Function at 0x1554590
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x858
push ebx
push esi
push edi
mov dword [ebp - 0x14], 0
push 0x100
lea eax, [ebp - 0x114]
push eax
push 0
call dword [0x1652480]
push eax
call dword [0x1652514]
lea ecx, [ebp - 0x114]
push ecx
push 0x162d170
lea edx, [ebp - 0x214]
push edx
call fcn.015c24f5
add esp, 0xc
push 0x84
push 0
push 0x164a160
call fcn.015c2570
add esp, 0xc
mov eax, dword [0x15d1ef8]
mov dword [0x164a1ae], eax
mov dword [0x1645da4], 0
mov ecx, dword [0x164a1ae]
and ecx, 0x400
test ecx, ecx
je 0x155461b
mov dword [0x1645da4], 1
mov dword [0x164c860], 0
mov edx, dword [0x164a1ae]
and edx, 0x200
test edx, edx
je 0x155463f
mov dword [0x164c860], 1
jmp 0x155d238
jmp 0x155d25f
mov ax, word [0x16455ec]
add ax, 1
mov word [0x16455ec], ax
call fcn.015b1020
call fcn.015b12d0
push 0x800
push 0
push 0x164c8c0
call fcn.015c2570
add esp, 0xc
push 0x8001
call dword [0x164f834]
mov dword [0x16455d4], eax
mov ecx, dword [0x164a1ae]
and ecx, 2
test ecx, ecx
je 0x155d5e4
push 0x18
push 0x162d17c
push 0x164b360
call fcn.015c21c0
add esp, 0xc
mov dword [0x1646060], 0x16
jmp 0x155d2dd
mov edx, dword [0x1646060]
sub edx, 1
mov dword [0x1646060], edx
cmp dword [0x1646060], 0
jl 0x155d30a
mov eax, dword [0x1646060]
mov ecx, dword [0x1646060]
mov dl, byte [eax + 0x164b360]
xor dl, byte [ecx + 0x164b361]
mov eax, dword [0x1646060]
mov byte [eax + 0x164b360], dl
jmp 0x155d2ce
push 0x18
push 0x164b360
push 0x164af00
call fcn.015c21c0
add esp, 0xc
mov byte [0x164af18], 0
push 0x16456cc
push 0x20019
push 0
push 0x164af00
push 0x80000002
call dword [0x1646540]
test eax, eax
jne 0x155d35c
mov ecx, dword [0x16456cc]
push ecx
call dword [0x16466ac]
mov dword [0x15f1b64], 1
cmp dword [0x15f1b64], 0
je 0x155d5e4
push 0x1621e58
call fcn.015ac1c0
push 0
call dword [0x1648f40]
mov dword [ebp - 0x218], eax
mov dword [ebp - 0x258], 0
mov dword [ebp - 0x254], 0x15b9d40
mov dword [ebp - 0x250], 0
mov dword [ebp - 0x24c], 0
mov edx, dword [ebp - 0x218]
mov dword [ebp - 0x248], edx
mov dword [ebp - 0x244], 0
mov dword [ebp - 0x240], 0
mov dword [ebp - 0x23c], 6
mov dword [ebp - 0x238], 0x162d198
mov dword [ebp - 0x234], 0x162d1a4
lea eax, [ebp - 0x258]
push eax
call dword [0x164bae0]
mov word [ebp - 0x2a4], ax
push 0x10
call dword [0x164b8c0]
mov dword [ebp - 0x230], eax
push 0x11
call dword [0x164b8c0]
mov dword [ebp - 0x25c], eax
mov dword [0x164c87c], 0x12c
mov dword [0x164d1a0], 0xc8
mov dword [0x164577c], 0
push 0
mov ecx, dword [ebp - 0x218]
push ecx
push 0
push 0
mov edx, dword [0x164d1a0]
push edx
mov eax, dword [0x164c87c]
push eax
mov eax, dword [ebp - 0x25c]
sub eax, dword [0x164d1a0]
cdq
sub eax, edx
sar eax, 1
push eax
mov eax, dword [ebp - 0x230]
sub eax, dword [0x164c87c]
cdq
sub eax, edx
sar eax, 1
push eax
push 0x80040000
push 0x162d1b0
push 0x162d1bc
push 0x80
call dword [0x164ba34]
mov dword [0x164577c], eax
cmp dword [0x164577c], 0
je 0x155d5e4
push 0xa
mov ecx, dword [0x164577c]
push ecx
call dword [0x164aef0]
lea edx, [ebp - 0x29c]
push edx
mov eax, dword [0x164577c]
push eax
call dword [0x164d5b0]
mov dword [ebp - 0x2a0], eax
push 0x164ae70
mov ecx, dword [0x164577c]
push ecx
call dword [0x16466a4]
lea edx, [ebp - 0x2b0]
push edx
lea eax, [ebp - 0x2ac]
push eax
call fcn.015abdb0
mov ecx, dword [ebp - 0x2b0]
push ecx
mov edx, dword [ebp - 0x2ac]
push edx
push 0xa
mov eax, dword [0x164c87c]
sub eax, dword [ebp - 0x2ac]
sub eax, 0x14
push eax
mov ecx, dword [ebp - 0x2a0]
push ecx
call fcn.015abe10
push 0x10
push 0x164ae70
lea edx, [ebp - 0x228]
push edx
call fcn.015c21c0
add esp, 0xc
mov eax, dword [0x164ae7c]
sub eax, dword [0x164ae74]
cdq
sub eax, edx
sar eax, 1
mov ecx, dword [0x164ae74]
lea edx, [ecx + eax - 0x28]
mov dword [ebp - 0x224], edx
push 0x10
lea eax, [ebp - 0x228]
push eax
push 0x164ae70
call fcn.015c21c0
add esp, 0xc
push 0x15d13f8
call fcn.015afb60
push 0x15d13f8
call fcn.015afff0
lea ecx, [ebp - 0x29c]
push ecx
mov edx, dword [0x164577c]
push edx
call dword [0x164f6e0]
lea eax, [ebp - 0x228]
push eax
mov ecx, dword [0x164577c]
push ecx
call dword [0x16466a4]
push 1
lea edx, [ebp - 0x228]
push edx
mov eax, dword [0x164577c]
push eax
call dword [0x164c898]
mov ecx, dword [0x164577c]
push ecx
call dword [0x164b344]
lea edx, [ebp - 0x22c]
push edx
push 0
push 0
push 0x15ba010
push 0x3e8
push 0
call dword [0x1652478]
mov dword [ebp - 0x2a8], eax
mov ax, word [0x16455ec]
add ax, 1
mov word [0x16455ec], ax
call fcn.015c0520
push 0
call fcn.015c0970
mov dword [ebp - 0x2b4], eax
cmp dword [ebp - 0x2b4], 0
je 0x155d653
mov ecx, dword [ebp - 0x2b4]
push ecx
call fcn.015c2e70
add esp, 4
test eax, eax
jbe 0x155d653
push 0x80
mov edx, dword [ebp - 0x2b4]
push edx
push 0x15d05f8
call fcn.015afc80
push 0
push 0x15d05f8
call fcn.015c0030
push 0x80
push 0x15d05f8
call fcn.015afa80
push 5
call fcn.015c0970
mov dword [ebp - 0x2b4], eax
cmp dword [ebp - 0x2b4], 0
je 0x155d6ad
mov eax, dword [ebp - 0x2b4]
push eax
call fcn.015c2e70
add esp, 4
test eax, eax
jbe 0x155d6ad
push 0x400
mov ecx, dword [ebp - 0x2b4]
push ecx
push 0x15d16f8
call fcn.015afc80
push 0
push 0x15d16f8
call fcn.015c0030
push 0x400
push 0x15d16f8
call fcn.015afa80
push 6
call fcn.015c0970
mov dword [ebp - 0x2b4], eax
cmp dword [ebp - 0x2b4], 0
je 0x155d707
mov edx, dword [ebp - 0x2b4]
push edx
call fcn.015c2e70
add esp, 4
test eax, eax
jbe 0x155d707
push 0x400
mov eax, dword [ebp - 0x2b4]
push eax
push 0x15d1af8
call fcn.015afc80
push 0
push 0x15d1af8
call fcn.015c0030
push 0x400
push 0x15d1af8
call fcn.015afa80
push 1
call fcn.015c0970
mov dword [ebp - 0x2b4], eax
cmp dword [ebp - 0x2b4], 0
je 0x155d761
mov ecx, dword [ebp - 0x2b4]
push ecx
call fcn.015c2e70
add esp, 4
test eax, eax
jbe 0x155d761
push 0x80
mov edx, dword [ebp - 0x2b4]
push edx
push 0x15d06f8
call fcn.015afc80
push 0
push 0x15d06f8
call fcn.015c0030
push 0x80
push 0x15d06f8
call fcn.015afa80
push 2
call fcn.015c0970
mov dword [ebp - 0x2b4], eax
cmp dword [ebp - 0x2b4], 0
je 0x155d7bb
mov eax, dword [ebp - 0x2b4]
push eax
call fcn.015c2e70
add esp, 4
test eax, eax
jbe 0x155d7bb
push 0x80
mov ecx, dword [ebp - 0x2b4]
push ecx
push 0x15d0778
call fcn.015afc80
push 0
push 0x15d0778
call fcn.015c0030
push 0x80
push 0x15d0778
call fcn.015afa80
push 3
call fcn.015c0970
mov dword [ebp - 0x2b4], eax
cmp dword [ebp - 0x2b4], 0
je 0x155d815
mov edx, dword [ebp - 0x2b4]
push edx
call fcn.015c2e70
add esp, 4
test eax, eax
jbe 0x155d815
push 0x80
mov eax, dword [ebp - 0x2b4]
push eax
push 0x15d08f8
call fcn.015afc80
push 0
push 0x15d08f8
call fcn.015c0030
push 0x80
push 0x15d08f8
call fcn.015afa80
push 4
call fcn.015c0970
mov dword [ebp - 0x2b4], eax
cmp dword [ebp - 0x2b4], 0
je 0x155d86f
mov ecx, dword [ebp - 0x2b4]
push ecx
call fcn.015c2e70
add esp, 4
test eax, eax
jbe 0x155d86f
push 0x80
mov edx, dword [ebp - 0x2b4]
push edx
push 0x15d0cf8
call fcn.015afc80
push 0
push 0x15d0cf8
call fcn.015c0030
push 0x80
push 0x15d0cf8
call fcn.015afa80
call fcn.015c08b0
mov eax, dword [0x164a1ae]
and eax, 0x80
test eax, eax
je 0x155da9f
push 0x15d15f8
call fcn.015afb60
push 0x15d15f8
lea ecx, [ebp - 0x334]
push ecx
call fcn.015c2d80
add esp, 8
push 0x15d15f8
call fcn.015afb20
cmp dword [0x15f1b54], 0
je 0x155d8dc
lea edx, [ebp - 0x334]
push edx
push 0x162d1c8
push 0x1647800
call fcn.015c24f5
add esp, 0xc
push 0x1647800
push 0
call fcn.01549920
lea eax, [ebp - 0x334]
push eax
call fcn.015afbd0
mov dword [ebp - 0x338], eax
cmp dword [ebp - 0x338], 0
je 0x155da71
push 0xff
push 0x162d224
call fcn.01549880
push eax
mov ecx, dword [ebp - 0x338]
push ecx
call fcn.015afce0
push 1
push 0x162d234
call fcn.01549880
push eax
mov edx, dword [ebp - 0x338]
push edx
call fcn.015afce0
push 2
push 0x162d244
call fcn.01549880
push eax
mov eax, dword [ebp - 0x338]
push eax
call fcn.015afce0
push 5
push 0x162d250
call fcn.01549880
push eax
mov ecx, dword [ebp - 0x338]
push ecx
call fcn.015afce0
push 0xd
push 0x162d260
call fcn.01549880
push eax
mov edx, dword [ebp - 0x338]
push edx
call fcn.015afce0
push 0x14
push 0x162d274
call fcn.01549880
push eax
mov eax, dword [ebp - 0x338]
push eax
call fcn.015afce0
push 0x13
push 0x162d284
call fcn.01549880
push eax
mov ecx, dword [ebp - 0x338]
push ecx
call fcn.015afce0
push 0x1a
push 0x162d294
call fcn.01549880
push eax
mov edx, dword [ebp - 0x338]
push edx
call fcn.015afce0
push 0x1b
push 0x162d2a0
call fcn.01549880
push eax
mov eax, dword [ebp - 0x338]
push eax
call fcn.015afce0
push 0x1c
push 0x162d2b0
call fcn.01549880
push eax
mov ecx, dword [ebp - 0x338]
push ecx
call fcn.015afce0
push 0x1d
push 0x162d2c0
call fcn.01549880
push eax
mov edx, dword [ebp - 0x338]
push edx
call fcn.015afce0
push 0x1e
push 0x162d2cc
call fcn.01549880
push eax
mov eax, dword [ebp - 0x338]
push eax
call fcn.015afce0
push 0x100
push 0x162d2dc
call fcn.01549880
push eax
mov ecx, dword [ebp - 0x338]
push ecx
call fcn.015afce0
push 0x101
push 0x162d2f4
call fcn.01549880
push eax
mov edx, dword [ebp - 0x338]
push edx
call fcn.015afce0
mov eax, dword [ebp - 0x338]
push eax
call dword [0x16466ac]
jmp 0x155da9f
cmp dword [0x15f1b54], 0
je 0x155da9f
lea ecx, [ebp - 0x334]
push ecx
push 0x162d308
push 0x1647800
call fcn.015c24f5
add esp, 0xc
push 0x1647800
push 0
call fcn.01549920
jmp 0x1566766
mov edx, dword [ebp + 0x10]
push edx
lea eax, [ebp - 0x73c]
push eax
call fcn.015c2d80
add esp, 8
lea ecx, [ebp - 0x73c]
push ecx
call fcn.015cc46d
add esp, 4
push 0x162d344
call fcn.01549880
push eax
lea edx, [ebp - 0x73c]
push edx
call fcn.015c38e0
add esp, 8
mov dword [ebp - 0x748], eax
cmp dword [ebp - 0x748], 0
je 0x15668be
mov dword [0x15f1b54], 1
push 0x162d354
call fcn.01549880
push eax
call fcn.015c2e70
add esp, 4
mov dword [ebp - 0x744], eax
mov eax, dword [ebp - 0x748]
lea ecx, [ebp - 0x73c]
sub eax, ecx
mov edx, dword [ebp + 0x10]
add edx, eax
mov dword [ebp - 0x33c], edx
mov eax, dword [ebp - 0x748]
push eax
call fcn.015c2e70
add esp, 4
sub eax, dword [ebp - 0x744]
mov dword [ebp - 0x740], eax
mov ecx, dword [ebp - 0x740]
push ecx
mov edx, dword [ebp - 0x744]
mov eax, dword [ebp - 0x748]
lea ecx, [eax + edx + 1]
push ecx
mov edx, dword [ebp - 0x748]
push edx
call fcn.015c35a0
add esp, 0xc
mov eax, dword [ebp - 0x740]
push eax
mov ecx, dword [ebp - 0x744]
mov edx, dword [ebp - 0x33c]
lea eax, [edx + ecx + 1]
push eax
mov ecx, dword [ebp - 0x33c]
push ecx
call fcn.015c35a0
add esp, 0xc
mov edx, dword [ebp - 0x740]
mov eax, dword [ebp - 0x748]
lea ecx, [eax + edx - 1]
mov dword [ebp - 0x748], ecx
mov edx, dword [ebp - 0x740]
mov eax, dword [ebp - 0x33c]
lea ecx, [eax + edx - 1]
mov dword [ebp - 0x33c], ecx
mov edx, dword [ebp - 0x744]
add edx, 1
push edx
push 0
mov eax, dword [ebp - 0x748]
push eax
call fcn.015c2570
add esp, 0xc
mov ecx, dword [ebp - 0x744]
add ecx, 1
push ecx
push 0
mov edx, dword [ebp - 0x33c]
push edx
call fcn.015c2570
add esp, 0xc
jmp 0x15668c8
mov dword [0x15f1b54], 0
mov eax, dword [0x164a1ae]
and eax, 0x40
test eax, eax
je 0x15668de
mov dword [0x15f1b54], 1
cmp dword [0x15f1b54], 0
je 0x1566af7
push 0x15f2e90
call fcn.015bfef0
mov dword [ebp - 0x74c], eax
mov ecx, dword [ebp - 0x74c]
push ecx
call fcn.015bfee0
push eax
push 0x164c460
call fcn.015c2d80
add esp, 8
mov edx, dword [ebp - 0x74c]
push edx
call fcn.015bff40
cmp dword [0x16457c8], 0
jne 0x1566934
call fcn.015bae90
mov dword [0x16457c8], eax
push 0x80
push 0x15d05f8
lea eax, [ebp - 0x7cc]
push eax
call fcn.015c21c0
add esp, 0xc
mov dword [0x1646060], 0x7e
jmp 0x1566968
mov ecx, dword [0x1646060]
sub ecx, 1
mov dword [0x1646060], ecx
cmp dword [0x1646060], 0
jl 0x1566999
mov edx, dword [0x1646060]
mov eax, dword [0x1646060]
mov cl, byte [ebp + edx - 0x7cc]
xor cl, byte [ebp + eax - 0x7cb]
mov edx, dword [0x1646060]
mov byte [ebp + edx - 0x7cc], cl
jmp 0x1566959
mov byte [ebp - 0x74c], 0
mov dword [0x1646060], 0x3fe
jmp 0x15669b9
mov eax, dword [0x1646060]
sub eax, 1
mov dword [0x1646060], eax
cmp dword [0x1646060], 0
jl 0x15669e8
mov ecx, dword [0x1646060]
mov edx, dword [0x1646060]
mov al, byte [ecx + 0x15d16f8]
xor al, byte [edx + 0x15d16f9]
mov ecx, dword [0x1646060]
mov byte [ecx + 0x15d16f8], al
jmp 0x15669ac
push 0x400
push 0x15d16f8
lea edx, [ebp - 0x73c]
push edx
call fcn.015c21c0
add esp, 0xc
mov byte [ebp - 0x33c], 0
push 0x44
lea eax, [ebp - 0x7cc]
push eax
lea ecx, [ebp - 0x73c]
push ecx
push 0
call fcn.015aebd0
cmp eax, 6
je 0x1566a47
push 7
call fcn.01548790
cmp dword [0x15f1b54], 0
je 0x1566a40
push 0x162d364
push 4
call fcn.01549920
push 0
call fcn.015c20de
push 0x1645db0
push 0x164ad00
push 0
push 0
push 0
push 1
push 0
push 0
push 0x164c460
push 0
call dword [0x164b300]
cmp eax, 1
jne 0x1566af7
mov dword [0x1646060], 0x3fe
jmp 0x1566a8e
mov edx, dword [0x1646060]
sub edx, 1
mov dword [0x1646060], edx
cmp dword [0x1646060], 0
jl 0x1566abb
mov eax, dword [0x1646060]
mov ecx, dword [0x1646060]
mov dl, byte [eax + 0x15d1af8]
xor dl, byte [ecx + 0x15d1af9]
mov eax, dword [0x1646060]
mov byte [eax + 0x15d1af8], dl
jmp 0x1566a7f
push 0x400
push 0x15d1af8
lea ecx, [ebp - 0x73c]
push ecx
call fcn.015c21c0
add esp, 0xc
mov byte [ebp - 0x33c], 0
lea edx, [ebp - 0x7cc]
push edx
push 0x34
call fcn.01549920
lea eax, [ebp - 0x73c]
push eax
push 0x33
call fcn.01549920
cmp dword [0x15f1b54], 0
je 0x1566b0c
push 0x162d36c
push 0
call fcn.01549920
mov ecx, dword [0x164a1ae]
and ecx, 0x2000
test ecx, ecx
je 0x1566b31
cmp dword [0x15f1b54], 0
je 0x1566b31
push 0x162d394
push 0
call fcn.01549920
push 0x1606138
call fcn.015bfef0
mov dword [ebp - 0x7d0], eax
mov edx, dword [ebp - 0x7d0]
push edx
call fcn.015bfee0
push eax
call fcn.015aebf0
test eax, eax
je 0x1566b86
cmp dword [0x15f1b54], 0
je 0x1566b84
mov eax, dword [0x160613c]
push eax
push 0x162d3cc
push 0x1647800
call fcn.015c24f5
add esp, 0xc
push 0x1647800
push 0
call fcn.01549920
jmp 0x1566bb4
cmp dword [0x15f1b54], 0
je 0x1566bb4
mov ecx, dword [0x160613c]
push ecx
push 0x162d438
push 0x1647800
call fcn.015c24f5
add esp, 0xc
push 0x1647800
push 0
call fcn.01549920
mov edx, dword [ebp - 0x7d0]
push edx
call fcn.015bff40
mov eax, dword [0x164a1ae]
and eax, 0x20
test eax, eax
je 0x1566beb
mov dword [0x16222d8], 0
cmp dword [0x15f1b54], 0
je 0x1566beb
push 0x162d494
push 0
call fcn.01549920
mov dword [0x15f2e04], 0x15d0594
mov dword [0x164f7c8], 1
mov ecx, dword [0x164f7c8]
mov dword [0x164e618], ecx
mov edx, dword [0x164e618]
mov dword [0x1645d10], edx
mov dword [0x16466a8], 1
mov eax, dword [0x16466a8]
mov dword [0x164aee4], eax
mov ecx, dword [0x164aee4]
mov dword [0x16466c4], ecx
mov dword [0x164c86c], 0x15cfd58
call dword [0x1648f94]
mov dword [0x1645590], eax
call dword [0x164b314]
mov dword [0x1645598], eax
cmp dword [0x15f1b54], 0
je 0x1566c6c
push 0x162d53c
push 2
call fcn.01549920
push 0xb
push 0x162d5c4
push 0x164b360
call fcn.015c21c0
add esp, 0xc
mov dword [0x1646060], 9
jmp 0x1566c9b
mov edx, dword [0x1646060]
sub edx, 1
mov dword [0x1646060], edx
cmp dword [0x1646060], 0
jl 0x1566cc8
mov eax, dword [0x1646060]
mov ecx, dword [0x1646060]
mov dl, byte [eax + 0x164b360]
xor dl, byte [ecx + 0x164b361]
mov eax, dword [0x1646060]
mov byte [eax + 0x164b360], dl
jmp 0x1566c8c
push 0xb
push 0x164b360
push 0x164af00
call fcn.015c21c0
add esp, 0xc
mov byte [0x164af0b], 0
push 0x164af00
push 0
push 0
call dword [0x164e61c]
mov dword [0x164558c], eax
cmp dword [0x164558c], 0
jne 0x1566d31
cmp dword [0x15f1b54], 0
je 0x1566d15
push 0x162d5d0
push 0
call fcn.01549920
cmp dword [0x15f1b54], 0
je 0x1566d2a
push 0x1645818
push 4
call fcn.01549920
push 0
call fcn.015c20de
call dword [0x164ae60]
cmp eax, 0xb7
jne 0x1566e02
cmp dword [0x164558c], 0
je 0x1566d65
mov ecx, dword [0x164558c]
push ecx
call dword [0x1646544]
mov edx, dword [0x164558c]
push edx
call dword [0x1645d14]
cmp dword [0x1645574], 0
je 0x1566d7a
mov eax, dword [0x1645574]
push eax
call dword [0x1645da0]
cmp dword [0x1645578], 0
je 0x1566d90
mov ecx, dword [0x1645578]
push ecx
call dword [0x1645da0]
cmp dword [0x164557c], 0
je 0x1566da6
mov edx, dword [0x164557c]
push edx
call dword [0x1645da0]
cmp dword [0x1645580], 0
je 0x1566dbb
mov eax, dword [0x1645580]
push eax
call dword [0x1645da0]
cmp dword [0x1645584], 0
je 0x1566dd1
mov ecx, dword [0x1645584]
push ecx
call dword [0x1645da0]
cmp dword [0x15f1b54], 0
je 0x1566de6
push 0x162d658
push 0x20
call fcn.01549920
cmp dword [0x15f1b54], 0
je 0x1566dfb
push 0x164581c
push 4
call fcn.01549920
push 0
call fcn.015c20de
cmp dword [0x15f1b54], 0
je 0x1566e17
push 0x162d6c0
push 2
call fcn.01549920
jmp 0x156fba8
push 0x15480c0
push dword fs:[0]
mov eax, dword fs:[0]
mov dword [0x16466bc], eax
mov dword fs:[0], esp
mov eax, 0x15a7318
mov dword [0x1645cec], eax
mov dword [0x1646064], 0x1548790
cmp dword [0x1646064], 0x15480b0
jbe 0x156fbf2
mov dword [ebp - 0x854], 0x15480b0
jmp 0x156fbfe
mov edx, dword [0x1646064]
mov dword [ebp - 0x854], edx
mov eax, dword [ebp - 0x854]
mov dword [0x1646064], eax
mov dword [0x16456dc], 1
push ebp
mov ebp, esp
pushf
xor byte [ebp - 1], 1
popf
pop ebp
push 0xffffffffffffffff
mov ecx, dword [0x164558c]
push ecx
call dword [0x164d3c0]
mov eax, 0x156fcb8
mov dword [0x164b9ec], eax
mov eax, 0x158260a
mov dword [0x164f7b0], eax
cmp dword [0x15f1b54], 0
je 0x156fc57
push 0x162d738
push 2
call fcn.01549920
cmp dword [0x164577c], 0
je 0x156fc79
mov edx, dword [0x164a1ae]
and edx, 2
test edx, edx
je 0x156fc79
mov eax, dword [0x164577c]
push eax
call dword [0x164b344]
call fcn.01548fa0
mov dword [0x164ba80], 0x15480c0
mov ecx, dword [0x16466bc]
mov dword [0x1648fd4], ecx
call dword [0x164b9f0]
mov dword [0x16457b4], eax
mov edx, dword [0x16457b4]
mov dword [0x16457b0], edx
call fcn.015512f0
mov eax, 2
mov byte [eax], 0x50
mov edi, 0x403000
mov esi, 0x404120
mov eax, dword [0x1646558]
push eax
call fcn.015c25c8
add esp, 4
mov dword [0x1645ffc], 0
jmp 0x156fceb
mov ecx, dword [0x1645ffc]
add ecx, 1
mov dword [0x1645ffc], ecx
cmp dword [0x1645ffc], 0xc
jge 0x156fd6a
mov edx, dword [0x1645ffc]
push edx
call fcn.015ba1d0
mov dword [ebp - 0x7d4], eax
mov eax, dword [ebp - 0x7d4]
mov dword [ebp - 0x858], eax
cmp dword [ebp - 0x858], 1
je 0x156fd2f
cmp dword [ebp - 0x858], 2
je 0x156fd42
cmp dword [ebp - 0x858], 3
je 0x156fd55
jmp 0x156fd65
mov ecx, dword [0x1645ffc]
mov dword [ecx*4 + 0x15eed48], 0x15c1150
jmp 0x156fd65
mov edx, dword [0x1645ffc]
mov dword [edx*4 + 0x15eed48], 0x15c1310
jmp 0x156fd65
mov eax, dword [0x1645ffc]
mov dword [eax*4 + 0x15eed48], 0x15c1390
jmp 0x156fcdc
push 0
push 0
push 0
push 0
call dword [0x16464d8]
mov dword [0x1645570], eax
call fcn.01554550
push 0x100
call fcn.01548730
mov byte [0x16456e8], al
push 0x100
call fcn.01548730
mov byte [0x16456f0], al
mov ecx, dword [0x16455d0]
or ecx, 0x40000
mov dword [0x16455d0], ecx
mov edx, dword [0x16455d0]
or edx, 0x1000000
mov dword [0x16455d0], edx
cmp dword [0x15f1b54], 0
je 0x156fdd9
push 0x162d7c0
push 2
call fcn.01549920
call fcn.015b23f0
jmp 0x156fdfd
call fcn.015af950
jmp 0x1578c92
cmp dword [0x16455a4], 0
jne 0x1578cc0
cmp dword [0x164c868], 0
je 0x1578cc0
cmp dword [0x15f1b54], 0
je 0x1578cb9
push 0x162d7e8
push 2
call fcn.01549920
call fcn.015b6900
jmp 0x1578cf0
cmp dword [0x15f1b54], 0
je 0x1578cf0
cmp dword [0x16455a4], 0
jne 0x1578cf0
push 0x162d850
push 0x164d600
call fcn.015c2d80
add esp, 8
push 0x164d600
push 2
call fcn.01549920
cmp dword [0x15f1b54], 0
je 0x1578d05
push 0x162d928
push 2
call fcn.01549920
call dword [0x164bb1c]
mov dword [0x164655c], eax
mov eax, dword [0x164655c]
add eax, 0x1d4c0
cmp eax, 0x1d4c0
jae 0x1578d2b
mov dword [0x164655c], 0xffffffff
mov ecx, fcn.0154d720
sub ecx, fcn.015499b0
mov dword [0x164f7f4], ecx
mov dword [0x164654c], 0x15499b0
push 4
call fcn.015c2631
add esp, 4
mov dword [0x1645d0c], eax
mov edx, dword [0x1645d0c]
mov dword [edx], 0
push 4
call fcn.015c2631
add esp, 4
mov dword [0x16464e8], eax
mov eax, dword [0x16464e8]
mov dword [eax], 0
cmp dword [0x164577c], 0
je 0x1578d9e
mov ecx, dword [0x164a1ae]
and ecx, 2
test ecx, ecx
je 0x1578d9e
mov edx, dword [0x164577c]
push edx
call dword [0x164b344]
mov dword [0x1645ffc], 0
jmp 0x1578db7
mov eax, dword [0x1645ffc]
add eax, 1
mov dword [0x1645ffc], eax
mov ecx, dword [0x164f7f4]
shr ecx, 2
cmp dword [0x1645ffc], ecx
jge 0x1578de9
mov edx, dword [0x1645d0c]
mov eax, dword [edx]
mov ecx, dword [0x1645ffc]
mov edx, dword [0x164654c]
add eax, dword [edx + ecx*4]
mov ecx, dword [0x1645d0c]
mov dword [ecx], eax
jmp 0x1578daa
cmp dword [0x16455a4], 0
je 0x1578e68
cmp dword [0x16464dc], 5
jb 0x1578e68
cmp dword [0x15f1b54], 0
je 0x1578e10
push 0x162d970
push 2
call fcn.01549920
call fcn.01551180
test eax, eax
jne 0x1578e49
mov dword [0x164574c], 1
mov edx, dword [0x1645604]
or edx, 2
mov dword [0x1645604], edx
cmp dword [0x15f1b54], 0
je 0x1578e47
push 0x162d9d8
push 3
call fcn.01549920
jmp 0x1578e68
mov dword [0x164574c], 0
cmp dword [0x15f1b54], 0
je 0x1578e68
push 0x162db10
push 0
call fcn.01549920
push 0x1548770
call dword [0x1645e74]
mov dword [0x16456dc], 1
cmp dword [0x15f1b54], 0
je 0x1578e92
push 0x162dbe8
push 2
call fcn.01549920
call fcn.015b47b0
cmp dword [0x15f1b54], 0
je 0x1578eac
push 0x162dc80
push 2
call fcn.01549920
cmp dword [0x164577c], 0
je 0x1578ece
mov eax, dword [0x164a1ae]
and eax, 2
test eax, eax
je 0x1578ece
mov ecx, dword [0x164577c]
push ecx
call dword [0x164b344]
mov dword [0x1645ffc], 0
jmp 0x1578ee9
mov edx, dword [0x1645ffc]
add edx, 1
mov dword [0x1645ffc], edx
cmp dword [0x1645ffc], 0xc
jge 0x1578f0c
mov eax, dword [0x1645ffc]
push eax
call fcn.015aeef0
mov ecx, dword [0x1645ffc]
mov dword [ecx*4 + 0x15d1f08], eax
jmp 0x1578eda
mov dword [ebp - 0x7e8], 0x15f1b70
mov dword [ebp - 0x848], 0x200
mov dword [ebp - 0x844], 0
jmp 0x1578f3b
mov edx, dword [ebp - 0x844]
add edx, 1
mov dword [ebp - 0x844], edx
mov eax, dword [ebp - 0x848]
cdq
and edx, 3
add eax, edx
sar eax, 2
cmp dword [ebp - 0x844], eax
jge 0x1578f83
mov eax, dword [ebp - 0x844]
shl eax, 3
xor eax, dword [0x164a188]
mov ecx, dword [ebp - 0x844]
mov edx, dword [ebp - 0x7e8]
mov ecx, dword [edx + ecx*4]
xor ecx, eax
mov edx, dword [ebp - 0x844]
mov eax, dword [ebp - 0x7e8]
mov dword [eax + edx*4], ecx
jmp 0x1578f2c
lea ecx, [ebp - 0x840]
push ecx
call fcn.015ada20
push 0x200
push 0x15f1b70
lea edx, [ebp - 0x840]
push edx
call fcn.015ada70
lea eax, [ebp - 0x840]
push eax
lea ecx, [ebp - 0x7e4]
push ecx
call fcn.015adba0
mov edx, dword [ebp - 0x7e4]
mov dword [ebp - 0x84c], edx
mov eax, dword [ebp - 0x84c]
xor eax, dword [ebp - 0x7e0]
mov dword [ebp - 0x84c], eax
mov ecx, dword [ebp - 0x84c]
xor ecx, dword [ebp - 0x7dc]
mov dword [ebp - 0x84c], ecx
mov edx, dword [ebp - 0x84c]
xor edx, dword [ebp - 0x7d8]
mov dword [ebp - 0x84c], edx
mov eax, dword [ebp - 0x84c]
shr eax, 0x18
and eax, 0xff
mov ecx, dword [ebp - 0x84c]
shr ecx, 0x10
and ecx, 0xff
shl ecx, 8
add eax, ecx
mov edx, dword [ebp - 0x84c]
shr edx, 8
and edx, 0xff
shl edx, 0x10
add eax, edx
mov ecx, dword [ebp - 0x84c]
and ecx, 0xff
shl ecx, 0x18
add eax, ecx
mov dword [ebp - 0x84c], eax
mov edx, dword [ebp - 0x84c]
cmp edx, dword [0x15f1d70]
je 0x1579093
cmp dword [0x164579c], 1
jne 0x1579093
mov eax, dword [0x164a1ae]
and eax, 8
test eax, eax
je 0x1579093
cmp dword [0x15f1b54], 0
je 0x157907f
push 0x162dd48
push 0x21
call fcn.01549920
push 0x10
push 0x15f1b70
push 0x154d920
call fcn.015c21c0
add esp, 0xc
call fcn.015b5550
jmp 0x15790b6
cmp dword [0x15f1b54], 0
je 0x15790cb
push 0x162dde0
push 2
call fcn.01549920
call fcn.015b6290
jmp 0x158202e
mov eax, 5
mov byte [eax], 0x23
mov ecx, dword [0x15d0598]
xor ecx, dword [0x1648f90]
mov dword [0x15d0598], ecx
mov dword [0x1645ffc], 0
jmp 0x1582063
mov edx, dword [0x1645ffc]
add edx, 1
mov dword [0x1645ffc], edx
cmp dword [0x1645ffc], 9
jge 0x1582090
mov eax, dword [0x1645ffc]
mov ecx, dword [0x1645ffc]
mov dl, byte [eax + 0x15d0598]
sub dl, byte [ecx + 0x1646680]
mov eax, dword [0x1645ffc]
mov byte [eax + 0x15d0598], dl
jmp 0x1582054
mov dword [0x1645ffc], 0x1e
jmp 0x15820ab
mov ecx, dword [0x1645ffc]
sub ecx, 1
mov dword [0x1645ffc], ecx
cmp dword [0x1645ffc], 0
jl 0x15820d9
mov edx, dword [0x1645ffc]
mov eax, dword [0x1645ffc]
mov cl, byte [edx + 0x15d0560]
xor cl, byte [eax + 0x15d0561]
mov edx, dword [0x1645ffc]
mov byte [edx + 0x15d0560], cl
jmp 0x158209c
push 0
push 0
push 0
push 0
call dword [0x16464d8]
mov dword [0x164e62c], eax
cmp dword [0x15f1b54], 0
je 0x1582101
push 0x162dea8
push 2
call fcn.01549920
push 1
call dword [0x164886c]
test eax, eax
jne 0x1582133
cmp dword [0x15f1b54], 0
je 0x1582122
push 0x162def0
push 0x20
call fcn.01549920
push 0xb
call fcn.01548790
mov eax, 0xb
jmp 0x15a731a
add esp, 4
mov dword [0x16455a8], 1
cmp dword [0x15f1b54], 0
je 0x1582155
push 0x162df78
push 2
call fcn.01549920
push 0x1645ff0
call dword [0x164d1a8]
push 0x1645820
push 0x164baa0
call fcn.015c2d80
add esp, 8
cmp dword [0x15f1b54], 0
je 0x1582187
push 0x162dff0
push 2
call fcn.01549920
call dword [0x1649024]
test eax, eax
jne 0x158219f
push 0
call fcn.01548790
xor eax, eax
jmp 0x15a731a
cmp dword [0x15f1b54], 0
je 0x15821b4
push 0x162e038
push 2
call fcn.01549920
push 0x1648860
push 0x164f810
call dword [0x164f7f8]
test eax, eax
jne 0x1582206
call dword [0x1648b34]
cmp dword [0x15f1b54], 0
je 0x15821e3
push 0x162e080
push 0x20
call fcn.01549920
push 1
call fcn.01548790
cmp dword [0x15f1b54], 0
je 0x15821ff
push 0x162e0b8
push 4
call fcn.01549920
push 1
call fcn.015c20de
cmp dword [0x15f1b54], 0
je 0x158223d
mov eax, dword [0x1648860]
add eax, 0x61
push eax
mov ecx, dword [0x164f810]
push ecx
push 0x162e0c0
push 0x1647800
call fcn.015c24f5
add esp, 0x10
push 0x1647800
push 0
call fcn.01549920
cmp dword [0x16455a4], 0
je 0x1582272
cmp dword [0x15f1b54], 0
je 0x158225d
push 0x162e150
push 2
call fcn.01549920
jmp 0x1582272
cmp dword [0x15f1b54], 0
je 0x1582272
push 0x162e1d8
push 2
call fcn.01549920
call fcn.015bad00
call fcn.015b7a40
call fcn.015bad00
cmp dword [0x16455a4], 0
je 0x1582351
mov dword [0x1645ffc], 0
jmp 0x15822a9
mov edx, dword [0x1645ffc]
add edx, 1
mov dword [0x1645ffc], edx
cmp dword [0x1645ffc], 8
jae 0x15822cf
mov eax, dword [0x1645ffc]
xor ecx, ecx
mov cl, byte [eax + 0x164a288]
mov edx, dword [0x16457bc]
xor edx, ecx
mov dword [0x16457bc], edx
jmp 0x158229a
mov dword [0x1645ffc], 0
jmp 0x15822e8
mov eax, dword [0x1645ffc]
add eax, 1
mov dword [0x1645ffc], eax
cmp dword [0x1645ffc], 0x10
jae 0x158230d
mov ecx, dword [0x1645ffc]
xor edx, edx
mov dl, byte [ecx + 0x164a290]
mov eax, dword [0x16457bc]
xor eax, edx
mov dword [0x16457bc], eax
jmp 0x15822db
mov dword [0x1645ffc], 0
jmp 0x1582328
mov ecx, dword [0x1645ffc]
add ecx, 1
mov dword [0x1645ffc], ecx
cmp dword [0x1645ffc], 4
jae 0x158234f
mov edx, dword [0x1645ffc]
xor eax, eax
mov al, byte [edx + 0x164a2a0]
mov ecx, dword [0x16457bc]
xor ecx, eax
mov dword [0x16457bc], ecx
jmp 0x1582319
jmp 0x1582391
mov dword [0x1645ffc], 0
jmp 0x158236c
mov edx, dword [0x1645ffc]
add edx, 1
mov dword [0x1645ffc], edx
cmp dword [0x1645ffc], 0x40
jae 0x1582391
mov eax, dword [0x1645ffc]
movsx ecx, byte [eax + 0x1648820]
mov edx, dword [0x16457bc]
xor edx, ecx
mov dword [0x16457bc], edx
jmp 0x158235d
cmp dword [0x1645710], 0
je 0x1582426
cmp dword [0x15f1b54], 0
je 0x15823b3
push 0x162e250
push 2
call fcn.01549920
call fcn.015b6c70
cmp dword [0x1645714], 0
jne 0x15823cb
mov dword [0x1645710], 0
cmp dword [0x1645714], 0
je 0x1582426
cmp dword [0x15f1b54], 0
je 0x1582411
mov eax, dword [0x1645708]
push eax
mov ecx, dword [0x1645704]
push ecx
mov edx, dword [0x1645700]
push edx
push 0x162e2e8
push 0x1647800
call fcn.015c24f5
add esp, 0x14
push 0x1647800
push 0
call fcn.01549920
jmp 0x1582426
cmp dword [0x15f1b54], 0
je 0x1582426
push 0x162e36c
push 0x20
call fcn.01549920
cmp dword [0x15f1b54], 0
je 0x158243b
push 0x162e444
push 2
call fcn.01549920
call fcn.015b3aa0
cmp dword [0x15f1b54], 0
je 0x1582474
mov eax, dword [0x164e608]
push eax
mov ecx, dword [0x16477e0]
push ecx
push 0x162e4cc
push 0x1647800
call fcn.015c24f5
add esp, 0x10
push 0x1647800
push 1
call fcn.01549920
cmp dword [0x16455a4], 0
jne 0x1582486
cmp dword [0x1645710], 0
je 0x15824a0
cmp dword [0x15f1b54], 0
je 0x158249b
push 0x162e59c
push 2
call fcn.01549920
call fcn.015b3c30
cmp dword [0x15f1b54], 0
je 0x15824b5
push 0x162e5f4
push 2
call fcn.01549920
push 0x800
push 0x164c8c0
push 0x164e640
call fcn.015c21c0
add esp, 0xc
call fcn.015b4050
cmp dword [0x15f1b54], 0
je 0x15824e6
push 0x162e61c
push 2
call fcn.01549920
push 0x800
push 0x164c8c0
push 0x164e640
call fcn.015c21c0
add esp, 0xc
call fcn.015b44c0
jmp 0x158251e
cmp dword [0x15f1b54], 0
je 0x1582533
push 0x162e664
push 2
call fcn.01549920
call dword [0x1648b34]
cmp dword [0x16222d8], 0
je 0x1582566
call fcn.015af8c0
mov dword [0x16222dc], 1
cmp dword [0x15f1b54], 0
je 0x1582566
push 0x162e69c
push 0
call fcn.01549920
cmp dword [0x164577c], 0
je 0x1582588
mov edx, dword [0x164a1ae]
and edx, 2
test edx, edx
je 0x1582588
mov eax, dword [0x164577c]
push eax
call dword [0x164b344]
cmp dword [0x15f1b54], 0
je 0x158259d
push 0x162e6f4
push 2
call fcn.01549920
mov ecx, dword [0x1645588]
push ecx
push 0x164a250
push 0x164baa0
mov edx, dword [0x16464e0]
push edx
call fcn.015499b0
mov dword [0x164f7bc], eax
push 0x40
call fcn.015c2631
add esp, 4
mov dword [0x164a140], eax
push 0x40
push 0x15cfd18
push 0x164f700
call fcn.015c21c0
add esp, 0xc
cmp dword [0x16455a4], 0
je 0x158260a
cmp dword [0x1645588], 0
je 0x158260a
mov eax, dword [0x1645588]
push eax
call dword [0x1645d14]
mov dword [0x1645588], 0
mov eax, 0x49b000
sub eax, 0x49af79
push edx
push ebx
dec eax
mov ebx, 0x8c27
mul ebx
nop
add eax, 0x5fe7
nop
pop ebx
pop edx
push eax
jmp 0x158b6c2
pop eax
mov eax, dword [0x1647778]
jmp eax
mov dword [0x1647778], eax
jmp 0x158b6e2
mov dword [0x164ac80], eax
cmp dword [0x164577c], 0
je 0x158b70a
mov ecx, dword [0x164a1ae]
and ecx, 2
test ecx, ecx
je 0x158b70a
mov edx, dword [0x164577c]
push edx
call dword [0x164b344]
cmp dword [0x16222d8], 0
je 0x158b740
cmp dword [0x16222dc], 0
je 0x158b740
call fcn.015af940
mov dword [0x16222dc], 0
cmp dword [0x15f1b54], 0
je 0x158b740
push 0x162e74c
push 0
call fcn.01549920
cmp dword [0x15f1b54], 0
je 0x158b755
push 0x162e794
push 2
call fcn.01549920
jmp 0x15948b0
call 0x154d920
cmp dword [0x164577c], 0
je 0x15948d7
mov eax, dword [0x164a1ae]
and eax, 2
test eax, eax
je 0x15948d7
mov ecx, dword [0x164577c]
push ecx
call dword [0x164b344]
push 0xb
call fcn.015c2631
add esp, 4
mov dword [0x1645718], eax
push 0xb
push 0x162e7fc
mov edx, dword [0x1645718]
push edx
call fcn.015c21c0
add esp, 0xc
cmp dword [0x15f1b54], 0
je 0x1594911
push 0x162e81c
push 2
call fcn.01549920
call fcn.015bad00
mov dword [0x1645ffc], 0
mov eax, dword [0x1645ffc]
imul eax, eax, 0xa
cmp dword [eax + 0x15ef3c8], 0
je 0x1594a36
cmp dword [0x1645ffc], 0x80
jge 0x1594a36
mov ecx, dword [0x1645ffc]
imul ecx, ecx, 0xa
xor edx, edx
mov dx, word [ecx + 0x15ef3d0]
shl edx, 2
push edx
call fcn.015c2631
add esp, 4
mov dword [0x164f7d4], eax
push 0x16488c4
push 4
mov eax, dword [0x1645ffc]
imul eax, eax, 0xa
xor ecx, ecx
mov cx, word [eax + 0x15ef3d0]
shl ecx, 2
push ecx
mov edx, dword [0x1645ffc]
imul edx, edx, 0xa
mov eax, dword [edx + 0x15ef3c8]
push eax
call dword [0x164669c]
push 0x16488c4
mov ecx, dword [0x1645ffc]
imul ecx, ecx, 0xa
xor edx, edx
mov dx, word [ecx + 0x15ef3d0]
shl edx, 2
push edx
mov eax, dword [0x164f7d4]
push eax
mov ecx, dword [0x1645ffc]
imul ecx, ecx, 0xa
mov edx, dword [ecx + 0x15ef3cc]
push edx
mov eax, dword [0x1645590]
push eax
call fcn.01548080
push 0x16488c4
mov ecx, dword [0x1645ffc]
imul ecx, ecx, 0xa
xor edx, edx
mov dx, word [ecx + 0x15ef3d0]
shl edx, 2
push edx
mov eax, dword [0x164f7d4]
push eax
mov ecx, dword [0x1645ffc]
imul ecx, ecx, 0xa
mov edx, dword [ecx + 0x15ef3c8]
push edx
mov eax, dword [0x1645590]
push eax
call dword [0x1648f84]
mov ecx, dword [0x164f7d4]
push ecx
call fcn.015c25c8
add esp, 4
mov edx, dword [0x1645ffc]
add edx, 1
mov dword [0x1645ffc], edx
jmp 0x1594920
mov eax, dword [0x15d05ec]
xor eax, dword [0x164a250]
mov dword [0x15d05ec], eax
mov ecx, dword [0x15d05f0]
xor ecx, dword [0x164a254]
mov dword [0x15d05f0], ecx
cmp dword [0x15f1b54], 0
je 0x1594a6d
push 0x162e874
push 2
call fcn.01549920
cmp dword [0x164577c], 0
je 0x1594a8f
mov edx, dword [0x164a1ae]
and edx, 2
test edx, edx
je 0x1594a8f
mov eax, dword [0x164577c]
push eax
call dword [0x164b344]
jmp 0x159dcb5
push 0x1645824
push 0x1647800
call fcn.015c24f5
add esp, 8
call fcn.015510b0
cmp dword [0x164ae84], 1
jne 0x15a7289
cmp dword [0x164577c], 0
je 0x159dcfc
mov ecx, dword [0x164a1ae]
and ecx, 2
test ecx, ecx
je 0x159dcfc
mov edx, dword [0x164577c]
push edx
call dword [0x164b344]
mov eax, dword [0x15eed38]
mov dword [ebp - 0x10], eax
mov ecx, dword [0x15eed3c]
mov dword [ebp - 0xc], ecx
push 0x1645e64
push 4
mov edx, dword [ebp - 0xc]
push edx
mov eax, dword [ebp - 0x10]
push eax
call dword [0x164669c]
cmp dword [0x15f1b54], 0
je 0x159dd37
push 0x162e8cc
push 2
call fcn.01549920
cmp dword [0x164577c], 0
je 0x159dd5a
mov ecx, dword [0x164a1ae]
and ecx, 2
test ecx, ecx
je 0x159dd5a
mov edx, dword [0x164577c]
push edx
call dword [0x164b344]
push 0x10
call fcn.015c2631
add esp, 4
mov dword [0x16457c4], eax
cmp dword [0x16457c4], 0
je 0x159ddfb
mov eax, dword [0x16457c4]
push eax
call fcn.015c19c0
test eax, eax
je 0x159dde2
mov ecx, dword [0x16457c4]
push ecx
mov edx, dword [0x1645598]
push edx
call fcn.015c1a70
test eax, eax
je 0x159ddb3
cmp dword [0x15f1b54], 0
je 0x159ddb1
push 0x162e934
push 1
call fcn.01549920
jmp 0x159dde0
mov eax, dword [0x16457c4]
push eax
call fcn.015c25c8
add esp, 4
mov dword [0x16457c4], 0
cmp dword [0x15f1b54], 0
je 0x159dde0
push 0x162e98c
push 0x20
call fcn.01549920
jmp 0x159ddfb
mov ecx, dword [0x16457c4]
push ecx
call fcn.015c25c8
add esp, 4
mov dword [0x16457c4], 0
push 0x2c
call fcn.01548790
push 0x1649040
call dword [0x1648868]
mov eax, 0x158b6ba
mov dword [0x164600c], eax
mov dword [0x164579c], 1
mov dword [0x16457a0], 1
push 0x162e9f4
push 0
push 0
push 0
call dword [0x16464d8]
mov dword [0x16457a4], eax
push 0x100
push 0
push 0x164a040
call fcn.015c2570
add esp, 0xc
push 0x100
push 0
push 0x1646580
call fcn.015c2570
add esp, 0xc
push 0x100
push 0
push 0x1645e80
call fcn.015c2570
add esp, 0xc
lea edx, [ebp - 8]
mov dword [0x1646548], edx
mov eax, dword [0x16455d4]
push eax
call dword [0x164f834]
cmp dword [0x15f1b54], 0
je 0x159df2b
call fcn.015ba100
call fcn.015ba320
call fcn.015ba3f0
call fcn.015ba2a0
call fcn.015ba4c0
call fcn.015ba380
call fcn.015ba450
cmp dword [0x16466c8], 0
je 0x159def3
call fcn.015baa60
call fcn.015ba990
call fcn.015ba540
call fcn.015ba670
call fcn.015ba8d0
call fcn.015ba680
call fcn.015ba730
call fcn.015ba800
cmp dword [0x15f1b54], 0
je 0x159df08
push 0x162ea04
push 1
call fcn.01549920
cmp dword [0x15f1b54], 0
je 0x159df1d
push 0x162ea3c
push 4
call fcn.01549920
cmp dword [0x15f1b54], 0
je 0x159df2b
jmp 0x15a7318
jmp 0x15a7284
jmp 0x158b6ba
cmp dword [0x15f1b54], 0
je 0x15a729e
push 0x162ea44
push 0x20
call fcn.01549920
cmp dword [0x15f1b54], 0
je 0x15a72b3
push 0x162ea7c
push 4
call fcn.01549920
mov ecx, dword [0x164a1ae]
and ecx, 2
test ecx, ecx
je 0x15a730a
cmp dword [0x15f1b64], 0
je 0x15a730a
call fcn.015abde0
cmp dword [0x164577c], 0
je 0x15a730a
mov edx, dword [0x164577c]
push edx
call dword [0x1648fd0]
mov dword [0x164577c], 0
mov dword [ebp - 0x850], 0
mov eax, dword [ebp - 0x850]
push eax
push 0x162ea84
call dword [0x165267c]
push 6
call fcn.01548790
push 6
call fcn.015c20de
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x10