Function at 0x631918
Capabilities:
Set file attributes

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x9bb
push 0
push 0
dec ecx
jne 0x631920
push ebx
push esi
push edi
mov dword [ebp - 0x238], edx
mov dword [ebp - 0x234], eax
xor eax, eax
push ebp
push 0x638ad9
push dword fs:[eax]
mov dword fs:[eax], esp
mov byte [ebp - 0x28e], 0
mov byte [ebp - 0x28d], 0
mov byte [ebp - 0x28f], 0
mov byte [ebp - 0x2b1], 0
mov eax, dword [0x6aabdc]
mov eax, dword [eax]
call fcn.004b04c0
call fcn.004cadbc
mov dword [0x6b25bc], eax
xor edx, edx
push ebp
push 0x638334
push dword fs:[edx]
mov dword fs:[edx], esp
mov eax, dword [0x6aabdc]
mov eax, dword [eax]
call fcn.004d26b8
xor eax, eax
push ebp
push 0x631b46
push dword fs:[eax]
mov dword fs:[eax], esp
push 3
lea eax, [ebp - 0x446c]
mov edx, 2
mov cl, 1
call fcn.004299d4
lea eax, [ebp - 0x446c]
push eax
mov ecx, 0x638af8
mov edx, 0x638b18
mov eax, 0x80000002
call fcn.00627630
push 3
lea eax, [ebp - 0x447c]
mov edx, 1
mov cl, 1
call fcn.004299d4
lea eax, [ebp - 0x447c]
push eax
push 0x638bac
push dword [0x6b2774]
push 0x638c18
lea eax, [ebp - 0x4480]
mov edx, 3
call fcn.00408264
mov edx, dword [ebp - 0x4480]
mov ecx, 0x638c3c
mov eax, 0x80000002
call fcn.00627630
xor eax, eax
push ebp
push 0x631ad5
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x4484]
call fcn.0061db80
lea eax, [ebp - 0x4484]
mov edx, 0x638c74
call fcn.004080c0
mov eax, dword [ebp - 0x4484]
call fcn.004169e8
test al, al
je 0x631a7b
lea eax, [ebp - 0x4488]
call fcn.0061db80
lea eax, [ebp - 0x4488]
mov edx, 0x638c74
call fcn.004080c0
mov eax, dword [ebp - 0x4488]
call fcn.0061f520
lea eax, [ebp - 0x448c]
call fcn.0061db80
lea eax, [ebp - 0x448c]
mov edx, 0x638d20
call fcn.004080c0
mov eax, dword [ebp - 0x448c]
call fcn.004169e8
test al, al
je 0x631acb
lea eax, [ebp - 0x4490]
call fcn.0061db80
lea eax, [ebp - 0x4490]
mov edx, 0x638d20
call fcn.004080c0
mov eax, dword [ebp - 0x4490]
call fcn.0061f520
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x631adf
call fcn.0061de98
push 3
lea eax, [ebp - 0x44a0]
xor edx, edx
mov cl, 1
call fcn.004299d4
lea eax, [ebp - 0x44a0]
push eax
mov ecx, 0x638dbc
mov edx, 0x638de8
mov eax, 0x80000002
call fcn.0061ec3c
push 3
lea eax, [ebp - 0x44b0]
xor edx, edx
mov cl, 1
call fcn.004299d4
lea eax, [ebp - 0x44b0]
push eax
mov ecx, 0x638dbc
mov edx, 0x638e54
mov eax, 0x80000002
call fcn.0061ec3c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x631b50
call fcn.00672e80
mov eax, dword [ebp - 0x234]
mov eax, dword [eax + 0x69c]
mov edx, dword [eax]
call dword [edx + 0xec]
test al, al
jne 0x631b9d
mov eax, dword [ebp - 0x234]
mov eax, dword [eax + 0x698]
mov edx, dword [eax]
call dword [edx + 0xec]
test al, al
jne 0x631b9d
mov eax, dword [ebp - 0x234]
mov eax, dword [eax + 0x694]
mov edx, dword [eax]
call dword [edx + 0xec]
test al, al
je 0x631bc5
cmp byte [0x6b26f6], 0
jne 0x631bc5
mov eax, 0x638eb8
call fcn.00626d98
test al, al
jne 0x631bc5
mov cl, 1
mov edx, 3
mov eax, 0xb
call fcn.00629a34
xor ecx, ecx
mov dl, 1
mov eax, dword [0x57c3ec]
call fcn.0057dce4
mov dword [ebp - 0x2d4], eax
movzx edx, byte [0x638edc]
mov eax, dword [ebp - 0x2d4]
call fcn.0057eacc
mov edx, 0x638eec
mov eax, dword [ebp - 0x2d4]
call fcn.0057eb5c
xor ecx, ecx
mov dl, 1
mov eax, dword [0x57c3ec]
call fcn.0057dce4
mov ebx, eax
movzx edx, byte [0x638edc]
mov eax, ebx
call fcn.0057eacc
mov edx, 0x638f20
mov eax, ebx
call fcn.0057eb5c
mov eax, dword [ebp - 0x234]
mov eax, dword [eax + 0x3c4]
mov edx, dword [eax]
call dword [edx + 0xec]
test eax, eax
jl 0x63830c
lea edx, [ebp - 0x4c]
mov eax, 0x638f54
call fcn.0061c888
lea edx, [ebp - 0x50]
mov eax, 0x638f64
call fcn.0061c888
mov eax, dword [ebp - 0x234]
mov eax, dword [eax + 0x698]
mov edx, dword [eax]
call dword [edx + 0xec]
test al, al
jne 0x631c8f
mov eax, dword [ebp - 0x234]
mov eax, dword [eax + 0x694]
mov edx, dword [eax]
call dword [edx + 0xec]
test al, al
je 0x631e25
mov byte [ebp - 0x2d5], 0
mov eax, 0x638f78
call fcn.00626d98
test al, al
je 0x631d50
mov eax, 0x638fa4
call fcn.00626d98
test al, al
jne 0x631d11
mov eax, dword [ebp - 0x234]
mov eax, dword [eax + 0x694]
mov edx, dword [eax]
call dword [edx + 0xec]
test al, al
je 0x631d11
mov eax, dword [ebp - 0x234]
mov eax, dword [eax + 0x3c0]
mov edx, dword [eax]
call dword [edx + 0xec]
mov ebx, eax
call fcn.00625cc4
add ebx, eax
test ebx, ebx
jl 0x631d11
mov eax, dword [ebp - 0x234]
mov eax, dword [eax + 0x3c0]
mov edx, dword [eax]
call dword [edx + 0xec]
mov ebx, eax
call fcn.00625cc4
add ebx, eax
cmp ebx, 2
jle 0x631d50
xor eax, eax
mov edx, dword [0x6b2668]
test edx, edx
je 0x631d22
cmp eax, dword [edx - 4]
jb 0x631d27
call fcn.00405714
mov eax, dword [edx + eax*4]
xor edx, edx
test eax, eax
je 0x631d35
cmp edx, dword [eax - 4]
jb 0x631d3a
call fcn.00405714
mov eax, dword [eax + edx*4]
lea edx, [ebp - 0x44]
mov ecx, 0x200000
call fcn.0061d1a4
mov byte [ebp - 0x2d5], al
cmp byte [ebp - 0x2d5], 0
jne 0x631d69
lea edx, [ebp - 0x44]
mov ecx, 0x200000
mov eax, dword [ebp - 0x50]
call fcn.0061d1a4
movzx eax, byte [0x638fbc]
push eax
lea eax, [ebp - 0x44b4]
push eax
lea edx, [ebp - 0x44b8]
mov eax, 0x638fcc
call fcn.0061c1b8
mov eax, dword [ebp - 0x44b8]
push eax
lea edx, [ebp - 0x44bc]
mov eax, 0x638ff0
call fcn.0061c1b8
mov edx, dword [ebp - 0x44bc]
mov eax, dword [ebp - 0x44]
pop ecx
call fcn.0067031c
mov edx, dword [ebp - 0x44b4]
lea eax, [ebp - 0x44]
call fcn.00406be0
movzx eax, byte [0x639008]
push eax
lea eax, [ebp - 0x44c0]
push eax
lea edx, [ebp - 0x44c4]
mov eax, 0x639018
call fcn.0061c1b8
mov eax, dword [ebp - 0x44c4]
push eax
lea edx, [ebp - 0x44c8]
mov eax, 0x639050
call fcn.0061c1b8
mov edx, dword [ebp - 0x44c8]
mov eax, dword [ebp - 0x44]
pop ecx
call fcn.0067031c
mov edx, dword [ebp - 0x44c0]
lea eax, [ebp - 0x44]
call fcn.00406be0
lea eax, [ebp - 0x44]
call fcn.0061cfb8
lea ecx, [ebp - 0x54]
mov edx, dword [ebp - 0x44]
mov eax, dword [ebp - 0x50]
call fcn.0061d46c
lea edx, [ebp - 0x7c]
mov eax, 0x639088
call fcn.0061c888
cmp byte [0x6b26f5], 0
jne 0x632058
lea eax, [ebp - 0x44cc]
push eax
mov ecx, 1
mov edx, 0x1c3
mov eax, dword [0x6b27b0]
call fcn.00407320
mov eax, dword [ebp - 0x44cc]
mov edx, 0x63909c
call fcn.0040721c
je 0x632058
lea eax, [ebp - 0x70]
mov edx, dword [0x6b27b0]
call fcn.00406be0
lea eax, [ebp - 0x70]
mov ecx, 1
mov edx, dword [ebp - 0x7c]
call fcn.00670554
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x2e8], eax
cmp dword [ebp - 0x2e8], 0
je 0x631ec2
mov eax, dword [ebp - 0x2e8]
sub eax, 0xa
cmp word [eax], 1
je 0x631ec2
lea eax, [ebp - 0x70]
xor ecx, ecx
mov edx, dword [ebp - 0x70]
call fcn.00406d4c
mov dword [ebp - 0x2e8], eax
mov eax, dword [ebp - 0x2e8]
mov dword [ebp - 0x2ec], eax
cmp dword [ebp - 0x2ec], 0
je 0x631ee8
mov eax, dword [ebp - 0x2ec]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x2ec], eax
mov eax, dword [ebp - 0x2ec]
test eax, eax
jns 0x631ef7
add eax, 0x1ff
sar eax, 9
dec eax
test eax, eax
jle 0x632058
mov dword [ebp - 0x2e0], eax
mov dword [ebp - 0x2c8], 1
lea eax, [ebp - 0x44d0]
push eax
mov edx, dword [ebp - 0x2c8]
shl edx, 9
inc edx
mov ecx, 0x200
mov eax, dword [ebp - 0x70]
call fcn.00407320
mov edx, dword [ebp - 0x44d0]
mov eax, 0x6390ac
call fcn.00407440
test eax, eax
jle 0x631f72
lea eax, [ebp - 0x44d4]
push eax
mov ecx, 0x200
xor edx, edx
xor eax, eax
call fcn.00626b7c
mov edx, dword [ebp - 0x44d4]
mov ecx, dword [ebp - 0x2c8]
shl ecx, 9
inc ecx
lea eax, [ebp - 0x70]
call fcn.00670554
lea eax, [ebp - 0x44d8]
push eax
mov edx, dword [ebp - 0x2c8]
shl edx, 9
add edx, 5
inc edx
mov ecx, 4
mov eax, dword [ebp - 0x70]
call fcn.00407320
mov eax, dword [ebp - 0x44d8]
mov edx, 0x6390c4
call fcn.0040721c
jne 0x632046
cmp dword [ebp - 0x2c8], 1
jle 0x632046
lea eax, [ebp - 0x44dc]
push eax
mov edx, dword [ebp - 0x2c8]
shl edx, 9
inc edx
sub edx, 2
mov ecx, 2
mov eax, dword [ebp - 0x70]
call fcn.00407320
mov eax, dword [ebp - 0x44dc]
mov edx, 0x6390d8
call fcn.0040721c
jne 0x632019
lea eax, [ebp - 0x44e0]
push eax
mov ecx, 0x200
xor edx, edx
xor eax, eax
call fcn.00626b7c
mov edx, dword [ebp - 0x44e0]
mov eax, dword [ebp - 0x2c8]
dec eax
mov ecx, eax
shl ecx, 9
inc ecx
lea eax, [ebp - 0x70]
call fcn.00670554
lea eax, [ebp - 0x44e4]
push eax
mov ecx, 0x200
xor edx, edx
xor eax, eax
call fcn.00626b7c
mov edx, dword [ebp - 0x44e4]
mov ecx, dword [ebp - 0x2c8]
shl ecx, 9
inc ecx
lea eax, [ebp - 0x70]
call fcn.00670554
inc dword [ebp - 0x2c8]
dec dword [ebp - 0x2e0]
jne 0x631f13
mov eax, dword [ebp - 0x234]
mov eax, dword [eax + 0x3c8]
mov edx, dword [eax]
call dword [edx + 0xec]
mov edx, dword [0x6b25f4]
test edx, edx
je 0x63207b
cmp eax, dword [edx - 4]
jb 0x632080
call fcn.00405714
mov edx, dword [edx + eax*4]
lea eax, [ebp - 8]
call fcn.00406be0
mov byte [ebp - 0x279], 0
mov byte [ebp - 0x27a], 0
lea eax, [ebp - 0x44e8]
push eax
lea eax, [ebp - 0x44ec]
push eax
mov eax, dword [ebp - 0x234]
mov eax, dword [eax + 0x3c0]
mov edx, dword [eax]
call dword [edx + 0xec]
mov ebx, eax
call fcn.00625cc4
add ebx, eax
mov edx, ebx
inc edx
lea ecx, [ebp - 0x44f0]
mov eax, dword [0x6b2768]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x44f0]
mov ecx, 4
mov edx, 0x6390e8
call fcn.00672580
mov eax, dword [ebp - 0x44ec]
mov ecx, 1
mov edx, 0x6390f8
call fcn.00672580
mov eax, dword [ebp - 0x44e8]
lea edx, [ebp - 0x94]
call fcn.004152c8
mov dword [ebp - 0x2bc], 0xffffffff
mov dword [ebp - 0x2c0], 0xffffffff
mov dword [ebp - 0x2c4], 0xffffffff
mov eax, dword [ebp - 0x94]
mov edx, 0x639108
call fcn.00408384
jne 0x63217b
lea eax, [ebp - 0x44f8]
movzx edx, word [0x6b26cc]
call fcn.00407e18
mov ecx, dword [ebp - 0x44f8]
lea eax, [ebp - 0x44f4]
mov edx, 0x639120
call fcn.00408180
mov eax, dword [ebp - 0x44f4]
lea edx, [ebp - 0x94]
call fcn.004152c8
lea eax, [ebp - 0x44fc]
push eax
lea edx, [ebp - 0x4504]
mov eax, dword [ebp - 0x94]
call fcn.00417280
mov edx, dword [ebp - 0x4504]
lea eax, [ebp - 0x4500]
mov ecx, 0
call fcn.00407ef0
mov eax, dword [ebp - 0x4500]
mov ecx, 3
mov dl, 0x20
call fcn.00626b7c
mov eax, dword [ebp - 0x44fc]
push eax
lea eax, [ebp - 0x4508]
push eax
lea ecx, [ebp - 0x4510]
xor edx, edx
mov eax, dword [ebp - 0x94]
call fcn.00416e98
mov edx, dword [ebp - 0x4510]
lea eax, [ebp - 0x450c]
mov ecx, 0
call fcn.00407ef0
mov eax, dword [ebp - 0x450c]
mov ecx, 8
mov dl, 0x20
call fcn.00626b7c
mov edx, dword [ebp - 0x4508]
lea eax, [ebp - 0x28]
pop ecx
call fcn.00406ff0
mov eax, dword [ebp - 0x94]
mov edx, 0x639138
call fcn.00408384
jne 0x63224a
lea edx, [ebp - 0x4514]
mov eax, 0x639138
call fcn.0061c1b8
mov ecx, dword [ebp - 0x4514]
lea eax, [ebp - 0x34]
mov edx, 0x639154
call fcn.00406ff0
jmp 0x63226d
lea edx, [ebp - 0x4518]
mov eax, 0x639164
call fcn.0061c1b8
mov ecx, dword [ebp - 0x4518]
lea eax, [ebp - 0x34]
mov edx, 0x639154
call fcn.00406ff0
mov eax, dword [ebp - 0x94]
mov edx, 0x639164
call fcn.00408384
je 0x632291
mov eax, dword [ebp - 0x94]
mov edx, 0x639138
call fcn.00408384
jne 0x6322a3
lea eax, [ebp - 0x90]
mov edx, 0x639180
call fcn.00407cf0
jmp 0x6322b4
lea eax, [ebp - 0x90]
mov edx, dword [ebp - 0x94]
call fcn.00407cf0
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x2f0], eax
cmp dword [ebp - 0x2f0], 0
je 0x6322ef
mov eax, dword [ebp - 0x2f0]
sub eax, 0xa
cmp word [eax], 2
je 0x6322ef
lea eax, [ebp - 0x90]
mov edx, dword [ebp - 0x90]
call fcn.00406d1c
mov dword [ebp - 0x2f0], eax
mov eax, dword [ebp - 0x2f0]
mov dword [ebp - 0x2f4], eax
cmp dword [ebp - 0x2f4], 0
je 0x632315
mov eax, dword [ebp - 0x2f4]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x2f4], eax
mov edx, dword [ebp - 0x2f4]
add edx, edx
lea eax, [ebp - 0x2c]
xor ecx, ecx
call fcn.00407584
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x2f8], eax
cmp dword [ebp - 0x2f8], 0
je 0x632362
mov eax, dword [ebp - 0x2f8]
sub eax, 0xa
cmp word [eax], 2
je 0x632362
lea eax, [ebp - 0x90]
mov edx, dword [ebp - 0x90]
call fcn.00406d1c
mov dword [ebp - 0x2f8], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x2fc], eax
cmp dword [ebp - 0x2fc], 0
je 0x632396
mov eax, dword [ebp - 0x2fc]
sub eax, 0xa
cmp word [eax], 1
je 0x632396
lea eax, [ebp - 0x2c]
xor ecx, ecx
mov edx, dword [ebp - 0x2c]
call fcn.00406d4c
mov dword [ebp - 0x2fc], eax
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x300], eax
cmp dword [ebp - 0x300], 0
je 0x6323d1
mov eax, dword [ebp - 0x300]
sub eax, 0xa
cmp word [eax], 2
je 0x6323d1
lea eax, [ebp - 0x90]
mov edx, dword [ebp - 0x90]
call fcn.00406d1c
mov dword [ebp - 0x300], eax
mov eax, dword [ebp - 0x300]
mov dword [ebp - 0x304], eax
cmp dword [ebp - 0x304], 0
je 0x6323f7
mov eax, dword [ebp - 0x304]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x304], eax
lea eax, [ebp - 0x2c]
call fcn.00407318
mov edx, 1
dec edx
test eax, eax
je 0x63240e
cmp edx, dword [eax - 4]
jb 0x632413
call fcn.00405714
inc edx
lea eax, [eax + edx - 1]
push eax
lea eax, [ebp - 0x90]
call fcn.00408710
mov edx, 1
dec edx
test eax, eax
je 0x632433
cmp edx, dword [eax - 4]
jb 0x632438
call fcn.00405714
inc edx
lea eax, [eax + edx*2 - 2]
mov ecx, dword [ebp - 0x304]
add ecx, ecx
pop edx
call fcn.0040452c
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x308], eax
cmp dword [ebp - 0x308], 0
je 0x632486
mov eax, dword [ebp - 0x308]
sub eax, 0xa
cmp word [eax], 2
je 0x632486
lea eax, [ebp - 0x90]
mov edx, dword [ebp - 0x90]
call fcn.00406d1c
mov dword [ebp - 0x308], eax
mov eax, dword [ebp - 0x308]
mov dword [ebp - 0x30c], eax
cmp dword [ebp - 0x30c], 0
je 0x6324ac
mov eax, dword [ebp - 0x30c]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x30c], eax
lea eax, [ebp - 0x451c]
push eax
mov ecx, 0xc
xor edx, edx
mov eax, dword [ebp - 0x2c]
call fcn.00626b7c
mov eax, dword [ebp - 0x451c]
push eax
lea eax, [ebp - 0x4524]
mov edx, dword [ebp - 0x30c]
mov byte [eax + 1], dl
mov byte [eax], 1
lea edx, [ebp - 0x4524]
lea eax, [ebp - 0x4528]
call fcn.00404db4
mov edx, 0x639008
lea eax, [ebp - 0x4528]
mov cl, 2
call fcn.00404d84
lea edx, [ebp - 0x4528]
lea eax, [ebp - 0x4520]
mov ecx, 0
call fcn.00406e88
mov edx, dword [ebp - 0x4520]
lea eax, [ebp - 0x2c]
pop ecx
call fcn.00406ff0
movzx eax, byte [0x639008]
push eax
lea eax, [ebp - 0x452c]
push eax
lea eax, [ebp - 0x4534]
push eax
mov ecx, 0xb
mov dl, 0x20
mov eax, dword [ebp - 0x28]
call fcn.00626b7c
mov ecx, dword [ebp - 0x4534]
lea eax, [ebp - 0x4530]
mov edx, 0x639198
call fcn.00406ff0
mov ecx, dword [ebp - 0x4530]
mov edx, 0x6391a8
mov eax, dword [ebp - 0x4c]
call fcn.0067031c
mov edx, dword [ebp - 0x452c]
lea eax, [ebp - 0x4c]
call fcn.00406be0
movzx eax, byte [0x639008]
push eax
lea eax, [ebp - 0x4538]
push eax
lea eax, [ebp - 0x4540]
push eax
lea edx, [ebp - 0x4548]
mov eax, dword [ebp - 0x94]
call fcn.00415390
mov edx, dword [ebp - 0x4548]
lea eax, [ebp - 0x4544]
mov ecx, 0
call fcn.00407ef0
mov eax, dword [ebp - 0x4544]
mov ecx, 0xc
xor edx, edx
call fcn.00626b7c
mov ecx, dword [ebp - 0x4540]
lea eax, [ebp - 0x453c]
mov edx, 0x639198
call fcn.00406ff0
mov ecx, dword [ebp - 0x453c]
mov edx, 0x6391c4
mov eax, dword [ebp - 0x4c]
call fcn.0067031c
mov edx, dword [ebp - 0x4538]
lea eax, [ebp - 0x4c]
call fcn.00406be0
lea eax, [ebp - 0x5c]
call fcn.00406b30
lea eax, [ebp - 0x60]
call fcn.00406b30
lea eax, [ebp - 0x68]
call fcn.00406b30
mov eax, dword [ebp - 0x234]
mov eax, dword [eax + 0x69c]
mov edx, dword [eax]
call dword [edx + 0xec]
test al, al
jne 0x632665
mov eax, dword [ebp - 0x234]
mov eax, dword [eax + 0x698]
mov edx, dword [eax]
call dword [edx + 0xec]
test al, al
jne 0x632665
mov eax, dword [ebp - 0x234]
mov eax, dword [eax + 0x694]
mov edx, dword [eax]
call dword [edx + 0xec]
test al, al
je 0x6326b2
lea eax, [ebp - 0x454c]
mov ecx, 0x6391e0
mov edx, dword [0x6b26e0]
call fcn.00408180
mov edx, dword [ebp - 0x454c]
xor eax, eax
mov ecx, dword [0x6b2668]
test ecx, ecx
je 0x632692
cmp eax, dword [ecx - 4]
jb 0x632697
call fcn.00405714
mov eax, dword [ecx + eax*4]
xor ecx, ecx
test eax, eax
je 0x6326a5
cmp ecx, dword [eax - 4]
jb 0x6326aa
call fcn.00405714
mov eax, dword [eax + ecx*4]
call fcn.0061f114
mov eax, dword [ebp - 0x234]
mov eax, dword [eax + 0x694]
mov edx, dword [eax]
call dword [edx + 0xec]
test al, al
je 0x632722
lea eax, [ebp - 0x58]
mov edx, dword [ebp - 0x54]
call fcn.00406be0
lea eax, [ebp - 0x4550]
mov ecx, 0x6391fc
mov edx, dword [0x6b26e0]
call fcn.00408180
mov edx, dword [ebp - 0x4550]
mov eax, dword [ebp - 0x58]
call fcn.0061f058
push 7
lea eax, [ebp - 0x4554]
mov ecx, 0x6391fc
mov edx, dword [0x6b26e0]
call fcn.00408180
mov eax, dword [ebp - 0x4554]
call fcn.00407d28
push eax
call sub.kernel32.dll_SetFileAttributesW
mov eax, dword [ebp - 0x234]
mov eax, dword [eax + 0x698]
mov edx, dword [eax]
call dword [edx + 0xec]
test al, al
je 0x63286c
lea eax, [ebp - 0x58]
mov edx, dword [ebp - 0x54]
call fcn.00406be0
mov eax, 0x639224
call fcn.00626d98
test al, al
je 0x6327a9
lea eax, [ebp - 0x4558]
mov ecx, 0x639254
mov edx, dword [0x6b26e0]
call fcn.00408180
mov edx, dword [ebp - 0x4558]
mov eax, dword [ebp - 0x58]
call fcn.0061f058
push 7
lea eax, [ebp - 0x455c]
mov ecx, 0x639254
mov edx, dword [0x6b26e0]
call fcn.00408180
mov eax, dword [ebp - 0x455c]
call fcn.00407d28
push eax
call sub.kernel32.dll_SetFileAttributesW
jmp 0x63286c
lea eax, [ebp - 0x4560]
mov ecx, 0x6391e0
mov edx, dword [0x6b26e0]
call fcn.00408180
mov edx, dword [ebp - 0x4560]
mov eax, dword [ebp - 0x58]
call fcn.0061f058
push 7
lea eax, [ebp - 0x4564]
mov ecx, 0x6391e0
mov edx, dword [0x6b26e0]
call fcn.00408180
mov eax, dword [ebp - 0x4564]
call fcn.00407d28
push eax
call sub.kernel32.dll_SetFileAttributesW
lea eax, [ebp - 0x4568]
mov ecx, 0x6391fc
mov edx, dword [0x6b26e0]
call fcn.00408180
mov edx, dword [ebp - 0x4568]
xor eax, eax
mov ecx, dword [0x6b2668]
test ecx, ecx
je 0x632823
cmp eax, dword [ecx - 4]
jb 0x632828
call fcn.00405714
mov eax, dword [ecx + eax*4]
xor ecx, ecx
test eax, eax
je 0x632836
cmp ecx, dword [eax - 4]
jb 0x63283b
call fcn.00405714
mov eax, dword [eax + ecx*4]
call fcn.0061f058
push 7
lea eax, [ebp - 0x456c]
mov ecx, 0x6391fc
mov edx, dword [0x6b26e0]
call fcn.00408180
mov eax, dword [ebp - 0x456c]
call fcn.00407d28
push eax
call sub.kernel32.dll_SetFileAttributesW
mov eax, dword [ebp - 0x234]
mov eax, dword [eax + 0x3c0]
mov edx, dword [eax]
call dword [edx + 0xec]
mov ebx, eax
call fcn.00625cc4
add ebx, eax
inc ebx
mov eax, dword [0x6b2668]
test eax, eax
je 0x632898
cmp ebx, dword [eax - 4]
jb 0x63289d
call fcn.00405714
mov eax, dword [eax + ebx*4]
call fcn.0040982c
mov ebx, eax
dec ebx
cmp ebx, 0
jl 0x6349ad
lea eax, [ebp - 0x4570]
push eax
lea eax, [ebp - 0x4574]
push eax
mov eax, dword [ebp - 0x234]
mov eax, dword [eax + 0x3c0]
mov edx, dword [eax]
call dword [edx + 0xec]
mov esi, eax
call fcn.00625cc4
add esi, eax
mov edx, esi
inc edx
lea ecx, [ebp - 0x4578]
mov eax, dword [0x6b2768]
mov esi, dword [eax]
call dword [esi + 0xc]
mov eax, dword [ebp - 0x4578]
lea ecx, [ebx + 4]
mov edx, 0x6390e8
call fcn.00672580
mov eax, dword [ebp - 0x4574]
mov ecx, 2
mov edx, 0x6390f8
call fcn.00672580
mov eax, dword [ebp - 0x4570]
lea edx, [ebp - 0x9c]
call fcn.004152c8
lea eax, [ebp - 0x457c]
push eax
lea eax, [ebp - 0x4580]
push eax
mov eax, dword [ebp - 0x234]
mov eax, dword [eax + 0x3c0]
mov edx, dword [eax]
call dword [edx + 0xec]
mov esi, eax
call fcn.00625cc4
add esi, eax
mov edx, esi
inc edx
lea ecx, [ebp - 0x4584]
mov eax, dword [0x6b2768]
mov esi, dword [eax]
call dword [esi + 0xc]
mov eax, dword [ebp - 0x4584]
lea ecx, [ebx + 4]
mov edx, 0x6390e8
call fcn.00672580
mov eax, dword [ebp - 0x4580]
mov ecx, 1
mov edx, 0x6390f8
call fcn.00672580
mov eax, dword [ebp - 0x457c]
lea edx, [ebp - 0x98]
call fcn.004152c8
mov eax, dword [ebp - 0x9c]
mov edx, 0x639270
call fcn.00408384
jne 0x6329fe
mov eax, dword [ebp - 0x234]
mov eax, dword [eax + 0x3c0]
mov edx, dword [eax]
call dword [edx + 0xec]
mov esi, eax
call fcn.00625cc4
add esi, eax
inc esi
mov eax, dword [0x6b2668]
test eax, eax
je 0x6329dd
cmp esi, dword [eax - 4]
jb 0x6329e2
call fcn.00405714
mov eax, dword [eax + esi*4]
test eax, eax
je 0x6329ee
cmp ebx, dword [eax - 4]
jb 0x6329f3
call fcn.00405714
lea eax, [eax + ebx*4]
mov edx, dword [ebp - 8]
call fcn.00406b84
mov eax, dword [ebp - 0x234]
mov eax, dword [eax + 0x3c0]
mov edx, dword [eax]
call dword [edx + 0xec]
mov esi, eax
call fcn.00625cc4
add esi, eax
inc esi
mov eax, dword [0x6b2668]
test eax, eax
je 0x632a2a
cmp esi, dword [eax - 4]
jb 0x632a2f
call fcn.00405714
mov eax, dword [eax + esi*4]
test eax, eax
je 0x632a3b
cmp ebx, dword [eax - 4]
jb 0x632a40
call fcn.00405714
mov edx, dword [eax + ebx*4]
lea eax, [ebp - 0x64]
call fcn.00406be0
mov eax, dword [ebp - 0x98]
mov edx, 0x639288
call fcn.00408384
jne 0x632a64
mov byte [ebp - 0x2b1], 1
test ebx, ebx
jne 0x632a79
lea eax, [ebp - 0x98]
mov edx, dword [ebp - 0x94]
call fcn.00407cf0
test ebx, ebx
jne 0x632fd4
mov eax, dword [ebp - 0x234]
mov eax, dword [eax + 0x3c0]
mov edx, dword [eax]
call dword [edx + 0xec]
mov esi, eax
call fcn.00625cc4
add esi, eax
test esi, esi
jl 0x632fd4
mov eax, dword [ebp - 0x234]
mov eax, dword [eax + 0x3c0]
mov edx, dword [eax]
call dword [edx + 0xec]
mov esi, eax
call fcn.00625cc4
add esi, eax
cmp esi, 2
jg 0x632fd4
mov dword [ebp - 0x2cc], 0x1d
mov eax, dword [ebp - 0x234]
mov eax, dword [eax + 0x3c0]
mov edx, dword [eax]
call dword [edx + 0xec]
mov esi, eax
call fcn.00625cc4
add esi, eax
mov dword [ebp - 0x2d0], esi
mov eax, dword [ebp - 0x234]
mov eax, dword [eax + 0x694]
mov edx, dword [eax]
call dword [edx + 0xec]
test al, al
je 0x632b1e
lea eax, [ebp - 0x14]
mov edx, dword [ebp - 0x54]
call fcn.00406be0
jmp 0x632b9b
mov eax, 0x638fa4
call fcn.00626d98
test al, al
je 0x632b62
lea eax, [ebp - 0x14]
xor edx, edx
mov ecx, dword [0x6b2668]
test ecx, ecx
je 0x632b40
cmp edx, dword [ecx - 4]
jb 0x632b45
call fcn.00405714
mov edx, dword [ecx + edx*4]
xor ecx, ecx
test edx, edx
je 0x632b53
cmp ecx, dword [edx - 4]
jb 0x632b58
call fcn.00405714
mov edx, dword [edx + ecx*4]
call fcn.00406be0
jmp 0x632b9b
lea eax, [ebp - 0x14]
mov edx, dword [ebp - 0x2d0]
inc edx
mov ecx, dword [0x6b2668]
test ecx, ecx
je 0x632b7b
cmp edx, dword [ecx - 4]
jb 0x632b80
call fcn.00405714
mov edx, dword [ecx + edx*4]
xor ecx, ecx
test edx, edx
je 0x632b8e
cmp ecx, dword [edx - 4]
jb 0x632b93
call fcn.00405714
mov edx, dword [edx + ecx*4]
call fcn.00406be0
lea eax, [ebp - 0x10]
push eax
mov ecx, 0x80
mov edx, 0x3e60
mov eax, dword [ebp - 0x50]
call fcn.00407320
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x310], eax
cmp dword [ebp - 0x310], 0
je 0x632be5
mov eax, dword [ebp - 0x310]
sub eax, 0xa
cmp word [eax], 1
je 0x632be5
lea eax, [ebp - 0x14]
xor ecx, ecx
mov edx, dword [ebp - 0x14]
call fcn.00406d4c
mov dword [ebp - 0x310], eax
mov eax, dword [ebp - 0x310]
mov dword [ebp - 0x314], eax
cmp dword [ebp - 0x314], 0
je 0x632c0b
mov eax, dword [ebp - 0x314]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x314], eax
lea eax, [ebp - 0x3c]
xor ecx, ecx
mov edx, dword [ebp - 0x314]
call fcn.00407584
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x318], eax
cmp dword [ebp - 0x318], 0
je 0x632c4f
mov eax, dword [ebp - 0x318]
sub eax, 0xa
cmp word [eax], 1
je 0x632c4f
lea eax, [ebp - 0x14]
xor ecx, ecx
mov edx, dword [ebp - 0x14]
call fcn.00406d4c
mov dword [ebp - 0x318], eax
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x31c], eax
cmp dword [ebp - 0x31c], 0
je 0x632c83
mov eax, dword [ebp - 0x31c]
sub eax, 0xa
cmp word [eax], 1
je 0x632c83
lea eax, [ebp - 0x3c]
xor ecx, ecx
mov edx, dword [ebp - 0x3c]
call fcn.00406d4c
mov dword [ebp - 0x31c], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x320], eax
cmp dword [ebp - 0x320], 0
je 0x632cb7
mov eax, dword [ebp - 0x320]
sub eax, 0xa
cmp word [eax], 1
je 0x632cb7
lea eax, [ebp - 0x14]
xor ecx, ecx
mov edx, dword [ebp - 0x14]
call fcn.00406d4c
mov dword [ebp - 0x320], eax
mov eax, dword [ebp - 0x320]
mov dword [ebp - 0x324], eax
cmp dword [ebp - 0x324], 0
je 0x632cdd
mov eax, dword [ebp - 0x324]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x324], eax
lea eax, [ebp - 0x3c]
call fcn.00407318
mov edx, 1
dec edx
test eax, eax
je 0x632cf4
cmp edx, dword [eax - 4]
jb 0x632cf9
call fcn.00405714
inc edx
lea eax, [eax + edx - 1]
push eax
lea eax, [ebp - 0x14]
call fcn.00407318
mov edx, 1
dec edx
test eax, eax
je 0x632d16
cmp edx, dword [eax - 4]
jb 0x632d1b
call fcn.00405714
inc edx
lea eax, [eax + edx - 1]
mov ecx, dword [ebp - 0x324]
pop edx
call fcn.0040452c
lea edx, [ebp - 0x4588]
mov eax, dword [ebp - 0x3c]
call fcn.0040b2d4
mov edx, dword [ebp - 0x4588]
mov eax, dword [ebp - 0x2d4]
call fcn.0057ebc4
mov eax, dword [ebp - 0x2d4]
call fcn.0057e6f8
test al, al
je 0x632e26
lea ecx, [ebp - 0x458c]
mov edx, 1
mov eax, dword [ebp - 0x2d4]
call fcn.0057e564
mov eax, dword [ebp - 0x458c]
mov edx, 0x6392a8
call fcn.0040721c
jne 0x632d90
mov dword [ebp - 0x2cc], 0xdd
lea ecx, [ebp - 0x4590]
mov edx, 1
mov eax, dword [ebp - 0x2d4]
call fcn.0057e564
mov eax, dword [ebp - 0x4590]
mov edx, 0x6392c0
call fcn.0040721c
jne 0x632dc2
mov dword [ebp - 0x2cc], 0x7d
lea ecx, [ebp - 0x4594]
mov edx, 1
mov eax, dword [ebp - 0x2d4]
call fcn.0057e564
mov eax, dword [ebp - 0x4594]
mov edx, 0x6392d8
call fcn.0040721c
jne 0x632df4
mov dword [ebp - 0x2cc], 0x7d
lea ecx, [ebp - 0x4598]
mov edx, 2
mov eax, dword [ebp - 0x2d4]
call fcn.0057e564
mov eax, dword [ebp - 0x4598]
mov edx, 0x6392f0
call fcn.0040721c
jne 0x632e26
mov dword [ebp - 0x2cc], 0x1d
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x10]
call fcn.00407440
mov esi, eax
add esi, 0x80
add esi, dword [ebp - 0x2cc]
test esi, esi
jle 0x632fd4
cmp esi, 0xffff
jbe 0x632e54
call fcn.00405714
mov word [ebp - 2], si
movzx eax, word [ebp - 2]
mov word [ebp - 0x23e], ax
lea eax, [ebp - 0x14]
call fcn.00407318
mov edx, 2
dec edx
test eax, eax
je 0x632e7a
cmp edx, dword [eax - 4]
jb 0x632e7f
call fcn.00405714
inc edx
movzx ecx, byte [ebp - 0x23e]
mov byte [eax + edx - 1], cl
lea eax, [ebp - 0x14]
call fcn.00407318
mov edx, 3
dec edx
test eax, eax
je 0x632ea2
cmp edx, dword [eax - 4]
jb 0x632ea7
call fcn.00405714
inc edx
movzx ecx, byte [ebp - 0x23d]
mov byte [eax + edx - 1], cl
mov eax, dword [ebp - 0x2d0]
cmp eax, 2
jbe 0x632ec3
call fcn.00405714
mov eax, dword [eax*4 + 0x6b27f4]
add eax, esi
cmp eax, 0xffff
jbe 0x632ed8
call fcn.00405714
mov word [ebp - 2], ax
movzx eax, word [ebp - 2]
mov word [ebp - 0x23e], ax
lea eax, [ebp - 0x459c]
push eax
lea eax, [ebp - 0x45a0]
push eax
mov ecx, dword [ebp - 0x2cc]
add ecx, 3
xor edx, edx
xor eax, eax
call fcn.00626b7c
lea eax, [ebp - 0x45a0]
mov edx, dword [ebp - 0x2d0]
cmp edx, 2
jbe 0x632f1d
call fcn.00405714
mov edx, dword [edx*4 + 0x6b27dc]
call fcn.00406f28
mov eax, dword [ebp - 0x45a0]
mov ecx, 0x13f8
xor edx, edx
call fcn.00626b7c
mov edx, dword [ebp - 0x459c]
mov ecx, esi
sub ecx, dword [ebp - 0x2cc]
inc ecx
lea eax, [ebp - 0x14]
call fcn.00670554
lea eax, [ebp - 0x14]
call fcn.00407318
mov edx, dword [ebp - 0x2d0]
cmp edx, 2
jbe 0x632f6a
call fcn.00405714
mov edx, dword [edx*4 + 0x6b27e8]
add edx, esi
dec edx
test eax, eax
je 0x632f7d
cmp edx, dword [eax - 4]
jb 0x632f82
call fcn.00405714
inc edx
movzx ecx, byte [ebp - 0x23d]
mov byte [eax + edx - 1], cl
lea eax, [ebp - 0x14]
call fcn.00407318
mov edx, dword [ebp - 0x2d0]
cmp edx, 2
jbe 0x632fa6
call fcn.00405714
add esi, dword [edx*4 + 0x6b27e8]
inc esi
dec esi
test eax, eax
je 0x632fb8
cmp esi, dword [eax - 4]
jb 0x632fbd
call fcn.00405714
inc esi
movzx edx, byte [ebp - 0x23e]
mov byte [eax + esi - 1], dl
lea eax, [ebp - 0x64]
mov edx, dword [ebp - 0x14]
call fcn.00406be0
mov eax, dword [ebp - 0x98]
mov edx, 0x639300
call fcn.00408384
je 0x633020
mov eax, dword [ebp - 0x98]
mov edx, 0x639320
call fcn.00408384
je 0x633020
mov eax, dword [ebp - 0x98]
mov edx, 0x639340
call fcn.00408384
je 0x633020
mov eax, dword [ebp - 0x98]
mov edx, 0x63935c
call fcn.00408384
jne 0x633193
movzx eax, byte [0x639008]
push eax
lea eax, [ebp - 0x45a4]
push eax
lea eax, [ebp - 0x45ac]
mov edx, dword [ebp - 0x94]
mov ecx, 0
call fcn.00407ef0
mov ecx, dword [ebp - 0x45ac]
lea eax, [ebp - 0x45a8]
mov edx, 0x639378
call fcn.00406ff0
mov ecx, dword [ebp - 0x45a8]
mov edx, 0x639388
mov eax, dword [ebp - 0x64]
call fcn.0067031c
mov edx, dword [ebp - 0x45a4]
lea eax, [ebp - 0x64]
call fcn.00406be0
mov eax, dword [ebp - 0x234]
mov eax, dword [eax + 0x69c]
mov edx, dword [eax]
call dword [edx + 0xec]
test al, al
jne 0x6330ba
mov eax, 0x639224
call fcn.00626d98
test al, al
je 0x6330e9
mov eax, dword [ebp - 0x234]
mov eax, dword [eax + 0x698]
mov edx, dword [eax]
call dword [edx + 0xec]
test al, al
je 0x6330e9
movzx eax, byte [0x639008]
push eax
lea eax, [ebp - 0x45b0]
push eax
mov ecx, 0x63939c
mov edx, 0x6393b4
mov eax, dword [ebp - 0x64]
call fcn.0067031c
mov edx, dword [ebp - 0x45b0]
lea eax, [ebp - 0x64]
call fcn.00406be0
mov eax, dword [ebp - 0x98]
mov edx, 0x639300
call fcn.00408384
jne 0x633106
lea eax, [ebp - 0x5c]
mov edx, dword [ebp - 0x64]
call fcn.00406be0
mov eax, dword [ebp - 0x98]
mov edx, 0x63935c
call fcn.00408384
jne 0x633123
lea eax, [ebp - 0x60]
mov edx, dword [ebp - 0x64]
call fcn.00406be0
mov eax, dword [ebp - 0x98]
mov edx, 0x639340
call fcn.00408384
jne 0x633193
mov eax, 0x6393d0
call fcn.00626d98
test al, al
je 0x633193
lea eax, [ebp - 0x45b4]
mov ecx, 0x6393f4
mov edx, dword [0x6b26e0]
call fcn.00408180
mov eax, dword [ebp - 0x45b4]
call fcn.0061f520
lea eax, [ebp - 0x45b8]
mov ecx, 0x6393f4
mov edx, dword [0x6b26e0]
call fcn.00408180
mov edx, dword [ebp - 0x45b8]
mov eax, dword [ebp - 0x5c]
call fcn.0061f058
lea eax, [ebp - 0x5c]
mov edx, dword [ebp - 0x64]
call fcn.00406be0
mov eax, dword [ebp - 0x98]
mov edx, 0x639414
call fcn.00408384
je 0x6332a2
lea eax, [ebp - 0x45bc]
push eax
mov eax, dword [ebp - 0x234]
mov eax, dword [eax + 0x3c0]
mov edx, dword [eax]
call dword [edx + 0xec]
mov esi, eax
call fcn.00625cc4
add esi, eax
mov edx, esi
inc edx
lea ecx, [ebp - 0x45c0]
mov eax, dword [0x6b2768]
mov esi, dword [eax]
call dword [esi + 0xc]
mov eax, dword [ebp - 0x45c0]
mov ecx, 2
mov edx, 0x6390e8
call fcn.00672580
mov eax, dword [ebp - 0x45bc]
mov edx, 0x639444
call fcn.00408384
jne 0x6332a2
push 1
push 1
mov cl, 1
mov edx, dword [ebp - 0x64]
mov eax, 0x6390ac
call fcn.0057f538
mov esi, eax
test esi, esi
jle 0x6332a2
lea eax, [ebp - 0x45c4]
push eax
mov edx, esi
sub edx, 0x20
mov ecx, 0xe
mov eax, dword [ebp - 0x64]
call fcn.00407320
mov eax, dword [ebp - 0x45c4]
push eax
lea eax, [ebp - 0x45c8]
push eax
lea edx, [esi + 0xa]
mov ecx, 0xe
mov eax, dword [ebp - 0x64]
call fcn.00407320
mov edx, dword [ebp - 0x45c8]
pop eax
call fcn.0040721c
jne 0x633295
lea eax, [ebp - 0x45cc]
push eax
mov ecx, 0xe
mov edx, 0xb
mov eax, dword [ebp - 8]
call fcn.00407320
mov edx, dword [ebp - 0x45cc]
mov ecx, esi
sub ecx, 0x20
lea eax, [ebp - 0x64]
call fcn.00670554
lea eax, [ebp - 0x64]
mov ecx, esi
mov edx, dword [ebp - 8]
call fcn.00670554
cmp byte [ebp - 0x28d], 0
jne 0x633842
mov eax, dword [ebp - 0x98]
mov edx, 0x639414
call fcn.00408384
jne 0x633842
lea eax, [ebp - 0x45d0]
push eax
mov ecx, 1
mov edx, 0x1c3
mov eax, dword [0x6b27b0]
call fcn.00407320
mov eax, dword [ebp - 0x45d0]
mov edx, 0x63909c
call fcn.0040721c
jne 0x63330e
mov eax, dword [ebp - 0x234]
mov eax, dword [eax + 0x69c]
mov edx, dword [eax]
call dword [edx + 0xec]
test al, al
jne 0x633842
lea eax, [ebp - 0x45d4]
call fcn.0061dcb0
lea eax, [ebp - 0x45d4]
mov edx, 0x639454
call fcn.004080c0
mov edx, dword [ebp - 0x45d4]
mov eax, dword [ebp - 8]
call fcn.0061f058
lea eax, [ebp - 0x45d8]
push eax
mov ecx, 0x200
mov dl, 0xff
xor eax, eax
call fcn.00626b7c
lea eax, [ebp - 0x45d8]
push eax
lea eax, [ebp - 0x45dc]
push eax
mov ecx, 0x40000
xor edx, edx
xor eax, eax
call fcn.00626b7c
mov edx, dword [ebp - 0x45dc]
pop eax
call fcn.00406f28
mov eax, dword [ebp - 0x45d8]
push eax
lea eax, [ebp - 0x45e0]
call fcn.0061dcb0
lea eax, [ebp - 0x45e0]
mov edx, 0x63947c
call fcn.004080c0
mov edx, dword [ebp - 0x45e0]
pop eax
call fcn.0061f058
movzx eax, byte [0x639008]
push eax
lea eax, [ebp - 0x45e4]
push eax
mov ecx, 0x6394b0
mov edx, 0x6394d0
mov eax, dword [ebp - 0x64]
call fcn.0067031c
mov edx, dword [ebp - 0x45e4]
lea eax, [ebp - 0x64]
call fcn.00406be0
lea eax, [ebp - 0x45e8]
call fcn.0061dcb0
lea eax, [ebp - 0x45e8]
mov edx, dword [ebp - 0x98]
call fcn.004080c0
mov edx, dword [ebp - 0x45e8]
mov eax, dword [ebp - 0x64]
call fcn.0061f058
lea eax, [ebp - 0xc4]
xor edx, edx
call fcn.00407cf0
cmp byte [0x6b264d], 0
je 0x633426
lea eax, [ebp - 0xc4]
mov edx, 0x6394f0
call fcn.00407cf0
jmp 0x6334d2
cmp byte [0x6b2646], 0
je 0x6334d2
cmp byte [0x6b264e], 0
jne 0x6334d2
cmp byte [0x6b264c], 0
jne 0x6334d2
lea eax, [ebp - 0xc4]
mov edx, 0x639510
call fcn.00407cf0
cmp dword [0x6b27d0], 0xffffffff
je 0x6334d2
push dword [ebp - 0xc4]
push 0x63952c
lea ecx, [ebp - 0x45ec]
mov edx, 4
mov eax, dword [0x6b27d0]
call fcn.00416450
push dword [ebp - 0x45ec]
lea eax, [ebp - 0xc4]
mov edx, 3
call fcn.00408264
push dword [ebp - 0xc4]
push 0x639550
lea ecx, [ebp - 0x45f0]
mov edx, 2
mov eax, dword [0x6b27d4]
call fcn.00416450
push dword [ebp - 0x45f0]
lea eax, [ebp - 0xc4]
mov edx, 3
call fcn.00408264
cmp byte [0x6b2725], 0
je 0x633521
cmp dword [0x6b2710], 0
je 0x6334f6
lea eax, [ebp - 0xc4]
mov edx, 0x639574
call fcn.004080c0
jmp 0x633521
cmp dword [0x6b270c], 0
je 0x633511
lea eax, [ebp - 0xc4]
mov edx, 0x6395a8
call fcn.004080c0
jmp 0x633521
lea eax, [ebp - 0xc4]
mov edx, 0x6395dc
call fcn.004080c0
mov eax, dword [0x6b2728]
push eax
lea eax, [ebp - 0x45f4]
call fcn.0061dcb0
mov eax, dword [ebp - 0x45f4]
push eax
lea eax, [ebp - 0x45f8]
call fcn.0061dcb0
lea eax, [ebp - 0x45f8]
mov edx, dword [ebp - 0x98]
call fcn.004080c0
mov eax, dword [ebp - 0x45f8]
push eax
lea eax, [ebp - 0x45fc]
mov ecx, dword [ebp - 0xc4]
mov edx, 0x639614
call fcn.00408180
mov edx, dword [ebp - 0x45fc]
pop eax
pop ecx
call fcn.0061cb60
xor eax, eax
mov dword [ebp - 0x28c], eax
lea eax, [ebp - 0x4600]
call fcn.0061dcb0
lea eax, [ebp - 0x4600]
mov edx, 0x63947c
call fcn.004080c0
mov eax, dword [ebp - 0x4600]
lea ecx, [ebp - 0x40]
xor edx, edx
call fcn.0061f27c
lea eax, [ebp - 0x4604]
push eax
mov ecx, 0x200
mov dl, 0xff
xor eax, eax
call fcn.00626b7c
mov eax, dword [ebp - 0x4604]
push eax
lea eax, [ebp - 0x4608]
push eax
mov ecx, 0x200
mov edx, 0x201
mov eax, dword [ebp - 0x40]
call fcn.00407320
mov edx, dword [ebp - 0x4608]
pop eax
call fcn.0040721c
jne 0x6337c6
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x328], eax
cmp dword [ebp - 0x328], 0
je 0x63362d
mov eax, dword [ebp - 0x328]
sub eax, 0xa
cmp word [eax], 1
je 0x63362d
lea eax, [ebp - 0x40]
xor ecx, ecx
mov edx, dword [ebp - 0x40]
call fcn.00406d4c
mov dword [ebp - 0x328], eax
mov eax, dword [ebp - 0x328]
mov dword [ebp - 0x32c], eax
cmp dword [ebp - 0x32c], 0
je 0x633653
mov eax, dword [ebp - 0x32c]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x32c], eax
mov eax, dword [ebp - 0x32c]
test eax, eax
jns 0x633662
add eax, 0x1ff
sar eax, 9
dec eax
sub eax, 2
jl 0x6336e1
inc eax
mov dword [ebp - 0x2e0], eax
mov dword [ebp - 0x2c8], 2
lea eax, [ebp - 0x460c]
push eax
mov ecx, 0x200
xor edx, edx
xor eax, eax
call fcn.00626b7c
mov eax, dword [ebp - 0x460c]
push eax
lea eax, [ebp - 0x4610]
push eax
mov edx, dword [ebp - 0x2c8]
shl edx, 9
inc edx
mov ecx, 0x200
mov eax, dword [ebp - 0x40]
call fcn.00407320
mov edx, dword [ebp - 0x4610]
pop eax
call fcn.0040721c
jne 0x6336d3
mov eax, dword [ebp - 0x2c8]
dec eax
mov dword [ebp - 0x28c], eax
jmp 0x6336e1
inc dword [ebp - 0x2c8]
dec dword [ebp - 0x2e0]
jne 0x63367c
cmp dword [ebp - 0x28c], 0
jle 0x6337c6
mov eax, dword [0x6b27b0]
mov dword [ebp - 0x330], eax
cmp dword [ebp - 0x330], 0
je 0x633729
mov eax, dword [ebp - 0x330]
sub eax, 0xa
cmp word [eax], 1
je 0x633729
mov eax, 0x6b27b0
xor ecx, ecx
mov edx, dword [0x6b27b0]
call fcn.00406d4c
mov dword [ebp - 0x330], eax
mov eax, dword [ebp - 0x330]
mov dword [ebp - 0x334], eax
cmp dword [ebp - 0x334], 0
je 0x63374f
mov eax, dword [ebp - 0x334]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x334], eax
mov eax, dword [ebp - 0x28c]
shl eax, 9
cmp eax, dword [ebp - 0x334]
jg 0x633769
mov byte [ebp - 0x335], 1
jmp 0x633783
mov eax, dword [ebp - 0x234]
mov eax, dword [eax + 0x698]
mov edx, dword [eax]
call dword [edx + 0xec]
mov byte [ebp - 0x335], al
cmp byte [ebp - 0x335], 0
je 0x633795
mov byte [ebp - 0x336], 1
jmp 0x6337af
mov eax, dword [ebp - 0x234]
mov eax, dword [eax + 0x694]
mov edx, dword [eax]
call dword [edx + 0xec]
mov byte [ebp - 0x336], al
cmp byte [ebp - 0x336], 0
je 0x6337c6
mov byte [ebp - 0x28d], 1
mov byte [ebp - 0x28e], 1
cmp byte [ebp - 0x28e], 0
jne 0x63381c
lea eax, [ebp - 0x4614]
call fcn.0061dcb0
lea eax, [ebp - 0x4614]
mov edx, dword [ebp - 0x98]
call fcn.004080c0
mov eax, dword [ebp - 0x4614]
call fcn.0061f520
lea eax, [ebp - 0x4618]
call fcn.0061dcb0
lea eax, [ebp - 0x4618]
mov edx, 0x639454
call fcn.004080c0
mov eax, dword [ebp - 0x4618]
call fcn.0061f520
lea eax, [ebp - 0x461c]
call fcn.0061dcb0
lea eax, [ebp - 0x461c]
mov edx, 0x63947c
call fcn.004080c0
mov eax, dword [ebp - 0x461c]
call fcn.0061f520
cmp byte [ebp - 0x28e], 0
je 0x633e15
mov eax, dword [ebp - 0x234]
mov eax, dword [eax + 0x69c]
mov edx, dword [eax]
call dword [edx + 0xec]
test al, al
jne 0x6338c2
mov eax, dword [ebp - 0x234]
mov eax, dword [eax + 0x698]
mov edx, dword [eax]
call dword [edx + 0xec]
test al, al
jne 0x63389b
mov eax, dword [ebp - 0x234]
mov eax, dword [eax + 0x694]
mov edx, dword [eax]
call dword [edx + 0xec]
test al, al
je 0x633e15
lea edx, [ebp - 0x4620]
mov eax, dword [ebp - 0x98]
call fcn.00417280
mov edx, dword [ebp - 0x4620]
mov eax, 0x639688
call fcn.00408384
jne 0x633e15
mov eax, dword [ebp - 0x234]
mov eax, dword [eax + 0x69c]
mov edx, dword [eax]
call dword [edx + 0xec]
test al, al
je 0x633902
lea eax, [ebp - 0x74]
mov edx, dword [ebp - 0x70]
call fcn.00406be0
cmp byte [0x6b26f5], 0
je 0x633981
lea eax, [ebp - 0x74]
mov edx, dword [0x6b27b0]
call fcn.00406be0
jmp 0x633981
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x33c], eax
cmp dword [ebp - 0x33c], 0
je 0x633936
mov eax, dword [ebp - 0x33c]
sub eax, 0xa
cmp word [eax], 1
je 0x633936
lea eax, [ebp - 0x64]
xor ecx, ecx
mov edx, dword [ebp - 0x64]
call fcn.00406d4c
mov dword [ebp - 0x33c], eax
lea eax, [ebp - 0x64]
call fcn.00407318
mov edx, 0x1c7
dec edx
test eax, eax
je 0x63394d
cmp edx, dword [eax - 4]
jb 0x633952
call fcn.00405714
inc edx
lea eax, [eax + edx - 1]
lea edx, [ebp - 0x2dc]
mov ecx, 4
call fcn.0040452c
lea eax, [ebp - 0x74]
push eax
mov ecx, dword [ebp - 0x2dc]
shl ecx, 9
mov edx, 1
mov eax, dword [ebp - 0x64]
call fcn.00407320
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x340], eax
cmp dword [ebp - 0x340], 0
je 0x6339b5
mov eax, dword [ebp - 0x340]
sub eax, 0xa
cmp word [eax], 1
je 0x6339b5
lea eax, [ebp - 0x74]
xor ecx, ecx
mov edx, dword [ebp - 0x74]
call fcn.00406d4c
mov dword [ebp - 0x340], eax
mov eax, dword [ebp - 0x340]
mov dword [ebp - 0x344], eax
cmp dword [ebp - 0x344], 0
je 0x6339db
mov eax, dword [ebp - 0x344]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x344], eax
mov eax, dword [ebp - 0x28c]
add eax, 0x3c
dec eax
shl eax, 9
cmp eax, dword [ebp - 0x344]
jge 0x633a09
mov eax, dword [ebp - 0x28c]
add eax, 0x3c
dec eax
mov edx, eax
shl edx, 9
lea eax, [ebp - 0x74]
xor ecx, ecx
call fcn.00407584
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x348], eax
cmp dword [ebp - 0x348], 0
je 0x633a3d
mov eax, dword [ebp - 0x348]
sub eax, 0xa
cmp word [eax], 1
je 0x633a3d
lea eax, [ebp - 0x74]
xor ecx, ecx
mov edx, dword [ebp - 0x74]
call fcn.00406d4c
mov dword [ebp - 0x348], eax
mov eax, dword [ebp - 0x348]
mov dword [ebp - 0x34c], eax
cmp dword [ebp - 0x34c], 0
je 0x633a63
mov eax, dword [ebp - 0x34c]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x34c], eax
mov eax, dword [ebp - 0x34c]
test eax, eax
jns 0x633a72
add eax, 0x1ff
sar eax, 9
sub eax, dword [ebp - 0x28c]
dec eax
test eax, eax
jle 0x633afc
mov dword [ebp - 0x2e0], eax
mov dword [ebp - 0x2c8], 1
lea eax, [ebp - 0x4624]
push eax
mov ecx, dword [ebp - 0x28c]
shl ecx, 9
xor edx, edx
xor eax, eax
call fcn.00626b7c
mov eax, dword [ebp - 0x4624]
push eax
lea eax, [ebp - 0x4628]
push eax
mov ecx, dword [ebp - 0x28c]
shl ecx, 9
mov edx, dword [ebp - 0x2c8]
shl edx, 9
inc edx
mov eax, dword [ebp - 0x74]
call fcn.00407320
mov edx, dword [ebp - 0x4628]
pop eax
call fcn.0040721c
jne 0x633aee
mov eax, dword [ebp - 0x2c8]
mov dword [ebp - 0x2c4], eax
jmp 0x633afc
inc dword [ebp - 0x2c8]
dec dword [ebp - 0x2e0]
jne 0x633a90
cmp dword [ebp - 0x2c4], 0xffffffff
jne 0x633b2a
mov eax, 0x6396a0
call fcn.00626d98
test al, al
je 0x633b2a
mov eax, 0x6396c8
call fcn.0048dc38
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x638354
cmp dword [ebp - 0x2c4], 0xffffffff
jne 0x633b3d
mov dword [ebp - 0x2c4], 1
lea eax, [ebp - 0x462c]
push eax
mov ecx, 0x200
mov dl, 0xff
xor eax, eax
call fcn.00626b7c
lea eax, [ebp - 0x462c]
push eax
lea eax, [ebp - 0x4630]
push eax
mov ecx, 0x40000
xor edx, edx
xor eax, eax
call fcn.00626b7c
mov edx, dword [ebp - 0x4630]
pop eax
call fcn.00406f28
mov eax, dword [ebp - 0x462c]
push eax
lea eax, [ebp - 0x4634]
call fcn.0061dcb0
lea eax, [ebp - 0x4634]
mov edx, 0x63947c
call fcn.004080c0
mov edx, dword [ebp - 0x4634]
pop eax
call fcn.0061f058
mov eax, dword [0x6b2728]
push eax
push 0x63971c
lea edx, [ebp - 0x463c]
mov eax, dword [ebp - 0x2c4]
inc eax
call fcn.004161e4
push dword [ebp - 0x463c]
push dword [ebp - 0xc4]
lea eax, [ebp - 0x4638]
mov edx, 3
call fcn.00408264
mov eax, dword [ebp - 0x4638]
push eax
lea eax, [ebp - 0x4640]
call fcn.0061dcb0
mov eax, dword [ebp - 0x4640]
push eax
lea eax, [ebp - 0x4644]
call fcn.0061dcb0
lea eax, [ebp - 0x4644]
mov edx, 0x639414
call fcn.004080c0
mov eax, dword [ebp - 0x4644]
pop ecx
pop edx
call fcn.0061cb60
lea eax, [ebp - 0x4648]
call fcn.0061dcb0
lea eax, [ebp - 0x4648]
mov edx, 0x63947c
call fcn.004080c0
mov eax, dword [ebp - 0x4648]
lea ecx, [ebp - 0x78]
xor edx, edx
call fcn.0061f27c
mov eax, dword [ebp - 0x2c4]
add eax, dword [ebp - 0x28c]
mov edx, eax
shl edx, 9
lea eax, [ebp - 0x78]
xor ecx, ecx
call fcn.00407584
lea eax, [ebp - 0x464c]
call fcn.0061dcb0
lea eax, [ebp - 0x464c]
mov edx, 0x639414
call fcn.004080c0
mov eax, dword [ebp - 0x464c]
call fcn.0061f520
lea eax, [ebp - 0x4650]
call fcn.0061dcb0
lea eax, [ebp - 0x4650]
mov edx, 0x63947c
call fcn.004080c0
mov eax, dword [ebp - 0x4650]
call fcn.0061f520
lea eax, [ebp - 0x4654]
call fcn.0061dcb0
lea eax, [ebp - 0x4654]
mov edx, 0x639454
call fcn.004080c0
mov eax, dword [ebp - 0x4654]
call fcn.0061f520
lea eax, [ebp - 0x4658]
push eax
mov ecx, 0x200
mov dl, 0xff
xor eax, eax
call fcn.00626b7c
mov eax, dword [ebp - 0x4658]
push eax
lea eax, [ebp - 0x465c]
push eax
mov edx, dword [ebp - 0x2c4]
shl edx, 9
inc edx
mov ecx, 0x200
mov eax, dword [ebp - 0x78]
call fcn.00407320
mov edx, dword [ebp - 0x465c]
pop eax
call fcn.0040721c
je 0x633d39
mov eax, 0x639790
call fcn.0048dc38
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x638354
lea eax, [ebp - 0x4660]
push eax
mov ecx, 0x200
mov edx, 1
mov eax, dword [ebp - 0x74]
call fcn.00407320
mov edx, dword [ebp - 0x4660]
mov ecx, dword [ebp - 0x2c4]
shl ecx, 9
inc ecx
lea eax, [ebp - 0x74]
call fcn.00670554
lea eax, [ebp - 0x4664]
push eax
mov ecx, 0x1b8
mov edx, 1
mov eax, dword [ebp - 0x78]
call fcn.00407320
mov edx, dword [ebp - 0x4664]
lea eax, [ebp - 0x74]
mov ecx, 1
call fcn.00670554
lea eax, [ebp - 0x4668]
push eax
mov eax, dword [ebp - 0x28c]
dec eax
mov ecx, eax
shl ecx, 9
mov eax, dword [ebp - 0x2c4]
inc eax
mov edx, eax
shl edx, 9
inc edx
mov eax, dword [ebp - 0x78]
call fcn.00407320
mov edx, dword [ebp - 0x4668]
mov eax, dword [ebp - 0x2c4]
inc eax
mov ecx, eax
shl ecx, 9
inc ecx
lea eax, [ebp - 0x74]
call fcn.00670554
mov byte [ebp - 0x28e], 0
mov eax, dword [ebp - 0x234]
mov eax, dword [eax + 0x69c]
mov edx, dword [eax]
call dword [edx + 0xec]
test al, al
je 0x633e05
lea eax, [ebp - 0x70]
mov edx, dword [ebp - 0x74]
call fcn.00406be0
jmp 0x633e15
lea eax, [ebp - 0x64]
mov ecx, 1
mov edx, dword [ebp - 0x74]
call fcn.00670554
mov edx, dword [ebp - 0x98]
mov eax, 0x6397ac
call fcn.0040875c
mov dword [ebp - 0x358], eax
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0x350], eax
cmp dword [ebp - 0x350], 0
je 0x633e66
mov eax, dword [ebp - 0x350]
sub eax, 0xa
cmp word [eax], 2
je 0x633e66
lea eax, [ebp - 0x98]
mov edx, dword [ebp - 0x98]
call fcn.00406d1c
mov dword [ebp - 0x350], eax
mov eax, dword [ebp - 0x350]
mov dword [ebp - 0x354], eax
cmp dword [ebp - 0x354], 0
je 0x633e8c
mov eax, dword [ebp - 0x354]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x354], eax
mov eax, dword [ebp - 0x354]
sub eax, 6
inc eax
cmp eax, dword [ebp - 0x358]
jne 0x633f0f
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0x35c], eax
cmp dword [ebp - 0x35c], 0
je 0x633ed9
mov eax, dword [ebp - 0x35c]
sub eax, 0xa
cmp word [eax], 2
je 0x633ed9
lea eax, [ebp - 0x98]
mov edx, dword [ebp - 0x98]
call fcn.00406d1c
mov dword [ebp - 0x35c], eax
mov eax, dword [ebp - 0x35c]
mov dword [ebp - 0x360], eax
cmp dword [ebp - 0x360], 0
je 0x633eff
mov eax, dword [ebp - 0x360]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x360], eax
cmp dword [ebp - 0x360], 5
setg byte [ebp - 0x361]
jmp 0x633f16
mov byte [ebp - 0x361], 0
cmp byte [ebp - 0x361], 0
je 0x633f3f
mov eax, dword [0x6aaf40]
cmp dword [eax], 1
sbb eax, eax
inc eax
and eax, 0x7f
cmp eax, 1
jbe 0x633f37
call fcn.00405714
mov byte [ebp - 0x362], al
jmp 0x633f46
mov byte [ebp - 0x362], 0
cmp byte [ebp - 0x362], 0
je 0x633f5b
mov byte [ebp - 0x37b], 1
jmp 0x63408f
mov edx, dword [ebp - 0x98]
mov eax, 0x6397c8
call fcn.0040875c
mov dword [ebp - 0x370], eax
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0x368], eax
cmp dword [ebp - 0x368], 0
je 0x633fac
mov eax, dword [ebp - 0x368]
sub eax, 0xa
cmp word [eax], 2
je 0x633fac
lea eax, [ebp - 0x98]
mov edx, dword [ebp - 0x98]
call fcn.00406d1c
mov dword [ebp - 0x368], eax
mov eax, dword [ebp - 0x368]
mov dword [ebp - 0x36c], eax
cmp dword [ebp - 0x36c], 0
je 0x633fd2
mov eax, dword [ebp - 0x36c]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x36c], eax
mov eax, dword [ebp - 0x36c]
sub eax, 6
inc eax
cmp eax, dword [ebp - 0x370]
jne 0x634055
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0x374], eax
cmp dword [ebp - 0x374], 0
je 0x63401f
mov eax, dword [ebp - 0x374]
sub eax, 0xa
cmp word [eax], 2
je 0x63401f
lea eax, [ebp - 0x98]
mov edx, dword [ebp - 0x98]
call fcn.00406d1c
mov dword [ebp - 0x374], eax
mov eax, dword [ebp - 0x374]
mov dword [ebp - 0x378], eax
cmp dword [ebp - 0x378], 0
je 0x634045
mov eax, dword [ebp - 0x378]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x378], eax
cmp dword [ebp - 0x378], 5
setg byte [ebp - 0x379]
jmp 0x63405c
mov byte [ebp - 0x379], 0
cmp byte [ebp - 0x379], 0
je 0x63407b
mov eax, dword [0x6aaf40]
mov eax, dword [eax]
cmp eax, 1
sbb eax, eax
neg eax
mov byte [ebp - 0x37a], al
jmp 0x634082
mov byte [ebp - 0x37a], 0
movzx eax, byte [ebp - 0x37a]
mov byte [ebp - 0x37b], al
cmp byte [ebp - 0x37b], 0
je 0x634241
mov byte [ebp - 0x28f], 1
lea eax, [ebp - 0x4670]
call fcn.0061db80
push dword [ebp - 0x4670]
push 0x6397e4
push dword [ebp - 0x98]
lea eax, [ebp - 0x466c]
mov edx, 3
call fcn.00408264
mov edx, dword [ebp - 0x466c]
mov eax, dword [ebp - 0x64]
call fcn.0061f058
lea eax, [ebp - 0x4678]
call fcn.0061db80
push dword [ebp - 0x4678]
push 0x6397e4
push dword [ebp - 0x98]
lea eax, [ebp - 0x4674]
mov edx, 3
call fcn.00408264
mov eax, dword [ebp - 0x4674]
call fcn.00624358
lea edx, [ebp - 0x467c]
mov eax, 0x639804
call fcn.0061c888
mov eax, dword [ebp - 0x467c]
xor edx, edx
call fcn.0061fc70
lea eax, [ebp - 0x4684]
call fcn.0061db80
push dword [ebp - 0x4684]
push 0x6397e4
push dword [ebp - 0x98]
lea eax, [ebp - 0x4680]
mov edx, 3
call fcn.00408264
mov eax, dword [ebp - 0x4680]
call fcn.00407d28
mov edx, 0x639808
call fcn.00677ee0
mov eax, dword [ebp - 0x234]
mov eax, dword [eax + 0x3c0]
mov edx, dword [eax]
call dword [edx + 0xec]
mov edx, eax
lea ecx, [ebp - 0x4688]
mov eax, dword [ebp - 0x234]
mov eax, dword [eax + 0x3c0]
mov eax, dword [eax + 0x2ac]
mov esi, dword [eax]
call dword [esi + 0xc]
mov eax, dword [ebp - 0x4688]
push eax
movzx eax, byte [0x639008]
push eax
lea eax, [ebp - 0x468c]
push eax
movzx eax, byte [0x639008]
push eax
lea eax, [ebp - 0x4690]
push eax
lea ecx, [ebp - 0x4694]
xor edx, edx
mov eax, dword [ebp - 0x98]
call fcn.00416e98
mov eax, dword [ebp - 0x4694]
xor ecx, ecx
mov edx, 0x63983c
call fcn.0041df78
mov eax, dword [ebp - 0x4690]
xor ecx, ecx
mov edx, 0x639850
call fcn.0041df78
mov eax, dword [ebp - 0x468c]
push eax
lea eax, [ebp - 0x469c]
call fcn.0061db80
push dword [ebp - 0x469c]
push 0x6397e4
push dword [ebp - 0x98]
lea eax, [ebp - 0x4698]
mov edx, 3
call fcn.00408264
mov ecx, dword [ebp - 0x4698]
pop eax
pop edx
call fcn.0062a094
lea edx, [ebp - 0x46a0]
mov eax, dword [ebp - 0x98]
call fcn.00417280
mov eax, dword [ebp - 0x46a0]
mov edx, 0x639864
call fcn.00408384
jne 0x63434a
lea eax, [ebp - 0x46a4]
call fcn.0061dcb0
lea eax, [ebp - 0x46a4]
mov edx, 0x639454
call fcn.004080c0
mov edx, dword [ebp - 0x46a4]
mov eax, dword [ebp - 8]
call fcn.0061f058
lea eax, [ebp - 0x46a8]
call fcn.0061dcb0
lea eax, [ebp - 0x46a8]
mov edx, dword [ebp - 0x98]
call fcn.004080c0
mov edx, dword [ebp - 0x46a8]
mov eax, dword [ebp - 0x64]
call fcn.0061f058
mov eax, dword [0x6b2728]
push eax
lea eax, [ebp - 0x46ac]
call fcn.0061dcb0
mov eax, dword [ebp - 0x46ac]
push eax
lea eax, [ebp - 0x46b0]
call fcn.0061dcb0
lea eax, [ebp - 0x46b0]
mov edx, dword [ebp - 0x98]
call fcn.004080c0
mov eax, dword [ebp - 0x46b0]
xor edx, edx
pop ecx
call fcn.0061cb60
lea eax, [ebp - 0x46b4]
call fcn.0061dcb0
lea eax, [ebp - 0x46b4]
mov edx, dword [ebp - 0x98]
call fcn.004080c0
mov eax, dword [ebp - 0x46b4]
call fcn.0061f520
lea eax, [ebp - 0x46b8]
call fcn.0061dcb0
lea eax, [ebp - 0x46b8]
mov edx, 0x639454
call fcn.004080c0
mov eax, dword [ebp - 0x46b8]
call fcn.0061f520
lea edx, [ebp - 0x46bc]
mov eax, dword [ebp - 0x98]
call fcn.00417280
mov eax, dword [ebp - 0x46bc]
mov edx, 0x63987c
call fcn.00408384
jne 0x634397
lea eax, [ebp - 0x46c0]
call fcn.0061dcb0
lea eax, [ebp - 0x46c0]
mov edx, dword [ebp - 0x98]
call fcn.004080c0
mov edx, dword [ebp - 0x46c0]
mov eax, dword [ebp - 0x64]
call fcn.0061f058
mov eax, dword [ebp - 0x98]
mov edx, 0x639300
call fcn.00408384
je 0x6344d5
mov eax, dword [ebp - 0x98]
mov edx, 0x639340
call fcn.00408384
je 0x6344d5
mov edx, dword [ebp - 0x98]
mov eax, 0x6397ac
call fcn.0040875c
mov dword [ebp - 0x388], eax
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0x380], eax
cmp dword [ebp - 0x380], 0
je 0x634414
mov eax, dword [ebp - 0x380]
sub eax, 0xa
cmp word [eax], 2
je 0x634414
lea eax, [ebp - 0x98]
mov edx, dword [ebp - 0x98]
call fcn.00406d1c
mov dword [ebp - 0x380], eax
mov eax, dword [ebp - 0x380]
mov dword [ebp - 0x384], eax
cmp dword [ebp - 0x384], 0
je 0x63443a
mov eax, dword [ebp - 0x384]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x384], eax
mov eax, dword [ebp - 0x384]
sub eax, 6
inc eax
cmp eax, dword [ebp - 0x388]
jne 0x6344bd
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0x38c], eax
cmp dword [ebp - 0x38c], 0
je 0x634487
mov eax, dword [ebp - 0x38c]
sub eax, 0xa
cmp word [eax], 2
je 0x634487
lea eax, [ebp - 0x98]
mov edx, dword [ebp - 0x98]
call fcn.00406d1c
mov dword [ebp - 0x38c], eax
mov eax, dword [ebp - 0x38c]
mov dword [ebp - 0x390], eax
cmp dword [ebp - 0x390], 0
je 0x6344ad
mov eax, dword [ebp - 0x390]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x390], eax
cmp dword [ebp - 0x390], 5
setg byte [ebp - 0x391]
jmp 0x6344c4
mov byte [ebp - 0x391], 0
movzx eax, byte [ebp - 0x391]
xor al, 1
mov byte [ebp - 0x392], al
jmp 0x6344dc
mov byte [ebp - 0x392], 0
cmp byte [ebp - 0x392], 0
je 0x6345fb
mov edx, dword [ebp - 0x98]
mov eax, 0x6397c8
call fcn.0040875c
mov dword [ebp - 0x3a0], eax
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0x398], eax
cmp dword [ebp - 0x398], 0
je 0x63453a
mov eax, dword [ebp - 0x398]
sub eax, 0xa
cmp word [eax], 2
je 0x63453a
lea eax, [ebp - 0x98]
mov edx, dword [ebp - 0x98]
call fcn.00406d1c
mov dword [ebp - 0x398], eax
mov eax, dword [ebp - 0x398]
mov dword [ebp - 0x39c], eax
cmp dword [ebp - 0x39c], 0
je 0x634560
mov eax, dword [ebp - 0x39c]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x39c], eax
mov eax, dword [ebp - 0x39c]
sub eax, 6
inc eax
cmp eax, dword [ebp - 0x3a0]
jne 0x6345e3
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0x3a4], eax
cmp dword [ebp - 0x3a4], 0
je 0x6345ad
mov eax, dword [ebp - 0x3a4]
sub eax, 0xa
cmp word [eax], 2
je 0x6345ad
lea eax, [ebp - 0x98]
mov edx, dword [ebp - 0x98]
call fcn.00406d1c
mov dword [ebp - 0x3a4], eax
mov eax, dword [ebp - 0x3a4]
mov dword [ebp - 0x3a8], eax
cmp dword [ebp - 0x3a8], 0
je 0x6345d3
mov eax, dword [ebp - 0x3a8]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x3a8], eax
cmp dword [ebp - 0x3a8], 5
setg byte [ebp - 0x3a9]
jmp 0x6345ea
mov byte [ebp - 0x3a9], 0
movzx eax, byte [ebp - 0x3a9]
xor al, 1
mov byte [ebp - 0x3aa], al
jmp 0x634602
mov byte [ebp - 0x3aa], 0
cmp byte [ebp - 0x3aa], 0
je 0x634624
mov eax, dword [ebp - 0x98]
mov edx, 0x639894
call fcn.00408384
setne byte [ebp - 0x3ab]
jmp 0x63462b
mov byte [ebp - 0x3ab], 0
cmp byte [ebp - 0x3ab], 0
je 0x63464d
mov eax, dword [ebp - 0x98]
mov edx, 0x6398b0
call fcn.00408384
setne byte [ebp - 0x3ac]
jmp 0x634654
mov byte [ebp - 0x3ac], 0
cmp byte [ebp - 0x3ac], 0
je 0x634676
mov eax, dword [ebp - 0x98]
mov edx, 0x6398d0
call fcn.00408384
setne byte [ebp - 0x3ad]
jmp 0x63467d
mov byte [ebp - 0x3ad], 0
cmp byte [ebp - 0x3ad], 0
je 0x63469f
mov eax, dword [ebp - 0x98]
mov edx, 0x6398f0
call fcn.00408384
setne byte [ebp - 0x3ae]
jmp 0x6346a6
mov byte [ebp - 0x3ae], 0
cmp byte [ebp - 0x3ae], 0
je 0x6346c8
mov eax, dword [ebp - 0x98]
mov edx, 0x639910
call fcn.00408384
setne byte [ebp - 0x3af]
jmp 0x6346cf
mov byte [ebp - 0x3af], 0
cmp byte [ebp - 0x3af], 0
je 0x6346f1
mov eax, dword [ebp - 0x98]
mov edx, 0x639414
call fcn.00408384
setne byte [ebp - 0x3b0]
jmp 0x6346f8
mov byte [ebp - 0x3b0], 0
cmp byte [ebp - 0x3b0], 0
je 0x634730
cmp byte [ebp - 0x28d], 0
je 0x634726
mov eax, dword [ebp - 0x234]
mov eax, dword [eax + 0x69c]
mov edx, dword [eax]
call dword [edx + 0xec]
test al, al
je 0x634726
xor eax, eax
jmp 0x634728
mov al, 1
mov byte [ebp - 0x3b1], al
jmp 0x634737
mov byte [ebp - 0x3b1], 0
cmp byte [ebp - 0x3b1], 0
je 0x634759
mov eax, dword [ebp - 0x98]
mov edx, 0x63935c
call fcn.00408384
setne byte [ebp - 0x3b2]
jmp 0x634760
mov byte [ebp - 0x3b2], 0
cmp byte [ebp - 0x3b2], 0
je 0x634797
lea edx, [ebp - 0x46c4]
mov eax, dword [ebp - 0x98]
call fcn.00417280
mov eax, dword [ebp - 0x46c4]
mov edx, 0x63987c
call fcn.00408384
sete al
xor al, 1
mov byte [ebp - 0x3b3], al
jmp 0x63479e
mov byte [ebp - 0x3b3], 0
cmp byte [ebp - 0x3b3], 0
je 0x6349a3
lea edx, [ebp - 0x46c8]
mov eax, dword [ebp - 0x98]
call fcn.00417280
mov eax, dword [ebp - 0x46c8]
mov edx, 0x639864
call fcn.00408384
je 0x6349a3
lea eax, [ebp - 0x46cc]
mov ecx, dword [ebp - 0x98]
mov edx, dword [0x6b26e0]
call fcn.00408180
mov eax, dword [ebp - 0x46cc]
call fcn.005b402c
test al, al
je 0x634830
push 0x639930
push dword [ebp - 0x98]
push 0x639940
lea eax, [ebp - 0x46d0]
mov edx, 3
call fcn.00408264
mov eax, dword [ebp - 0x46d0]
call fcn.0048dc38
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x638354
push 1
push 1
mov cl, 1
mov edx, dword [ebp - 0x64]
mov eax, 0x639998
call fcn.0057f538
test eax, eax
jle 0x63484e
mov byte [ebp - 0x279], 1
mov eax, dword [ebp - 0x98]
mov edx, 0x639320
call fcn.00408384
jne 0x634867
mov byte [ebp - 0x27a], 1
lea edx, [ebp - 0x46d4]
mov eax, dword [ebp - 0x98]
call fcn.00417280
mov eax, dword [ebp - 0x46d4]
mov edx, 0x639688
call fcn.00408384
jne 0x634890
cmp dword [ebp - 0x60], 0
jne 0x6348a2
test ebx, ebx
jne 0x634954
cmp dword [ebp - 0x5c], 0
je 0x634954
mov edx, dword [ebp - 0x64]
mov eax, 0x6399b0
call fcn.00407440
mov esi, eax
test esi, esi
jle 0x634954
push esi
push 0
mov cl, 1
mov edx, dword [ebp - 0x64]
mov eax, 0x6399c8
call fcn.0057f538
mov edi, eax
inc edi
push esi
push 1
mov cl, 1
mov edx, dword [ebp - 0x64]
mov eax, 0x6399c8
call fcn.0057f538
dec eax
mov esi, eax
test ebx, ebx
jne 0x63490c
lea eax, [ebp - 0x46d8]
push eax
mov ecx, esi
sub ecx, edi
mov dl, 0x20
mov eax, dword [ebp - 0x5c]
call fcn.00626b7c
mov edx, dword [ebp - 0x46d8]
lea eax, [ebp - 0x64]
mov ecx, edi
call fcn.00670554
lea edx, [ebp - 0x46dc]
mov eax, dword [ebp - 0x98]
call fcn.00417280
mov eax, dword [ebp - 0x46dc]
mov edx, 0x639688
call fcn.00408384
jne 0x634954
lea eax, [ebp - 0x46e0]
push eax
mov ecx, esi
sub ecx, edi
mov dl, 0x20
mov eax, dword [ebp - 0x60]
call fcn.00626b7c
mov edx, dword [ebp - 0x46e0]
lea eax, [ebp - 0x64]
mov ecx, edi
call fcn.00670554
lea eax, [ebp - 0x46e4]
mov ecx, dword [ebp - 0x98]
mov edx, dword [0x6b26e0]
call fcn.00408180
mov edx, dword [ebp - 0x46e4]
mov eax, dword [ebp - 0x64]
call fcn.0061f058
push 7
lea eax, [ebp - 0x46e8]
mov ecx, dword [ebp - 0x98]
mov edx, dword [0x6b26e0]
call fcn.00408180
mov eax, dword [ebp - 0x46e8]
call fcn.00407d28
push eax
call sub.kernel32.dll_SetFileAttributesW
dec ebx
cmp ebx, 0xffffffff
jne 0x6328b1
lea eax, [ebp - 0x46ec]
mov ecx, 0x6393f4
mov edx, dword [0x6b26e0]
call fcn.00408180
mov eax, dword [ebp - 0x46ec]
call fcn.004169e8
test al, al
je 0x634a13
mov eax, 0x6393d0
call fcn.00626d98
test al, al
jne 0x634a13
cmp byte [ebp - 0x279], 0
je 0x634a13
cmp byte [ebp - 0x27a], 0
jne 0x634a13
lea eax, [ebp - 0x46f0]
mov ecx, 0x6393f4
mov edx, dword [0x6b26e0]
call fcn.00408180
mov eax, dword [ebp - 0x46f0]
call fcn.0061f520
mov eax, dword [ebp - 0x94]
mov edx, 0x639164
call fcn.00408384
je 0x634adc
mov eax, dword [ebp - 0x94]
mov edx, 0x639138
call fcn.00408384
je 0x634adc
mov eax, dword [ebp - 0x234]
mov eax, dword [eax + 0x698]
mov edx, dword [eax]
call dword [edx + 0xec]
test al, al
jne 0x634a6f
mov eax, dword [ebp - 0x234]
mov eax, dword [eax + 0x694]
mov edx, dword [eax]
call dword [edx + 0xec]
test al, al
je 0x634adc
push dword [0x6b26e0]
push 0x6399d8
push dword [ebp - 0x94]
push 0x6399f0
lea eax, [ebp - 0x46f4]
mov edx, 4
call fcn.00408264
mov edx, dword [ebp - 0x46f4]
mov eax, dword [ebp - 0x4c]
call fcn.0061f058
push 7
push dword [0x6b26e0]
push 0x6399d8
push dword [ebp - 0x94]
push 0x6399f0
lea eax, [ebp - 0x46f8]
mov edx, 4
call fcn.00408264
mov eax, dword [ebp - 0x46f8]
call fcn.00407d28
push eax
call sub.kernel32.dll_SetFileAttributesW
mov eax, dword [ebp - 0x234]
mov eax, dword [eax + 0x69c]
mov edx, dword [eax]
call dword [edx + 0xec]
test al, al
jne 0x634b28
mov eax, dword [ebp - 0x234]
mov eax, dword [eax + 0x698]
mov edx, dword [eax]
call dword [edx + 0xec]
test al, al
jne 0x634b28
mov eax, dword [ebp - 0x234]
mov eax, dword [eax + 0x694]
mov edx, dword [eax]
call dword [edx + 0xec]
test al, al
je 0x637d8d
xor eax, eax
push ebp
push 0x63699d
push dword fs:[eax]
mov dword fs:[eax], esp
push 0
call sub.ole32.dll_CoInitialize
mov ecx, dword [0x6b2578]
mov dl, 1
mov eax, dword [0x4f1b04]
call fcn.004f21f8
mov ebx, eax
push 0
push 0
push 0
push 0
push 0
push 0
lea eax, [ebp - 0xd4]
push eax
mov ecx, 0x639a00
mov edx, 0x639a2c
mov eax, ebx
call fcn.004f22bc
lea eax, [ebp - 0x170]
push eax
push 0x639a3c
push dword [0x6b2634]
push 0x639a68
lea eax, [ebp - 0x46fc]
mov edx, 3
call fcn.00408264
mov ecx, dword [ebp - 0x46fc]
mov edx, 0x639a88
mov eax, dword [ebp - 0xd4]
call fcn.00630980
lea eax, [ebp - 0x4700]
mov ecx, 0x639aa8
mov edx, dword [0x6b26e0]
call fcn.00408180
mov eax, dword [ebp - 0x4700]
call fcn.004169e8
test al, al
je 0x634d07
mov eax, dword [ebp - 0x234]
mov eax, dword [eax + 0x3c0]
mov edx, dword [eax]
call dword [edx + 0xec]
mov ebx, eax
call fcn.00625cc4
add ebx, eax
inc ebx
jne 0x634d07
push 0x639a3c
push dword [0x6b2634]
push 0x639aa8
lea eax, [ebp - 0x4708]
mov edx, 3
call fcn.00408264
mov edx, dword [ebp - 0x4708]
lea eax, [ebp - 0x4704]
call fcn.00407f28
mov eax, dword [ebp - 0x4704]
push eax
push 0x639ad8
lea eax, [ebp - 0x170]
push eax
push 0
call fcn.00424674
add esp, 0x10
lea eax, [ebp - 0x170]
push eax
xor ecx, ecx
mov edx, 0x639a88
mov eax, dword [ebp - 0xd4]
call fcn.00630980
push 0x639a3c
push dword [0x6b2634]
push 0x639af4
lea eax, [ebp - 0x4710]
mov edx, 3
call fcn.00408264
mov edx, dword [ebp - 0x4710]
lea eax, [ebp - 0x470c]
call fcn.00407f28
mov eax, dword [ebp - 0x470c]
push eax
push 0x639ad8
lea eax, [ebp - 0x170]
push eax
push 0
call fcn.00424674
add esp, 0x10
push 0x639a3c
push dword [0x6b2634]
push 0x639af4
lea eax, [ebp - 0x4718]
mov edx, 3
call fcn.00408264
mov edx, dword [ebp - 0x4718]
lea eax, [ebp - 0x4714]
call fcn.00407f28
mov eax, dword [ebp - 0x4714]
push eax
push 0x639b08
lea eax, [ebp - 0x170]
push eax
push 0
call fcn.00424674
add esp, 0x10
jmp 0x635201
push 0
lea eax, [ebp - 0xec]
mov ecx, 1
mov edx, dword [0x6318b8]
call fcn.004099f4
add esp, 4
lea eax, [ebp - 0x180]
push eax
push 0x10400008
push 0x639b18
lea eax, [ebp - 0x170]
push eax
push 0
call fcn.00424674
add esp, 0x14
lea eax, [ebp - 0x180]
mov edx, 1
call fcn.0042c150
mov esi, eax
lea eax, [ebp - 0x180]
mov edx, 1
call fcn.0042c174
sub eax, esi
jl 0x634ec2
inc eax
mov dword [ebp - 0x2e0], eax
lea eax, [ebp - 0x190]
push eax
push 0x12000004
push 0x639b30
push esi
push 1
lea eax, [ebp - 0x180]
push eax
lea eax, [ebp - 0x4738]
push eax
call fcn.0042c25c
add esp, 0x10
lea eax, [ebp - 0x4738]
push eax
lea eax, [ebp - 0x4728]
push eax
call fcn.00424674
add esp, 0x14
lea eax, [ebp - 0x4728]
call fcn.00426ae8
test al, al
je 0x634eb5
push 0x639b40
lea eax, [ebp - 0x190]
push eax
lea eax, [ebp - 0x4748]
push eax
call fcn.00424674
add esp, 0xc
lea eax, [ebp - 0x4748]
push eax
lea eax, [ebp - 0x4758]
mov edx, 0x639b58
call fcn.00429cb8
lea edx, [ebp - 0x4758]
pop eax
call fcn.0042d1cc
jne 0x634eb5
push 0x639b80
push esi
push 1
lea eax, [ebp - 0x180]
push eax
lea eax, [ebp - 0x4778]
push eax
call fcn.0042c25c
add esp, 0x10
lea eax, [ebp - 0x4778]
push eax
lea eax, [ebp - 0x4768]
push eax
call fcn.00424674
add esp, 0xc
lea edx, [ebp - 0x4768]
lea eax, [ebp - 0xa0]
call fcn.004291dc
push 0x639b80
push esi
push 1
lea eax, [ebp - 0x180]
push eax
lea eax, [ebp - 0x4798]
push eax
call fcn.0042c25c
add esp, 0x10
lea eax, [ebp - 0x4798]
push eax
lea eax, [ebp - 0x4788]
push eax
call fcn.00424674
add esp, 0xc
push dword [ebp - 0x477c]
push dword [ebp - 0x4780]
push dword [ebp - 0x4784]
push dword [ebp - 0x4788]
push 0x639b88
lea eax, [ebp - 0x170]
push eax
push 0
call fcn.00424674
add esp, 0x1c
jmp 0x634ec2
inc esi
dec dword [ebp - 0x2e0]
jne 0x634d75
lea eax, [ebp - 0x1f0]
push eax
push 0x639ba0
push 0x639bf0
lea eax, [ebp - 0x170]
push eax
push 0
call fcn.00424674
add esp, 0x14
push 0
lea eax, [ebp - 0xe4]
mov ecx, 1
mov edx, dword [0x631858]
call fcn.004099f4
add esp, 4
lea eax, [ebp - 0x200]
push eax
push 0x24000001
push 0x639b30
lea eax, [ebp - 0x1f0]
push eax
lea eax, [ebp - 0x47a8]
push eax
call fcn.00424674
add esp, 0x14
lea eax, [ebp - 0x47a8]
call fcn.00426ae8
test al, al
je 0x635061
push 0x639c00
lea eax, [ebp - 0x200]
push eax
lea eax, [ebp - 0x47b8]
push eax
call fcn.00424674
add esp, 0xc
lea eax, [ebp - 0x47b8]
mov edx, 1
call fcn.0042c150
mov ebx, eax
push 0x639c00
lea eax, [ebp - 0x200]
push eax
lea eax, [ebp - 0x47c8]
push eax
call fcn.00424674
add esp, 0xc
lea eax, [ebp - 0x47c8]
mov edx, 1
call fcn.0042c174
sub eax, ebx
jl 0x635061
inc eax
mov dword [ebp - 0x2e0], eax
push ebx
push 0x639c08
lea eax, [ebp - 0x200]
push eax
lea eax, [ebp - 0x47d8]
push eax
call fcn.00424674
add esp, 0x10
lea eax, [ebp - 0x47d8]
push eax
lea eax, [ebp - 0x47e8]
mov edx, dword [ebp - 0xa0]
call fcn.00429cb8
lea edx, [ebp - 0x47e8]
pop eax
call fcn.0042d1dc
je 0x635054
mov eax, dword [ebp - 0xe4]
call fcn.0040982c
inc eax
push eax
lea eax, [ebp - 0xe4]
mov ecx, 1
mov edx, dword [0x631858]
call fcn.004099f4
add esp, 4
mov eax, dword [ebp - 0xe4]
call fcn.0040982c
dec eax
mov edx, dword [ebp - 0xe4]
test edx, edx
je 0x635023
cmp eax, dword [edx - 4]
jb 0x635028
call fcn.00405714
lea eax, [edx + eax*4]
push eax
push ebx
push 0x639c08
lea eax, [ebp - 0x200]
push eax
lea eax, [ebp - 0x47f8]
push eax
call fcn.00424674
add esp, 0x10
lea edx, [ebp - 0x47f8]
pop eax
call fcn.004291dc
inc ebx
dec dword [ebp - 0x2e0]
jne 0x634fa0
lea eax, [ebp - 0x4808]
mov edx, dword [ebp - 0xe4]
mov ecx, dword [0x631858]
call fcn.00429d3c
push dword [ebp - 0x47fc]
push dword [ebp - 0x4800]
push dword [ebp - 0x4804]
push dword [ebp - 0x4808]
push 0x24000001
push 0x639c10
lea eax, [ebp - 0x1f0]
push eax
push 0
call fcn.00424674
add esp, 0x20
lea eax, [ebp - 0x170]
call fcn.00630c48
lea eax, [ebp - 0x190]
push eax
push 0x23000003
push 0x639b30
lea eax, [ebp - 0x1f0]
push eax
lea eax, [ebp - 0x4818]
push eax
call fcn.00424674
add esp, 0x14
lea eax, [ebp - 0x4818]
call fcn.00426ae8
test al, al
je 0x635160
push 0x639b80
lea eax, [ebp - 0x190]
push eax
lea eax, [ebp - 0x4828]
push eax
call fcn.00424674
add esp, 0xc
lea eax, [ebp - 0x4828]
push eax
lea eax, [ebp - 0x4838]
mov edx, dword [ebp - 0xa0]
call fcn.00429cb8
lea edx, [ebp - 0x4838]
pop eax
call fcn.0042d1cc
jne 0x635160
lea eax, [ebp - 0x483c]
mov edx, dword [0x6b27a8]
call fcn.00407f28
mov eax, dword [ebp - 0x483c]
push eax
push 0x23000003
push 0x639c2c
lea eax, [ebp - 0x1f0]
push eax
push 0
call fcn.00424674
add esp, 0x14
mov eax, dword [0x6aaf40]
cmp dword [eax], 0
je 0x635201
lea eax, [ebp - 0x1d0]
push eax
lea eax, [ebp - 0x4850]
mov edx, dword [0x6b27a8]
call fcn.00407f28
mov eax, dword [ebp - 0x4850]
push eax
push 0x639bf0
lea eax, [ebp - 0x170]
push eax
lea eax, [ebp - 0x484c]
push eax
call fcn.00424674
add esp, 0x14
lea eax, [ebp - 0x484c]
call fcn.00426ae8
test al, al
je 0x635201
cmp byte [0x6b26f6], 0
jne 0x6351db
push 0x16000049
push 0x639c44
lea eax, [ebp - 0x1d0]
push eax
push 0
call fcn.00424674
add esp, 0x10
cmp byte [ebp - 0x28f], 0
je 0x635201
push 0xffffffffffffffff
push 0x16000049
push 0x639c58
lea eax, [ebp - 0x1d0]
push eax
push 0
call fcn.00424674
add esp, 0x14
lea eax, [ebp - 0x4854]
mov ecx, 0x639c7c
mov edx, dword [0x6b26e0]
call fcn.00408180
mov eax, dword [ebp - 0x4854]
call fcn.0061f520
lea eax, [ebp - 0x4858]
mov ecx, 0x639c9c
mov edx, dword [0x6b26e0]
call fcn.00408180
mov eax, dword [ebp - 0x4858]
call fcn.0061f520
lea eax, [ebp - 0x485c]
mov ecx, 0x639cc4
mov edx, dword [0x6b26e0]
call fcn.00408180
mov eax, dword [ebp - 0x485c]
call fcn.0061f520
lea eax, [ebp - 0x4860]
mov ecx, 0x639cec
mov edx, dword [0x6b26e0]
call fcn.00408180
mov eax, dword [ebp - 0x4860]
call fcn.0061f520
mov eax, dword [ebp - 0x234]
mov eax, dword [eax + 0x694]
mov edx, dword [eax]
call dword [edx + 0xec]
test al, al
je 0x63608e
lea eax, [ebp - 0x170]
push eax
push 0x639a3c
push dword [0x6b2634]
push 0x639a68
lea eax, [ebp - 0x4864]
mov edx, 3
call fcn.00408264
mov ecx, dword [ebp - 0x4864]
mov edx, 0x639a88
mov eax, dword [ebp - 0xd4]
call fcn.00630980
cmp dword [ebp - 0x238], 0
jne 0x635387
push 0x639a3c
push dword [0x6b2634]
push 0x639aa8
lea eax, [ebp - 0x486c]
mov edx, 3
call fcn.00408264
mov edx, dword [ebp - 0x486c]
lea eax, [ebp - 0x4868]
call fcn.00407f28
mov eax, dword [ebp - 0x4868]
push eax
push 0x639d08
lea eax, [ebp - 0x170]
push eax
push 0
call fcn.00424674
add esp, 0x10
push 0x639a3c
push dword [0x6b2634]
push 0x639af4
lea eax, [ebp - 0x4874]
mov edx, 3
call fcn.00408264
mov edx, dword [ebp - 0x4874]
lea eax, [ebp - 0x4870]
call fcn.00407f28
mov eax, dword [ebp - 0x4870]
push eax
push 0x639b08
lea eax, [ebp - 0x170]
push eax
push 0
call fcn.00424674
add esp, 0x10
lea eax, [ebp - 0xac]
xor edx, edx
call fcn.00407cf0
lea eax, [ebp - 0xb4]
xor edx, edx
call fcn.00407cf0
lea eax, [ebp - 0x180]
push eax
push 0x10200003
push 0x639b18
lea eax, [ebp - 0x170]
push eax
lea eax, [ebp - 0x4884]
push eax
call fcn.00424674
add esp, 0x14
lea eax, [ebp - 0x4884]
call fcn.00426ae8
test al, al
je 0x635640
lea eax, [ebp - 0x180]
mov edx, 1
call fcn.0042c150
mov esi, eax
lea eax, [ebp - 0x180]
mov edx, 1
call fcn.0042c174
sub eax, esi
jl 0x635640
inc eax
mov dword [ebp - 0x2e0], eax
lea eax, [ebp - 0x190]
push eax
push 0x12000004
push 0x639b30
push esi
push 1
lea eax, [ebp - 0x180]
push eax
lea eax, [ebp - 0x48a4]
push eax
call fcn.0042c25c
add esp, 0x10
lea eax, [ebp - 0x48a4]
push eax
lea eax, [ebp - 0x4894]
push eax
call fcn.00424674
add esp, 0x14
lea eax, [ebp - 0x4894]
push eax
lea eax, [ebp - 0x1a0]
push eax
push 0x11000001
push 0x639b30
push esi
push 1
lea eax, [ebp - 0x180]
push eax
lea eax, [ebp - 0x48c4]
push eax
call fcn.0042c25c
add esp, 0x10
lea eax, [ebp - 0x48c4]
push eax
lea eax, [ebp - 0x48b4]
push eax
call fcn.00424674
add esp, 0x14
lea edx, [ebp - 0x48b4]
pop eax
call fcn.0042d1c0
lea eax, [ebp - 0x4894]
call fcn.00426ae8
test al, al
je 0x635633
push 0x639d18
push 0x639d28
lea eax, [ebp - 0x1a0]
push eax
lea eax, [ebp - 0x48e4]
push eax
call fcn.00424674
add esp, 0xc
lea eax, [ebp - 0x48e4]
push eax
lea eax, [ebp - 0x48d4]
push eax
call fcn.00424674
add esp, 0xc
lea eax, [ebp - 0x48d4]
push eax
lea eax, [ebp - 0x48f4]
mov edx, 2
mov cl, 1
call fcn.004299d4
lea edx, [ebp - 0x48f4]
pop eax
call fcn.0042d1cc
jne 0x635633
push 0x639d34
push 0x639d28
lea eax, [ebp - 0x1a0]
push eax
lea eax, [ebp - 0x4914]
push eax
call fcn.00424674
add esp, 0xc
lea eax, [ebp - 0x4914]
push eax
lea eax, [ebp - 0x4904]
push eax
call fcn.00424674
add esp, 0xc
lea eax, [ebp - 0x4904]
push eax
lea eax, [ebp - 0x4924]
mov edx, dword [0x6b263c]
call fcn.00429cb8
lea edx, [ebp - 0x4924]
pop eax
call fcn.0042d1cc
jne 0x635633
push 0x639b80
push esi
push 1
lea eax, [ebp - 0x180]
push eax
lea eax, [ebp - 0x4944]
push eax
call fcn.0042c25c
add esp, 0x10
lea eax, [ebp - 0x4944]
push eax
lea eax, [ebp - 0x4934]
push eax
call fcn.00424674
add esp, 0xc
lea edx, [ebp - 0x4934]
lea eax, [ebp - 0xac]
call fcn.004291dc
lea eax, [ebp - 0x220]
push eax
push 0x12000005
push 0x639b30
push esi
push 1
lea eax, [ebp - 0x180]
push eax
lea eax, [ebp - 0x4964]
push eax
call fcn.0042c25c
add esp, 0x10
lea eax, [ebp - 0x4964]
push eax
lea eax, [ebp - 0x4954]
push eax
call fcn.00424674
add esp, 0x14
lea eax, [ebp - 0x4954]
call fcn.00426ae8
test al, al
je 0x635633
push 0x639b40
lea eax, [ebp - 0x220]
push eax
lea eax, [ebp - 0x4974]
push eax
call fcn.00424674
add esp, 0xc
lea edx, [ebp - 0x4974]
lea eax, [ebp - 0xb4]
call fcn.004291dc
inc esi
dec dword [ebp - 0x2e0]
jne 0x63540c
lea eax, [ebp - 0x1d0]
push eax
push 0x639d40
push 0x639bf0
lea eax, [ebp - 0x170]
push eax
lea eax, [ebp - 0x4984]
push eax
call fcn.00424674
add esp, 0x14
lea eax, [ebp - 0x4984]
call fcn.00426ae8
test al, al
je 0x635708
push 0x639b80
lea eax, [ebp - 0x1d0]
push eax
lea eax, [ebp - 0x4994]
push eax
call fcn.00424674
add esp, 0xc
lea edx, [ebp - 0x4994]
lea eax, [ebp - 0xac]
call fcn.004291dc
lea eax, [ebp - 0x220]
push eax
push 0x12000005
push 0x639b30
lea eax, [ebp - 0x1d0]
push eax
lea eax, [ebp - 0x49a4]
push eax
call fcn.00424674
add esp, 0x14
lea eax, [ebp - 0x49a4]
call fcn.00426ae8
test al, al
je 0x635708
push 0x639b40
lea eax, [ebp - 0x220]
push eax
lea eax, [ebp - 0x49b4]
push eax
call fcn.00424674
add esp, 0xc
lea edx, [ebp - 0x49b4]
lea eax, [ebp - 0xb4]
call fcn.004291dc
cmp dword [ebp - 0xb4], 0
jne 0x635722
lea eax, [ebp - 0xb4]
mov edx, dword [ebp - 0xb0]
call fcn.00407cf0
cmp dword [ebp - 0x238], 0
jne 0x6357ea
lea eax, [ebp - 0x1f0]
push eax
push 1
lea eax, [ebp - 0x49b8]
mov edx, dword [ebp - 0xac]
call fcn.00407f28
mov eax, dword [ebp - 0x49b8]
push eax
push 0x639a3c
push dword [0x6b2634]
push 0x639a68
lea eax, [ebp - 0x49c0]
mov edx, 3
call fcn.00408264
mov edx, dword [ebp - 0x49c0]
lea eax, [ebp - 0x49bc]
call fcn.00407f28
mov eax, dword [ebp - 0x49bc]
push eax
push 0x639d90
lea eax, [ebp - 0x170]
push eax
push 0
call fcn.00424674
add esp, 0x1c
push 0x639b80
lea eax, [ebp - 0x1f0]
push eax
lea eax, [ebp - 0x49d0]
push eax
call fcn.00424674
add esp, 0xc
lea edx, [ebp - 0x49d0]
lea eax, [ebp - 0xb8]
call fcn.004291dc
push 0x639da8
push 0x12000004
push 0x639de0
lea eax, [ebp - 0x1f0]
push eax
push 0
call fcn.00424674
add esp, 0x14
push 0x639a3c
push dword [0x6b2634]
push 0x639e04
lea eax, [ebp - 0x49d8]
mov edx, 3
call fcn.00408264
mov edx, dword [ebp - 0x49d8]
lea eax, [ebp - 0x49d4]
call fcn.00407f28
mov eax, dword [ebp - 0x49d4]
push eax
push 0x639d08
lea eax, [ebp - 0x170]
push eax
push 0
call fcn.00424674
add esp, 0x10
push 0x639a3c
push dword [0x6b2634]
push 0x639af4
lea eax, [ebp - 0x49e0]
mov edx, 3
call fcn.00408264
mov edx, dword [ebp - 0x49e0]
lea eax, [ebp - 0x49dc]
call fcn.00407f28
mov eax, dword [ebp - 0x49dc]
push eax
push 0x639b08
lea eax, [ebp - 0x170]
push eax
push 0
call fcn.00424674
add esp, 0x10
mov eax, dword [ebp - 0x234]
mov eax, dword [eax + 0x3c0]
mov edx, dword [eax]
call dword [edx + 0xec]
push eax
push 0x25000061
push 0x639e18
lea eax, [ebp - 0x1f0]
push eax
push 0
call fcn.00424674
add esp, 0x14
lea eax, [ebp - 0x1d0]
push eax
push 0x639ba0
push 0x639bf0
lea eax, [ebp - 0x170]
push eax
push 0
call fcn.00424674
add esp, 0x14
lea edx, [ebp - 0x49e4]
mov eax, dword [0x6ab7b8]
mov eax, dword [eax]
mov eax, dword [eax + 0x394]
call fcn.004a753c
mov eax, dword [ebp - 0x49e4]
call fcn.004164a8
test eax, eax
jl 0x63593e
lea edx, [ebp - 0x49e8]
mov eax, dword [0x6ab7b8]
mov eax, dword [eax]
mov eax, dword [eax + 0x394]
call fcn.004a753c
mov eax, dword [ebp - 0x49e8]
call fcn.004164a8
push eax
push 0x25000004
push 0x639e18
lea eax, [ebp - 0x1d0]
push eax
push 0
call fcn.00424674
add esp, 0x14
lea edx, [ebp - 0x49ec]
mov eax, dword [0x6ab7b8]
mov eax, dword [eax]
mov eax, dword [eax + 0x394]
call fcn.004a753c
mov eax, dword [ebp - 0x49ec]
call fcn.004164a8
inc eax
jne 0x63597f
push 0x25000004
push 0x639c44
lea eax, [ebp - 0x1d0]
push eax
push 0
call fcn.00424674
add esp, 0x10
cmp dword [ebp - 0x238], 0
jne 0x6359a5
push 0x1e
push 0x25000004
push 0x639e18
lea eax, [ebp - 0x1d0]
push eax
push 0
call fcn.00424674
add esp, 0x14
xor ebx, ebx
lea eax, [ebp - 0x180]
push eax
push 0x10400008
push 0x639b18
lea eax, [ebp - 0x170]
push eax
push 0
call fcn.00424674
add esp, 0x14
lea eax, [ebp - 0x180]
mov edx, 1
call fcn.0042c150
mov esi, eax
lea eax, [ebp - 0x180]
mov edx, 1
call fcn.0042c174
sub eax, esi
jl 0x635ac4
inc eax
mov dword [ebp - 0x2e0], eax
lea eax, [ebp - 0x190]
push eax
push 0x12000004
push 0x639b30
push esi
push 1
lea eax, [ebp - 0x180]
push eax
lea eax, [ebp - 0x4a0c]
push eax
call fcn.0042c25c
add esp, 0x10
lea eax, [ebp - 0x4a0c]
push eax
lea eax, [ebp - 0x49fc]
push eax
call fcn.00424674
add esp, 0x14
lea eax, [ebp - 0x49fc]
call fcn.00426ae8
test al, al
je 0x635ab7
push 0x639b40
lea eax, [ebp - 0x190]
push eax
lea eax, [ebp - 0x4a1c]
push eax
call fcn.00424674
add esp, 0xc
lea eax, [ebp - 0x4a1c]
push eax
lea eax, [ebp - 0x4a2c]
mov edx, 0x639b58
call fcn.00429cb8
lea edx, [ebp - 0x4a2c]
pop eax
call fcn.0042d1cc
jne 0x635ab7
push esi
push 1
lea eax, [ebp - 0x180]
push eax
lea eax, [ebp - 0x4a3c]
push eax
call fcn.0042c25c
add esp, 0x10
lea edx, [ebp - 0x4a3c]
lea eax, [ebp - 0x1c0]
call fcn.00429e5c
mov bl, 1
jmp 0x635ac4
inc esi
dec dword [ebp - 0x2e0]
jne 0x6359fa
test bl, bl
jne 0x635aec
lea eax, [ebp - 0x1c0]
push eax
push 0x10400008
push 0
push 0x639e30
lea eax, [ebp - 0x170]
push eax
push 0
call fcn.00424674
add esp, 0x18
push 0x639e48
push 0x12000004
push 0x639de0
lea eax, [ebp - 0x1c0]
push eax
push 0
call fcn.00424674
add esp, 0x14
lea eax, [ebp - 0x4a40]
mov edx, dword [0x6b2634]
call fcn.00407f28
mov eax, dword [ebp - 0x4a40]
push eax
push 0
push 2
push 0x11000001
push 0x639e70
lea eax, [ebp - 0x1c0]
push eax
push 0
call fcn.00424674
add esp, 0x1c
mov eax, dword [ebp - 0x94]
mov edx, 0x639164
call fcn.00408384
je 0x635b67
mov eax, dword [ebp - 0x94]
mov edx, 0x639138
call fcn.00408384
jne 0x635b89
push 0x639e98
push 0x12000002
push 0x639de0
lea eax, [ebp - 0x1c0]
push eax
push 0
call fcn.00424674
add esp, 0x14
jmp 0x635bdc
push 0x639eb8
push dword [ebp - 0x94]
push 0x6399f0
lea eax, [ebp - 0x4a48]
mov edx, 3
call fcn.00408264
mov edx, dword [ebp - 0x4a48]
lea eax, [ebp - 0x4a44]
call fcn.00407f28
mov eax, dword [ebp - 0x4a44]
push eax
push 0x12000002
push 0x639de0
lea eax, [ebp - 0x1c0]
push eax
push 0
call fcn.00424674
add esp, 0x14
push 0x639b80
lea eax, [ebp - 0x1c0]
push eax
lea eax, [ebp - 0x4a58]
push eax
call fcn.00424674
add esp, 0xc
push dword [ebp - 0x4a4c]
push dword [ebp - 0x4a50]
push dword [ebp - 0x4a54]
push dword [ebp - 0x4a58]
push 0x23000003
push 0x639ec8
lea eax, [ebp - 0x1d0]
push eax
push 0
call fcn.00424674
add esp, 0x20
push 0
lea eax, [ebp - 0xe4]
mov ecx, 1
mov edx, dword [0x631858]
call fcn.004099f4
add esp, 4
lea eax, [ebp - 0x1e0]
push eax
push 0x24000001
push 0x639b30
lea eax, [ebp - 0x1d0]
push eax
lea eax, [ebp - 0x4a68]
push eax
call fcn.00424674
add esp, 0x14
lea eax, [ebp - 0x4a68]
call fcn.00426ae8
test al, al
je 0x635e24
push 0x639c00
lea eax, [ebp - 0x1e0]
push eax
lea eax, [ebp - 0x4a78]
push eax
call fcn.00424674
add esp, 0xc
lea eax, [ebp - 0x4a78]
mov edx, 1
call fcn.0042c150
mov esi, eax
push 0x639c00
lea eax, [ebp - 0x1e0]
push eax
lea eax, [ebp - 0x4a88]
push eax
call fcn.00424674
add esp, 0xc
lea eax, [ebp - 0x4a88]
mov edx, 1
call fcn.0042c174
sub eax, esi
jl 0x635db1
inc eax
mov dword [ebp - 0x2e0], eax
push esi
push 0x639c08
lea eax, [ebp - 0x1e0]
push eax
lea eax, [ebp - 0x4a98]
push eax
call fcn.00424674
add esp, 0x10
lea eax, [ebp - 0x4a98]
push eax
push 0x639b80
lea eax, [ebp - 0x1c0]
push eax
lea eax, [ebp - 0x4aa8]
push eax
call fcn.00424674
add esp, 0xc
lea edx, [ebp - 0x4aa8]
pop eax
call fcn.0042d1dc
je 0x635da4
mov eax, dword [ebp - 0xe4]
call fcn.0040982c
inc eax
push eax
lea eax, [ebp - 0xe4]
mov ecx, 1
mov edx, dword [0x631858]
call fcn.004099f4
add esp, 4
mov eax, dword [ebp - 0xe4]
call fcn.0040982c
dec eax
mov edx, dword [ebp - 0xe4]
test edx, edx
je 0x635d73
cmp eax, dword [edx - 4]
jb 0x635d78
call fcn.00405714
lea eax, [edx + eax*4]
push eax
push esi
push 0x639c08
lea eax, [ebp - 0x1e0]
push eax
lea eax, [ebp - 0x4ab8]
push eax
call fcn.00424674
add esp, 0x10
lea edx, [ebp - 0x4ab8]
pop eax
call fcn.004291dc
inc esi
dec dword [ebp - 0x2e0]
jne 0x635ce6
mov eax, dword [ebp - 0xe4]
call fcn.0040982c
inc eax
push eax
lea eax, [ebp - 0xe4]
mov ecx, 1
mov edx, dword [0x631858]
call fcn.004099f4
add esp, 4
mov eax, dword [ebp - 0xe4]
call fcn.0040982c
dec eax
mov edx, dword [ebp - 0xe4]
test edx, edx
je 0x635df2
cmp eax, dword [edx - 4]
jb 0x635df7
call fcn.00405714
lea eax, [edx + eax*4]
push eax
push 0x639b80
lea eax, [ebp - 0x1c0]
push eax
lea eax, [ebp - 0x4ac8]
push eax
call fcn.00424674
add esp, 0xc
lea edx, [ebp - 0x4ac8]
pop eax
call fcn.004291dc
jmp 0x635e7e
push 1
lea eax, [ebp - 0xe4]
mov ecx, 1
mov edx, dword [0x631858]
call fcn.004099f4
add esp, 4
push 0x639b80
lea eax, [ebp - 0x1c0]
push eax
lea eax, [ebp - 0x4ad8]
push eax
call fcn.00424674
add esp, 0xc
lea edx, [ebp - 0x4ad8]
xor eax, eax
mov ecx, dword [ebp - 0xe4]
test ecx, ecx
je 0x635e71
cmp eax, dword [ecx - 4]
jb 0x635e76
call fcn.00405714
lea eax, [ecx + eax*4]
call fcn.004291dc
lea eax, [ebp - 0x4ae8]
mov edx, dword [ebp - 0xe4]
mov ecx, dword [0x631858]
call fcn.00429d3c
push dword [ebp - 0x4adc]
push dword [ebp - 0x4ae0]
push dword [ebp - 0x4ae4]
push dword [ebp - 0x4ae8]
push 0x24000001
push 0x639c10
lea eax, [ebp - 0x1d0]
push eax
push 0
call fcn.00424674
add esp, 0x20
lea eax, [ebp - 0x110]
push eax
push 0x639a3c
push dword [0x6b2634]
push 0x639eec
lea eax, [ebp - 0x4aec]
mov edx, 3
call fcn.00408264
mov ecx, dword [ebp - 0x4aec]
mov edx, 0x639a88
mov eax, dword [ebp - 0xd4]
call fcn.00630980
lea eax, [ebp - 0x1f0]
push eax
push 0x639ba0
push 0x639bf0
lea eax, [ebp - 0x110]
push eax
push 0
call fcn.00424674
add esp, 0x14
cmp dword [ebp - 0x238], 0
jne 0x635fbd
push 1
lea eax, [ebp - 0xe4]
mov ecx, 1
mov edx, dword [0x631858]
call fcn.004099f4
add esp, 4
xor eax, eax
mov edx, dword [ebp - 0xe4]
test edx, edx
je 0x635f60
cmp eax, dword [edx - 4]
jb 0x635f65
call fcn.00405714
lea eax, [edx + eax*4]
mov edx, dword [ebp - 0xb8]
call fcn.00407c9c
lea eax, [ebp - 0x4afc]
mov edx, dword [ebp - 0xe4]
mov ecx, dword [0x631858]
call fcn.00429d3c
push dword [ebp - 0x4af0]
push dword [ebp - 0x4af4]
push dword [ebp - 0x4af8]
push dword [ebp - 0x4afc]
push 0x24000002
push 0x639c10
lea eax, [ebp - 0x1f0]
push eax
push 0
call fcn.00424674
add esp, 0x20
push 0xffffffffffffffff
push 0x16000048
push 0x639c58
lea eax, [ebp - 0x1f0]
push eax
push 0
call fcn.00424674
add esp, 0x14
cmp dword [ebp - 0x238], 0
je 0x63608e
lea edx, [ebp - 0x4b00]
mov eax, dword [0x6ab7b8]
mov eax, dword [eax]
mov eax, dword [eax + 0x398]
call fcn.004a753c
mov eax, dword [ebp - 0x4b00]
call fcn.004164a8
test eax, eax
jl 0x63604d
lea edx, [ebp - 0x4b04]
mov eax, dword [0x6ab7b8]
mov eax, dword [eax]
mov eax, dword [eax + 0x398]
call fcn.004a753c
mov eax, dword [ebp - 0x4b04]
call fcn.004164a8
push eax
push 0x25000004
push 0x639e18
lea eax, [ebp - 0x1f0]
push eax
push 0
call fcn.00424674
add esp, 0x14
lea edx, [ebp - 0x4b08]
mov eax, dword [0x6ab7b8]
mov eax, dword [eax]
mov eax, dword [eax + 0x398]
call fcn.004a753c
mov eax, dword [ebp - 0x4b08]
call fcn.004164a8
inc eax
jne 0x63608e
push 0x25000004
push 0x639c44
lea eax, [ebp - 0x1f0]
push eax
push 0
call fcn.00424674
add esp, 0x10
mov eax, dword [ebp - 0x234]
mov eax, dword [eax + 0x698]
mov edx, dword [eax]
call dword [edx + 0xec]
test al, al
je 0x63698e
lea eax, [ebp - 0x170]
push eax
push 0x639a3c
push dword [0x6b2634]
push 0x639a68
lea eax, [ebp - 0x4b0c]
mov edx, 3
call fcn.00408264
mov ecx, dword [ebp - 0x4b0c]
mov edx, 0x639a88
mov eax, dword [ebp - 0xd4]
call fcn.00630980
cmp dword [ebp - 0x238], 0
jne 0x636190
push 0x639a3c
push dword [0x6b2634]
push 0x639aa8
lea eax, [ebp - 0x4b14]
mov edx, 3
call fcn.00408264
mov edx, dword [ebp - 0x4b14]
lea eax, [ebp - 0x4b10]
call fcn.00407f28
mov eax, dword [ebp - 0x4b10]
push eax
push 0x639d08
lea eax, [ebp - 0x170]
push eax
push 0
call fcn.00424674
add esp, 0x10
push 0x639a3c
push dword [0x6b2634]
push 0x639af4
lea eax, [ebp - 0x4b1c]
mov edx, 3
call fcn.00408264
mov edx, dword [ebp - 0x4b1c]
lea eax, [ebp - 0x4b18]
call fcn.00407f28
mov eax, dword [ebp - 0x4b18]
push eax
push 0x639b08
lea eax, [ebp - 0x170]
push eax
push 0
call fcn.00424674
add esp, 0x10
lea eax, [ebp - 0x180]
push eax
push 0x10200003
push 0x639b18
lea eax, [ebp - 0x170]
push eax
push 0
call fcn.00424674
add esp, 0x14
lea eax, [ebp - 0x180]
mov edx, 1
call fcn.0042c150
mov esi, eax
lea eax, [ebp - 0x180]
mov edx, 1
call fcn.0042c174
sub eax, esi
jl 0x636407
inc eax
mov dword [ebp - 0x2e0], eax
lea eax, [ebp - 0x190]
push eax
push 0x12000002
push 0x639b30
push esi
push 1
lea eax, [ebp - 0x180]
push eax
lea eax, [ebp - 0x4b3c]
push eax
call fcn.0042c25c
add esp, 0x10
lea eax, [ebp - 0x4b3c]
push eax
lea eax, [ebp - 0x4b2c]
push eax
call fcn.00424674
add esp, 0x14
lea eax, [ebp - 0x4b2c]
push eax
lea eax, [ebp - 0x1a0]
push eax
push 0x11000001
push 0x639b30
push esi
push 1
lea eax, [ebp - 0x180]
push eax
lea eax, [ebp - 0x4b5c]
push eax
call fcn.0042c25c
add esp, 0x10
lea eax, [ebp - 0x4b5c]
push eax
lea eax, [ebp - 0x4b4c]
push eax
call fcn.00424674
add esp, 0x14
lea edx, [ebp - 0x4b4c]
pop eax
call fcn.0042d1c0
lea eax, [ebp - 0x4b2c]
call fcn.00426ae8
test al, al
je 0x6363fa
push 0x639b40
lea eax, [ebp - 0x190]
push eax
lea eax, [ebp - 0x4b74]
push eax
call fcn.00424674
add esp, 0xc
lea edx, [ebp - 0x4b74]
lea eax, [ebp - 0x4b64]
call fcn.004291dc
mov eax, dword [ebp - 0x4b64]
lea edx, [ebp - 0x4b60]
call fcn.004152c8
mov eax, dword [ebp - 0x4b60]
push eax
lea eax, [ebp - 0x4b7c]
mov edx, dword [0x6b26f0]
call fcn.00407ec8
lea eax, [ebp - 0x4b7c]
mov edx, 0x639f0c
call fcn.004080c0
mov eax, dword [ebp - 0x4b7c]
lea edx, [ebp - 0x4b78]
call fcn.004152c8
mov edx, dword [ebp - 0x4b78]
pop eax
call fcn.00408384
jne 0x6363fa
push 0x639d18
push 0x639d28
lea eax, [ebp - 0x1a0]
push eax
lea eax, [ebp - 0x4b9c]
push eax
call fcn.00424674
add esp, 0xc
lea eax, [ebp - 0x4b9c]
push eax
lea eax, [ebp - 0x4b8c]
push eax
call fcn.00424674
add esp, 0xc
lea eax, [ebp - 0x4b8c]
push eax
lea eax, [ebp - 0x4bac]
mov edx, 2
mov cl, 1
call fcn.004299d4
lea edx, [ebp - 0x4bac]
pop eax
call fcn.0042d1cc
jne 0x6363fa
push 0x639d34
push 0x639d28
lea eax, [ebp - 0x1a0]
push eax
lea eax, [ebp - 0x4bcc]
push eax
call fcn.00424674
add esp, 0xc
lea eax, [ebp - 0x4bcc]
push eax
lea eax, [ebp - 0x4bbc]
push eax
call fcn.00424674
add esp, 0xc
lea eax, [ebp - 0x4bbc]
push eax
lea eax, [ebp - 0x4bdc]
mov edx, dword [0x6b263c]
call fcn.00429cb8
lea edx, [ebp - 0x4bdc]
pop eax
call fcn.0042d1cc
jne 0x6363fa
push esi
push 1
lea eax, [ebp - 0x180]
push eax
lea eax, [ebp - 0x4bec]
push eax
call fcn.0042c25c
add esp, 0x10
lea edx, [ebp - 0x4bec]
lea eax, [ebp - 0x1c0]
call fcn.00429e5c
jmp 0x636407
inc esi
dec dword [ebp - 0x2e0]
jne 0x6361e3
lea eax, [ebp - 0x1d0]
push eax
push 0x639ba0
push 0x639bf0
lea eax, [ebp - 0x170]
push eax
push 0
call fcn.00424674
add esp, 0x14
lea edx, [ebp - 0x4bf0]
mov eax, dword [0x6ab7b8]
mov eax, dword [eax]
mov eax, dword [eax + 0x394]
call fcn.004a753c
mov eax, dword [ebp - 0x4bf0]
call fcn.004164a8
test eax, eax
jl 0x63648f
lea edx, [ebp - 0x4bf4]
mov eax, dword [0x6ab7b8]
mov eax, dword [eax]
mov eax, dword [eax + 0x394]
call fcn.004a753c
mov eax, dword [ebp - 0x4bf4]
call fcn.004164a8
push eax
push 0x25000004
push 0x639e18
lea eax, [ebp - 0x1d0]
push eax
push 0
call fcn.00424674
add esp, 0x14
lea edx, [ebp - 0x4bf8]
mov eax, dword [0x6ab7b8]
mov eax, dword [eax]
mov eax, dword [eax + 0x394]
call fcn.004a753c
mov eax, dword [ebp - 0x4bf8]
call fcn.004164a8
inc eax
jne 0x6364d0
push 0x25000004
push 0x639c44
lea eax, [ebp - 0x1d0]
push eax
push 0
call fcn.00424674
add esp, 0x10
push 0x639b80
lea eax, [ebp - 0x1c0]
push eax
lea eax, [ebp - 0x4c08]
push eax
call fcn.00424674
add esp, 0xc
push dword [ebp - 0x4bfc]
push dword [ebp - 0x4c00]
push dword [ebp - 0x4c04]
push dword [ebp - 0x4c08]
push 0x23000003
push 0x639ec8
lea eax, [ebp - 0x1d0]
push eax
push 0
call fcn.00424674
add esp, 0x20
lea eax, [ebp - 0x110]
push eax
push 0x639a3c
push dword [0x6b2634]
push 0x639eec
lea eax, [ebp - 0x4c0c]
mov edx, 3
call fcn.00408264
mov ecx, dword [ebp - 0x4c0c]
mov edx, 0x639f44
mov eax, dword [ebp - 0xd4]
call fcn.00630980
lea eax, [ebp - 0x160]
push eax
push 0x10400008
push 0
push 0x639e30
lea eax, [ebp - 0x110]
push eax
push 0
call fcn.00424674
add esp, 0x18
push 0x639e48
push 0x12000004
push 0x639de0
lea eax, [ebp - 0x160]
push eax
push 0
call fcn.00424674
add esp, 0x14
lea eax, [ebp - 0x4c10]
mov edx, dword [0x6b2634]
call fcn.00407f28
mov eax, dword [ebp - 0x4c10]
push eax
push 0
push 2
push 0x11000001
push 0x639e70
lea eax, [ebp - 0x160]
push eax
push 0
call fcn.00424674
add esp, 0x1c
push 0xffffffffffffffff
push 0x16000048
push 0x639c58
lea eax, [ebp - 0x160]
push eax
push 0
call fcn.00424674
add esp, 0x14
mov eax, dword [ebp - 0x94]
mov edx, 0x639164
call fcn.00408384
je 0x636617
mov eax, dword [ebp - 0x94]
mov edx, 0x639138
call fcn.00408384
jne 0x636639
push 0x639e98
push 0x12000002
push 0x639de0
lea eax, [ebp - 0x160]
push eax
push 0
call fcn.00424674
add esp, 0x14
jmp 0x63668c
push 0x639eb8
push dword [ebp - 0x94]
push 0x6399f0
lea eax, [ebp - 0x4c18]
mov edx, 3
call fcn.00408264
mov edx, dword [ebp - 0x4c18]
lea eax, [ebp - 0x4c14]
call fcn.00407f28
mov eax, dword [ebp - 0x4c14]
push eax
push 0x12000002
push 0x639de0
lea eax, [ebp - 0x160]
push eax
push 0
call fcn.00424674
add esp, 0x14
lea eax, [ebp - 0x130]
push eax
push 0x10400008
push 0
push 0x639e30
lea eax, [ebp - 0x110]
push eax
push 0
call fcn.00424674
add esp, 0x18
push 0x639f60
push 0x12000004
push 0x639de0
lea eax, [ebp - 0x130]
push eax
push 0
call fcn.00424674
add esp, 0x14
lea eax, [ebp - 0x4c1c]
mov edx, dword [0x6b2634]
call fcn.00407f28
mov eax, dword [ebp - 0x4c1c]
push eax
push 0
push 2
push 0x11000001
push 0x639e70
lea eax, [ebp - 0x130]
push eax
push 0
call fcn.00424674
add esp, 0x1c
mov eax, 0x639224
call fcn.00626d98
test al, al
je 0x63674f
mov eax, dword [ebp - 0x234]
mov eax, dword [eax + 0x698]
mov edx, dword [eax]
call dword [edx + 0xec]
test al, al
je 0x63674f
push 0x639f90
push 0x12000002
push 0x639de0
lea eax, [ebp - 0x130]
push eax
push 0
call fcn.00424674
add esp, 0x14
jmp 0x63676f
push 0x639fa8
push 0x12000002
push 0x639de0
lea eax, [ebp - 0x130]
push eax
push 0
call fcn.00424674
add esp, 0x14
lea eax, [ebp - 0x150]
push eax
push 0x10100002
push 0x639ba0
push 0x639e30
lea eax, [ebp - 0x110]
push eax
push 0
call fcn.00424674
add esp, 0x18
push 0xffffffffffffffff
push 0x16000048
push 0x639c58
lea eax, [ebp - 0x150]
push eax
push 0
call fcn.00424674
add esp, 0x14
lea edx, [ebp - 0x4c20]
mov eax, dword [0x6ab7b8]
mov eax, dword [eax]
mov eax, dword [eax + 0x398]
call fcn.004a753c
mov eax, dword [ebp - 0x4c20]
call fcn.004164a8
test eax, eax
jl 0x636819
lea edx, [ebp - 0x4c24]
mov eax, dword [0x6ab7b8]
mov eax, dword [eax]
mov eax, dword [eax + 0x398]
call fcn.004a753c
mov eax, dword [ebp - 0x4c24]
call fcn.004164a8
push eax
push 0x25000004
push 0x639e18
lea eax, [ebp - 0x150]
push eax
push 0
call fcn.00424674
add esp, 0x14
lea edx, [ebp - 0x4c28]
mov eax, dword [0x6ab7b8]
mov eax, dword [eax]
mov eax, dword [eax + 0x398]
call fcn.004a753c
mov eax, dword [ebp - 0x4c28]
call fcn.004164a8
inc eax
jne 0x63685a
push 0x25000004
push 0x639c44
lea eax, [ebp - 0x150]
push eax
push 0
call fcn.00424674
add esp, 0x10
push 0x639b80
lea eax, [ebp - 0x160]
push eax
lea eax, [ebp - 0x4c38]
push eax
call fcn.00424674
add esp, 0xc
push dword [ebp - 0x4c2c]
push dword [ebp - 0x4c30]
push dword [ebp - 0x4c34]
push dword [ebp - 0x4c38]
push 0x23000003
push 0x639ec8
lea eax, [ebp - 0x150]
push eax
push 0
call fcn.00424674
add esp, 0x20
push 2
lea eax, [ebp - 0xe4]
mov ecx, 1
mov edx, dword [0x631858]
call fcn.004099f4
add esp, 4
push 0x639b80
lea eax, [ebp - 0x130]
push eax
lea eax, [ebp - 0x4c48]
push eax
call fcn.00424674
add esp, 0xc
lea edx, [ebp - 0x4c48]
xor eax, eax
mov ecx, dword [ebp - 0xe4]
test ecx, ecx
je 0x6368f5
cmp eax, dword [ecx - 4]
jb 0x6368fa
call fcn.00405714
lea eax, [ecx + eax*4]
call fcn.004291dc
push 0x639b80
lea eax, [ebp - 0x160]
push eax
lea eax, [ebp - 0x4c58]
push eax
call fcn.00424674
add esp, 0xc
lea edx, [ebp - 0x4c58]
mov eax, 1
mov ecx, dword [ebp - 0xe4]
test ecx, ecx
je 0x636937
cmp eax, dword [ecx - 4]
jb 0x63693c
call fcn.00405714
lea eax, [ecx + eax*4]
call fcn.004291dc
lea eax, [ebp - 0x4c68]
mov edx, dword [ebp - 0xe4]
mov ecx, dword [0x631858]
call fcn.00429d3c
push dword [ebp - 0x4c5c]
push dword [ebp - 0x4c60]
push dword [ebp - 0x4c64]
push dword [ebp - 0x4c68]
push 0x24000001
push 0x639c10
lea eax, [ebp - 0x150]
push eax
push 0
call fcn.00424674
add esp, 0x20
call sub.ole32.dll_CoUninitialize
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x6369e2
cmp byte [ebp - 0x28d], 0
je 0x636a03
mov eax, dword [ebp - 0x234]
mov eax, dword [eax + 0x69c]
mov edx, dword [eax]
call dword [edx + 0xec]
test al, al
jne 0x636a10
cmp byte [0x6b26f5], 0
jne 0x636e1c
mov eax, 0x63a020
call fcn.00626d98
test al, al
jne 0x636e1c
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x3b8], eax
cmp dword [ebp - 0x3b8], 0
je 0x636a56
mov eax, dword [ebp - 0x3b8]
sub eax, 0xa
cmp word [eax], 1
je 0x636a56
lea eax, [ebp - 0x70]
xor ecx, ecx
mov edx, dword [ebp - 0x70]
call fcn.00406d4c
mov dword [ebp - 0x3b8], eax
mov eax, dword [ebp - 0x3b8]
mov dword [ebp - 0x3bc], eax
cmp dword [ebp - 0x3bc], 0
je 0x636a7c
mov eax, dword [ebp - 0x3bc]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x3bc], eax
mov eax, dword [ebp - 0x3bc]
push eax
lea eax, [ebp - 0xf0]
mov ecx, 1
mov edx, dword [0x6318e8]
call fcn.004099f4
add esp, 4
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x3c0], eax
cmp dword [ebp - 0x3c0], 0
je 0x636ad0
mov eax, dword [ebp - 0x3c0]
sub eax, 0xa
cmp word [eax], 1
je 0x636ad0
lea eax, [ebp - 0x70]
xor ecx, ecx
mov edx, dword [ebp - 0x70]
call fcn.00406d4c
mov dword [ebp - 0x3c0], eax
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x3c4], eax
cmp dword [ebp - 0x3c4], 0
je 0x636b04
mov eax, dword [ebp - 0x3c4]
sub eax, 0xa
cmp word [eax], 1
je 0x636b04
lea eax, [ebp - 0x70]
xor ecx, ecx
mov edx, dword [ebp - 0x70]
call fcn.00406d4c
mov dword [ebp - 0x3c4], eax
mov eax, dword [ebp - 0x3c4]
mov dword [ebp - 0x3c8], eax
cmp dword [ebp - 0x3c8], 0
je 0x636b2a
mov eax, dword [ebp - 0x3c8]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x3c8], eax
lea eax, [ebp - 0x70]
call fcn.00407318
mov edx, 1
dec edx
test eax, eax
je 0x636b41
cmp edx, dword [eax - 4]
jb 0x636b46
call fcn.00405714
inc edx
lea eax, [eax + edx - 1]
xor edx, edx
mov ecx, dword [ebp - 0xf0]
test ecx, ecx
je 0x636b5c
cmp edx, dword [ecx - 4]
jb 0x636b61
call fcn.00405714
lea edx, [ecx + edx]
mov ecx, dword [ebp - 0x3c8]
call fcn.0040452c
push 0
push 0
push 3
push 0
push 7
push 0x40000000
lea eax, [ebp - 0x4c74]
mov edx, dword [0x6b26dc]
call fcn.00407ec8
mov ecx, dword [ebp - 0x4c74]
lea eax, [ebp - 0x4c70]
mov edx, 0x63a03c
call fcn.00408180
mov eax, dword [ebp - 0x4c70]
call fcn.00407d28
push eax
call sub.kernel32.dll_CreateFileW_1
mov dword [ebp - 0x29c], eax
xor edx, edx
push ebp
push 0x636e15
push dword fs:[edx]
mov dword fs:[edx], esp
cmp dword [ebp - 0x29c], 0xffffffff
jne 0x636c2c
lea eax, [ebp - 0x4c7c]
call fcn.00624c14
mov ecx, dword [ebp - 0x4c7c]
lea eax, [ebp - 0x4c78]
mov edx, 0x63a06c
call fcn.00408180
mov eax, dword [ebp - 0x4c78]
mov dword [ebp - 0x3cc], eax
push 0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
movzx ecx, word [0x638edc]
mov dl, 2
mov eax, dword [ebp - 0x3cc]
call fcn.0048dbbc
mov dword [ebp - 0x3d0], eax
mov eax, dword [0x6b2578]
call fcn.004d21c8
push 0
push 0
push 0
mov eax, dword [ebp - 0x29c]
push eax
call sub.kernel32.dll_SetFilePointer_1
cmp eax, dword [0x6aab5c]
jne 0x636c9f
lea eax, [ebp - 0x4c84]
call fcn.00624c14
mov ecx, dword [ebp - 0x4c84]
lea eax, [ebp - 0x4c80]
mov edx, 0x63a098
call fcn.00408180
mov eax, dword [ebp - 0x4c80]
mov dword [ebp - 0x3d4], eax
push 0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
movzx ecx, word [0x638edc]
mov dl, 2
mov eax, dword [ebp - 0x3d4]
call fcn.0048dbbc
mov dword [ebp - 0x3d8], eax
mov eax, dword [0x6b2578]
call fcn.004d21c8
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x3dc], eax
cmp dword [ebp - 0x3dc], 0
je 0x636cd3
mov eax, dword [ebp - 0x3dc]
sub eax, 0xa
cmp word [eax], 1
je 0x636cd3
lea eax, [ebp - 0x70]
xor ecx, ecx
mov edx, dword [ebp - 0x70]
call fcn.00406d4c
mov dword [ebp - 0x3dc], eax
mov eax, dword [ebp - 0x3dc]
mov dword [ebp - 0x3e0], eax
cmp dword [ebp - 0x3e0], 0
je 0x636cf9
mov eax, dword [ebp - 0x3e0]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x3e0], eax
xor eax, eax
mov edx, dword [ebp - 0xf0]
test edx, edx
je 0x636d0a
cmp eax, dword [edx - 4]
jb 0x636d0f
call fcn.00405714
add edx, eax
mov ecx, dword [ebp - 0x3e0]
test ecx, ecx
jns 0x636d20
call fcn.00405714
mov eax, dword [ebp - 0x29c]
test eax, eax
jns 0x636d2f
call fcn.00405714
call fcn.0041692c
mov dword [ebp - 0x3ec], eax
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x3e4], eax
cmp dword [ebp - 0x3e4], 0
je 0x636d6e
mov eax, dword [ebp - 0x3e4]
sub eax, 0xa
cmp word [eax], 1
je 0x636d6e
lea eax, [ebp - 0x70]
xor ecx, ecx
mov edx, dword [ebp - 0x70]
call fcn.00406d4c
mov dword [ebp - 0x3e4], eax
mov eax, dword [ebp - 0x3e4]
mov dword [ebp - 0x3e8], eax
cmp dword [ebp - 0x3e8], 0
je 0x636d94
mov eax, dword [ebp - 0x3e8]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x3e8], eax
mov eax, dword [ebp - 0x3ec]
cmp eax, dword [ebp - 0x3e8]
je 0x636dfb
lea eax, [ebp - 0x4c8c]
call fcn.00624c14
mov ecx, dword [ebp - 0x4c8c]
lea eax, [ebp - 0x4c88]
mov edx, 0x63a0c4
call fcn.00408180
mov eax, dword [ebp - 0x4c88]
mov dword [ebp - 0x3f0], eax
push 0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
movzx ecx, word [0x638edc]
mov dl, 2
mov eax, dword [ebp - 0x3f0]
call fcn.0048dbbc
mov dword [ebp - 0x3f4], eax
mov eax, dword [0x6b2578]
call fcn.004d21c8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x636e1c
mov eax, dword [ebp - 0x29c]
push eax
call sub.kernel32.dll_CloseHandle_1
ret
mov eax, dword [ebp - 0x234]
mov eax, dword [eax + 0x698]
mov edx, dword [eax]
call dword [edx + 0xec]
test al, al
jne 0x636e62
mov eax, dword [ebp - 0x234]
mov eax, dword [eax + 0x694]
mov edx, dword [eax]
call dword [edx + 0xec]
test al, al
jne 0x636e62
cmp byte [ebp - 0x28d], 0
jne 0x636e62
cmp byte [ebp - 0x28f], 0
je 0x637298
lea eax, [ebp - 0x94]
mov edx, 0x639164
call fcn.00407cf0
mov eax, 0x639224
call fcn.00626d98
test al, al
je 0x636f5e
mov eax, dword [ebp - 0x234]
mov eax, dword [eax + 0x698]
mov edx, dword [eax]
call dword [edx + 0xec]
test al, al
je 0x636f5e
lea eax, [ebp - 0x4c90]
push eax
lea edx, [ebp - 0x4c98]
mov eax, 0x63a0f0
call fcn.00417280
mov edx, dword [ebp - 0x4c98]
lea eax, [ebp - 0x4c94]
mov ecx, 0
call fcn.00407ef0
mov eax, dword [ebp - 0x4c94]
mov ecx, 3
mov dl, 0x20
call fcn.00626b7c
mov eax, dword [ebp - 0x4c90]
push eax
lea eax, [ebp - 0x4c9c]
push eax
lea ecx, [ebp - 0x4ca4]
xor edx, edx
mov eax, 0x63a0f0
call fcn.00416e98
mov edx, dword [ebp - 0x4ca4]
lea eax, [ebp - 0x4ca0]
mov ecx, 0
call fcn.00407ef0
mov eax, dword [ebp - 0x4ca0]
mov ecx, 8
mov dl, 0x20
call fcn.00626b7c
mov edx, dword [ebp - 0x4c9c]
lea eax, [ebp - 0x28]
pop ecx
call fcn.00406ff0
lea edx, [ebp - 0x4ca8]
mov eax, 0x63a0f0
call fcn.0061c1b8
mov ecx, dword [ebp - 0x4ca8]
lea eax, [ebp - 0x34]
mov edx, 0x639154
call fcn.00406ff0
jmp 0x637019
lea eax, [ebp - 0x4cac]
push eax
lea edx, [ebp - 0x4cb4]
mov eax, dword [ebp - 0x94]
call fcn.00417280
mov edx, dword [ebp - 0x4cb4]
lea eax, [ebp - 0x4cb0]
mov ecx, 0
call fcn.00407ef0
mov eax, dword [ebp - 0x4cb0]
mov ecx, 3
mov dl, 0x20
call fcn.00626b7c
mov eax, dword [ebp - 0x4cac]
push eax
lea eax, [ebp - 0x4cb8]
push eax
lea ecx, [ebp - 0x4cc0]
xor edx, edx
mov eax, dword [ebp - 0x94]
call fcn.00416e98
mov edx, dword [ebp - 0x4cc0]
lea eax, [ebp - 0x4cbc]
mov ecx, 0
call fcn.00407ef0
mov eax, dword [ebp - 0x4cbc]
mov ecx, 8
mov dl, 0x20
call fcn.00626b7c
mov edx, dword [ebp - 0x4cb8]
lea eax, [ebp - 0x28]
pop ecx
call fcn.00406ff0
lea edx, [ebp - 0x4cc4]
mov eax, 0x639164
call fcn.0061c1b8
mov ecx, dword [ebp - 0x4cc4]
lea eax, [ebp - 0x34]
mov edx, 0x639154
call fcn.00406ff0
lea eax, [ebp - 0x90]
mov edx, 0x639180
call fcn.00407cf0
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x3f8], eax
cmp dword [ebp - 0x3f8], 0
je 0x637064
mov eax, dword [ebp - 0x3f8]
sub eax, 0xa
cmp word [eax], 2
je 0x637064
lea eax, [ebp - 0x90]
mov edx, dword [ebp - 0x90]
call fcn.00406d1c
mov dword [ebp - 0x3f8], eax
mov eax, dword [ebp - 0x3f8]
mov dword [ebp - 0x3fc], eax
cmp dword [ebp - 0x3fc], 0
je 0x63708a
mov eax, dword [ebp - 0x3fc]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x3fc], eax
mov edx, dword [ebp - 0x3fc]
add edx, edx
lea eax, [ebp - 0x2c]
xor ecx, ecx
call fcn.00407584
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x400], eax
cmp dword [ebp - 0x400], 0
je 0x6370d7
mov eax, dword [ebp - 0x400]
sub eax, 0xa
cmp word [eax], 2
je 0x6370d7
lea eax, [ebp - 0x90]
mov edx, dword [ebp - 0x90]
call fcn.00406d1c
mov dword [ebp - 0x400], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x404], eax
cmp dword [ebp - 0x404], 0
je 0x63710b
mov eax, dword [ebp - 0x404]
sub eax, 0xa
cmp word [eax], 1
je 0x63710b
lea eax, [ebp - 0x2c]
xor ecx, ecx
mov edx, dword [ebp - 0x2c]
call fcn.00406d4c
mov dword [ebp - 0x404], eax
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x408], eax
cmp dword [ebp - 0x408], 0
je 0x637146
mov eax, dword [ebp - 0x408]
sub eax, 0xa
cmp word [eax], 2
je 0x637146
lea eax, [ebp - 0x90]
mov edx, dword [ebp - 0x90]
call fcn.00406d1c
mov dword [ebp - 0x408], eax
mov eax, dword [ebp - 0x408]
mov dword [ebp - 0x40c], eax
cmp dword [ebp - 0x40c], 0
je 0x63716c
mov eax, dword [ebp - 0x40c]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x40c], eax
lea eax, [ebp - 0x2c]
call fcn.00407318
mov edx, 1
dec edx
test eax, eax
je 0x637183
cmp edx, dword [eax - 4]
jb 0x637188
call fcn.00405714
inc edx
lea eax, [eax + edx - 1]
push eax
lea eax, [ebp - 0x90]
call fcn.00408710
mov edx, 1
dec edx
test eax, eax
je 0x6371a8
cmp edx, dword [eax - 4]
jb 0x6371ad
call fcn.00405714
inc edx
lea eax, [eax + edx*2 - 2]
mov ecx, dword [ebp - 0x40c]
add ecx, ecx
pop edx
call fcn.0040452c
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x410], eax
cmp dword [ebp - 0x410], 0
je 0x6371fb
mov eax, dword [ebp - 0x410]
sub eax, 0xa
cmp word [eax], 2
je 0x6371fb
lea eax, [ebp - 0x90]
mov edx, dword [ebp - 0x90]
call fcn.00406d1c
mov dword [ebp - 0x410], eax
mov eax, dword [ebp - 0x410]
mov dword [ebp - 0x414], eax
cmp dword [ebp - 0x414], 0
je 0x637221
mov eax, dword [ebp - 0x414]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x414], eax
lea eax, [ebp - 0x4cc8]
push eax
mov ecx, 0xc
xor edx, edx
mov eax, dword [ebp - 0x2c]
call fcn.00626b7c
mov eax, dword [ebp - 0x4cc8]
push eax
lea eax, [ebp - 0x4524]
mov edx, dword [ebp - 0x414]
mov byte [eax + 1], dl
mov byte [eax], 1
lea edx, [ebp - 0x4524]
lea eax, [ebp - 0x4528]
call fcn.00404db4
mov edx, 0x639008
lea eax, [ebp - 0x4528]
mov cl, 2
call fcn.00404d84
lea edx, [ebp - 0x4528]
lea eax, [ebp - 0x4ccc]
mov ecx, 0
call fcn.00406e88
mov edx, dword [ebp - 0x4ccc]
lea eax, [ebp - 0x2c]
pop ecx
call fcn.00406ff0
xor ebx, ebx
push 0
push 7
push 8
lea eax, [ebp - 0x4cd0]
push eax
mov ecx, 0x6390e8
mov edx, dword [0x6b26e0]
mov eax, dword [0x6b27ac]
call fcn.0061f72c
mov eax, dword [ebp - 0x4cd0]
mov edx, 0x63a10c
call fcn.00408384
jne 0x6373bf
mov bx, 0x2000
lea edx, [ebp - 0x18]
mov eax, 0x63a124
call fcn.0061c888
mov esi, 0x55
mov eax, dword [ebp - 0x94]
mov edx, 0x639164
call fcn.00408384
je 0x637354
mov eax, dword [ebp - 0x94]
mov edx, 0x639138
call fcn.00408384
je 0x637354
lea eax, [ebp - 0x18]
mov ecx, 0x3b3
mov edx, 0x63a138
call fcn.00670554
lea eax, [ebp - 0x18]
mov ecx, 0x3b7
mov edx, 0x63a148
call fcn.00670554
lea eax, [ebp - 0x18]
mov ecx, 0x3c9
mov edx, 0x6399c8
call fcn.00670554
lea eax, [ebp - 0x18]
mov ecx, 0x3cd
mov edx, 0x63a158
call fcn.00670554
lea eax, [ebp - 0x4cd4]
push eax
mov ecx, 0xe
xor edx, edx
mov eax, dword [ebp - 0x2c]
call fcn.00626b7c
mov edx, dword [ebp - 0x4cd4]
lea eax, [ebp - 0x18]
mov ecx, 0x25b
call fcn.00670554
lea eax, [ebp - 0x18]
mov ecx, 0x201
mov edx, dword [ebp - 0x34]
call fcn.00670554
lea eax, [ebp - 0x4cd8]
push eax
mov ecx, esi
sub ecx, 3
sub ecx, 8
dec ecx
mov edx, 0xc
mov eax, dword [0x6b27b4]
call fcn.00407320
mov edx, dword [ebp - 0x4cd8]
lea eax, [ebp - 0x18]
mov ecx, 0xc
call fcn.00670554
push 0
push 7
push 8
lea eax, [ebp - 0x4cdc]
push eax
mov ecx, 0x6390e8
mov edx, dword [0x6b26e0]
mov eax, dword [0x6b27ac]
call fcn.0061f72c
mov eax, dword [ebp - 0x4cdc]
mov edx, 0x63a168
call fcn.00408384
jne 0x637518
mov bx, 0x1a00
mov eax, dword [ebp - 0x94]
mov edx, 0x639164
call fcn.00408384
je 0x63742e
mov eax, dword [ebp - 0x94]
mov edx, 0x639138
call fcn.00408384
je 0x63742e
lea edx, [ebp - 0x18]
mov eax, 0x63a180
call fcn.0061c888
jmp 0x63743b
lea edx, [ebp - 0x18]
mov eax, 0x63a194
call fcn.0061c888
mov esi, 0x5b
lea eax, [ebp - 0x4ce0]
push eax
mov ecx, 0x1600
mov edx, 0x201
mov eax, dword [0x6b27b4]
call fcn.00407320
mov edx, dword [ebp - 0x4ce0]
lea eax, [ebp - 0x18]
mov ecx, 0x201
call fcn.00670554
lea eax, [ebp - 0x4ce4]
push eax
mov ecx, esi
sub ecx, 3
sub ecx, 8
dec ecx
mov edx, 0xc
mov eax, dword [0x6b27b4]
call fcn.00407320
mov edx, dword [ebp - 0x4ce4]
lea eax, [ebp - 0x18]
mov ecx, 0xc
call fcn.00670554
mov eax, dword [ebp - 0x94]
mov edx, 0x639164
call fcn.00408384
je 0x6374ef
mov eax, dword [ebp - 0x94]
mov edx, 0x639138
call fcn.00408384
je 0x6374ef
lea eax, [ebp - 0x4ce8]
push eax
mov ecx, 0xb
mov dl, 0x20
mov eax, dword [ebp - 0x28]
call fcn.00626b7c
mov edx, dword [ebp - 0x4ce8]
lea eax, [ebp - 0x18]
mov ecx, 0x171
call fcn.00670554
jmp 0x637518
lea eax, [ebp - 0x4cec]
push eax
mov ecx, 0xb
mov dl, 0x20
mov eax, dword [ebp - 0x28]
call fcn.00626b7c
mov edx, dword [ebp - 0x4cec]
lea eax, [ebp - 0x18]
mov ecx, 0x16a
call fcn.00670554
push 0
push 7
push 8
lea eax, [ebp - 0x4cf0]
push eax
mov ecx, 0x6390e8
mov edx, dword [0x6b26e0]
mov eax, dword [0x6b27ac]
call fcn.0061f72c
mov eax, dword [ebp - 0x4cf0]
mov edx, 0x63a1a8
call fcn.00408384
jne 0x63768a
mov bx, 0x200
mov esi, 0x3f
mov eax, dword [ebp - 0x94]
mov edx, 0x639164
call fcn.00408384
je 0x637622
mov eax, dword [ebp - 0x94]
mov edx, 0x639138
call fcn.00408384
je 0x637622
lea edx, [ebp - 0x18]
mov eax, 0x63a1bc
call fcn.0061c888
movzx eax, byte [0x639008]
push eax
lea eax, [ebp - 0x4cf4]
push eax
lea eax, [ebp - 0x4cfc]
push eax
mov ecx, 0xb
mov dl, 0x20
mov eax, dword [ebp - 0x28]
call fcn.00626b7c
mov ecx, dword [ebp - 0x4cfc]
lea eax, [ebp - 0x4cf8]
mov edx, 0x639198
call fcn.00406ff0
mov ecx, dword [ebp - 0x4cf8]
mov edx, 0x6391a8
mov eax, dword [ebp - 0x18]
call fcn.0067031c
mov edx, dword [ebp - 0x4cf4]
lea eax, [ebp - 0x18]
call fcn.00406be0
lea eax, [ebp - 0x4d00]
push eax
mov ecx, esi
sub ecx, 8
sub ecx, 3
dec ecx
mov edx, 0xc
mov eax, dword [0x6b27b4]
call fcn.00407320
mov edx, dword [ebp - 0x4d00]
lea eax, [ebp - 0x18]
mov ecx, 0xc
call fcn.00670554
jmp 0x63768a
lea edx, [ebp - 0x18]
mov eax, 0x63a1d0
call fcn.0061c888
lea eax, [ebp - 0x4d04]
push eax
mov ecx, 0xb
mov dl, 0x20
mov eax, dword [ebp - 0x28]
call fcn.00626b7c
mov edx, dword [ebp - 0x4d04]
lea eax, [ebp - 0x18]
mov ecx, 0x1a2
call fcn.00670554
lea eax, [ebp - 0x4d08]
push eax
mov ecx, esi
sub ecx, 8
sub ecx, 3
dec ecx
mov edx, 0xc
mov eax, dword [0x6b27b4]
call fcn.00407320
mov edx, dword [ebp - 0x4d08]
lea eax, [ebp - 0x18]
mov ecx, 0xc
call fcn.00670554
mov eax, 0x63a1e4
call fcn.00626d98
test al, al
jne 0x637886
test bx, bx
jbe 0x637886
mov eax, dword [ebp - 0x234]
mov eax, dword [eax + 0x69c]
mov edx, dword [eax]
call dword [edx + 0xec]
test al, al
je 0x6376cf
mov eax, dword [ebp - 0x94]
mov edx, 0x639164
call fcn.00408384
jne 0x637718
cmp byte [0x6b26f4], 0
jne 0x6376ea
mov eax, dword [ebp - 0x94]
mov edx, 0x639164
call fcn.00408384
je 0x637718
mov eax, 0x639224
call fcn.00626d98
test al, al
je 0x637886
mov eax, dword [ebp - 0x234]
mov eax, dword [eax + 0x698]
mov edx, dword [eax]
call dword [edx + 0xec]
test al, al
je 0x637886
lea eax, [ebp - 0x8c]
mov edx, dword [0x6b26e0]
call fcn.00407cf0
mov eax, dword [ebp - 0x8c]
mov dword [ebp - 0x418], eax
cmp dword [ebp - 0x418], 0
je 0x637764
mov eax, dword [ebp - 0x418]
sub eax, 0xa
cmp word [eax], 2
je 0x637764
lea eax, [ebp - 0x8c]
mov edx, dword [ebp - 0x8c]
call fcn.00406d1c
mov dword [ebp - 0x418], eax
mov eax, dword [ebp - 0x418]
mov dword [ebp - 0x41c], eax
cmp dword [ebp - 0x41c], 0
je 0x63778a
mov eax, dword [ebp - 0x41c]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x41c], eax
lea eax, [ebp - 0x8c]
mov ecx, 1
mov edx, dword [ebp - 0x41c]
call fcn.004084bc
push 0
push 0
push 3
push 0
push 7
push 0x40000000
mov eax, dword [ebp - 0x8c]
call fcn.00407d28
push eax
call sub.kernel32.dll_CreateFileW_1
mov esi, eax
cmp esi, 0xffffffff
je 0x637886
push 0
push 0
push 0
push esi
call sub.kernel32.dll_SetFilePointer_1
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x420], eax
cmp dword [ebp - 0x420], 0
je 0x63780b
mov eax, dword [ebp - 0x420]
sub eax, 0xa
cmp word [eax], 1
je 0x63780b
lea eax, [ebp - 0x18]
xor ecx, ecx
mov edx, dword [ebp - 0x18]
call fcn.00406d4c
mov dword [ebp - 0x420], eax
lea eax, [ebp - 0x18]
call fcn.00407318
mov edx, 1
dec edx
test eax, eax
je 0x637822
cmp edx, dword [eax - 4]
jb 0x637827
call fcn.00405714
inc edx
lea edx, [eax + edx - 1]
movzx ecx, bx
mov eax, esi
test eax, eax
jns 0x63783a
call fcn.00405714
call fcn.0041692c
cdq
mov dword [ebp - 0x250], eax
mov dword [ebp - 0x24c], edx
movzx eax, bx
xor edx, edx
cmp edx, dword [ebp - 0x24c]
jne 0x63785f
cmp eax, dword [ebp - 0x250]
je 0x63786b
mov eax, 0x63a20c
call fcn.0048dc38
test esi, esi
jns 0x637874
call fcn.00405714
mov dword [ebp - 0x424], esi
mov eax, dword [ebp - 0x424]
push eax
call sub.kernel32.dll_CloseHandle_1
cmp byte [ebp - 0x2b1], 0
jne 0x637916
lea eax, [ebp - 0x4d0c]
mov ecx, 0x639288
mov edx, dword [0x6b26e0]
call fcn.00408180
mov eax, dword [ebp - 0x4d0c]
call fcn.004169e8
test al, al
je 0x637916
lea eax, [ebp - 0x4d14]
mov ecx, 0x639288
mov edx, dword [0x6b26e0]
call fcn.00408180
mov eax, dword [ebp - 0x4d14]
lea ecx, [ebp - 0x4d10]
xor edx, edx
call fcn.0061f27c
mov edx, dword [ebp - 0x4d10]
mov eax, 0x6390ac
call fcn.00407440
test eax, eax
jle 0x637916
lea eax, [ebp - 0x4d18]
mov ecx, 0x639288
mov edx, dword [0x6b26e0]
call fcn.00408180
mov eax, dword [ebp - 0x4d18]
call fcn.0061f520
mov eax, 0x639224
call fcn.00626d98
test al, al
je 0x637940
mov eax, dword [ebp - 0x234]
mov eax, dword [eax + 0x698]
mov edx, dword [eax]
call dword [edx + 0xec]
test al, al
jne 0x6379cf
lea eax, [ebp - 0x4d1c]
mov ecx, 0x639254
mov edx, dword [0x6b26e0]
call fcn.00408180
mov eax, dword [ebp - 0x4d1c]
call fcn.004169e8
test al, al
je 0x6379cf
push 0x63a250
lea eax, [ebp - 0x4d24]
mov ecx, 0x639254
mov edx, dword [0x6b26e0]
call fcn.00408180
mov eax, dword [ebp - 0x4d24]
lea ecx, [ebp - 0x4d20]
xor edx, edx
call fcn.0061f27c
mov ecx, dword [ebp - 0x4d20]
lea edx, [ebp - 0xc0]
lea eax, [ebp - 0xbc]
call fcn.00623804
test al, al
je 0x6379cf
lea eax, [ebp - 0x4d28]
mov ecx, 0x639254
mov edx, dword [0x6b26e0]
call fcn.00408180
mov eax, dword [ebp - 0x4d28]
call fcn.0061f520
mov eax, dword [ebp - 0x234]
mov eax, dword [eax + 0x69c]
mov edx, dword [eax]
call dword [edx + 0xec]
test al, al
je 0x637d8d
lea eax, [ebp - 0x4d2c]
mov ecx, 0x6391fc
mov edx, dword [0x6b26e0]
call fcn.00408180
mov eax, dword [ebp - 0x4d2c]
call fcn.004169e8
test al, al
je 0x637a7a
push 0x63a250
lea eax, [ebp - 0x4d34]
mov ecx, 0x6391fc
mov edx, dword [0x6b26e0]
call fcn.00408180
mov eax, dword [ebp - 0x4d34]
lea ecx, [ebp - 0x4d30]
xor edx, edx
call fcn.0061f27c
mov ecx, dword [ebp - 0x4d30]
lea edx, [ebp - 0xc0]
lea eax, [ebp - 0xbc]
call fcn.00623804
test al, al
je 0x637a7a
lea eax, [ebp - 0x4d38]
mov ecx, 0x6391fc
mov edx, dword [0x6b26e0]
call fcn.00408180
mov eax, dword [ebp - 0x4d38]
call fcn.0061f520
mov eax, dword [ebp - 0x234]
mov eax, dword [eax + 0x3c0]
mov edx, dword [eax]
call dword [edx + 0xec]
mov ebx, eax
call fcn.00625cc4
add ebx, eax
test ebx, ebx
jl 0x637ac1
mov eax, dword [ebp - 0x234]
mov eax, dword [eax + 0x3c0]
mov edx, dword [eax]
call dword [edx + 0xec]
mov ebx, eax
call fcn.00625cc4
add ebx, eax
cmp ebx, 2
jle 0x637b50
lea eax, [ebp - 0x4d3c]
mov ecx, 0x63a270
mov edx, dword [0x6b26e0]
call fcn.00408180
mov eax, dword [ebp - 0x4d3c]
call fcn.004169e8
test al, al
je 0x637b50
push 0x63a250
lea eax, [ebp - 0x4d44]
mov ecx, 0x63a270
mov edx, dword [0x6b26e0]
call fcn.00408180
mov eax, dword [ebp - 0x4d44]
lea ecx, [ebp - 0x4d40]
xor edx, edx
call fcn.0061f27c
mov ecx, dword [ebp - 0x4d40]
lea edx, [ebp - 0xc0]
lea eax, [ebp - 0xbc]
call fcn.00623804
test al, al
je 0x637b50
lea eax, [ebp - 0x4d48]
mov ecx, 0x63a270
mov edx, dword [0x6b26e0]
call fcn.00408180
mov eax, dword [ebp - 0x4d48]
call fcn.0061f520
mov esi, 0x30
cmp esi, 0x39
jle 0x637b63
cmp esi, 0x41
jl 0x637d83
push dword [0x6b26e0]
push 0x6399d8
push 0x639120
lea eax, [ebp - 0x4d50]
mov edx, esi
call fcn.00407e18
push dword [ebp - 0x4d50]
push 0x6399f0
lea eax, [ebp - 0x4d4c]
mov edx, 5
call fcn.00408264
mov eax, dword [ebp - 0x4d4c]
call fcn.004169e8
test al, al
je 0x637c7a
push dword [0x6b26e0]
push 0x6399d8
push 0x639120
lea eax, [ebp - 0x4d5c]
mov edx, esi
call fcn.00407e18
push dword [ebp - 0x4d5c]
push 0x6399f0
lea eax, [ebp - 0x4d58]
mov edx, 5
call fcn.00408264
mov eax, dword [ebp - 0x4d58]
lea ecx, [ebp - 0x4d54]
xor edx, edx
call fcn.0061f27c
mov eax, dword [ebp - 0x4d54]
mov dword [ebp - 0x428], eax
mov eax, dword [ebp - 0x428]
mov dword [ebp - 0x42c], eax
cmp dword [ebp - 0x42c], 0
je 0x637c2b
mov eax, dword [ebp - 0x42c]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x42c], eax
cmp dword [ebp - 0x42c], 0x2400
jne 0x637c7a
push dword [0x6b26e0]
push 0x6399d8
push 0x639120
lea eax, [ebp - 0x4d64]
mov edx, esi
call fcn.00407e18
push dword [ebp - 0x4d64]
push 0x6399f0
lea eax, [ebp - 0x4d60]
mov edx, 5
call fcn.00408264
mov eax, dword [ebp - 0x4d60]
call fcn.0061f520
lea eax, [ebp - 0x4d6c]
mov edx, esi
call fcn.00407e18
mov ecx, dword [ebp - 0x4d6c]
lea eax, [ebp - 0x4d68]
mov edx, 0x63a28c
call fcn.00408180
mov edx, dword [ebp - 0x4d68]
mov eax, dword [ebp - 0x94]
call fcn.00408384
je 0x637d83
push dword [0x6b26e0]
push 0x639120
lea eax, [ebp - 0x4d74]
mov edx, esi
call fcn.00407e18
push dword [ebp - 0x4d74]
lea eax, [ebp - 0x4d70]
mov edx, 3
call fcn.00408264
mov eax, dword [ebp - 0x4d70]
call fcn.004169e8
test al, al
je 0x637d83
push dword [0x6b26e0]
push 0x639120
lea eax, [ebp - 0x4d80]
mov edx, esi
call fcn.00407e18
push dword [ebp - 0x4d80]
lea eax, [ebp - 0x4d7c]
mov edx, 3
call fcn.00408264
mov eax, dword [ebp - 0x4d7c]
lea ecx, [ebp - 0x4d78]
xor edx, edx
call fcn.0061f27c
mov edx, dword [ebp - 0x4d78]
mov eax, 0x63a2a4
call fcn.00407440
test eax, eax
jle 0x637d83
push dword [0x6b26e0]
push 0x639120
lea eax, [ebp - 0x4d88]
mov edx, esi
call fcn.00407e18
push dword [ebp - 0x4d88]
lea eax, [ebp - 0x4d84]
mov edx, 3
call fcn.00408264
mov eax, dword [ebp - 0x4d84]
call fcn.0061f520
inc esi
cmp esi, 0x5b
jne 0x637b55
mov eax, dword [ebp - 0x234]
mov eax, dword [eax + 0x3c0]
mov edx, dword [eax]
call dword [edx + 0xec]
mov ebx, eax
call fcn.00625cc4
add ebx, eax
inc ebx
jne 0x63830c
mov eax, dword [0x6b2768]
mov edx, dword [eax]
call dword [edx + 0x14]
mov esi, eax
dec esi
cmp esi, 1
jl 0x63830c
lea ecx, [ebp - 0x4d8c]
mov edx, esi
mov eax, dword [0x6b2768]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x4d8c]
mov edx, 0x6390e8
call fcn.006724b0
mov ebx, eax
sub ebx, 4
cmp ebx, 0
jl 0x638303
lea eax, [ebp - 0xa8]
push eax
lea eax, [ebp - 0x4d90]
push eax
lea ecx, [ebp - 0x4d94]
mov edx, esi
mov eax, dword [0x6b2768]
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [ebp - 0x4d94]
lea ecx, [ebx + 4]
mov edx, 0x6390e8
call fcn.00672580
mov eax, dword [ebp - 0x4d90]
mov ecx, 1
mov edx, 0x6390f8
call fcn.00672580
lea edx, [ebp - 0x4d98]
mov eax, dword [ebp - 0xa8]
call fcn.004152c8
mov eax, dword [ebp - 0x4d98]
mov edx, 0x639164
call fcn.00408384
je 0x63814c
lea edx, [ebp - 0x4d9c]
mov eax, dword [ebp - 0xa8]
call fcn.004152c8
mov eax, dword [ebp - 0x4d9c]
mov edx, 0x639138
call fcn.00408384
je 0x63814c
lea edx, [ebp - 0x4da0]
mov eax, dword [ebp - 0xa8]
call fcn.004152c8
mov eax, dword [ebp - 0x4da0]
mov edx, 0x63a2bc
call fcn.00408384
je 0x63814c
lea edx, [ebp - 0x4da4]
mov eax, dword [ebp - 0xa8]
call fcn.004152c8
mov eax, dword [ebp - 0x4da4]
mov edx, 0x639300
call fcn.00408384
je 0x63814c
lea edx, [ebp - 0x4da8]
mov eax, dword [ebp - 0xa8]
call fcn.004152c8
mov eax, dword [ebp - 0x4da8]
mov edx, 0x639340
call fcn.00408384
je 0x63814c
lea edx, [ebp - 0x4dac]
mov eax, dword [ebp - 0xa8]
call fcn.004152c8
mov eax, dword [ebp - 0x4dac]
mov edx, 0x639108
call fcn.00408384
je 0x63814c
lea edx, [ebp - 0x4db0]
mov eax, dword [ebp - 0xa8]
call fcn.004152c8
mov eax, dword [ebp - 0x4db0]
mov edx, 0x639288
call fcn.00408384
je 0x63814c
lea edx, [ebp - 0x4db4]
mov eax, dword [ebp - 0xa8]
call fcn.004152c8
mov eax, dword [ebp - 0x4db4]
mov edx, 0x639894
call fcn.00408384
je 0x63814c
lea edx, [ebp - 0x4db8]
mov eax, dword [ebp - 0xa8]
call fcn.004152c8
mov eax, dword [ebp - 0x4db8]
mov edx, 0x6398b0
call fcn.00408384
je 0x63814c
lea edx, [ebp - 0x4dbc]
mov eax, dword [ebp - 0xa8]
call fcn.004152c8
mov eax, dword [ebp - 0x4dbc]
mov edx, 0x6398d0
call fcn.00408384
je 0x63814c
lea edx, [ebp - 0x4dc0]
mov eax, dword [ebp - 0xa8]
call fcn.004152c8
mov eax, dword [ebp - 0x4dc0]
mov edx, 0x6398f0
call fcn.00408384
je 0x63814c
lea edx, [ebp - 0x4dc4]
mov eax, dword [ebp - 0xa8]
call fcn.004152c8
mov eax, dword [ebp - 0x4dc4]
mov edx, 0x639910
call fcn.00408384
je 0x63814c
lea edx, [ebp - 0x4dc8]
mov eax, dword [ebp - 0xa8]
call fcn.004152c8
mov eax, dword [ebp - 0x4dc8]
mov edx, 0x639414
call fcn.00408384
je 0x63814c
mov edx, dword [ebp - 0xa8]
mov eax, 0x6397ac
call fcn.0040875c
mov dword [ebp - 0x438], eax
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 0x430], eax
cmp dword [ebp - 0x430], 0
je 0x63808b
mov eax, dword [ebp - 0x430]
sub eax, 0xa
cmp word [eax], 2
je 0x63808b
lea eax, [ebp - 0xa8]
mov edx, dword [ebp - 0xa8]
call fcn.00406d1c
mov dword [ebp - 0x430], eax
mov eax, dword [ebp - 0x430]
mov dword [ebp - 0x434], eax
cmp dword [ebp - 0x434], 0
je 0x6380b1
mov eax, dword [ebp - 0x434]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x434], eax
mov eax, dword [ebp - 0x434]
sub eax, 6
inc eax
cmp eax, dword [ebp - 0x438]
jne 0x638134
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 0x43c], eax
cmp dword [ebp - 0x43c], 0
je 0x6380fe
mov eax, dword [ebp - 0x43c]
sub eax, 0xa
cmp word [eax], 2
je 0x6380fe
lea eax, [ebp - 0xa8]
mov edx, dword [ebp - 0xa8]
call fcn.00406d1c
mov dword [ebp - 0x43c], eax
mov eax, dword [ebp - 0x43c]
mov dword [ebp - 0x440], eax
cmp dword [ebp - 0x440], 0
je 0x638124
mov eax, dword [ebp - 0x440]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x440], eax
cmp dword [ebp - 0x440], 5
setg byte [ebp - 0x441]
jmp 0x63813b
mov byte [ebp - 0x441], 0
movzx eax, byte [ebp - 0x441]
xor al, 1
mov byte [ebp - 0x442], al
jmp 0x638153
mov byte [ebp - 0x442], 0
cmp byte [ebp - 0x442], 0
je 0x63828c
mov edx, dword [ebp - 0xa8]
mov eax, 0x6397c8
call fcn.0040875c
mov dword [ebp - 0x450], eax
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 0x448], eax
cmp dword [ebp - 0x448], 0
je 0x6381b1
mov eax, dword [ebp - 0x448]
sub eax, 0xa
cmp word [eax], 2
je 0x6381b1
lea eax, [ebp - 0xa8]
mov edx, dword [ebp - 0xa8]
call fcn.00406d1c
mov dword [ebp - 0x448], eax
mov eax, dword [ebp - 0x448]
mov dword [ebp - 0x44c], eax
cmp dword [ebp - 0x44c], 0
je 0x6381d7
mov eax, dword [ebp - 0x44c]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x44c], eax
mov eax, dword [ebp - 0x44c]
sub eax, 6
inc eax
cmp eax, dword [ebp - 0x450]
jne 0x63825a
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 0x454], eax
cmp dword [ebp - 0x454], 0
je 0x638224
mov eax, dword [ebp - 0x454]
sub eax, 0xa
cmp word [eax], 2
je 0x638224
lea eax, [ebp - 0xa8]
mov edx, dword [ebp - 0xa8]
call fcn.00406d1c
mov dword [ebp - 0x454], eax
mov eax, dword [ebp - 0x454]
mov dword [ebp - 0x458], eax
cmp dword [ebp - 0x458], 0
je 0x63824a
mov eax, dword [ebp - 0x458]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x458], eax
cmp dword [ebp - 0x458], 5
setg byte [ebp - 0x459]
jmp 0x638261
mov byte [ebp - 0x459], 0
cmp byte [ebp - 0x459], 0
jne 0x63828c
lea eax, [ebp - 0x4dcc]
mov ecx, dword [ebp - 0xa8]
mov edx, dword [0x6b26e0]
call fcn.00408180
mov eax, dword [ebp - 0x4dcc]
call fcn.0061f520
lea edx, [ebp - 0x4dd0]
mov eax, dword [ebp - 0xa8]
call fcn.00417280
mov eax, dword [ebp - 0x4dd0]
mov edx, 0x63987c
call fcn.00408384
je 0x6382d2
lea edx, [ebp - 0x4dd4]
mov eax, dword [ebp - 0xa8]
call fcn.00417280
mov eax, dword [ebp - 0x4dd4]
mov edx, 0x639864
call fcn.00408384
jne 0x6382f9
lea eax, [ebp - 0x4dd8]
call fcn.0061dcb0
lea eax, [ebp - 0x4dd8]
mov edx, dword [ebp - 0xa8]
call fcn.004080c0
mov eax, dword [ebp - 0x4dd8]
call fcn.0061f520
dec ebx
cmp ebx, 0xffffffff
jne 0x637df7
dec esi
test esi, esi
jne 0x637dc7
cmp byte [ebp - 0x28f], 0
je 0x638325
call fcn.0066e6cc
mov eax, dword [ebp - 0x234]
call fcn.006707b0
call fcn.00672e80
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x63833e
mov eax, dword [0x6b25bc]
call fcn.004cae80
mov eax, dword [0x6aabdc]
mov eax, dword [eax]
call fcn.004d26b0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x638ae3
lea eax, [ebp - 0x4dd8]
mov edx, 0x18
call fcn.00407c94
lea eax, [ebp - 0x4d78]
call fcn.00406b30
lea eax, [ebp - 0x4d74]
mov edx, 8
call fcn.00407c94
lea eax, [ebp - 0x4d54]
call fcn.00406b30
lea eax, [ebp - 0x4d50]
mov edx, 4
call fcn.00407c94
lea eax, [ebp - 0x4d40]
call fcn.00406b30
lea eax, [ebp - 0x4d3c]
mov edx, 3
call fcn.00407c94
lea eax, [ebp - 0x4d30]
call fcn.00406b30
lea eax, [ebp - 0x4d2c]
mov edx, 3
call fcn.00407c94
lea eax, [ebp - 0x4d20]
call fcn.00406b30
lea eax, [ebp - 0x4d1c]
mov edx, 3
call fcn.00407c94
lea eax, [ebp - 0x4d10]
call fcn.00406b30
lea eax, [ebp - 0x4d0c]
call fcn.00407c8c
lea eax, [ebp - 0x4d08]
mov edx, 6
call fcn.00406b54
lea eax, [ebp - 0x4cf0]
call fcn.00407c8c
lea eax, [ebp - 0x4cec]
mov edx, 4
call fcn.00406b54
lea eax, [ebp - 0x4cdc]
call fcn.00407c8c
lea eax, [ebp - 0x4cd8]
mov edx, 2
call fcn.00406b54
lea eax, [ebp - 0x4cd0]
call fcn.00407c8c
lea eax, [ebp - 0x4ccc]
call fcn.00406b30
lea eax, [ebp - 0x4cc8]
mov edx, 2
call fcn.00406b54
lea eax, [ebp - 0x4cc0]
call fcn.00407c8c
lea eax, [ebp - 0x4cbc]
mov edx, 2
call fcn.00406b54
lea eax, [ebp - 0x4cb4]
call fcn.00407c8c
lea eax, [ebp - 0x4cb0]
mov edx, 3
call fcn.00406b54
lea eax, [ebp - 0x4ca4]
call fcn.00407c8c
lea eax, [ebp - 0x4ca0]
mov edx, 2
call fcn.00406b54
lea eax, [ebp - 0x4c98]
call fcn.00407c8c
lea eax, [ebp - 0x4c94]
mov edx, 2
call fcn.00406b54
lea eax, [ebp - 0x4c8c]
mov edx, 9
call fcn.00407c94
lea eax, [ebp - 0x4c68]
call fcn.0042466c
lea eax, [ebp - 0x4c58]
mov edx, dword [0x4012a8]
mov ecx, 3
call fcn.00408b38
lea eax, [ebp - 0x4c28]
mov edx, 3
call fcn.00407c94
lea eax, [ebp - 0x4c1c]
call fcn.00407784
lea eax, [ebp - 0x4c18]
call fcn.00407c8c
lea eax, [ebp - 0x4c14]
mov edx, 2
call fcn.0040779c
lea eax, [ebp - 0x4c0c]
call fcn.00407c8c
lea eax, [ebp - 0x4c08]
call fcn.0042466c
lea eax, [ebp - 0x4bf8]
mov edx, 3
call fcn.00407c94
lea eax, [ebp - 0x4bec]
mov edx, dword [0x4012a8]
mov ecx, 7
call fcn.00408b38
lea eax, [ebp - 0x4b7c]
mov edx, 2
call fcn.00407c94
lea eax, [ebp - 0x4b74]
call fcn.0042466c
lea eax, [ebp - 0x4b64]
mov edx, 2
call fcn.00407c94
lea eax, [ebp - 0x4b5c]
mov edx, dword [0x4012a8]
mov ecx, 4
call fcn.00408b38
lea eax, [ebp - 0x4b1c]
call fcn.00407c8c
lea eax, [ebp - 0x4b18]
call fcn.00407784
lea eax, [ebp - 0x4b14]
call fcn.00407c8c
lea eax, [ebp - 0x4b10]
call fcn.00407784
lea eax, [ebp - 0x4b0c]
call fcn.00407c8c
lea eax, [ebp - 0x4b08]
mov edx, 3
call fcn.00407c94
lea eax, [ebp - 0x4afc]
call fcn.0042466c
lea eax, [ebp - 0x4aec]
call fcn.00407c8c
lea eax, [ebp - 0x4ae8]
call fcn.0042466c
lea eax, [ebp - 0x4ad8]
mov edx, dword [0x4012a8]
mov ecx, 9
call fcn.00408b38
lea eax, [ebp - 0x4a48]
call fcn.00407c8c
lea eax, [ebp - 0x4a44]
mov edx, 2
call fcn.0040779c
lea eax, [ebp - 0x4a3c]
mov edx, dword [0x4012a8]
mov ecx, 5
call fcn.00408b38
lea eax, [ebp - 0x49ec]
mov edx, 3
call fcn.00407c94
lea eax, [ebp - 0x49e0]
call fcn.00407c8c
lea eax, [ebp - 0x49dc]
call fcn.00407784
lea eax, [ebp - 0x49d8]
call fcn.00407c8c
lea eax, [ebp - 0x49d4]
call fcn.00407784
lea eax, [ebp - 0x49d0]
call fcn.0042466c
lea eax, [ebp - 0x49c0]
call fcn.00407c8c
lea eax, [ebp - 0x49bc]
mov edx, 2
call fcn.0040779c
lea eax, [ebp - 0x49b4]
mov edx, dword [0x4012a8]
mov ecx, 0x14
call fcn.00408b38
lea eax, [ebp - 0x4874]
call fcn.00407c8c
lea eax, [ebp - 0x4870]
call fcn.00407784
lea eax, [ebp - 0x486c]
call fcn.00407c8c
lea eax, [ebp - 0x4868]
call fcn.00407784
lea eax, [ebp - 0x4864]
mov edx, 5
call fcn.00407c94
lea eax, [ebp - 0x4850]
call fcn.00407784
lea eax, [ebp - 0x484c]
call fcn.0042466c
lea eax, [ebp - 0x483c]
call fcn.00407784
lea eax, [ebp - 0x4838]
mov edx, dword [0x4012a8]
mov ecx, 3
call fcn.00408b38
lea eax, [ebp - 0x4808]
call fcn.0042466c
lea eax, [ebp - 0x47f8]
call fcn.0042466c
lea eax, [ebp - 0x47e8]
mov edx, dword [0x4012a8]
mov ecx, 0xd
call fcn.00408b38
lea eax, [ebp - 0x4718]
call fcn.00407c8c
lea eax, [ebp - 0x4714]
call fcn.00407784
lea eax, [ebp - 0x4710]
call fcn.00407c8c
lea eax, [ebp - 0x470c]
call fcn.00407784
lea eax, [ebp - 0x4708]
call fcn.00407c8c
lea eax, [ebp - 0x4704]
call fcn.00407784
lea eax, [ebp - 0x4700]
mov edx, 8
call fcn.00407c94
lea eax, [ebp - 0x46e0]
call fcn.00406b30
lea eax, [ebp - 0x46dc]
call fcn.00407c8c
lea eax, [ebp - 0x46d8]
call fcn.00406b30
lea eax, [ebp - 0x46d4]
mov edx, 0x16
call fcn.00407c94
lea eax, [ebp - 0x467c]
call fcn.00406b30
lea eax, [ebp - 0x4678]
mov edx, 4
call fcn.00407c94
lea eax, [ebp - 0x4668]
mov edx, 5
call fcn.00406b54
lea eax, [ebp - 0x4654]
mov edx, 9
call fcn.00407c94
lea eax, [ebp - 0x4630]
mov edx, 4
call fcn.00406b54
lea eax, [ebp - 0x4620]
mov edx, 4
call fcn.00407c94
lea eax, [ebp - 0x4610]
mov edx, 4
call fcn.00406b54
lea eax, [ebp - 0x4600]
mov edx, 7
call fcn.00407c94
lea eax, [ebp - 0x45e4]
call fcn.00406b30
lea eax, [ebp - 0x45e0]
call fcn.00407c8c
lea eax, [ebp - 0x45dc]
mov edx, 2
call fcn.00406b54
lea eax, [ebp - 0x45d4]
call fcn.00407c8c
lea eax, [ebp - 0x45d0]
mov edx, 4
call fcn.00406b54
lea eax, [ebp - 0x45bc]
call fcn.00407c8c
lea eax, [ebp - 0x45c0]
call fcn.00407c8c
lea eax, [ebp - 0x45b8]
mov edx, 2
call fcn.00407c94
lea eax, [ebp - 0x45b0]
mov edx, 6
call fcn.00406b54
lea eax, [ebp - 0x4598]
mov edx, 4
call fcn.00406b54
lea eax, [ebp - 0x4588]
call fcn.00406b30
lea eax, [ebp - 0x4584]
mov edx, 0x10
call fcn.00407c94
lea eax, [ebp - 0x4544]
mov edx, 7
call fcn.00406b54
lea eax, [ebp - 0x4520]
call fcn.00406b30
lea eax, [ebp - 0x451c]
mov edx, 3
call fcn.00406b54
lea eax, [ebp - 0x4510]
call fcn.00407c8c
lea eax, [ebp - 0x450c]
mov edx, 2
call fcn.00406b54
lea eax, [ebp - 0x4504]
call fcn.00407c8c
lea eax, [ebp - 0x4500]
mov edx, 2
call fcn.00406b54
lea eax, [ebp - 0x44f8]
mov edx, 5
call fcn.00407c94
lea eax, [ebp - 0x44e4]
mov edx, 0xd
call fcn.00406b54
lea eax, [ebp - 0x44b0]
mov edx, dword [0x4012a8]
mov ecx, 2
call fcn.00408b38
lea eax, [ebp - 0x4490]
mov edx, 5
call fcn.00407c94
lea eax, [ebp - 0x447c]
mov edx, dword [0x4012a8]
mov ecx, 2
call fcn.00408b38
lea eax, [ebp - 0xd0]
mov edx, dword [0x631828]
call fcn.00409b14
lea eax, [ebp - 0xcc]
mov edx, dword [0x6317fc]
call fcn.00409b14
lea eax, [ebp - 0xc8]
mov edx, dword [0x6317d0]
call fcn.00409b14
lea eax, [ebp - 0x9c]
mov edx, 5
call fcn.00407c94
lea eax, [ebp - 0x4c]
mov edx, 0x12
call fcn.00406b54
lea eax, [ebp - 0x230]
mov edx, dword [0x4012b8]
mov ecx, 0x14
call fcn.00408b38
lea eax, [ebp - 0xf0]
mov edx, dword [0x6318e8]
call fcn.00409b14
lea eax, [ebp - 0xec]
mov edx, dword [0x6318b8]
call fcn.00409b14
lea eax, [ebp - 0xe8]
mov edx, dword [0x631888]
call fcn.00409b14
lea eax, [ebp - 0xe4]
mov edx, dword [0x631858]
call fcn.00409b14
lea eax, [ebp - 0xe0]
mov edx, dword [0x4f1888]
mov ecx, 3
call fcn.00408b38
lea eax, [ebp - 0xd4]
call fcn.0040af74
lea eax, [ebp - 0xc4]
mov edx, 0xa
call fcn.00407c94
lea eax, [ebp - 0x88]
mov edx, 0xf
call fcn.00406b54
ret