Function at 0x6a899def
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push esi
push ebx
mov eax, 0x16f0
call fcn.6aa7e270
sub esp, eax
mov eax, dword [ebp + 0x1c]
mov word [ebp - 0x16bc], ax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x60], eax
mov eax, dword [ebp + 8]
mov ax, word [eax]
cwde
mov ax, word [eax + eax + 0x6add7320]
mov edx, dword [ebp + 0x14]
mov word [edx], ax
mov eax, dword [ebp + 8]
mov ax, word [eax]
mov word [ebp - 0x62], ax
lea eax, [ebp - 0x38c]
add eax, 0xe8
mov dword [ebp - 0x68], eax
lea eax, [ebp - 0x38c]
sub eax, 0xffffff80
mov dword [ebp - 0x6c], eax
lea eax, [ebp - 0x38c]
mov dword [ebp - 0x70], eax
lea eax, [ebp - 0xa64]
add eax, 0x1f0
mov dword [ebp - 0x74], eax
lea eax, [ebp - 0x672]
add eax, 0xe6
mov dword [ebp - 0x78], eax
mov eax, dword [ebp - 0x60]
lea edx, [eax + 0x4a]
mov dword [esp + 8], pe_nt_image_headers32
lea eax, [ebp - 0x38c]
mov dword [esp + 4], eax
mov dword [esp], edx
call fcn.6a89ddf7
mov eax, dword [ebp - 0x60]
lea edx, [eax + 0x14a]
mov dword [esp + 8], 0x73
lea eax, [ebp - 0x672]
mov dword [esp + 4], eax
mov dword [esp], edx
call fcn.6a89ddf7
mov eax, dword [ebp - 0x60]
lea edx, [eax + 0x230]
mov dword [esp + 8], 0xf8
lea eax, [ebp - 0xa64]
mov dword [esp + 4], eax
mov dword [esp], edx
call fcn.6a89ddf7
mov eax, dword [ebp - 0x60]
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x68]
mov dword [esp + 8], eax
mov dword [esp + 4], 0x140
mov eax, dword [ebp + 0xc]
mov dword [esp], eax
call fcn.6a89e17e
mov eax, dword [ebp - 0x60]
mov dword [esp + 8], 0x1e
lea edx, [ebp - 0xfda]
mov dword [esp + 4], edx
mov dword [esp], eax
call fcn.6a89ddf7
mov dword [esp + 4], 0xf
lea eax, [ebp - 0x117a]
mov dword [esp], eax
call fcn.6a89ddcc
mov eax, dword [ebp - 0x68]
lea edx, [eax + 0x200]
lea eax, [ebp - 0xfda]
mov dword [esp + 0xc], eax
mov dword [esp + 8], edx
mov dword [esp + 4], 0xf
lea eax, [ebp - 0x117a]
mov dword [esp], eax
call fcn.6a89e17e
mov eax, dword [ebp - 0x60]
add eax, 0x3c
mov dword [esp + 8], eax
mov dword [esp + 4], 0x100
mov eax, dword [ebp - 0x68]
mov dword [esp], eax
call fcn.6a89e6da
mov eax, dword [ebp - 0x60]
lea edx, [eax + 0x3c]
mov dword [esp + 8], 6
lea eax, [ebp - 0xfda]
mov dword [esp + 4], eax
mov dword [esp], edx
call fcn.6a89ddf7
mov eax, dword [ebp - 0x68]
lea edx, [eax + 0x200]
lea eax, [ebp - 0xfda]
mov dword [esp + 8], eax
mov dword [esp + 4], 0xc
mov dword [esp], edx
call fcn.6a89e6da
mov word [ebp - 0x7a], 0x2b85
mov eax, dword [ebp - 0x68]
mov ax, word [eax]
cwde
shl eax, 0xf
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x60]
mov eax, dword [eax + 0x48]
movsx edx, ax
movsx eax, word [ebp - 0x7a]
imul eax, edx
shl eax, 1
sub dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0x80000000
je 0x6a899ff1
mov eax, dword [ebp - 0x44]
test eax, eax
jns 0x6a899fef
neg eax
jmp 0x6a899ff6
mov eax, 0x7fffffff
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x14], 1
jmp 0x6a89a062
mov eax, dword [ebp - 0x14]
lea edx, [eax + eax]
mov eax, dword [ebp - 0x68]
add eax, edx
mov ax, word [eax]
cwde
shl eax, 0xf
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x14]
dec eax
lea edx, [eax + eax]
mov eax, dword [ebp - 0x68]
add eax, edx
mov ax, word [eax]
movsx edx, ax
movsx eax, word [ebp - 0x7a]
imul eax, edx
shl eax, 1
sub dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0x80000000
je 0x6a89a049
mov eax, dword [ebp - 0x44]
test eax, eax
jns 0x6a89a047
neg eax
jmp 0x6a89a04e
mov eax, 0x7fffffff
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
cmp eax, dword [ebp - 0x48]
jle 0x6a89a05f
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x48], eax
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0x10b
jle 0x6a89a002
mov eax, dword [ebp - 0x48]
sar eax, 0x10
mov word [ebp - 0x1612], ax
mov ax, word [ebp - 0x1612]
test ax, ax
jne 0x6a89a08c
mov word [ebp - 0x3c], 8
jmp 0x6a89a0bb
mov ax, word [ebp - 0x1612]
cwde
mov dword [esp], eax
call fcn.6a89995d
dec eax
mov word [ebp - 0x3c], ax
cmp word [ebp - 0x3c], 0
jns 0x6a89a0ae
mov word [ebp - 0x3c], 0
cmp word [ebp - 0x3c], 8
jle 0x6a89a0bb
mov word [ebp - 0x3c], 8
mov eax, dword [ebp - 0x3c]
mov word [ebp - 0x3a], ax
mov eax, dword [ebp - 0x60]
mov ax, word [eax + 0x4d6]
cmp ax, word [ebp - 0x3a]
jge 0x6a89a0e0
mov eax, dword [ebp - 0x60]
mov ax, word [eax + 0x4d6]
mov word [ebp - 0x3a], ax
mov eax, dword [ebp - 0x60]
mov eax, dword [eax + 0x4d8]
cmp ax, word [ebp - 0x3a]
jge 0x6a89a0fc
mov eax, dword [ebp - 0x60]
mov eax, dword [eax + 0x4d8]
mov word [ebp - 0x3a], ax
mov dx, word [ebp - 0x3a]
mov eax, dword [ebp - 0x60]
mov eax, dword [eax + 0x4d4]
mov ecx, edx
sub ecx, eax
mov eax, ecx
mov word [ebp - 0x7c], ax
mov edx, dword [ebp - 0x60]
mov ax, word [ebp - 0x3a]
mov word [edx + 0x4d4], ax
mov eax, dword [ebp - 0x60]
mov ax, word [eax + 0x4d6]
mov edx, dword [ebp - 0x60]
mov word [edx + 0x4d8], ax
mov edx, dword [ebp - 0x60]
mov eax, dword [ebp - 0x3c]
mov word [edx + 0x4d6], ax
mov eax, dword [ebp - 0x68]
mov ax, word [eax + 0x1fe]
mov word [ebp - 0x1612], ax
mov dword [ebp - 0x14], 0x10b
jmp 0x6a89a1b4
mov eax, dword [ebp - 0x14]
lea edx, [eax + eax]
mov eax, dword [ebp - 0x68]
add eax, edx
mov ax, word [eax]
cwde
shl eax, 0xf
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x14]
dec eax
lea edx, [eax + eax]
mov eax, dword [ebp - 0x68]
add eax, edx
mov ax, word [eax]
movsx edx, ax
movsx eax, word [ebp - 0x7a]
imul eax, edx
shl eax, 1
sub dword [ebp - 0x44], eax
movsx eax, word [ebp - 0x3a]
mov cl, al
shl dword [ebp - 0x44], cl
mov eax, dword [ebp - 0x14]
lea edx, [eax + eax]
mov eax, dword [ebp - 0x68]
add edx, eax
mov eax, dword [ebp - 0x44]
add eax, 0x8000
sar eax, 0x10
mov word [edx], ax
dec dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0
jg 0x6a89a15c
mov eax, dword [ebp - 0x68]
mov ax, word [eax]
cwde
shl eax, 0xf
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x60]
mov eax, dword [eax + 0x48]
movsx edx, ax
movsx eax, word [ebp - 0x7a]
imul eax, edx
shl eax, 1
sub dword [ebp - 0x44], eax
movsx eax, word [ebp - 0x3a]
mov cl, al
shl dword [ebp - 0x44], cl
mov eax, dword [ebp - 0x44]
add eax, 0x8000
sar eax, 0x10
mov edx, dword [ebp - 0x68]
mov word [edx], ax
mov ax, word [ebp - 0x1612]
mov edx, dword [ebp - 0x60]
mov word [edx + 0x48], ax
movsx eax, word [ebp - 0x7c]
mov dword [esp + 8], eax
mov dword [esp + 4], 0x74
lea eax, [ebp - 0x38c]
mov dword [esp], eax
call fcn.6a8a326e
movsx eax, word [ebp - 0x7c]
mov dword [esp + 8], eax
mov dword [esp + 4], 0xf8
lea eax, [ebp - 0xa64]
mov dword [esp], eax
call fcn.6a8a326e
movsx eax, word [ebp - 0x7c]
mov edx, dword [ebp - 0x60]
add edx, 0x4ae
mov dword [esp + 8], eax
mov dword [esp + 4], 0x10
mov dword [esp], edx
call fcn.6a8a326e
movsx eax, word [ebp - 0x7c]
mov edx, dword [ebp - 0x60]
add edx, 0x4a6
mov dword [esp + 8], eax
mov dword [esp + 4], 3
mov dword [esp], edx
call fcn.6a8a326e
movsx eax, word [ebp - 0x7c]
mov edx, dword [ebp - 0x60]
add edx, 0x4a4
mov dword [esp + 8], eax
mov dword [esp + 4], 1
mov dword [esp], edx
call fcn.6a8a326e
movsx eax, word [ebp - 0x7c]
mov edx, dword [ebp - 0x60]
add edx, 0x4ac
mov dword [esp + 8], eax
mov dword [esp + 4], 1
mov dword [esp], edx
call fcn.6a8a326e
mov dword [esp + 8], 0x100
lea eax, [ebp - 0x15fa]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x68]
mov dword [esp], eax
call fcn.6a89ddf7
mov ax, word [ebp - 0x3a]
mov edx, 1
mov ebx, edx
sub ebx, eax
mov eax, ebx
cwde
mov dword [esp + 8], eax
mov dword [esp + 4], 0x100
lea eax, [ebp - 0x15fa]
mov dword [esp], eax
call fcn.6a8a326e
mov eax, dword [ebp - 0x60]
mov eax, dword [eax + 0x6f0]
lea edx, [ebp - 0x15fa]
mov dword [esp + 4], edx
mov dword [esp], eax
call fcn.6a8a1c15
cwde
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 0
jne 0x6a89a346
mov eax, dword [ebp - 0x60]
mov eax, dword [eax + 0x844]
inc eax
mov edx, dword [ebp - 0x60]
mov word [edx + 0x844], ax
jmp 0x6a89a352
mov eax, dword [ebp - 0x60]
mov word [eax + 0x844], 0
cmp word [ebp - 0x16bc], 0
je 0x6a89a393
mov eax, dword [ebp - 0x80]
movsx edx, ax
mov eax, dword [ebp - 0x60]
mov eax, dword [eax + 0x6f4]
mov ecx, dword [ebp + 8]
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
mov dword [esp], eax
call fcn.6a8a28d7
mov eax, dword [ebp + 8]
mov ax, word [eax]
cwde
mov ax, word [eax + eax + 0x6add7320]
mov edx, dword [ebp + 0x14]
mov word [edx], ax
mov eax, dword [ebp + 8]
mov ax, word [eax]
cmp ax, 9
je 0x6a89a3ba
mov eax, dword [ebp - 0x80]
cwde
lea edx, [ebp + 0x10]
mov dword [esp + 8], edx
mov dword [esp + 4], 1
mov dword [esp], eax
call fcn.6a8a36de
lea eax, [ebp - 0xaa8]
mov dword [esp + 0xc], eax
lea eax, [ebp - 0xa86]
mov dword [esp + 8], eax
mov dword [esp + 4], 0x10
mov eax, dword [ebp - 0x70]
mov dword [esp], eax
call fcn.6a8a37b9
lea eax, [ebp - 0xaa8]
mov dword [esp + 4], eax
lea eax, [ebp - 0xa86]
mov dword [esp], eax
call fcn.6a8a3c24
mov eax, dword [ebp - 0x60]
add eax, 0x420
mov dword [esp + 0x10], eax
lea eax, [ebp - 0xac8]
mov dword [esp + 0xc], eax
lea eax, [ebp - 0xbd2]
mov dword [esp + 8], eax
lea eax, [ebp - 0xaa8]
mov dword [esp + 4], eax
lea eax, [ebp - 0xa86]
mov dword [esp], eax
call fcn.6a89e8dd
mov eax, dword [ebp - 0x60]
add eax, 0x444
mov dword [esp + 8], eax
lea eax, [ebp - 0xb0a]
mov dword [esp + 4], eax
lea eax, [ebp - 0xbd2]
mov dword [esp], eax
call fcn.6a8a3e35
mov eax, dword [ebp - 0x60]
lea edx, [eax + 0x444]
lea eax, [ebp - 0xbd2]
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x6aad3140
lea eax, [ebp - 0xb0a]
mov dword [esp + 4], eax
mov dword [esp], edx
call fcn.6a8a438c
mov eax, dword [ebp - 0x60]
add eax, 0x444
mov dword [esp + 8], 0x10
mov dword [esp + 4], eax
lea eax, [ebp - 0xb0a]
mov dword [esp], eax
call fcn.6a89ddf7
mov dword [esp + 8], 0x10
lea eax, [ebp - 0xb4a]
mov dword [esp + 4], eax
lea eax, [ebp - 0xb0a]
mov dword [esp], eax
call fcn.6a8a447c
mov eax, dword [ebp - 0x60]
add eax, 0x4da
mov dword [esp + 4], eax
lea eax, [ebp - 0xb4a]
mov dword [esp], eax
call fcn.6a89df60
lea eax, [ebp - 0xbd2]
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x1c], 0
jmp 0x6a89a551
mov dword [esp + 0xc], 0x10
mov dword [esp + 8], 0x75c3
lea eax, [ebp - 0xaea]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0xc]
mov dword [esp], eax
call fcn.6a8a4674
mov eax, dword [ebp - 0x1c]
lea edx, [eax + eax]
mov eax, dword [ebp - 0x78]
add edx, eax
mov eax, dword [ebp - 0x1c]
lea ecx, [eax + eax]
mov eax, dword [ebp - 0x6c]
add eax, ecx
mov dword [esp + 0xc], 0x40
mov dword [esp + 8], edx
mov dword [esp + 4], eax
lea eax, [ebp - 0xaea]
mov dword [esp], eax
call fcn.6a8a47aa
add dword [ebp - 0xc], 0x22
add dword [ebp - 0x1c], 0x40
cmp dword [ebp - 0x1c], 0xff
jle 0x6a89a4f0
mov eax, dword [ebp - 0x60]
add eax, 0x4a4
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x100
mov dword [esp + 4], 0x570a
mov eax, dword [ebp - 0x78]
mov dword [esp], eax
call fcn.6a8a4bb0
mov word [ebp - 0x3e], 0
mov dword [ebp - 0x14], 0
jmp 0x6a89a600
mov eax, dword [ebp - 0x14]
lea edx, [eax + eax]
mov eax, dword [ebp - 0x78]
add eax, edx
mov ax, word [eax]
cmp ax, 0x8000
je 0x6a89a5d9
mov eax, dword [ebp - 0x14]
lea edx, [eax + eax]
mov eax, dword [ebp - 0x78]
add eax, edx
mov ax, word [eax]
test ax, ax
js 0x6a89a5c7
mov eax, dword [ebp - 0x14]
lea edx, [eax + eax]
mov eax, dword [ebp - 0x78]
add eax, edx
mov ax, word [eax]
jmp 0x6a89a5d7
mov eax, dword [ebp - 0x14]
lea edx, [eax + eax]
mov eax, dword [ebp - 0x78]
add eax, edx
mov ax, word [eax]
neg eax
jmp 0x6a89a5de
mov eax, 0x7fff
mov word [ebp - 0x1612], ax
mov ax, word [ebp - 0x1612]
cmp ax, word [ebp - 0x3e]
jle 0x6a89a5fd
mov ax, word [ebp - 0x1612]
mov word [ebp - 0x3e], ax
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0xff
jle 0x6a89a590
mov eax, dword [ebp - 0x60]
mov eax, dword [eax + 0x4d0]
mov word [ebp - 0x1612], ax
mov ax, word [ebp - 0x1612]
cmp word [ebp - 0x3e], ax
jle 0x6a89a631
mov ax, word [ebp - 0x3e]
mov word [ebp - 0x1612], ax
mov edx, dword [ebp - 0x60]
mov ax, word [ebp - 0x3e]
mov word [edx + 0x4d0], ax
mov ax, word [ebp - 0x1612]
cwde
mov dword [esp], eax
call fcn.6a89995d
sub eax, 3
mov word [ebp - 0x3c], ax
cmp word [ebp - 0x3c], 0
jle 0x6a89a663
mov word [ebp - 0x3c], 0
mov eax, dword [ebp - 0x60]
add eax, 0x4a6
mov dword [esp + 8], eax
mov dword [esp + 4], 0x100
mov eax, dword [ebp - 0x78]
mov dword [esp], eax
call fcn.6a8a4d70
movsx eax, word [ebp - 0x3c]
mov dword [esp + 8], eax
mov dword [esp + 4], pe_nt_image_headers32
mov eax, dword [ebp - 0x78]
mov dword [esp], eax
call fcn.6a8a326e
mov edx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x60]
mov ax, word [eax + 0x4d2]
sub edx, eax
mov eax, dword [ebp - 0x7c]
add eax, edx
mov word [ebp - 0x7c], ax
mov edx, dword [ebp - 0x60]
mov eax, dword [ebp - 0x3c]
mov word [edx + 0x4d2], ax
movsx eax, word [ebp - 0x7c]
mov dword [esp + 8], eax
mov dword [esp + 4], 0x73
lea eax, [ebp - 0x672]
mov dword [esp], eax
call fcn.6a8a326e
movsx eax, word [ebp - 0x7c]
mov edx, dword [ebp - 0x60]
add edx, 0x50a
mov dword [esp + 8], eax
mov dword [esp + 4], 0x73
mov dword [esp], edx
call fcn.6a8a326e
movsx eax, word [ebp - 0x7c]
mov edx, dword [ebp - 0x60]
add edx, 0x4f8
mov dword [esp + 4], eax
mov dword [esp], edx
call fcn.6a89f7dc
mov eax, dword [ebp + 0x14]
mov ax, word [eax]
cmp ax, 0x84
jne 0x6a89a746
mov dword [esp + 8], pe_nt_image_headers32
mov eax, dword [ebp - 0x60]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x78]
mov dword [esp], eax
call fcn.6a8a501c
mov word [ebp - 0x2a], ax
jmp 0x6a89a764
mov dword [esp + 8], 0x40
mov eax, dword [ebp - 0x60]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x78]
mov dword [esp], eax
call fcn.6a8a501c
mov word [ebp - 0x2a], ax
mov eax, dword [ebp - 0x60]
mov eax, dword [eax + 0x4e8]
cmp ax, 0x4ccd
jle 0x6a89a7a4
mov eax, dword [ebp - 0x60]
lea edx, [eax + 0x4ee]
movsx eax, word [ebp - 0x2a]
mov dword [esp + 4], edx
mov dword [esp], eax
call fcn.6a8a568f
mov edx, dword [ebp - 0x60]
mov word [edx + 0x4e6], ax
mov eax, dword [ebp - 0x60]
mov word [eax + 0x4ea], 0x7fff
jmp 0x6a89a7ed
mov eax, dword [ebp - 0x60]
mov ax, word [eax + 0x4ea]
movsx edx, ax
mov eax, edx
shl eax, 1
add eax, edx
shl eax, 2
add eax, edx
lea ecx, [eax*8]
add eax, ecx
lea ecx, [eax*8]
add eax, ecx
shl eax, 2
add eax, edx
lea edx, [eax*8]
mov ecx, edx
sub ecx, eax
mov eax, ecx
sar eax, 0xf
mov edx, dword [ebp - 0x60]
mov word [edx + 0x4ea], ax
mov eax, dword [ebp - 0x60]
mov ax, word [eax + 0x4ea]
cmp ax, 0x6665
jg 0x6a89a80b
mov eax, dword [ebp - 0x60]
mov word [eax + 0x4ec], 0
jmp 0x6a89a817
mov eax, dword [ebp - 0x60]
mov word [eax + 0x4ec], 1
mov eax, dword [ebp - 0x60]
mov eax, dword [eax + 0x4e8]
movsx edx, ax
mov eax, dword [ebp - 0x60]
mov eax, dword [eax + 0x6f0]
mov dword [esp + 4], edx
mov dword [esp], eax
call fcn.6a8a1bd2
mov ax, word [ebp - 0x2a]
shl eax, 1
mov word [ebp - 0x2a], ax
mov eax, dword [ebp + 0x14]
mov ax, word [eax]
cmp ax, 0x84
je 0x6a89a931
mov eax, dword [ebp - 0x78]
lea edx, [eax + 0x80]
mov dword [esp + 8], 0x40
mov eax, dword [ebp - 0x60]
mov dword [esp + 4], eax
mov dword [esp], edx
call fcn.6a8a501c
mov word [ebp - 0x2c], ax
mov eax, dword [ebp - 0x60]
mov eax, dword [eax + 0x4e8]
cmp ax, 0x4ccd
jle 0x6a89a8b6
mov eax, dword [ebp - 0x60]
lea edx, [eax + 0x4ee]
movsx eax, word [ebp - 0x2c]
mov dword [esp + 4], edx
mov dword [esp], eax
call fcn.6a8a568f
mov edx, dword [ebp - 0x60]
mov word [edx + 0x4e6], ax
mov eax, dword [ebp - 0x60]
mov word [eax + 0x4ea], 0x7fff
jmp 0x6a89a8db
mov eax, dword [ebp - 0x60]
mov ax, word [eax + 0x4ea]
cwde
mov dword [esp + 4], 0x7333
mov dword [esp], eax
call fcn.6a8997e1
mov edx, dword [ebp - 0x60]
mov word [edx + 0x4ea], ax
mov eax, dword [ebp - 0x60]
mov ax, word [eax + 0x4ea]
cmp ax, 0x6665
jg 0x6a89a8f9
mov eax, dword [ebp - 0x60]
mov word [eax + 0x4ec], 0
jmp 0x6a89a905
mov eax, dword [ebp - 0x60]
mov word [eax + 0x4ec], 1
mov eax, dword [ebp - 0x60]
mov eax, dword [eax + 0x4e8]
movsx edx, ax
mov eax, dword [ebp - 0x60]
mov eax, dword [eax + 0x6f0]
mov dword [esp + 4], edx
mov dword [esp], eax
call fcn.6a8a1bd2
mov eax, dword [ebp - 0x2c]
shl eax, 1
mov word [ebp - 0x2c], ax
jmp 0x6a89a939
mov ax, word [ebp - 0x2a]
mov word [ebp - 0x2c], ax
mov eax, dword [ebp + 8]
mov ax, word [eax]
cmp ax, 9
jne 0x6a89ab80
mov dword [esp + 0xc], 0x100
mov eax, dword [ebp - 0x74]
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x6c]
mov dword [esp + 4], eax
lea eax, [ebp - 0xbd2]
add eax, 0x66
mov dword [esp], eax
call fcn.6a8a47aa
mov dword [ebp - 0x14], 0
jmp 0x6a89a9a6
movsx edx, word [ebp - 0x3a]
mov eax, dword [ebp - 0x14]
lea ecx, [eax + eax]
mov eax, dword [ebp - 0x74]
add eax, ecx
mov ax, word [eax]
cwde
mov dword [esp + 4], edx
mov dword [esp], eax
call fcn.6a899739
mov edx, dword [ebp - 0x14]
mov word [ebp + edx*2 - 0x13fa], ax
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0xff
jle 0x6a89a979
mov dword [ebp - 0x44], 0
mov dword [ebp - 0x14], 0
jmp 0x6a89a9e4
mov eax, dword [ebp - 0x14]
mov ax, word [ebp + eax*2 - 0x13fa]
movsx edx, ax
mov eax, dword [ebp - 0x14]
mov ax, word [ebp + eax*2 - 0x13fa]
cwde
imul eax, edx
shl eax, 1
add dword [ebp - 0x44], eax
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0xff
jle 0x6a89a9bf
sar dword [ebp - 0x44], 1
movsx edx, word [ebp - 0x62]
mov eax, dword [ebp - 0x60]
mov eax, dword [eax + 0x6f4]
mov dword [esp + 0xc], edx
mov edx, dword [ebp - 0x44]
mov dword [esp + 8], edx
lea edx, [ebp - 0xb4a]
mov dword [esp + 4], edx
mov dword [esp], eax
call fcn.6a8a27ac
mov eax, dword [ebp - 0x60]
mov eax, dword [eax + 0x6f4]
lea edx, [ebp + 0x10]
mov dword [esp + 0xc], edx
lea edx, [ebp - 0x13fa]
mov dword [esp + 8], edx
lea edx, [ebp - 0xb4a]
mov dword [esp + 4], edx
mov dword [esp], eax
call fcn.6a8a2389
mov dword [esp + 8], 0x10
lea eax, [ebp - 0xb2a]
mov dword [esp + 4], eax
lea eax, [ebp - 0xb4a]
mov dword [esp], eax
call fcn.6a8a457d
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0x10
lea eax, [ebp - 0xc5a]
mov dword [esp + 4], eax
lea eax, [ebp - 0xb2a]
mov dword [esp], eax
call fcn.6a8a5ab8
mov dword [ebp - 0x1c], 0
jmp 0x6a89aaf1
mov edx, dword [ebp - 0x1c]
mov eax, edx
shl eax, 2
add eax, edx
test eax, eax
jns 0x6a89aaa8
add eax, 3
sar eax, 2
lea edx, [eax + eax]
mov eax, dword [ebp + 0xc]
lea ecx, [edx + eax]
lea eax, [ebp - 0x13fa]
mov edx, dword [ebp - 0x1c]
shl edx, 1
add edx, eax
mov eax, dword [ebp - 0x60]
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], ecx
mov dword [esp + 8], 0
mov dword [esp + 4], edx
lea eax, [ebp - 0xc5a]
mov dword [esp], eax
call fcn.6a89cde3
mov word [ebp - 0x82], ax
add dword [ebp - 0x1c], 0x40
cmp dword [ebp - 0x1c], 0xff
jle 0x6a89aa97
mov eax, dword [ebp - 0x60]
add eax, 0x6fa
mov dword [esp + 8], 0x10
mov dword [esp + 4], eax
lea eax, [ebp - 0xb4a]
mov dword [esp], eax
call fcn.6a89ddf7
mov dword [esp + 4], 0
mov eax, dword [ebp - 0x60]
mov dword [esp], eax
call fcn.6a899ab4
mov eax, dword [ebp - 0x60]
add eax, 0x4a
mov dword [esp + 8], pe_nt_image_headers32
mov dword [esp + 4], eax
lea eax, [ebp - 0x38c]
add eax, 0x200
mov dword [esp], eax
call fcn.6a89ddf7
mov eax, dword [ebp - 0x60]
add eax, 0x14a
mov dword [esp + 8], 0x73
mov dword [esp + 4], eax
lea eax, [ebp - 0x672]
add eax, 0x100
mov dword [esp], eax
call fcn.6a89ddf7
jmp 0x6a89cdd9
mov eax, dword [ebp + 0x14]
mov ax, word [eax]
cmp ax, 0x84
jg 0x6a89ac65
mov eax, dword [ebp - 0x60]
lea edx, [eax + 0x484]
mov dword [esp + 0x10], 4
lea eax, [ebp - 0x1622]
mov dword [esp + 0xc], eax
mov dword [esp + 8], edx
lea eax, [ebp - 0xb4a]
mov dword [esp + 4], eax
lea eax, [ebp - 0xb4a]
mov dword [esp], eax
call fcn.6a8a6600
mov ax, word [ebp - 0x1622]
cwde
lea edx, [ebp + 0x10]
mov dword [esp + 8], edx
mov dword [esp + 4], 8
mov dword [esp], eax
call fcn.6a8a36de
mov eax, dword [ebp - 0x1620]
cwde
lea edx, [ebp + 0x10]
mov dword [esp + 8], edx
mov dword [esp + 4], 8
mov dword [esp], eax
call fcn.6a8a36de
mov ax, word [ebp - 0x161e]
cwde
lea edx, [ebp + 0x10]
mov dword [esp + 8], edx
mov dword [esp + 4], 7
mov dword [esp], eax
call fcn.6a8a36de
mov eax, dword [ebp - 0x161c]
cwde
lea edx, [ebp + 0x10]
mov dword [esp + 8], edx
mov dword [esp + 4], 7
mov dword [esp], eax
call fcn.6a8a36de
mov ax, word [ebp - 0x161a]
cwde
lea edx, [ebp + 0x10]
mov dword [esp + 8], edx
mov dword [esp + 4], 6
mov dword [esp], eax
call fcn.6a8a36de
jmp 0x6a89ad72
mov eax, dword [ebp - 0x60]
lea edx, [eax + 0x484]
mov dword [esp + 0x10], 4
lea eax, [ebp - 0x1622]
mov dword [esp + 0xc], eax
mov dword [esp + 8], edx
lea eax, [ebp - 0xb4a]
mov dword [esp + 4], eax
lea eax, [ebp - 0xb4a]
mov dword [esp], eax
call fcn.6a8a6248
mov ax, word [ebp - 0x1622]
cwde
lea edx, [ebp + 0x10]
mov dword [esp + 8], edx
mov dword [esp + 4], 8
mov dword [esp], eax
call fcn.6a8a36de
mov eax, dword [ebp - 0x1620]
cwde
lea edx, [ebp + 0x10]
mov dword [esp + 8], edx
mov dword [esp + 4], 8
mov dword [esp], eax
call fcn.6a8a36de
mov ax, word [ebp - 0x161e]
cwde
lea edx, [ebp + 0x10]
mov dword [esp + 8], edx
mov dword [esp + 4], 6
mov dword [esp], eax
call fcn.6a8a36de
mov eax, dword [ebp - 0x161c]
cwde
lea edx, [ebp + 0x10]
mov dword [esp + 8], edx
mov dword [esp + 4], 7
mov dword [esp], eax
call fcn.6a8a36de
mov ax, word [ebp - 0x161a]
cwde
lea edx, [ebp + 0x10]
mov dword [esp + 8], edx
mov dword [esp + 4], 7
mov dword [esp], eax
call fcn.6a8a36de
mov eax, dword [ebp - 0x1618]
cwde
lea edx, [ebp + 0x10]
mov dword [esp + 8], edx
mov dword [esp + 4], 5
mov dword [esp], eax
call fcn.6a8a36de
mov ax, word [ebp - 0x1616]
cwde
lea edx, [ebp + 0x10]
mov dword [esp + 8], edx
mov dword [esp + 4], 5
mov dword [esp], eax
call fcn.6a8a36de
mov dword [ebp - 0x44], 0
mov dword [ebp - 0x14], 0
jmp 0x6a89adca
mov eax, dword [ebp - 0x14]
mov ax, word [ebp + eax*2 - 0xb4a]
mov edx, eax
mov eax, dword [ebp - 0x60]
mov ecx, dword [ebp - 0x14]
add ecx, 0x378
mov ax, word [eax + ecx*2 + 0xa]
mov ebx, edx
sub ebx, eax
mov eax, ebx
mov word [ebp - 0x1612], ax
mov ax, word [ebp - 0x1612]
movsx edx, ax
mov ax, word [ebp - 0x1612]
cwde
imul eax, edx
shl eax, 1
add dword [ebp - 0x44], eax
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0xe
jle 0x6a89ad82
mov dword [esp + 4], 8
mov eax, dword [ebp - 0x44]
mov dword [esp], eax
call fcn.6a89990a
sar eax, 0x10
mov word [ebp - 0x1612], ax
mov ax, word [ebp - 0x1612]
movsx edx, ax
mov eax, edx
shl eax, 2
add eax, edx
lea ecx, [eax*4]
add eax, ecx
shl eax, 1
add eax, edx
mov edx, eax
shl edx, 8
add eax, edx
shl eax, 1
sar eax, 0xf
mov word [ebp - 0x1612], ax
mov ax, word [ebp - 0x1612]
mov edx, 0x5000
mov ecx, edx
sub ecx, eax
mov eax, ecx
mov word [ebp - 0x1612], ax
mov ax, word [ebp - 0x1612]
cwde
mov dword [esp + 4], 1
mov dword [esp], eax
call fcn.6a8996a4
mov word [ebp - 0x4a], ax
cmp word [ebp - 0x4a], 0
jns 0x6a89ae60
mov word [ebp - 0x4a], 0
mov eax, dword [ebp - 0x60]
add eax, 0x6fa
mov dword [esp + 8], 0x10
mov dword [esp + 4], eax
lea eax, [ebp - 0xb4a]
mov dword [esp], eax
call fcn.6a89ddf7
mov dword [esp + 8], 0x10
lea eax, [ebp - 0xb2a]
mov dword [esp + 4], eax
lea eax, [ebp - 0xb4a]
mov dword [esp], eax
call fcn.6a8a457d
mov eax, dword [ebp - 0x60]
mov eax, dword [eax + 0x6f8]
test ax, ax
je 0x6a89aede
mov eax, dword [ebp - 0x60]
mov word [eax + 0x6f8], 0
mov eax, dword [ebp - 0x60]
add eax, 0x464
mov dword [esp + 8], 0x10
mov dword [esp + 4], eax
lea eax, [ebp - 0xb2a]
mov dword [esp], eax
call fcn.6a89ddf7
mov eax, dword [ebp - 0x60]
lea edx, [eax + 0x464]
lea eax, [ebp - 0xc5a]
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x6aad3140
lea eax, [ebp - 0xb2a]
mov dword [esp + 4], eax
mov dword [esp], edx
call fcn.6a8a438c
mov eax, dword [ebp - 0x60]
add eax, 0x464
mov dword [esp + 8], 0x10
mov dword [esp + 4], eax
lea eax, [ebp - 0xb2a]
mov dword [esp], eax
call fcn.6a89ddf7
lea eax, [ebp - 0xc5a]
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x1c], 0
jmp 0x6a89af78
mov eax, dword [ebp - 0x1c]
lea edx, [eax + eax]
mov eax, dword [ebp - 0x74]
add edx, eax
mov eax, dword [ebp - 0x1c]
lea ecx, [eax + eax]
mov eax, dword [ebp - 0x6c]
add eax, ecx
mov dword [esp + 0xc], 0x40
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x10]
mov dword [esp], eax
call fcn.6a8a47aa
add dword [ebp - 0x10], 0x22
add dword [ebp - 0x1c], 0x40
cmp dword [ebp - 0x1c], 0xff
jle 0x6a89af3f
cmp dword [ebp - 0x80], 0
jne 0x6a89b033
mov dword [ebp - 0x14], 0
jmp 0x6a89afbf
mov eax, dword [ebp - 0x14]
lea edx, [eax + eax]
mov eax, dword [ebp - 0x74]
add eax, edx
mov ax, word [eax]
movsx edx, ax
movsx eax, word [ebp - 0x3a]
mov ebx, edx
mov cl, al
sar ebx, cl
mov eax, ebx
mov edx, dword [ebp - 0x14]
mov word [ebp + edx*2 - 0x13fa], ax
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0xff
jle 0x6a89af94
mov dword [ebp - 0x44], 0
mov dword [ebp - 0x14], 0
jmp 0x6a89affd
mov eax, dword [ebp - 0x14]
mov ax, word [ebp + eax*2 - 0x13fa]
movsx edx, ax
mov eax, dword [ebp - 0x14]
mov ax, word [ebp + eax*2 - 0x13fa]
cwde
imul eax, edx
shl eax, 1
add dword [ebp - 0x44], eax
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0xff
jle 0x6a89afd8
sar dword [ebp - 0x44], 1
movsx edx, word [ebp - 0x62]
mov eax, dword [ebp - 0x60]
mov eax, dword [eax + 0x6f4]
mov dword [esp + 0xc], edx
mov edx, dword [ebp - 0x44]
mov dword [esp + 8], edx
lea edx, [ebp - 0xb4a]
mov dword [esp + 4], edx
mov dword [esp], eax
call fcn.6a8a27ac
mov ax, word [ebp - 0x2a]
sub eax, 8
mov word [ebp - 0x30], ax
cmp word [ebp - 0x30], 0x21
jg 0x6a89b04b
mov word [ebp - 0x30], 0x22
mov eax, dword [ebp - 0x30]
add eax, 0xf
mov word [ebp - 0x32], ax
cmp word [ebp - 0x32], 0xe7
jle 0x6a89b06e
mov word [ebp - 0x32], 0xe7
mov ax, word [ebp - 0x32]
sub eax, 0xf
mov word [ebp - 0x30], ax
lea eax, [ebp - 0xbd2]
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0xc5a]
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x1c], 0
jmp 0x6a89cd59
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x1c], 0x80
jne 0x6a89b0e8
mov eax, dword [ebp + 0x14]
mov ax, word [eax]
cmp ax, 0x84
jle 0x6a89b0e8
mov dword [ebp - 0x24], 0
mov eax, dword [ebp - 0x2c]
sub eax, 8
mov word [ebp - 0x30], ax
cmp word [ebp - 0x30], 0x21
jg 0x6a89b0c5
mov word [ebp - 0x30], 0x22
mov eax, dword [ebp - 0x30]
add eax, 0xf
mov word [ebp - 0x32], ax
cmp word [ebp - 0x32], 0xe7
jle 0x6a89b0e8
mov word [ebp - 0x32], 0xe7
mov ax, word [ebp - 0x32]
sub eax, 0xf
mov word [ebp - 0x30], ax
mov dword [ebp - 0x14], 0
jmp 0x6a89b12e
mov eax, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x14]
add eax, edx
sub eax, 0x10
lea edx, [eax + eax]
mov eax, dword [ebp - 0x6c]
add eax, edx
mov ax, word [eax]
mov edx, eax
mov eax, dword [ebp - 0x60]
mov ecx, dword [ebp - 0x14]
add ecx, 0x250
mov ax, word [eax + ecx*2 + 0xe]
mov ecx, edx
sub ecx, eax
mov eax, ecx
mov edx, dword [ebp - 0x14]
mov word [ebp + edx*2 - 0x117a], ax
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0xf
jle 0x6a89b0f1
mov eax, dword [ebp - 0x1c]
lea edx, [eax + eax]
mov eax, dword [ebp - 0x74]
add edx, eax
mov eax, dword [ebp - 0x1c]
lea ecx, [eax + eax]
mov eax, dword [ebp - 0x6c]
add eax, ecx
mov dword [esp + 0xc], 0x40
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x10]
mov dword [esp], eax
call fcn.6a8a47aa
mov eax, dword [ebp - 0x1c]
lea edx, [eax + eax]
mov eax, dword [ebp - 0x74]
add edx, eax
mov dword [esp + 0x14], 0
lea eax, [ebp - 0x117a]
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 0x40
lea eax, [ebp - 0x117a]
add eax, 0x20
mov dword [esp + 8], eax
mov dword [esp + 4], edx
mov eax, dword [ebp - 0x10]
mov dword [esp], eax
call fcn.6a8a7642
mov dword [esp + 0xc], 0x10
mov dword [esp + 8], 0x75c3
lea eax, [ebp - 0xaea]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0xc]
mov dword [esp], eax
call fcn.6a8a4674
mov dword [esp + 0xc], 0x40
lea eax, [ebp - 0xcda]
mov dword [esp + 8], eax
lea eax, [ebp - 0x117a]
add eax, 0x20
mov dword [esp + 4], eax
lea eax, [ebp - 0xaea]
mov dword [esp], eax
call fcn.6a8a47aa
mov eax, dword [ebp - 0x60]
add eax, 0x4ac
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x40
mov dword [esp + 4], 0x570a
lea eax, [ebp - 0xcda]
mov dword [esp], eax
call fcn.6a8a4bb0
mov dword [esp + 4], 0x10
lea eax, [ebp - 0xfda]
mov dword [esp], eax
call fcn.6a89ddcc
mov dword [esp + 8], 0x20
lea eax, [ebp - 0xfda]
add eax, 0x20
mov dword [esp + 4], eax
lea eax, [ebp - 0xcda]
mov dword [esp], eax
call fcn.6a89ddf7
mov word [ebp - 0x1612], 0
lea eax, [ebp - 0x1612]
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x20
mov dword [esp + 4], 0x570a
lea eax, [ebp - 0xfda]
add eax, 0x20
mov dword [esp], eax
call fcn.6a8a7e9b
mov dword [esp + 0xc], 0x10
mov dword [esp + 8], 0x75c3
lea eax, [ebp - 0xaea]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0xc]
mov dword [esp], eax
call fcn.6a8a4674
mov dword [esp + 0x14], 0
lea eax, [ebp - 0xfda]
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 0x20
lea eax, [ebp - 0xfda]
add eax, 0x20
mov dword [esp + 8], eax
lea eax, [ebp - 0xfda]
add eax, 0x20
mov dword [esp + 4], eax
lea eax, [ebp - 0xaea]
mov dword [esp], eax
call fcn.6a8a7642
mov dword [esp + 0xc], 0x20
lea eax, [ebp - 0xe5a]
mov dword [esp + 8], eax
lea eax, [ebp - 0xfda]
add eax, 0x20
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x10]
mov dword [esp], eax
call fcn.6a8a47aa
mov eax, dword [ebp - 0x1c]
add eax, 0x20
lea edx, [eax + eax]
mov eax, dword [ebp - 0x74]
add eax, edx
mov dword [esp + 8], 0x20
lea edx, [ebp - 0xe5a]
add edx, 0x40
mov dword [esp + 4], edx
mov dword [esp], eax
call fcn.6a89ddf7
mov dword [esp + 4], 0x50
lea eax, [ebp - 0x117a]
mov dword [esp], eax
call fcn.6a89ddcc
mov dword [esp + 0xc], 0x10
mov dword [esp + 8], 0x75c3
lea eax, [ebp - 0x117a]
add eax, 0x20
mov dword [esp + 4], eax
mov eax, dword [ebp - 0xc]
mov dword [esp], eax
call fcn.6a8a4674
lea eax, [ebp - 0x117a]
add eax, 0x20
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0xeda]
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x14], 0
jmp 0x6a89b482
mov eax, dword [ebp - 0x50]
mov ax, word [eax]
cwde
shl eax, 0xe
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x10]
add eax, 2
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x50]
sub eax, 2
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x18], 1
jmp 0x6a89b44d
mov eax, dword [ebp - 0x54]
mov ax, word [eax]
movsx edx, ax
mov eax, dword [ebp - 0x58]
mov ax, word [eax]
cwde
imul eax, edx
sub dword [ebp - 0x44], eax
add dword [ebp - 0x54], 2
sub dword [ebp - 0x58], 2
mov eax, dword [ebp - 0x54]
mov ax, word [eax]
movsx edx, ax
mov eax, dword [ebp - 0x58]
mov ax, word [eax]
cwde
imul eax, edx
sub dword [ebp - 0x44], eax
add dword [ebp - 0x54], 2
sub dword [ebp - 0x58], 2
mov eax, dword [ebp - 0x54]
mov ax, word [eax]
movsx edx, ax
mov eax, dword [ebp - 0x58]
mov ax, word [eax]
cwde
imul eax, edx
sub dword [ebp - 0x44], eax
add dword [ebp - 0x54], 2
sub dword [ebp - 0x58], 2
mov eax, dword [ebp - 0x54]
mov ax, word [eax]
movsx edx, ax
mov eax, dword [ebp - 0x58]
mov ax, word [eax]
cwde
imul eax, edx
sub dword [ebp - 0x44], eax
add dword [ebp - 0x54], 2
sub dword [ebp - 0x58], 2
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jle 0x6a89b3d2
mov eax, dword [ebp - 0x44]
shl eax, 4
add eax, 0x8000
sar eax, 0x10
mov edx, dword [ebp - 0x50]
mov word [edx], ax
mov eax, dword [ebp - 0x50]
mov ax, word [eax]
mov edx, dword [ebp - 0x5c]
mov word [edx], ax
add dword [ebp - 0x5c], 2
add dword [ebp - 0x50], 2
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0x3f
jle 0x6a89b3aa
mov word [ebp - 0x1612], 0
lea eax, [ebp - 0x1612]
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x40
mov dword [esp + 4], 0x570a
lea eax, [ebp - 0xeda]
mov dword [esp], eax
call fcn.6a8a4bb0
mov dword [esp + 8], 0x40
lea eax, [ebp - 0xf5a]
mov dword [esp + 4], eax
lea eax, [ebp - 0xeda]
mov dword [esp], eax
call fcn.6a89ddf7
mov dword [esp + 8], 0xfffffffe
mov dword [esp + 4], 0x40
lea eax, [ebp - 0xf5a]
mov dword [esp], eax
call fcn.6a8a326e
movsx eax, word [ebp - 0x3c]
mov dword [esp + 8], eax
mov dword [esp + 4], 0x40
lea eax, [ebp - 0xcda]
mov dword [esp], eax
call fcn.6a8a326e
mov eax, dword [ebp - 0x3c]
inc eax
cwde
mov dword [esp + 8], eax
mov dword [esp + 4], 0x40
lea eax, [ebp - 0xeda]
mov dword [esp], eax
call fcn.6a8a326e
mov eax, dword [ebp + 0x14]
mov ax, word [eax]
cmp ax, 0xb1
jg 0x6a89b68b
mov eax, dword [ebp - 0x24]
movsx ecx, ax
movsx edx, word [ebp - 0x32]
movsx eax, word [ebp - 0x30]
mov ebx, dword [ebp - 0x1c]
lea esi, [ebx + ebx]
mov ebx, dword [ebp - 0x74]
add ebx, esi
mov dword [esp + 0x24], 0x40
mov dword [esp + 0x20], 0x5c
mov dword [esp + 0x1c], 0x22
mov dword [esp + 0x18], ecx
lea ecx, [ebp - 0x15fc]
mov dword [esp + 0x14], ecx
mov dword [esp + 0x10], edx
mov dword [esp + 0xc], eax
lea eax, [ebp - 0xeda]
mov dword [esp + 8], eax
lea eax, [ebp - 0xcda]
mov dword [esp + 4], eax
mov dword [esp], ebx
call fcn.6a8a8043
mov word [ebp - 0x2e], ax
cmp dword [ebp - 0x24], 0
jne 0x6a89b645
cmp word [ebp - 0x2e], 0x5b
jg 0x6a89b5db
mov ax, word [ebp - 0x2e]
lea edx, [eax + eax]
mov eax, dword [ebp - 0x15fc]
sar ax, 1
add eax, edx
sub eax, 0x44
mov word [ebp - 0x34], ax
jmp 0x6a89b5e6
mov ax, word [ebp - 0x2e]
add eax, 0x18
mov word [ebp - 0x34], ax
movsx eax, word [ebp - 0x34]
lea edx, [ebp + 0x10]
mov dword [esp + 8], edx
mov dword [esp + 4], 8
mov dword [esp], eax
call fcn.6a8a36de
mov ax, word [ebp - 0x2e]
sub eax, 8
mov word [ebp - 0x30], ax
cmp word [ebp - 0x30], 0x21
jg 0x6a89b619
mov word [ebp - 0x30], 0x22
mov eax, dword [ebp - 0x30]
add eax, 0xf
mov word [ebp - 0x32], ax
cmp word [ebp - 0x32], 0xe7
jle 0x6a89b7eb
mov word [ebp - 0x32], 0xe7
mov ax, word [ebp - 0x32]
sub eax, 0xf
mov word [ebp - 0x30], ax
jmp 0x6a89b7eb
movsx edx, word [ebp - 0x2e]
movsx eax, word [ebp - 0x30]
mov ebx, edx
sub ebx, eax
mov eax, ebx
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
lea edx, [eax + eax]
mov eax, dword [ebp - 0x15fc]
sar ax, 1
add eax, edx
mov word [ebp - 0x34], ax
movsx eax, word [ebp - 0x34]
lea edx, [ebp + 0x10]
mov dword [esp + 8], edx
mov dword [esp + 4], 5
mov dword [esp], eax
call fcn.6a8a36de
jmp 0x6a89b7eb
mov eax, dword [ebp - 0x24]
movsx ecx, ax
movsx edx, word [ebp - 0x32]
movsx eax, word [ebp - 0x30]
mov ebx, dword [ebp - 0x1c]
lea esi, [ebx + ebx]
mov ebx, dword [ebp - 0x74]
add ebx, esi
mov dword [esp + 0x24], 0x40
mov dword [esp + 0x20], 0xa0
mov dword [esp + 0x1c], pe_nt_image_headers32
mov dword [esp + 0x18], ecx
lea ecx, [ebp - 0x15fc]
mov dword [esp + 0x14], ecx
mov dword [esp + 0x10], edx
mov dword [esp + 0xc], eax
lea eax, [ebp - 0xeda]
mov dword [esp + 8], eax
lea eax, [ebp - 0xcda]
mov dword [esp + 4], eax
mov dword [esp], ebx
call fcn.6a8a8043
mov word [ebp - 0x2e], ax
cmp dword [ebp - 0x24], 0
jne 0x6a89b7a9
cmp word [ebp - 0x2e], 0x7f
jg 0x6a89b721
mov ax, word [ebp - 0x2e]
lea edx, [eax*4]
mov eax, dword [ebp - 0x15fc]
add eax, edx
sub eax, 0x88
mov word [ebp - 0x34], ax
jmp 0x6a89b751
cmp word [ebp - 0x2e], 0x9f
jg 0x6a89b744
mov ax, word [ebp - 0x2e]
lea edx, [eax + eax]
mov eax, dword [ebp - 0x15fc]
sar ax, 1
add eax, edx
add eax, 0x78
mov word [ebp - 0x34], ax
jmp 0x6a89b751
mov ax, word [ebp - 0x2e]
add eax, 0x118
mov word [ebp - 0x34], ax
movsx eax, word [ebp - 0x34]
lea edx, [ebp + 0x10]
mov dword [esp + 8], edx
mov dword [esp + 4], 9
mov dword [esp], eax
call fcn.6a8a36de
mov ax, word [ebp - 0x2e]
sub eax, 8
mov word [ebp - 0x30], ax
cmp word [ebp - 0x30], 0x21
jg 0x6a89b784
mov word [ebp - 0x30], 0x22
mov eax, dword [ebp - 0x30]
add eax, 0xf
mov word [ebp - 0x32], ax
cmp word [ebp - 0x32], 0xe7
jle 0x6a89b7eb
mov word [ebp - 0x32], 0xe7
mov ax, word [ebp - 0x32]
sub eax, 0xf
mov word [ebp - 0x30], ax
jmp 0x6a89b7eb
movsx edx, word [ebp - 0x2e]
movsx eax, word [ebp - 0x30]
mov ecx, edx
sub ecx, eax
mov eax, ecx
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
lea edx, [eax*4]
mov eax, dword [ebp - 0x15fc]
add eax, edx
mov word [ebp - 0x34], ax
movsx eax, word [ebp - 0x34]
lea edx, [ebp + 0x10]
mov dword [esp + 8], edx
mov dword [esp + 4], 6
mov dword [esp], eax
call fcn.6a8a36de
mov dword [ebp - 0x28], 0
mov eax, dword [ebp - 0x60]
mov ax, word [eax + 0x4da]
cmp ax, 0x99
jg 0x6a89b818
mov eax, dword [ebp - 0x60]
mov eax, dword [eax + 0x4dc]
cmp ax, 0x399a
jle 0x6a89b818
mov dword [ebp - 0x28], 1
mov eax, dword [ebp - 0x15fc]
movsx edx, ax
movsx eax, word [ebp - 0x2e]
mov ecx, dword [ebp - 0x1c]
lea ebx, [ecx + ecx]
mov ecx, dword [ebp - 0x74]
add ecx, ebx
mov dword [esp + 0xc], 0x41
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.6a8a892a
mov eax, dword [ebp + 0x14]
mov ax, word [eax]
cmp ax, 0xb1
jle 0x6a89b8fd
mov eax, dword [ebp - 0x1c]
lea edx, [eax + eax]
mov eax, dword [ebp - 0x74]
add edx, eax
mov dword [esp + 0xc], 0x40
lea eax, [ebp - 0x105a]
mov dword [esp + 8], eax
lea eax, [ebp - 0xeda]
mov dword [esp + 4], eax
mov dword [esp], edx
call fcn.6a8a8dcc
mov dword [esp + 0xc], 0x40
lea eax, [ebp - 0x1608]
mov dword [esp + 8], eax
lea eax, [ebp - 0x105a]
mov dword [esp + 4], eax
lea eax, [ebp - 0xcda]
mov dword [esp], eax
call fcn.6a8a930b
mov word [ebp - 0x36], ax
cmp dword [ebp - 0x28], 0
je 0x6a89b8c9
cmp word [ebp - 0x36], 0x3ccd
jle 0x6a89b8c9
mov word [ebp - 0x36], 0x3ccd
movsx eax, word [ebp - 0x36]
mov dword [esp + 0x10], 0x40
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x105a]
mov dword [esp + 8], eax
lea eax, [ebp - 0xdda]
mov dword [esp + 4], eax
lea eax, [ebp - 0xcda]
mov dword [esp], eax
call fcn.6a8a9453
jmp 0x6a89b903
mov word [ebp - 0x36], 0
mov eax, dword [ebp - 0x1c]
dec eax
lea edx, [eax + eax]
mov eax, dword [ebp - 0x74]
add eax, edx
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0xfda]
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x14], 0
jmp 0x6a89ba46
mov eax, dword [ebp - 0x50]
mov ax, word [eax]
movsx edx, ax
mov eax, edx
shl eax, 1
add eax, edx
shl eax, 3
sub eax, edx
shl eax, 5
add eax, edx
shl eax, 2
add eax, edx
shl eax, 1
mov dword [ebp - 0x44], eax
add dword [ebp - 0x50], 2
mov eax, dword [ebp - 0x50]
mov ax, word [eax]
movsx edx, ax
mov eax, edx
shl eax, 1
add eax, edx
shl eax, 3
sub eax, edx
shl eax, 5
add eax, edx
shl eax, 2
add eax, edx
shl eax, 1
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x50]
mov ax, word [eax]
movsx edx, ax
mov eax, edx
shl eax, 2
add eax, edx
shl eax, 3
add eax, edx
shl eax, 5
sub eax, edx
shl eax, 2
sub eax, edx
shl eax, 2
add dword [ebp - 0x44], eax
add dword [ebp - 0x50], 2
mov eax, dword [ebp - 0x50]
mov ax, word [eax]
movsx edx, ax
mov eax, edx
shl eax, 2
add eax, edx
shl eax, 3
add eax, edx
shl eax, 5
sub eax, edx
shl eax, 2
sub eax, edx
shl eax, 2
add dword [ebp - 0x88], eax
add dword [ebp - 0x50], 2
mov eax, dword [ebp - 0x50]
mov ax, word [eax]
movsx edx, ax
mov eax, edx
shl eax, 1
add eax, edx
shl eax, 3
sub eax, edx
shl eax, 5
add eax, edx
shl eax, 2
add eax, edx
shl eax, 1
add dword [ebp - 0x88], eax
sub dword [ebp - 0x50], 2
mov eax, dword [ebp - 0x50]
mov ax, word [eax]
movsx edx, ax
mov eax, edx
shl eax, 1
add eax, edx
shl eax, 3
sub eax, edx
shl eax, 5
add eax, edx
shl eax, 2
add eax, edx
shl eax, 1
add dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
add eax, 0x4000
sar eax, 0xf
mov edx, dword [ebp - 0x54]
mov word [edx], ax
add dword [ebp - 0x54], 2
mov eax, dword [ebp - 0x88]
add eax, 0x4000
sar eax, 0xf
mov edx, dword [ebp - 0x54]
mov word [edx], ax
add dword [ebp - 0x54], 2
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0x1f
jle 0x6a89b927
mov dword [esp + 0xc], 0x40
lea eax, [ebp - 0x10da]
mov dword [esp + 8], eax
lea eax, [ebp - 0xeda]
mov dword [esp + 4], eax
lea eax, [ebp - 0xfda]
mov dword [esp], eax
call fcn.6a8a8dcc
mov dword [esp + 0xc], 0x40
lea eax, [ebp - 0x1610]
mov dword [esp + 8], eax
lea eax, [ebp - 0x10da]
mov dword [esp + 4], eax
lea eax, [ebp - 0xcda]
mov dword [esp], eax
call fcn.6a8a930b
mov word [ebp - 0x38], ax
cmp dword [ebp - 0x28], 0
je 0x6a89babc
cmp word [ebp - 0x38], 0x3ccd
jle 0x6a89babc
mov word [ebp - 0x38], 0x3ccd
movsx eax, word [ebp - 0x38]
mov dword [esp + 0x10], 0x40
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x10da]
mov dword [esp + 8], eax
lea eax, [ebp - 0xd5a]
mov dword [esp + 4], eax
lea eax, [ebp - 0xcda]
mov dword [esp], eax
call fcn.6a8a9453
mov dword [ebp - 0x20], 0
mov eax, dword [ebp + 0x14]
mov ax, word [eax]
cmp ax, 0xb1
jle 0x6a89bbc0
mov dword [ebp - 0x44], 0
lea eax, [ebp - 0xdda]
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0xd5a]
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x14], 0
jmp 0x6a89bb92
mov eax, dword [ebp - 0x50]
mov ax, word [eax]
movsx edx, ax
mov eax, dword [ebp - 0x50]
mov ax, word [eax]
cwde
imul eax, edx
add dword [ebp - 0x44], eax
add dword [ebp - 0x50], 2
mov eax, dword [ebp - 0x54]
mov ax, word [eax]
movsx edx, ax
mov eax, dword [ebp - 0x54]
mov ax, word [eax]
cwde
imul eax, edx
sub dword [ebp - 0x44], eax
add dword [ebp - 0x54], 2
mov eax, dword [ebp - 0x50]
mov ax, word [eax]
movsx edx, ax
mov eax, dword [ebp - 0x50]
mov ax, word [eax]
cwde
imul eax, edx
add dword [ebp - 0x44], eax
add dword [ebp - 0x50], 2
mov eax, dword [ebp - 0x54]
mov ax, word [eax]
movsx edx, ax
mov eax, dword [ebp - 0x54]
mov ax, word [eax]
cwde
imul eax, edx
sub dword [ebp - 0x44], eax
add dword [ebp - 0x54], 2
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0x1f
jle 0x6a89bb27
cmp dword [ebp - 0x44], 0
jg 0x6a89bba5
mov dword [ebp - 0x20], 1
mov eax, dword [ebp - 0x20]
cwde
lea edx, [ebp + 0x10]
mov dword [esp + 8], edx
mov dword [esp + 4], 1
mov dword [esp], eax
call fcn.6a8a36de
cmp dword [ebp - 0x20], 0
jne 0x6a89bc37
mov eax, dword [ebp - 0x38]
mov word [ebp - 0x15fe], ax
mov eax, dword [ebp - 0x1c]
lea edx, [eax + eax]
mov eax, dword [ebp - 0x74]
add eax, edx
mov dword [esp + 8], 0x40
mov dword [esp + 4], eax
lea eax, [ebp - 0xfda]
mov dword [esp], eax
call fcn.6a89ddf7
mov dword [esp + 8], 0x40
lea eax, [ebp - 0x105a]
mov dword [esp + 4], eax
lea eax, [ebp - 0x10da]
mov dword [esp], eax
call fcn.6a89ddf7
mov dword [esp + 8], 4
lea eax, [ebp - 0x1608]
mov dword [esp + 4], eax
lea eax, [ebp - 0x1610]
mov dword [esp], eax
call fcn.6a89ddf7
jmp 0x6a89bc62
mov ax, word [ebp - 0x36]
mov word [ebp - 0x15fe], ax
mov dword [esp + 8], 0x40
lea eax, [ebp - 0xd5a]
mov dword [esp + 4], eax
lea eax, [ebp - 0xdda]
mov dword [esp], eax
call fcn.6a89ddf7
mov ax, word [ebp - 0x15fe]
cwde
mov edx, dword [ebp - 0x1c]
lea ecx, [edx + edx]
mov edx, dword [ebp - 0x74]
add edx, ecx
mov dword [esp + 0x10], 0x40
mov dword [esp + 0xc], eax
mov dword [esp + 8], edx
lea eax, [ebp - 0xe5a]
mov dword [esp + 4], eax
lea eax, [ebp - 0xe5a]
mov dword [esp], eax
call fcn.6a8a9453
movsx eax, word [ebp - 0x3c]
mov dword [esp + 8], eax
mov dword [esp + 4], 0x40
lea eax, [ebp - 0xe5a]
mov dword [esp], eax
call fcn.6a8a326e
mov word [ebp - 0x1612], 0
mov eax, dword [ebp - 0x60]
mov ax, word [eax + 0x4ce]
cwde
lea edx, [ebp - 0x1612]
mov dword [esp + 0xc], edx
mov dword [esp + 8], 0x40
mov dword [esp + 4], eax
lea eax, [ebp - 0xf5a]
mov dword [esp], eax
call fcn.6a8a7dd4
mov eax, dword [ebp - 0x15fc]
cmp ax, 2
jle 0x6a89bd08
mov ax, word [ebp - 0x2e]
inc eax
mov word [ebp - 0x2e], ax
movsx eax, word [ebp - 0x2e]
mov dword [esp + 0xc], 0x40
mov dword [esp + 8], 0x6ccd
mov dword [esp + 4], eax
lea eax, [ebp - 0xf5a]
mov dword [esp], eax
call fcn.6a8a94dc
lea eax, [ebp - 0xdda]
mov dword [esp + 8], eax
lea eax, [ebp - 0xd5a]
mov dword [esp + 4], eax
lea eax, [ebp - 0xf5a]
mov dword [esp], eax
call fcn.6a8a961d
mov eax, dword [ebp + 0x14]
mov ax, word [eax]
cmp ax, 0x84
jg 0x6a89bdc0
lea eax, [ebp - 0x1622]
mov dword [esp + 0x14], eax
lea eax, [ebp - 0x10da]
mov dword [esp + 0x10], eax
lea eax, [ebp - 0xfda]
mov dword [esp + 0xc], eax
lea eax, [ebp - 0xf5a]
mov dword [esp + 8], eax
lea eax, [ebp - 0xe5a]
mov dword [esp + 4], eax
lea eax, [ebp - 0xdda]
mov dword [esp], eax
call fcn.6a8a99e0
mov ax, word [ebp - 0x1622]
cwde
lea edx, [ebp + 0x10]
mov dword [esp + 8], edx
mov dword [esp + 4], 0xc
mov dword [esp], eax
call fcn.6a8a36de
jmp 0x6a89c547
mov eax, dword [ebp + 0x14]
mov ax, word [eax]
cmp ax, 0xb1
jg 0x6a89bea2
mov eax, dword [ebp + 0x14]
mov ax, word [eax]
cwde
lea edx, [ebp - 0x1622]
mov dword [esp + 0x1c], edx
mov dword [esp + 0x18], eax
mov dword [esp + 0x14], 0x14
lea eax, [ebp - 0x10da]
mov dword [esp + 0x10], eax
lea eax, [ebp - 0xfda]
mov dword [esp + 0xc], eax
lea eax, [ebp - 0xf5a]
mov dword [esp + 8], eax
lea eax, [ebp - 0xe5a]
mov dword [esp + 4], eax
lea eax, [ebp - 0xdda]
mov dword [esp], eax
call fcn.6a8aa25b
mov ax, word [ebp - 0x1622]
cwde
lea edx, [ebp + 0x10]
mov dword [esp + 8], edx
mov dword [esp + 4], 5
mov dword [esp], eax
call fcn.6a8a36de
mov eax, dword [ebp - 0x1620]
cwde
lea edx, [ebp + 0x10]
mov dword [esp + 8], edx
mov dword [esp + 4], 5
mov dword [esp], eax
call fcn.6a8a36de
mov ax, word [ebp - 0x161e]
cwde
lea edx, [ebp + 0x10]
mov dword [esp + 8], edx
mov dword [esp + 4], 5
mov dword [esp], eax
call fcn.6a8a36de
mov eax, dword [ebp - 0x161c]
cwde
lea edx, [ebp + 0x10]
mov dword [esp + 8], edx
mov dword [esp + 4], 5
mov dword [esp], eax
call fcn.6a8a36de
jmp 0x6a89c547
mov eax, dword [ebp + 0x14]
mov ax, word [eax]
cmp ax, 0xfd
jg 0x6a89bf84
mov eax, dword [ebp + 0x14]
mov ax, word [eax]
cwde
lea edx, [ebp - 0x1622]
mov dword [esp + 0x1c], edx
mov dword [esp + 0x18], eax
mov dword [esp + 0x14], 0x24
lea eax, [ebp - 0x10da]
mov dword [esp + 0x10], eax
lea eax, [ebp - 0xfda]
mov dword [esp + 0xc], eax
lea eax, [ebp - 0xf5a]
mov dword [esp + 8], eax
lea eax, [ebp - 0xe5a]
mov dword [esp + 4], eax
lea eax, [ebp - 0xdda]
mov dword [esp], eax
call fcn.6a8aa25b
mov ax, word [ebp - 0x1622]
cwde
lea edx, [ebp + 0x10]
mov dword [esp + 8], edx
mov dword [esp + 4], 9
mov dword [esp], eax
call fcn.6a8a36de
mov eax, dword [ebp - 0x1620]
cwde
lea edx, [ebp + 0x10]
mov dword [esp + 8], edx
mov dword [esp + 4], 9
mov dword [esp], eax
call fcn.6a8a36de
mov ax, word [ebp - 0x161e]
cwde
lea edx, [ebp + 0x10]
mov dword [esp + 8], edx
mov dword [esp + 4], 9
mov dword [esp], eax
call fcn.6a8a36de
mov eax, dword [ebp - 0x161c]
cwde
lea edx, [ebp + 0x10]
mov dword [esp + 8], edx
mov dword [esp + 4], 9
mov dword [esp], eax
call fcn.6a8a36de
jmp 0x6a89c547
mov eax, dword [ebp + 0x14]
mov ax, word [eax]
cmp ax, 0x11d
jg 0x6a89c066
mov eax, dword [ebp + 0x14]
mov ax, word [eax]
cwde
lea edx, [ebp - 0x1622]
mov dword [esp + 0x1c], edx
mov dword [esp + 0x18], eax
mov dword [esp + 0x14], 0x2c
lea eax, [ebp - 0x10da]
mov dword [esp + 0x10], eax
lea eax, [ebp - 0xfda]
mov dword [esp + 0xc], eax
lea eax, [ebp - 0xf5a]
mov dword [esp + 8], eax
lea eax, [ebp - 0xe5a]
mov dword [esp + 4], eax
lea eax, [ebp - 0xdda]
mov dword [esp], eax
call fcn.6a8aa25b
mov ax, word [ebp - 0x1622]
cwde
lea edx, [ebp + 0x10]
mov dword [esp + 8], edx
mov dword [esp + 4], 0xd
mov dword [esp], eax
call fcn.6a8a36de
mov eax, dword [ebp - 0x1620]
cwde
lea edx, [ebp + 0x10]
mov dword [esp + 8], edx
mov dword [esp + 4], 0xd
mov dword [esp], eax
call fcn.6a8a36de
mov ax, word [ebp - 0x161e]
cwde
lea edx, [ebp + 0x10]
mov dword [esp + 8], edx
mov dword [esp + 4], 9
mov dword [esp], eax
call fcn.6a8a36de
mov eax, dword [ebp - 0x161c]
cwde
lea edx, [ebp + 0x10]
mov dword [esp + 8], edx
mov dword [esp + 4], 9
mov dword [esp], eax
call fcn.6a8a36de
jmp 0x6a89c547
mov eax, dword [ebp + 0x14]
mov ax, word [eax]
cmp ax, 0x13d
jg 0x6a89c148
mov eax, dword [ebp + 0x14]
mov ax, word [eax]
cwde
lea edx, [ebp - 0x1622]
mov dword [esp + 0x1c], edx
mov dword [esp + 0x18], eax
mov dword [esp + 0x14], 0x34
lea eax, [ebp - 0x10da]
mov dword [esp + 0x10], eax
lea eax, [ebp - 0xfda]
mov dword [esp + 0xc], eax
lea eax, [ebp - 0xf5a]
mov dword [esp + 8], eax
lea eax, [ebp - 0xe5a]
mov dword [esp + 4], eax
lea eax, [ebp - 0xdda]
mov dword [esp], eax
call fcn.6a8aa25b
mov ax, word [ebp - 0x1622]
cwde
lea edx, [ebp + 0x10]
mov dword [esp + 8], edx
mov dword [esp + 4], 0xd
mov dword [esp], eax
call fcn.6a8a36de
mov eax, dword [ebp - 0x1620]
cwde
lea edx, [ebp + 0x10]
mov dword [esp + 8], edx
mov dword [esp + 4], 0xd
mov dword [esp], eax
call fcn.6a8a36de
mov ax, word [ebp - 0x161e]
cwde
lea edx, [ebp + 0x10]
mov dword [esp + 8], edx
mov dword [esp + 4], 0xd
mov dword [esp], eax
call fcn.6a8a36de
mov eax, dword [ebp - 0x161c]
cwde
lea edx, [ebp + 0x10]
mov dword [esp + 8], edx
mov dword [esp + 4], 0xd
mov dword [esp], eax
call fcn.6a8a36de
jmp 0x6a89c547
mov eax, dword [ebp + 0x14]
mov ax, word [eax]
cmp ax, 0x16d
jg 0x6a89c2a4
mov eax, dword [ebp + 0x14]
mov ax, word [eax]
cwde
lea edx, [ebp - 0x1622]
mov dword [esp + 0x1c], edx
mov dword [esp + 0x18], eax
mov dword [esp + 0x14], 0x40
lea eax, [ebp - 0x10da]
mov dword [esp + 0x10], eax
lea eax, [ebp - 0xfda]
mov dword [esp + 0xc], eax
lea eax, [ebp - 0xf5a]
mov dword [esp + 8], eax
lea eax, [ebp - 0xe5a]
mov dword [esp + 4], eax
lea eax, [ebp - 0xdda]
mov dword [esp], eax
call fcn.6a8aa25b
mov ax, word [ebp - 0x1622]
cwde
lea edx, [ebp + 0x10]
mov dword [esp + 8], edx
mov dword [esp + 4], 2
mov dword [esp], eax
call fcn.6a8a36de
mov eax, dword [ebp - 0x1620]
cwde
lea edx, [ebp + 0x10]
mov dword [esp + 8], edx
mov dword [esp + 4], 2
mov dword [esp], eax
call fcn.6a8a36de
mov ax, word [ebp - 0x161e]
cwde
lea edx, [ebp + 0x10]
mov dword [esp + 8], edx
mov dword [esp + 4], 2
mov dword [esp], eax
call fcn.6a8a36de
mov eax, dword [ebp - 0x161c]
cwde
lea edx, [ebp + 0x10]
mov dword [esp + 8], edx
mov dword [esp + 4], 2
mov dword [esp], eax
call fcn.6a8a36de
mov ax, word [ebp - 0x161a]
cwde
lea edx, [ebp + 0x10]
mov dword [esp + 8], edx
mov dword [esp + 4], 0xe
mov dword [esp], eax
call fcn.6a8a36de
mov eax, dword [ebp - 0x1618]
cwde
lea edx, [ebp + 0x10]
mov dword [esp + 8], edx
mov dword [esp + 4], 0xe
mov dword [esp], eax
call fcn.6a8a36de
mov ax, word [ebp - 0x1616]
cwde
lea edx, [ebp + 0x10]
mov dword [esp + 8], edx
mov dword [esp + 4], 0xe
mov dword [esp], eax
call fcn.6a8a36de
mov eax, dword [ebp - 0x1614]
cwde
lea edx, [ebp + 0x10]
mov dword [esp + 8], edx
mov dword [esp + 4], 0xe
mov dword [esp], eax
call fcn.6a8a36de
jmp 0x6a89c547
mov eax, dword [ebp + 0x14]
mov ax, word [eax]
cmp ax, 0x18d
jg 0x6a89c400
mov eax, dword [ebp + 0x14]
mov ax, word [eax]
cwde
lea edx, [ebp - 0x1622]
mov dword [esp + 0x1c], edx
mov dword [esp + 0x18], eax
mov dword [esp + 0x14], 0x48
lea eax, [ebp - 0x10da]
mov dword [esp + 0x10], eax
lea eax, [ebp - 0xfda]
mov dword [esp + 0xc], eax
lea eax, [ebp - 0xf5a]
mov dword [esp + 8], eax
lea eax, [ebp - 0xe5a]
mov dword [esp + 4], eax
lea eax, [ebp - 0xdda]
mov dword [esp], eax
call fcn.6a8aa25b
mov ax, word [ebp - 0x1622]
cwde
lea edx, [ebp + 0x10]
mov dword [esp + 8], edx
mov dword [esp + 4], 0xa
mov dword [esp], eax
call fcn.6a8a36de
mov eax, dword [ebp - 0x1620]
cwde
lea edx, [ebp + 0x10]
mov dword [esp + 8], edx
mov dword [esp + 4], 0xa
mov dword [esp], eax
call fcn.6a8a36de
mov ax, word [ebp - 0x161e]
cwde
lea edx, [ebp + 0x10]
mov dword [esp + 8], edx
mov dword [esp + 4], 2
mov dword [esp], eax
call fcn.6a8a36de
mov eax, dword [ebp - 0x161c]
cwde
lea edx, [ebp + 0x10]
mov dword [esp + 8], edx
mov dword [esp + 4], 2
mov dword [esp], eax
call fcn.6a8a36de
mov ax, word [ebp - 0x161a]
cwde
lea edx, [ebp + 0x10]
mov dword [esp + 8], edx
mov dword [esp + 4], 0xa
mov dword [esp], eax
call fcn.6a8a36de
mov eax, dword [ebp - 0x1618]
cwde
lea edx, [ebp + 0x10]
mov dword [esp + 8], edx
mov dword [esp + 4], 0xa
mov dword [esp], eax
call fcn.6a8a36de
mov ax, word [ebp - 0x1616]
cwde
lea edx, [ebp + 0x10]
mov dword [esp + 8], edx
mov dword [esp + 4], 0xe
mov dword [esp], eax
call fcn.6a8a36de
mov eax, dword [ebp - 0x1614]
cwde
lea edx, [ebp + 0x10]
mov dword [esp + 8], edx
mov dword [esp + 4], 0xe
mov dword [esp], eax
call fcn.6a8a36de
jmp 0x6a89c547
mov eax, dword [ebp + 0x14]
mov ax, word [eax]
cwde
lea edx, [ebp - 0x1622]
mov dword [esp + 0x1c], edx
mov dword [esp + 0x18], eax
mov dword [esp + 0x14], 0x58
lea eax, [ebp - 0x10da]
mov dword [esp + 0x10], eax
lea eax, [ebp - 0xfda]
mov dword [esp + 0xc], eax
lea eax, [ebp - 0xf5a]
mov dword [esp + 8], eax
lea eax, [ebp - 0xe5a]
mov dword [esp + 4], eax
lea eax, [ebp - 0xdda]
mov dword [esp], eax
call fcn.6a8aa25b
mov ax, word [ebp - 0x1622]
cwde
lea edx, [ebp + 0x10]
mov dword [esp + 8], edx
mov dword [esp + 4], 0xb
mov dword [esp], eax
call fcn.6a8a36de
mov eax, dword [ebp - 0x1620]
cwde
lea edx, [ebp + 0x10]
mov dword [esp + 8], edx
mov dword [esp + 4], 0xb
mov dword [esp], eax
call fcn.6a8a36de
mov ax, word [ebp - 0x161e]
cwde
lea edx, [ebp + 0x10]
mov dword [esp + 8], edx
mov dword [esp + 4], 0xb
mov dword [esp], eax
call fcn.6a8a36de
mov eax, dword [ebp - 0x161c]
cwde
lea edx, [ebp + 0x10]
mov dword [esp + 8], edx
mov dword [esp + 4], 0xb
mov dword [esp], eax
call fcn.6a8a36de
mov ax, word [ebp - 0x161a]
cwde
lea edx, [ebp + 0x10]
mov dword [esp + 8], edx
mov dword [esp + 4], 0xb
mov dword [esp], eax
call fcn.6a8a36de
mov eax, dword [ebp - 0x1618]
cwde
lea edx, [ebp + 0x10]
mov dword [esp + 8], edx
mov dword [esp + 4], 0xb
mov dword [esp], eax
call fcn.6a8a36de
mov ax, word [ebp - 0x1616]
cwde
lea edx, [ebp + 0x10]
mov dword [esp + 8], edx
mov dword [esp + 4], 0xb
mov dword [esp], eax
call fcn.6a8a36de
mov eax, dword [ebp - 0x1614]
cwde
lea edx, [ebp + 0x10]
mov dword [esp + 8], edx
mov dword [esp + 4], 0xb
mov dword [esp], eax
call fcn.6a8a36de
mov word [ebp - 0x1612], 0
mov eax, dword [ebp - 0x60]
mov ax, word [eax + 0x4ce]
cwde
lea edx, [ebp - 0x1612]
mov dword [esp + 0xc], edx
mov dword [esp + 8], 0x40
mov dword [esp + 4], eax
lea eax, [ebp - 0xfda]
mov dword [esp], eax
call fcn.6a8a7dd4
movsx eax, word [ebp - 0x2e]
mov dword [esp + 0xc], 0x40
mov dword [esp + 8], 0x6ccd
mov dword [esp + 4], eax
lea eax, [ebp - 0xfda]
mov dword [esp], eax
call fcn.6a8a94dc
mov eax, dword [ebp + 0x14]
mov ax, word [eax]
cmp ax, 0xb1
jg 0x6a89c658
mov eax, dword [ebp - 0x60]
lea ebx, [eax + 0x4de]
mov eax, dword [ebp - 0x28]
movsx ecx, ax
mov dx, word [ebp - 0x3a]
mov eax, dword [ebp - 0x3c]
add eax, edx
cwde
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x28], ecx
lea edx, [ebp - 0x1628]
mov dword [esp + 0x24], edx
lea edx, [ebp - 0x15fe]
mov dword [esp + 0x20], edx
mov dword [esp + 0x1c], 6
mov dword [esp + 0x18], 0x40
lea edx, [ebp - 0x1608]
mov dword [esp + 0x14], edx
lea edx, [ebp - 0xfda]
mov dword [esp + 0x10], edx
lea edx, [ebp - 0x10da]
mov dword [esp + 0xc], edx
mov dword [esp + 8], eax
lea eax, [ebp - 0x105a]
mov dword [esp + 4], eax
lea eax, [ebp - 0xcda]
mov dword [esp], eax
call fcn.6a89f027
mov word [ebp - 0x34], ax
movsx eax, word [ebp - 0x34]
lea edx, [ebp + 0x10]
mov dword [esp + 8], edx
mov dword [esp + 4], 6
mov dword [esp], eax
call fcn.6a8a36de
jmp 0x6a89c6f6
mov eax, dword [ebp - 0x60]
lea ebx, [eax + 0x4de]
mov eax, dword [ebp - 0x28]
movsx ecx, ax
mov dx, word [ebp - 0x3a]
mov eax, dword [ebp - 0x3c]
add eax, edx
cwde
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x28], ecx
lea edx, [ebp - 0x1628]
mov dword [esp + 0x24], edx
lea edx, [ebp - 0x15fe]
mov dword [esp + 0x20], edx
mov dword [esp + 0x1c], 7
mov dword [esp + 0x18], 0x40
lea edx, [ebp - 0x1608]
mov dword [esp + 0x14], edx
lea edx, [ebp - 0xfda]
mov dword [esp + 0x10], edx
lea edx, [ebp - 0x10da]
mov dword [esp + 0xc], edx
mov dword [esp + 8], eax
lea eax, [ebp - 0x105a]
mov dword [esp + 4], eax
lea eax, [ebp - 0xcda]
mov dword [esp], eax
call fcn.6a89f027
mov word [ebp - 0x34], ax
movsx eax, word [ebp - 0x34]
lea edx, [ebp + 0x10]
mov dword [esp + 8], edx
mov dword [esp + 4], 7
mov dword [esp], eax
call fcn.6a8a36de
mov eax, dword [ebp - 0x60]
lea edx, [eax + 0x4da]
mov ax, word [ebp - 0x15fe]
cwde
mov dword [esp + 4], edx
mov dword [esp], eax
call fcn.6a89e035
movsx edx, word [ebp - 0x3a]
mov eax, dword [ebp - 0x1628]
mov dword [esp + 4], edx
mov dword [esp], eax
call fcn.6a89988a
mov dword [ebp - 0x44], eax
mov dword [esp + 4], 0x8000
mov eax, dword [ebp - 0x44]
mov dword [esp], eax
call fcn.6a899847
sar eax, 0x10
mov word [ebp - 0x1600], ax
mov eax, dword [ebp - 0x1c]
lea edx, [eax + eax]
mov eax, dword [ebp - 0x74]
add edx, eax
mov dword [esp + 8], 0x40
lea eax, [ebp - 0x13fa]
mov dword [esp + 4], eax
mov dword [esp], edx
call fcn.6a89ddf7
movsx eax, word [ebp - 0x3c]
mov dword [esp + 8], eax
mov dword [esp + 4], 0x40
lea eax, [ebp - 0x13fa]
mov dword [esp], eax
call fcn.6a8a326e
mov eax, dword [ebp - 0x1600]
movsx ecx, ax
mov ax, word [ebp - 0x15fe]
movsx edx, ax
movsx eax, word [ebp - 0x3c]
mov dword [esp + 0x14], 0x40
mov dword [esp + 0x10], ecx
lea ecx, [ebp - 0xfda]
mov dword [esp + 0xc], ecx
mov dword [esp + 8], edx
mov dword [esp + 4], eax
lea eax, [ebp - 0x13fa]
mov dword [esp], eax
call fcn.6a8ac547
mov word [ebp - 0x8a], ax
mov ax, word [ebp - 0x8a]
sar ax, 2
add eax, 0x2000
mov edx, dword [ebp - 0x60]
mov word [edx + 0x4ce], ax
mov eax, dword [ebp - 0x1600]
movsx edx, ax
mov eax, dword [ebp - 0x105c]
cwde
imul eax, edx
shl eax, 1
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x3c]
add eax, 5
cwde
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x44]
mov dword [esp], eax
call fcn.6a89988a
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0x80000000
je 0x6a89c831
mov eax, dword [ebp - 0x44]
neg eax
jmp 0x6a89c836
mov eax, 0x7fffffff
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0xc5c]
cwde
shl eax, 0xe
shl eax, 1
add dword [ebp - 0x44], eax
mov eax, dword [ebp - 0xfdc]
movsx edx, ax
mov ax, word [ebp - 0x15fe]
cwde
imul eax, edx
shl eax, 1
sub dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x3c]
mov edx, 1
mov ebx, edx
sub ebx, eax
mov eax, ebx
cwde
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x44]
mov dword [esp], eax
call fcn.6a89988a
mov dword [ebp - 0x44], eax
mov dword [esp + 4], 0x8000
mov eax, dword [ebp - 0x44]
mov dword [esp], eax
call fcn.6a899847
sar eax, 0x10
mov edx, dword [ebp - 0x60]
mov word [edx + 0x4ac], ax
mov eax, dword [ebp + 0x14]
mov ax, word [eax]
cmp ax, 0x1dc
jle 0x6a89c8d3
mov eax, dword [ebp - 0x1c]
lea edx, [eax + eax]
mov eax, dword [ebp - 0x74]
add edx, eax
mov dword [esp + 8], 0x40
lea eax, [ebp - 0x13fa]
mov dword [esp + 4], eax
mov dword [esp], edx
call fcn.6a89ddf7
mov dword [ebp - 0x14], 0
jmp 0x6a89c969
mov eax, dword [ebp - 0x1600]
movsx edx, ax
mov eax, dword [ebp - 0x14]
mov ax, word [ebp + eax*2 - 0xfda]
cwde
imul eax, edx
shl eax, 1
mov dword [ebp - 0x44], eax
shl dword [ebp - 0x44], 5
mov eax, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x14]
add eax, edx
lea edx, [eax + eax]
mov eax, dword [ebp - 0x74]
add eax, edx
mov ax, word [eax]
movsx edx, ax
mov ax, word [ebp - 0x15fe]
cwde
imul eax, edx
shl eax, 1
add dword [ebp - 0x44], eax
mov dword [esp + 4], 1
mov eax, dword [ebp - 0x44]
mov dword [esp], eax
call fcn.6a89990a
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x14]
add eax, edx
lea edx, [eax + eax]
mov eax, dword [ebp - 0x74]
lea ebx, [edx + eax]
mov dword [esp + 4], 0x8000
mov eax, dword [ebp - 0x44]
mov dword [esp], eax
call fcn.6a899847
sar eax, 0x10
mov word [ebx], ax
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0x3f
jle 0x6a89c8df
mov eax, dword [ebp - 0x60]
add eax, 0x4ae
mov edx, dword [ebp - 0x1c]
lea ecx, [edx + edx]
mov edx, dword [ebp - 0x74]
add edx, ecx
mov dword [esp + 0x14], 1
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 0x40
lea eax, [ebp - 0x11fa]
mov dword [esp + 8], eax
mov dword [esp + 4], edx
mov eax, dword [ebp - 0x10]
mov dword [esp], eax
call fcn.6a8a7642
mov eax, dword [ebp + 0x14]
mov ax, word [eax]
cmp ax, 0x1dc
jle 0x6a89cd4d
mov eax, dword [ebp - 0x1628]
lea edx, [ebp - 0x16aa]
mov dword [esp + 8], edx
lea edx, [ebp - 0x1600]
mov dword [esp + 4], edx
mov dword [esp], eax
call fcn.6a8ac909
mov ax, word [ebp - 0x8a]
sar ax, 1
mov edx, 0x4000
mov ecx, edx
sub ecx, eax
mov eax, ecx
mov word [ebp - 0x1612], ax
movsx edx, word [ebp - 0x4a]
mov ax, word [ebp - 0x1612]
cwde
imul eax, edx
sar eax, 0xf
mov word [ebp - 0x8c], ax
mov eax, dword [ebp - 0x1628]
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x60]
mov eax, dword [eax + 0x71c]
cmp eax, dword [ebp - 0x44]
jle 0x6a89ca75
mov ax, word [ebp - 0x16aa]
movsx edx, ax
mov eax, dword [ebp - 0x1600]
cwde
mov dword [esp + 8], 0x1852
mov dword [esp + 4], edx
mov dword [esp], eax
call fcn.6a8ac9c5
add dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x60]
mov eax, dword [eax + 0x71c]
cmp eax, dword [ebp - 0x44]
jge 0x6a89cab7
mov eax, dword [ebp - 0x60]
mov eax, dword [eax + 0x71c]
mov dword [ebp - 0x44], eax
jmp 0x6a89cab7
mov ax, word [ebp - 0x16aa]
movsx edx, ax
mov eax, dword [ebp - 0x1600]
cwde
mov dword [esp + 8], 0x6b90
mov dword [esp + 4], edx
mov dword [esp], eax
call fcn.6a8ac9c5
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x60]
mov eax, dword [eax + 0x71c]
cmp eax, dword [ebp - 0x44]
jle 0x6a89cab7
mov eax, dword [ebp - 0x60]
mov eax, dword [eax + 0x71c]
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x60]
mov edx, dword [ebp - 0x44]
mov dword [eax + 0x71c], edx
mov eax, dword [ebp - 0x8c]
mov edx, 0x7fff
mov ebx, edx
sub ebx, eax
mov eax, ebx
movsx ecx, ax
mov ax, word [ebp - 0x16aa]
movsx edx, ax
mov eax, dword [ebp - 0x1600]
cwde
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
mov dword [esp], eax
call fcn.6a8ac9c5
mov dword [ebp - 0x1628], eax
lea eax, [ebp - 0x16aa]
mov dword [esp + 8], eax
lea eax, [ebp - 0x1600]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x44]
mov dword [esp], eax
call fcn.6a8ac909
movsx ecx, word [ebp - 0x8c]
mov ax, word [ebp - 0x16aa]
movsx edx, ax
mov eax, dword [ebp - 0x1600]
cwde
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
mov dword [esp], eax
call fcn.6a8ac9c5
mov edx, dword [ebp - 0x1628]
add eax, edx
mov dword [ebp - 0x1628], eax
mov ax, word [ebp - 0x8a]
sar ax, 3
add eax, 0x1000
mov word [ebp - 0x1612], ax
mov ax, word [ebp - 0xfda]
cwde
shl eax, 0x10
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0xfd8]
movsx edx, ax
mov ax, word [ebp - 0x1612]
cwde
imul eax, edx
shl eax, 1
sub dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
add eax, 0x8000
sar eax, 0x10
mov word [ebp - 0x16a8], ax
mov dword [ebp - 0x14], 1
jmp 0x6a89cc15
mov eax, dword [ebp - 0x14]
mov ax, word [ebp + eax*2 - 0xfda]
cwde
shl eax, 0x10
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x14]
inc eax
mov ax, word [ebp + eax*2 - 0xfda]
movsx edx, ax
mov ax, word [ebp - 0x1612]
cwde
imul eax, edx
shl eax, 1
sub dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x14]
dec eax
mov ax, word [ebp + eax*2 - 0xfda]
movsx edx, ax
mov ax, word [ebp - 0x1612]
cwde
imul eax, edx
shl eax, 1
sub dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
add eax, 0x8000
sar eax, 0x10
mov edx, dword [ebp - 0x14]
mov word [ebp + edx*2 - 0x16a8], ax
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0x3e
jle 0x6a89cbac
mov eax, dword [ebp - 0xf5c]
cwde
shl eax, 0x10
mov dword [ebp - 0x44], eax
mov ax, word [ebp - 0xf5e]
movsx edx, ax
mov ax, word [ebp - 0x1612]
cwde
imul eax, edx
shl eax, 1
sub dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
add eax, 0x8000
sar eax, 0x10
mov word [ebp - 0x162a], ax
movsx edx, word [ebp - 0x3a]
mov eax, dword [ebp - 0x1628]
mov dword [esp + 4], edx
mov dword [esp], eax
call fcn.6a89988a
add eax, 0x8000
sar eax, 0x10
mov word [ebp - 0x1600], ax
mov dword [ebp - 0x14], 0
jmp 0x6a89ccdd
mov eax, dword [ebp - 0x14]
mov ax, word [ebp + eax*2 - 0x16a8]
movsx edx, ax
mov eax, dword [ebp - 0x1600]
cwde
imul eax, edx
shl eax, 1
mov dword [ebp - 0x44], eax
shl dword [ebp - 0x44], 5
mov eax, dword [ebp - 0x14]
mov ax, word [ebp + eax*2 - 0x13fa]
movsx edx, ax
mov ax, word [ebp - 0x15fe]
cwde
imul eax, edx
shl eax, 1
add dword [ebp - 0x44], eax
shl dword [ebp - 0x44], 1
mov eax, dword [ebp - 0x44]
add eax, 0x8000
sar eax, 0x10
mov edx, dword [ebp - 0x14]
mov word [ebp + edx*2 - 0x13fa], ax
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0x3f
jle 0x6a89cc82
mov edx, dword [ebp - 0x1c]
mov eax, edx
shl eax, 2
add eax, edx
test eax, eax
jns 0x6a89ccf4
add eax, 3
sar eax, 2
lea edx, [eax + eax]
mov eax, dword [ebp + 0xc]
lea ecx, [edx + eax]
movsx eax, word [ebp - 0x3a]
mov edx, dword [ebp - 0x60]
mov dword [esp + 0x10], edx
mov dword [esp + 0xc], ecx
mov dword [esp + 8], eax
lea eax, [ebp - 0x13fa]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x10]
mov dword [esp], eax
call fcn.6a89cde3
mov word [ebp - 0x82], ax
movsx eax, word [ebp - 0x82]
lea edx, [ebp + 0x10]
mov dword [esp + 8], edx
mov dword [esp + 4], 4
mov dword [esp], eax
call fcn.6a8a36de
add dword [ebp - 0xc], 0x22
add dword [ebp - 0x10], 0x22
add dword [ebp - 0x1c], 0x40
cmp dword [ebp - 0x1c], 0xff
jle 0x6a89b08c
mov eax, dword [ebp - 0x60]
add eax, 0x4a
mov dword [esp + 8], pe_nt_image_headers32
mov dword [esp + 4], eax
lea eax, [ebp - 0x38c]
add eax, 0x200
mov dword [esp], eax
call fcn.6a89ddf7
mov eax, dword [ebp - 0x60]
add eax, 0x14a
mov dword [esp + 8], 0x73
mov dword [esp + 4], eax
lea eax, [ebp - 0x672]
add eax, 0x100
mov dword [esp], eax
call fcn.6a89ddf7
mov eax, dword [ebp - 0x60]
add eax, 0x230
mov dword [esp + 8], 0xf8
mov dword [esp + 4], eax
lea eax, [ebp - 0xa64]
add eax, 0x200
mov dword [esp], eax
call fcn.6a89ddf7
add esp, 0x16f0
pop ebx
pop esi
pop ebp
ret