
push ecx
push 0
lea edx, [ebp - 0xa8]
push edx
mov dword [ebp - 0xa0], 0x78b7ac
mov dword [ebp - 0xa8], 0x4008
call dword [fcn.004011a4]
lea eax, [ebp - 0x78]
push eax
lea ecx, [ebp - 0x68]
push ecx
lea edx, [ebp - 0x58]
push edx
push 3
call dword [fcn.004010d4]
add esp, 0x10
mov dword [0x78b974], 0
mov eax, dword [0x78c578]
test eax, eax
jne 0x66c579
mov ebx, dword [fcn.004013a0]
push 0x78c578
push 0x42df24
call ebx
mov eax, dword [0x78c578]
jmp 0x66c57f
mov ebx, dword [fcn.004013a0]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x39c]
mov edi, dword [int.004011a0]
push eax
lea edx, [ebp - 0x3c]
push edx
call edi
mov esi, eax
mov eax, dword [esi]
push 0x45b2e4
push esi
call dword [eax + 0x54]
fnclex
test eax, eax
jge 0x66c5b7
push 0x54
push 0x442c0c
push esi
push eax
call dword [fcn.00401140]
lea ecx, [ebp - 0x3c]
call dword [fcn.004014c4]
mov eax, dword [0x78c578]
test eax, eax
jne 0x66c5da
push 0x78c578
push 0x42df24
call ebx
mov eax, dword [0x78c578]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x39c]
push eax
lea edx, [ebp - 0x3c]
push edx
call edi
mov edi, eax
mov eax, dword [0x78c578]
test eax, eax
jne 0x66c601
push 0x78c578
push 0x42df24
call ebx
mov esi, dword [0x78c578]
mov eax, dword [esi]
lea ecx, [ebp - 0xe4]
push ecx
push 0x45b2e4
push esi
call dword [eax + 0x2e4]
fnclex
xor ebx, ebx
cmp eax, ebx
jge 0x66c636
push 0x2e4
push 0x43f3b0
push esi
push eax
call dword [fcn.00401140]
mov eax, dword [ebp - 0xe4]
mov edx, dword [edi]
push eax
push edi
call dword [edx + 0x84]
fnclex
cmp eax, ebx
jge 0x66c65e
push 0x84
push 0x442c0c
push edi
push eax
call dword [fcn.00401140]
lea ecx, [ebp - 0x3c]
call dword [fcn.004014c4]
lea ecx, [ebp - 0x58]
push ecx
lea edx, [ebp - 0xa8]
push edx
lea eax, [ebp - 0xf0]
push eax
lea ecx, [ebp - 0xec]
push ecx
lea edx, [ebp - 0xe8]
push edx
lea eax, [ebp - 0xe4]
push eax
mov dword [ebp - 0x50], ebx
mov dword [ebp - 0x58], 2
mov dword [ebp - 0xa0], 0x78bb4c
mov dword [ebp - 0xa8], 0x4002
mov dword [ebp - 0xf0], ebx
mov dword [ebp - 0xec], ebx
mov dword [ebp - 0xe8], ebx
mov dword [ebp - 0xe4], ebx
call fcn.005e4120
lea ecx, [ebp - 0x58]
call dword [fcn.004010a8]
wait
push 0x66d916
jmp 0x66d8fd
lea ecx, [ebp - 0x11c]
push ecx
lea edx, [ebp - 0xa8]
push edx
mov dword [ebp - 0xa0], 0xba
mov dword [ebp - 0xa8], edi
call esi
test ax, ax
je 0x66c838
lea eax, [ebp - 0xa8]
mov ebx, 0x4003
push eax
mov dword [ebp - 0xa0], 0x78c3e4
mov dword [ebp - 0xa8], ebx
call fcn.00665ea0
test ax, ax
jne case.default.0x66d626
mov ecx, dword [0x78c3e0]
mov edx, dword [0x78c3e8]
mov eax, dword [0x78c3ec]
mov esi, 2
push esi
mov edi, 0x17
push edi
push ecx
mov ecx, dword [0x78c3e4]
push edx
push eax
push ecx
call fcn.006bf070
cmp eax, 0xffffffff
jne 0x66c7bf
lea edx, [ebp - 0xc8]
lea ecx, [ebp - 0x68]
mov dword [ebp - 0xc0], 0x45867c
mov dword [ebp - 0xc8], 8
call dword [fcn.00401434]
lea edx, [ebp - 0x68]
push edx
push 0x78c3e0
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0xa8]
push ecx
push 0x78c3ec
push 0x78c3e4
mov dword [ebp - 0x50], edi
mov dword [ebp - 0x58], esi
mov dword [ebp - 0xa0], 0x78c3e8
mov dword [ebp - 0xa8], ebx
call fcn.005dead0
jmp 0x66c814
lea ecx, [ebp - 0x68]
push ecx
lea edx, [ebp - 0xc8]
push edx
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0xa8]
push ecx
push 0x78c3ec
push 0x78c3e4
mov dword [ebp - 0x60], 0x20
mov dword [ebp - 0x68], esi
mov dword [ebp - 0xc0], 0x78c3e0
mov dword [ebp - 0xc8], ebx
mov dword [ebp - 0x50], edi
mov dword [ebp - 0x58], esi
mov dword [ebp - 0xa0], 0x78c3e8
mov dword [ebp - 0xa8], ebx
call fcn.005dea40
lea edx, [ebp - 0x68]
push edx
lea eax, [ebp - 0x58]
push eax
push esi
call dword [fcn.004010d4]
add esp, 0xc
xor eax, eax
mov dword [0x78b974], esi
mov dword [0x78bb00], eax
jmp 0x66c26c
lea edx, [ebp - 0x11c]
push edx
lea eax, [ebp - 0xa8]
push eax
mov dword [ebp - 0xa0], 0xde
mov dword [ebp - 0xa8], edi
call esi
test ax, ax
je 0x66cef9
lea ecx, [ebp - 0xa8]
mov edi, 0x4003
push ecx
mov dword [ebp - 0xa0], 0x78c3e4
mov dword [ebp - 0xa8], edi
call fcn.00665ea0
test ax, ax
jne case.default.0x66d626
cmp dword [0x78b974], 1
jne 0x66cd73
mov edx, dword [0x78bb10]
fld dword [0x78bb08]
mov eax, dword [0x78bb0c]
mov esi, dword [fcn.00401454]
push 7
push edx
push eax
call esi
mov ecx, dword [0x78bb04]
mov edx, dword [0x78bb00]
push eax
push ecx
push edx
call fcn.006bd2a0
mov ecx, dword [0x78c3e0]
mov edx, dword [0x78c3e8]
push 7
mov ebx, eax
mov eax, dword [0x78bb10]
push eax
mov eax, dword [0x78c3ec]
push ecx
mov ecx, dword [0x78c3e4]
push edx
push eax
push ecx
call fcn.006bd2a0
fld dword [0x78bb08]
mov ecx, dword [0x78bb0c]
mov edx, eax
mov eax, dword [0x78bb10]
sub edx, ebx
neg edx
push 3
sbb edx, edx
push eax
inc edx
push ecx
mov dword [ebp - 0x13c], edx
call esi
mov edx, dword [0x78bb04]
push eax
mov eax, dword [0x78bb00]
push edx
push eax
call fcn.006bd2a0
mov ecx, dword [0x78bb10]
mov edx, dword [0x78c3e0]
push 3
push ecx
mov ecx, dword [0x78c3ec]
push edx
mov edx, dword [0x78c3e4]
mov esi, eax
mov eax, dword [0x78c3e8]
push eax
push ecx
push edx
call fcn.006bd2a0
mov ecx, dword [ebp - 0x13c]
sub eax, esi
neg eax
sbb eax, eax
inc eax
test eax, ecx
jne 0x66c9dc
mov eax, dword [0x78bcf8]
test eax, eax
jne 0x66c9dc
mov eax, dword [0x78ba48]
test eax, eax
jne 0x66c9dc
mov eax, 0xa
mov ecx, 0x80020004
lea edx, [ebp - 0x78]
push edx
mov dword [ebp - 0x78], eax
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x58], eax
lea eax, [ebp - 0x68]
push eax
mov dword [ebp - 0x70], ecx
mov dword [ebp - 0x60], ecx
mov dword [ebp - 0x50], ecx
lea ecx, [ebp - 0x58]
push ecx
push 0
lea edx, [ebp - 0xa8]
push edx
mov dword [ebp - 0xa0], 0x78b648
mov dword [ebp - 0xa8], 0x4008
call dword [fcn.004011a4]
lea eax, [ebp - 0x78]
push eax
lea ecx, [ebp - 0x68]
push ecx
lea edx, [ebp - 0x58]
push edx
push 3
call dword [fcn.004010d4]
add esp, 0x10
fild dword [0x78c3e8]
fstp qword [ebp - 0x138]
fld dword [0x78bb08]
call dword [0x401200]
fcomp qword [ebp - 0x138]
fnstsw ax
test ah, 1
mov eax, dword [0x78c3e0]
je 0x66ca0e
cmp eax, dword [0x78bb0c]
je 0x66ca1a
cmp eax, dword [0x78bb0c]
jle 0x66cb49
mov ecx, dword [0x78bb10]
mov edx, dword [0x78c3e8]
push 2
push ecx
mov ecx, dword [0x78c3e4]
push eax
mov eax, dword [0x78c3ec]
push edx
push eax
push ecx
call fcn.006bd2a0
cmp eax, 0xffffffff
jne 0x66cac9
lea edx, [ebp - 0xc8]
lea ecx, [ebp - 0x58]
mov dword [ebp - 0xc0], 0x458688
mov dword [ebp - 0xc8], 8
call dword [fcn.00401434]
lea edx, [ebp - 0x58]
push edx
push 0x78c3e0
lea eax, [ebp - 0xb8]
push eax
lea ecx, [ebp - 0xa8]
push ecx
push 0x78c3ec
push 0x78c3e4
mov dword [ebp - 0xb0], 0x78bb10
mov dword [ebp - 0xb8], edi
mov dword [ebp - 0xa0], 0x78c3e8
mov dword [ebp - 0xa8], edi
call fcn.005dead0
mov ebx, dword [fcn.004010a8]
lea ecx, [ebp - 0x58]
call ebx
mov dword [0x78b974], 0
jmp 0x66cd79
lea edx, [ebp - 0x58]
push edx
lea eax, [ebp - 0xc8]
push eax
lea ecx, [ebp - 0xb8]
push ecx
lea edx, [ebp - 0xa8]
push edx
push 0x78c3ec
push 0x78c3e4
mov dword [ebp - 0x50], 0x21
mov dword [ebp - 0x58], 2
mov dword [ebp - 0xc0], 0x78c3e0
mov dword [ebp - 0xc8], edi
mov dword [ebp - 0xb0], 0x78bb10
mov dword [ebp - 0xb8], edi
mov dword [ebp - 0xa0], 0x78c3e8
mov dword [ebp - 0xa8], edi
call fcn.005dea40
mov ebx, dword [fcn.004010a8]
lea ecx, [ebp - 0x58]
call ebx
mov dword [0x78b974], 0
jmp 0x66cd79
mov ecx, dword [0x78bb10]
mov edx, dword [0x78c3e8]
push 2
push ecx
mov ecx, dword [0x78c3e4]
push eax
mov eax, dword [0x78c3ec]
push edx
push eax
push ecx
call fcn.006bd2a0
cmp eax, 0xffffffff
jne 0x66cbdd
lea edx, [ebp - 0xc8]
lea ecx, [ebp - 0x58]
mov dword [ebp - 0xc0], 0x45867c
mov dword [ebp - 0xc8], 8
call dword [fcn.00401434]
lea edx, [ebp - 0x58]
push edx
push 0x78c3e0
lea eax, [ebp - 0xb8]
push eax
lea ecx, [ebp - 0xa8]
push ecx
push 0x78c3ec
mov esi, 0x78bb10
push 0x78c3e4
mov dword [ebp - 0xb0], esi
mov dword [ebp - 0xb8], edi
mov dword [ebp - 0xa0], 0x78c3e8
mov dword [ebp - 0xa8], edi
call fcn.005dead0
jmp 0x66cc44
lea edx, [ebp - 0x58]
push edx
lea eax, [ebp - 0xc8]
push eax
lea ecx, [ebp - 0xb8]
push ecx
lea edx, [ebp - 0xa8]
push edx
push 0x78c3ec
mov esi, 0x78bb10
push 0x78c3e4
mov dword [ebp - 0x50], 0x20
mov dword [ebp - 0x58], 2
mov dword [ebp - 0xc0], 0x78c3e0
mov dword [ebp - 0xc8], edi
mov dword [ebp - 0xb0], esi
mov dword [ebp - 0xb8], edi
mov dword [ebp - 0xa0], 0x78c3e8
mov dword [ebp - 0xa8], edi
call fcn.005dea40
mov ebx, dword [fcn.004010a8]
lea ecx, [ebp - 0x58]
call ebx
fld dword [0x78bb08]
mov eax, dword [0x78bb10]
mov ecx, dword [0x78bb0c]
push 2
push eax
push ecx
call dword [fcn.00401454]
mov edx, dword [0x78bb04]
push eax
mov eax, dword [0x78bb00]
push edx
push eax
call fcn.006bd2a0
cmp eax, 0xffffffff
jne 0x66ccfc
lea edx, [ebp - 0xc8]
lea ecx, [ebp - 0x58]
mov dword [ebp - 0xc0], 0x458688
mov dword [ebp - 0xc8], 8
call dword [fcn.00401434]
lea ecx, [ebp - 0x58]
push ecx
push 0x78bb0c
lea edx, [ebp - 0xb8]
push edx
lea eax, [ebp - 0xa8]
push eax
push 0x78bb04
push 0x78bb00
mov dword [ebp - 0xb0], esi
mov dword [ebp - 0xb8], edi
mov dword [ebp - 0xa0], 0x78bb08
mov dword [ebp - 0xa8], 0x4004
call fcn.005dead0
lea ecx, [ebp - 0x58]
call ebx
mov dword [0x78b974], 0
jmp 0x66cd79
lea ecx, [ebp - 0x58]
push ecx
lea edx, [ebp - 0xc8]
push edx
lea eax, [ebp - 0xb8]
push eax
lea ecx, [ebp - 0xa8]
push ecx
push 0x78bb04
push 0x78bb00
mov dword [ebp - 0x50], 0x21
mov dword [ebp - 0x58], 2
mov dword [ebp - 0xc0], 0x78bb0c
mov dword [ebp - 0xc8], edi
mov dword [ebp - 0xb0], esi
mov dword [ebp - 0xb8], edi
mov dword [ebp - 0xa0], 0x78bb08
mov dword [ebp - 0xa8], 0x4004
call fcn.005dea40
lea ecx, [ebp - 0x58]
call ebx
mov dword [0x78b974], 0
jmp 0x66cd79
mov ebx, dword [fcn.004010a8]
mov eax, dword [0x78c578]
test eax, eax
jne 0x66cd97
push 0x78c578
push 0x42df24
call dword [fcn.004013a0]
mov eax, dword [0x78c578]
mov edx, dword [eax]
push eax
call dword [edx + 0x39c]
mov edi, dword [int.004011a0]
push eax
lea eax, [ebp - 0x3c]
push eax
call edi
mov esi, eax
mov ecx, dword [esi]
push 0x45b2e4
push esi
call dword [ecx + 0x54]
fnclex
test eax, eax
jge 0x66cdcf
push 0x54
push 0x442c0c
push esi
push eax
call dword [fcn.00401140]
lea ecx, [ebp - 0x3c]
call dword [fcn.004014c4]
mov eax, dword [0x78c578]
test eax, eax
jne 0x66cdf6
push 0x78c578
push 0x42df24
call dword [fcn.004013a0]
mov eax, dword [0x78c578]
mov edx, dword [eax]
push eax
call dword [edx + 0x39c]
push eax
lea eax, [ebp - 0x3c]
push eax
call edi
mov edi, eax
mov eax, dword [0x78c578]
test eax, eax
jne 0x66ce21
push 0x78c578
push 0x42df24
call dword [fcn.004013a0]
mov esi, dword [0x78c578]
mov ecx, dword [esi]
lea edx, [ebp - 0xe4]
push edx
push 0x45b2e4
push esi
call dword [ecx + 0x2e4]
fnclex
test eax, eax
jge 0x66ce54
push 0x2e4
push 0x43f3b0
push esi
push eax
call dword [fcn.00401140]
mov ecx, dword [ebp - 0xe4]
mov eax, dword [edi]
push ecx
push edi
call dword [eax + 0x84]
fnclex
xor esi, esi
cmp eax, esi
jge 0x66ce7e
push 0x84
push 0x442c0c
push edi
push eax
call dword [fcn.00401140]
lea ecx, [ebp - 0x3c]
call dword [fcn.004014c4]
lea edx, [ebp - 0x58]
push edx
lea eax, [ebp - 0xa8]
push eax
lea ecx, [ebp - 0xf0]
push ecx
lea edx, [ebp - 0xec]
push edx
lea eax, [ebp - 0xe8]
push eax
lea ecx, [ebp - 0xe4]
push ecx
mov dword [ebp - 0x50], esi
mov dword [ebp - 0x58], 2
mov dword [ebp - 0xa0], 0x78bb4c
mov dword [ebp - 0xa8], 0x4002
mov dword [ebp - 0xf0], esi
mov dword [ebp - 0xec], esi
mov dword [ebp - 0xe8], esi
mov dword [ebp - 0xe4], esi
call fcn.005e4120
lea ecx, [ebp - 0x58]
call ebx
wait
push 0x66d916
jmp 0x66d8fd
lea edx, [ebp - 0x11c]
push edx
lea eax, [ebp - 0xa8]
push eax
mov dword [ebp - 0xa0], 0x2e
mov dword [ebp - 0xa8], edi
call esi
test ax, ax
je 0x66cf33
mov dword [0x78b938], 0
wait
push 0x66d916
jmp 0x66d8fd
lea ecx, [ebp - 0x11c]
push ecx
lea edx, [ebp - 0xa8]
push edx
mov dword [ebp - 0xa0], 0x20
mov dword [ebp - 0xa8], edi
call esi
test ax, ax
je 0x66cfa8
xor eax, eax
mov dword [0x78b938], eax
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0xa8]
push ecx
mov dword [ebp - 0x4c], 0x3fc00000
mov dword [ebp - 0x58], 5
mov dword [ebp - 0xa0], 0x78c3e8
mov dword [ebp - 0xa8], 0x4003
call fcn.006de850
lea ecx, [ebp - 0x58]
call dword [fcn.004010a8]
wait
push 0x66d916
jmp 0x66d8fd
lea edx, [ebp - 0x11c]
push edx
lea eax, [ebp - 0xa8]
mov ebx, 8
push eax
mov dword [ebp - 0xa0], ebx
mov dword [ebp - 0xa8], edi
call esi
test ax, ax
je 0x66d093
mov ecx, dword [0x78c3e0]
mov edx, dword [0x78c3e8]
mov eax, dword [0x78c3ec]
push 2
push 0x41
push ecx
mov ecx, dword [0x78c3e4]
dec edx
push edx
push eax
push ecx
mov dword [0x78b938], 2
call fcn.006bd2a0
lea edx, [ebp - 0x58]
mov dword [ebp - 0x50], eax
push edx
lea eax, [ebp - 0x68]
push eax
mov dword [ebp - 0x58], 3
call fcn.006aa740
lea ecx, [ebp - 0x68]
push ecx
lea edx, [ebp - 0xb8]
xor ebx, ebx
push edx
mov dword [ebp - 0xb0], ebx
mov dword [ebp - 0xb8], edi
call esi
lea ecx, [ebp - 0x58]
mov esi, eax
lea eax, [ebp - 0x68]
push eax
push ecx
push 2
call dword [fcn.004010d4]
add esp, 0xc
cmp si, bx
je 0x66d082
lea edx, [ebp - 0xa8]
lea ecx, [ebp - 0x58]
mov dword [ebp - 0xa0], 0x45b2ec
mov dword [ebp - 0xa8], 8
call dword [fcn.00401434]
lea edx, [ebp - 0x58]
push edx
call fcn.006dd330
lea ecx, [ebp - 0x58]
call dword [fcn.004010a8]
mov dword [0x78b938], ebx
wait
push 0x66d916
jmp 0x66d8fd
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0xa8]
push ecx
mov dword [ebp - 0xa0], 0x25
mov dword [ebp - 0xa8], edi
call esi
test ax, ax
je 0x66d0f4
mov dword [ebp - 0xa0], 0x44f53c
lea edx, [ebp - 0xa8]
lea ecx, [ebp - 0x58]
mov dword [ebp - 0xa8], ebx
call dword [fcn.00401434]
lea edx, [ebp - 0x58]
push edx
call fcn.006dd330
lea ecx, [ebp - 0x58]
call dword [fcn.004010a8]
wait
push 0x66d916
jmp 0x66d8fd
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0xa8]
push ecx
mov dword [ebp - 0xa0], 0x27
mov dword [ebp - 0xa8], edi
call esi
test ax, ax
je 0x66d125
mov dword [ebp - 0xa0], 0x44f558
jmp 0x66d0c2
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0xa8]
push ecx
mov dword [ebp - 0xa0], 0x26
mov dword [ebp - 0xa8], edi
call esi
test ax, ax
je 0x66d159
mov dword [ebp - 0xa0], 0x44f5a8
jmp 0x66d0c2
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0xa8]
push ecx
mov dword [ebp - 0xa0], 0x28
mov dword [ebp - 0xa8], edi
call esi
test ax, ax
je 0x66d18d
mov dword [ebp - 0xa0], 0x44f420
jmp 0x66d0c2
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0xa8]
push ecx
mov dword [ebp - 0xa0], 0x6a
mov dword [ebp - 0xa8], edi
call esi
test ax, ax
je 0x66d2ca
mov eax, dword [0x78e5b0]
inc eax
cmp eax, ebx
mov dword [0x78e5b0], eax
jne 0x66d1cf
mov eax, 1
mov dword [0x78e5b0], eax
dec eax
cmp eax, 6
ja case.default.0x66d626
jmp dword [eax*4 + 0x66d92c]
xor eax, eax
mov dword [ebp - 0xe0], 0xffffffff
mov dword [ebp - 0xdc], eax
mov dword [ebp - 0xe8], 0xb
mov dword [ebp - 0xe4], eax
jmp 0x66d651
xor eax, eax
mov dword [ebp - 0xe0], 0xffffffff
mov dword [ebp - 0xdc], eax
mov dword [ebp - 0xe8], 0xc
mov dword [ebp - 0xe4], eax
jmp 0x66d475
xor eax, eax
mov dword [ebp - 0xe0], 0xffffffff
mov dword [ebp - 0xdc], eax
mov dword [ebp - 0xe8], 0xd
mov dword [ebp - 0xe4], eax
jmp 0x66d6ca
xor eax, eax
mov dword [ebp - 0xe0], 0xffffffff
mov dword [ebp - 0xdc], eax
mov dword [ebp - 0xe8], 0xf
mov dword [ebp - 0xe4], eax
jmp 0x66d651
xor eax, eax
mov dword [ebp - 0xe0], 0xffffffff
mov dword [ebp - 0xdc], eax
mov dword [ebp - 0xe8], 0x10
mov dword [ebp - 0xe4], eax
jmp 0x66d475
xor eax, eax
mov dword [ebp - 0xe0], 0xffffffff
mov dword [ebp - 0xdc], eax
mov dword [ebp - 0xe8], 0x11
mov dword [ebp - 0xe4], eax
jmp 0x66d6ca
lea edx, [ebp - 0x11c]
push edx
lea eax, [ebp - 0xa8]
push eax
mov dword [ebp - 0xa0], 0x6f
mov dword [ebp - 0xa8], edi
call esi
test ax, ax
je 0x66d3f5
mov eax, dword [0x78e5b0]
dec eax
xor ecx, ecx
cmp eax, ecx
mov dword [0x78e5b0], eax
jg 0x66d30e
mov eax, 7
mov dword [0x78e5b0], eax
dec eax
cmp eax, 6
ja case.default.0x66d626
jmp dword [eax*4 + 0x66d948]
mov dword [ebp - 0xe0], 0xffffffff
mov dword [ebp - 0xdc], ecx
mov dword [ebp - 0xe8], 0xb
jmp 0x66d6c4
mov dword [ebp - 0xe0], 0xffffffff
mov dword [ebp - 0xdc], ecx
mov dword [ebp - 0xe8], 0xc
jmp 0x66d64b
mov dword [ebp - 0xe0], 0xffffffff
mov dword [ebp - 0xdc], ecx
mov dword [ebp - 0xe8], 0xd
mov dword [ebp - 0xe4], ecx
jmp 0x66d475
call fcn.00668c60
wait
push 0x66d916
jmp 0x66d8fd
mov dword [ebp - 0xe0], 0xffffffff
mov dword [ebp - 0xdc], ecx
mov dword [ebp - 0xe8], 0xf
jmp 0x66d6c4
mov dword [ebp - 0xe0], 0xffffffff
mov dword [ebp - 0xdc], ecx
mov dword [ebp - 0xe8], 0x10
jmp 0x66d64b
mov dword [ebp - 0xe0], 0xffffffff
mov dword [ebp - 0xdc], ecx
mov dword [ebp - 0xe8], 0x11
mov dword [ebp - 0xe4], ecx
jmp 0x66d475
lea ecx, [ebp - 0x11c]
push ecx
lea edx, [ebp - 0xa8]
push edx
mov dword [ebp - 0xa0], 0x6b
mov dword [ebp - 0xa8], edi
call esi
test ax, ax
je 0x66d5d3
call fcn.00668160
mov eax, dword [0x78e5b4]
inc eax
cmp eax, ebx
mov dword [0x78e5b4], eax
jne 0x66d43c
mov eax, 1
mov dword [0x78e5b4], eax
dec eax
cmp eax, 6
ja case.default.0x66d626
jmp dword [eax*4 + 0x66d964]
mov dword [ebp - 0xe0], 0xffffffff
mov dword [ebp - 0xdc], 2
mov dword [ebp - 0xe8], 0x4b
mov dword [ebp - 0xe4], 0
lea eax, [ebp - 0xe0]
push eax
lea ecx, [ebp - 0xdc]
push ecx
lea edx, [ebp - 0xe8]
push edx
lea eax, [ebp - 0xe4]
push eax
call fcn.005eca30
wait
push 0x66d916
jmp 0x66d8fd
lea ecx, [ebp - 0xe0]
push ecx
lea edx, [ebp - 0xdc]
push edx
lea eax, [ebp - 0xe8]
push eax
lea ecx, [ebp - 0xe4]
push ecx
mov dword [ebp - 0xe0], 0xffffffff
mov dword [ebp - 0xdc], 2
mov dword [ebp - 0xe8], 0x4a
mov dword [ebp - 0xe4], 0
call fcn.005eca30
wait
push 0x66d916
jmp 0x66d8fd
lea edx, [ebp - 0xe0]
push edx
lea eax, [ebp - 0xdc]
push eax
lea ecx, [ebp - 0xe8]
push ecx
lea edx, [ebp - 0xe4]
push edx
mov dword [ebp - 0xe0], 0xffffffff
mov dword [ebp - 0xdc], 2
mov dword [ebp - 0xe8], 0x49
mov dword [ebp - 0xe4], 0
call fcn.005eca30
wait
push 0x66d916
jmp 0x66d8fd
call fcn.00668160
wait
push 0x66d916
jmp 0x66d8fd
mov dword [ebp - 0xe0], 0xffffffff
mov dword [ebp - 0xdc], 2
mov dword [ebp - 0xe8], 0x4d
jmp 0x66d46b
mov dword [ebp - 0xe0], 0xffffffff
mov dword [ebp - 0xdc], 2
mov dword [ebp - 0xe8], 0x4e
mov dword [ebp - 0xe4], 0
jmp 0x66d6ca
mov dword [ebp - 0xe0], 0xffffffff
mov dword [ebp - 0xdc], 2
mov dword [ebp - 0xe8], 0x4f
mov dword [ebp - 0xe4], 0
jmp 0x66d651
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0xa8]
push ecx
mov dword [ebp - 0xa0], 0x6d
mov dword [ebp - 0xa8], edi
call esi
test ax, ax
je case.default.0x66d626
call fcn.00668160
mov eax, dword [0x78e5b4]
dec eax
xor ecx, ecx
cmp eax, ecx
mov dword [0x78e5b4], eax
jg 0x66d61c
mov eax, 7
mov dword [0x78e5b4], eax
dec eax
cmp eax, 6
ja case.default.0x66d626
jmp dword [eax*4 + 0x66d980]
mov dword [ebp - 0xe0], 0xffffffff
mov dword [ebp - 0xdc], 2
mov dword [ebp - 0xe8], 0x4b
mov dword [ebp - 0xe4], ecx
lea edx, [ebp - 0xe0]
push edx
lea eax, [ebp - 0xdc]
push eax
lea ecx, [ebp - 0xe8]
push ecx
lea edx, [ebp - 0xe4]
push edx
call fcn.005eca30
wait
push 0x66d916
jmp 0x66d8fd
mov dword [ebp - 0xe0], 0xffffffff
mov dword [ebp - 0xdc], 2
mov dword [ebp - 0xe8], 0x4a
mov dword [ebp - 0xe4], ecx
jmp 0x66d475
mov dword [ebp - 0xe0], 0xffffffff
mov dword [ebp - 0xdc], 2
mov dword [ebp - 0xe8], 0x49
mov dword [ebp - 0xe4], ecx
lea ecx, [ebp - 0xe0]
push ecx
lea edx, [ebp - 0xdc]
push edx
lea eax, [ebp - 0xe8]
push eax
lea ecx, [ebp - 0xe4]
push ecx
call fcn.005eca30
wait
push 0x66d916
jmp 0x66d8fd
mov dword [ebp - 0xe0], 0xffffffff
mov dword [ebp - 0xdc], 2
mov dword [ebp - 0xe8], 0x4d
jmp 0x66d64b
mov dword [ebp - 0xe0], 0xffffffff
mov dword [ebp - 0xdc], 2
mov dword [ebp - 0xe8], 0x4e
mov dword [ebp - 0xe4], ecx
jmp 0x66d475
mov dword [ebp - 0xe0], 0xffffffff
mov dword [ebp - 0xdc], 2
mov dword [ebp - 0xe8], 0x4f
jmp 0x66d6c4
mov dword [ebp - 0xe0], 0xffffffff
mov dword [ebp - 0xdc], 1
mov dword [ebp - 0xe8], 0x32
jmp 0x66d86c
mov dword [ebp - 0xe0], 0xffffffff
mov dword [ebp - 0xdc], 1
mov dword [ebp - 0xe8], 0x31
jmp 0x66d86c
mov dword [ebp - 0xe0], 0xffffffff
mov dword [ebp - 0xdc], 1
mov dword [ebp - 0xe8], 0x30
jmp 0x66d86c
mov dword [ebp - 0xe0], 0xffffffff
mov dword [ebp - 0xdc], 1
mov dword [ebp - 0xe8], 0x2f
jmp 0x66d86c
mov dword [ebp - 0xe0], 0xffffffff
mov dword [ebp - 0xdc], 1
mov dword [ebp - 0xe8], 0x2e
jmp 0x66d86c
mov dword [ebp - 0xe0], 0xffffffff
mov dword [ebp - 0xdc], 1
mov dword [ebp - 0xe8], 0x2d
jmp 0x66d86c
mov dword [ebp - 0xe0], 0xffffffff
mov dword [ebp - 0xdc], 1
mov dword [ebp - 0xe8], 0x2c
jmp 0x66d86c
mov dword [ebp - 0xe0], 0xffffffff
mov dword [ebp - 0xdc], 1
mov dword [ebp - 0xe8], 0x2b
lea edx, [ebp - 0xe0]
push edx
lea eax, [ebp - 0xdc]
push eax
lea ecx, [ebp - 0xe8]
push ecx
lea edx, [ebp - 0xe4]
push edx
mov dword [ebp - 0xe4], 0
call fcn.005eca30
mov eax, dword [ebp + 0xc]
lea ecx, [ebp - 0xa8]
push ecx
push ebx
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0xa8], 0x4002
call fcn.006699e0
wait
push 0x66d916
jmp 0x66d8fd
mov esi, dword [fcn.004010a8]
lea ecx, [ebp - 0x11c]
call esi
lea ecx, [ebp - 0x20]
call esi
lea ecx, [ebp - 0x38]
call esi
ret