Function at 0x421213
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push eax
mov eax, 4
add esp, 0xfffff004
push eax
dec eax
jne 0x42121c
mov eax, dword [ebp - 4]
add esp, 0xfffffee4
push ebx
push esi
push edi
mov ebx, 0x66e05c
mov esi, 0x53616c
mov eax, 0x66f3a8
call fcn.00600adb
call fcn.004426fb
mov dword [0x672f60], eax
mov dl, 1
mov eax, dword [0x536778]
call fcn.0042355b
mov dword [0x6a2020], eax
call fcn.00442593
push 0x208
push 0
lea edx, [ebp - 0x338]
push edx
call fcn.0060070b
add esp, 0xc
lea ecx, [ebp - 0x540]
push 0x208
push 0
push ecx
call fcn.0060070b
add esp, 0xc
lea eax, [ebp - 0x338]
push 0x104
push eax
push 0
call fcn.006859b5
push 0
call fcn.00686619
mov word [ebp - 0x114], 8
lea edx, [ebp - 4]
push edx
call fcn.00473b57
pop ecx
inc dword [ebp - 0x108]
mov word [ebp - 0x114], 0x14
lea ecx, [ebp - 4]
push ecx
call fcn.00473bcb
pop ecx
lea eax, [ebp - 0x128]
push eax
lea edx, [ebp - 4]
push edx
call fcn.00473d43
add esp, 8
push 0x6a2084
push 0x6a2088
call fcn.00442613
add esp, 8
cmp dword [ebp - 0x128], 0
je 0x421343
lea ecx, [ebp - 0x12c]
push ecx
lea eax, [ebp - 0x338]
push eax
lea edx, [ebp - 4]
push edx
call fcn.00473e0f
add esp, 0xc
cmp dword [ebp - 0x12c], 0
jne 0x421343
lea ecx, [ebx + 0xb6]
push ecx
lea eax, [ebp - 0x338]
push eax
lea edx, [ebp - 4]
push edx
call fcn.00473fb7
add esp, 0xc
lea ecx, [ebp - 4]
push ecx
call fcn.00473d27
pop ecx
call fcn.00686625
mov word [ebp - 0x114], 0x20
lea edx, [ebx + 0xca]
lea eax, [ebp - 0x18]
call fcn.0060c13f
inc dword [ebp - 0x108]
mov eax, dword [eax]
call fcn.0056358f
xor edx, edx
mov dl, al
lea eax, [ebp - 0x18]
cmp edx, 1
mov edx, 2
sbb ecx, ecx
neg ecx
push ecx
dec dword [ebp - 0x108]
call fcn.0060c393
pop ecx
test cl, cl
je 0x4213d1
mov word [ebp - 0x114], 0x2c
lea edx, [ebx + 0xd3]
lea eax, [ebp - 0x1c]
call fcn.0060c13f
inc dword [ebp - 0x108]
mov eax, dword [eax]
call fcn.005639ab
dec dword [ebp - 0x108]
lea eax, [ebp - 0x1c]
mov edx, 2
call fcn.0060c393
mov word [ebp - 0x114], 0x38
lea edx, [ebx + 0xdc]
lea eax, [ebp - 0x20]
call fcn.0060c13f
inc dword [ebp - 0x108]
mov eax, dword [eax]
call fcn.0056358f
xor edx, edx
mov dl, al
lea eax, [ebp - 0x20]
cmp edx, 1
mov edx, 2
sbb ecx, ecx
neg ecx
push ecx
dec dword [ebp - 0x108]
call fcn.0060c393
pop ecx
test cl, cl
je 0x421450
mov word [ebp - 0x114], 0x44
lea edx, [ebx + 0xe5]
lea eax, [ebp - 0x24]
call fcn.0060c13f
inc dword [ebp - 0x108]
mov eax, dword [eax]
call fcn.005639ab
dec dword [ebp - 0x108]
lea eax, [ebp - 0x24]
mov edx, 2
call fcn.0060c393
mov word [ebp - 0x114], 0x50
lea edx, [ebx + 0xee]
lea eax, [ebp - 0x28]
call fcn.0060c13f
inc dword [ebp - 0x108]
mov eax, dword [eax]
call fcn.0056358f
xor edx, edx
mov dl, al
lea eax, [ebp - 0x28]
cmp edx, 1
mov edx, 2
sbb ecx, ecx
neg ecx
push ecx
dec dword [ebp - 0x108]
call fcn.0060c393
pop ecx
test cl, cl
je 0x4214cf
mov word [ebp - 0x114], 0x5c
lea edx, [ebx + 0xf3]
lea eax, [ebp - 0x2c]
call fcn.0060c13f
inc dword [ebp - 0x108]
mov eax, dword [eax]
call fcn.005639ab
dec dword [ebp - 0x108]
lea eax, [ebp - 0x2c]
mov edx, 2
call fcn.0060c393
push 0
call fcn.006087a3
pop ecx
push eax
call fcn.006051d7
pop ecx
push 0
call fcn.00686643
lea ecx, [ebp - 0x6d0]
push ecx
push 0x101
call fcn.0068570d
mov word [ebp - 0x114], 0x14
test eax, eax
je 0x42159f
mov word [ebp - 0x114], 0x68
xor edx, edx
mov dword [ebp - 0x30], edx
inc dword [ebp - 0x108]
mov word [ebp - 0x114], 0x74
push eax
lea eax, [ebx + 0xf8]
push eax
lea ecx, [ebp - 0x30]
push ecx
call fcn.0060c557
add esp, 0xc
lea edx, [ebx + 0x10c]
lea eax, [ebp - 0x34]
push 1
mov word [ebp - 0x114], 0x80
call fcn.0060c13f
inc dword [ebp - 0x108]
mov ecx, dword [eax]
push ecx
mov eax, dword [ebp - 0x30]
push eax
call fcn.00441c3b
add esp, 0xc
dec dword [ebp - 0x108]
lea eax, [ebp - 0x34]
mov edx, 2
call fcn.0060c393
mov ecx, dword [ebp + 8]
push ecx
call fcn.004274c3
pop ecx
dec dword [ebp - 0x108]
lea eax, [ebp - 0x30]
mov edx, 2
call fcn.0060c393
mov word [ebp - 0x114], 0x14
xor ecx, ecx
mov dword [0x6a28d8], ecx
xor eax, eax
mov dword [0x6a28c0], eax
xor edx, edx
mov dword [0x6a28c8], edx
mov dl, 1
mov eax, dword [esi]
call fcn.004235af
mov dword [0x6a28b4], eax
push 0xc
call fcn.005ff8e7
pop ecx
mov dword [ebp - 0x38], eax
test eax, eax
je 0x4215f4
mov word [ebp - 0x114], 0x98
mov edx, dword [ebp - 0x38]
push edx
call fcn.00468967
pop ecx
mov word [ebp - 0x114], 0x8c
mov ecx, dword [ebp - 0x38]
jmp 0x4215f7
mov ecx, dword [ebp - 0x38]
mov dword [0x6a28e0], ecx
mov dl, 1
mov eax, dword [esi]
call fcn.004235af
mov dword [0x6a28f4], eax
mov dl, 1
mov eax, dword [esi]
call fcn.004235af
mov dword [0x6a28b8], eax
mov dl, 1
mov eax, dword [esi]
call fcn.004235af
mov dword [0x6a28bc], eax
mov dl, 1
mov eax, dword [esi]
call fcn.004235af
mov dword [0x6a28f8], eax
mov dl, 1
mov eax, dword [esi]
call fcn.004235af
mov dword [0x6a28fc], eax
mov dl, 1
mov eax, dword [esi]
call fcn.004235af
mov dword [0x6a2900], eax
mov dl, 1
mov eax, dword [esi]
call fcn.004235af
mov dword [0x6a2908], eax
mov dl, 1
mov eax, dword [esi]
call fcn.004235af
mov dword [0x6a290c], eax
mov dl, 1
mov eax, dword [esi]
call fcn.004235af
mov dword [0x6a2904], eax
mov dl, 1
mov eax, dword [0x536778]
call fcn.0042355b
mov dword [0x6a28ec], eax
mov dl, 1
mov eax, dword [0x536778]
call fcn.0042355b
mov dword [0x6a28f0], eax
mov dl, 1
mov eax, dword [esi]
call fcn.004235af
mov dword [0x6a2910], eax
mov dl, 1
mov eax, dword [esi]
call fcn.004235af
mov word [ebp - 0x114], 0xa4
mov dword [0x6a2914], eax
call fcn.006865f9
mov ecx, 0x15f90
xor edx, edx
div ecx
mov eax, edx
xor edx, edx
mov dword [ebp - 0x3c], edx
lea edx, [ebp - 0x3c]
inc dword [ebp - 0x108]
call fcn.004235ff
lea edx, [ebp - 0x3c]
xor eax, eax
mov dword [ebp - 0x40], eax
lea ecx, [ebp - 0x40]
inc dword [ebp - 0x108]
lea eax, [ebx + 0x118]
call fcn.0060c8d7
lea edx, [ebp - 0x40]
mov eax, 0x6a2944
call fcn.0060c3c3
dec dword [ebp - 0x108]
lea eax, [ebp - 0x40]
mov edx, 2
call fcn.0060c393
dec dword [ebp - 0x108]
lea eax, [ebp - 0x3c]
mov edx, 2
call fcn.0060c393
cmp dword [0x6a2944], 0
je 0x421745
mov ecx, dword [0x6a2944]
jmp 0x42174b
lea ecx, [ebx + 0x124]
push ecx
push 1
push 0
push 0
call fcn.00685835
mov dword [0x6a28c4], eax
push 0x6a2a00
call fcn.00685ab7
push 0x6a2a18
call fcn.00685ab7
push 0x6a2954
call fcn.00685ab7
push 0x6a2970
call fcn.00685ab7
push 0x6a2988
call fcn.00685ab7
push 0x6a29a0
call fcn.00685ab7
push 0x6a29b8
call fcn.00685ab7
push 0x6a29d0
call fcn.00685ab7
push 0x6a29e8
call fcn.00685ab7
mov eax, dword [ebp + 8]
call fcn.005d4c53
mov dword [0x672f80], eax
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x320]
xor edx, edx
mov ecx, dword [eax]
call dword [ecx + 0x60]
xor eax, eax
mov dword [0x6a296c], eax
xor edx, edx
mov dword [0x6a2920], edx
mov ecx, dword [ebp + 8]
push ecx
call fcn.004273e7
pop ecx
xor eax, eax
mov dword [0x6a2c34], 6
mov dword [0x6a2c38], eax
mov word [ebp - 0x114], pe_nt_image_headers32
xor edx, edx
xor ecx, ecx
mov dword [0x6a2930], edx
xor eax, eax
mov dword [0x6a2924], ecx
lea ecx, [ebp - 0x10]
mov dword [0x6a2928], eax
xor edx, edx
mov dword [0x6a292c], edx
push ecx
call fcn.0047277f
pop ecx
inc dword [ebp - 0x108]
mov word [ebp - 0x114], 0x14
push 0x400
push 0
lea eax, [ebp - 0xed0]
push eax
call fcn.00600797
add esp, 0xc
mov word [0x6a2918], 0x412e
push 0
push 0x800
lea edx, [ebp - 0x16d0]
push edx
call fcn.0060070b
add esp, 0xc
lea ecx, [ebp - 0x16d0]
lea eax, [ebx + 0x146]
lea edx, [ebx + 0x136]
push 0x6a26a4
push 0x400
push ecx
push eax
push edx
lea ecx, [ebx + 0x126]
push ecx
call fcn.006859d3
mov word [ebp - 0x114], 0xbc
lea edx, [ebp - 0x16d0]
lea eax, [ebp - 0x44]
call fcn.0060cc8f
mov edx, eax
inc dword [ebp - 0x108]
mov eax, 0x6a291c
call fcn.0060ccf7
dec dword [ebp - 0x108]
lea eax, [ebp - 0x44]
mov edx, 2
call fcn.0060ccc7
push 0x6a291c
call fcn.00431797
pop ecx
mov ecx, dword [0x6a291c]
push ecx
mov eax, dword [ebp + 8]
push eax
call fcn.004268cb
add esp, 8
lea edx, [ebp - 0xed0]
lea ecx, [ebx + 0x170]
lea eax, [ebx + 0x158]
push 0x6a26a4
push 0x400
push edx
push ecx
push eax
lea edx, [ebx + 0x148]
push edx
call fcn.006859d3
mov word [ebp - 0x114], 0xc8
lea edx, [ebp - 0xed0]
lea eax, [ebp - 0x14]
call fcn.0060cc8f
inc dword [ebp - 0x108]
lea ecx, [ebp - 0xed0]
mov word [ebp - 0x114], 0x14
push 0x6a26a4
push 0x400
push ecx
lea eax, [ebx + 0x194]
push eax
lea edx, [ebx + 0x182]
push edx
lea ecx, [ebx + 0x172]
push ecx
call fcn.006859d3
mov word [ebp - 0x114], 0xd4
lea edx, [ebp - 0xed0]
lea eax, [ebp - 0x48]
call fcn.0060cc8f
mov edx, eax
inc dword [ebp - 0x108]
mov eax, 0x6a2948
call fcn.0060ccf7
dec dword [ebp - 0x108]
lea eax, [ebp - 0x48]
mov edx, 2
call fcn.0060ccc7
push 0x6a26a4
push 0x49c
lea ecx, [ebx + 0x1a6]
push ecx
lea eax, [ebx + 0x196]
push eax
call fcn.006859c7
mov word [0x672f94], ax
push 0x6a26a4
push 0x400
lea edx, [ebp - 0xed0]
push edx
lea ecx, [ebx + 0x1d8]
push ecx
lea eax, [ebx + 0x1c4]
push eax
lea edx, [ebx + 0x1b4]
push edx
call fcn.006859d3
mov word [ebp - 0x114], 0xe0
lea edx, [ebp - 0xed0]
lea eax, [ebp - 0x4c]
call fcn.0060cc8f
mov edx, eax
inc dword [ebp - 0x108]
mov eax, 0x6a294c
call fcn.0060ccf7
dec dword [ebp - 0x108]
lea eax, [ebp - 0x4c]
mov edx, 2
call fcn.0060ccc7
push 0x6a26a4
push 0
lea ecx, [ebx + 0x1ea]
push ecx
lea eax, [ebx + 0x1da]
push eax
call fcn.006859c7
mov word [0x672f9c], ax
push 0x6a26a4
push 0x400
lea edx, [ebp - 0xed0]
push edx
lea ecx, [ebx + 0x214]
push ecx
lea eax, [ebx + 0x20a]
push eax
lea edx, [ebx + 0x1fa]
push edx
call fcn.006859d3
mov word [ebp - 0x114], 0xec
lea edx, [ebp - 0xed0]
lea eax, [ebp - 0x50]
call fcn.0060c24b
mov edx, eax
inc dword [ebp - 0x108]
mov eax, 0x6a293c
call fcn.0060c3c3
dec dword [ebp - 0x108]
lea eax, [ebp - 0x50]
mov edx, 2
call fcn.0060c393
push 0x6a26a4
push 0x400
lea ecx, [ebp - 0xed0]
push ecx
lea eax, [ebx + 0x22e]
push eax
lea edx, [ebx + 0x226]
push edx
lea ecx, [ebx + 0x216]
push ecx
call fcn.006859d3
push 0x6a26a4
push 1
lea eax, [ebx + 0x240]
push eax
lea edx, [ebx + 0x230]
push edx
call fcn.006859c7
mov dword [0x672fcc], eax
lea ecx, [ebp - 0xed0]
push ecx
call fcn.00600a07
pop ecx
test eax, eax
je 0x421b86
mov word [ebp - 0x114], 0xf8
lea edx, [ebp - 0xed0]
lea eax, [ebp - 0x54]
call fcn.0060c24b
inc dword [ebp - 0x108]
lea edx, [ebp - 0x58]
mov ecx, dword [eax]
xor eax, eax
push ecx
mov dword [ebp - 0x58], eax
push edx
inc dword [ebp - 0x108]
call fcn.00433027
add esp, 8
lea edx, [ebp - 0x58]
mov eax, 0x6a2940
call fcn.0060c3c3
dec dword [ebp - 0x108]
lea eax, [ebp - 0x58]
mov edx, 2
call fcn.0060c393
dec dword [ebp - 0x108]
lea eax, [ebp - 0x54]
mov edx, 2
call fcn.0060c393
mov ecx, dword [0x6a196c]
mov eax, dword [ecx]
push eax
call fcn.00447e67
pop ecx
push 0x6a26a4
push 1
lea edx, [ebx + 0x26e]
push edx
lea ecx, [ebx + 0x25e]
push ecx
call fcn.006859c7
mov dword [0x672f70], eax
push 0x6a26a4
push 0
lea eax, [ebx + 0x290]
push eax
lea edx, [ebx + 0x280]
push edx
call fcn.006859c7
mov dword [0x6a2c40], eax
push 0x6a26a4
push 0
lea ecx, [ebx + 0x2b8]
push ecx
lea eax, [ebx + 0x2a8]
push eax
call fcn.006859c7
mov dword [0x6a2c44], eax
push 0x6a26a4
push 0
lea edx, [ebx + 0x2e2]
push edx
lea ecx, [ebx + 0x2d2]
push ecx
call fcn.006859c7
mov dword [0x6a2c48], eax
push 0x6a26a4
push 0
lea eax, [ebx + 0x304]
push eax
lea edx, [ebx + 0x2f4]
push edx
call fcn.006859c7
mov dword [0x6a2c4c], eax
push 0x6a26a4
push 0
lea ecx, [ebx + 0x326]
push ecx
lea eax, [ebx + 0x316]
push eax
call fcn.006859c7
mov dword [0x6a2c50], eax
push 0x6a26a4
push 0
lea edx, [ebx + 0x348]
push edx
lea ecx, [ebx + 0x338]
push ecx
call fcn.006859c7
mov dword [0x672fc4], eax
push 0x6a26a4
push 0
lea eax, [ebx + 0x36c]
push eax
lea edx, [ebx + 0x35c]
push edx
call fcn.006859c7
mov dword [0x6a2c54], eax
push 0x6a26a4
push 0x400
lea ecx, [ebp - 0xed0]
push ecx
lea eax, [ebx + 0x3b2]
push eax
lea edx, [ebx + 0x394]
push edx
lea ecx, [ebx + 0x384]
push ecx
call fcn.006859d3
mov word [ebp - 0x114], 0x104
lea edx, [ebp - 0xed0]
lea eax, [ebp - 0x5c]
call fcn.0060cc8f
mov edx, eax
inc dword [ebp - 0x108]
lea eax, [ebp - 0x60]
call fcn.0060c1b3
inc dword [ebp - 0x108]
lea edx, [ebp - 0x60]
mov eax, 0x6a2c58
call fcn.0060c3c3
dec dword [ebp - 0x108]
lea eax, [ebp - 0x60]
mov edx, 2
call fcn.0060c393
dec dword [ebp - 0x108]
lea eax, [ebp - 0x5c]
mov edx, 2
call fcn.0060ccc7
push 0x6a26a4
push 0
lea ecx, [ebx + 0x3c4]
push ecx
lea eax, [ebx + 0x3b4]
push eax
call fcn.006859c7
mov dword [0x6a2c5c], eax
push 0x6a26a4
push 0x400
lea edx, [ebp - 0xed0]
push edx
lea ecx, [ebx + 0x412]
push ecx
lea eax, [ebx + 0x3f0]
push eax
lea edx, [ebx + 0x3e0]
push edx
call fcn.006859d3
mov word [ebp - 0x114], 0x110
lea edx, [ebp - 0xed0]
lea eax, [ebp - 0x64]
call fcn.0060cc8f
mov edx, eax
inc dword [ebp - 0x108]
lea eax, [ebp - 0x68]
call fcn.0060c1b3
inc dword [ebp - 0x108]
lea edx, [ebp - 0x68]
mov eax, 0x6a2c60
call fcn.0060c3c3
dec dword [ebp - 0x108]
lea eax, [ebp - 0x68]
mov edx, 2
call fcn.0060c393
dec dword [ebp - 0x108]
lea eax, [ebp - 0x64]
mov edx, 2
call fcn.0060ccc7
push 0x6a26a4
push 0
lea ecx, [ebx + 0x424]
push ecx
lea eax, [ebx + 0x414]
push eax
call fcn.006859c7
mov dword [0x6a2c6c], eax
call fcn.00432a17
cmp al, 0xb
je 0x421df3
call fcn.00432a17
cmp al, 0xc
jne 0x421e14
call fcn.0044256f
test eax, eax
je 0x421e14
mov ecx, dword [ebp + 8]
xor edx, edx
mov dword [0x6a2c40], edx
xor edx, edx
mov eax, dword [ecx + 0x430]
mov ecx, dword [eax]
call dword [ecx + 0x64]
call fcn.00420fab
test eax, eax
je 0x421e97
call fcn.0044256f
test eax, eax
je 0x421e38
call fcn.00432a17
cmp al, 0xb
je 0x421e54
call fcn.00432a17
cmp al, 0xc
je 0x421e54
mov dword [0x6a2c40], 1
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x430]
xor edx, edx
mov ecx, dword [eax]
call dword [ecx + 0x64]
jmp 0x421e97
mov word [ebp - 0x114], 0x11c
lea edx, [ebx + 0x43e]
lea eax, [ebp - 0x6c]
call fcn.0060cbdf
inc dword [ebp - 0x108]
mov ecx, dword [eax]
mov eax, dword [0x6a1980]
push ecx
mov edx, dword [eax]
push edx
call fcn.00469d3b
add esp, 8
dec dword [ebp - 0x108]
lea eax, [ebp - 0x6c]
mov edx, 2
call fcn.0060ccc7
call fcn.00432a17
cmp al, 0xb
je 0x421ea9
call fcn.00432a17
cmp al, 0xc
jne 0x421f18
call fcn.00434313
test eax, eax
je 0x421ef3
mov eax, dword [0x6a1980]
mov ecx, dword [0x6a2e48]
push ecx
mov edx, dword [eax]
push edx
call fcn.00469cbf
add esp, 8
test eax, eax
je 0x421ef3
call fcn.0043443f
mov eax, dword [0x6a1980]
mov ecx, dword [0x6a2e4c]
push ecx
mov edx, dword [eax]
push edx
call fcn.00469d3b
add esp, 8
mov ecx, dword [ebp + 8]
push ecx
call fcn.004274c3
pop ecx
cmp dword [0x6a2c40], 0
jne 0x421f18
xor eax, eax
mov dword [0x6a2c50], eax
mov edx, dword [0x6a1978]
mov ecx, dword [edx]
mov eax, dword [ecx + 0x2fc]
xor edx, edx
mov ecx, dword [eax]
call dword [ecx + 0x64]
call fcn.0043d0ff
cmp dword [0x672fa0], 0
jne 0x421f2d
xor eax, eax
mov dword [0x6a2c40], eax
cmp dword [0x6a2c40], 0
jne 0x42299c
push 0x400
push 0
lea edx, [ebp - 0x1ed0]
push edx
call fcn.0060070b
add esp, 0xc
lea ecx, [ebp - 0x20d8]
push 0x104
push ecx
push 0
call fcn.006859b5
lea eax, [ebp - 0x22e0]
push eax
lea edx, [ebp - 0x20d8]
push edx
call fcn.00431893
add esp, 8
lea edx, [ebx + 0x466]
mov eax, 0x6a28b0
call fcn.0060cd23
mov word [ebp - 0x114], 0x128
lea edx, [ebx + 0x47d]
lea eax, [ebp - 0x74]
call fcn.0060cbdf
inc dword [ebp - 0x108]
xor eax, eax
mov dword [ebp - 0x78], eax
mov eax, 0x6a28b0
inc dword [ebp - 0x108]
lea edx, [ebp - 0x74]
lea ecx, [ebp - 0x78]
call fcn.0060ce3f
lea edx, [ebp - 0x78]
mov eax, 0x6a28b0
call fcn.0060ccf7
dec dword [ebp - 0x108]
lea eax, [ebp - 0x78]
mov edx, 2
call fcn.0060ccc7
dec dword [ebp - 0x108]
lea eax, [ebp - 0x74]
mov edx, 2
call fcn.0060ccc7
push 0x6a26a4
push 0x400
lea ecx, [ebp - 0xed0]
push ecx
lea eax, [ebx + 0x4aa]
push eax
lea edx, [ebx + 0x49a]
push edx
lea ecx, [ebx + 0x48a]
push ecx
call fcn.006859d3
mov word [ebp - 0x114], 0x134
lea edx, [ebp - 0xed0]
lea eax, [ebp - 0x7c]
call fcn.0060cc8f
inc dword [ebp - 0x108]
mov ecx, dword [eax]
push ecx
call fcn.004356cf
pop ecx
dec dword [ebp - 0x108]
lea eax, [ebp - 0x7c]
mov edx, 2
call fcn.0060ccc7
push 0x104
lea ecx, [ebp - 0x1ed0]
push ecx
mov eax, dword [0x6a28b0]
push eax
call fcn.006858a1
test eax, eax
jne 0x4220aa
call fcn.00432a17
cmp al, 6
jne 0x422094
lea edx, [ebx + 0x4b0]
push edx
lea ecx, [ebp - 0x1ed0]
push ecx
call fcn.00600a5f
add esp, 8
jmp 0x4220aa
lea eax, [ebx + 0x4ee]
push eax
lea edx, [ebp - 0x1ed0]
push edx
call fcn.00600a5f
add esp, 8
mov word [ebp - 0x114], 0x140
lea edx, [ebp - 0x1ed0]
lea eax, [ebp - 0x80]
call fcn.0060c24b
inc dword [ebp - 0x108]
mov eax, dword [eax]
call fcn.0056358f
push eax
dec dword [ebp - 0x108]
lea eax, [ebp - 0x80]
mov edx, 2
call fcn.0060c393
pop ecx
test cl, cl
je 0x4221a2
push 0x400
push 0
lea eax, [ebp - 0x2ae0]
push eax
call fcn.0060070b
add esp, 0xc
lea edx, [ebp - 0x32e0]
push 0x400
push 0
push edx
call fcn.0060070b
add esp, 0xc
lea ecx, [ebp - 0x1ed0]
push ecx
lea eax, [ebp - 0x2ae0]
push eax
call fcn.00600a1f
add esp, 8
lea edx, [ebp - 0x1ed0]
push edx
lea ecx, [ebp - 0x32e0]
push ecx
call fcn.00600a1f
add esp, 8
lea eax, [ebx + 0x530]
push eax
lea edx, [ebp - 0x32e0]
push edx
call fcn.00600a5f
add esp, 8
lea ecx, [ebp - 0x32e0]
push ecx
call fcn.0068587d
mov word [ebp - 0x114], 0x14c
lea edx, [ebp - 0x2ae0]
lea eax, [ebp - 0x84]
call fcn.0060c24b
inc dword [ebp - 0x108]
mov eax, dword [eax]
call fcn.005639c7
dec dword [ebp - 0x108]
lea eax, [ebp - 0x84]
mov edx, 2
call fcn.0060c393
mov word [ebp - 0x114], 0x158
lea edx, [ebp - 0x1ed0]
lea eax, [ebp - 0x88]
call fcn.0060c24b
inc dword [ebp - 0x108]
mov eax, dword [eax]
call fcn.0056357f
xor edx, edx
mov dl, al
lea eax, [ebp - 0x88]
cmp edx, 1
mov edx, 2
sbb ecx, ecx
neg ecx
push ecx
dec dword [ebp - 0x108]
call fcn.0060c393
pop ecx
test cl, cl
je 0x422205
push 1
lea eax, [ebp - 0x1ed0]
push eax
lea edx, [ebx + 0x54c]
push edx
call fcn.00685823
xor ecx, ecx
mov dword [0x6a204c], ecx
xor eax, eax
mov dword [0x6a2050], eax
xor edx, edx
mov dword [0x6a2054], edx
xor ecx, ecx
mov dword [0x6a2058], ecx
xor eax, eax
mov dword [0x6a2060], eax
xor edx, edx
mov dword [0x6a2068], edx
xor ecx, ecx
mov dword [0x6a2080], ecx
xor eax, eax
mov dword [0x6a206c], eax
xor edx, edx
mov dword [0x6a2070], edx
xor ecx, ecx
mov dword [0x6a2074], ecx
xor eax, eax
mov dword [0x6a2078], eax
xor edx, edx
mov dword [0x6a207c], edx
lea ecx, [ebp - 0x1ed0]
push ecx
call fcn.00685af9
mov dword [0x672f7c], eax
cmp dword [0x672f7c], 0
je 0x4223e2
lea eax, [ebx + 0x566]
push eax
mov edx, dword [0x672f7c]
push edx
call fcn.006859d9
mov dword [0x6a204c], eax
lea ecx, [ebx + 0x572]
push ecx
mov eax, dword [0x672f7c]
push eax
call fcn.006859d9
mov dword [0x6a2050], eax
lea edx, [ebx + 0x57e]
push edx
mov ecx, dword [0x672f7c]
push ecx
call fcn.006859d9
mov dword [0x6a2054], eax
lea eax, [ebx + 0x58c]
push eax
mov edx, dword [0x672f7c]
push edx
call fcn.006859d9
mov dword [0x6a2058], eax
lea ecx, [ebx + 0x597]
push ecx
mov eax, dword [0x672f7c]
push eax
call fcn.006859d9
mov dword [0x6a2060], eax
lea edx, [ebx + 0x59f]
push edx
mov ecx, dword [0x672f7c]
push ecx
call fcn.006859d9
mov dword [0x6a2064], eax
lea eax, [ebx + 0x5af]
push eax
mov edx, dword [0x672f7c]
push edx
call fcn.006859d9
mov dword [0x6a2068], eax
lea ecx, [ebx + 0x5b9]
push ecx
mov eax, dword [0x672f7c]
push eax
call fcn.006859d9
mov dword [0x6a206c], eax
lea edx, [ebx + 0x5c3]
push edx
mov ecx, dword [0x672f7c]
push ecx
call fcn.006859d9
mov dword [0x6a2070], eax
lea eax, [ebx + 0x5d5]
push eax
mov edx, dword [0x672f7c]
push edx
call fcn.006859d9
mov dword [0x6a2074], eax
lea ecx, [ebx + 0x5dd]
push ecx
mov eax, dword [0x672f7c]
push eax
call fcn.006859d9
mov dword [0x6a2078], eax
lea edx, [ebx + 0x5e4]
push edx
mov ecx, dword [0x672f7c]
push ecx
call fcn.006859d9
mov dword [0x6a207c], eax
lea eax, [ebx + 0x5f0]
push eax
mov edx, dword [0x672f7c]
push edx
call fcn.006859d9
mov dword [0x6a2080], eax
lea ecx, [ebx + 0x5f9]
push ecx
mov eax, dword [0x672f7c]
push eax
call fcn.006859d9
mov dword [0x6a2494], eax
lea edx, [ebx + 0x604]
push edx
mov ecx, dword [0x672f7c]
push ecx
call fcn.006859d9
mov dword [0x6a2498], eax
cmp dword [0x6a2058], 0
jne 0x422402
mov eax, dword [ebp + 8]
push eax
call fcn.004274c3
pop ecx
push 0
call fcn.00685931
push eax
call fcn.00685bdd
push 0x104
push 0
lea edx, [ebp - 0x34e8]
push edx
call fcn.0060070b
add esp, 0xc
lea ecx, [ebp - 0x1ed0]
push ecx
call fcn.00600a07
pop ecx
push eax
lea eax, [ebp - 0x1ed0]
push eax
lea edx, [ebp - 0x34e8]
push edx
call fcn.00600a83
add esp, 0xc
lea ecx, [ebx + 0x612]
push ecx
lea eax, [ebp - 0x34e8]
push eax
call fcn.00600a5f
add esp, 8
push 0
lea edx, [ebp - 0x34e8]
push edx
call fcn.00601ef7
add esp, 8
test eax, eax
jne 0x422473
lea ecx, [ebp - 0x34e8]
push ecx
call fcn.0068587d
mov word [ebp - 0x114], 0x170
lea edx, [ebx + 0x61c]
lea eax, [ebp - 0x90]
call fcn.0060cc8f
inc dword [ebp - 0x108]
lea ecx, [ebp - 0x90]
push ecx
xor eax, eax
mov dword [ebp - 0x8c], eax
lea edx, [ebp - 0x8c]
push edx
inc dword [ebp - 0x108]
call fcn.0044192b
pop ecx
xor edx, edx
mov dword [ebp - 0x70], edx
lea ecx, [ebp - 0x70]
inc dword [ebp - 0x108]
lea eax, [ebp - 0x8c]
pop edx
call fcn.0060ce3f
dec dword [ebp - 0x108]
lea eax, [ebp - 0x90]
mov edx, 2
call fcn.0060ccc7
dec dword [ebp - 0x108]
lea eax, [ebp - 0x8c]
mov edx, 2
call fcn.0060ccc7
mov word [ebp - 0x114], 0x164
mov eax, dword [ebp - 0x70]
push eax
call fcn.00685af9
mov esi, eax
test esi, esi
je 0x422539
lea eax, [ebx + 0x636]
push eax
push esi
call fcn.006859d9
mov dword [0x6a205c], eax
cmp dword [0x6a205c], 0
je 0x422539
call dword [0x6a205c]
mov dword [0x6a2c68], eax
cmp dword [0x6a205c], 0
je 0x422724
call dword [0x6a205c]
mov edi, eax
call dword [0x6a2058]
cmp edi, eax
jle 0x422724
push esi
call fcn.006858e9
lea eax, [ebp - 0x34e8]
push eax
lea edx, [ebp - 0x1ed0]
push edx
call fcn.00685b23
mov edi, eax
xor esi, esi
jmp 0x4226e0
lea eax, [ebp - 0x1ed0]
push eax
call fcn.00600a07
pop ecx
push eax
lea edx, [ebp - 0x1ed0]
push edx
lea ecx, [ebp - 0x34e8]
push ecx
call fcn.00600a83
add esp, 0xc
mov word [ebp - 0x114], 0x188
call fcn.006865f9
mov ecx, 0x2710
xor edx, edx
div ecx
mov eax, edx
xor edx, edx
mov dword [ebp - 0x98], edx
lea edx, [ebp - 0x98]
inc dword [ebp - 0x108]
call fcn.004235ff
lea eax, [ebp - 0x98]
push eax
lea edx, [ebx + 0x641]
lea eax, [ebp - 0x9c]
call fcn.0060c13f
inc dword [ebp - 0x108]
xor eax, eax
mov dword [ebp - 0xa0], eax
lea edx, [ebp - 0x9c]
inc dword [ebp - 0x108]
lea ecx, [ebp - 0xa0]
pop eax
call fcn.0060c3eb
lea edx, [ebp - 0xa0]
lea eax, [ebp - 0x94]
call fcn.0060cc53
inc dword [ebp - 0x108]
dec dword [ebp - 0x108]
lea eax, [ebp - 0xa0]
mov edx, 2
call fcn.0060c393
dec dword [ebp - 0x108]
lea eax, [ebp - 0x9c]
mov edx, 2
call fcn.0060c393
dec dword [ebp - 0x108]
lea eax, [ebp - 0x98]
mov edx, 2
call fcn.0060c393
mov word [ebp - 0x114], 0x17c
mov ecx, dword [ebp - 0x94]
push ecx
lea eax, [ebp - 0x34e8]
push eax
call fcn.00600a5f
add esp, 8
push 0
lea edx, [ebp - 0x34e8]
push edx
call fcn.00601ef7
add esp, 8
test eax, eax
jne 0x4226ab
lea ecx, [ebp - 0x34e8]
push ecx
call fcn.0068587d
lea eax, [ebp - 0x34e8]
push eax
lea edx, [ebp - 0x1ed0]
push edx
call fcn.00685b23
mov edi, eax
inc esi
dec dword [ebp - 0x108]
lea eax, [ebp - 0x94]
mov edx, 2
call fcn.0060ccc7
mov word [ebp - 0x114], 0x164
test edi, edi
jne 0x4226ed
cmp esi, 0x64
jl 0x42257e
push 1
lea ecx, [ebp - 0x1ed0]
push ecx
lea eax, [ebx + 0x646]
push eax
call fcn.00685823
mov ecx, dword [0x6a1980]
mov edx, dword [0x6a2d20]
push edx
mov eax, dword [ecx]
push eax
call fcn.00469d3b
add esp, 8
mov edx, dword [ebp + 8]
push edx
call fcn.004274c3
pop ecx
cmp dword [0x6a204c], 0
je 0x422790
cmp dword [0x6a2050], 0
je 0x422790
cmp dword [0x6a2054], 0
je 0x422790
cmp dword [0x6a2058], 0
je 0x422790
cmp dword [0x6a2060], 0
je 0x422790
cmp dword [0x6a2068], 0
je 0x422790
cmp dword [0x6a206c], 0
je 0x422790
cmp dword [0x6a2074], 0
je 0x422790
cmp dword [0x6a2078], 0
je 0x422790
cmp dword [0x6a207c], 0
je 0x422790
cmp dword [0x6a2080], 0
je 0x422790
cmp dword [0x6a2494], 0
jne 0x4227eb
mov eax, dword [0x6a1980]
mov ecx, dword [0x6a2d30]
push ecx
mov edx, dword [eax]
push edx
call fcn.00469d3b
add esp, 8
mov eax, dword [0x6a1980]
mov ecx, dword [0x6a2f5c]
push ecx
mov edx, dword [eax]
push edx
call fcn.00469cbf
add esp, 8
test eax, eax
je 0x4227e1
push 0x6a26a4
lea ecx, [ebx + 0x688]
push ecx
lea eax, [ebx + 0x670]
push eax
lea edx, [ebx + 0x660]
push edx
call fcn.00685c49
mov ecx, dword [ebp + 8]
push ecx
call fcn.004274c3
pop ecx
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x320]
mov edx, 1
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov word [ebp - 0x114], 0x194
mov edx, 0x6a28b0
lea eax, [ebp - 0xa4]
call fcn.0060c1b3
inc dword [ebp - 0x108]
mov ecx, dword [eax]
push ecx
lea eax, [ebp - 0x10]
push eax
call fcn.004728cb
add esp, 8
test eax, eax
sete dl
and edx, 1
lea eax, [ebp - 0xa4]
push edx
mov edx, 2
dec dword [ebp - 0x108]
call fcn.0060c393
pop ecx
test cl, cl
je 0x4228d6
mov word [ebp - 0x114], 0x1ac
mov edx, 0x6a28b0
lea eax, [ebp - 0xa8]
call fcn.0060c1b3
inc dword [ebp - 0x108]
mov ecx, dword [eax]
push ecx
lea eax, [ebp - 0x10]
push eax
call fcn.00472baf
add esp, 8
mov esi, eax
dec dword [ebp - 0x108]
lea eax, [ebp - 0xa8]
mov edx, 2
call fcn.0060c393
mov word [ebp - 0x114], 0x1a0
test esi, esi
jg 0x4228cd
call fcn.004334c3
mov eax, dword [0x6a1980]
mov ecx, dword [0x6a2d38]
push ecx
mov edx, dword [eax]
push edx
call fcn.00469d3b
add esp, 8
mov ecx, dword [ebp + 8]
push ecx
call fcn.004274c3
pop ecx
mov word [ebp - 0x114], 0x164
cmp dword [0x6a2498], 0
je 0x4228e8
push 0
call dword [0x6a2498]
pop ecx
cmp dword [0x6a2054], 0
je 0x4228ff
lea eax, [ebp - 0x22e0]
push eax
call dword [0x6a2054]
pop ecx
cmp dword [0x6a2070], 0
je 0x422916
mov edx, dword [0x672fcc]
push edx
call dword [0x6a2070]
pop ecx
cmp dword [0x6a207c], 0
je 0x42292e
push 0
push 0
push 0
call dword [0x6a207c]
add esp, 0xc
cmp dword [0x6a2050], 0
je 0x422940
push 1
call dword [0x6a2050]
pop ecx
cmp dword [0x6a2060], 0
je 0x422959
mov eax, dword [ebp + 8]
call fcn.005d4c53
push eax
call dword [0x6a2060]
pop ecx
cmp dword [0x6a2064], 0
je 0x42297b
lea edx, [ebx + 0x68d]
push edx
lea ecx, [ebx + 0x68c]
push ecx
push 0
call dword [0x6a2064]
add esp, 0xc
dec dword [ebp - 0x108]
lea eax, [ebp - 0x70]
mov edx, 2
call fcn.0060ccc7
mov word [ebp - 0x114], 0x14
jmp 0x422fe4
mov ecx, dword [0x6a196c]
mov eax, dword [ecx]
mov eax, dword [eax + 0x30c]
mov dl, 2
mov ecx, dword [eax]
call dword [ecx + 0x114]
mov eax, dword [0x6a196c]
mov edx, dword [eax]
mov eax, dword [edx + 0x338]
mov dl, 2
mov ecx, dword [eax]
call dword [ecx + 0x114]
push 0x1c
call fcn.005ff8e7
pop ecx
mov dword [ebp - 0xb0], eax
test eax, eax
je 0x422a34
mov word [ebp - 0x114], 0x1c4
mov edx, dword [ebp - 0xb0]
xor ecx, ecx
mov dword [edx], ecx
inc dword [ebp - 0x108]
mov esi, dword [ebp - 0xb0]
add esi, 4
xor eax, eax
mov dword [esi], eax
inc dword [ebp - 0x108]
mov edi, dword [ebp - 0xb0]
add edi, 0x18
xor eax, eax
mov dword [edi], eax
inc dword [ebp - 0x108]
add dword [ebp - 0x108], 0xfffffffd
mov word [ebp - 0x114], 0x1b8
mov edx, dword [ebp - 0xb0]
jmp 0x422a3a
mov edx, dword [ebp - 0xb0]
mov word [ebp - 0x114], 0x14
push 0xa
lea eax, [ebp - 0x10]
push eax
call fcn.00473a73
mov word [ebp - 0x114], 0x1d0
xor ecx, ecx
add esp, 8
mov dword [ebp - 0xac], ecx
inc dword [ebp - 0x108]
mov word [ebp - 0x114], 0x1dc
call fcn.0044256f
test eax, eax
je 0x422c14
push 0
push 0
mov word [ebp - 0x114], 0x1e8
lea edx, [ebx + 0x68e]
lea eax, [ebp - 0xb4]
call fcn.0060cbdf
inc dword [ebp - 0x108]
mov ecx, dword [eax]
push ecx
call fcn.00441f67
add esp, 0xc
dec dword [ebp - 0x108]
lea eax, [ebp - 0xb4]
mov edx, 2
call fcn.0060ccc7
push 0
push 1
mov word [ebp - 0x114], 0x1f4
lea edx, [ebx + 0x6a3]
lea eax, [ebp - 0xb8]
call fcn.0060cbdf
inc dword [ebp - 0x108]
mov ecx, dword [eax]
push ecx
call fcn.00441f67
add esp, 0xc
dec dword [ebp - 0x108]
lea eax, [ebp - 0xb8]
mov edx, 2
call fcn.0060ccc7
mov word [ebp - 0x114], 0x200
xor ecx, ecx
mov eax, dword [0x6a1d38]
mov dword [ebp - 0xbc], ecx
lea edx, [ebp - 0xbc]
inc dword [ebp - 0x108]
mov eax, dword [eax]
call fcn.005bcfdf
lea eax, [ebp - 0xbc]
mov eax, dword [eax]
xor edx, edx
mov dword [ebp - 0xc0], edx
lea edx, [ebp - 0xc0]
inc dword [ebp - 0x108]
call fcn.00563807
lea eax, [ebp - 0xc0]
push eax
lea edx, [ebx + 0x6b8]
lea eax, [ebp - 0xc4]
call fcn.0060c13f
inc dword [ebp - 0x108]
xor eax, eax
mov dword [ebp - 0xc8], eax
lea edx, [ebp - 0xc4]
inc dword [ebp - 0x108]
lea ecx, [ebp - 0xc8]
pop eax
call fcn.0060c3eb
lea edx, [ebp - 0xc8]
mov ecx, dword [edx]
push ecx
push 0x6a2024
call fcn.0042366b
add esp, 8
dec dword [ebp - 0x108]
lea eax, [ebp - 0xc8]
mov edx, 2
call fcn.0060c393
dec dword [ebp - 0x108]
lea eax, [ebp - 0xc4]
mov edx, 2
call fcn.0060c393
dec dword [ebp - 0x108]
lea eax, [ebp - 0xc0]
mov edx, 2
call fcn.0060c393
dec dword [ebp - 0x108]
lea eax, [ebp - 0xbc]
mov edx, 2
call fcn.0060c393
lea edx, [ebx + 0x6c3]
lea eax, [ebp - 0xac]
call fcn.0060cd23
jmp 0x422da5
push 0
push 0
mov word [ebp - 0x114], 0x20c
lea edx, [ebx + 0x6d6]
lea eax, [ebp - 0xcc]
call fcn.0060cbdf
inc dword [ebp - 0x108]
mov ecx, dword [eax]
push ecx
call fcn.00441f67
add esp, 0xc
dec dword [ebp - 0x108]
lea eax, [ebp - 0xcc]
mov edx, 2
call fcn.0060ccc7
push 0
push 1
mov word [ebp - 0x114], 0x218
lea edx, [ebx + 0x6eb]
lea eax, [ebp - 0xd0]
call fcn.0060cbdf
inc dword [ebp - 0x108]
mov ecx, dword [eax]
push ecx
call fcn.00441f67
add esp, 0xc
dec dword [ebp - 0x108]
lea eax, [ebp - 0xd0]
mov edx, 2
call fcn.0060ccc7
mov word [ebp - 0x114], 0x224
xor ecx, ecx
mov eax, dword [0x6a1d38]
mov dword [ebp - 0xd4], ecx
lea edx, [ebp - 0xd4]
inc dword [ebp - 0x108]
mov eax, dword [eax]
call fcn.005bcfdf
lea eax, [ebp - 0xd4]
mov eax, dword [eax]
xor edx, edx
mov dword [ebp - 0xd8], edx
lea edx, [ebp - 0xd8]
inc dword [ebp - 0x108]
call fcn.00563807
lea eax, [ebp - 0xd8]
push eax
lea edx, [ebx + 0x700]
lea eax, [ebp - 0xdc]
call fcn.0060c13f
inc dword [ebp - 0x108]
xor eax, eax
mov dword [ebp - 0xe0], eax
lea edx, [ebp - 0xdc]
inc dword [ebp - 0x108]
lea ecx, [ebp - 0xe0]
pop eax
call fcn.0060c3eb
lea edx, [ebp - 0xe0]
mov ecx, dword [edx]
push ecx
push 0x6a2024
call fcn.0042366b
add esp, 8
dec dword [ebp - 0x108]
lea eax, [ebp - 0xe0]
mov edx, 2
call fcn.0060c393
dec dword [ebp - 0x108]
lea eax, [ebp - 0xdc]
mov edx, 2
call fcn.0060c393
dec dword [ebp - 0x108]
lea eax, [ebp - 0xd8]
mov edx, 2
call fcn.0060c393
dec dword [ebp - 0x108]
lea eax, [ebp - 0xd4]
mov edx, 2
call fcn.0060c393
lea edx, [ebx + 0x70b]
lea eax, [ebp - 0xac]
call fcn.0060cd23
push 0x6a2024
call fcn.0046e183
pop ecx
mov esi, eax
mov word [ebp - 0x114], 0x1dc
cmp esi, 1
jne 0x422eaf
mov word [ebp - 0x114], 0x23c
lea edx, [ebx + 0x71e]
lea eax, [ebp - 0xe4]
call fcn.0060cbdf
inc dword [ebp - 0x108]
lea ecx, [ebp - 0x3ce8]
mov word [ebp - 0x114], 0x230
push 0x400
push 0
push ecx
call fcn.0060070b
add esp, 0xc
lea eax, [ebp - 0x3ce8]
push 0x400
push eax
mov edx, dword [ebp - 0xe4]
push edx
call fcn.006858a1
test eax, eax
jne 0x422e56
call fcn.00432a17
cmp al, 6
jne 0x422e40
lea ecx, [ebx + 0x746]
push ecx
lea eax, [ebp - 0x3ce8]
push eax
call fcn.00600a5f
add esp, 8
jmp 0x422e56
lea edx, [ebx + 0x784]
push edx
lea ecx, [ebp - 0x3ce8]
push ecx
call fcn.00600a5f
add esp, 8
push 0
lea eax, [ebp - 0x3ce8]
push eax
mov edx, dword [ebp - 0xac]
push edx
call fcn.00685823
test eax, eax
je 0x422e90
mov eax, dword [0x6a1980]
mov ecx, dword [0x6a2f50]
push ecx
mov edx, dword [eax]
push edx
call fcn.00469d3b
add esp, 8
mov ecx, dword [ebp + 8]
push ecx
call fcn.004274c3
pop ecx
dec dword [ebp - 0x108]
lea eax, [ebp - 0xe4]
mov edx, 2
call fcn.0060ccc7
mov word [ebp - 0x114], 0x1dc
test esi, esi
je 0x422ed2
mov eax, dword [0x6a1980]
mov ecx, dword [0x6a2f60]
push ecx
mov edx, dword [eax]
push edx
call fcn.00469d3b
add esp, 8
push 1
call fcn.004422b3
pop ecx
push 1
push 0x6a2024
call fcn.0046d6a7
add esp, 8
push 0x6a2c64
push 0x6a2024
call fcn.0046d797
add esp, 8
mov edi, eax
mov word [ebp - 0x114], 0x1dc
test esi, esi
je 0x422f0a
push 0
call fcn.004422b3
pop ecx
cmp edi, 1
jne 0x422f30
mov edx, dword [0x6a1980]
mov eax, dword [0x6a2f4c]
push eax
mov ecx, dword [edx]
push ecx
call fcn.00469d3b
add esp, 8
mov eax, dword [ebp + 8]
push eax
call fcn.004274c3
pop ecx
cmp edi, 2
jne 0x422f92
mov ecx, dword [0x6a1980]
mov edx, dword [0x6a2f58]
push edx
mov eax, dword [ecx]
push eax
call fcn.00469d3b
add esp, 8
mov ecx, dword [0x6a1980]
mov edx, dword [0x6a2f5c]
push edx
mov eax, dword [ecx]
push eax
call fcn.00469cbf
add esp, 8
test eax, eax
je 0x422f88
push 0x6a26a4
lea edx, [ebx + 0x7ee]
push edx
lea ecx, [ebx + 0x7d6]
push ecx
lea eax, [ebx + 0x7c6]
push eax
call fcn.00685c49
mov edx, dword [ebp + 8]
push edx
call fcn.004274c3
pop ecx
push 0x6a2024
call fcn.0046f637
pop ecx
cmp eax, 0x3f6
je 0x422fc5
mov eax, dword [0x6a1980]
mov ecx, dword [0x6a2f54]
push ecx
mov edx, dword [eax]
push edx
call fcn.00469d3b
add esp, 8
mov ecx, dword [ebp + 8]
push ecx
call fcn.004274c3
pop ecx
dec dword [ebp - 0x108]
lea eax, [ebp - 0xac]
mov edx, 2
call fcn.0060ccc7
mov word [ebp - 0x114], 0x14
mov ecx, dword [0x6a294c]
push ecx
mov eax, dword [0x6a2948]
push eax
call fcn.0043102f
add esp, 8
call fcn.0043fd03
call fcn.0043d1ef
mov word [ebp - 0x114], 0x248
push 0x104
lea edx, [ebp - 0x3ef0]
push edx
push 0
call fcn.006859b5
lea ecx, [ebp - 0x40f8]
push ecx
lea eax, [ebp - 0x3ef0]
push eax
call fcn.00431893
mov dword [ebp - 0x4120], 0x770077
mov dword [ebp - 0x411c], 0x2e0077
mov dword [ebp - 0x4118], 0x610045
mov dword [ebp - 0x4114], 0x790073
mov dword [ebp - 0x4110], 0x470032
mov dword [ebp - 0x410c], 0x6d0061
mov dword [ebp - 0x4108], 0x2e0065
mov dword [ebp - 0x4104], 0x6f0063
mov dword [ebp - 0x4100], 0x20006d
add esp, 8
xor edx, edx
mov dword [ebp - 0x40fc], edx
lea edx, [ebp - 0x4120]
mov word [ebp - 0x114], 0x254
lea eax, [ebp - 0xec]
call fcn.0060cc8f
inc dword [ebp - 0x108]
mov edx, dword [eax]
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x328]
call fcn.004abd53
dec dword [ebp - 0x108]
lea eax, [ebp - 0xec]
mov edx, 2
call fcn.0060ccc7
lea ecx, [ebx + 0x7f2]
push ecx
push 0xfa00
push 0
push 4
push 0
push 0xffffffffffffffff
call fcn.00685841
mov dword [0x6a28c0], eax
cmp dword [0x6a28c0], 0
jne 0x423151
dec dword [ebp - 0x108]
lea eax, [ebp - 0x14]
mov edx, 2
call fcn.0060ccc7
dec dword [ebp - 0x108]
push 2
lea ecx, [ebp - 0x10]
push ecx
call fcn.004727e7
add esp, 8
dec dword [ebp - 0x108]
push 2
lea eax, [ebp - 4]
push eax
call fcn.00473ba7
add esp, 8
mov edx, dword [ebp - 0x124]
mov dword fs:[0], edx
jmp 0x423553
push 0
push 0
push 0
push 0xf001f
mov ecx, dword [0x6a28c0]
push ecx
call fcn.00685b17
mov dword [0x6a28d8], eax
lea eax, [ebx + 0x7fd]
push eax
push 0x61a80
push 0
push 4
push 0
push 0xffffffffffffffff
call fcn.00685841
mov dword [0x6a28c8], eax
cmp dword [0x6a28c8], 0
je 0x4231b0
push 0
push 0
push 0
push 0xf001f
mov edx, dword [0x6a28c8]
push edx
call fcn.00685b17
mov dword [0x6a28dc], eax
mov ecx, dword [0x6a28d8]
push 0x6a26a4
add ecx, 0xf9c0
push 0x400
mov dword [0x6a28d4], ecx
lea ecx, [ebp - 0xed0]
mov eax, dword [0x6a28d8]
push ecx
add eax, 0xf9fa
lea ecx, [ebx + 0x816]
mov dword [0x6a28cc], eax
lea eax, [ebx + 0x830]
mov edx, dword [0x6a28d8]
push eax
add edx, 0xf9fe
mov dword [0x6a28d0], edx
lea edx, [ebx + 0x826]
push edx
push ecx
call fcn.006859d3
mov word [ebp - 0x114], 0x26c
lea edx, [ebp - 0xed0]
lea eax, [ebp - 0xe8]
call fcn.0060c24b
inc dword [ebp - 0x108]
mov dl, 1
mov word [ebp - 0x114], 0x260
mov eax, dword [0x536778]
call fcn.0042355b
mov dword [ebp - 0x130], eax
mov eax, dword [ebp - 0x130]
call fcn.0050b4cb
xor esi, esi
jmp 0x423365
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x3e0]
mov dl, 1
mov eax, dword [0x4757b0]
call fcn.004236c3
mov word [ebp - 0x114], 0x260
mov word [ebp - 0x114], 0x278
mov ebx, eax
xor eax, eax
mov dword [ebp - 0xf0], eax
lea ecx, [ebp - 0xf0]
inc dword [ebp - 0x108]
mov edx, esi
mov eax, dword [ebp - 0x130]
mov edi, dword [eax]
call dword [edi + 0xc]
lea edx, [ebp - 0xf0]
lea eax, [ebp - 0xf4]
call fcn.0060cc53
inc dword [ebp - 0x108]
mov edx, dword [eax]
mov eax, ebx
call fcn.00496907
dec dword [ebp - 0x108]
lea eax, [ebp - 0xf4]
mov edx, 2
call fcn.0060ccc7
dec dword [ebp - 0x108]
lea eax, [ebp - 0xf0]
mov edx, 2
call fcn.0060c393
mov dword [ebx + 0x78], 0x409534
mov ecx, dword [ebp + 8]
lea edx, [ebx + 0xd8]
mov dword [ebx + 0x7c], ecx
lea eax, [ebp - 0xf8]
mov word [ebp - 0x114], 0x284
call fcn.0060c1b3
inc dword [ebp - 0x108]
lea edx, [ebp - 0xf8]
lea eax, [ebp - 0xe8]
call fcn.0060c477
push eax
dec dword [ebp - 0x108]
lea eax, [ebp - 0xf8]
mov edx, 2
call fcn.0060c393
pop ecx
test cl, cl
je 0x423354
mov dl, 1
mov eax, ebx
call fcn.004c70fb
mov ecx, dword [ebp + 8]
mov edx, ebx
mov eax, dword [ecx + 0x3e0]
call fcn.004c576b
inc esi
mov eax, dword [ebp - 0x130]
mov edx, dword [eax]
call dword [edx + 0x14]
cmp esi, eax
jl 0x42325b
mov ecx, dword [ebp - 0x130]
mov dword [ebp - 0x100], ecx
cmp dword [ebp - 0x100], 0
je 0x4233bd
mov eax, dword [ebp - 0x100]
mov edx, dword [eax]
mov dword [ebp - 0xfc], edx
mov word [ebp - 0x114], 0x29c
mov edx, 3
mov eax, dword [ebp - 0x100]
mov ecx, dword [eax]
call dword [ecx - 4]
mov word [ebp - 0x114], 0x290
mov eax, dword [ebp - 0xe8]
call fcn.004ee7df
mov ecx, dword [ebp + 8]
cmp dword [0x6a2c44], 0
setne dl
mov eax, dword [ecx + 0x440]
and edx, 1
mov ecx, dword [eax]
call dword [ecx + 0x110]
mov eax, dword [ebp + 8]
cmp dword [0x6a2c40], 0
setne dl
mov eax, dword [eax + 0x430]
and edx, 1
mov ecx, dword [eax]
call dword [ecx + 0x110]
mov eax, dword [ebp + 8]
cmp dword [0x672fc4], 0
setne dl
mov eax, dword [eax + 0x42c]
and edx, 1
mov ecx, dword [eax]
call dword [ecx + 0x110]
mov eax, dword [ebp + 8]
cmp dword [0x672f70], 0
setne dl
mov eax, dword [eax + 0x3cc]
and edx, 1
mov ecx, dword [eax]
call dword [ecx + 0x110]
mov edx, dword [0x672fc4]
push edx
mov eax, dword [ebp + 8]
push eax
call fcn.0042a6ff
add esp, 8
call fcn.0043217f
push 0
push 1
mov edx, dword [0x6724f0]
push edx
call fcn.0042371b
add esp, 0xc
mov dword [0x672fb0], eax
push 0
push 1
mov ecx, dword [0x67248c]
push ecx
call fcn.0042377b
add esp, 0xc
mov eax, dword [0x67235c]
push 0
push 1
push eax
call fcn.004237db
add esp, 0xc
mov dword [0x672fb4], eax
push 0
push 1
mov edx, dword [0x672428]
push edx
call fcn.0042383b
add esp, 0xc
mov dword [0x672fac], eax
dec dword [ebp - 0x108]
lea eax, [ebp - 0xe8]
mov edx, 2
call fcn.0060c393
mov word [ebp - 0x114], 0x248
mov word [ebp - 0x114], 0x14
jmp 0x42350b
dec dword [ebp - 0x108]
lea eax, [ebp - 0x14]
mov edx, 2
call fcn.0060ccc7
dec dword [ebp - 0x108]
push 2
lea ecx, [ebp - 0x10]
push ecx
call fcn.004727e7
add esp, 8
dec dword [ebp - 0x108]
push 2
lea eax, [ebp - 4]
push eax
call fcn.00473ba7
add esp, 8
mov edx, dword [ebp - 0x124]
mov dword fs:[0], edx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret