Function at 0x5fee30
Capabilities:
Authenticate hmac
Contain obfuscated stackstrings
Parse pe header
Resolve function by parsing pe exports

Disassembly:
mov eax, 0xaa5e26
call fcn.00a6fc7c
sub esp, 0x3e4
push ebx
push esi
push edi
xor edi, edi
mov dword [ebp - 0x64], ecx
lea ecx, [ebp - 0x20]
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x58], edi
mov dword [ebp - 4], edi
mov dword [ebp - 0x1c], edi
call fcn.00610e1b
push dword [ebp + 0x10]
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 1
call fcn.00402c82
mov eax, dword [ebp - 0x1c]
lea ecx, [eax + 0x14]
lea eax, [ebp - 0x44]
push eax
call fcn.00402d35
lea ecx, [ebp - 0x44]
call fcn.00402fa4
mov esi, dword [ebp - 0x1c]
mov ecx, dword [ebp + 0xc]
mov edx, esi
call fcn.00416e36
mov dword [esi + 8], eax
mov esi, 0xbe7330
push esi
lea ecx, [ebp - 0x40]
call fcn.0040318f
push esi
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 2
call fcn.0040318f
push edi
push edi
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x54]
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0x24], esp
push dword [ebp + 0x10]
mov byte [ebp - 4], 3
call fcn.0040339f
mov byte [ebp - 4], 4
call fcn.00406548
mov ecx, eax
call fcn.00402680
lea ecx, [ebp - 0xb8]
push ecx
mov ecx, eax
mov byte [ebp - 4], 3
call fcn.00404a75
mov ecx, eax
mov byte [ebp - 4], 5
call fcn.004032b2
cmp eax, edi
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x80], edi
je 0x5fef21
lea eax, [ebp - 0x6c]
push eax
lea ecx, [ebp - 0x80]
call fcn.004053ee
cmp eax, edi
jge 0x5fef21
mov ebx, 0x80004002
cmp eax, ebx
je 0x5fef26
push eax
call fcn.00a6ef01
jmp 0x5fef26
mov ebx, 0x80004002
lea eax, [ebp - 0xb8]
push eax
mov byte [ebp - 4], 9
call fcn.004029b7
cmp eax, edi
pop ecx
jge 0x5fef41
push eax
call fcn.00a6ef01
lea eax, [ebp - 0x54]
push eax
mov byte [ebp - 4], 8
call fcn.004029b7
cmp eax, edi
pop ecx
jge 0x5fef59
push eax
call fcn.00a6ef01
lea eax, [ebp - 0x40]
push eax
mov byte [ebp - 4], 7
call fcn.004029b7
cmp eax, edi
pop ecx
jge 0x5fef71
push eax
call fcn.00a6ef01
push edi
push edi
push ecx
mov eax, esp
mov dword [ebp - 0x24], esp
push 0x320
push eax
call fcn.007a48d0
mov ecx, eax
call fcn.00406368
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0xa
call fcn.0040263b
lea ecx, [ebp - 0xc8]
push ecx
mov ecx, eax
mov byte [ebp - 4], 7
call fcn.00403ac7
mov ecx, eax
mov byte [ebp - 4], 0xb
call fcn.004032b2
cmp eax, edi
mov dword [ebp + 0x10], eax
mov dword [ebp - 0x14], edi
je 0x5fefd8
lea eax, [ebp + 0x10]
push eax
lea ecx, [ebp - 0x14]
call fcn.004053ee
cmp eax, edi
jge 0x5fefd8
cmp eax, ebx
je 0x5fefd8
push eax
call fcn.00a6ef01
lea eax, [ebp - 0xc8]
push eax
mov byte [ebp - 4], 0xd
call fcn.004029b7
cmp eax, edi
pop ecx
jge 0x5feff3
push eax
call fcn.00a6ef01
push edi
push ecx
mov eax, esp
mov dword [ebp - 0x24], esp
push 0xa56
push eax
call fcn.007a48d0
mov ecx, eax
call fcn.00406368
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0xe
call fcn.0040263b
lea ecx, [ebp - 0x54]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0xd
call fcn.00403ac7
push eax
mov byte [ebp - 4], 0xf
call fcn.00415344
pop ecx
pop ecx
lea ecx, [ebp - 0x20]
mov esi, eax
call fcn.0061059f
mov dword [eax + 0xc], esi
lea eax, [ebp - 0x54]
push eax
mov byte [ebp - 4], 0xd
call fcn.004029b7
cmp eax, edi
pop ecx
jge 0x5ff058
push eax
call fcn.00a6ef01
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp + 0xc]
push eax
mov eax, dword [ebp - 0x64]
lea ecx, [eax + 0x24]
call fcn.006120a3
push edi
push edi
push ecx
mov ecx, esp
mov dword [ebp - 0x24], esp
push 0xba22a8
call fcn.00426d6e
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x10
call fcn.0040263b
lea ecx, [ebp - 0x158]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0xd
call fcn.00403ac7
mov ecx, eax
mov byte [ebp - 4], 0x11
call fcn.004032b2
cmp eax, edi
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x7c], edi
je 0x5ff0ca
lea eax, [ebp - 0x6c]
push eax
lea ecx, [ebp - 0x7c]
call fcn.004053ee
cmp eax, edi
jge 0x5ff0ca
cmp eax, ebx
je 0x5ff0ca
push eax
call fcn.00a6ef01
lea eax, [ebp - 0x158]
push eax
mov byte [ebp - 4], 0x13
call fcn.004029b7
cmp eax, edi
pop ecx
jge 0x5ff0e5
push eax
call fcn.00a6ef01
cmp dword [ebp - 0x7c], edi
je 0x5ff12d
push edi
push ecx
mov ecx, esp
mov dword [ebp + 0x10], esp
push 0xba22a0
call fcn.00426d6e
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0x14
call fcn.0040263b
lea ecx, [ebp - 0x54]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0x13
call fcn.00403ac7
mov dword [ebp - 0x58], 1
push eax
mov byte [ebp - 4], 0x15
call fcn.00415344
pop ecx
pop ecx
mov ecx, eax
jmp 0x5ff12f
xor ecx, ecx
mov esi, dword [ebp - 0x1c]
lea edx, [esi + 0x78]
call fcn.00416e36
test byte [ebp - 0x58], 1
mov dword [esi + 0x80], eax
mov dword [ebp - 4], 0x13
je 0x5ff161
lea eax, [ebp - 0x54]
push eax
call fcn.004029b7
cmp eax, edi
pop ecx
jge 0x5ff161
push eax
call fcn.00a6ef01
cmp dword [ebp - 0x7c], edi
je 0x5ff1ce
push ecx
mov ecx, esp
mov dword [ebp + 0x10], esp
push 0xba229c
call fcn.00426d6e
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0x16
call fcn.0040263b
lea ecx, [ebp - 0x54]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0x13
call fcn.00403ac7
cmp word [eax], 8
mov byte [ebp - 4], 0x17
jne 0x5ff1a0
mov eax, dword [eax + 8]
jmp 0x5ff1a5
mov eax, 0xbdd488
mov ecx, dword [ebp - 0x1c]
push 0xffffffffffffffff
add ecx, 0x84
push eax
call fcn.004674e6
lea eax, [ebp - 0x54]
push eax
mov byte [ebp - 4], 0x13
call fcn.004029b7
cmp eax, edi
pop ecx
jge 0x5ff1ce
push eax
call fcn.00a6ef01
push dword [ebp + 0xc]
mov ecx, dword [ebp - 0x64]
lea eax, [ebp + 0x10]
push eax
call fcn.0060313e
push eax
mov eax, dword [ebp - 0x1c]
lea ecx, [eax + 0x10]
mov byte [ebp - 4], 0x18
call fcn.00418f94
mov eax, dword [ebp + 0x10]
cmp eax, edi
mov byte [ebp - 4], 0x13
je 0x5ff202
add eax, 0xfffffff4
push eax
call fcn.00429f5a
pop ecx
push edi
push ecx
mov eax, esp
mov dword [ebp + 0x10], esp
push 0x71e
push eax
call fcn.007a48d0
mov ecx, eax
call fcn.00406368
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x19
call fcn.0040263b
lea ecx, [ebp - 0x54]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0x13
call fcn.00403ac7
push eax
mov byte [ebp - 4], 0x1a
call fcn.00415344
pop ecx
pop ecx
lea ecx, [ebp - 0x20]
mov ebx, eax
call fcn.0061059f
mov esi, eax
lea edx, [esi + 0x18]
mov ecx, ebx
call fcn.00416e36
mov dword [esi + 0x20], eax
lea eax, [ebp - 0x54]
push eax
mov byte [ebp - 4], 0x13
call fcn.004029b7
cmp eax, edi
pop ecx
jge 0x5ff273
push eax
call fcn.00a6ef01
push edi
push ecx
mov eax, esp
mov dword [ebp + 0x10], esp
push 0x720
push eax
call fcn.007a48d0
mov ecx, eax
call fcn.00406368
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x1b
call fcn.0040263b
lea ecx, [ebp - 0x54]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0x13
call fcn.00403ac7
push eax
mov byte [ebp - 4], 0x1c
call fcn.00415344
pop ecx
pop ecx
lea ecx, [ebp - 0x20]
mov ebx, eax
call fcn.0061059f
mov esi, eax
lea edx, [esi + 0x24]
mov ecx, ebx
call fcn.00416e36
mov dword [esi + 0x2c], eax
lea eax, [ebp - 0x54]
push eax
mov byte [ebp - 4], 0x13
call fcn.004029b7
cmp eax, edi
pop ecx
jge 0x5ff2e4
push eax
call fcn.00a6ef01
push edi
push ecx
mov eax, esp
mov dword [ebp + 0x10], esp
push 0x71f
push eax
call fcn.007a48d0
mov ecx, eax
call fcn.00406368
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x1d
call fcn.0040263b
lea ecx, [ebp - 0x54]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0x13
call fcn.00403ac7
push eax
mov byte [ebp - 4], 0x1e
call fcn.00415344
pop ecx
pop ecx
lea ecx, [ebp - 0x20]
mov ebx, eax
call fcn.0061059f
mov esi, eax
lea edx, [esi + 0x30]
mov ecx, ebx
call fcn.00416e36
mov dword [esi + 0x38], eax
lea eax, [ebp - 0x54]
push eax
mov byte [ebp - 4], 0x13
call fcn.004029b7
cmp eax, edi
pop ecx
jge 0x5ff355
push eax
call fcn.00a6ef01
push edi
push ecx
mov eax, esp
mov dword [ebp + 0x10], esp
push 0x721
push eax
call fcn.007a48d0
mov ecx, eax
call fcn.00406368
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x1f
call fcn.0040263b
lea ecx, [ebp - 0x54]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0x13
call fcn.00403ac7
push eax
mov byte [ebp - 4], 0x20
call fcn.00415344
pop ecx
pop ecx
lea ecx, [ebp - 0x20]
mov ebx, eax
call fcn.0061059f
mov esi, eax
lea edx, [esi + 0x3c]
mov ecx, ebx
call fcn.00416e36
mov dword [esi + 0x44], eax
lea eax, [ebp - 0x54]
push eax
mov byte [ebp - 4], 0x13
call fcn.004029b7
cmp eax, edi
pop ecx
jge 0x5ff3c6
push eax
call fcn.00a6ef01
push edi
push ecx
mov eax, esp
mov dword [ebp + 0x10], esp
push 0x722
push eax
call fcn.007a48d0
mov ecx, eax
call fcn.00406368
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x21
call fcn.0040263b
lea ecx, [ebp - 0x54]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0x13
call fcn.00403ac7
push eax
mov byte [ebp - 4], 0x22
call fcn.00415344
pop ecx
pop ecx
lea ecx, [ebp - 0x20]
mov ebx, eax
call fcn.0061059f
mov esi, eax
lea edx, [esi + 0x48]
mov ecx, ebx
call fcn.00416e36
mov dword [esi + 0x50], eax
lea eax, [ebp - 0x54]
push eax
mov byte [ebp - 4], 0x13
call fcn.004029b7
cmp eax, edi
pop ecx
jge 0x5ff437
push eax
call fcn.00a6ef01
push edi
push ecx
mov eax, esp
mov dword [ebp + 0x10], esp
push 0x723
push eax
call fcn.007a48d0
mov ecx, eax
call fcn.00406368
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x23
call fcn.0040263b
lea ecx, [ebp - 0x54]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0x13
call fcn.00403ac7
push eax
mov byte [ebp - 4], 0x24
call fcn.00415344
pop ecx
pop ecx
lea ecx, [ebp - 0x20]
mov ebx, eax
call fcn.0061059f
mov esi, eax
lea edx, [esi + 0x54]
mov ecx, ebx
call fcn.00416e36
mov dword [esi + 0x5c], eax
lea eax, [ebp - 0x54]
push eax
mov byte [ebp - 4], 0x13
call fcn.004029b7
cmp eax, edi
pop ecx
jge 0x5ff4a8
push eax
call fcn.00a6ef01
push edi
push ecx
mov eax, esp
mov dword [ebp + 0x10], esp
push 0x6a2
push eax
call fcn.007a48d0
mov ecx, eax
call fcn.00406368
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x25
call fcn.0040263b
lea ecx, [ebp - 0x54]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0x13
call fcn.00403ac7
push eax
mov byte [ebp - 4], 0x26
call fcn.00415344
pop ecx
pop ecx
lea ecx, [ebp - 0x20]
mov ebx, eax
call fcn.0061059f
mov esi, eax
lea edx, [esi + 0x60]
mov ecx, ebx
call fcn.00416e36
mov dword [esi + 0x68], eax
lea eax, [ebp - 0x54]
push eax
mov byte [ebp - 4], 0x13
call fcn.004029b7
cmp eax, edi
pop ecx
jge 0x5ff519
push eax
call fcn.00a6ef01
push edi
push ecx
mov eax, esp
mov dword [ebp + 0x10], esp
push 0x6a4
push eax
call fcn.007a48d0
mov ecx, eax
call fcn.00406368
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x27
call fcn.0040263b
lea ecx, [ebp - 0x54]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0x13
call fcn.00403ac7
push eax
mov byte [ebp - 4], 0x28
call fcn.00415344
pop ecx
pop ecx
lea ecx, [ebp - 0x20]
mov ebx, eax
call fcn.0061059f
mov esi, eax
lea edx, [esi + 0x6c]
mov ecx, ebx
call fcn.00416e36
mov dword [esi + 0x74], eax
lea eax, [ebp - 0x54]
push eax
mov byte [ebp - 4], 0x13
call fcn.004029b7
cmp eax, edi
pop ecx
jge 0x5ff58a
push eax
call fcn.00a6ef01
push edi
push ecx
mov eax, esp
mov dword [ebp + 0x10], esp
mov ebx, 0x725
push ebx
push eax
call fcn.007a48d0
mov ecx, eax
call fcn.00406368
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x29
call fcn.0040263b
lea ecx, [ebp - 0x54]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0x13
call fcn.00403ac7
push eax
mov byte [ebp - 4], 0x2a
call fcn.00415344
pop ecx
pop ecx
lea ecx, [ebp - 0x20]
mov dword [ebp + 0x10], eax
call fcn.0061059f
mov cl, byte [ebp + 0x10]
mov esi, eax
lea edx, [esi + 0xa0]
call fcn.004f774d
mov dword [esi + 0xa4], eax
lea eax, [ebp - 0x54]
push eax
mov byte [ebp - 4], 0x13
call fcn.004029b7
cmp eax, edi
pop ecx
jge 0x5ff604
push eax
call fcn.00a6ef01
push edi
push ecx
mov eax, esp
mov dword [ebp + 0x10], esp
push ebx
push eax
call fcn.007a48d0
mov ecx, eax
call fcn.00406368
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x2b
call fcn.0040263b
lea ecx, [ebp - 0x54]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0x13
call fcn.00403ac7
push eax
mov byte [ebp - 4], 0x2c
call fcn.00415344
pop ecx
pop ecx
lea ecx, [ebp - 0x20]
mov ebx, eax
call fcn.0061059f
mov esi, eax
lea edx, [esi + 0xa8]
mov cl, bl
call fcn.004f774d
mov dword [esi + 0xac], eax
lea eax, [ebp - 0x54]
push eax
mov byte [ebp - 4], 0x13
call fcn.004029b7
cmp eax, edi
pop ecx
jge 0x5ff677
push eax
call fcn.00a6ef01
push edi
push ecx
mov eax, esp
mov dword [ebp + 0x10], esp
push 0x726
push eax
call fcn.007a48d0
mov ecx, eax
call fcn.00406368
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x2d
call fcn.0040263b
lea ecx, [ebp - 0x54]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0x13
call fcn.00403ac7
push eax
mov byte [ebp - 4], 0x2e
call fcn.00415344
pop ecx
pop ecx
lea ecx, [ebp - 0x20]
mov ebx, eax
call fcn.0061059f
mov esi, eax
lea edx, [esi + 0xb0]
mov ecx, ebx
call fcn.004f7780
mov dword [esi + 0xb4], eax
lea eax, [ebp - 0x54]
push eax
mov byte [ebp - 4], 0x13
call fcn.004029b7
cmp eax, edi
pop ecx
jge 0x5ff6ee
push eax
call fcn.00a6ef01
push edi
push ecx
mov eax, esp
mov dword [ebp + 0x10], esp
push 0x727
push eax
call fcn.007a48d0
mov ecx, eax
call fcn.00406368
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x2f
call fcn.0040263b
lea ecx, [ebp - 0x54]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0x13
call fcn.00403ac7
push eax
mov byte [ebp - 4], 0x30
call fcn.00415344
pop ecx
pop ecx
lea ecx, [ebp - 0x20]
mov ebx, eax
call fcn.0061059f
mov esi, eax
lea edx, [esi + 0xb8]
mov ecx, ebx
call fcn.004f7780
mov dword [esi + 0xbc], eax
lea eax, [ebp - 0x54]
push eax
mov byte [ebp - 4], 0x13
call fcn.004029b7
cmp eax, edi
pop ecx
jge 0x5ff765
push eax
call fcn.00a6ef01
push edi
push ecx
mov eax, esp
mov dword [ebp + 0x10], esp
push 0x728
push eax
call fcn.007a48d0
mov ecx, eax
call fcn.00406368
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x31
call fcn.0040263b
lea ecx, [ebp - 0x54]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0x13
call fcn.00403ac7
push eax
mov byte [ebp - 4], 0x32
call fcn.00415344
pop ecx
pop ecx
lea ecx, [ebp - 0x20]
mov ebx, eax
call fcn.0061059f
mov esi, eax
lea edx, [esi + 0xc0]
mov ecx, ebx
call fcn.004f7780
mov dword [esi + 0xc4], eax
lea eax, [ebp - 0x54]
push eax
mov byte [ebp - 4], 0x13
call fcn.004029b7
cmp eax, edi
pop ecx
jge 0x5ff7dc
push eax
call fcn.00a6ef01
push edi
push ecx
mov eax, esp
mov dword [ebp + 0x10], esp
push 0x729
push eax
call fcn.007a48d0
mov ecx, eax
call fcn.00406368
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x33
call fcn.0040263b
lea ecx, [ebp - 0x54]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0x13
call fcn.00403ac7
push eax
mov byte [ebp - 4], 0x34
call fcn.00415344
pop ecx
pop ecx
lea ecx, [ebp - 0x20]
mov ebx, eax
call fcn.0061059f
mov esi, eax
lea edx, [esi + 0xc8]
mov ecx, ebx
call fcn.004f7780
mov dword [esi + 0xcc], eax
lea eax, [ebp - 0x54]
push eax
mov byte [ebp - 4], 0x13
call fcn.004029b7
cmp eax, edi
pop ecx
jge 0x5ff853
push eax
call fcn.00a6ef01
push edi
push ecx
mov eax, esp
mov dword [ebp + 0x10], esp
push 0x72a
push eax
call fcn.007a48d0
mov ecx, eax
call fcn.00406368
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x35
call fcn.0040263b
lea ecx, [ebp - 0x54]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0x13
call fcn.00403ac7
push eax
mov byte [ebp - 4], 0x36
call fcn.00415344
pop ecx
pop ecx
lea ecx, [ebp - 0x20]
mov ebx, eax
call fcn.0061059f
mov esi, eax
lea edx, [esi + 0xd0]
mov ecx, ebx
call fcn.004f7780
mov dword [esi + 0xd4], eax
lea eax, [ebp - 0x54]
push eax
mov byte [ebp - 4], 0x13
call fcn.004029b7
cmp eax, edi
pop ecx
jge 0x5ff8ca
push eax
call fcn.00a6ef01
push edi
push ecx
mov eax, esp
mov dword [ebp + 0x10], esp
push 0x72b
push eax
call fcn.007a48d0
mov ecx, eax
call fcn.00406368
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x37
call fcn.0040263b
lea ecx, [ebp - 0x54]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0x13
call fcn.00403ac7
push eax
mov byte [ebp - 4], 0x38
call fcn.00415344
pop ecx
pop ecx
lea ecx, [ebp - 0x20]
mov ebx, eax
call fcn.0061059f
mov esi, eax
lea edx, [esi + 0xd8]
mov ecx, ebx
call fcn.004f7780
mov dword [esi + 0xdc], eax
lea eax, [ebp - 0x54]
push eax
mov byte [ebp - 4], 0x13
call fcn.004029b7
cmp eax, edi
pop ecx
jge 0x5ff941
push eax
call fcn.00a6ef01
push edi
push ecx
mov eax, esp
mov dword [ebp + 0x10], esp
push 0x72c
push eax
call fcn.007a48d0
mov ecx, eax
call fcn.00406368
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x39
call fcn.0040263b
lea ecx, [ebp - 0x54]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0x13
call fcn.00403ac7
push eax
mov byte [ebp - 4], 0x3a
call fcn.00415344
pop ecx
pop ecx
lea ecx, [ebp - 0x20]
mov ebx, eax
call fcn.0061059f
mov esi, eax
lea edx, [esi + 0xe0]
mov ecx, ebx
call fcn.004f7780
mov dword [esi + 0xe4], eax
lea eax, [ebp - 0x54]
push eax
mov byte [ebp - 4], 0x13
call fcn.004029b7
cmp eax, edi
pop ecx
jge 0x5ff9b8
push eax
call fcn.00a6ef01
push edi
push ecx
mov eax, esp
mov dword [ebp + 0x10], esp
push 0x72e
push eax
call fcn.007a48d0
mov ecx, eax
call fcn.00406368
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x3b
call fcn.0040263b
lea ecx, [ebp - 0x54]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0x13
call fcn.00403ac7
push eax
mov byte [ebp - 4], 0x3c
call fcn.00415344
pop ecx
pop ecx
lea ecx, [ebp - 0x20]
mov ebx, eax
call fcn.0061059f
mov esi, eax
lea edx, [esi + 0xe8]
mov ecx, ebx
call fcn.004f7780
mov dword [esi + 0xec], eax
lea eax, [ebp - 0x54]
push eax
mov byte [ebp - 4], 0x13
call fcn.004029b7
cmp eax, edi
pop ecx
jge 0x5ffa2f
push eax
call fcn.00a6ef01
push edi
push ecx
mov eax, esp
mov dword [ebp + 0x10], esp
push 0x72d
push eax
call fcn.007a48d0
mov ecx, eax
call fcn.00406368
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x3d
call fcn.0040263b
lea ecx, [ebp - 0x54]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0x13
call fcn.00403ac7
push eax
mov byte [ebp - 4], 0x3e
call fcn.00415344
pop ecx
pop ecx
lea ecx, [ebp - 0x20]
mov ebx, eax
call fcn.0061059f
mov esi, eax
lea edx, [esi + 0xf0]
mov ecx, ebx
call fcn.004f7780
mov dword [esi + 0xf4], eax
lea eax, [ebp - 0x54]
push eax
mov byte [ebp - 4], 0x13
call fcn.004029b7
cmp eax, edi
pop ecx
jge 0x5ffaa6
push eax
call fcn.00a6ef01
push edi
push ecx
mov eax, esp
mov dword [ebp + 0x10], esp
push 0x72f
push eax
call fcn.007a48d0
mov ecx, eax
call fcn.00406368
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x3f
call fcn.0040263b
lea ecx, [ebp - 0x54]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0x13
call fcn.00403ac7
push eax
mov byte [ebp - 4], 0x40
call fcn.00415344
pop ecx
pop ecx
lea ecx, [ebp - 0x20]
mov ebx, eax
call fcn.0061059f
mov esi, eax
lea edx, [esi + 0xf8]
mov ecx, ebx
call fcn.004f7780
mov dword [esi + 0xfc], eax
lea eax, [ebp - 0x54]
push eax
mov byte [ebp - 4], 0x13
call fcn.004029b7
cmp eax, edi
pop ecx
jge 0x5ffb1d
push eax
call fcn.00a6ef01
push edi
push ecx
mov eax, esp
mov dword [ebp + 0x10], esp
push 0x730
push eax
call fcn.007a48d0
mov ecx, eax
call fcn.00406368
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x41
call fcn.0040263b
lea ecx, [ebp - 0x54]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0x13
call fcn.00403ac7
push eax
mov byte [ebp - 4], 0x42
call fcn.00415344
pop ecx
pop ecx
lea ecx, [ebp - 0x20]
mov ebx, eax
call fcn.0061059f
mov esi, eax
lea edx, [esi + 0x100]
mov ecx, ebx
call fcn.004f7780
mov dword [esi + 0x104], eax
lea eax, [ebp - 0x54]
push eax
mov byte [ebp - 4], 0x13
call fcn.004029b7
cmp eax, edi
pop ecx
jge 0x5ffb94
push eax
call fcn.00a6ef01
push edi
push ecx
mov eax, esp
mov dword [ebp + 0x10], esp
push 0x731
push eax
call fcn.007a48d0
mov ecx, eax
call fcn.00406368
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x43
call fcn.0040263b
lea ecx, [ebp - 0x54]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0x13
call fcn.00403ac7
push eax
mov byte [ebp - 4], 0x44
call fcn.00415344
pop ecx
pop ecx
lea ecx, [ebp - 0x20]
mov ebx, eax
call fcn.0061059f
mov esi, eax
lea edx, [esi + 0x108]
mov ecx, ebx
call fcn.004f7780
mov dword [esi + 0x10c], eax
lea eax, [ebp - 0x54]
push eax
mov byte [ebp - 4], 0x13
call fcn.004029b7
cmp eax, edi
pop ecx
jge 0x5ffc0b
push eax
call fcn.00a6ef01
push edi
push ecx
mov eax, esp
mov dword [ebp + 0x10], esp
push 0x732
push eax
call fcn.007a48d0
mov ecx, eax
call fcn.00406368
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x45
call fcn.0040263b
lea ecx, [ebp - 0x54]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0x13
call fcn.00403ac7
push eax
mov byte [ebp - 4], 0x46
call fcn.00415344
pop ecx
pop ecx
lea ecx, [ebp - 0x20]
mov ebx, eax
call fcn.0061059f
mov esi, eax
lea edx, [esi + 0x110]
mov ecx, ebx
call fcn.004f7780
mov dword [esi + 0x114], eax
lea eax, [ebp - 0x54]
push eax
mov byte [ebp - 4], 0x13
call fcn.004029b7
cmp eax, edi
pop ecx
jge 0x5ffc82
push eax
call fcn.00a6ef01
push edi
push ecx
mov eax, esp
mov dword [ebp + 0x10], esp
push 0x733
push eax
call fcn.007a48d0
mov ecx, eax
call fcn.00406368
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x47
call fcn.0040263b
lea ecx, [ebp - 0x54]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0x13
call fcn.00403ac7
push eax
mov byte [ebp - 4], 0x48
call fcn.00415344
pop ecx
pop ecx
lea ecx, [ebp - 0x20]
mov ebx, eax
call fcn.0061059f
mov esi, eax
lea edx, [esi + 0x118]
mov ecx, ebx
call fcn.004f7780
mov dword [esi + 0x11c], eax
lea eax, [ebp - 0x54]
push eax
mov byte [ebp - 4], 0x13
call fcn.004029b7
cmp eax, edi
pop ecx
jge 0x5ffcf9
push eax
call fcn.00a6ef01
push edi
push ecx
mov eax, esp
mov dword [ebp + 0x10], esp
push 0x734
push eax
call fcn.007a48d0
mov ecx, eax
call fcn.00406368
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x49
call fcn.0040263b
lea ecx, [ebp - 0x54]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0x13
call fcn.00403ac7
push eax
mov byte [ebp - 4], 0x4a
call fcn.00415344
pop ecx
pop ecx
lea ecx, [ebp - 0x20]
mov ebx, eax
call fcn.0061059f
mov esi, eax
lea edx, [esi + 0x120]
mov ecx, ebx
call fcn.004f7780
mov dword [esi + 0x124], eax
lea eax, [ebp - 0x54]
push eax
mov byte [ebp - 4], 0x13
call fcn.004029b7
cmp eax, edi
pop ecx
jge 0x5ffd70
push eax
call fcn.00a6ef01
push edi
push ecx
mov eax, esp
mov dword [ebp + 0x10], esp
push 0x735
push eax
call fcn.007a48d0
mov ecx, eax
call fcn.00406368
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x4b
call fcn.0040263b
lea ecx, [ebp - 0x54]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0x13
call fcn.00403ac7
push eax
mov byte [ebp - 4], 0x4c
call fcn.00415344
pop ecx
pop ecx
lea ecx, [ebp - 0x20]
mov ebx, eax
call fcn.0061059f
mov esi, eax
lea edx, [esi + 0x128]
mov ecx, ebx
call fcn.004f7780
mov dword [esi + 0x12c], eax
lea eax, [ebp - 0x54]
push eax
mov byte [ebp - 4], 0x13
call fcn.004029b7
cmp eax, edi
pop ecx
jge 0x5ffde7
push eax
call fcn.00a6ef01
push edi
push ecx
mov eax, esp
mov dword [ebp + 0x10], esp
push 0xdb0
push eax
call fcn.007a48d0
mov ecx, eax
call fcn.00406368
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x4d
call fcn.0040263b
lea ecx, [ebp - 0x54]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0x13
call fcn.00403ac7
push eax
mov byte [ebp - 4], 0x4e
call fcn.00415344
pop ecx
pop ecx
lea ecx, [ebp - 0x20]
mov ebx, eax
call fcn.0061059f
mov esi, eax
lea edx, [esi + 0x130]
mov ecx, ebx
call fcn.004f7780
mov dword [esi + 0x134], eax
lea eax, [ebp - 0x54]
push eax
mov byte [ebp - 4], 0x13
call fcn.004029b7
cmp eax, edi
pop ecx
jge 0x5ffe5e
push eax
call fcn.00a6ef01
push edi
push ecx
mov eax, esp
mov dword [ebp + 0x10], esp
push 0x1577
push eax
call fcn.007a48d0
mov ecx, eax
call fcn.00406368
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x4f
call fcn.0040263b
lea ecx, [ebp - 0x54]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0x13
call fcn.00403ac7
push eax
mov byte [ebp - 4], 0x50
call fcn.00415344
pop ecx
pop ecx
lea ecx, [ebp - 0x20]
mov ebx, eax
call fcn.0061059f
mov esi, eax
lea edx, [esi + 0x88]
mov ecx, ebx
call fcn.00416e36
mov dword [esi + 0x90], eax
lea eax, [ebp - 0x54]
push eax
mov byte [ebp - 4], 0x13
call fcn.004029b7
cmp eax, edi
pop ecx
jge 0x5ffed5
push eax
call fcn.00a6ef01
push edi
push ecx
mov eax, esp
mov dword [ebp + 0x10], esp
push 0x736
push eax
call fcn.007a48d0
mov ecx, eax
call fcn.00406368
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x51
call fcn.0040263b
lea ecx, [ebp - 0x54]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0x13
call fcn.00403ac7
push eax
mov byte [ebp - 4], 0x52
call fcn.00415344
pop ecx
pop ecx
lea ecx, [ebp - 0x20]
mov ebx, eax
call fcn.0061059f
mov esi, eax
lea edx, [esi + 0x94]
mov ecx, ebx
call fcn.006131b9
mov dword [esi + 0x9c], eax
lea eax, [ebp - 0x54]
push eax
mov byte [ebp - 4], 0x13
call fcn.004029b7
cmp eax, edi
pop ecx
jge 0x5fff4c
push eax
call fcn.00a6ef01
push edi
push ecx
mov eax, esp
mov dword [ebp + 0x10], esp
push 0xade
push eax
call fcn.007a48d0
mov ecx, eax
call fcn.00406368
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x53
call fcn.0040263b
lea ecx, [ebp - 0x40]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0x13
call fcn.00403ac7
push eax
mov byte [ebp - 4], 0x54
call fcn.00415344
pop ecx
pop ecx
lea ecx, [ebp - 0x20]
mov esi, eax
call fcn.0061059f
mov dword [eax + 0x198], esi
lea eax, [ebp - 0x40]
push eax
mov byte [ebp - 4], 0x13
call fcn.004029b7
cmp eax, edi
pop ecx
jge 0x5fffb4
push eax
call fcn.00a6ef01
push edi
push ecx
mov eax, esp
mov dword [ebp + 0x10], esp
push 0xadf
push eax
call fcn.007a48d0
mov ecx, eax
call fcn.00406368
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x55
call fcn.0040263b
lea ecx, [ebp - 0x40]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0x13
call fcn.00403ac7
push eax
mov byte [ebp - 4], 0x56
call fcn.00415344
pop ecx
pop ecx
lea ecx, [ebp - 0x20]
mov esi, eax
call fcn.0061059f
mov dword [eax + 0x19c], esi
lea eax, [ebp - 0x40]
push eax
mov byte [ebp - 4], 0x13
call fcn.004029b7
cmp eax, edi
pop ecx
jge 0x60001c
push eax
call fcn.00a6ef01
push edi
push ecx
mov eax, esp
mov dword [ebp + 0x10], esp
push 0xb5b
push eax
call fcn.007a48d0
mov ecx, eax
call fcn.00406368
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x57
call fcn.0040263b
lea ecx, [ebp - 0x40]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0x13
call fcn.00403ac7
push eax
mov byte [ebp - 4], 0x58
call fcn.00415344
pop ecx
pop ecx
lea ecx, [ebp - 0x20]
mov esi, eax
call fcn.0061059f
mov dword [eax + 0x1a0], esi
lea eax, [ebp - 0x40]
push eax
mov byte [ebp - 4], 0x13
call fcn.004029b7
cmp eax, edi
pop ecx
jge 0x600084
push eax
call fcn.00a6ef01
push edi
push ecx
mov eax, esp
mov dword [ebp + 0x10], esp
push 0xb5c
push eax
call fcn.007a48d0
mov ecx, eax
call fcn.00406368
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x59
call fcn.0040263b
lea ecx, [ebp - 0x40]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0x13
call fcn.00403ac7
push eax
mov byte [ebp - 4], 0x5a
call fcn.00415344
pop ecx
pop ecx
lea ecx, [ebp - 0x20]
mov esi, eax
call fcn.0061059f
mov dword [eax + 0x1a4], esi
lea eax, [ebp - 0x40]
push eax
mov byte [ebp - 4], 0x13
call fcn.004029b7
cmp eax, edi
pop ecx
jge 0x6000ec
push eax
call fcn.00a6ef01
push edi
push ecx
mov eax, esp
mov dword [ebp + 0x10], esp
push 0xb5d
push eax
call fcn.007a48d0
mov ecx, eax
call fcn.00406368
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x5b
call fcn.0040263b
lea ecx, [ebp - 0x40]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0x13
call fcn.00403ac7
push eax
mov byte [ebp - 4], 0x5c
call fcn.00415344
pop ecx
pop ecx
lea ecx, [ebp - 0x20]
mov esi, eax
call fcn.0061059f
mov dword [eax + 0x1a8], esi
lea eax, [ebp - 0x40]
push eax
mov byte [ebp - 4], 0x13
call fcn.004029b7
cmp eax, edi
pop ecx
jge 0x600154
push eax
call fcn.00a6ef01
push edi
push ecx
mov eax, esp
mov dword [ebp + 0x10], esp
push 0x13bc
push eax
call fcn.007a48d0
mov ecx, eax
call fcn.00406368
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x5d
call fcn.0040263b
lea ecx, [ebp - 0x40]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0x13
call fcn.00403ac7
push eax
mov byte [ebp - 4], 0x5e
call fcn.00415344
pop ecx
pop ecx
lea ecx, [ebp - 0x20]
mov esi, eax
call fcn.0061059f
mov dword [eax + 0x1ac], esi
lea eax, [ebp - 0x40]
push eax
mov byte [ebp - 4], 0x13
call fcn.004029b7
cmp eax, edi
pop ecx
jge 0x6001bc
push eax
call fcn.00a6ef01
push edi
push ecx
mov eax, esp
mov dword [ebp + 0x10], esp
push 0x13bd
push eax
call fcn.007a48d0
mov ecx, eax
call fcn.00406368
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x5f
call fcn.0040263b
lea ecx, [ebp - 0x40]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0x13
call fcn.00403ac7
push eax
mov byte [ebp - 4], 0x60
call fcn.00415344
pop ecx
pop ecx
lea ecx, [ebp - 0x20]
mov esi, eax
call fcn.0061059f
mov dword [eax + 0x1c8], esi
lea eax, [ebp - 0x40]
push eax
mov byte [ebp - 4], 0x13
call fcn.004029b7
cmp eax, edi
pop ecx
jge 0x600224
push eax
call fcn.00a6ef01
push edi
push ecx
mov eax, esp
mov dword [ebp + 0x10], esp
push 0xb5e
push eax
call fcn.007a48d0
mov ecx, eax
call fcn.00406368
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x61
call fcn.0040263b
lea ecx, [ebp - 0x40]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0x13
call fcn.00403ac7
push eax
mov byte [ebp - 4], 0x62
call fcn.00415344
pop ecx
pop ecx
lea ecx, [ebp - 0x20]
mov esi, eax
call fcn.0061059f
mov dword [eax + 0x1b0], esi
lea eax, [ebp - 0x40]
push eax
mov byte [ebp - 4], 0x13
call fcn.004029b7
cmp eax, edi
pop ecx
jge 0x60028c
push eax
call fcn.00a6ef01
push edi
push ecx
mov eax, esp
mov dword [ebp + 0x10], esp
push 0xcfa
push eax
call fcn.007a48d0
mov ecx, eax
call fcn.00406368
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x63
call fcn.0040263b
lea ecx, [ebp - 0x40]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0x13
call fcn.00403ac7
push eax
mov byte [ebp - 4], 0x64
call fcn.00415344
pop ecx
pop ecx
lea ecx, [ebp - 0x20]
mov esi, eax
call fcn.0061059f
mov dword [eax + 0x1b8], esi
lea eax, [ebp - 0x40]
push eax
mov byte [ebp - 4], 0x13
call fcn.004029b7
cmp eax, edi
pop ecx
jge 0x6002f4
push eax
call fcn.00a6ef01
push edi
push ecx
mov eax, esp
mov dword [ebp + 0x10], esp
push 0x737
push eax
call fcn.007a48d0
mov ecx, eax
call fcn.00406368
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x65
call fcn.0040263b
lea ecx, [ebp - 0x40]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0x13
call fcn.00403ac7
push eax
mov byte [ebp - 4], 0x66
call fcn.00415344
pop ecx
pop ecx
lea ecx, [ebp - 0x20]
mov ebx, eax
call fcn.0061059f
mov esi, eax
lea edx, [esi + 0x138]
mov ecx, ebx
call fcn.00416e36
mov dword [esi + 0x140], eax
lea eax, [ebp - 0x40]
push eax
mov byte [ebp - 4], 0x13
call fcn.004029b7
cmp eax, edi
pop ecx
jge 0x60036b
push eax
call fcn.00a6ef01
push ecx
fld1
push ecx
fstp qword [esp]
push ecx
mov eax, esp
mov dword [ebp + 0x10], esp
push 0x1579
push eax
call fcn.007a48d0
mov ecx, eax
call fcn.00406368
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x67
call fcn.0040263b
lea ecx, [ebp - 0xb8]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0x13
call fcn.00403ac7
push eax
mov byte [ebp - 4], 0x68
call fcn.00443ba9
fstp qword [ebp - 0x38]
add esp, 0xc
lea ecx, [ebp - 0x20]
call fcn.0061059f
fld qword [ebp - 0x38]
mov esi, eax
lea ecx, [esi + 0x148]
push ecx
push ecx
fstp qword [esp]
call fcn.006131f4
mov dword [esi + 0x158], eax
lea eax, [ebp - 0xb8]
push eax
mov byte [ebp - 4], 0x13
call fcn.004029b7
cmp eax, edi
pop ecx
jge 0x6003f6
push eax
call fcn.00a6ef01
push ecx
fld1
push ecx
fstp qword [esp]
push ecx
mov eax, esp
mov dword [ebp + 0x10], esp
push 0x5be
push eax
call fcn.007a48d0
mov ecx, eax
call fcn.00406368
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x69
call fcn.0040263b
lea ecx, [ebp - 0xb8]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0x13
call fcn.00403ac7
push eax
mov byte [ebp - 4], 0x6a
call fcn.00443ba9
fstp qword [ebp - 0x38]
add esp, 0xc
lea ecx, [ebp - 0x20]
call fcn.0061059f
fld qword [ebp - 0x38]
mov esi, eax
lea ecx, [esi + 0x160]
push ecx
push ecx
fstp qword [esp]
call fcn.006131f4
mov dword [esi + 0x170], eax
lea eax, [ebp - 0xb8]
push eax
mov byte [ebp - 4], 0x13
call fcn.004029b7
cmp eax, edi
pop ecx
jge 0x600481
push eax
call fcn.00a6ef01
push 0x64
push ecx
mov eax, esp
mov dword [ebp + 0x10], esp
push 0xbef
push eax
call fcn.007a48d0
mov ecx, eax
call fcn.00406368
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x6b
call fcn.0040263b
lea ecx, [ebp - 0x40]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0x13
call fcn.00403ac7
push eax
mov byte [ebp - 4], 0x6c
call fcn.00415344
pop ecx
pop ecx
lea ecx, [ebp - 0x20]
mov ebx, eax
call fcn.0061059f
mov esi, eax
lea edx, [esi + 0x174]
mov ecx, ebx
call fcn.00416e36
mov dword [esi + 0x17c], eax
lea eax, [ebp - 0x40]
push eax
mov byte [ebp - 4], 0x13
call fcn.004029b7
cmp eax, edi
pop ecx
jge 0x6004f9
push eax
call fcn.00a6ef01
push edi
push ecx
mov eax, esp
mov dword [ebp + 0x10], esp
push 0xcce
push eax
call fcn.007a48d0
mov ecx, eax
call fcn.00406368
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x6d
call fcn.0040263b
lea ecx, [ebp - 0x40]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0x13
call fcn.00403ac7
push eax
mov byte [ebp - 4], 0x6e
call fcn.00415344
pop ecx
pop ecx
lea ecx, [ebp - 0x20]
mov esi, eax
call fcn.0061059f
mov dword [eax + 0x1b4], esi
lea eax, [ebp - 0x40]
push eax
mov byte [ebp - 4], 0x13
call fcn.004029b7
cmp eax, edi
pop ecx
jge 0x600561
push eax
call fcn.00a6ef01
push edi
push ecx
mov eax, esp
mov dword [ebp + 0x10], esp
push 0xdae
push eax
call fcn.007a48d0
mov ecx, eax
call fcn.00406368
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x6f
call fcn.0040263b
lea ecx, [ebp - 0x40]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0x13
call fcn.00403ac7
push eax
mov byte [ebp - 4], 0x70
call fcn.00415344
pop ecx
pop ecx
lea ecx, [ebp - 0x20]
mov ebx, eax
call fcn.0061059f
mov esi, eax
lea edx, [esi + 0x180]
mov ecx, ebx
call fcn.00416e36
mov dword [esi + 0x188], eax
lea eax, [ebp - 0x40]
push eax
mov byte [ebp - 4], 0x13
call fcn.004029b7
cmp eax, edi
pop ecx
jge 0x6005d8
push eax
call fcn.00a6ef01
push 0x64
push ecx
mov eax, esp
mov dword [ebp + 0x10], esp
push 0x103e
push eax
call fcn.007a48d0
mov ecx, eax
call fcn.00406368
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x71
call fcn.0040263b
lea ecx, [ebp - 0x40]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0x13
call fcn.00403ac7
push eax
mov byte [ebp - 4], 0x72
call fcn.00415344
pop ecx
mov ebx, eax
pop ecx
lea eax, [ebp - 0x40]
push eax
mov byte [ebp - 4], 0x13
call fcn.004029b7
cmp eax, edi
pop ecx
jge 0x600633
push eax
call fcn.00a6ef01
push ebx
push ecx
mov eax, esp
mov dword [ebp + 0x10], esp
push 0x103f
push eax
call fcn.007a48d0
mov ecx, eax
call fcn.00406368
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x73
call fcn.0040263b
lea ecx, [ebp - 0x40]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0x13
call fcn.00403ac7
push eax
mov byte [ebp - 4], 0x74
call fcn.00415344
pop ecx
pop ecx
lea ecx, [ebp - 0x20]
mov esi, eax
call fcn.0061059f
mov word [eax + 0x1d0], si
lea eax, [ebp - 0x40]
push eax
mov byte [ebp - 4], 0x13
call fcn.004029b7
cmp eax, edi
pop ecx
jge 0x60069c
push eax
call fcn.00a6ef01
push ebx
push ecx
mov eax, esp
mov dword [ebp + 0x10], esp
push 0x1040
push eax
call fcn.007a48d0
mov ecx, eax
call fcn.00406368
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x75
call fcn.0040263b
lea ecx, [ebp - 0x40]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0x13
call fcn.00403ac7
push eax
mov byte [ebp - 4], 0x76
call fcn.00415344
pop ecx
pop ecx
lea ecx, [ebp - 0x20]
mov esi, eax
call fcn.0061059f
mov word [eax + 0x1d2], si
lea eax, [ebp - 0x40]
push eax
mov byte [ebp - 4], 0x13
call fcn.004029b7
cmp eax, edi
pop ecx
jge 0x600705
push eax
call fcn.00a6ef01
push ebx
push ecx
mov eax, esp
mov dword [ebp + 0x10], esp
push 0x1041
push eax
call fcn.007a48d0
mov ecx, eax
call fcn.00406368
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x77
call fcn.0040263b
lea ecx, [ebp - 0x40]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0x13
call fcn.00403ac7
push eax
mov byte [ebp - 4], 0x78
call fcn.00415344
pop ecx
pop ecx
lea ecx, [ebp - 0x20]
mov esi, eax
call fcn.0061059f
mov word [eax + 0x1d4], si
lea eax, [ebp - 0x40]
push eax
mov byte [ebp - 4], 0x13
call fcn.004029b7
cmp eax, edi
pop ecx
jge 0x60076e
push eax
call fcn.00a6ef01
push ebx
push ecx
mov eax, esp
mov dword [ebp + 0x10], esp
push 0x1042
push eax
call fcn.007a48d0
mov ecx, eax
call fcn.00406368
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x79
call fcn.0040263b
lea ecx, [ebp - 0x40]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0x13
call fcn.00403ac7
push eax
mov byte [ebp - 4], 0x7a
call fcn.00415344
pop ecx
pop ecx
lea ecx, [ebp - 0x20]
mov esi, eax
call fcn.0061059f
mov word [eax + 0x1d6], si
lea eax, [ebp - 0x40]
push eax
mov byte [ebp - 4], 0x13
call fcn.004029b7
cmp eax, edi
pop ecx
jge 0x6007d7
push eax
call fcn.00a6ef01
push ebx
push ecx
mov eax, esp
mov dword [ebp + 0x10], esp
push 0x1043
push eax
call fcn.007a48d0
mov ecx, eax
call fcn.00406368
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x7b
call fcn.0040263b
lea ecx, [ebp - 0x40]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0x13
call fcn.00403ac7
push eax
mov byte [ebp - 4], 0x7c
call fcn.00415344
pop ecx
pop ecx
lea ecx, [ebp - 0x20]
mov esi, eax
call fcn.0061059f
mov word [eax + 0x1d8], si
lea eax, [ebp - 0x40]
push eax
mov byte [ebp - 4], 0x13
call fcn.004029b7
cmp eax, edi
pop ecx
jge 0x600840
push eax
call fcn.00a6ef01
push edi
push ecx
mov eax, esp
mov dword [ebp + 0x10], esp
push 0x11ae
push eax
call fcn.007a48d0
mov ecx, eax
call fcn.00406368
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x7d
call fcn.0040263b
lea ecx, [ebp - 0x40]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0x13
call fcn.00403ac7
push eax
mov byte [ebp - 4], 0x7e
call fcn.00415344
pop ecx
pop ecx
lea ecx, [ebp - 0x20]
mov esi, eax
call fcn.0061059f
mov dword [eax + 0x1cc], esi
lea eax, [ebp - 0x40]
push eax
mov byte [ebp - 4], 0x13
call fcn.004029b7
cmp eax, edi
pop ecx
jge 0x6008a8
push eax
call fcn.00a6ef01
push edi
push ecx
mov ecx, esp
mov dword [ebp + 0x10], esp
push 0xba228c
call fcn.00426d6e
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x7f
call fcn.0040263b
lea ecx, [ebp - 0x40]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0x13
call fcn.00403ac7
push eax
mov byte [ebp - 4], 0x80
call fcn.00415344
pop ecx
pop ecx
lea ecx, [ebp - 0x20]
mov esi, eax
call fcn.0061059f
xor ecx, ecx
cmp esi, edi
setne cl
mov dword [eax + 0x1bc], ecx
lea eax, [ebp - 0x40]
push eax
mov byte [ebp - 4], 0x13
call fcn.004029b7
cmp eax, edi
pop ecx
jge 0x60090f
push eax
call fcn.00a6ef01
push edi
push ecx
mov ecx, esp
mov dword [ebp + 0x10], esp
push 0xba2280
call fcn.00426d6e
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x81
call fcn.0040263b
lea ecx, [ebp - 0x40]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0x13
call fcn.00403ac7
push eax
mov byte [ebp - 4], 0x82
call fcn.00415344
pop ecx
pop ecx
lea ecx, [ebp - 0x20]
mov esi, eax
call fcn.0061059f
mov dword [eax + 0x1c0], esi
lea eax, [ebp - 0x40]
push eax
mov byte [ebp - 4], 0x13
call fcn.004029b7
cmp eax, edi
pop ecx
jge 0x60096f
push eax
call fcn.00a6ef01
push edi
push ecx
mov eax, esp
mov dword [ebp + 0x10], esp
push 0xb5f
push eax
call fcn.007a48d0
mov ecx, eax
call fcn.00406368
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x83
call fcn.0040263b
lea ecx, [ebp - 0x40]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0x13
call fcn.00403ac7
push eax
mov byte [ebp - 4], 0x84
call fcn.00415344
pop ecx
pop ecx
lea ecx, [ebp - 0x20]
mov esi, eax
call fcn.0061059f
mov dword [eax + 0x1c4], esi
lea eax, [ebp - 0x40]
push eax
mov byte [ebp - 4], 0x13
call fcn.004029b7
cmp eax, edi
pop ecx
jge 0x6009d7
push eax
call fcn.00a6ef01
push edi
push ecx
mov ecx, esp
mov dword [ebp + 0x10], esp
push 0xba2274
call fcn.00426d6e
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x85
call fcn.0040263b
lea ecx, [ebp - 0x40]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0x13
call fcn.00403ac7
push eax
mov byte [ebp - 4], 0x86
call fcn.00415344
pop ecx
pop ecx
lea ecx, [ebp - 0x20]
mov esi, eax
call fcn.0061059f
xor ecx, ecx
cmp esi, edi
setne cl
mov dword [eax + 0x1f8], ecx
lea eax, [ebp - 0x40]
push eax
mov byte [ebp - 4], 0x13
call fcn.004029b7
pop ecx
push eax
call fcn.0060310d
pop ecx
lea ecx, [ebp - 0x20]
call fcn.0061059f
xor edx, edx
mov ecx, eax
call fcn.0061075b
push dword [ebp + 0xc]
mov ecx, dword [ebp - 0x64]
call fcn.0060f685
lea ecx, [ebp - 0x20]
mov dword [ebp - 0x60], eax
call fcn.0061059f
mov ecx, eax
call fcn.0061060a
lea ecx, [ebp - 0x20]
mov dword [ebp + 0x10], eax
call fcn.0061059f
mov ecx, eax
call fcn.0061062c
lea ecx, [ebp - 0x20]
mov dword [ebp - 0x44], eax
call fcn.0061059f
mov ecx, eax
call fcn.0061061d
mov dword [ebp - 0x58], eax
lea eax, [ebp + 0x10]
push eax
call fcn.0061327f
mov ebx, eax
pop ecx
lea eax, [ebp - 0x44]
push eax
call fcn.0061327f
mov esi, eax
pop ecx
lea eax, [ebp - 0x58]
push eax
call fcn.0061327f
or eax, esi
pop ecx
or eax, ebx
xor dword [ebp - 0x60], eax
lea ecx, [ebp - 0x20]
call fcn.0061059f
mov ecx, eax
call fcn.0061063b
lea ecx, [ebp - 0x20]
mov dword [ebp + 0x10], eax
call fcn.0061059f
mov ecx, eax
call fcn.0061064a
lea ecx, [ebp - 0x20]
mov dword [ebp - 0x44], eax
call fcn.0061059f
mov ecx, eax
call fcn.00610659
mov dword [ebp - 0x58], eax
lea eax, [ebp + 0x10]
push eax
call fcn.0061327f
mov ebx, eax
pop ecx
lea eax, [ebp - 0x44]
push eax
call fcn.0061327f
mov esi, eax
pop ecx
lea eax, [ebp - 0x58]
push eax
call fcn.0061327f
or eax, esi
pop ecx
or eax, ebx
xor dword [ebp - 0x60], eax
lea ecx, [ebp - 0x20]
call fcn.0061059f
mov ecx, eax
call fcn.00610668
lea ecx, [ebp - 0x20]
mov dword [ebp + 0x10], eax
call fcn.0061059f
mov ecx, eax
call fcn.00610677
lea ecx, [ebp - 0x20]
mov dword [ebp - 0x44], eax
call fcn.0061059f
mov ecx, eax
call fcn.00610686
mov dword [ebp - 0x58], eax
lea eax, [ebp + 0x10]
push eax
call fcn.0061327f
mov ebx, eax
pop ecx
lea eax, [ebp - 0x44]
push eax
call fcn.0061327f
mov esi, eax
pop ecx
lea eax, [ebp - 0x58]
push eax
call fcn.0061327f
or eax, esi
pop ecx
or eax, ebx
xor dword [ebp - 0x60], eax
lea ecx, [ebp - 0x20]
call fcn.0061059f
mov ecx, eax
call fcn.00610718
fst qword [ebp - 0x38]
lea ecx, [ebp - 0x20]
fstp qword [ebp - 0xb0]
call fcn.0061059f
mov ecx, eax
call fcn.0061072d
fst qword [ebp - 0x38]
lea eax, [ebp - 0xb0]
fstp qword [ebp - 0xc0]
push eax
call fcn.0061329f
mov esi, eax
pop ecx
lea eax, [ebp - 0xc0]
push eax
call fcn.0061329f
pop ecx
or eax, esi
xor dword [ebp - 0x60], eax
lea ecx, [ebp - 0x20]
call fcn.0061059f
mov ecx, eax
call fcn.006106ed
lea ecx, [ebp - 0x20]
mov dword [ebp + 0x10], eax
call fcn.0061059f
mov ecx, eax
call fcn.00610746
mov dword [ebp - 0x44], eax
lea eax, [ebp + 0x10]
push eax
call fcn.0061327f
mov esi, eax
pop ecx
lea eax, [ebp - 0x44]
push eax
call fcn.0061327f
pop ecx
or eax, esi
xor dword [ebp - 0x60], eax
lea ecx, [ebp - 0x20]
call fcn.0061059f
xor ecx, ecx
cmp dword [eax + 0xc], edi
setne cl
mov dword [ebp - 0x30], ecx
lea ecx, [ebp - 0x20]
call fcn.0061059f
xor ecx, ecx
cmp dword [eax + 0x1a0], edi
mov eax, dword [ebp - 0x30]
setne cl
lea eax, [ecx + eax*2]
lea ecx, [ebp - 0x20]
mov dword [ebp - 0x30], eax
call fcn.0061059f
xor ecx, ecx
cmp dword [eax + 0x1a4], edi
mov eax, dword [ebp - 0x30]
setne cl
lea eax, [ecx + eax*2]
lea ecx, [ebp - 0x20]
mov dword [ebp - 0x30], eax
call fcn.0061059f
xor ecx, ecx
cmp dword [eax + 0x1a8], edi
mov eax, dword [ebp - 0x30]
setne cl
lea eax, [ecx + eax*2]
lea ecx, [ebp - 0x20]
mov dword [ebp - 0x30], eax
call fcn.0061059f
xor ecx, ecx
cmp dword [eax + 0x1ac], edi
mov eax, dword [ebp - 0x30]
setne cl
lea eax, [ecx + eax*2]
lea ecx, [ebp - 0x20]
mov dword [ebp - 0x30], eax
call fcn.0061059f
xor ecx, ecx
cmp dword [eax + 0x1c8], edi
mov eax, dword [ebp - 0x30]
setne cl
lea eax, [ecx + eax*2]
lea ecx, [ebp - 0x20]
mov dword [ebp - 0x30], eax
call fcn.0061059f
xor ecx, ecx
cmp dword [eax + 0x1b0], edi
mov eax, dword [ebp - 0x30]
setne cl
lea eax, [ecx + eax*2]
lea ecx, [ebp - 0x20]
mov dword [ebp - 0x30], eax
call fcn.0061059f
xor ecx, ecx
cmp dword [eax + 0x1b8], edi
mov eax, dword [ebp - 0x30]
setne cl
lea eax, [ecx + eax*2]
lea ecx, [ebp - 0x20]
mov dword [ebp - 0x30], eax
call fcn.0061059f
xor ecx, ecx
cmp dword [eax + 0x1c4], edi
mov eax, dword [ebp - 0x30]
setne cl
lea eax, [ecx + eax*2]
lea ecx, [ebp - 0x20]
mov dword [ebp - 0x30], eax
call fcn.0061059f
xor ecx, ecx
cmp dword [eax + 0x1f8], edi
mov eax, dword [ebp - 0x30]
setne cl
lea eax, [ecx + eax*2]
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
push eax
call fcn.006132c1
xor dword [ebp - 0x60], eax
pop ecx
lea eax, [ebp - 0x60]
push eax
lea eax, [ebp + 0xc]
push eax
mov eax, dword [ebp - 0x64]
lea ecx, [eax + 4]
call fcn.00610555
push edi
push edi
push ecx
mov ecx, esp
mov dword [ebp + 0x10], esp
push 0xba2268
call fcn.00426d6e
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x87
call fcn.0040263b
lea ecx, [ebp - 0x1f0]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0x13
call fcn.00403ac7
mov ecx, eax
mov byte [ebp - 4], 0x88
call fcn.004032b2
mov dword [ebp - 0x5c], eax
lea eax, [ebp - 0x5c]
push eax
lea ecx, [ebp - 0x98]
call fcn.00432ea9
lea ecx, [ebp - 0x1f0]
mov byte [ebp - 4], 0x8a
call fcn.00403ab5
lea ecx, [ebp - 0x98]
call fcn.0054804e
test al, al
je 0x601022
lea ecx, [ebp - 0x98]
call fcn.0040263b
lea ecx, [ebp - 0x6c]
push ecx
mov ecx, eax
call fcn.00403baa
push eax
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x8b
call fcn.00403606
lea ecx, [ebp - 0x6c]
call fcn.00402621
lea ecx, [ebp - 0xc8]
call fcn.00603130
mov byte [ebp - 4], 0x8e
mov dword [ebp - 0x84], edi
lea ecx, [ebp - 0x58]
call fcn.005c6a0a
mov ecx, dword [eax]
lea edx, [ebp - 0x84]
push edx
lea edx, [ebp - 0xc8]
push edx
push 1
push eax
call dword [ecx + 0xc]
cmp eax, edi
jne 0x600fd7
push edi
push edi
push ecx
mov ecx, esp
mov dword [ebp - 0x24], esp
push dword [ebp - 0xc0]
call fcn.0040339f
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 0x8f
call fcn.0040263b
lea ecx, [ebp - 0x158]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0x8e
call fcn.00403ac7
mov ecx, eax
mov byte [ebp - 4], 0x90
call fcn.004032b2
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x18]
push eax
lea ecx, [ebp + 0x10]
call fcn.00432ea9
lea ecx, [ebp - 0x158]
mov byte [ebp - 4], 0x92
call fcn.00403ab5
push edi
lea ecx, [ebp + 0x10]
call fcn.004149f1
test al, al
jne 0x600fbb
push edi
push ecx
mov ecx, esp
mov dword [ebp - 0x24], esp
push 0xba225c
call fcn.00426d6e
lea ecx, [ebp + 0x10]
mov byte [ebp - 4], 0x93
call fcn.0040263b
lea ecx, [ebp - 0x1e0]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0x92
call fcn.00403ac7
push eax
mov byte [ebp - 4], 0x94
call fcn.00415344
pop ecx
pop ecx
lea ecx, [ebp - 0x1e0]
mov dword [ebp - 0x68], eax
mov byte [ebp - 4], 0x92
call fcn.00403ab5
push edi
push ecx
mov ecx, esp
mov dword [ebp - 0x24], esp
push 0xba2254
call fcn.00426d6e
lea ecx, [ebp + 0x10]
mov byte [ebp - 4], 0x95
call fcn.0040263b
lea ecx, [ebp - 0x1c0]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0x92
call fcn.00403ac7
push eax
mov byte [ebp - 4], 0x96
call fcn.00415344
pop ecx
pop ecx
lea ecx, [ebp - 0x1c0]
mov dword [ebp - 0x74], eax
mov byte [ebp - 4], 0x92
call fcn.00403ab5
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp - 0x38]
call fcn.006107ec
lea ecx, [ebp - 0x20]
mov esi, eax
call fcn.0061059f
push 0xffffffffffffffff
push esi
lea ecx, [eax + 0x22c]
call fcn.00610521
push edi
push ecx
mov ecx, esp
mov dword [ebp - 0x24], esp
push 0xba224c
call fcn.00426d6e
lea ecx, [ebp + 0x10]
mov byte [ebp - 4], 0x97
call fcn.0040263b
lea ecx, [ebp - 0x1d0]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0x92
call fcn.00403ac7
mov byte [ebp - 4], 0x98
push eax
call fcn.00415344
pop ecx
pop ecx
lea ecx, [ebp - 0x1d0]
mov dword [ebp - 0x44], eax
mov byte [ebp - 4], 0x92
call fcn.00403ab5
cmp dword [ebp - 0x44], edi
je 0x600fbb
lea eax, [ebp - 0x78]
push eax
lea eax, [ebp - 0x44]
push eax
lea ecx, [ebp - 0xb0]
mov dword [ebp - 0x78], edi
call fcn.006107ec
lea ecx, [ebp - 0x20]
mov esi, eax
call fcn.0061059f
push 0xffffffffffffffff
push esi
lea ecx, [eax + 0x22c]
call fcn.00610521
lea ecx, [ebp + 0x10]
mov byte [ebp - 4], 0x8e
call fcn.0040262e
lea ecx, [ebp - 0xc8]
call fcn.0060311e
jmp 0x600de5
lea ecx, [ebp - 0x20]
call fcn.0061059f
push dword [ebp + 0xc]
add eax, 0x22c
push eax
call fcn.006132e1
pop ecx
pop ecx
lea ecx, [ebp - 0x20]
call fcn.0061059f
push dword [ebp + 0xc]
add eax, 0x22c
push eax
call fcn.00613302
pop ecx
pop ecx
lea ecx, [ebp - 0xc8]
mov byte [ebp - 4], 0x8d
call fcn.00403ab5
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x8a
call fcn.00402651
lea ecx, [ebp - 0x20]
call fcn.0061059f
mov dword [eax + 0x1dc], edi
push dword [ebp + 0xc]
call fcn.00610243
cmp eax, edi
pop ecx
je 0x6011e6
lea ecx, [ebp - 0x80]
call fcn.0040263b
lea ecx, [ebp + 0x10]
push ecx
mov ecx, eax
call fcn.00403baa
push eax
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 0x99
call fcn.00403606
lea ecx, [ebp + 0x10]
call fcn.00402621
lea ecx, [ebp - 0x54]
call fcn.00603130
mov byte [ebp - 4], 0x9c
mov dword [ebp - 0x13c], edi
lea ecx, [ebp - 0xdc]
call fcn.005c6a0a
mov ecx, dword [eax]
lea edx, [ebp - 0x13c]
push edx
lea edx, [ebp - 0x54]
push edx
push 1
push eax
call dword [ecx + 0xc]
cmp eax, edi
jne 0x601195
mov esi, dword [ebp - 0x4c]
call fcn.007a48d0
push 0x320
lea ecx, [ebp - 0x78]
push ecx
mov ecx, eax
call fcn.0040634c
mov ecx, eax
mov byte [ebp - 4], 0x9d
call fcn.00414b5f
push eax
push esi
call fcn.00a72a2d
mov ebx, eax
pop ecx
neg ebx
pop ecx
sbb bl, bl
lea ecx, [ebp - 0x78]
inc bl
mov byte [ebp - 4], 0x9c
call fcn.0040265e
test bl, bl
jne 0x601162
call fcn.007a48d0
push 0x3db
lea ecx, [ebp - 0x68]
push ecx
mov ecx, eax
call fcn.0040634c
mov ecx, eax
mov byte [ebp - 4], 0x9e
call fcn.00414b5f
push eax
push esi
call fcn.00a72a2d
mov ebx, eax
pop ecx
neg ebx
pop ecx
sbb bl, bl
lea ecx, [ebp - 0x68]
inc bl
mov byte [ebp - 4], 0x9c
call fcn.0040265e
test bl, bl
jne 0x601162
push esi
call fcn.00a70518
push eax
call fcn.0060bbf7
mov ebx, eax
cmp ebx, edi
pop ecx
pop ecx
je 0x60116f
lea ecx, [ebp - 0x20]
call fcn.0061059f
push 1
pop esi
mov ecx, ebx
shl esi, cl
test dword [eax + 0x1dc], esi
jne 0x60116f
lea ecx, [ebp - 0x20]
call fcn.0061059f
or dword [eax + 0x1dc], esi
lea ecx, [ebp - 0x54]
call fcn.0060311e
jmp 0x60107e
push 0x80004005
lea ecx, [ebp + 0x10]
call fcn.00603102
mov eax, dword [eax]
mov dword [ebp - 0x130], eax
push 0xb12650
lea eax, [ebp - 0x130]
push eax
call fcn.00a6fc9b
lea ecx, [ebp - 0x20]
call fcn.0061059f
cmp dword [eax + 0x1dc], edi
jne 0x6011cb
push 0x80004005
lea ecx, [ebp + 0x10]
call fcn.00603102
mov eax, dword [eax]
mov dword [ebp - 0x138], eax
push 0xb12650
lea eax, [ebp - 0x138]
push eax
call fcn.00a6fc9b
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x9b
call fcn.00403ab5
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 0x8a
call fcn.00402651
lea ecx, [ebp - 0x20]
call fcn.0061059f
push edi
lea ecx, [eax + 0x1e0]
call fcn.0060bce6
mov eax, dword [ebp + 0xc]
cdq
mov ecx, 0x2710
idiv ecx
cmp eax, 0xb4
jne 0x601413
mov eax, dword [ebp + 0xc]
mov edi, 0x3e8
cdq
mov ecx, edi
idiv ecx
cmp edx, 0x64
jg 0x601413
lea ecx, [ebp - 0x80]
call fcn.0040263b
lea ecx, [ebp - 0x78]
push ecx
mov ecx, eax
call fcn.00403baa
push eax
lea ecx, [ebp + 0x10]
mov byte [ebp - 4], 0x9f
call fcn.00403606
lea ecx, [ebp - 0x78]
call fcn.00402621
lea ecx, [ebp - 0x40]
call fcn.00603130
and dword [ebp - 0x68], 0
mov byte [ebp - 4], 0xa2
lea ecx, [ebp + 0x10]
call fcn.005c6a0a
mov ecx, dword [eax]
lea edx, [ebp - 0x68]
push edx
lea edx, [ebp - 0x40]
push edx
push 1
push eax
call dword [ecx + 0xc]
test eax, eax
jne 0x6013be
mov esi, dword [ebp - 0x38]
call fcn.007a48d0
push 0x320
lea ecx, [ebp - 0x74]
push ecx
mov ecx, eax
call fcn.0040634c
mov ecx, eax
mov byte [ebp - 4], 0xa3
call fcn.00414b5f
push eax
push esi
call fcn.00a72a2d
mov ebx, eax
pop ecx
neg ebx
pop ecx
sbb bl, bl
lea ecx, [ebp - 0x74]
inc bl
mov byte [ebp - 4], 0xa2
call fcn.0040265e
test bl, bl
jne 0x60138b
call fcn.007a48d0
push 0x3db
lea ecx, [ebp - 0x6c]
push ecx
mov ecx, eax
call fcn.0040634c
mov ecx, eax
mov byte [ebp - 4], 0xa4
call fcn.00414b5f
push eax
push esi
call fcn.00a72a2d
mov ebx, eax
pop ecx
neg ebx
pop ecx
sbb bl, bl
lea ecx, [ebp - 0x6c]
inc bl
mov byte [ebp - 4], 0xa2
call fcn.0040265e
test bl, bl
jne 0x60138b
push esi
call fcn.00a70518
pop ecx
lea ecx, [ebp - 0xb8]
mov esi, eax
call fcn.0088473c
mov eax, esi
cdq
mov ecx, edi
idiv ecx
push 1
lea ecx, [ebp - 0xb8]
push edx
call fcn.008847f0
mov eax, esi
cdq
mov ecx, 0x2710
idiv ecx
cmp eax, 0x1f4
jne 0x601398
lea ecx, [ebp - 0x20]
call fcn.0061059f
lea ecx, [ebp - 0xb8]
push ecx
lea ecx, [ebp - 0x168]
push ecx
lea ecx, [eax + 0x1e0]
call fcn.00884d64
mov ecx, eax
call fcn.00884de7
test al, al
je 0x601398
lea ecx, [ebp - 0x20]
call fcn.0061059f
lea ecx, [ebp - 0xb8]
push ecx
lea ecx, [eax + 0x1e0]
call fcn.00884c1b
lea ecx, [ebp - 0x40]
call fcn.0060311e
jmp 0x60125e
push 0x80004005
lea ecx, [ebp - 0x24]
call fcn.00603102
mov eax, dword [eax]
mov dword [ebp - 0x144], eax
push 0xb12650
lea eax, [ebp - 0x144]
push eax
call fcn.00a6fc9b
lea ecx, [ebp - 0x20]
call fcn.0061059f
lea ecx, [eax + 0x1e0]
call fcn.00884de7
test al, al
je 0x6013fb
push 0x80004005
lea ecx, [ebp - 0x24]
call fcn.00603102
mov eax, dword [eax]
mov dword [ebp - 0x134], eax
push 0xb12650
lea eax, [ebp - 0x134]
push eax
call fcn.00a6fc9b
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0xa1
call fcn.00403ab5
lea ecx, [ebp + 0x10]
mov byte [ebp - 4], 0x8a
call fcn.00402651
xor ebx, ebx
push ebx
push ebx
push ecx
mov ecx, esp
mov dword [ebp + 0x10], esp
push 0xba1a6c
call fcn.00426d6e
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0xa5
call fcn.0040263b
lea ecx, [ebp - 0x390]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0x8a
call fcn.00403ac7
mov ecx, eax
mov byte [ebp - 4], 0xa6
call fcn.004032b2
mov dword [ebp - 0x78], eax
lea eax, [ebp - 0x78]
push eax
lea ecx, [ebp - 0x94]
call fcn.00432ea9
lea ecx, [ebp - 0x390]
mov byte [ebp - 4], 0xa8
call fcn.00403ab5
lea ecx, [ebp - 0x94]
call fcn.0054804e
test al, al
je 0x602d70
push ebx
push ebx
push ecx
mov ecx, esp
mov dword [ebp + 0x10], esp
push 0xba2244
call fcn.00426d6e
lea ecx, [ebp - 0x94]
mov byte [ebp - 4], 0xa9
call fcn.0040263b
lea ecx, [ebp - 0x370]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0xa8
call fcn.00403ac7
mov ecx, eax
mov byte [ebp - 4], 0xaa
call fcn.004032b2
mov dword [ebp - 0x68], eax
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp - 0x44]
call fcn.00432ea9
lea ecx, [ebp - 0x370]
mov byte [ebp - 4], 0xac
call fcn.00403ab5
lea ecx, [ebp - 0x44]
call fcn.0054804e
test al, al
je 0x60159b
mov dword [ebp - 0x5c], 1
mov edi, 0xb1
lea ecx, [ebp - 0x44]
call fcn.0040263b
mov ecx, eax
call fcn.00409ffd
cmp dword [ebp - 0x5c], eax
ja 0x60159b
push 0x20
pop eax
call fcn.00a70270
mov eax, esp
push ebx
push ebx
push eax
push dword [ebp - 0x5c]
call fcn.00429adf
pop ecx
pop ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x24], esp
push eax
call fcn.00426d6e
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0xad
call fcn.0040263b
lea ecx, [ebp - 0x230]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0xac
call fcn.00403ac7
mov ecx, eax
mov byte [ebp - 4], 0xae
call fcn.004032b2
mov dword [ebp - 0x74], eax
lea eax, [ebp - 0x74]
push eax
lea ecx, [ebp - 0x18]
call fcn.00432ea9
lea ecx, [ebp - 0x230]
mov byte [ebp - 4], 0xb0
call fcn.00403ab5
push ebx
lea ecx, [ebp - 0x18]
call fcn.004149f1
test al, al
je 0x6016bc
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0xac
call fcn.0040262e
push ebx
push ebx
push ecx
mov ecx, esp
mov dword [ebp + 0x10], esp
push 0xba223c
call fcn.00426d6e
lea ecx, [ebp - 0x94]
mov dword [ebp - 4], 0x10e
call fcn.0040263b
lea ecx, [ebp - 0x168]
push ecx
mov ecx, eax
mov dword [ebp - 4], 0xac
call fcn.00403ac7
mov ecx, eax
mov dword [ebp - 4], 0x10f
call fcn.004032b2
mov dword [ebp - 0x74], eax
lea eax, [ebp - 0x74]
push eax
lea ecx, [ebp - 0x58]
call fcn.00432ea9
lea ecx, [ebp - 0x168]
mov byte [ebp - 4], 0x11
call fcn.00403ab5
lea ecx, [ebp - 0x58]
call fcn.0054804e
test al, al
je 0x602d55
mov dword [ebp - 0x5c], ebx
lea ecx, [ebp - 0x58]
call fcn.0040263b
mov ecx, eax
call fcn.00409ffd
cmp dword [ebp - 0x5c], eax
jae 0x602d55
push 0x20
pop eax
call fcn.00a70270
mov eax, esp
push ebx
push ebx
push eax
push dword [ebp - 0x5c]
call fcn.00429adf
pop ecx
pop ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x28], esp
push eax
call fcn.00426d6e
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x12
call fcn.0040263b
lea ecx, [ebp - 0x198]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0x11
call fcn.00403ac7
mov ecx, eax
mov byte [ebp - 4], 0x13
call fcn.004032b2
mov dword [ebp - 0x68], eax
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp - 0x84]
call fcn.00432ea9
lea ecx, [ebp - 0x198]
mov byte [ebp - 4], 0x15
call fcn.00403ab5
push ebx
lea ecx, [ebp - 0x84]
call fcn.004149f1
test al, al
je 0x602a1b
lea ecx, [ebp - 0x84]
call fcn.0040262e
jmp 0x602d55
lea eax, [ebp + 0x13]
push eax
lea ecx, [ebp - 0x2c]
call fcn.00610933
push ebx
push ecx
mov eax, esp
mov dword [ebp - 0x24], esp
push 0x5b4
push eax
mov byte [ebp - 4], 0xb1
call fcn.007a48d0
mov ecx, eax
call fcn.00406368
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0xb2
call fcn.0040263b
lea ecx, [ebp - 0x3b0]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0xb1
call fcn.00403ac7
push eax
mov byte [ebp - 4], 0xb3
call fcn.00415344
pop ecx
pop ecx
lea ecx, [ebp - 0x2c]
mov esi, eax
call fcn.00610945
mov dword [eax], esi
lea ecx, [ebp - 0x3b0]
mov byte [ebp - 4], 0xb1
call fcn.00403ab5
push 0xffffffffffffffff
push ecx
mov ecx, esp
mov dword [ebp - 0x24], esp
push 0xba2230
call fcn.00426d6e
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0xb4
call fcn.0040263b
lea ecx, [ebp - 0x3d0]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0xb1
call fcn.00403ac7
push eax
mov byte [ebp - 4], 0xb5
call fcn.00415344
pop ecx
pop ecx
lea ecx, [ebp - 0x3d0]
mov ebx, eax
mov byte [ebp - 4], 0xb1
call fcn.00403ab5
push 0xffffffffffffffff
push ecx
mov ecx, esp
mov dword [ebp - 0x24], esp
push 0xba2224
call fcn.00426d6e
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0xb6
call fcn.0040263b
lea ecx, [ebp - 0x3f0]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0xb1
call fcn.00403ac7
push eax
mov byte [ebp - 4], 0xb7
call fcn.00415344
pop ecx
pop ecx
lea ecx, [ebp - 0x3f0]
mov esi, eax
mov byte [ebp - 4], 0xb1
call fcn.00403ab5
test esi, esi
jl 0x601862
test ebx, ebx
jl 0x601862
cmp esi, ebx
jl 0x6029f9
lea eax, [ebp - 0xd3]
push eax
lea ecx, [ebp - 0x90]
call fcn.0061095f
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 0xb8
call fcn.00610975
lea ecx, [ebp - 0x90]
mov dword [eax + 0xc], ebx
call fcn.00610975
lea ecx, [ebp - 0x90]
mov dword [eax + 0x10], esi
call fcn.00610971
push 1
push eax
lea ecx, [ebp - 0x180]
call fcn.0061098f
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0xb9
call fcn.00610945
lea ecx, [ebp - 0x180]
push ecx
lea ecx, [eax + 4]
call fcn.006104a7
lea ecx, [ebp - 0x180]
mov byte [ebp - 4], 0xb8
call fcn.00610979
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 0xb1
call fcn.00610949
jmp 0x60186a
cmp esi, ebx
jne 0x6029f9
push 0xffffffffffffffff
push ecx
mov ecx, esp
mov dword [ebp - 0x24], esp
push 0xba2218
call fcn.00426d6e
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0xba
call fcn.0040263b
lea ecx, [ebp - 0x320]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0xb1
call fcn.00403ac7
push eax
mov byte [ebp - 4], 0xbb
call fcn.00415344
pop ecx
pop ecx
lea ecx, [ebp - 0x320]
mov ebx, eax
mov byte [ebp - 4], 0xb1
call fcn.00403ab5
push 0xffffffffffffffff
push ecx
mov ecx, esp
mov dword [ebp - 0x24], esp
push 0xba220c
call fcn.00426d6e
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0xbc
call fcn.0040263b
lea ecx, [ebp - 0x260]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0xb1
call fcn.00403ac7
push eax
mov byte [ebp - 4], 0xbd
call fcn.00415344
pop ecx
pop ecx
lea ecx, [ebp - 0x260]
mov esi, eax
mov byte [ebp - 4], 0xb1
call fcn.00403ab5
test esi, esi
jl 0x6019a2
test ebx, ebx
jl 0x6019a2
cmp esi, ebx
jl 0x6029f9
lea eax, [ebp - 0xd6]
push eax
lea ecx, [ebp - 0xa8]
call fcn.006109ca
lea ecx, [ebp - 0xa8]
mov byte [ebp - 4], 0xbe
call fcn.006109e0
lea ecx, [ebp - 0xa8]
mov dword [eax + 0xc], ebx
call fcn.006109e0
lea ecx, [ebp - 0xa8]
mov dword [eax + 0x10], esi
call fcn.006109dc
push 1
push eax
lea ecx, [ebp - 0x1a8]
call fcn.0061098f
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0xbf
call fcn.00610945
lea ecx, [ebp - 0x1a8]
push ecx
lea ecx, [eax + 4]
call fcn.006104a7
lea ecx, [ebp - 0x1a8]
mov byte [ebp - 4], 0xbe
call fcn.00610979
lea ecx, [ebp - 0xa8]
mov byte [ebp - 4], 0xb1
call fcn.006109b4
jmp 0x6019aa
cmp esi, ebx
jne 0x6029f9
push 0xffffffffffffffff
push ecx
mov ecx, esp
mov dword [ebp - 0x24], esp
push 0xba2200
call fcn.00426d6e
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0xc0
call fcn.0040263b
lea ecx, [ebp - 0x3c0]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0xb1
call fcn.00403ac7
push eax
mov byte [ebp - 4], 0xc1
call fcn.00415344
pop ecx
pop ecx
lea ecx, [ebp - 0x3c0]
mov ebx, eax
mov byte [ebp - 4], 0xb1
call fcn.00403ab5
push 0xffffffffffffffff
push ecx
mov ecx, esp
mov dword [ebp - 0x24], esp
push 0xba21f4
call fcn.00426d6e
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0xc2
call fcn.0040263b
lea ecx, [ebp - 0x280]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0xb1
call fcn.00403ac7
push eax
mov byte [ebp - 4], 0xc3
call fcn.00415344
pop ecx
pop ecx
lea ecx, [ebp - 0x280]
mov esi, eax
mov byte [ebp - 4], 0xb1
call fcn.00403ab5
test esi, esi
jl 0x601ae2
test ebx, ebx
jl 0x601ae2
cmp esi, ebx
jl 0x6029f9
lea eax, [ebp - 0xd7]
push eax
lea ecx, [ebp - 0xa0]
call fcn.006109fa
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], 0xc4
call fcn.00610a10
lea ecx, [ebp - 0xa0]
mov dword [eax + 0xc], ebx
call fcn.00610a10
lea ecx, [ebp - 0xa0]
mov dword [eax + 0x10], esi
call fcn.00610a0c
push 1
push eax
lea ecx, [ebp - 0x188]
call fcn.0061098f
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0xc5
call fcn.00610945
lea ecx, [ebp - 0x188]
push ecx
lea ecx, [eax + 4]
call fcn.006104a7
lea ecx, [ebp - 0x188]
mov byte [ebp - 4], 0xc4
call fcn.00610979
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], 0xb1
call fcn.006109e4
jmp 0x601aea
cmp esi, ebx
jne 0x6029f9
push 0xffffffffffffffff
push ecx
mov ecx, esp
mov dword [ebp - 0x24], esp
push 0xba21e8
call fcn.00426d6e
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0xc6
call fcn.0040263b
lea ecx, [ebp - 0x340]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0xb1
call fcn.00403ac7
push eax
mov byte [ebp - 4], 0xc7
call fcn.00415344
pop ecx
pop ecx
lea ecx, [ebp - 0x340]
mov ebx, eax
mov byte [ebp - 4], 0xb1
call fcn.00403ab5
push 0xffffffffffffffff
push ecx
mov ecx, esp
mov dword [ebp - 0x24], esp
push 0xba21dc
call fcn.00426d6e
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0xc8
call fcn.0040263b
lea ecx, [ebp - 0x2a0]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0xb1
call fcn.00403ac7
push eax
mov byte [ebp - 4], 0xc9
call fcn.00415344
pop ecx
pop ecx
lea ecx, [ebp - 0x2a0]
mov esi, eax
mov byte [ebp - 4], 0xb1
call fcn.00403ab5
test esi, esi
jl 0x601c0f
test ebx, ebx
jl 0x601c0f
cmp esi, ebx
jl 0x6029f9
lea eax, [ebp - 0xcb]
push eax
lea ecx, [ebp - 0x70]
call fcn.00610a2a
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0xca
call fcn.00610a40
lea ecx, [ebp - 0x70]
mov dword [eax + 0xc], ebx
call fcn.00610a40
lea ecx, [ebp - 0x70]
mov dword [eax + 0x10], esi
call fcn.00610a3c
push 1
push eax
lea ecx, [ebp - 0x178]
call fcn.0061098f
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0xcb
call fcn.00610945
lea ecx, [ebp - 0x178]
push ecx
lea ecx, [eax + 4]
call fcn.006104a7
lea ecx, [ebp - 0x178]
mov byte [ebp - 4], 0xca
call fcn.00610979
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0xb1
call fcn.00610a14
jmp 0x601c17
cmp esi, ebx
jne 0x6029f9
push 0xffffffffffffffff
push ecx
mov ecx, esp
mov dword [ebp - 0x24], esp
push 0xba21d0
call fcn.00426d6e
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0xcc
call fcn.0040263b
lea ecx, [ebp - 0x3a0]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0xb1
call fcn.00403ac7
push eax
mov byte [ebp - 4], 0xcd
call fcn.00415344
pop ecx
pop ecx
lea ecx, [ebp - 0x3a0]
mov ebx, eax
mov byte [ebp - 4], 0xb1
call fcn.00403ab5
push 0xffffffffffffffff
push ecx
mov ecx, esp
mov dword [ebp - 0x24], esp
push 0xba21c4
call fcn.00426d6e
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0xce
call fcn.0040263b
lea ecx, [ebp - 0x2c0]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0xb1
call fcn.00403ac7
push eax
mov byte [ebp - 4], 0xcf
call fcn.00415344
pop ecx
pop ecx
lea ecx, [ebp - 0x2c0]
mov esi, eax
mov byte [ebp - 4], 0xb1
call fcn.00403ab5
test esi, esi
jl 0x601d4f
test ebx, ebx
jl 0x601d4f
cmp esi, ebx
jl 0x6029f9
lea eax, [ebp - 0xd1]
push eax
lea ecx, [ebp - 0x88]
call fcn.00610a5a
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 0xd0
call fcn.00610a70
lea ecx, [ebp - 0x88]
mov dword [eax + 0xc], ebx
call fcn.00610a70
lea ecx, [ebp - 0x88]
mov dword [eax + 0x10], esi
call fcn.00610a6c
push 1
push eax
lea ecx, [ebp - 0x170]
call fcn.0061098f
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0xd1
call fcn.00610945
lea ecx, [ebp - 0x170]
push ecx
lea ecx, [eax + 4]
call fcn.006104a7
lea ecx, [ebp - 0x170]
mov byte [ebp - 4], 0xd0
call fcn.00610979
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 0xb1
call fcn.00610a44
jmp 0x601d57
cmp esi, ebx
jne 0x6029f9
push 0xffffffffffffffff
push ecx
mov ecx, esp
mov dword [ebp - 0x24], esp
push 0xba21b8
call fcn.00426d6e
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0xd2
call fcn.0040263b
lea ecx, [ebp - 0x360]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0xb1
call fcn.00403ac7
push eax
mov byte [ebp - 4], 0xd3
call fcn.00415344
pop ecx
pop ecx
lea ecx, [ebp - 0x360]
mov ebx, eax
mov byte [ebp - 4], 0xb1
call fcn.00403ab5
push 0xffffffffffffffff
push ecx
mov ecx, esp
mov dword [ebp - 0x24], esp
push 0xba21ac
call fcn.00426d6e
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0xd4
call fcn.0040263b
lea ecx, [ebp - 0x2e0]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0xb1
call fcn.00403ac7
push eax
mov byte [ebp - 4], 0xd5
call fcn.00415344
pop ecx
pop ecx
lea ecx, [ebp - 0x2e0]
mov esi, eax
mov byte [ebp - 4], 0xb1
call fcn.00403ab5
test esi, esi
jl 0x601e8f
test ebx, ebx
jl 0x601e8f
cmp esi, ebx
jl 0x6029f9
lea eax, [ebp - 0xd0]
push eax
lea ecx, [ebp - 0x114]
call fcn.00610a8a
lea ecx, [ebp - 0x114]
mov byte [ebp - 4], 0xd6
call fcn.00610aa0
lea ecx, [ebp - 0x114]
mov dword [eax + 0xc], ebx
call fcn.00610aa0
lea ecx, [ebp - 0x114]
mov dword [eax + 0x10], esi
call fcn.00610a9c
push 1
push eax
lea ecx, [ebp - 0x1a0]
call fcn.0061098f
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0xd7
call fcn.00610945
lea ecx, [ebp - 0x1a0]
push ecx
lea ecx, [eax + 4]
call fcn.006104a7
lea ecx, [ebp - 0x1a0]
mov byte [ebp - 4], 0xd6
call fcn.00610979
lea ecx, [ebp - 0x114]
mov byte [ebp - 4], 0xb1
call fcn.00610a74
jmp 0x601e97
cmp esi, ebx
jne 0x6029f9
push 0xffffffffffffffff
push ecx
mov ecx, esp
mov dword [ebp - 0x24], esp
push 0xba21a0
call fcn.00426d6e
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0xd8
call fcn.0040263b
lea ecx, [ebp - 0x3e0]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0xb1
call fcn.00403ac7
push eax
mov byte [ebp - 4], 0xd9
call fcn.00415344
pop ecx
pop ecx
lea ecx, [ebp - 0x3e0]
mov ebx, eax
mov byte [ebp - 4], 0xb1
call fcn.00403ab5
push 0xffffffffffffffff
push ecx
mov ecx, esp
mov dword [ebp - 0x24], esp
push 0xba2194
call fcn.00426d6e
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0xda
call fcn.0040263b
lea ecx, [ebp - 0x300]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0xb1
call fcn.00403ac7
push eax
mov byte [ebp - 4], 0xdb
call fcn.00415344
pop ecx
pop ecx
lea ecx, [ebp - 0x300]
mov esi, eax
mov byte [ebp - 4], 0xb1
call fcn.00403ab5
test esi, esi
jl 0x601fcf
test ebx, ebx
jl 0x601fcf
cmp esi, ebx
jl 0x6029f9
lea eax, [ebp - 0xd4]
push eax
lea ecx, [ebp - 0x104]
call fcn.00610aba
lea ecx, [ebp - 0x104]
mov byte [ebp - 4], 0xdc
call fcn.00610ad0
lea ecx, [ebp - 0x104]
mov dword [eax + 0xc], ebx
call fcn.00610ad0
lea ecx, [ebp - 0x104]
mov dword [eax + 0x10], esi
call fcn.00610acc
push 1
push eax
lea ecx, [ebp - 0x1b0]
call fcn.0061098f
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0xdd
call fcn.00610945
lea ecx, [ebp - 0x1b0]
push ecx
lea ecx, [eax + 4]
call fcn.006104a7
lea ecx, [ebp - 0x1b0]
mov byte [ebp - 4], 0xdc
call fcn.00610979
lea ecx, [ebp - 0x104]
mov byte [ebp - 4], 0xb1
call fcn.00610aa4
jmp 0x601fd7
cmp esi, ebx
jne 0x6029f9
push 0xffffffffffffffff
push ecx
mov ecx, esp
mov dword [ebp - 0x24], esp
push 0xba2188
call fcn.00426d6e
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0xde
call fcn.0040263b
lea ecx, [ebp - 0x380]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0xb1
call fcn.00403ac7
push eax
mov byte [ebp - 4], 0xdf
call fcn.00415344
pop ecx
pop ecx
lea ecx, [ebp - 0x380]
mov ebx, eax
mov byte [ebp - 4], 0xb1
call fcn.00403ab5
push 0xffffffffffffffff
push ecx
mov ecx, esp
mov dword [ebp - 0x24], esp
push 0xba217c
call fcn.00426d6e
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0xe0
call fcn.0040263b
lea ecx, [ebp - 0x240]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0xb1
call fcn.00403ac7
push eax
mov byte [ebp - 4], 0xe1
call fcn.00415344
pop ecx
pop ecx
lea ecx, [ebp - 0x240]
mov esi, eax
mov byte [ebp - 4], 0xb1
call fcn.00403ab5
test esi, esi
jl 0x60210f
test ebx, ebx
jl 0x60210f
cmp esi, ebx
jl 0x6029f9
lea eax, [ebp - 0xca]
push eax
lea ecx, [ebp - 0x124]
call fcn.00610aea
lea ecx, [ebp - 0x124]
mov byte [ebp - 4], 0xe2
call fcn.00610b00
lea ecx, [ebp - 0x124]
mov dword [eax + 0xc], ebx
call fcn.00610b00
lea ecx, [ebp - 0x124]
mov dword [eax + 0x10], esi
call fcn.00610afc
push 1
push eax
lea ecx, [ebp - 0x1c8]
call fcn.0061098f
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0xe3
call fcn.00610945
lea ecx, [ebp - 0x1c8]
push ecx
lea ecx, [eax + 4]
call fcn.006104a7
lea ecx, [ebp - 0x1c8]
mov byte [ebp - 4], 0xe2
call fcn.00610979
lea ecx, [ebp - 0x124]
mov byte [ebp - 4], 0xb1
call fcn.00610ad4
jmp 0x602117
cmp esi, ebx
jne 0x6029f9
push 0xffffffffffffffff
push ecx
mov ecx, esp
mov dword [ebp - 0x24], esp
push 0xba2170
call fcn.00426d6e
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0xe4
call fcn.0040263b
lea ecx, [ebp - 0x250]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0xb1
call fcn.00403ac7
push eax
mov byte [ebp - 4], 0xe5
call fcn.00415344
pop ecx
pop ecx
lea ecx, [ebp - 0x250]
mov ebx, eax
mov byte [ebp - 4], 0xb1
call fcn.00403ab5
push 0xffffffffffffffff
push ecx
mov ecx, esp
mov dword [ebp - 0x24], esp
push 0xba2164
call fcn.00426d6e
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0xe6
call fcn.0040263b
lea ecx, [ebp - 0x270]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0xb1
call fcn.00403ac7
push eax
mov byte [ebp - 4], 0xe7
call fcn.00415344
pop ecx
pop ecx
lea ecx, [ebp - 0x270]
mov esi, eax
mov byte [ebp - 4], 0xb1
call fcn.00403ab5
test esi, esi
jl 0x60224f
test ebx, ebx
jl 0x60224f
cmp esi, ebx
jl 0x6029f9
lea eax, [ebp - 0xcd]
push eax
lea ecx, [ebp - 0xec]
call fcn.00610b1a
lea ecx, [ebp - 0xec]
mov byte [ebp - 4], 0xe8
call fcn.00610b30
lea ecx, [ebp - 0xec]
mov dword [eax + 0xc], ebx
call fcn.00610b30
lea ecx, [ebp - 0xec]
mov dword [eax + 0x10], esi
call fcn.00610b2c
push 1
push eax
lea ecx, [ebp - 0x1b8]
call fcn.0061098f
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0xe9
call fcn.00610945
lea ecx, [ebp - 0x1b8]
push ecx
lea ecx, [eax + 4]
call fcn.006104a7
lea ecx, [ebp - 0x1b8]
mov byte [ebp - 4], 0xe8
call fcn.00610979
lea ecx, [ebp - 0xec]
mov byte [ebp - 4], 0xb1
call fcn.00610b04
jmp 0x602257
cmp esi, ebx
jne 0x6029f9
push 0xffffffffffffffff
push ecx
mov ecx, esp
mov dword [ebp - 0x24], esp
push 0xba2158
call fcn.00426d6e
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0xea
call fcn.0040263b
lea ecx, [ebp - 0x290]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0xb1
call fcn.00403ac7
push eax
mov byte [ebp - 4], 0xeb
call fcn.00415344
pop ecx
pop ecx
lea ecx, [ebp - 0x290]
mov ebx, eax
mov byte [ebp - 4], 0xb1
call fcn.00403ab5
push 0xffffffffffffffff
push ecx
mov ecx, esp
mov dword [ebp - 0x24], esp
push 0xba214c
call fcn.00426d6e
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0xec
call fcn.0040263b
lea ecx, [ebp - 0x2b0]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0xb1
call fcn.00403ac7
push eax
mov byte [ebp - 4], 0xed
call fcn.00415344
pop ecx
pop ecx
lea ecx, [ebp - 0x2b0]
mov esi, eax
mov byte [ebp - 4], 0xb1
call fcn.00403ab5
test esi, esi
jl 0x60238f
test ebx, ebx
jl 0x60238f
cmp esi, ebx
jl 0x6029f9
lea eax, [ebp - 0xcf]
push eax
lea ecx, [ebp - 0xfc]
call fcn.00610b4a
lea ecx, [ebp - 0xfc]
mov byte [ebp - 4], 0xee
call fcn.00610b60
lea ecx, [ebp - 0xfc]
mov dword [eax + 0xc], ebx
call fcn.00610b60
lea ecx, [ebp - 0xfc]
mov dword [eax + 0x10], esi
call fcn.00610b5c
push 1
push eax
lea ecx, [ebp - 0x1d8]
call fcn.0061098f
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0xef
call fcn.00610945
lea ecx, [ebp - 0x1d8]
push ecx
lea ecx, [eax + 4]
call fcn.006104a7
lea ecx, [ebp - 0x1d8]
mov byte [ebp - 4], 0xee
call fcn.00610979
lea ecx, [ebp - 0xfc]
mov byte [ebp - 4], 0xb1
call fcn.00610b34
jmp 0x602397
cmp esi, ebx
jne 0x6029f9
push 0xffffffffffffffff
push ecx
mov ecx, esp
mov dword [ebp - 0x24], esp
push 0xba2140
call fcn.00426d6e
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0xf0
call fcn.0040263b
lea ecx, [ebp - 0x2d0]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0xb1
call fcn.00403ac7
push eax
mov byte [ebp - 4], 0xf1
call fcn.00415344
pop ecx
pop ecx
lea ecx, [ebp - 0x2d0]
mov ebx, eax
mov byte [ebp - 4], 0xb1
call fcn.00403ab5
push 0xffffffffffffffff
push ecx
mov ecx, esp
mov dword [ebp - 0x24], esp
push 0xba2134
call fcn.00426d6e
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0xf2
call fcn.0040263b
lea ecx, [ebp - 0x2f0]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0xb1
call fcn.00403ac7
push eax
mov byte [ebp - 4], 0xf3
call fcn.00415344
pop ecx
pop ecx
lea ecx, [ebp - 0x2f0]
mov esi, eax
mov byte [ebp - 4], 0xb1
call fcn.00403ab5
test esi, esi
jl 0x6024cf
test ebx, ebx
jl 0x6024cf
cmp esi, ebx
jl 0x6029f9
lea eax, [ebp - 0xcc]
push eax
lea ecx, [ebp - 0x10c]
call fcn.00610b7a
lea ecx, [ebp - 0x10c]
mov byte [ebp - 4], 0xf4
call fcn.00610b90
lea ecx, [ebp - 0x10c]
mov dword [eax + 0xc], ebx
call fcn.00610b90
lea ecx, [ebp - 0x10c]
mov dword [eax + 0x10], esi
call fcn.00610b8c
push 1
push eax
lea ecx, [ebp - 0x1e8]
call fcn.0061098f
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0xf5
call fcn.00610945
lea ecx, [ebp - 0x1e8]
push ecx
lea ecx, [eax + 4]
call fcn.006104a7
lea ecx, [ebp - 0x1e8]
mov byte [ebp - 4], 0xf4
call fcn.00610979
lea ecx, [ebp - 0x10c]
mov byte [ebp - 4], 0xb1
call fcn.00610b64
jmp 0x6024d7
cmp esi, ebx
jne 0x6029f9
push 0xffffffffffffffff
push ecx
mov ecx, esp
mov dword [ebp - 0x24], esp
push 0xba2128
call fcn.00426d6e
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0xf6
call fcn.0040263b
lea ecx, [ebp - 0x310]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0xb1
call fcn.00403ac7
push eax
mov byte [ebp - 4], 0xf7
call fcn.00415344
pop ecx
pop ecx
lea ecx, [ebp - 0x310]
mov ebx, eax
mov byte [ebp - 4], 0xb1
call fcn.00403ab5
push 0xffffffffffffffff
push ecx
mov ecx, esp
mov dword [ebp - 0x24], esp
push 0xba211c
call fcn.00426d6e
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0xf8
call fcn.0040263b
lea ecx, [ebp - 0x330]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0xb1
call fcn.00403ac7
push eax
mov byte [ebp - 4], 0xf9
call fcn.00415344
pop ecx
pop ecx
lea ecx, [ebp - 0x330]
mov esi, eax
mov byte [ebp - 4], 0xb1
call fcn.00403ab5
test esi, esi
jl 0x60260f
test ebx, ebx
jl 0x60260f
cmp esi, ebx
jl 0x6029f9
lea eax, [ebp - 0xd5]
push eax
lea ecx, [ebp - 0xe4]
call fcn.00610baa
lea ecx, [ebp - 0xe4]
mov byte [ebp - 4], 0xfa
call fcn.00610bc0
lea ecx, [ebp - 0xe4]
mov dword [eax + 0xc], ebx
call fcn.00610bc0
lea ecx, [ebp - 0xe4]
mov dword [eax + 0x10], esi
call fcn.00610bbc
push 1
push eax
lea ecx, [ebp - 0x150]
call fcn.0061098f
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0xfb
call fcn.00610945
lea ecx, [ebp - 0x150]
push ecx
lea ecx, [eax + 4]
call fcn.006104a7
lea ecx, [ebp - 0x150]
mov byte [ebp - 4], 0xfa
call fcn.00610979
lea ecx, [ebp - 0xe4]
mov byte [ebp - 4], 0xb1
call fcn.00610b94
jmp 0x602617
cmp esi, ebx
jne 0x6029f9
push 0xffffffffffffffff
push ecx
mov ecx, esp
mov dword [ebp - 0x24], esp
push 0xba2110
call fcn.00426d6e
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0xfc
call fcn.0040263b
lea ecx, [ebp - 0x350]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0xb1
call fcn.00403ac7
push eax
mov byte [ebp - 4], 0xfd
call fcn.00415344
pop ecx
pop ecx
lea ecx, [ebp - 0x350]
mov ebx, eax
mov byte [ebp - 4], 0xb1
call fcn.00403ab5
push 0xffffffffffffffff
push ecx
mov ecx, esp
mov dword [ebp - 0x24], esp
push 0xba2104
call fcn.00426d6e
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0xfe
call fcn.0040263b
lea ecx, [ebp - 0x200]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0xb1
call fcn.00403ac7
or byte [ebp - 4], 0xff
push eax
call fcn.00415344
pop ecx
pop ecx
lea ecx, [ebp - 0x200]
mov esi, eax
mov byte [ebp - 4], 0xb1
call fcn.00403ab5
test esi, esi
jl 0x602751
test ebx, ebx
jl 0x602751
cmp esi, ebx
jl 0x6029f9
lea eax, [ebp - 0xd2]
push eax
lea ecx, [ebp - 0x11c]
call fcn.00610bda
lea ecx, [ebp - 0x11c]
mov dword [ebp - 4], 0x100
call fcn.00610bf0
lea ecx, [ebp - 0x11c]
mov dword [eax + 0xc], ebx
call fcn.00610bf0
lea ecx, [ebp - 0x11c]
mov dword [eax + 0x10], esi
call fcn.00610bec
push 1
push eax
lea ecx, [ebp - 0xc0]
call fcn.0061098f
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 1
call fcn.00610945
lea ecx, [ebp - 0xc0]
push ecx
lea ecx, [eax + 4]
call fcn.006104a7
and byte [ebp - 4], 0
lea ecx, [ebp - 0xc0]
call fcn.00610979
lea ecx, [ebp - 0x11c]
mov dword [ebp - 4], edi
call fcn.00610bc4
jmp 0x602759
cmp esi, ebx
jne 0x6029f9
push 0xffffffffffffffff
push ecx
mov ecx, esp
mov dword [ebp - 0x24], esp
push 0xba20f8
call fcn.00426d6e
lea ecx, [ebp - 0x18]
mov dword [ebp - 4], 0x102
call fcn.0040263b
lea ecx, [ebp - 0x220]
push ecx
mov ecx, eax
mov dword [ebp - 4], edi
call fcn.00403ac7
push eax
mov dword [ebp - 4], 0x103
call fcn.00415344
pop ecx
pop ecx
lea ecx, [ebp - 0x220]
mov ebx, eax
mov dword [ebp - 4], edi
call fcn.00403ab5
push 0xffffffffffffffff
push ecx
mov ecx, esp
mov dword [ebp - 0x24], esp
push 0xba20ec
call fcn.00426d6e
lea ecx, [ebp - 0x18]
mov dword [ebp - 4], 0x104
call fcn.0040263b
lea ecx, [ebp - 0x210]
push ecx
mov ecx, eax
mov dword [ebp - 4], edi
call fcn.00403ac7
push eax
mov dword [ebp - 4], 0x105
call fcn.00415344
pop ecx
pop ecx
lea ecx, [ebp - 0x210]
mov esi, eax
mov dword [ebp - 4], edi
call fcn.00403ab5
test esi, esi
jl 0x60289b
test ebx, ebx
jl 0x60289b
cmp esi, ebx
jl 0x6029f9
lea eax, [ebp - 0xce]
push eax
lea ecx, [ebp - 0x12c]
call fcn.00610c0a
lea ecx, [ebp - 0x12c]
mov dword [ebp - 4], 0x106
call fcn.00610c20
lea ecx, [ebp - 0x12c]
mov dword [eax + 0xc], ebx
call fcn.00610c20
lea ecx, [ebp - 0x12c]
mov dword [eax + 0x10], esi
call fcn.00610c1c
push 1
push eax
lea ecx, [ebp - 0xb0]
call fcn.0061098f
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 7
call fcn.00610945
lea ecx, [ebp - 0xb0]
push ecx
lea ecx, [eax + 4]
call fcn.006104a7
lea ecx, [ebp - 0xb0]
mov byte [ebp - 4], 6
call fcn.00610979
lea ecx, [ebp - 0x12c]
mov dword [ebp - 4], edi
call fcn.00610bf4
jmp 0x6028a3
cmp esi, ebx
jne 0x6029f9
push 0xffffffffffffffff
push ecx
mov ecx, esp
mov dword [ebp - 0x24], esp
push 0xba20e0
call fcn.00426d6e
lea ecx, [ebp - 0x18]
mov dword [ebp - 4], 0x108
call fcn.0040263b
lea ecx, [ebp - 0x198]
push ecx
mov ecx, eax
mov dword [ebp - 4], edi
call fcn.00403ac7
push eax
mov dword [ebp - 4], 0x109
call fcn.00415344
pop ecx
pop ecx
lea ecx, [ebp - 0x198]
mov ebx, eax
mov dword [ebp - 4], edi
call fcn.00403ab5
push 0xffffffffffffffff
push ecx
mov ecx, esp
mov dword [ebp - 0x24], esp
push 0xba20d4
call fcn.00426d6e
lea ecx, [ebp - 0x18]
mov dword [ebp - 4], 0x10a
call fcn.0040263b
lea ecx, [ebp - 0x168]
push ecx
mov ecx, eax
mov dword [ebp - 4], edi
call fcn.00403ac7
push eax
mov dword [ebp - 4], 0x10b
call fcn.00415344
pop ecx
pop ecx
lea ecx, [ebp - 0x168]
mov esi, eax
mov dword [ebp - 4], edi
call fcn.00403ab5
test esi, esi
jl 0x6029dc
test ebx, ebx
jl 0x6029dc
cmp esi, ebx
jl 0x6029f9
lea eax, [ebp - 0xc9]
push eax
lea ecx, [ebp - 0xf4]
call fcn.00610c3a
lea ecx, [ebp - 0xf4]
mov dword [ebp - 4], 0x10c
call fcn.00610c50
lea ecx, [ebp - 0xf4]
mov dword [eax + 0xc], ebx
call fcn.00610c50
lea ecx, [ebp - 0xf4]
mov dword [eax + 0x10], esi
call fcn.00610c4c
push 1
push eax
lea ecx, [ebp - 0x38]
call fcn.0061098f
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0xd
call fcn.00610945
lea ecx, [ebp - 0x38]
push ecx
lea ecx, [eax + 4]
call fcn.006104a7
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0xc
call fcn.00610979
lea ecx, [ebp - 0xf4]
mov dword [ebp - 4], edi
call fcn.00610c24
jmp 0x6029e0
cmp esi, ebx
jne 0x6029f9
lea ecx, [ebp - 0x20]
call fcn.0061059f
push 0xffffffffffffffff
lea ecx, [ebp - 0x2c]
push ecx
lea ecx, [eax + 0x1f4]
call fcn.0061050a
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0xb0
call fcn.00610894
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0xac
call fcn.0040262e
inc dword [ebp - 0x5c]
xor ebx, ebx
jmp 0x6014fc
push ebx
push ecx
mov eax, esp
mov dword [ebp - 0x28], esp
push 0x5f8
push eax
call fcn.007a48d0
mov ecx, eax
call fcn.00406368
lea ecx, [ebp - 0x84]
mov byte [ebp - 4], 0x16
call fcn.0040263b
lea ecx, [ebp - 0x210]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0x15
call fcn.00403ac7
push eax
mov byte [ebp - 4], 0x17
call fcn.00415344
pop ecx
pop ecx
lea ecx, [ebp - 0x210]
mov ebx, eax
mov byte [ebp - 4], 0x15
call fcn.00403ab5
xor edi, edi
xor esi, esi
cmp esi, ebx
jge 0x602a96
lea ecx, [ebp - 0x20]
call fcn.0061059f
push 0xffffffffffffffff
lea ecx, [ebp - 0x5c]
push ecx
lea ecx, [eax + 0x1f0]
call fcn.0048102b
inc esi
jmp 0x602a76
lea ecx, [ebp - 0xc8]
call fcn.00603130
lea ecx, [ebp - 0x84]
mov byte [ebp - 4], 0x18
call fcn.0040263b
lea ecx, [ebp - 0x9c]
push ecx
mov ecx, eax
call fcn.00403baa
push eax
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 0x19
call fcn.00403606
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 0x1b
call fcn.00402621
mov dword [ebp - 0xa4], edi
lea ecx, [ebp - 0x6c]
call fcn.005c6a0a
mov ecx, dword [eax]
lea edx, [ebp - 0xa4]
push edx
lea edx, [ebp - 0xc8]
push edx
push 1
push eax
call dword [ecx + 0xc]
cmp eax, edi
jne 0x602d25
mov esi, dword [ebp - 0xc0]
push edi
push edi
push ecx
mov ecx, esp
mov dword [ebp - 0x28], esp
push esi
call fcn.0040339f
lea ecx, [ebp - 0x84]
mov byte [ebp - 4], 0x1c
call fcn.0040263b
lea ecx, [ebp - 0x220]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0x1b
call fcn.00403ac7
mov ecx, eax
mov byte [ebp - 4], 0x1d
call fcn.004032b2
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
lea ecx, [ebp - 0x18]
call fcn.00432ea9
lea ecx, [ebp - 0x220]
mov byte [ebp - 4], 0x1f
call fcn.00403ab5
push esi
call fcn.00a70518
mov ebx, eax
cmp ebx, edi
pop ecx
je 0x602d01
lea ecx, [ebp - 0x20]
call fcn.0061059f
lea ecx, [eax + 0x1f4]
call fcn.006104ff
cmp ebx, eax
ja 0x602d1d
cmp ebx, edi
jl 0x602d1d
lea eax, [ebp + 0x13]
push eax
lea ecx, [ebp - 0x90]
call fcn.006104e9
push 0xbdd488
push ecx
mov eax, esp
mov dword [ebp - 0x28], esp
push 0x87a
push eax
mov byte [ebp - 4], 0x20
call fcn.007a48d0
mov ecx, eax
call fcn.00406368
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x21
call fcn.0040263b
lea ecx, [ebp - 0x200]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0x20
call fcn.00403ac7
push eax
mov byte [ebp - 4], 0x22
call fcn.00443ece
pop ecx
pop ecx
lea ecx, [ebp - 0x90]
mov esi, eax
call fcn.006104fb
push esi
mov ecx, eax
call fcn.0061326b
lea ecx, [ebp - 0x200]
mov byte [ebp - 4], 0x20
call fcn.00403ab5
push ecx
lea eax, [ebp - 0x18]
mov ecx, esp
mov dword [ebp - 0x28], esp
push eax
call fcn.00429411
mov ecx, dword [ebp - 0x64]
lea eax, [ebp - 0xb0]
push eax
call fcn.00607522
mov esi, eax
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 0x23
call fcn.006104fb
push esi
lea ecx, [eax + 4]
call fcn.0061046e
lea ecx, [ebp - 0xb0]
mov byte [ebp - 4], 0x20
call fcn.0061041b
lea ecx, [ebp - 0x90]
call fcn.006104fb
add eax, 0xc
push eax
push ecx
lea eax, [ebp - 0x18]
mov ecx, esp
mov dword [ebp - 0x28], esp
push eax
call fcn.00429411
mov ecx, dword [ebp - 0x64]
call fcn.00607043
lea ecx, [ebp - 0x90]
call fcn.006104fb
add eax, 0x20
push eax
push ecx
lea eax, [ebp - 0x18]
mov ecx, esp
mov dword [ebp - 0x28], esp
push eax
call fcn.00429411
mov ecx, dword [ebp - 0x64]
call fcn.006072ce
lea ecx, [ebp - 0x20]
call fcn.0061059f
dec ebx
push ebx
lea ecx, [eax + 0x1f4]
call fcn.00613323
push eax
lea ecx, [ebp - 0x38]
call fcn.006108aa
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0x24
call fcn.00610945
lea ecx, [ebp - 0x90]
push ecx
lea ecx, [ebp - 0x5c]
push ecx
lea ecx, [eax + 0x18]
call fcn.006104c0
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0x20
call fcn.00610894
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 0x1f
call fcn.006104d3
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x1b
call fcn.0040262e
lea ecx, [ebp - 0xc8]
call fcn.0060311e
jmp 0x602ae0
lea ecx, [ebp - 0x18]
call fcn.0040262e
lea ecx, [ebp - 0x6c]
call fcn.00402651
lea ecx, [ebp - 0xc8]
mov byte [ebp - 4], 0x15
call fcn.00403ab5
lea ecx, [ebp - 0x84]
mov byte [ebp - 4], 0x11
call fcn.0040262e
inc dword [ebp - 0x5c]
xor ebx, ebx
jmp 0x601613
lea ecx, [ebp - 0x58]
mov dword [ebp - 4], 0xac
call fcn.0040262e
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0xa8
call fcn.0040262e
lea ecx, [ebp - 0x20]
call fcn.0061059f
mov dword [eax + 0x230], ebx
mov dword [eax + 0x234], ebx
push dword [ebp + 0xc]
call fcn.0061026f
cmp eax, ebx
pop ecx
je 0x602f29
lea ecx, [ebp - 0x80]
call fcn.0040263b
lea ecx, [ebp - 0x24]
push ecx
mov ecx, eax
call fcn.00403baa
push eax
lea ecx, [ebp + 0x10]
mov dword [ebp - 4], 0x125
call fcn.00403606
lea ecx, [ebp - 0x24]
call fcn.00402621
lea ecx, [ebp - 0x40]
call fcn.00603130
mov byte [ebp - 4], 0x28
mov dword [ebp - 0xa4], ebx
lea ecx, [ebp + 0x10]
call fcn.005c6a0a
mov ecx, dword [eax]
lea edx, [ebp - 0xa4]
push edx
lea edx, [ebp - 0x40]
push edx
push 1
push eax
call dword [ecx + 0xc]
cmp eax, ebx
jne 0x602ed0
mov esi, dword [ebp - 0x38]
call fcn.007a48d0
push 0x320
lea ecx, [ebp - 0x9c]
push ecx
mov ecx, eax
call fcn.0040634c
mov ecx, eax
mov byte [ebp - 4], 0x29
call fcn.00414b5f
push eax
push esi
call fcn.00a72a2d
mov ebx, eax
pop ecx
neg ebx
pop ecx
sbb bl, bl
lea ecx, [ebp - 0x9c]
inc bl
mov byte [ebp - 4], 0x28
call fcn.0040265e
test bl, bl
jne 0x602e9b
push esi
call fcn.00a70518
pop ecx
mov esi, eax
push 0x64
pop ecx
cdq
idiv ecx
push 1
pop eax
mov ecx, edx
xor edx, edx
call fcn.00a719f0
push esi
mov ebx, eax
mov edi, edx
call fcn.00610258
test eax, eax
pop ecx
je 0x602eaa
lea ecx, [ebp - 0x20]
call fcn.0061059f
mov ecx, dword [eax + 0x230]
mov eax, dword [eax + 0x234]
and ecx, ebx
and eax, edi
or ecx, eax
jne 0x602eaa
lea ecx, [ebp - 0x20]
call fcn.0061059f
or dword [eax + 0x230], ebx
add eax, 0x230
or dword [eax + 4], edi
lea ecx, [ebp - 0x40]
call fcn.0060311e
xor ebx, ebx
jmp 0x602dd2
push 0x80004005
lea ecx, [ebp - 0x28]
call fcn.00603102
mov eax, dword [eax]
mov dword [ebp - 0x140], eax
push 0xb12650
lea eax, [ebp - 0x140]
push eax
call fcn.00a6fc9b
lea ecx, [ebp - 0x20]
call fcn.0061059f
mov ecx, dword [eax + 0x230]
add eax, 0x230
or ecx, dword [eax + 4]
jne 0x602f0e
push 0x80004005
lea ecx, [ebp - 0x28]
call fcn.00603102
mov eax, dword [eax]
mov dword [ebp - 0x148], eax
push 0xb12650
lea eax, [ebp - 0x148]
push eax
call fcn.00a6fc9b
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x27
call fcn.00403ab5
lea ecx, [ebp + 0x10]
mov dword [ebp - 4], 0xa8
call fcn.00402651
lea ecx, [ebp - 0x20]
call fcn.0061059f
cmp dword [eax + 0x1f8], ebx
je 0x60306d
push ebx
push ebx
push ecx
mov ecx, esp
mov dword [ebp - 0x28], esp
push 0xba20cc
call fcn.00426d6e
lea ecx, [ebp - 0x14]
mov dword [ebp - 4], 0x12a
call fcn.0040263b
lea ecx, [ebp - 0x168]
push ecx
mov edi, 0xa8
mov ecx, eax
mov dword [ebp - 4], edi
call fcn.00403ac7
mov ecx, eax
mov dword [ebp - 4], 0x12b
call fcn.004032b2
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
lea ecx, [ebp + 0x10]
call fcn.00432ea9
lea ecx, [ebp - 0x168]
mov byte [ebp - 4], 0x2d
call fcn.00403ab5
lea ecx, [ebp + 0x10]
call fcn.0054804e
test al, al
je 0x603018
push 0xbdd488
push ecx
mov eax, esp
mov dword [ebp - 0x28], esp
push 0x87a
push eax
call fcn.007a48d0
mov ecx, eax
call fcn.00406368
lea ecx, [ebp + 0x10]
mov byte [ebp - 4], 0x2e
call fcn.0040263b
lea ecx, [ebp - 0x198]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0x2d
call fcn.00403ac7
push eax
mov byte [ebp - 4], 0x2f
call fcn.00443ece
pop ecx
pop ecx
lea ecx, [ebp - 0x20]
mov esi, eax
call fcn.0061059f
push esi
lea ecx, [eax + 0x1fc]
call fcn.0061326b
lea ecx, [ebp - 0x198]
mov byte [ebp - 4], 0x2d
call fcn.00403ab5
lea ecx, [ebp - 0x20]
call fcn.0061059f
add eax, 0x200
push eax
push ecx
lea eax, [ebp + 0x10]
mov ecx, esp
mov dword [ebp - 0x28], esp
push eax
call fcn.00429411
mov ecx, dword [ebp - 0x64]
call fcn.00607043
lea ecx, [ebp - 0x20]
call fcn.0061059f
add eax, 0x214
push eax
push ecx
lea eax, [ebp + 0x10]
mov ecx, esp
mov dword [ebp - 0x28], esp
push eax
call fcn.00429411
mov ecx, dword [ebp - 0x64]
call fcn.006072ce
lea ecx, [ebp + 0x10]
mov dword [ebp - 4], edi
call fcn.0040262e
lea ecx, [ebp - 0x20]
call fcn.0061059f
cmp dword [eax + 0xc], ebx
jne 0x603082
lea ecx, [ebp - 0x20]
call fcn.0061059f
mov ecx, dword [ebp + 8]
lea eax, [ebp - 0x20]
push eax
call fcn.0061057e
lea ecx, [ebp - 0x94]
call fcn.0040262e
lea ecx, [ebp - 0x98]
call fcn.0040262e
lea ecx, [ebp - 0x7c]
call fcn.0040262e
lea ecx, [ebp - 0x14]
call fcn.0040262e
lea ecx, [ebp - 0x80]
call fcn.0040262e
and byte [ebp - 4], 0
lea ecx, [ebp - 0x20]
call fcn.00610568
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp + 8]
lea esp, [ebp - 0x3fc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
leave
ret 0xc