Function at 0x669a78
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffae4
push ebx
xor edx, edx
mov dword [ebp - 0x414], edx
mov dword [ebp - 0x418], edx
mov dword [ebp - 0x41c], edx
mov dword [ebp - 0x1c], edx
mov dword [ebp - 0x20], edx
mov dword [ebp - 0x24], edx
mov dword [ebp - 0x28], edx
mov dword [ebp - 0x2c], edx
mov dword [ebp - 0x30], edx
mov dword [ebp - 0xc4], edx
mov dword [ebp - 4], eax
lea eax, [ebp - 0x410]
mov edx, dword [0x408370]
call fcn.00404770
xor eax, eax
push ebp
push 0x66e526
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x8414b8]
cmp byte [eax], 0
je 0x669ae6
mov dword [ebp - 0x10], 1
jmp case.default.0x66a311
mov eax, dword [ebp - 4]
mov eax, dword [eax + 8]
mov dword [ebp - 8], eax
mov eax, dword [ebp - 4]
mov dword [eax + 0xc], 1
mov eax, dword [ebp - 8]
mov eax, dword [eax]
and eax, 0xffff
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 4]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 8]
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0xc4]
call fcn.00403e74
mov eax, dword [ebp - 0x18]
dec eax
test eax, eax
jl 0x669b69
inc eax
mov dword [ebp - 0xe4], eax
mov dword [ebp - 0x10], 0
lea eax, [ebp - 0x414]
mov edx, dword [ebp - 0xc]
mov ecx, dword [ebp - 0x10]
mov dl, byte [edx + ecx]
call fcn.00404018
mov edx, dword [ebp - 0x414]
lea eax, [ebp - 0xc4]
call fcn.004040f8
inc dword [ebp - 0x10]
dec dword [ebp - 0xe4]
jne 0x669b39
mov eax, dword [ebp - 0xc4]
call fcn.004040f0
dec eax
jne 0x669b8d
mov eax, dword [ebp - 0xc4]
cmp byte [eax], 0
jne 0x669b8d
lea eax, [ebp - 0xc4]
call fcn.00403e74
mov eax, dword [ebp - 4]
mov eax, dword [eax + 4]
mov dword [0x94a9dc], eax
mov eax, dword [0x840bf0]
mov edx, 0x66e534
xor ecx, ecx
mov cl, byte [eax]
inc ecx
call fcn.00402dd0
je 0x669bc4
mov eax, dword [0x840698]
mov edx, 0x66e540
xor ecx, ecx
mov cl, byte [eax]
inc ecx
call fcn.00402dd0
jne 0x669bd2
mov eax, dword [0x841c10]
cmp byte [eax], 0
je 0x669da6
cmp dword [ebp - 0x14], 0x3d
je 0x669d8b
cmp dword [ebp - 0x14], 0x3e
je 0x669d8b
cmp dword [ebp - 0x14], 0x3f
je 0x669d8b
cmp dword [ebp - 0x14], 0x5b
je 0x669d8b
cmp dword [ebp - 0x14], 0x5c
je 0x669d8b
cmp dword [ebp - 0x14], 0x60
je 0x669d8b
cmp dword [ebp - 0x14], 0x61
je 0x669d8b
cmp dword [ebp - 0x14], 0x6e
je 0x669d8b
cmp dword [ebp - 0x14], 0x74
je 0x669d8b
cmp dword [ebp - 0x14], 0x6f
je 0x669d8b
cmp dword [ebp - 0x14], 0x71
je 0x669d8b
cmp dword [ebp - 0x14], 0x72
je 0x669d8b
cmp dword [ebp - 0x14], 0x73
je 0x669d8b
cmp dword [ebp - 0x14], 0x78
je 0x669d8b
cmp dword [ebp - 0x14], 0x79
je 0x669d8b
cmp dword [ebp - 0x14], 0x82
je 0x669d8b
cmp dword [ebp - 0x14], 0xa0
je 0x669d8b
cmp dword [ebp - 0x14], 0xa1
je 0x669d8b
cmp dword [ebp - 0x14], 0xa2
je 0x669d8b
cmp dword [ebp - 0x14], 0xa3
je 0x669d8b
cmp dword [ebp - 0x14], 0xa4
je 0x669d8b
cmp dword [ebp - 0x14], 0xa5
je 0x669d8b
cmp dword [ebp - 0x14], 0x1f5
je 0x669d8b
cmp dword [ebp - 0x14], 0x1f6
je 0x669d8b
cmp dword [ebp - 0x14], 0x1f7
je 0x669d8b
cmp dword [ebp - 0x14], 0x1389
je 0x669d8b
cmp dword [ebp - 0x14], 0x138a
je 0x669d8b
cmp dword [ebp - 0x14], 0x138b
je 0x669d8b
cmp dword [ebp - 0x14], 0x138c
je 0x669d8b
cmp dword [ebp - 0x14], 0x138d
je 0x669d8b
cmp dword [ebp - 0x14], 0x138e
je 0x669d8b
cmp dword [ebp - 0x14], 0x138f
je 0x669d8b
cmp dword [ebp - 0x14], 0x1390
je 0x669d8b
cmp dword [ebp - 0x14], 0x1391
je 0x669d8b
cmp dword [ebp - 0x14], 0x1392
je 0x669d8b
cmp dword [ebp - 0x14], 0x1393
je 0x669d8b
cmp dword [ebp - 0x14], 0x177c
je 0x669d8b
cmp dword [ebp - 0x14], 0x177d
je 0x669d8b
cmp dword [ebp - 0x14], 0x177e
je 0x669d8b
cmp dword [ebp - 0x14], 0x177f
je 0x669d8b
cmp dword [ebp - 0x14], 0x1799
je 0x669d8b
cmp dword [ebp - 0x14], 0x179a
jne 0x669da6
lea edx, [ebp - 0x414]
mov eax, 0x66775c
call fcn.00405e74
mov eax, dword [ebp - 0x414]
call fcn.0044b3e4
mov eax, dword [ebp - 0x14]
cmp eax, 0x13a
jg 0x66a116
je 0x66d07b
cmp eax, 0x72
jg 0x669fa1
je 0x66bf9b
cmp eax, 0x71
ja case.default.0x66a311
jmp dword [eax*4 + 0x669dd9]
cmp eax, 0xb5
jg 0x66a07b
je 0x66c6fd
cmp eax, 0x96
jg 0x66a012
je 0x66c4ca
add eax, 0xffffff8d
cmp eax, 0xf
ja case.default.0x66a311
jmp dword [eax*4 + 0x669fd2]
add eax, 0xffffff60
cmp eax, 0x14
ja case.default.0x66a311
jmp dword [eax*4 + 0x66a027]
cmp eax, 0xd4
jg 0x66a0c9
je 0x66cac5
add eax, 0xffffff37
cmp eax, 0xa
ja case.default.0x66a311
jmp dword [eax*4 + 0x66a09d]
cmp eax, 0xe6
jg 0x66a0f8
je 0x66cc22
sub eax, 0xd5
je 0x66cae3
sub eax, 7
je 0x66cb01
sub eax, 5
je 0x66cc0b
jmp case.default.0x66a311
sub eax, 0x137
je 0x66cc48
dec eax
je 0x66cd4f
dec eax
je 0x66cec7
jmp case.default.0x66a311
cmp eax, 0x138e
jg 0x66a25a
je 0x66d84b
cmp eax, 0x1f8
jg 0x66a1cf
je 0x66d3d5
cmp eax, 0x169
jg 0x66a186
je 0x66d2d5
add eax, 0xfffffea2
cmp eax, 0xa
ja case.default.0x66a311
jmp dword [eax*4 + 0x66a15a]
cmp eax, 0x16d
jg 0x66a1b1
je 0x66d35a
sub eax, 0x16a
je 0x66d2ec
dec eax
je 0x66d303
dec eax
je 0x66d343
jmp case.default.0x66a311
sub eax, 0x1f5
je 0x66d371
dec eax
je 0x66d38a
dec eax
je 0x66d3a1
jmp case.default.0x66a311
cmp eax, 0x200
jg 0x66a20d
je 0x66d4f6
add eax, 0xfffffe07
cmp eax, 6
ja case.default.0x66a311
jmp dword [eax*4 + 0x66a1f1]
cmp eax, 0x138a
jg 0x66a23c
je 0x66d699
sub eax, 0x3e9
je 0x66d510
dec eax
je 0x66d538
sub eax, 0xf9f
je 0x66d67f
jmp case.default.0x66a311
sub eax, 0x138b
je 0x66d6b3
dec eax
je 0x66d72c
dec eax
je 0x66d834
jmp case.default.0x66a311
cmp eax, 0x177b
jg 0x66a2f6
je 0x66dd82
cmp eax, 0x1773
jg 0x66a2c5
je 0x66da29
cmp eax, 0x1392
jg 0x66a2a3
je 0x66d908
sub eax, 0x138f
je 0x66d8b2
dec eax
je 0x66d8cc
dec eax
je 0x66d8e6
jmp case.default.0x66a311
sub eax, 0x1393
je 0x66d92a
sub eax, 0x3de
je 0x66d98d
dec eax
je 0x66d9db
jmp case.default.0x66a311
add eax, 0xffffe88c
cmp eax, 6
ja case.default.0x66a311
jmp dword [eax*4 + 0x66a2da]
cmp eax, 0x178e
jg 0x66a334
je 0x66e104
add eax, 0xffffe884
cmp eax, 6
ja case.default.0x66a311
jmp dword [eax*4 + 0x66a318]
cmp eax, 0x179b
jg 0x66a35f
je 0x66e3a6
sub eax, 0x1798
je 0x66e1d5
dec eax
je 0x66e29f
dec eax
je 0x66e356
jmp case.default.0x66a311
sub eax, 0x270f
je 0x66a38b
sub eax, 2
je 0x66a37b
sub eax, 0x1501b
je 0x66e418
jmp case.default.0x66a311
mov eax, dword [ebp - 4]
mov eax, dword [eax + 4]
mov dword [0x94a9dc], eax
jmp case.default.0x66a311
mov eax, dword [0x841c10]
cmp byte [eax], 0
je 0x66a3a7
mov edx, 0x66e550
mov eax, dword [ebp - 0x14]
call fcn.006699f8
jmp case.default.0x66a311
lea eax, [ebp - 0x418]
call fcn.0078741c
push dword [ebp - 0x418]
push 0x66e55c
lea edx, [ebp - 0x41c]
mov eax, 0x66e568
call fcn.0079fddc
push dword [ebp - 0x41c]
lea eax, [ebp - 0x414]
mov edx, 3
call fcn.004041b0
mov eax, dword [ebp - 0x414]
lea ecx, [ebp - 0x410]
mov edx, 0x3f
call fcn.00409910
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x60], 0x9c
cmp dword [ebp - 0x5c], 0
jne 0x66a412
mov eax, dword [ebp - 0x40c]
mov dword [ebp - 0x60], eax
lea eax, [ebp - 0x410]
call fcn.00409980
cmp dword [ebp - 0x60], 0x50
jne 0x66a44b
mov eax, dword [0x840698]
mov edx, 0x66e540
xor ecx, ecx
mov cl, byte [eax]
inc ecx
call fcn.00402dd0
jne 0x66a44b
mov edx, 0x66e57c
mov eax, dword [ebp - 0x14]
call fcn.006699f8
jmp case.default.0x66a311
mov edx, 0x66e588
mov eax, dword [ebp - 0x14]
call fcn.006699f8
jmp case.default.0x66a311
mov edx, 0x66e588
mov eax, dword [ebp - 0x14]
call fcn.006699f8
mov eax, dword [0x8417e4]
mov eax, dword [eax]
call fcn.0042d444
jmp case.default.0x66a311
mov eax, dword [0x8415a0]
mov eax, dword [eax]
mov dl, 2
call fcn.004285e8
mov edx, 0x66e588
mov eax, dword [ebp - 0x14]
call fcn.006699f8
jmp case.default.0x66a311
mov eax, dword [0x8415a0]
mov eax, dword [eax]
mov dl, 1
call fcn.004285e8
mov edx, 0x66e588
mov eax, dword [ebp - 0x14]
call fcn.006699f8
jmp case.default.0x66a311
mov eax, dword [0x8415a0]
mov eax, dword [eax]
mov eax, dword [eax + 0x7bc]
xor edx, edx
call fcn.00433f2c
mov edx, 0x66e588
mov eax, dword [ebp - 0x14]
call fcn.006699f8
jmp case.default.0x66a311
mov eax, dword [0x8415a0]
mov eax, dword [eax]
mov eax, dword [eax + 0x7bc]
mov dl, 1
call fcn.00433f2c
mov edx, 0x66e588
mov eax, dword [ebp - 0x14]
call fcn.006699f8
jmp case.default.0x66a311
lea eax, [ebp - 0x1c]
call fcn.0078741c
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x14]
call fcn.006699f8
jmp case.default.0x66a311
lea eax, [ebp - 0x1c]
mov edx, 0x66e594
call fcn.00403f0c
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x14]
call fcn.006699f8
jmp case.default.0x66a311
lea eax, [ebp - 0x1c]
mov edx, dword [0x84125c]
mov edx, dword [edx]
shl edx, 2
lea edx, [edx + edx*2]
mov ecx, dword [0x84160c]
lea edx, [ecx + edx*8 + 0x25]
call fcn.00404094
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x14]
call fcn.006699f8
jmp case.default.0x66a311
lea eax, [ebp - 0x1c]
mov edx, dword [ebp - 0xc4]
call fcn.00403f0c
lea eax, [ebp - 0x20]
push eax
mov ecx, 0x66e5a4
mov edx, 1
mov eax, dword [ebp - 0x1c]
call fcn.0044cef8
lea eax, [ebp - 0x24]
push eax
mov ecx, 0x66e5a4
mov edx, 2
mov eax, dword [ebp - 0x1c]
call fcn.0044cef8
push 0
push 0
mov edx, 3
mov eax, dword [ebp - 0x1c]
call fcn.0044d018
fstp qword [ebp - 0x38]
wait
push 0
push 0
mov edx, 4
mov eax, dword [ebp - 0x1c]
call fcn.0044d018
fstp qword [ebp - 0x40]
wait
lea eax, [ebp - 0x40]
push eax
mov eax, dword [ebp - 0x24]
call fcn.00558658
push eax
mov eax, dword [ebp - 0x20]
call fcn.00558658
lea ecx, [ebp - 0x38]
pop edx
call fcn.0055a94c
push dword [ebp - 0x34]
push dword [ebp - 0x38]
lea ecx, [ebp - 0x414]
mov edx, 0xb
mov eax, 0x14
call fcn.007876e8
mov edx, dword [ebp - 0x414]
lea eax, [ebp - 0x1c]
mov ecx, 0x66e5b4
call fcn.0040413c
push dword [ebp - 0x3c]
push dword [ebp - 0x40]
lea ecx, [ebp - 0x24]
mov edx, 0xb
mov eax, 0x14
call fcn.007876e8
push dword [ebp - 0x1c]
push dword [ebp - 0x24]
push 0x66e5b4
lea eax, [ebp - 0x1c]
mov edx, 3
call fcn.004041b0
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x14]
call fcn.006699f8
jmp case.default.0x66a311
lea eax, [ebp - 0x1c]
mov edx, dword [ebp - 0xc4]
call fcn.00403f0c
xor ecx, ecx
mov edx, 1
mov eax, dword [ebp - 0x1c]
call fcn.0044d1c8
mov dword [ebp - 0x5c], eax
push 0
push 0
mov edx, 2
mov eax, dword [ebp - 0x1c]
call fcn.0044d018
fstp qword [ebp - 0x38]
wait
push 0
push 0
mov edx, 3
mov eax, dword [ebp - 0x1c]
call fcn.0044d018
fstp qword [ebp - 0x40]
wait
lea eax, [ebp - 0x30]
push eax
mov ecx, 0x66e5a4
mov edx, 4
mov eax, dword [ebp - 0x1c]
call fcn.0044cef8
push 0
push 0
mov edx, 5
mov eax, dword [ebp - 0x1c]
call fcn.0044d018
fstp qword [ebp - 0x94]
wait
push 0
push 0
mov edx, 6
mov eax, dword [ebp - 0x1c]
call fcn.0044d018
fstp qword [ebp - 0x9c]
wait
push 0
push 0
mov edx, 7
mov eax, dword [ebp - 0x1c]
call fcn.0044d018
fstp qword [ebp - 0xa4]
wait
push 0
push 0
mov edx, 8
mov eax, dword [ebp - 0x1c]
call fcn.0044d018
fstp qword [ebp - 0x48]
wait
push 0
push 0
mov edx, 9
mov eax, dword [ebp - 0x1c]
call fcn.0044d018
fstp qword [ebp - 0xac]
wait
push 0
push 0
mov edx, 0xa
mov eax, dword [ebp - 0x1c]
call fcn.0044d018
fstp qword [ebp - 0xb4]
wait
push 0
push 0
mov edx, 0xb
mov eax, dword [ebp - 0x1c]
call fcn.0044d018
fstp qword [ebp - 0xbc]
wait
lea eax, [ebp - 0x24]
mov edx, 0x66e5c0
call fcn.00403f0c
mov eax, dword [ebp - 0x5c]
cmp eax, 0x17
ja case.0x66a77a.16
jmp dword [eax*4 + 0x66a781]
lea eax, [ebp - 0x24]
mov edx, 0x66e5c0
call fcn.00403f0c
jmp case.0x66a77a.16
lea eax, [ebp - 0x24]
mov edx, 0x66e5cc
call fcn.00403f0c
jmp case.0x66a77a.16
lea eax, [ebp - 0x24]
mov edx, 0x66e5d8
call fcn.00403f0c
jmp case.0x66a77a.16
lea eax, [ebp - 0x24]
mov edx, 0x66e5e8
call fcn.00403f0c
jmp case.0x66a77a.16
lea eax, [ebp - 0x24]
mov edx, 0x66e5f4
call fcn.00403f0c
jmp case.0x66a77a.16
lea eax, [ebp - 0x24]
mov edx, 0x66e600
call fcn.00403f0c
jmp case.0x66a77a.16
lea eax, [ebp - 0x24]
mov edx, 0x66e60c
call fcn.00403f0c
jmp case.0x66a77a.16
lea eax, [ebp - 0x24]
mov edx, 0x66e618
call fcn.00403f0c
jmp case.0x66a77a.16
lea eax, [ebp - 0x24]
mov edx, 0x66e624
call fcn.00403f0c
jmp case.0x66a77a.16
lea eax, [ebp - 0x24]
mov edx, 0x66e630
call fcn.00403f0c
jmp case.0x66a77a.16
lea eax, [ebp - 0x24]
mov edx, 0x66e63c
call fcn.00403f0c
jmp case.0x66a77a.16
lea eax, [ebp - 0x24]
mov edx, 0x66e648
call fcn.00403f0c
jmp case.0x66a77a.16
lea eax, [ebp - 0x24]
mov edx, 0x66e654
call fcn.00403f0c
jmp case.0x66a77a.16
lea eax, [ebp - 0x24]
mov edx, 0x66e664
call fcn.00403f0c
jmp case.0x66a77a.16
lea eax, [ebp - 0x24]
mov edx, 0x66e674
call fcn.00403f0c
jmp case.0x66a77a.16
lea eax, [ebp - 0x24]
mov edx, 0x66e684
call fcn.00403f0c
jmp case.0x66a77a.16
lea eax, [ebp - 0x24]
mov edx, 0x66e694
call fcn.00403f0c
jmp case.0x66a77a.16
lea eax, [ebp - 0x24]
mov edx, 0x66e6a4
call fcn.00403f0c
jmp case.0x66a77a.16
lea eax, [ebp - 0x24]
mov edx, 0x66e6b4
call fcn.00403f0c
push dword [ebp - 0x34]
push dword [ebp - 0x38]
push dword [ebp - 0x3c]
push dword [ebp - 0x40]
lea eax, [ebp - 0x8c]
push eax
mov eax, dword [ebp - 0x30]
call fcn.00558658
push eax
push dword [ebp - 0x90]
push dword [ebp - 0x94]
push dword [ebp - 0x98]
push dword [ebp - 0x9c]
push dword [ebp - 0xa0]
push dword [ebp - 0xa4]
push dword [ebp - 0x44]
push dword [ebp - 0x48]
push dword [ebp - 0xa8]
push dword [ebp - 0xac]
push dword [ebp - 0xb0]
push dword [ebp - 0xb4]
push dword [ebp - 0xb8]
push dword [ebp - 0xbc]
lea ecx, [ebp - 0x84]
lea edx, [ebp - 0x2c]
mov eax, dword [ebp - 0x24]
call fcn.00573c5c
lea eax, [ebp - 0x1c]
mov ecx, 0x66e5b4
mov edx, dword [ebp - 0x2c]
call fcn.0040413c
push dword [ebp - 0x1c]
push dword [ebp - 0x80]
push dword [ebp - 0x84]
lea ecx, [ebp - 0x414]
mov edx, 4
mov eax, 0x14
call fcn.007876e8
push dword [ebp - 0x414]
push 0x66e5b4
lea eax, [ebp - 0x1c]
mov edx, 3
call fcn.004041b0
push dword [ebp - 0x1c]
push dword [ebp - 0x88]
push dword [ebp - 0x8c]
lea ecx, [ebp - 0x414]
mov edx, 4
mov eax, 0x14
call fcn.007876e8
push dword [ebp - 0x414]
push 0x66e5b4
lea eax, [ebp - 0x1c]
mov edx, 3
call fcn.004041b0
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x14]
call fcn.006699f8
jmp case.default.0x66a311
lea eax, [ebp - 0x1c]
mov edx, dword [ebp - 0xc4]
call fcn.00403f0c
xor ecx, ecx
mov edx, 1
mov eax, dword [ebp - 0x1c]
call fcn.0044d1c8
mov dword [ebp - 0x5c], eax
lea eax, [ebp - 0x20]
push eax
mov ecx, 0x66e550
mov edx, 2
mov eax, dword [ebp - 0x1c]
call fcn.0044cef8
lea eax, [ebp - 0x414]
push eax
mov ecx, 0x66e6c8
mov edx, 3
mov eax, dword [ebp - 0x1c]
call fcn.0044cef8
mov eax, dword [ebp - 0x414]
lea edx, [ebp - 0x28]
call fcn.00408fa8
push 0
push 0
mov edx, 4
mov eax, dword [ebp - 0x1c]
call fcn.0044d018
fstp qword [ebp - 0x84]
wait
push 0
push 0
mov edx, 5
mov eax, dword [ebp - 0x1c]
call fcn.0044d018
fstp qword [ebp - 0x8c]
wait
lea eax, [ebp - 0x30]
push eax
mov ecx, 0x66e5a4
mov edx, 6
mov eax, dword [ebp - 0x1c]
call fcn.0044cef8
push 0
push 0
mov edx, 7
mov eax, dword [ebp - 0x1c]
call fcn.0044d018
fstp qword [ebp - 0x94]
wait
push 0
push 0
mov edx, 8
mov eax, dword [ebp - 0x1c]
call fcn.0044d018
fstp qword [ebp - 0x9c]
wait
push 0
push 0
mov edx, 9
mov eax, dword [ebp - 0x1c]
call fcn.0044d018
fstp qword [ebp - 0xa4]
wait
push 0
push 0
mov edx, 0xa
mov eax, dword [ebp - 0x1c]
call fcn.0044d018
fstp qword [ebp - 0x48]
wait
push 0
push 0
mov edx, 0xb
mov eax, dword [ebp - 0x1c]
call fcn.0044d018
fstp qword [ebp - 0xac]
wait
push 0
push 0
mov edx, 0xc
mov eax, dword [ebp - 0x1c]
call fcn.0044d018
fstp qword [ebp - 0xb4]
wait
push 0
push 0
mov edx, 0xd
mov eax, dword [ebp - 0x1c]
call fcn.0044d018
fstp qword [ebp - 0xbc]
wait
lea eax, [ebp - 0x24]
mov edx, 0x66e5c0
call fcn.00403f0c
mov eax, dword [ebp - 0x5c]
cmp eax, 0x17
ja case.0x66ab8b.16
jmp dword [eax*4 + 0x66ab92]
lea eax, [ebp - 0x24]
mov edx, 0x66e5c0
call fcn.00403f0c
jmp case.0x66ab8b.16
lea eax, [ebp - 0x24]
mov edx, 0x66e5cc
call fcn.00403f0c
jmp case.0x66ab8b.16
lea eax, [ebp - 0x24]
mov edx, 0x66e5d8
call fcn.00403f0c
jmp case.0x66ab8b.16
lea eax, [ebp - 0x24]
mov edx, 0x66e5e8
call fcn.00403f0c
jmp case.0x66ab8b.16
lea eax, [ebp - 0x24]
mov edx, 0x66e5f4
call fcn.00403f0c
jmp case.0x66ab8b.16
lea eax, [ebp - 0x24]
mov edx, 0x66e600
call fcn.00403f0c
jmp case.0x66ab8b.16
lea eax, [ebp - 0x24]
mov edx, 0x66e60c
call fcn.00403f0c
jmp case.0x66ab8b.16
lea eax, [ebp - 0x24]
mov edx, 0x66e618
call fcn.00403f0c
jmp case.0x66ab8b.16
lea eax, [ebp - 0x24]
mov edx, 0x66e624
call fcn.00403f0c
jmp case.0x66ab8b.16
lea eax, [ebp - 0x24]
mov edx, 0x66e630
call fcn.00403f0c
jmp case.0x66ab8b.16
lea eax, [ebp - 0x24]
mov edx, 0x66e63c
call fcn.00403f0c
jmp case.0x66ab8b.16
lea eax, [ebp - 0x24]
mov edx, 0x66e648
call fcn.00403f0c
jmp case.0x66ab8b.16
lea eax, [ebp - 0x24]
mov edx, 0x66e654
call fcn.00403f0c
jmp case.0x66ab8b.16
lea eax, [ebp - 0x24]
mov edx, 0x66e664
call fcn.00403f0c
jmp case.0x66ab8b.16
lea eax, [ebp - 0x24]
mov edx, 0x66e674
call fcn.00403f0c
jmp case.0x66ab8b.16
lea eax, [ebp - 0x24]
mov edx, 0x66e684
call fcn.00403f0c
jmp case.0x66ab8b.16
lea eax, [ebp - 0x24]
mov edx, 0x66e694
call fcn.00403f0c
jmp case.0x66ab8b.16
lea eax, [ebp - 0x24]
mov edx, 0x66e6a4
call fcn.00403f0c
jmp case.0x66ab8b.16
lea eax, [ebp - 0x24]
mov edx, 0x66e6b4
call fcn.00403f0c
push dword [ebp - 0x80]
push dword [ebp - 0x84]
push dword [ebp - 0x88]
push dword [ebp - 0x8c]
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x40]
push eax
mov eax, dword [ebp - 0x30]
call fcn.00558658
push eax
push dword [ebp - 0x90]
push dword [ebp - 0x94]
push dword [ebp - 0x98]
push dword [ebp - 0x9c]
push dword [ebp - 0xa0]
push dword [ebp - 0xa4]
push dword [ebp - 0x44]
push dword [ebp - 0x48]
push dword [ebp - 0xa8]
push dword [ebp - 0xac]
push dword [ebp - 0xb0]
push dword [ebp - 0xb4]
push dword [ebp - 0xb8]
push dword [ebp - 0xbc]
mov ecx, dword [ebp - 0x28]
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x24]
call fcn.00574198
push dword [ebp - 0x34]
push dword [ebp - 0x38]
lea ecx, [ebp - 0x418]
mov edx, 0xb
mov eax, 0x10
call fcn.007876e8
mov eax, dword [ebp - 0x418]
lea edx, [ebp - 0x414]
call fcn.00792bbc
mov edx, dword [ebp - 0x414]
lea eax, [ebp - 0x1c]
mov ecx, 0x66e5b4
call fcn.0040413c
push dword [ebp - 0x1c]
push dword [ebp - 0x3c]
push dword [ebp - 0x40]
lea ecx, [ebp - 0x418]
mov edx, 0xb
mov eax, 0x10
call fcn.007876e8
mov eax, dword [ebp - 0x418]
lea edx, [ebp - 0x414]
call fcn.00792bbc
push dword [ebp - 0x414]
push 0x66e5b4
lea eax, [ebp - 0x1c]
mov edx, 3
call fcn.004041b0
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x14]
call fcn.006699f8
jmp case.default.0x66a311
lea eax, [ebp - 0x1c]
mov edx, dword [ebp - 0xc4]
call fcn.00403f0c
xor ecx, ecx
mov edx, 1
mov eax, dword [ebp - 0x1c]
call fcn.0044d1c8
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 1
jne 0x66ae73
mov eax, dword [0x84175c]
mov byte [eax], 1
jmp 0x66ae7b
mov eax, dword [0x84175c]
mov byte [eax], 0
mov edx, 0x66e588
mov eax, dword [ebp - 0x14]
call fcn.006699f8
jmp case.default.0x66a311
lea eax, [ebp - 0x1c]
mov edx, dword [ebp - 0xc4]
call fcn.00403f0c
xor ecx, ecx
mov edx, 1
mov eax, dword [ebp - 0x1c]
call fcn.0044d1c8
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 1
jne 0x66aebd
mov eax, dword [0x840b30]
mov byte [eax], 1
jmp 0x66aec5
mov eax, dword [0x840b30]
mov byte [eax], 0
mov edx, 0x66e588
mov eax, dword [ebp - 0x14]
call fcn.006699f8
jmp case.default.0x66a311
lea eax, [ebp - 0x1c]
mov edx, dword [ebp - 0xc4]
call fcn.00403f0c
xor ecx, ecx
mov edx, 1
mov eax, dword [ebp - 0x1c]
call fcn.0044d1c8
mov dword [ebp - 0x10], eax
xor ecx, ecx
mov edx, 2
mov eax, dword [ebp - 0x1c]
call fcn.0044d1c8
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 1
jne 0x66af1d
mov eax, dword [0x841f00]
mov edx, dword [ebp - 0x10]
mov byte [eax + edx], 1
jmp 0x66af29
mov eax, dword [0x841f00]
mov edx, dword [ebp - 0x10]
mov byte [eax + edx], 0
mov edx, 0x66e588
mov eax, dword [ebp - 0x14]
call fcn.006699f8
jmp case.default.0x66a311
lea eax, [ebp - 0x1c]
mov edx, dword [ebp - 0xc4]
call fcn.00403f0c
xor ecx, ecx
mov edx, 1
mov eax, dword [ebp - 0x1c]
call fcn.0044d1c8
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 1
jne 0x66af6b
mov eax, dword [0x841a2c]
mov byte [eax], 1
jmp 0x66af73
mov eax, dword [0x841a2c]
mov byte [eax], 0
mov edx, 0x66e588
mov eax, dword [ebp - 0x14]
call fcn.006699f8
jmp case.default.0x66a311
lea eax, [ebp - 0x1c]
mov edx, dword [ebp - 0xc4]
call fcn.00403f0c
xor ecx, ecx
mov edx, 1
mov eax, dword [ebp - 0x1c]
call fcn.0044d1c8
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 1
jne 0x66afb5
mov eax, dword [0x842224]
mov byte [eax], 1
jmp 0x66afbd
mov eax, dword [0x842224]
mov byte [eax], 0
mov edx, 0x66e588
mov eax, dword [ebp - 0x14]
call fcn.006699f8
jmp case.default.0x66a311
mov eax, dword [0x840b30]
mov byte [eax], 1
mov al, 1
call fcn.0078e6d4
call fcn.007a753c
mov eax, dword [0x841774]
mov eax, dword [eax]
call fcn.00720128
mov edx, 0x66e588
mov eax, dword [ebp - 0x14]
call fcn.006699f8
jmp case.default.0x66a311
mov eax, dword [0x840f80]
mov byte [eax], 1
call fcn.0078e988
call fcn.007a753c
mov eax, dword [0x841774]
mov eax, dword [eax]
call fcn.00720128
mov edx, 0x66e588
mov eax, dword [ebp - 0x14]
call fcn.006699f8
jmp case.default.0x66a311
mov eax, dword [0x842224]
mov byte [eax], 1
call fcn.00793404
mov eax, dword [0x8409b0]
mov eax, dword [eax]
xor ecx, ecx
xor edx, edx
call fcn.00703740
call fcn.007a753c
mov eax, dword [0x841774]
mov eax, dword [eax]
call fcn.00720128
mov edx, 0x66e588
mov eax, dword [ebp - 0x14]
call fcn.006699f8
jmp case.default.0x66a311
mov al, 1
call fcn.0079303c
mov al, 1
call fcn.0071a16c
call fcn.007a753c
mov eax, dword [0x841774]
mov eax, dword [eax]
call fcn.00720128
mov edx, 0x66e588
mov eax, dword [ebp - 0x14]
call fcn.006699f8
jmp case.default.0x66a311
mov eax, dword [0x841a2c]
mov byte [eax], 1
mov al, 1
call fcn.0070926c
call fcn.007a753c
mov eax, dword [0x841774]
mov eax, dword [eax]
call fcn.00720128
mov edx, 0x66e588
mov eax, dword [ebp - 0x14]
call fcn.006699f8
jmp case.default.0x66a311
call fcn.0078e5d8
call fcn.007a753c
mov eax, dword [0x841774]
mov eax, dword [eax]
call fcn.00720128
mov edx, 0x66e588
mov eax, dword [ebp - 0x14]
call fcn.006699f8
jmp case.default.0x66a311
call fcn.0078e510
call fcn.007a753c
mov eax, dword [0x841774]
mov eax, dword [eax]
call fcn.00720128
mov edx, 0x66e588
mov eax, dword [ebp - 0x14]
call fcn.006699f8
jmp case.default.0x66a311
mov dword [ebp - 0x5c], 0xffffffff
mov eax, dword [0x84065c]
mov eax, dword [eax]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0x2710
jle 0x66b146
mov dword [ebp - 0x5c], 0xffffffff
cmp dword [ebp - 0x5c], 0xffffffff
jne 0x66b15e
mov edx, 0x66e550
mov eax, dword [ebp - 0x14]
call fcn.006699f8
jmp case.default.0x66a311
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x1c]
mov edx, dword [ebp - 0xc4]
call fcn.00403f0c
lea eax, [ebp - 0x20]
push eax
mov ecx, 0x66e6d4
mov edx, 1
mov eax, dword [ebp - 0x1c]
call fcn.0044cef8
mov eax, dword [ebp - 0x20]
mov edx, 0x66e6e0
call fcn.00404200
jne case.default.0x66a311
mov eax, dword [ebp - 0x10]
call fcn.007075d4
lea eax, [ebp - 0x20]
push eax
lea edx, [ebp - 0x414]
mov eax, dword [ebp - 0x10]
call fcn.004094a8
mov ecx, dword [ebp - 0x414]
mov edx, 2
mov eax, dword [ebp - 0x1c]
call fcn.0044cef8
mov eax, dword [ebp - 0x10]
shl eax, 4
mov edx, dword [0x840ecc]
lea eax, [edx + eax*8 - 0x80]
mov edx, dword [ebp - 0x20]
call fcn.00403ec8
or ecx, 0xffffffff
mov edx, 3
mov eax, dword [ebp - 0x1c]
call fcn.0044d1c8
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0xffffffff
je 0x66b20e
mov eax, dword [ebp - 0x10]
shl eax, 4
mov edx, dword [0x840ecc]
mov cx, word [ebp - 0x5c]
mov word [edx + eax*8 - 0x78], cx
push 0
push 0
mov edx, 4
mov eax, dword [ebp - 0x1c]
call fcn.0044d018
fstp qword [ebp - 0x38]
wait
push 0
push 0
mov edx, 5
mov eax, dword [ebp - 0x1c]
call fcn.0044d018
fstp qword [ebp - 0x40]
wait
lea eax, [ebp - 0x40]
push eax
mov eax, 0x66e5a4
call fcn.00558658
lea ecx, [ebp - 0x38]
mov edx, dword [0x84125c]
mov edx, dword [edx]
call fcn.0055a94c
mov eax, dword [ebp - 0x10]
shl eax, 4
mov edx, dword [0x840ecc]
mov ecx, dword [ebp - 0x40]
mov dword [edx + eax*8 - 0x74], ecx
mov ecx, dword [ebp - 0x3c]
mov dword [edx + eax*8 - 0x70], ecx
mov eax, dword [ebp - 0x10]
shl eax, 4
mov edx, dword [0x840ecc]
mov ecx, dword [ebp - 0x38]
mov dword [edx + eax*8 - 0x6c], ecx
mov ecx, dword [ebp - 0x34]
mov dword [edx + eax*8 - 0x68], ecx
push 0xc0884800
push 0
mov edx, 6
mov eax, dword [ebp - 0x1c]
call fcn.0044d018
fstp qword [ebp - 0x74]
wait
fld qword [ebp - 0x74]
fcomp dword [0x66e6ec]
fnstsw ax
sahf
je 0x66b2bd
fld xword [0x66e6f0]
fmul qword [ebp - 0x74]
fstp qword [ebp - 0x74]
wait
fld qword [ebp - 0x74]
mov eax, dword [ebp - 0x10]
shl eax, 4
mov edx, dword [0x840ecc]
fstp dword [edx + eax*8 - 0x5c]
wait
push 0xbff00000
push 0
mov edx, 7
mov eax, dword [ebp - 0x1c]
call fcn.0044d018
fstp qword [ebp - 0x74]
wait
fld qword [ebp - 0x74]
fcomp dword [0x66e6fc]
fnstsw ax
sahf
je 0x66b311
mov eax, dword [ebp - 0x10]
shl eax, 4
mov edx, dword [0x840ecc]
mov ecx, dword [ebp - 0x74]
mov dword [edx + eax*8 - 0x58], ecx
mov ecx, dword [ebp - 0x70]
mov dword [edx + eax*8 - 0x54], ecx
or ecx, 0xffffffff
mov edx, 8
mov eax, dword [ebp - 0x1c]
call fcn.0044d1c8
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0xffffffff
je 0x66b33d
mov eax, dword [ebp - 0x10]
shl eax, 4
mov edx, dword [0x840ecc]
mov ecx, dword [ebp - 0x5c]
mov dword [edx + eax*8 - 0x50], ecx
or ecx, 0xffffffff
mov edx, 9
mov eax, dword [ebp - 0x1c]
call fcn.0044d1c8
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0xffffffff
je 0x66b369
mov eax, dword [ebp - 0x10]
shl eax, 4
mov edx, dword [0x840ecc]
mov ecx, dword [ebp - 0x5c]
mov dword [edx + eax*8 - 0x4c], ecx
or ecx, 0xffffffff
mov edx, 0xa
mov eax, dword [ebp - 0x1c]
call fcn.0044d1c8
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0xffffffff
je 0x66b395
mov eax, dword [ebp - 0x10]
shl eax, 4
mov edx, dword [0x840ecc]
mov ecx, dword [ebp - 0x5c]
mov dword [edx + eax*8 - 0x48], ecx
or ecx, 0xffffffff
mov edx, 0xb
mov eax, dword [ebp - 0x1c]
call fcn.0044d1c8
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0xffffffff
je 0x66b3c1
mov eax, dword [ebp - 0x10]
shl eax, 4
mov edx, dword [0x840ecc]
mov ecx, dword [ebp - 0x5c]
mov dword [edx + eax*8 - 0x44], ecx
or ecx, 0xffffffff
mov edx, 0xc
mov eax, dword [ebp - 0x1c]
call fcn.0044d1c8
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0xffffffff
je 0x66b3ed
mov eax, dword [ebp - 0x10]
shl eax, 4
mov edx, dword [0x840ecc]
mov ecx, dword [ebp - 0x5c]
mov dword [edx + eax*8 - 0x40], ecx
or ecx, 0xffffffff
mov edx, 0xd
mov eax, dword [ebp - 0x1c]
call fcn.0044d1c8
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0xffffffff
je 0x66b419
mov eax, dword [ebp - 0x10]
shl eax, 4
mov edx, dword [0x840ecc]
mov ecx, dword [ebp - 0x5c]
mov dword [edx + eax*8 - 0x3c], ecx
lea eax, [ebp - 0x20]
push eax
xor ecx, ecx
mov edx, 0xe
mov eax, dword [ebp - 0x1c]
call fcn.0044cef8
mov eax, dword [ebp - 0x10]
shl eax, 4
mov edx, dword [0x840ecc]
lea eax, [edx + eax*8 - 0x34]
mov edx, dword [ebp - 0x20]
call fcn.00403ec8
or ecx, 0xffffffff
mov edx, 0xf
mov eax, dword [ebp - 0x1c]
call fcn.0044d1c8
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0xffffffff
je 0x66b470
mov eax, dword [ebp - 0x10]
shl eax, 4
mov edx, dword [0x840ecc]
mov ecx, dword [ebp - 0x5c]
mov dword [edx + eax*8 - 0x30], ecx
or ecx, 0xffffffff
mov edx, 0x10
mov eax, dword [ebp - 0x1c]
call fcn.0044d1c8
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0xffffffff
je 0x66b49c
mov eax, dword [ebp - 0x10]
shl eax, 4
mov edx, dword [0x840ecc]
mov ecx, dword [ebp - 0x5c]
mov dword [edx + eax*8 - 0x2c], ecx
or ecx, 0xffffffff
mov edx, 0x11
mov eax, dword [ebp - 0x1c]
call fcn.0044d1c8
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0xffffffff
je 0x66b4c8
mov eax, dword [ebp - 0x10]
shl eax, 4
mov edx, dword [0x840ecc]
mov ecx, dword [ebp - 0x5c]
mov dword [edx + eax*8 - 0x28], ecx
cmp dword [ebp - 0x14], 0x5c
jne 0x66b5e5
or ecx, 0xffffffff
mov edx, 0x12
mov eax, dword [ebp - 0x1c]
call fcn.0044d1c8
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0xffffffff
je 0x66b4fe
mov eax, dword [ebp - 0x10]
shl eax, 4
mov edx, dword [0x840ecc]
mov ecx, dword [ebp - 0x5c]
mov dword [edx + eax*8 - 0x10], ecx
push 0xbff00000
push 0
mov edx, 0x13
mov eax, dword [ebp - 0x1c]
call fcn.0044d018
fstp qword [ebp - 0x74]
wait
fld qword [ebp - 0x74]
fcomp dword [0x66e6fc]
fnstsw ax
sahf
je 0x66b538
fld qword [ebp - 0x74]
mov eax, dword [ebp - 0x10]
shl eax, 4
mov edx, dword [0x840ecc]
fstp dword [edx + eax*8 - 0xc]
wait
or ecx, 0xffffffff
mov edx, 0x14
mov eax, dword [ebp - 0x1c]
call fcn.0044d1c8
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0xffffffff
je 0x66b564
mov eax, dword [ebp - 0x10]
shl eax, 4
mov edx, dword [0x840ecc]
mov ecx, dword [ebp - 0x5c]
mov dword [edx + eax*8 - 8], ecx
lea eax, [ebp - 0x20]
push eax
xor ecx, ecx
mov edx, 0x15
mov eax, dword [ebp - 0x1c]
call fcn.0044cef8
mov eax, dword [ebp - 0x10]
shl eax, 4
mov edx, dword [0x840ecc]
lea eax, [edx + eax*8 - 0x1c]
mov edx, dword [ebp - 0x20]
call fcn.00403ec8
lea eax, [ebp - 0x20]
push eax
xor ecx, ecx
mov edx, 0x16
mov eax, dword [ebp - 0x1c]
call fcn.0044cef8
mov eax, dword [ebp - 0x10]
shl eax, 4
mov edx, dword [0x840ecc]
lea eax, [edx + eax*8 - 0x18]
mov edx, dword [ebp - 0x20]
call fcn.00403ec8
lea eax, [ebp - 0x20]
push eax
xor ecx, ecx
mov edx, 0x17
mov eax, dword [ebp - 0x1c]
call fcn.0044cef8
mov eax, dword [ebp - 0x10]
shl eax, 4
mov edx, dword [0x840ecc]
lea eax, [edx + eax*8 - 0x14]
mov edx, dword [ebp - 0x20]
call fcn.00403ec8
push dword [ebp - 0x34]
push dword [ebp - 0x38]
push dword [ebp - 0x3c]
push dword [ebp - 0x40]
call fcn.0078da74
push eax
push dword [ebp - 0x34]
push dword [ebp - 0x38]
push dword [ebp - 0x3c]
push dword [ebp - 0x40]
push dword [ebp - 0x34]
push dword [ebp - 0x38]
push dword [ebp - 0x3c]
push dword [ebp - 0x40]
call fcn.0078dcd8
mov ecx, eax
mov eax, dword [0x8415a0]
mov eax, dword [eax]
mov edx, dword [ebp - 0x10]
call fcn.0076c300
lea edx, [ebp - 0x414]
mov eax, dword [ebp - 0x10]
call fcn.004094a8
mov edx, dword [ebp - 0x414]
mov eax, dword [ebp - 0x14]
call fcn.006699f8
mov eax, dword [0x840b30]
mov byte [eax], 0
mov eax, dword [0x841774]
mov eax, dword [eax]
call fcn.0071f640
call fcn.007400b8
jmp case.default.0x66a311
mov dword [ebp - 0x5c], 0xffffffff
mov dword [ebp - 0x10], 1
imul eax, dword [ebp - 0x10], 0x17
mov edx, dword [0x840e58]
fld qword [edx + eax*4]
fcomp dword [0x66e700]
fnstsw ax
sahf
jne 0x66b6a6
imul eax, dword [ebp - 0x10], 0x17
mov edx, dword [0x840e58]
fld qword [edx + eax*4 + 8]
fcomp dword [0x66e700]
fnstsw ax
sahf
jne 0x66b6a6
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x5c], eax
jmp 0x66b6b2
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0x1f5
jne 0x66b66d
cmp dword [ebp - 0x5c], 0xffffffff
jne 0x66b6ca
mov edx, 0x66e550
mov eax, dword [ebp - 0x14]
call fcn.006699f8
jmp case.default.0x66a311
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x1c]
mov edx, dword [ebp - 0xc4]
call fcn.00403f0c
lea eax, [ebp - 0x20]
push eax
mov ecx, 0x66e6d4
mov edx, 1
mov eax, dword [ebp - 0x1c]
call fcn.0044cef8
mov eax, dword [ebp - 0x20]
mov edx, 0x66e70c
call fcn.00404200
jne case.default.0x66a311
imul eax, dword [ebp - 0x10], 0x17
mov edx, dword [0x840e58]
mov ecx, dword [0x8411f8]
mov ecx, dword [ecx]
mov dword [edx + eax*4 + 0x24], ecx
imul eax, dword [ebp - 0x10], 0x17
mov edx, dword [0x840e58]
mov ecx, dword [0x842160]
mov ecx, dword [ecx]
mov dword [edx + eax*4 + 0x28], ecx
imul eax, dword [ebp - 0x10], 0x17
mov edx, dword [0x840e58]
mov ecx, dword [0x8421f0]
mov ecx, dword [ecx]
mov dword [edx + eax*4 + 0x20], ecx
lea eax, [ebp - 0x20]
push eax
mov ecx, 0x66e720
mov edx, 2
mov eax, dword [ebp - 0x1c]
call fcn.0044cef8
lea eax, [ebp - 0x24]
push eax
xor ecx, ecx
mov edx, 5
mov eax, dword [ebp - 0x1c]
call fcn.0044cef8
push 0
push 0
mov edx, 3
mov eax, dword [ebp - 0x1c]
call fcn.0044d018
fstp qword [ebp - 0x38]
wait
push 0
push 0
mov edx, 4
mov eax, dword [ebp - 0x1c]
call fcn.0044d018
fstp qword [ebp - 0x40]
wait
lea eax, [ebp - 0x40]
push eax
mov eax, 0x66e5a4
call fcn.00558658
lea ecx, [ebp - 0x38]
mov edx, dword [0x84125c]
mov edx, dword [edx]
call fcn.0055a94c
imul eax, dword [ebp - 0x10], 0x17
mov edx, dword [0x840e58]
mov ecx, dword [ebp - 0x40]
mov dword [edx + eax*4], ecx
mov ecx, dword [ebp - 0x3c]
mov dword [edx + eax*4 + 4], ecx
imul eax, dword [ebp - 0x10], 0x17
mov edx, dword [0x840e58]
mov ecx, dword [ebp - 0x38]
mov dword [edx + eax*4 + 8], ecx
mov ecx, dword [ebp - 0x34]
mov dword [edx + eax*4 + 0xc], ecx
imul eax, dword [ebp - 0x10], 0x17
mov edx, dword [0x840e58]
lea eax, [edx + eax*4 + 0x2c]
mov edx, dword [ebp - 0x20]
call fcn.00403ec8
imul eax, dword [ebp - 0x10], 0x17
mov edx, dword [0x840e58]
lea eax, [edx + eax*4 + 0x30]
mov edx, dword [ebp - 0x24]
call fcn.00403ec8
lea eax, [ebp - 0x20]
push eax
xor ecx, ecx
mov edx, 6
mov eax, dword [ebp - 0x1c]
call fcn.0044cef8
imul eax, dword [ebp - 0x10], 0x17
mov edx, dword [0x840e58]
lea eax, [edx + eax*4 + 0x34]
mov edx, dword [ebp - 0x20]
call fcn.00403ec8
lea eax, [ebp - 0x20]
push eax
xor ecx, ecx
mov edx, 7
mov eax, dword [ebp - 0x1c]
call fcn.0044cef8
imul eax, dword [ebp - 0x10], 0x17
mov edx, dword [0x840e58]
lea eax, [edx + eax*4 + 0x38]
mov edx, dword [ebp - 0x20]
call fcn.00403ec8
lea eax, [ebp - 0x20]
push eax
mov ecx, 0x66e72c
mov edx, 9
mov eax, dword [ebp - 0x1c]
call fcn.0044cef8
lea eax, [ebp - 0x51c]
mov edx, dword [ebp - 0x20]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x51c]
imul eax, dword [ebp - 0x10], 0x17
mov ecx, dword [0x840e58]
lea eax, [ecx + eax*4 + 0x44]
mov cl, 0xe
call fcn.00402d1c
lea eax, [ebp - 0x20]
push eax
xor ecx, ecx
mov edx, 8
mov eax, dword [ebp - 0x1c]
call fcn.0044cef8
imul eax, dword [ebp - 0x10], 0x17
mov edx, dword [0x840e58]
xor ecx, ecx
mov dword [edx + eax*4 + 0x3c], ecx
lea edx, [ebp - 0x414]
mov eax, dword [ebp - 0x20]
call fcn.0044bf5c
mov eax, dword [ebp - 0x414]
mov edx, 0x66e73c
call fcn.00404200
jne 0x66b900
imul eax, dword [ebp - 0x10], 0x17
mov edx, dword [0x840e58]
mov dword [edx + eax*4 + 0x3c], 1
call fcn.0078ea80
push dword [ebp - 0x34]
push dword [ebp - 0x38]
push dword [ebp - 0x3c]
push dword [ebp - 0x40]
call fcn.0078da74
push eax
push dword [ebp - 0x34]
push dword [ebp - 0x38]
push dword [ebp - 0x3c]
push dword [ebp - 0x40]
push dword [ebp - 0x34]
push dword [ebp - 0x38]
push dword [ebp - 0x3c]
push dword [ebp - 0x40]
call fcn.0078dcd8
mov ecx, eax
mov eax, dword [0x8415a0]
mov eax, dword [eax]
mov edx, dword [ebp - 0x10]
call fcn.0076c6c4
lea edx, [ebp - 0x414]
mov eax, dword [ebp - 0x10]
call fcn.004094a8
mov edx, dword [ebp - 0x414]
mov eax, dword [ebp - 0x14]
call fcn.006699f8
mov eax, dword [0x84175c]
mov byte [eax], 0
mov eax, dword [0x841774]
mov eax, dword [eax]
call fcn.0071f640
call fcn.007400b8
jmp case.default.0x66a311
mov dword [ebp - 0x5c], 0xffffffff
mov dword [ebp - 0x10], 1
imul eax, dword [ebp - 0x10], 0xd
mov edx, dword [0x841344]
fld qword [edx + eax*4]
fcomp dword [0x66e700]
fnstsw ax
sahf
jne 0x66b9c6
imul eax, dword [ebp - 0x10], 0xd
mov edx, dword [0x841344]
fld qword [edx + eax*4 + 8]
fcomp dword [0x66e700]
fnstsw ax
sahf
jne 0x66b9c6
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x5c], eax
jmp 0x66b9d2
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0x1f5
jne 0x66b98d
cmp dword [ebp - 0x5c], 0xffffffff
jne 0x66b9ea
mov edx, 0x66e550
mov eax, dword [ebp - 0x14]
call fcn.006699f8
jmp case.default.0x66a311
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x1c]
mov edx, dword [ebp - 0xc4]
call fcn.00403f0c
lea eax, [ebp - 0x20]
push eax
mov ecx, 0x66e6d4
mov edx, 1
mov eax, dword [ebp - 0x1c]
call fcn.0044cef8
mov eax, dword [ebp - 0x20]
mov edx, 0x66e74c
call fcn.00404200
jne case.default.0x66a311
imul eax, dword [ebp - 0x10], 0xd
mov edx, dword [0x841344]
mov ecx, dword [0x841618]
mov ecx, dword [ecx]
mov dword [edx + eax*4 + 0x14], ecx
imul eax, dword [ebp - 0x10], 0xd
mov edx, dword [0x841344]
mov ecx, dword [0x8407d0]
mov ecx, dword [ecx]
mov dword [edx + eax*4 + 0x18], ecx
imul eax, dword [ebp - 0x10], 0xd
mov edx, dword [0x841344]
mov ecx, dword [0x84088c]
mov ecx, dword [ecx]
mov dword [edx + eax*4 + 0x10], ecx
imul eax, dword [ebp - 0x10], 0xd
mov edx, dword [0x841344]
mov ecx, dword [0x842364]
mov ecx, dword [ecx]
mov dword [edx + eax*4 + 0x1c], ecx
imul eax, dword [ebp - 0x10], 0xd
mov edx, dword [0x841344]
mov ecx, dword [0x842300]
mov ecx, dword [ecx]
mov dword [edx + eax*4 + 0x20], ecx
imul eax, dword [ebp - 0x10], 0xd
mov edx, dword [0x841344]
mov ecx, dword [0x8408d0]
mov ecx, dword [ecx]
mov dword [edx + eax*4 + 0x24], ecx
imul eax, dword [ebp - 0x10], 0xd
mov edx, dword [0x841344]
mov ecx, dword [0x84102c]
mov ecx, dword [ecx]
mov dword [edx + eax*4 + 0x28], ecx
lea eax, [ebp - 0x20]
push eax
mov ecx, 0x66e760
mov edx, 0xa
mov eax, dword [ebp - 0x1c]
call fcn.0044cef8
push 0
push 0
mov edx, 2
mov eax, dword [ebp - 0x1c]
call fcn.0044d018
fstp qword [ebp - 0x38]
wait
push 0
push 0
mov edx, 3
mov eax, dword [ebp - 0x1c]
call fcn.0044d018
fstp qword [ebp - 0x40]
wait
lea eax, [ebp - 0x40]
push eax
mov eax, 0x66e5a4
call fcn.00558658
lea ecx, [ebp - 0x38]
mov edx, dword [0x84125c]
mov edx, dword [edx]
call fcn.0055a94c
imul eax, dword [ebp - 0x10], 0xd
mov edx, dword [0x841344]
mov ecx, dword [ebp - 0x40]
mov dword [edx + eax*4], ecx
mov ecx, dword [ebp - 0x3c]
mov dword [edx + eax*4 + 4], ecx
imul eax, dword [ebp - 0x10], 0xd
mov edx, dword [0x841344]
mov ecx, dword [ebp - 0x38]
mov dword [edx + eax*4 + 8], ecx
mov ecx, dword [ebp - 0x34]
mov dword [edx + eax*4 + 0xc], ecx
imul eax, dword [ebp - 0x10], 0xd
mov edx, dword [0x841344]
lea eax, [edx + eax*4 + 0x2c]
mov edx, dword [ebp - 0x20]
call fcn.00403ec8
or ecx, 0xffffffff
mov edx, 4
mov eax, dword [ebp - 0x1c]
call fcn.0044d1c8
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0xffffffff
je 0x66bb8e
imul eax, dword [ebp - 0x10], 0xd
mov edx, dword [0x841344]
mov ecx, dword [ebp - 0x5c]
mov dword [edx + eax*4 + 0x14], ecx
or ecx, 0xffffffff
mov edx, 5
mov eax, dword [ebp - 0x1c]
call fcn.0044d1c8
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0xffffffff
je 0x66bbb8
imul eax, dword [ebp - 0x10], 0xd
mov edx, dword [0x841344]
mov ecx, dword [ebp - 0x5c]
mov dword [edx + eax*4 + 0x18], ecx
or ecx, 0xffffffff
mov edx, 6
mov eax, dword [ebp - 0x1c]
call fcn.0044d1c8
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0xffffffff
je 0x66bbe2
imul eax, dword [ebp - 0x10], 0xd
mov edx, dword [0x841344]
mov ecx, dword [ebp - 0x5c]
mov dword [edx + eax*4 + 0x1c], ecx
or ecx, 0xffffffff
mov edx, 7
mov eax, dword [ebp - 0x1c]
call fcn.0044d1c8
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0xffffffff
je 0x66bc0c
imul eax, dword [ebp - 0x10], 0xd
mov edx, dword [0x841344]
mov ecx, dword [ebp - 0x5c]
mov dword [edx + eax*4 + 0x20], ecx
or ecx, 0xffffffff
mov edx, 8
mov eax, dword [ebp - 0x1c]
call fcn.0044d1c8
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0xffffffff
je 0x66bc36
imul eax, dword [ebp - 0x10], 0xd
mov edx, dword [0x841344]
mov ecx, dword [ebp - 0x5c]
mov dword [edx + eax*4 + 0x24], ecx
or ecx, 0xffffffff
mov edx, 8
mov eax, dword [ebp - 0x1c]
call fcn.0044d1c8
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0xffffffff
je 0x66bc60
imul eax, dword [ebp - 0x10], 0xd
mov edx, dword [0x841344]
mov ecx, dword [ebp - 0x5c]
mov dword [edx + eax*4 + 0x28], ecx
push dword [ebp - 0x34]
push dword [ebp - 0x38]
push dword [ebp - 0x3c]
push dword [ebp - 0x40]
call fcn.0078da74
push eax
push dword [ebp - 0x34]
push dword [ebp - 0x38]
push dword [ebp - 0x3c]
push dword [ebp - 0x40]
push dword [ebp - 0x34]
push dword [ebp - 0x38]
push dword [ebp - 0x3c]
push dword [ebp - 0x40]
call fcn.0078dcd8
mov ecx, eax
mov eax, dword [0x8415a0]
mov eax, dword [eax]
mov edx, dword [ebp - 0x10]
call fcn.0076c3dc
lea edx, [ebp - 0x414]
mov eax, dword [ebp - 0x10]
call fcn.004094a8
mov edx, dword [ebp - 0x414]
mov eax, dword [ebp - 0x14]
call fcn.006699f8
mov eax, dword [0x84175c]
mov byte [eax], 0
mov eax, dword [0x841774]
mov eax, dword [eax]
call fcn.0071f640
call fcn.007400b8
jmp case.default.0x66a311
lea eax, [ebp - 0x1c]
mov edx, dword [ebp - 0xc4]
call fcn.00403f0c
lea eax, [ebp - 0x414]
push eax
xor ecx, ecx
mov edx, 1
mov eax, dword [ebp - 0x1c]
call fcn.0044cef8
mov edx, dword [ebp - 0x414]
lea eax, [ebp - 0x1c]
call fcn.00403f0c
mov eax, dword [ebp - 0x1c]
call fcn.0044c49c
test al, al
jne 0x66bd27
mov eax, dword [0x8415a0]
mov eax, dword [eax]
mov edx, dword [ebp - 0x1c]
call fcn.00766b2c
mov edx, 0x66e588
mov eax, dword [ebp - 0x14]
call fcn.006699f8
jmp case.default.0x66a311
lea eax, [ebp - 0x1c]
mov edx, dword [ebp - 0xc4]
call fcn.00403f0c
lea eax, [ebp - 0x414]
push eax
xor ecx, ecx
mov edx, 1
mov eax, dword [ebp - 0x1c]
call fcn.0044cef8
mov edx, dword [ebp - 0x414]
lea eax, [ebp - 0x1c]
call fcn.00403f0c
mov eax, dword [ebp - 0x1c]
call fcn.0044c49c
test al, al
jne 0x66bd88
mov eax, dword [0x8415a0]
mov eax, dword [eax]
mov edx, dword [ebp - 0x1c]
call fcn.00760cc8
jmp 0x66bd9c
mov edx, dword [0x84184c]
mov edx, dword [edx]
mov eax, dword [0x8415a0]
mov eax, dword [eax]
call fcn.00760cc8
mov edx, 0x66e588
mov eax, dword [ebp - 0x14]
call fcn.006699f8
jmp case.default.0x66a311
lea eax, [ebp - 0x1c]
mov edx, dword [ebp - 0xc4]
call fcn.00403f0c
lea eax, [ebp - 0x414]
push eax
xor ecx, ecx
mov edx, 1
mov eax, dword [ebp - 0x1c]
call fcn.0044cef8
mov edx, dword [ebp - 0x414]
lea eax, [ebp - 0x1c]
call fcn.00403f0c
mov al, 1
call fcn.00792df8
mov eax, dword [ebp - 0x1c]
call fcn.0072ab7c
mov edx, 0x66e588
mov eax, dword [ebp - 0x14]
call fcn.006699f8
jmp case.default.0x66a311
lea eax, [ebp - 0x1c]
mov edx, dword [ebp - 0xc4]
call fcn.00403f0c
lea eax, [ebp - 0x414]
push eax
xor ecx, ecx
mov edx, 1
mov eax, dword [ebp - 0x1c]
call fcn.0044cef8
mov edx, dword [ebp - 0x414]
lea eax, [ebp - 0x1c]
call fcn.00403f0c
mov eax, dword [0x842224]
mov byte [eax], 1
mov eax, dword [ebp - 0x1c]
call fcn.0072fdb8
mov edx, 0x66e588
mov eax, dword [ebp - 0x14]
call fcn.006699f8
jmp case.default.0x66a311
mov edx, 0x66e76c
lea eax, [ebp - 0x2b8]
call fcn.0040619e
lea eax, [ebp - 0x2b8]
call fcn.004066e7
call fcn.00402898
lea edx, [ebp - 0x1c]
lea eax, [ebp - 0x2b8]
call fcn.004044d8
lea eax, [ebp - 0x2b8]
call fcn.00406630
call fcn.00402898
lea eax, [ebp - 0x2b8]
call fcn.00406308
call fcn.00402898
mov al, 1
call fcn.00792df8
mov eax, dword [ebp - 0x1c]
call fcn.0072ab7c
mov edx, 0x66e588
mov eax, dword [ebp - 0x14]
call fcn.006699f8
jmp case.default.0x66a311
lea eax, [ebp - 0x1c]
mov edx, dword [ebp - 0xc4]
call fcn.00403f0c
mov ecx, 1
mov edx, 1
mov eax, dword [ebp - 0x1c]
call fcn.0044d1c8
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
shl eax, 4
mov edx, dword [0x840ecc]
cmp dword [edx + eax*8 - 0x24], 0
je 0x66bf89
push 0
push 0
mov edx, 2
mov eax, dword [ebp - 0x1c]
call fcn.0044d018
fstp qword [ebp - 0x38]
wait
push 0
push 0
mov edx, 3
mov eax, dword [ebp - 0x1c]
call fcn.0044d018
fstp qword [ebp - 0x40]
wait
mov eax, dword [ebp - 0x10]
shl eax, 4
mov edx, dword [0x840ecc]
mov ecx, dword [ebp - 0x38]
mov dword [edx + eax*8 - 0x6c], ecx
mov ecx, dword [ebp - 0x34]
mov dword [edx + eax*8 - 0x68], ecx
mov eax, dword [ebp - 0x10]
shl eax, 4
mov edx, dword [0x840ecc]
mov ecx, dword [ebp - 0x40]
mov dword [edx + eax*8 - 0x74], ecx
mov ecx, dword [ebp - 0x3c]
mov dword [edx + eax*8 - 0x70], ecx
mov eax, dword [ebp - 0x10]
shl eax, 4
mov edx, dword [0x840ecc]
mov dword [edx + eax*8 - 0x64], 0xfffffcf7
mov eax, dword [ebp - 0x10]
shl eax, 4
mov edx, dword [0x840ecc]
mov dword [edx + eax*8 - 0x60], 0xfffffcf7
call fcn.007a753c
mov edx, 0x66e588
mov eax, dword [ebp - 0x14]
call fcn.006699f8
jmp case.default.0x66a311
lea eax, [ebp - 0x1c]
mov edx, dword [ebp - 0xc4]
call fcn.00403f0c
mov ecx, 1
mov edx, 1
mov eax, dword [ebp - 0x1c]
call fcn.0044d1c8
mov dword [ebp - 0x10], eax
imul eax, dword [ebp - 0x10], 0x17
mov edx, dword [0x840e58]
cmp dword [edx + eax*4 + 0x54], 0
je 0x66c0fa
push 0
push 0
mov edx, 2
mov eax, dword [ebp - 0x1c]
call fcn.0044d018
fstp qword [ebp - 0x38]
wait
push 0
push 0
mov edx, 3
mov eax, dword [ebp - 0x1c]
call fcn.0044d018
fstp qword [ebp - 0x40]
wait
imul eax, dword [ebp - 0x10], 0x17
mov edx, dword [0x840e58]
mov ecx, dword [ebp - 0x38]
mov dword [edx + eax*4 + 8], ecx
mov ecx, dword [ebp - 0x34]
mov dword [edx + eax*4 + 0xc], ecx
imul eax, dword [ebp - 0x10], 0x17
mov edx, dword [0x840e58]
mov ecx, dword [ebp - 0x40]
mov dword [edx + eax*4], ecx
mov ecx, dword [ebp - 0x3c]
mov dword [edx + eax*4 + 4], ecx
imul eax, dword [ebp - 0x10], 0x17
mov edx, dword [0x840e58]
push dword [edx + eax*4 + 0xc]
push dword [edx + eax*4 + 8]
imul eax, dword [ebp - 0x10], 0x17
mov edx, dword [0x840e58]
push dword [edx + eax*4 + 4]
push dword [edx + eax*4]
lea edx, [ebp - 0x64]
lea eax, [ebp - 0x60]
call fcn.0078d700
imul eax, dword [ebp - 0x10], 0x17
mov edx, dword [0x840e58]
mov eax, dword [edx + eax*4 + 0x54]
mov eax, dword [eax + 0x38]
mov dword [ebp - 0x68], eax
imul eax, dword [ebp - 0x10], 0x17
mov edx, dword [0x840e58]
mov eax, dword [edx + eax*4 + 0x54]
mov eax, dword [eax + 0x3c]
mov dword [ebp - 0x6c], eax
mov eax, dword [ebp - 0x68]
push eax
mov eax, dword [ebp - 0x6c]
push eax
mov eax, dword [0x8415a0]
mov eax, dword [eax]
mov eax, dword [eax + 0x304]
call fcn.005782ec
mov edx, dword [ebp - 0x6c]
sar edx, 1
jns 0x66c0a6
adc edx, 0
mov ecx, dword [ebp - 0x64]
sub ecx, edx
sub ecx, eax
push ecx
mov eax, dword [0x8415a0]
mov eax, dword [eax]
mov eax, dword [eax + 0x304]
call fcn.0057832c
mov edx, dword [ebp - 0x68]
sar edx, 1
jns 0x66c0ca
adc edx, 0
push edx
mov edx, dword [ebp - 0x60]
pop ecx
sub edx, ecx
sub edx, eax
imul eax, dword [ebp - 0x10], 0x17
mov ecx, dword [0x840e58]
mov eax, dword [ecx + eax*4 + 0x54]
pop ecx
mov ebx, dword [eax]
call dword [ebx + 0x4c]
imul eax, dword [ebp - 0x10], 0x17
mov edx, dword [0x840e58]
mov eax, dword [edx + eax*4 + 0x54]
mov edx, dword [eax]
call dword [edx + 0x44]
mov edx, 0x66e588
mov eax, dword [ebp - 0x14]
call fcn.006699f8
jmp case.default.0x66a311
lea eax, [ebp - 0x1c]
mov edx, dword [ebp - 0xc4]
call fcn.00403f0c
mov ecx, 1
mov edx, 1
mov eax, dword [ebp - 0x1c]
call fcn.0044d1c8
mov dword [ebp - 0x10], eax
imul eax, dword [ebp - 0x10], 0xd
mov edx, dword [0x841344]
cmp dword [edx + eax*4 + 0x30], 0
je 0x66c26b
push 0
push 0
mov edx, 2
mov eax, dword [ebp - 0x1c]
call fcn.0044d018
fstp qword [ebp - 0x38]
wait
push 0
push 0
mov edx, 3
mov eax, dword [ebp - 0x1c]
call fcn.0044d018
fstp qword [ebp - 0x40]
wait
imul eax, dword [ebp - 0x10], 0xd
mov edx, dword [0x841344]
mov ecx, dword [ebp - 0x38]
mov dword [edx + eax*4 + 8], ecx
mov ecx, dword [ebp - 0x34]
mov dword [edx + eax*4 + 0xc], ecx
imul eax, dword [ebp - 0x10], 0xd
mov edx, dword [0x841344]
mov ecx, dword [ebp - 0x40]
mov dword [edx + eax*4], ecx
mov ecx, dword [ebp - 0x3c]
mov dword [edx + eax*4 + 4], ecx
imul eax, dword [ebp - 0x10], 0xd
mov edx, dword [0x841344]
push dword [edx + eax*4 + 0xc]
push dword [edx + eax*4 + 8]
imul eax, dword [ebp - 0x10], 0xd
mov edx, dword [0x841344]
push dword [edx + eax*4 + 4]
push dword [edx + eax*4]
lea edx, [ebp - 0x64]
lea eax, [ebp - 0x60]
call fcn.0078d700
imul eax, dword [ebp - 0x10], 0xd
mov edx, dword [0x841344]
mov eax, dword [edx + eax*4 + 0x30]
mov eax, dword [eax + 0x38]
mov dword [ebp - 0x68], eax
imul eax, dword [ebp - 0x10], 0xd
mov edx, dword [0x841344]
mov eax, dword [edx + eax*4 + 0x30]
mov eax, dword [eax + 0x3c]
mov dword [ebp - 0x6c], eax
mov eax, dword [ebp - 0x68]
push eax
mov eax, dword [ebp - 0x6c]
push eax
mov eax, dword [0x8415a0]
mov eax, dword [eax]
mov eax, dword [eax + 0x304]
call fcn.005782ec
mov edx, dword [ebp - 0x6c]
sar edx, 1
jns 0x66c217
adc edx, 0
mov ecx, dword [ebp - 0x64]
sub ecx, edx
sub ecx, eax
push ecx
mov eax, dword [0x8415a0]
mov eax, dword [eax]
mov eax, dword [eax + 0x304]
call fcn.0057832c
mov edx, dword [ebp - 0x68]
sar edx, 1
jns 0x66c23b
adc edx, 0
push edx
mov edx, dword [ebp - 0x60]
pop ecx
sub edx, ecx
sub edx, eax
imul eax, dword [ebp - 0x10], 0xd
mov ecx, dword [0x841344]
mov eax, dword [ecx + eax*4 + 0x30]
pop ecx
mov ebx, dword [eax]
call dword [ebx + 0x4c]
imul eax, dword [ebp - 0x10], 0xd
mov edx, dword [0x841344]
mov eax, dword [edx + eax*4 + 0x30]
mov edx, dword [eax]
call dword [edx + 0x44]
mov edx, 0x66e588
mov eax, dword [ebp - 0x14]
call fcn.006699f8
jmp case.default.0x66a311
lea eax, [ebp - 0x1c]
mov edx, dword [ebp - 0xc4]
call fcn.00403f0c
mov ecx, 1
mov edx, 1
mov eax, dword [ebp - 0x1c]
call fcn.0044d1c8
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x414]
push eax
xor ecx, ecx
mov edx, 2
mov eax, dword [ebp - 0x1c]
call fcn.0044cef8
mov edx, dword [ebp - 0x414]
lea eax, [ebp - 0x1c]
call fcn.00403f0c
mov eax, dword [ebp - 0x1c]
call fcn.0044c49c
test al, al
jne 0x66c2e9
mov eax, dword [0x841f00]
mov edx, dword [ebp - 0x10]
mov byte [eax + edx], 1
mov cl, 1
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x10]
call fcn.0072e17c
mov edx, 0x66e588
mov eax, dword [ebp - 0x14]
call fcn.006699f8
jmp case.default.0x66a311
lea eax, [ebp - 0x1c]
mov edx, dword [ebp - 0xc4]
call fcn.00403f0c
mov ecx, 1
mov edx, 1
mov eax, dword [ebp - 0x1c]
call fcn.0044d1c8
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x414]
push eax
xor ecx, ecx
mov edx, 2
mov eax, dword [ebp - 0x1c]
call fcn.0044cef8
mov edx, dword [ebp - 0x414]
lea eax, [ebp - 0x1c]
call fcn.00403f0c
mov eax, dword [ebp - 0x1c]
call fcn.0044c49c
test al, al
jne 0x66c365
mov eax, dword [0x841f00]
mov edx, dword [ebp - 0x10]
mov byte [eax + edx], 1
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x10]
call fcn.0072d034
mov edx, 0x66e588
mov eax, dword [ebp - 0x14]
call fcn.006699f8
jmp case.default.0x66a311
lea eax, [ebp - 0x1c]
mov edx, dword [ebp - 0xc4]
call fcn.00403f0c
mov ecx, 1
mov edx, 1
mov eax, dword [ebp - 0x1c]
call fcn.0044d1c8
mov dword [ebp - 0x10], eax
mov eax, dword [0x841f00]
mov edx, dword [ebp - 0x10]
mov byte [eax + edx], 1
cmp dword [ebp - 0x10], 0
jle 0x66c3cd
cmp dword [ebp - 0x10], 0x4b
jg 0x66c3cd
mov dl, 1
mov eax, dword [ebp - 0x10]
call fcn.00719fc8
call fcn.007a753c
mov eax, dword [0x841774]
mov eax, dword [eax]
call fcn.0071f640
mov edx, 0x66e588
mov eax, dword [ebp - 0x14]
call fcn.006699f8
jmp case.default.0x66a311
lea eax, [ebp - 0x1c]
mov edx, dword [ebp - 0xc4]
call fcn.00403f0c
mov ecx, 1
mov edx, 1
mov eax, dword [ebp - 0x1c]
call fcn.0044d1c8
mov dword [ebp - 0x10], eax
xor ecx, ecx
mov edx, 2
mov eax, dword [ebp - 0x1c]
call fcn.0044d1c8
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x10], 0
jle 0x66c43f
cmp dword [ebp - 0x10], 0x4b
jg 0x66c43f
mov eax, dword [0x840a4c]
mov edx, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x5c]
mov dword [eax + edx*4], ecx
call fcn.007a753c
mov eax, dword [0x841774]
mov eax, dword [eax]
call fcn.0071f640
mov edx, 0x66e588
mov eax, dword [ebp - 0x14]
call fcn.006699f8
jmp case.default.0x66a311
lea eax, [ebp - 0x1c]
mov edx, dword [ebp - 0xc4]
call fcn.00403f0c
mov ecx, 1
mov edx, 1
mov eax, dword [ebp - 0x1c]
call fcn.0044d1c8
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x414]
push eax
xor ecx, ecx
mov edx, 2
mov eax, dword [ebp - 0x1c]
call fcn.0044cef8
mov edx, dword [ebp - 0x414]
lea eax, [ebp - 0x1c]
call fcn.00403f0c
mov eax, dword [ebp - 0x1c]
call fcn.0044c49c
test al, al
jne 0x66c4b8
mov al, 1
call fcn.0079318c
mov cl, 1
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x10]
call fcn.00734068
mov edx, 0x66e588
mov eax, dword [ebp - 0x14]
call fcn.006699f8
jmp case.default.0x66a311
lea eax, [ebp - 0x1c]
mov edx, dword [ebp - 0xc4]
call fcn.00403f0c
push 0
push 0
mov edx, 1
mov eax, dword [ebp - 0x1c]
call fcn.0044d018
fstp qword [ebp - 0x38]
wait
push 0
push 0
mov edx, 2
mov eax, dword [ebp - 0x1c]
call fcn.0044d018
fstp qword [ebp - 0x40]
wait
mov eax, dword [0x8418e4]
mov edx, dword [ebp - 0x38]
mov dword [eax], edx
mov edx, dword [ebp - 0x34]
mov dword [eax + 4], edx
mov eax, dword [0x841078]
mov edx, dword [ebp - 0x40]
mov dword [eax], edx
mov edx, dword [ebp - 0x3c]
mov dword [eax + 4], edx
mov eax, dword [0x84227c]
mov eax, dword [eax]
mov dx, 0xfff5
call fcn.0042b9bc
mov eax, dword [0x841078]
push eax
mov eax, 0x66e5a4
call fcn.00558658
mov edx, eax
mov ecx, dword [0x8418e4]
mov eax, dword [0x84125c]
mov eax, dword [eax]
call fcn.0055a94c
call fcn.007a753c
push 0
push 0
push dword [ebp - 0x34]
push dword [ebp - 0x38]
push dword [ebp - 0x3c]
push dword [ebp - 0x40]
push 0
push 0
xor ecx, ecx
xor edx, edx
mov eax, 0x66e784
call fcn.0079e15c
mov eax, dword [0x84227c]
mov eax, dword [eax]
xor edx, edx
call fcn.0042b9bc
mov edx, 0x66e588
mov eax, dword [ebp - 0x14]
call fcn.006699f8
jmp case.default.0x66a311
mov eax, dword [0x840b9c]
mov byte [eax], 1
mov edx, 0x66e588
mov eax, dword [ebp - 0x14]
call fcn.006699f8
jmp case.default.0x66a311
mov eax, dword [0x840b9c]
mov byte [eax], 0
mov edx, 0x66e588
mov eax, dword [ebp - 0x14]
call fcn.006699f8
jmp case.default.0x66a311
mov eax, dword [0x8407ec]
mov byte [eax], 1
mov edx, 0x66e588
mov eax, dword [ebp - 0x14]
call fcn.006699f8
jmp case.default.0x66a311
mov eax, dword [0x8407ec]
mov byte [eax], 0
mov edx, 0x66e588
mov eax, dword [ebp - 0x14]
call fcn.006699f8
jmp case.default.0x66a311
mov eax, dword [0x841658]
mov byte [eax], 1
mov edx, 0x66e588
mov eax, dword [ebp - 0x14]
call fcn.006699f8
jmp case.default.0x66a311
mov eax, dword [0x841658]
mov byte [eax], 0
mov edx, 0x66e588
mov eax, dword [ebp - 0x14]
call fcn.006699f8
jmp case.default.0x66a311
lea eax, [ebp - 0x1c]
mov edx, dword [ebp - 0xc4]
call fcn.00403f0c
push 0
push 0
mov edx, 1
mov eax, dword [ebp - 0x1c]
call fcn.0044d018
fstp qword [ebp - 0x38]
wait
push 0
push 0
mov edx, 2
mov eax, dword [ebp - 0x1c]
call fcn.0044d018
fstp qword [ebp - 0x40]
wait
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x38]
mov edx, dword [0x84125c]
mov edx, dword [edx]
mov eax, 0x76
call fcn.0055a94c
push dword [ebp - 0x34]
push dword [ebp - 0x38]
push dword [ebp - 0x3c]
push dword [ebp - 0x40]
mov eax, dword [0x840ab4]
mov eax, dword [eax]
call fcn.006fc8e8
mov eax, dword [0x8418e4]
mov edx, dword [ebp - 0x38]
mov dword [eax], edx
mov edx, dword [ebp - 0x34]
mov dword [eax + 4], edx
mov eax, dword [0x841078]
mov edx, dword [ebp - 0x40]
mov dword [eax], edx
mov edx, dword [ebp - 0x3c]
mov dword [eax + 4], edx
mov eax, dword [0x841078]
push eax
mov eax, 0x66e5a4
call fcn.00558658
mov edx, eax
mov ecx, dword [0x8418e4]
mov eax, dword [0x84125c]
mov eax, dword [eax]
call fcn.0055a94c
call fcn.007a753c
mov edx, 0x66e588
mov eax, dword [ebp - 0x14]
call fcn.006699f8
jmp case.default.0x66a311
lea eax, [ebp - 0x1c]
mov edx, dword [ebp - 0xc4]
call fcn.00403f0c
push 0
push 0
mov edx, 1
mov eax, dword [ebp - 0x1c]
call fcn.0044d018
fstp qword [ebp - 0x38]
wait
push 0
push 0
mov edx, 2
mov eax, dword [ebp - 0x1c]
call fcn.0044d018
fstp qword [ebp - 0x40]
wait
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x38]
mov edx, dword [0x84125c]
mov edx, dword [edx]
mov eax, 0x76
call fcn.0055a94c
push dword [ebp - 0x34]
push dword [ebp - 0x38]
push dword [ebp - 0x3c]
push dword [ebp - 0x40]
mov eax, dword [0x840ab4]
mov eax, dword [eax]
call fcn.006fc8e8
mov eax, dword [0x8418e4]
xor edx, edx
mov dword [eax], edx
mov dword [eax + 4], 0xbff00000
mov eax, dword [0x841078]
xor edx, edx
mov dword [eax], edx
mov dword [eax + 4], 0xbff00000
call fcn.007a753c
mov edx, 0x66e588
mov eax, dword [ebp - 0x14]
call fcn.006699f8
jmp case.default.0x66a311
mov eax, dword [0x841818]
mov edx, dword [eax]
mov dword [ebp - 0x38], edx
mov edx, dword [eax + 4]
mov dword [ebp - 0x34], edx
mov eax, dword [0x841208]
mov edx, dword [eax]
mov dword [ebp - 0x40], edx
mov edx, dword [eax + 4]
mov dword [ebp - 0x3c], edx
lea eax, [ebp - 0x40]
push eax
mov eax, 0x66e5a4
call fcn.00558658
mov edx, eax
lea ecx, [ebp - 0x38]
mov eax, dword [0x84125c]
mov eax, dword [eax]
call fcn.0055a94c
mov edx, 0x66e790
lea eax, [ebp - 0x2b8]
call fcn.0040619e
lea eax, [ebp - 0x2b8]
call fcn.004066ee
call fcn.00402898
fld qword [ebp - 0x38]
add esp, 0xfffffff4
fstp xword [esp]
wait
mov ecx, 0xb
mov edx, 0x10
lea eax, [ebp - 0x2b8]
call fcn.00402fe4
call fcn.0040699f
call fcn.00402898
fld qword [ebp - 0x40]
add esp, 0xfffffff4
fstp xword [esp]
wait
mov ecx, 0xb
mov edx, 0x10
lea eax, [ebp - 0x2b8]
call fcn.00402fe4
call fcn.0040699f
call fcn.00402898
mov eax, dword [0x841b0c]
fld qword [eax]
add esp, 0xfffffff4
fstp xword [esp]
wait
mov ecx, 3
mov edx, 0xa
lea eax, [ebp - 0x2b8]
call fcn.00402fe4
call fcn.0040699f
call fcn.00402898
mov eax, dword [0x840f70]
fld qword [eax]
add esp, 0xfffffff4
fstp xword [esp]
wait
mov ecx, 3
mov edx, 0xa
lea eax, [ebp - 0x2b8]
call fcn.00402fe4
call fcn.0040699f
call fcn.00402898
mov eax, dword [0x8418ec]
fld qword [eax]
add esp, 0xfffffff4
fstp xword [esp]
wait
mov ecx, 3
mov edx, 0xa
lea eax, [ebp - 0x2b8]
call fcn.00402fe4
call fcn.0040699f
call fcn.00402898
mov eax, dword [0x840d80]
fld dword [eax]
add esp, 0xfffffff4
fstp xword [esp]
wait
mov edx, 0xc
lea eax, [ebp - 0x2b8]
call fcn.00403018
call fcn.0040699f
call fcn.00402898
lea eax, [ebp - 0x2b8]
call fcn.00406308
call fcn.00402898
jmp case.default.0x66a311
lea eax, [ebp - 0x1c]
mov edx, dword [ebp - 0xc4]
call fcn.00403f0c
lea eax, [ebp - 0x414]
push eax
xor ecx, ecx
mov edx, 1
mov eax, dword [ebp - 0x1c]
call fcn.0044cef8
mov edx, dword [ebp - 0x414]
lea eax, [ebp - 0x1c]
call fcn.00403f0c
mov eax, dword [ebp - 0x1c]
call fcn.004040f0
cmp eax, 2
jle 0x66c97a
mov eax, dword [ebp - 0x1c]
call fcn.004040f0
mov edx, dword [ebp - 0x1c]
cmp byte [edx + eax - 1], 0
jne 0x66c97a
mov eax, dword [ebp - 0x1c]
call fcn.004040f0
mov ebx, eax
lea eax, [ebp - 0x1c]
call fcn.004042c0
mov byte [eax + ebx - 1], 0x20
lea edx, [ebp - 0x414]
mov eax, dword [ebp - 0x1c]
call fcn.0078760c
mov edx, dword [ebp - 0x414]
lea eax, [ebp - 0x1c]
call fcn.00403f0c
mov eax, dword [0x841444]
cmp byte [eax], 0
je 0x66c9ea
mov eax, 0x94a9e4
mov edx, dword [ebp - 0x1c]
call fcn.00403ec8
lea eax, [ebp - 0xdc]
push eax
push 0
push 0
push 0x6699dc
push 0
push 0
call sub.KERNEL32.DLL_CreateThread
mov dword [ebp - 0xe0], eax
mov eax, dword [ebp - 0xe0]
push eax
call sub.KERNEL32.DLL_CloseHandle_1
mov edx, 0x66e588
mov eax, dword [ebp - 0x14]
call fcn.006699f8
jmp case.default.0x66a311
mov eax, dword [ebp - 0x1c]
call fcn.00739d10
mov edx, 0x66e588
mov eax, dword [ebp - 0x14]
call fcn.006699f8
jmp case.default.0x66a311
mov edx, 0x66e7a8
lea eax, [ebp - 0x2b8]
call fcn.0040619e
lea eax, [ebp - 0x2b8]
call fcn.004066e7
call fcn.00402898
lea edx, [ebp - 0x1c]
lea eax, [ebp - 0x2b8]
call fcn.004044d8
lea eax, [ebp - 0x2b8]
call fcn.00406630
call fcn.00402898
lea eax, [ebp - 0x2b8]
call fcn.00406308
call fcn.00402898
mov eax, dword [ebp - 0x1c]
call fcn.00739d10
jmp case.default.0x66a311
mov eax, dword [0x841200]
mov byte [eax], 1
mov edx, 0x66e588
mov eax, dword [ebp - 0x14]
call fcn.006699f8
jmp case.default.0x66a311
mov eax, dword [0x841200]
mov byte [eax], 0
mov edx, 0x66e588
mov eax, dword [ebp - 0x14]
call fcn.006699f8
jmp case.default.0x66a311
call fcn.006fabb8
mov edx, 0x66e588
mov eax, dword [ebp - 0x14]
call fcn.006699f8
jmp case.default.0x66a311
xor edx, edx
mov al, 1
call fcn.006f9b58
mov edx, 0x66e588
mov eax, dword [ebp - 0x14]
call fcn.006699f8
jmp case.default.0x66a311
mov edx, 1
mov al, 1
call fcn.006f9b58
mov edx, 0x66e588
mov eax, dword [ebp - 0x14]
call fcn.006699f8
jmp case.default.0x66a311
mov edx, 2
mov al, 1
call fcn.006f9b58
mov edx, 0x66e588
mov eax, dword [ebp - 0x14]
call fcn.006699f8
jmp case.default.0x66a311
lea eax, [ebp - 0x1c]
mov edx, dword [ebp - 0xc4]
call fcn.00403f0c
mov ecx, 1
mov edx, 1
mov eax, dword [ebp - 0x1c]
call fcn.0044d1c8
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x10], 1
mov eax, dword [0x841fa8]
mov edx, dword [ebp - 0x10]
xor ecx, ecx
mov dword [eax + edx*4 - 4], ecx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0x12d
jne 0x66cb2b
mov eax, dword [0x841e14]
mov dword [eax], 0xffffffff
mov eax, dword [0x842270]
mov edx, dword [ebp - 0x5c]
mov dword [eax], edx
mov eax, dword [0x8409f4]
mov dword [eax], 1
mov eax, dword [0x842270]
mov eax, dword [eax]
mov edx, dword [0x841fa8]
mov dword [edx], eax
mov eax, dword [0x841114]
xor edx, edx
mov dword [eax], edx
mov dword [eax + 4], edx
mov eax, dword [0x8408c8]
xor edx, edx
mov dword [eax], edx
mov dword [eax + 4], edx
mov eax, dword [0x84157c]
xor edx, edx
mov dword [eax], edx
mov dword [eax + 4], edx
mov eax, dword [0x840cc4]
xor edx, edx
mov dword [eax], edx
mov dword [eax + 4], edx
mov eax, dword [0x8415a0]
mov eax, dword [eax]
mov eax, dword [eax + 0x5dc]
mov dl, 1
call fcn.0042f8f4
mov eax, dword [0x8415a0]
mov eax, dword [eax]
mov eax, dword [eax + 0x5d8]
xor edx, edx
call fcn.0042f8f4
mov eax, dword [0x8415a0]
mov eax, dword [eax]
mov eax, dword [eax + 0x634]
mov dl, 1
call fcn.0042f8f4
mov eax, dword [0x8415a0]
mov eax, dword [eax]
mov eax, dword [eax + 0x630]
xor edx, edx
call fcn.0042f8f4
call fcn.006f3590
mov edx, 0x66e588
mov eax, dword [ebp - 0x14]
call fcn.006699f8
jmp case.default.0x66a311
call fcn.006f36dc
mov edx, 0x66e588
mov eax, dword [ebp - 0x14]
call fcn.006699f8
jmp case.default.0x66a311
mov edx, dword [0x8415a0]
mov edx, dword [edx]
mov eax, dword [0x8415a0]
mov eax, dword [eax]
call fcn.0077fe6c
mov edx, 0x66e588
mov eax, dword [ebp - 0x14]
call fcn.006699f8
jmp case.default.0x66a311
lea eax, [ebp - 0x1c]
call fcn.00667764
push 0
push 0
mov edx, 1
mov eax, dword [ebp - 0x1c]
call fcn.0044d018
fstp qword [ebp - 0x38]
wait
push 0
push 0
mov edx, 2
mov eax, dword [ebp - 0x1c]
call fcn.0044d018
fstp qword [ebp - 0x40]
wait
push 0
push 0
mov edx, 3
mov eax, dword [ebp - 0x1c]
call fcn.0044d018
fstp qword [ebp - 0x48]
wait
push 0
push 0
mov edx, 4
mov eax, dword [ebp - 0x1c]
call fcn.0044d018
fstp qword [ebp - 0x50]
wait
push dword [ebp - 0x34]
push dword [ebp - 0x38]
push dword [ebp - 0x3c]
push dword [ebp - 0x40]
push dword [ebp - 0x44]
push dword [ebp - 0x48]
push dword [ebp - 0x4c]
push dword [ebp - 0x50]
mov eax, 0x66e7bc
call fcn.00796950
fstp qword [ebp - 0x74]
wait
push dword [ebp - 0x34]
push dword [ebp - 0x38]
push dword [ebp - 0x3c]
push dword [ebp - 0x40]
push dword [ebp - 0x44]
push dword [ebp - 0x48]
push dword [ebp - 0x4c]
push dword [ebp - 0x50]
call fcn.00796c1c
fstp qword [ebp - 0x7c]
wait
push dword [ebp - 0x70]
push dword [ebp - 0x74]
lea ecx, [ebp - 0x414]
mov edx, 3
mov eax, 0x14
call fcn.007876e8
push dword [ebp - 0x414]
push 0x66e5b4
push dword [ebp - 0x78]
push dword [ebp - 0x7c]
lea ecx, [ebp - 0x418]
mov edx, 3
mov eax, 7
call fcn.007876e8
push dword [ebp - 0x418]
lea eax, [ebp - 0x1c]
mov edx, 3
call fcn.004041b0
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x14]
call fcn.006699f8
jmp case.default.0x66a311
lea eax, [ebp - 0x1c]
mov edx, dword [ebp - 0xc4]
call fcn.00403f0c
lea eax, [ebp - 0x414]
push eax
xor ecx, ecx
mov edx, 1
mov eax, dword [ebp - 0x1c]
call fcn.0044cef8
mov edx, dword [ebp - 0x414]
lea eax, [ebp - 0x1c]
call fcn.00403f0c
mov eax, dword [0x841818]
mov edx, dword [eax]
mov dword [ebp - 0x38], edx
mov edx, dword [eax + 4]
mov dword [ebp - 0x34], edx
mov eax, dword [0x841208]
mov edx, dword [eax]
mov dword [ebp - 0x40], edx
mov edx, dword [eax + 4]
mov dword [ebp - 0x3c], edx
mov eax, dword [ebp - 0x1c]
call fcn.0079503c
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
je 0x66cdce
fld qword [ebp - 0x38]
fcomp dword [0x66e700]
fnstsw ax
sahf
jne 0x66cde8
fld qword [ebp - 0x40]
fcomp dword [0x66e700]
fnstsw ax
sahf
jne 0x66cde8
xor eax, eax
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x70], 0xbff00000
xor eax, eax
mov dword [ebp - 0x7c], eax
mov dword [ebp - 0x78], 0xbff00000
jmp 0x66ce63
mov eax, dword [ebp - 0x10]
shl eax, 4
mov edx, dword [0x840ecc]
mov ecx, dword [edx + eax*8 - 0x6c]
mov dword [ebp - 0x48], ecx
mov ecx, dword [edx + eax*8 - 0x68]
mov dword [ebp - 0x44], ecx
mov eax, dword [ebp - 0x10]
shl eax, 4
mov edx, dword [0x840ecc]
mov ecx, dword [edx + eax*8 - 0x74]
mov dword [ebp - 0x50], ecx
mov ecx, dword [edx + eax*8 - 0x70]
mov dword [ebp - 0x4c], ecx
push dword [ebp - 0x34]
push dword [ebp - 0x38]
push dword [ebp - 0x3c]
push dword [ebp - 0x40]
push dword [ebp - 0x44]
push dword [ebp - 0x48]
push dword [ebp - 0x4c]
push dword [ebp - 0x50]
mov eax, 0x66e7bc
call fcn.00796950
fstp qword [ebp - 0x74]
wait
push dword [ebp - 0x34]
push dword [ebp - 0x38]
push dword [ebp - 0x3c]
push dword [ebp - 0x40]
push dword [ebp - 0x44]
push dword [ebp - 0x48]
push dword [ebp - 0x4c]
push dword [ebp - 0x50]
call fcn.00796c1c
fstp qword [ebp - 0x7c]
wait
push dword [ebp - 0x70]
push dword [ebp - 0x74]
lea ecx, [ebp - 0x414]
mov edx, 3
mov eax, 0x14
call fcn.007876e8
push dword [ebp - 0x414]
push 0x66e5b4
push dword [ebp - 0x78]
push dword [ebp - 0x7c]
lea ecx, [ebp - 0x418]
mov edx, 3
mov eax, 7
call fcn.007876e8
push dword [ebp - 0x418]
lea eax, [ebp - 0x1c]
mov edx, 3
call fcn.004041b0
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x14]
call fcn.006699f8
jmp case.default.0x66a311
lea eax, [ebp - 0x1c]
mov edx, dword [ebp - 0xc4]
call fcn.00403f0c
lea eax, [ebp - 0x24]
push eax
xor ecx, ecx
mov edx, 1
mov eax, dword [ebp - 0x1c]
call fcn.0044cef8
mov eax, dword [ebp - 0x24]
call fcn.007950fc
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
jne 0x66cf1a
mov byte [ebp - 0xbd], 1
xor eax, eax
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x70], 0xbff00000
xor eax, eax
mov dword [ebp - 0x7c], eax
mov dword [ebp - 0x78], 0xbff00000
jmp 0x66cf4e
mov eax, dword [ebp - 0x10]
shl eax, 4
mov edx, dword [0x840ecc]
mov ecx, dword [edx + eax*8 - 0x6c]
mov dword [ebp - 0x38], ecx
mov ecx, dword [edx + eax*8 - 0x68]
mov dword [ebp - 0x34], ecx
mov eax, dword [ebp - 0x10]
shl eax, 4
mov edx, dword [0x840ecc]
mov ecx, dword [edx + eax*8 - 0x74]
mov dword [ebp - 0x40], ecx
mov ecx, dword [edx + eax*8 - 0x70]
mov dword [ebp - 0x3c], ecx
lea eax, [ebp - 0x24]
push eax
xor ecx, ecx
mov edx, 2
mov eax, dword [ebp - 0x1c]
call fcn.0044cef8
mov eax, dword [ebp - 0x24]
call fcn.007950fc
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
jne 0x66cf93
mov byte [ebp - 0xbd], 1
xor eax, eax
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x70], 0xbff00000
xor eax, eax
mov dword [ebp - 0x7c], eax
mov dword [ebp - 0x78], 0xbff00000
jmp 0x66cfc7
mov eax, dword [ebp - 0x10]
shl eax, 4
mov edx, dword [0x840ecc]
mov ecx, dword [edx + eax*8 - 0x6c]
mov dword [ebp - 0x48], ecx
mov ecx, dword [edx + eax*8 - 0x68]
mov dword [ebp - 0x44], ecx
mov eax, dword [ebp - 0x10]
shl eax, 4
mov edx, dword [0x840ecc]
mov ecx, dword [edx + eax*8 - 0x74]
mov dword [ebp - 0x50], ecx
mov ecx, dword [edx + eax*8 - 0x70]
mov dword [ebp - 0x4c], ecx
cmp byte [ebp - 0xbd], 0
jne 0x66d017
push dword [ebp - 0x34]
push dword [ebp - 0x38]
push dword [ebp - 0x3c]
push dword [ebp - 0x40]
push dword [ebp - 0x44]
push dword [ebp - 0x48]
push dword [ebp - 0x4c]
push dword [ebp - 0x50]
mov eax, 0x66e7bc
call fcn.00796950
fstp qword [ebp - 0x74]
wait
push dword [ebp - 0x34]
push dword [ebp - 0x38]
push dword [ebp - 0x3c]
push dword [ebp - 0x40]
push dword [ebp - 0x44]
push dword [ebp - 0x48]
push dword [ebp - 0x4c]
push dword [ebp - 0x50]
call fcn.00796c1c
fstp qword [ebp - 0x7c]
wait
push dword [ebp - 0x70]
push dword [ebp - 0x74]
lea ecx, [ebp - 0x414]
mov edx, 3
mov eax, 0x14
call fcn.007876e8
push dword [ebp - 0x414]
push 0x66e5b4
push dword [ebp - 0x78]
push dword [ebp - 0x7c]
lea ecx, [ebp - 0x418]
mov edx, 3
mov eax, 7
call fcn.007876e8
push dword [ebp - 0x418]
lea eax, [ebp - 0x1c]
mov edx, 3
call fcn.004041b0
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x14]
call fcn.006699f8
jmp case.default.0x66a311
mov eax, dword [0x841818]
mov edx, dword [eax]
mov dword [ebp - 0x38], edx
mov edx, dword [eax + 4]
mov dword [ebp - 0x34], edx
mov eax, dword [0x841208]
mov edx, dword [eax]
mov dword [ebp - 0x40], edx
mov edx, dword [eax + 4]
mov dword [ebp - 0x3c], edx
mov eax, dword [0x842270]
mov eax, dword [eax]
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 1
jl 0x66d0c7
fld qword [ebp - 0x38]
fcomp dword [0x66e700]
fnstsw ax
sahf
jne 0x66d0ec
fld qword [ebp - 0x40]
fcomp dword [0x66e700]
fnstsw ax
sahf
jne 0x66d0ec
lea eax, [ebp - 0x24]
call fcn.00403e74
xor eax, eax
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x70], 0xbff00000
xor eax, eax
mov dword [ebp - 0x7c], eax
mov dword [ebp - 0x78], 0xbff00000
jmp 0x66d197
mov eax, dword [ebp - 0x10]
shl eax, 4
mov edx, dword [0x840ecc]
mov ecx, dword [edx + eax*8 - 0x6c]
mov dword [ebp - 0x48], ecx
mov ecx, dword [edx + eax*8 - 0x68]
mov dword [ebp - 0x44], ecx
mov eax, dword [ebp - 0x10]
shl eax, 4
mov edx, dword [0x840ecc]
mov ecx, dword [edx + eax*8 - 0x74]
mov dword [ebp - 0x50], ecx
mov ecx, dword [edx + eax*8 - 0x70]
mov dword [ebp - 0x4c], ecx
push dword [ebp - 0x34]
push dword [ebp - 0x38]
push dword [ebp - 0x3c]
push dword [ebp - 0x40]
push dword [ebp - 0x44]
push dword [ebp - 0x48]
push dword [ebp - 0x4c]
push dword [ebp - 0x50]
mov eax, 0x66e7bc
call fcn.00796950
fstp qword [ebp - 0x74]
wait
push dword [ebp - 0x34]
push dword [ebp - 0x38]
push dword [ebp - 0x3c]
push dword [ebp - 0x40]
push dword [ebp - 0x44]
push dword [ebp - 0x48]
push dword [ebp - 0x4c]
push dword [ebp - 0x50]
call fcn.00796c1c
fstp qword [ebp - 0x7c]
wait
lea eax, [ebp - 0x20]
mov edx, dword [ebp - 0x10]
shl edx, 4
mov ecx, dword [0x840ecc]
mov edx, dword [ecx + edx*8 - 0x80]
call fcn.00403f0c
lea eax, [ebp - 0x24]
mov edx, dword [ebp - 0x10]
shl edx, 4
mov ecx, dword [0x840ecc]
mov edx, dword [ecx + edx*8 - 0x34]
call fcn.00403f0c
push dword [ebp - 0x20]
push 0x66e5b4
push dword [ebp - 0x24]
push 0x66e5b4
push dword [ebp - 0x70]
push dword [ebp - 0x74]
lea ecx, [ebp - 0x414]
mov edx, 3
mov eax, 0x14
call fcn.007876e8
push dword [ebp - 0x414]
push 0x66e5b4
push dword [ebp - 0x78]
push dword [ebp - 0x7c]
lea ecx, [ebp - 0x418]
mov edx, 3
mov eax, 7
call fcn.007876e8
push dword [ebp - 0x418]
lea eax, [ebp - 0x1c]
mov edx, 7
call fcn.004041b0
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x14]
call fcn.006699f8
jmp case.default.0x66a311
call fcn.00564884
mov edx, 0x66e588
mov eax, dword [ebp - 0x14]
call fcn.006699f8
jmp case.default.0x66a311
call fcn.0056488c
mov edx, 0x66e588
mov eax, dword [ebp - 0x14]
call fcn.006699f8
jmp case.default.0x66a311
call fcn.00564894
mov edx, 0x66e588
mov eax, dword [ebp - 0x14]
call fcn.006699f8
jmp case.default.0x66a311
lea eax, [ebp - 0x1c]
mov edx, dword [ebp - 0xc4]
call fcn.00403f0c
push 0
push 0
mov edx, 1
mov eax, dword [ebp - 0x1c]
call fcn.0044d018
fstp qword [ebp - 0x74]
wait
push dword [ebp - 0x70]
push dword [ebp - 0x74]
call fcn.005648a4
mov edx, 0x66e588
mov eax, dword [ebp - 0x14]
call fcn.006699f8
jmp case.default.0x66a311
call fcn.005648e0
mov edx, 0x66e588
mov eax, dword [ebp - 0x14]
call fcn.006699f8
jmp case.default.0x66a311
call fcn.005648ec
mov edx, 0x66e588
mov eax, dword [ebp - 0x14]
call fcn.006699f8
jmp case.default.0x66a311
call fcn.005648f4
mov edx, 0x66e588
mov eax, dword [ebp - 0x14]
call fcn.006699f8
jmp case.default.0x66a311
call fcn.005648fc
mov edx, 0x66e588
mov eax, dword [ebp - 0x14]
call fcn.006699f8
jmp case.default.0x66a311
call fcn.00564904
mov edx, 0x66e588
mov eax, dword [ebp - 0x14]
call fcn.006699f8
jmp case.default.0x66a311
lea eax, [ebp - 0x1c]
mov edx, dword [ebp - 0xc4]
call fcn.00403f0c
push 0
push 0
mov edx, 1
mov eax, dword [ebp - 0x1c]
call fcn.0044d018
fstp qword [ebp - 0x74]
wait
push dword [ebp - 0x70]
push dword [ebp - 0x74]
call fcn.00564914
mov edx, 0x66e588
mov eax, dword [ebp - 0x14]
call fcn.006699f8
jmp case.default.0x66a311
call fcn.00564950
mov edx, 0x66e588
mov eax, dword [ebp - 0x14]
call fcn.006699f8
jmp case.default.0x66a311
call fcn.0056495c
mov edx, 0x66e588
mov eax, dword [ebp - 0x14]
call fcn.006699f8
jmp case.default.0x66a311
mov al, 1
call fcn.00686ce8
mov edx, 0x66e588
mov eax, dword [ebp - 0x14]
call fcn.006699f8
jmp case.default.0x66a311
call fcn.006873f0
mov edx, 0x66e588
mov eax, dword [ebp - 0x14]
call fcn.006699f8
jmp case.default.0x66a311
lea eax, [ebp - 0x1c]
mov edx, dword [ebp - 0xc4]
call fcn.00403f0c
mov eax, dword [ebp - 0x1c]
call fcn.0044c49c
test al, al
jne 0x66d3c3
mov eax, dword [ebp - 0x1c]
call fcn.00687504
mov edx, 0x66e588
mov eax, dword [ebp - 0x14]
call fcn.006699f8
jmp case.default.0x66a311
mov edx, 0x66e76c
lea eax, [ebp - 0x2b8]
call fcn.0040619e
lea eax, [ebp - 0x2b8]
call fcn.004066e7
call fcn.00402898
lea edx, [ebp - 0x1c]
lea eax, [ebp - 0x2b8]
call fcn.004044d8
lea eax, [ebp - 0x2b8]
call fcn.00406630
call fcn.00402898
lea eax, [ebp - 0x2b8]
call fcn.00406308
call fcn.00402898
mov eax, dword [ebp - 0x1c]
call fcn.0044c49c
test al, al
jne case.default.0x66a311
mov eax, dword [ebp - 0x1c]
call fcn.00687504
jmp case.default.0x66a311
mov eax, dword [0x840660]
mov byte [eax], 0
mov edx, 0x66e588
mov eax, dword [ebp - 0x14]
call fcn.006699f8
jmp case.default.0x66a311
mov eax, dword [0x840660]
mov byte [eax], 1
mov edx, 0x66e588
mov eax, dword [ebp - 0x14]
call fcn.006699f8
jmp case.default.0x66a311
mov eax, dword [0x8413ec]
mov byte [eax], 0
mov edx, 0x66e588
mov eax, dword [ebp - 0x14]
call fcn.006699f8
jmp case.default.0x66a311
mov eax, dword [0x8413ec]
mov byte [eax], 1
mov edx, 0x66e588
mov eax, dword [ebp - 0x14]
call fcn.006699f8
jmp case.default.0x66a311
mov eax, dword [0x840d68]
mov byte [eax], 0
mov edx, 0x66e588
mov eax, dword [ebp - 0x14]
call fcn.006699f8
jmp case.default.0x66a311
mov eax, dword [0x840d68]
mov byte [eax], 1
mov edx, 0x66e588
mov eax, dword [ebp - 0x14]
call fcn.006699f8
jmp case.default.0x66a311
mov eax, dword [0x8420e4]
mov byte [eax], 0
mov edx, 0x66e588
mov eax, dword [ebp - 0x14]
call fcn.006699f8
jmp case.default.0x66a311
mov eax, dword [0x8420e4]
mov byte [eax], 1
mov edx, 0x66e588
mov eax, dword [ebp - 0x14]
call fcn.006699f8
jmp case.default.0x66a311
call fcn.007a753c
mov eax, dword [0x841774]
mov eax, dword [eax]
call fcn.0071f640
call fcn.007400b8
mov edx, 0x66e588
mov eax, dword [ebp - 0x14]
call fcn.006699f8
jmp case.default.0x66a311
lea eax, [ebp - 0x1c]
mov edx, dword [ebp - 0xc4]
call fcn.00403f0c
xor ecx, ecx
mov edx, 1
mov eax, dword [ebp - 0x1c]
call fcn.0044d1c8
mov dword [ebp - 0x5c], eax
xor ecx, ecx
mov edx, 2
mov eax, dword [ebp - 0x1c]
call fcn.0044d1c8
mov dword [ebp - 0x10], eax
push 0
push 0
mov edx, 3
mov eax, dword [ebp - 0x1c]
call fcn.0044d018
fstp qword [ebp - 0x38]
wait
push 0
push 0
mov edx, 4
mov eax, dword [ebp - 0x1c]
call fcn.0044d018
fstp qword [ebp - 0x40]
wait
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x38]
mov edx, dword [0x84125c]
mov edx, dword [edx]
mov eax, 0x76
call fcn.0055a94c
push 0xc0884800
push 0
mov edx, 5
mov eax, dword [ebp - 0x1c]
call fcn.0044d018
fstp qword [ebp - 0x58]
wait
call fcn.0040b02c
add esp, 0xfffffff8
fstp qword [esp]
wait
mov edx, 6
mov eax, dword [ebp - 0x1c]
call fcn.0044d018
fstp qword [ebp - 0x74]
wait
push dword [ebp - 0x34]
push dword [ebp - 0x38]
push dword [ebp - 0x3c]
push dword [ebp - 0x40]
fld qword [ebp - 0x58]
add esp, 0xfffffffc
fstp dword [esp]
wait
push dword [ebp - 0x70]
push dword [ebp - 0x74]
call fcn.007a5264
add esp, 0xfffffff8
fstp qword [esp]
wait
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x5c]
call fcn.0071b178
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 0
je 0x66d62f
mov eax, dword [0x841d04]
mov edx, dword [ebp - 0x5c]
inc dword [eax + edx*4]
mov eax, dword [ebp - 0x5c]
call fcn.0071ae18
mov eax, dword [0x841158]
mov edx, dword [ebp - 0x5c]
fstp qword [eax + edx*8]
wait
mov eax, dword [0x840668]
mov eax, dword [eax]
mov edx, dword [ebp - 0x5c]
call fcn.007001a4
cmp dword [ebp - 0xc8], 0
je 0x66d66d
mov edx, 0x66e588
mov eax, dword [ebp - 0x14]
call fcn.006699f8
jmp case.default.0x66a311
mov edx, 0x66e7cc
mov eax, dword [ebp - 0x14]
call fcn.006699f8
jmp case.default.0x66a311
mov eax, dword [0x841330]
mov byte [eax], 1
mov edx, 0x66e588
mov eax, dword [ebp - 0x14]
call fcn.006699f8
jmp case.default.0x66a311
mov eax, dword [0x841330]
mov byte [eax], 0
mov edx, 0x66e588
mov eax, dword [ebp - 0x14]
call fcn.006699f8
jmp case.default.0x66a311
lea eax, [ebp - 0x1c]
mov edx, dword [ebp - 0xc4]
call fcn.00403f0c
lea eax, [ebp - 0x20]
push eax
xor ecx, ecx
mov edx, 1
mov eax, dword [ebp - 0x1c]
call fcn.0044cef8
lea eax, [ebp - 0x24]
push eax
xor ecx, ecx
mov edx, 2
mov eax, dword [ebp - 0x1c]
call fcn.0044cef8
lea eax, [ebp - 0x28]
push eax
xor ecx, ecx
mov edx, 3
mov eax, dword [ebp - 0x1c]
call fcn.0044cef8
mov ecx, dword [ebp - 0x28]
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
call fcn.00683d7c
mov dword [ebp - 0x5c], eax
lea edx, [ebp - 0x414]
mov eax, dword [ebp - 0x5c]
call fcn.004094a8
mov edx, dword [ebp - 0x414]
mov eax, dword [ebp - 0x14]
call fcn.006699f8
jmp case.default.0x66a311
lea eax, [ebp - 0x1c]
mov edx, dword [ebp - 0xc4]
call fcn.00403f0c
lea eax, [ebp - 0x20]
push eax
xor ecx, ecx
mov edx, 1
mov eax, dword [ebp - 0x1c]
call fcn.0044cef8
lea eax, [ebp - 0x24]
push eax
xor ecx, ecx
mov edx, 2
mov eax, dword [ebp - 0x1c]
call fcn.0044cef8
push 0xc0884800
push 0
mov edx, 3
mov eax, dword [ebp - 0x1c]
call fcn.0044d018
fstp qword [ebp - 0x38]
wait
push 0xc0884800
push 0
mov edx, 4
mov eax, dword [ebp - 0x1c]
call fcn.0044d018
fstp qword [ebp - 0x40]
wait
push 0xc0884800
push 0
mov edx, 5
mov eax, dword [ebp - 0x1c]
call fcn.0044d018
fstp qword [ebp - 0xd0]
wait
push 0xc0884800
push 0
mov edx, 6
mov eax, dword [ebp - 0x1c]
call fcn.0044d018
fstp qword [ebp - 0xd8]
wait
push 0
push 0
mov edx, 7
mov eax, dword [ebp - 0x1c]
call fcn.0044d018
fstp qword [ebp - 0x74]
wait
push dword [ebp - 0x34]
push dword [ebp - 0x38]
push dword [ebp - 0x3c]
push dword [ebp - 0x40]
push dword [ebp - 0xcc]
push dword [ebp - 0xd0]
push dword [ebp - 0xd4]
push dword [ebp - 0xd8]
push dword [ebp - 0x70]
push dword [ebp - 0x74]
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
call fcn.00684064
mov dword [ebp - 0x5c], eax
lea edx, [ebp - 0x414]
mov eax, dword [ebp - 0x5c]
call fcn.004094a8
mov edx, dword [ebp - 0x414]
mov eax, dword [ebp - 0x14]
call fcn.006699f8
jmp case.default.0x66a311
call fcn.006842a0
mov edx, 0x66e588
mov eax, dword [ebp - 0x14]
call fcn.006699f8
jmp case.default.0x66a311
lea eax, [ebp - 0x1c]
mov edx, dword [ebp - 0xc4]
call fcn.00403f0c
lea eax, [ebp - 0x20]
push eax
xor ecx, ecx
mov edx, 1
mov eax, dword [ebp - 0x1c]
call fcn.0044cef8
lea eax, [ebp - 0x24]
push eax
xor ecx, ecx
mov edx, 2
mov eax, dword [ebp - 0x1c]
call fcn.0044cef8
lea eax, [ebp - 0x28]
push eax
xor ecx, ecx
mov edx, 3
mov eax, dword [ebp - 0x1c]
call fcn.0044cef8
mov ecx, dword [ebp - 0x28]
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
call fcn.00684190
mov edx, 0x66e588
mov eax, dword [ebp - 0x14]
call fcn.006699f8
jmp case.default.0x66a311
mov eax, dword [0x8420e0]
mov byte [eax], 1
mov edx, 0x66e588
mov eax, dword [ebp - 0x14]
call fcn.006699f8
jmp case.default.0x66a311
mov eax, dword [0x8420e0]
mov byte [eax], 0
mov edx, 0x66e588
mov eax, dword [ebp - 0x14]
call fcn.006699f8
jmp case.default.0x66a311
mov eax, dword [0x841ef8]
mov byte [eax], 1
mov eax, dword [0x842010]
mov byte [eax], 1
mov edx, 0x66e588
mov eax, dword [ebp - 0x14]
call fcn.006699f8
jmp case.default.0x66a311
mov eax, dword [0x841ef8]
mov byte [eax], 0
mov eax, dword [0x842010]
mov byte [eax], 0
mov edx, 0x66e588
mov eax, dword [ebp - 0x14]
call fcn.006699f8
jmp case.default.0x66a311
lea eax, [ebp - 0x1c]
mov edx, dword [ebp - 0xc4]
call fcn.00403f0c
lea eax, [ebp - 0x20]
push eax
xor ecx, ecx
mov edx, 1
mov eax, dword [ebp - 0x1c]
call fcn.0044cef8
lea eax, [ebp - 0x24]
push eax
xor ecx, ecx
mov edx, 2
mov eax, dword [ebp - 0x1c]
call fcn.0044cef8
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
call fcn.00684220
mov dword [ebp - 0x5c], eax
lea edx, [ebp - 0x414]
mov eax, dword [ebp - 0x5c]
call fcn.004094a8
mov edx, dword [ebp - 0x414]
mov eax, dword [ebp - 0x14]
call fcn.006699f8
jmp case.default.0x66a311
mov eax, dword [0x8415a0]
mov eax, dword [eax]
mov eax, dword [eax + 0x804]
mov dl, 1
call fcn.00456fd4
mov eax, dword [0x8415a0]
mov eax, dword [eax]
mov eax, dword [eax + 0x3c0]
mov dl, 1
call fcn.0042f884
mov eax, dword [0x840668]
mov eax, dword [eax]
mov eax, dword [eax + 0x1e0]
mov dl, 1
call fcn.00456fd4
mov edx, 0x66e588
mov eax, dword [ebp - 0x14]
call fcn.006699f8
jmp case.default.0x66a311
mov eax, dword [0x8415a0]
mov eax, dword [eax]
mov eax, dword [eax + 0x804]
xor edx, edx
call fcn.00456fd4
mov eax, dword [0x8415a0]
mov eax, dword [eax]
mov eax, dword [eax + 0x3c0]
xor edx, edx
call fcn.0042f884
mov eax, dword [0x840668]
mov eax, dword [eax]
mov eax, dword [eax + 0x1e0]
xor edx, edx
call fcn.00456fd4
mov edx, 0x66e588
mov eax, dword [ebp - 0x14]
call fcn.006699f8
jmp case.default.0x66a311
lea eax, [ebp - 0x1c]
mov edx, dword [ebp - 0xc4]
call fcn.00403f0c
mov ecx, 1
mov edx, 1
mov eax, dword [ebp - 0x1c]
call fcn.0044d1c8
mov dword [ebp - 0x5c], eax
mov eax, dword [0x841f7c]
mov edx, dword [ebp - 0x5c]
mov byte [eax + edx], 1
mov edx, 0x66e588
mov eax, dword [ebp - 0x14]
call fcn.006699f8
jmp case.default.0x66a311
lea eax, [ebp - 0x1c]
mov edx, dword [ebp - 0xc4]
call fcn.00403f0c
mov ecx, 1
mov edx, 1
mov eax, dword [ebp - 0x1c]
call fcn.0044d1c8
mov dword [ebp - 0x5c], eax
mov eax, dword [0x841f7c]
mov edx, dword [ebp - 0x5c]
mov byte [eax + edx], 0
mov edx, 0x66e588
mov eax, dword [ebp - 0x14]
call fcn.006699f8
jmp case.default.0x66a311
lea eax, [ebp - 0x1c]
mov edx, dword [ebp - 0xc4]
call fcn.00403f0c
mov ecx, 1
mov edx, 1
mov eax, dword [ebp - 0x1c]
call fcn.0044d1c8
mov dword [ebp - 0x5c], eax
lea eax, [ebp - 0x20]
push eax
xor ecx, ecx
mov edx, 2
mov eax, dword [ebp - 0x1c]
call fcn.0044cef8
lea eax, [ebp - 0x51c]
mov edx, dword [ebp - 0x20]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x51c]
mov eax, dword [ebp - 0x5c]
lea eax, [eax + eax*8]
mov ecx, dword [0x84163c]
lea eax, [ecx + eax*4]
mov cl, 0x23
call fcn.00402d1c
mov edx, 0x66e588
mov eax, dword [ebp - 0x14]
call fcn.006699f8
jmp case.default.0x66a311
lea eax, [ebp - 0x1c]
mov edx, dword [ebp - 0xc4]
call fcn.00403f0c
push 0xc0884800
push 0
mov edx, 1
mov eax, dword [ebp - 0x1c]
call fcn.0044d018
fstp qword [ebp - 0x38]
wait
push 0xc0884800
push 0
mov edx, 2
mov eax, dword [ebp - 0x1c]
call fcn.0044d018
fstp qword [ebp - 0x40]
wait
fld qword [ebp - 0x38]
fcomp dword [0x66e6ec]
fnstsw ax
sahf
je 0x66db7c
fld qword [ebp - 0x40]
fcomp dword [0x66e6ec]
fnstsw ax
sahf
jne 0x66db89
mov edx, 0x66e57c
mov eax, dword [ebp - 0x14]
call fcn.006699f8
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x38]
mov edx, dword [0x84125c]
mov edx, dword [edx]
mov eax, 0x76
call fcn.0055a94c
push dword [ebp - 0x3c]
push dword [ebp - 0x40]
push dword [ebp - 0x34]
push dword [ebp - 0x38]
mov ecx, dword [0x841f04]
mov edx, dword [0x8409e0]
mov eax, dword [0x841c80]
mov eax, dword [eax]
call fcn.00756a7c
test al, al
je 0x66dbdc
mov edx, 0x66e550
mov eax, dword [ebp - 0x14]
call fcn.006699f8
jmp case.default.0x66a311
mov edx, 0x66e588
mov eax, dword [ebp - 0x14]
call fcn.006699f8
jmp case.default.0x66a311
lea eax, [ebp - 0x1c]
mov edx, dword [ebp - 0xc4]
call fcn.00403f0c
push 0xc0884800
push 0
mov edx, 1
mov eax, dword [ebp - 0x1c]
call fcn.0044d018
fstp qword [ebp - 0x38]
wait
push 0xc0884800
push 0
mov edx, 2
mov eax, dword [ebp - 0x1c]
call fcn.0044d018
fstp qword [ebp - 0x40]
wait
mov ecx, 1
mov edx, 3
mov eax, dword [ebp - 0x1c]
call fcn.0044d1c8
mov dword [ebp - 0x5c], eax
lea eax, [ebp - 0x20]
push eax
xor ecx, ecx
mov edx, 4
mov eax, dword [ebp - 0x1c]
call fcn.0044cef8
mov eax, dword [ebp - 0x20]
call fcn.0044c49c
test al, al
je 0x66dc70
lea eax, [ebp - 0x20]
mov edx, dword [0x8415f4]
mov edx, dword [edx]
call fcn.00403f0c
fld qword [ebp - 0x38]
fcomp dword [0x66e6ec]
fnstsw ax
sahf
je 0x66dc8c
fld qword [ebp - 0x40]
fcomp dword [0x66e6ec]
fnstsw ax
sahf
jne 0x66dc99
mov edx, 0x66e550
mov eax, dword [ebp - 0x14]
call fcn.006699f8
push dword [ebp - 0x34]
push dword [ebp - 0x38]
push dword [ebp - 0x3c]
push dword [ebp - 0x40]
lea ecx, [ebp - 0x24]
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x5c]
call fcn.006f3458
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x14]
call fcn.006699f8
jmp case.default.0x66a311
mov edx, dword [0x8415f4]
mov edx, dword [edx]
mov eax, dword [ebp - 0x14]
call fcn.006699f8
jmp case.default.0x66a311
lea eax, [ebp - 0x1c]
mov edx, dword [ebp - 0xc4]
call fcn.00403f0c
mov ecx, 1
mov edx, 1
mov eax, dword [ebp - 0x1c]
call fcn.0044d1c8
mov dword [ebp - 0x5c], eax
xor ecx, ecx
mov edx, 2
mov eax, dword [ebp - 0x1c]
call fcn.0044d1c8
mov dword [ebp - 0x10], eax
mov eax, dword [0x8420d8]
mov edx, dword [ebp - 0x5c]
mov ecx, dword [ebp - 0x10]
mov dword [eax + edx*4], ecx
mov edx, 0x66e588
mov eax, dword [ebp - 0x14]
call fcn.006699f8
jmp case.default.0x66a311
lea eax, [ebp - 0x1c]
mov edx, dword [ebp - 0xc4]
call fcn.00403f0c
mov ecx, 1
mov edx, 1
mov eax, dword [ebp - 0x1c]
call fcn.0044d1c8
mov dword [ebp - 0x5c], eax
xor ecx, ecx
mov edx, 2
mov eax, dword [ebp - 0x1c]
call fcn.0044d1c8
mov dword [ebp - 0x10], eax
mov eax, dword [0x840eec]
mov edx, dword [ebp - 0x5c]
mov ecx, dword [ebp - 0x10]
mov dword [eax + edx*4], ecx
mov edx, 0x66e588
mov eax, dword [ebp - 0x14]
call fcn.006699f8
jmp case.default.0x66a311
lea eax, [ebp - 0x1c]
mov edx, dword [ebp - 0xc4]
call fcn.00403f0c
lea eax, [ebp - 0x20]
push eax
mov ecx, 0x66e7d8
mov edx, 1
mov eax, dword [ebp - 0x1c]
call fcn.0044cef8
mov eax, dword [ebp - 0x20]
call fcn.0079503c
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0xffffffff
jne 0x66ddbc
xor eax, eax
mov dword [ebp - 0x5c], eax
lea edx, [ebp - 0x414]
mov eax, dword [ebp - 0x5c]
call fcn.004094a8
mov edx, dword [ebp - 0x414]
mov eax, dword [ebp - 0x14]
call fcn.006699f8
jmp case.default.0x66a311
lea eax, [ebp - 0x1c]
mov edx, dword [ebp - 0xc4]
call fcn.00403f0c
lea eax, [ebp - 0x20]
push eax
mov ecx, 0x66e7d8
mov edx, 1
mov eax, dword [ebp - 0x1c]
call fcn.0044cef8
mov eax, dword [ebp - 0x20]
call fcn.0079503c
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0
jle 0x66de3c
mov eax, dword [0x84065c]
mov eax, dword [eax]
cmp eax, dword [ebp - 0x5c]
jl 0x66de3c
mov eax, dword [ebp - 0x5c]
call fcn.00707468
mov eax, dword [0x841774]
mov eax, dword [eax]
call fcn.0071f640
call fcn.007400b8
call fcn.007a753c
cmp dword [ebp - 0x5c], 0xffffffff
jne 0x66de47
xor eax, eax
mov dword [ebp - 0x5c], eax
lea edx, [ebp - 0x414]
mov eax, dword [ebp - 0x5c]
call fcn.004094a8
mov edx, dword [ebp - 0x414]
mov eax, dword [ebp - 0x14]
call fcn.006699f8
jmp case.default.0x66a311
lea eax, [ebp - 0x1c]
mov edx, dword [ebp - 0xc4]
call fcn.00403f0c
xor ecx, ecx
mov edx, 1
mov eax, dword [ebp - 0x1c]
call fcn.0044d1c8
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0
jle 0x66deb8
mov eax, dword [0x84065c]
mov eax, dword [eax]
cmp eax, dword [ebp - 0x5c]
jl 0x66deb8
mov eax, dword [ebp - 0x5c]
call fcn.00707468
mov eax, dword [0x841774]
mov eax, dword [eax]
call fcn.0071f640
call fcn.007400b8
call fcn.007a753c
lea edx, [ebp - 0x414]
mov eax, dword [ebp - 0x5c]
call fcn.004094a8
mov edx, dword [ebp - 0x414]
mov eax, dword [ebp - 0x14]
call fcn.006699f8
jmp case.default.0x66a311
lea eax, [ebp - 0x1c]
mov edx, dword [ebp - 0xc4]
call fcn.00403f0c
xor ecx, ecx
mov edx, 1
mov eax, dword [ebp - 0x1c]
call fcn.0044d1c8
mov dword [ebp - 0x5c], eax
imul eax, dword [ebp - 0x5c], 0xd
mov edx, dword [0x841344]
lea eax, [edx + eax*4 + 0x2c]
call fcn.00403e74
imul eax, dword [ebp - 0x5c], 0xd
mov edx, dword [0x841344]
xor ecx, ecx
mov dword [edx + eax*4], ecx
mov dword [edx + eax*4 + 4], ecx
imul eax, dword [ebp - 0x5c], 0xd
mov edx, dword [0x841344]
xor ecx, ecx
mov dword [edx + eax*4 + 8], ecx
mov dword [edx + eax*4 + 0xc], ecx
imul eax, dword [ebp - 0x5c], 0xd
mov edx, dword [0x841344]
mov eax, dword [edx + eax*4 + 0x30]
call fcn.004032dc
imul eax, dword [ebp - 0x5c], 0xd
mov edx, dword [0x841344]
xor ecx, ecx
mov dword [edx + eax*4 + 0x30], ecx
lea edx, [ebp - 0x414]
mov eax, dword [ebp - 0x5c]
call fcn.004094a8
mov edx, dword [ebp - 0x414]
mov eax, dword [ebp - 0x14]
call fcn.006699f8
jmp case.default.0x66a311
lea eax, [ebp - 0x1c]
mov edx, dword [ebp - 0xc4]
call fcn.00403f0c
xor ecx, ecx
mov edx, 1
mov eax, dword [ebp - 0x1c]
call fcn.0044d1c8
mov dword [ebp - 0x5c], eax
imul eax, dword [ebp - 0x5c], 0x17
mov edx, dword [0x840e58]
xor ecx, ecx
mov dword [edx + eax*4], ecx
mov dword [edx + eax*4 + 4], ecx
imul eax, dword [ebp - 0x5c], 0x17
mov edx, dword [0x840e58]
xor ecx, ecx
mov dword [edx + eax*4 + 8], ecx
mov dword [edx + eax*4 + 0xc], ecx
imul eax, dword [ebp - 0x5c], 0x17
mov edx, dword [0x840e58]
mov eax, dword [edx + eax*4 + 0x54]
call fcn.004032dc
imul eax, dword [ebp - 0x5c], 0x17
mov edx, dword [0x840e58]
xor ecx, ecx
mov dword [edx + eax*4 + 0x54], ecx
mov eax, dword [0x841774]
mov eax, dword [eax]
call fcn.0071f640
call fcn.007400b8
lea edx, [ebp - 0x414]
mov eax, dword [ebp - 0x5c]
call fcn.004094a8
mov edx, dword [ebp - 0x414]
mov eax, dword [ebp - 0x14]
call fcn.006699f8
jmp case.default.0x66a311
mov eax, dword [0x841068]
mov byte [eax], 1
mov eax, 0x66e7e8
call fcn.00798864
test al, al
je 0x66e051
lea edx, [ebp - 0x414]
mov eax, dword [0x842054]
call fcn.00405e74
mov edx, dword [ebp - 0x414]
mov eax, dword [0x841ed4]
mov eax, dword [eax]
mov eax, dword [eax + 0x220]
mov ecx, dword [eax]
call dword [ecx + 0x64]
mov edx, 0x66e588
mov eax, dword [ebp - 0x14]
call fcn.006699f8
jmp case.default.0x66a311
mov eax, dword [0x841068]
mov byte [eax], 0
mov eax, 0x66e7e8
call fcn.00798864
test al, al
je 0x66e0a1
lea edx, [ebp - 0x414]
mov eax, dword [0x840c80]
call fcn.00405e74
mov edx, dword [ebp - 0x414]
mov eax, dword [0x841ed4]
mov eax, dword [eax]
mov eax, dword [eax + 0x220]
mov ecx, dword [eax]
call dword [ecx + 0x64]
mov edx, 0x66e588
mov eax, dword [ebp - 0x14]
call fcn.006699f8
jmp case.default.0x66a311
lea eax, [ebp - 0x1c]
mov edx, dword [ebp - 0xc4]
call fcn.00403f0c
push 0xc0884800
push 0
mov edx, 1
mov eax, dword [ebp - 0x1c]
call fcn.0044d018
mov eax, dword [0x840d80]
fstp dword [eax]
wait
fld xword [0x66e7fc]
mov eax, dword [0x840d80]
fmul dword [eax]
mov eax, dword [0x840d80]
fstp dword [eax]
wait
mov edx, 0x66e588
mov eax, dword [ebp - 0x14]
call fcn.006699f8
jmp case.default.0x66a311
lea eax, [ebp - 0x1c]
mov edx, dword [ebp - 0xc4]
call fcn.00403f0c
push 0
push 0
mov edx, 1
mov eax, dword [ebp - 0x1c]
call fcn.0044d018
fstp qword [ebp - 0x38]
wait
push 0
push 0
mov edx, 2
mov eax, dword [ebp - 0x1c]
call fcn.0044d018
fstp qword [ebp - 0x40]
wait
push 0
push 0
mov edx, 3
mov eax, dword [ebp - 0x1c]
call fcn.0044d018
fstp qword [ebp - 0x48]
wait
push 0
push 0
mov edx, 4
mov eax, dword [ebp - 0x1c]
call fcn.0044d018
fstp qword [ebp - 0x50]
wait
xor ecx, ecx
mov edx, 5
mov eax, dword [ebp - 0x1c]
call fcn.0044d1c8
mov dword [ebp - 0x5c], eax
push dword [ebp - 0x34]
push dword [ebp - 0x38]
push dword [ebp - 0x3c]
push dword [ebp - 0x40]
push dword [ebp - 0x44]
push dword [ebp - 0x48]
push dword [ebp - 0x4c]
push dword [ebp - 0x50]
mov eax, dword [ebp - 0x5c]
call fcn.00796780
fstp qword [ebp - 0x74]
wait
push dword [ebp - 0x70]
push dword [ebp - 0x74]
lea ecx, [ebp - 0x414]
mov edx, 3
mov eax, 0x1e
call fcn.007876e8
mov eax, dword [ebp - 0x414]
lea edx, [ebp - 0x1c]
call fcn.00792bbc
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x14]
call fcn.006699f8
jmp case.default.0x66a311
lea eax, [ebp - 0x1c]
mov edx, dword [ebp - 0xc4]
call fcn.00403f0c
push 0
push 0
mov edx, 1
mov eax, dword [ebp - 0x1c]
call fcn.0044d018
fstp qword [ebp - 0x38]
wait
push 0
push 0
mov edx, 2
mov eax, dword [ebp - 0x1c]
call fcn.0044d018
fstp qword [ebp - 0x40]
wait
xor eax, eax
mov dword [ebp - 0x5c], eax
push dword [ebp - 0x34]
push dword [ebp - 0x38]
push dword [ebp - 0x3c]
push dword [ebp - 0x40]
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x24]
push eax
push 1
lea eax, [ebp - 0x5c]
mov cl, 0x6d
mov edx, 0x76
call fcn.006c6c70
fstp qword [ebp - 0x74]
wait
push dword [ebp - 0x70]
push dword [ebp - 0x74]
lea ecx, [ebp - 0x418]
mov edx, 3
mov eax, 0x1e
call fcn.007876e8
mov eax, dword [ebp - 0x418]
lea edx, [ebp - 0x414]
call fcn.00792bbc
push dword [ebp - 0x414]
push 0x66e5b4
push dword [ebp - 0x20]
push 0x66e5b4
push dword [ebp - 0x24]
push 0x66e5b4
lea eax, [ebp - 0x1c]
mov edx, 6
call fcn.004041b0
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x14]
call fcn.006699f8
jmp case.default.0x66a311
lea eax, [ebp - 0x1c]
mov edx, dword [ebp - 0xc4]
call fcn.00403f0c
push 0
push 0
mov edx, 1
mov eax, dword [ebp - 0x1c]
call fcn.0044d018
fstp qword [ebp - 0x38]
wait
push 0
push 0
mov edx, 2
mov eax, dword [ebp - 0x1c]
call fcn.0044d018
fstp qword [ebp - 0x40]
wait
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x38]
mov edx, dword [0x84125c]
mov edx, dword [edx]
mov eax, 0x76
call fcn.0055a94c
push dword [ebp - 0x34]
push dword [ebp - 0x38]
push dword [ebp - 0x3c]
push dword [ebp - 0x40]
lea edx, [ebp - 0x64]
lea eax, [ebp - 0x60]
call fcn.0078d06c
lea edx, [ebp - 0x414]
mov eax, dword [ebp - 0x60]
call fcn.004094a8
push dword [ebp - 0x414]
push 0x66e5b4
lea edx, [ebp - 0x418]
mov eax, dword [ebp - 0x64]
call fcn.004094a8
push dword [ebp - 0x418]
push 0x66e5b4
lea eax, [ebp - 0x1c]
mov edx, 4
call fcn.004041b0
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x14]
call fcn.006699f8
jmp case.default.0x66a311
lea eax, [ebp - 0x1c]
mov edx, dword [ebp - 0xc4]
call fcn.00403f0c
lea eax, [ebp - 0x20]
push eax
xor ecx, ecx
mov edx, 1
mov eax, dword [ebp - 0x1c]
call fcn.0044cef8
mov eax, dword [ebp - 0x20]
call fcn.0044c49c
test al, al
jne 0x66e394
mov eax, dword [0x8415a0]
mov eax, dword [eax]
xor ecx, ecx
mov edx, dword [ebp - 0x20]
call fcn.0077506c
mov edx, 0x66e588
mov eax, dword [ebp - 0x14]
call fcn.006699f8
jmp case.default.0x66a311
lea eax, [ebp - 0x1c]
mov edx, dword [ebp - 0xc4]
call fcn.00403f0c
lea eax, [ebp - 0x20]
push eax
xor ecx, ecx
mov edx, 1
mov eax, dword [ebp - 0x1c]
call fcn.0044cef8
mov eax, dword [ebp - 0x20]
call fcn.0044c49c
test al, al
jne 0x66e406
lea eax, [ebp - 0x24]
mov edx, dword [0x84199c]
mov edx, dword [edx]
call fcn.00403f0c
mov eax, dword [0x84199c]
mov edx, dword [ebp - 0x20]
call fcn.00403ec8
xor edx, edx
mov al, 1
call fcn.00729dd0
mov eax, dword [0x84199c]
mov edx, dword [ebp - 0x24]
call fcn.00403ec8
mov edx, 0x66e588
mov eax, dword [ebp - 0x14]
call fcn.006699f8
jmp case.default.0x66a311
lea eax, [ebp - 0x1c]
mov edx, dword [ebp - 0xc4]
call fcn.00403f0c
xor ecx, ecx
mov edx, 1
mov eax, dword [ebp - 0x1c]
call fcn.0044d1c8
mov dword [ebp - 0x5c], eax
push 0
push 0
mov edx, 2
mov eax, dword [ebp - 0x1c]
call fcn.0044d018
fstp qword [ebp - 0x38]
wait
push 0
push 0
mov edx, 3
mov eax, dword [ebp - 0x1c]
call fcn.0044d018
fstp qword [ebp - 0x40]
wait
lea eax, [ebp - 0x28]
mov edx, 0x66e588
call fcn.00403f0c
cmp dword [ebp - 0x5c], 0
jle 0x66e4d4
cmp dword [ebp - 0x5c], 0x4b
jg 0x66e4d4
mov eax, dword [0x841d04]
mov edx, dword [ebp - 0x5c]
cmp dword [eax + edx*4], 2
jle 0x66e4d4
lea eax, [ebp - 0x28]
mov edx, 0x66e550
call fcn.00403f0c
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x38]
mov edx, dword [0x84125c]
mov edx, dword [edx]
mov eax, 0x76
call fcn.0055a94c
push dword [ebp - 0x3c]
push dword [ebp - 0x40]
push dword [ebp - 0x34]
push dword [ebp - 0x38]
mov eax, dword [ebp - 0x5c]
call fcn.007569b0
test al, al
je 0x66e4d4
lea eax, [ebp - 0x28]
mov edx, 0x66e57c
call fcn.00403f0c
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x14]
call fcn.006699f8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x66e52d
lea eax, [ebp - 0x41c]
mov edx, 3
call fcn.00403e98
lea eax, [ebp - 0x410]
mov edx, dword [0x408370]
call fcn.00404838
lea eax, [ebp - 0xc4]
call fcn.00403e74
lea eax, [ebp - 0x30]
mov edx, 6
call fcn.00403e98
ret