Function at 0x5eef24
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
push ecx
mov ecx, 0x37
push 0
push 0
dec ecx
jne 0x5eef2d
push ecx
xchg dword [ebp - 4], ecx
push ebx
mov dword [ebp - 0xc], ecx
mov dword [ebp - 8], edx
mov dword [ebp - 4], eax
xor eax, eax
push ebp
push 0x5f0fdc
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 4]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0xc]
mov eax, dword [eax]
mov dword [ebp - 0x84], eax
mov eax, dword [ebp - 0x84]
xor edx, edx
add edx, 0x18
add eax, edx
mov edx, dword [ebp - 0x84]
movzx edx, word [edx + 0x14]
add eax, edx
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0xc]
mov eax, dword [eax]
movzx eax, word [eax + 6]
dec eax
test eax, eax
jl 0x5f0f50
inc eax
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x14], 0
mov eax, dword [ebp - 0x6c]
sub eax, dword [ebp - 0x48]
cmp eax, 0x85
jge 0x5ef297
xor eax, eax
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x54]
sub eax, dword [ebp - 0x68]
mov dword [ebp - 0x7c], eax
mov eax, dword [ebp - 0x50]
add eax, 0x46
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x40]
add eax, 0x36
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x3c]
add eax, 0x92
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x60]
sub eax, 0x94
mov dword [ebp - 0x70], eax
lea eax, [ebp - 0x28]
mov edx, dword [ebp - 0x34]
call fcn.0040a1dc
inc dword [ebp - 0x74]
cmp dword [ebp - 0x74], 0xf
jne 0x5eefb3
mov eax, dword [ebp - 0x64]
cmp eax, dword [ebp - 0x5c]
jle 0x5ef278
lea eax, [ebp - 0x34]
mov edx, dword [ebp - 0x34]
call fcn.0040a1dc
lea eax, [ebp - 0x30]
mov edx, dword [ebp - 0x2c]
call fcn.0040a1dc
lea eax, [ebp - 0x28]
mov edx, dword [ebp - 0x34]
call fcn.0040a1dc
lea eax, [ebp - 0x2c]
mov edx, dword [ebp - 0x2c]
call fcn.0040a1dc
lea eax, [ebp - 0x30]
mov edx, dword [ebp - 0x34]
call fcn.0040a1dc
lea eax, [ebp - 0xa0]
mov edx, dword [0x6f5be8]
mov dl, byte [edx]
mov byte [eax + 1], dl
mov byte [eax], 1
lea edx, [ebp - 0xa0]
lea eax, [ebp - 0xa4]
call fcn.0040a438
lea eax, [ebp - 0xa8]
mov edx, dword [0x6f5e20]
mov dl, byte [edx]
mov byte [eax + 1], dl
mov byte [eax], 1
lea edx, [ebp - 0xa8]
lea eax, [ebp - 0xa4]
mov cl, 2
call fcn.0040a460
lea edx, [ebp - 0xa4]
lea eax, [ebp - 0xac]
call fcn.0040a438
lea eax, [ebp - 0xa8]
mov edx, dword [0x6f5e20]
mov dl, byte [edx]
mov byte [eax + 1], dl
mov byte [eax], 1
lea edx, [ebp - 0xa8]
lea eax, [ebp - 0xac]
mov cl, 3
call fcn.0040a460
lea edx, [ebp - 0xac]
lea eax, [ebp - 0xb4]
call fcn.0040a438
lea eax, [ebp - 0xa8]
mov edx, dword [0x6f5ce8]
mov dl, byte [edx]
mov byte [eax + 1], dl
mov byte [eax], 1
lea edx, [ebp - 0xa8]
lea eax, [ebp - 0xb4]
mov cl, 4
call fcn.0040a460
lea edx, [ebp - 0xb4]
lea eax, [ebp - 0xbc]
call fcn.0040a438
lea eax, [ebp - 0xa8]
mov edx, dword [0x6f5cac]
mov dl, byte [edx]
mov byte [eax + 1], dl
mov byte [eax], 1
lea edx, [ebp - 0xa8]
lea eax, [ebp - 0xbc]
mov cl, 5
call fcn.0040a460
lea edx, [ebp - 0xbc]
lea eax, [ebp - 0xc4]
call fcn.0040a438
lea eax, [ebp - 0xa8]
mov edx, dword [0x6f5b90]
mov dl, byte [edx]
mov byte [eax + 1], dl
mov byte [eax], 1
lea edx, [ebp - 0xa8]
lea eax, [ebp - 0xc4]
mov cl, 6
call fcn.0040a460
lea edx, [ebp - 0xc4]
lea eax, [ebp - 0xcc]
call fcn.0040a438
lea eax, [ebp - 0xa8]
mov edx, dword [0x6f5bf8]
mov dl, byte [edx]
mov byte [eax + 1], dl
mov byte [eax], 1
lea edx, [ebp - 0xa8]
lea eax, [ebp - 0xcc]
mov cl, 7
call fcn.0040a460
lea edx, [ebp - 0xcc]
lea eax, [ebp - 0xd8]
call fcn.0040a438
mov edx, 0x5f0fec
lea eax, [ebp - 0xd8]
mov cl, 8
call fcn.0040a460
lea edx, [ebp - 0xd8]
lea eax, [ebp - 0xe4]
call fcn.0040a438
lea eax, [ebp - 0xa8]
mov edx, dword [0x6f5d24]
mov dl, byte [edx]
mov byte [eax + 1], dl
mov byte [eax], 1
lea edx, [ebp - 0xa8]
lea eax, [ebp - 0xe4]
mov cl, 9
call fcn.0040a460
lea edx, [ebp - 0xe4]
lea eax, [ebp - 0xf0]
call fcn.0040a438
lea eax, [ebp - 0xa8]
mov edx, dword [0x6f5b78]
mov dl, byte [edx]
mov byte [eax + 1], dl
mov byte [eax], 1
lea edx, [ebp - 0xa8]
lea eax, [ebp - 0xf0]
mov cl, 0xa
call fcn.0040a460
lea edx, [ebp - 0xf0]
lea eax, [ebp - 0xfc]
call fcn.0040a438
lea eax, [ebp - 0xa8]
mov edx, dword [0x6f5b78]
mov dl, byte [edx]
mov byte [eax + 1], dl
mov byte [eax], 1
lea edx, [ebp - 0xa8]
lea eax, [ebp - 0xfc]
mov cl, 0xb
call fcn.0040a460
lea edx, [ebp - 0xfc]
lea eax, [ebp - 0x2c]
call fcn.0040adc4
lea eax, [ebp - 0x34]
mov edx, 0x5f0ffc
call fcn.0040a1dc
lea eax, [ebp - 0x34]
mov edx, 0x5f1020
call fcn.0040a1dc
jmp 0x5ef357
lea eax, [ebp - 0x34]
mov edx, 0x5f1054
call fcn.0040a1dc
lea eax, [ebp - 0x34]
mov edx, dword [ebp - 0x2c]
call fcn.0040a1dc
lea eax, [ebp - 0x34]
mov edx, dword [ebp - 0x30]
call fcn.0040a1dc
mov eax, dword [ebp - 0x54]
sub eax, dword [ebp - 0x4c]
cmp eax, dword [ebp - 0x68]
jne 0x5ef30b
lea eax, [ebp - 0x34]
mov edx, 0x5f1090
call fcn.0040a1dc
lea eax, [ebp - 0x28]
mov edx, dword [ebp - 0x30]
call fcn.0040a1dc
lea eax, [ebp - 0x2c]
mov edx, dword [ebp - 0x28]
call fcn.0040a1dc
lea eax, [ebp - 0x30]
mov edx, dword [ebp - 0x30]
call fcn.0040a1dc
lea eax, [ebp - 0x28]
mov edx, dword [ebp - 0x34]
call fcn.0040a1dc
lea eax, [ebp - 0x30]
mov edx, dword [ebp - 0x28]
call fcn.0040a1dc
jmp 0x5ef357
lea eax, [ebp - 0x30]
mov edx, dword [ebp - 0x34]
call fcn.0040a1dc
lea eax, [ebp - 0x34]
mov edx, dword [ebp - 0x2c]
call fcn.0040a1dc
lea eax, [ebp - 0x28]
push eax
xor ecx, ecx
mov edx, 1
mov eax, dword [ebp - 0x28]
call fcn.0040b018
lea eax, [ebp - 0x30]
mov edx, dword [ebp - 0x2c]
call fcn.0040a1dc
lea eax, [ebp - 0x28]
mov edx, dword [ebp - 0x2c]
call fcn.0040a1dc
lea eax, [ebp - 0x34]
mov edx, 0x5f10c0
call fcn.0040a1dc
lea eax, [ebp - 0x28]
push eax
mov ecx, 3
mov edx, 1
mov eax, dword [ebp - 0x34]
call fcn.0040b018
lea eax, [ebp - 0x28]
push eax
xor ecx, ecx
mov edx, 1
mov eax, dword [ebp - 0x28]
call fcn.0040b018
lea eax, [ebp - 0x28]
mov edx, dword [ebp - 0x28]
call fcn.0040a1dc
lea eax, [ebp - 0x28]
mov edx, dword [ebp - 0x2c]
call fcn.0040a1dc
mov eax, dword [ebp - 0x24]
cmp dword [eax + 0x10], 0
jne 0x5f025e
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x50], eax
mov eax, dword [0x6f5858]
mov edx, dword [0x6f5850]
call fcn.0040afe0
jne 0x5ef3c4
imul eax, dword [ebp - 0x48], 0x4c
mov dword [ebp - 0x4c], eax
jmp 0x5ef3da
mov eax, dword [ebp - 0x78]
sub eax, 0xf7
mov dword [ebp - 0x6c], eax
lea eax, [ebp - 0x28]
mov edx, dword [ebp - 0x28]
call fcn.0040a1dc
lea eax, [ebp - 0x28]
mov edx, dword [ebp - 0x2c]
call fcn.0040a1dc
xor eax, eax
mov dword [ebp - 0x70], eax
lea eax, [ebp - 0x28]
push eax
mov ecx, 2
mov edx, 1
mov eax, dword [ebp - 0x30]
call fcn.0040b018
xor eax, eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 4
jge 0x5ef463
inc dword [ebp - 0x58]
mov eax, dword [ebp - 0x60]
imul dword [ebp - 0x44]
mov dword [ebp - 0x40], eax
mov eax, dword [0x6f585c]
add dword [0x6f5860], eax
mov eax, dword [0x6f585c]
imul dword [0x6f585c]
mov dword [0x6f5864], eax
mov eax, dword [0x6f585c]
add dword [0x6f585c], eax
imul eax, dword [0x6f585c], 0xa5
mov dword [0x6f5860], eax
imul eax, dword [0x6f5864], 0xd6
mov dword [0x6f5864], eax
jmp 0x5ef463
inc dword [ebp - 0x70]
cmp dword [ebp - 0x70], 6
jne 0x5ef3ea
lea eax, [ebp - 0x28]
push eax
mov ecx, 2
mov edx, 1
mov eax, dword [ebp - 0x30]
call fcn.0040b018
mov eax, dword [0x6f585c]
add dword [0x6f5860], eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x38]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x64]
add eax, dword [ebp - 0x44]
mov edx, dword [ebp - 0x50]
add edx, dword [ebp - 0x64]
cmp eax, edx
jge 0x5ef55f
lea eax, [ebp - 0x28]
mov edx, dword [ebp - 0x2c]
call fcn.0040a1dc
xor eax, eax
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0x44]
add eax, 0xd4
mov dword [ebp - 0x78], eax
mov eax, dword [ebp - 0x54]
add eax, 0x43
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x6c]
sub eax, dword [ebp - 0x64]
mov dword [ebp - 0x48], eax
imul eax, dword [ebp - 0x60], 0x64
mov dword [ebp - 0x38], eax
mov eax, 0x98
sub eax, dword [0x6f5860]
mov dword [0x6f5864], eax
sub dword [0x6f585c], 0xc8
inc dword [ebp - 0x70]
cmp dword [ebp - 0x70], 0xf
jne 0x5ef4be
xor eax, eax
mov dword [ebp - 0x74], eax
mov eax, dword [0x6f5860]
mov dword [0x6f585c], eax
mov eax, dword [0x6f5864]
sub eax, 0xee
mov dword [0x6f5860], eax
mov eax, dword [0x6f5860]
sub eax, 0x84
mov dword [0x6f5864], eax
mov eax, dword [0x6f585c]
sub eax, dword [0x6f5864]
mov dword [0x6f5864], eax
sub dword [0x6f585c], 0x18
mov eax, dword [0x6f5864]
add eax, 0x48
mov dword [0x6f5860], eax
inc dword [ebp - 0x74]
cmp dword [ebp - 0x74], 0xb
jne 0x5ef50a
add dword [0x6f585c], 3
lea eax, [ebp - 0x28]
push eax
mov ecx, 3
mov edx, 1
mov eax, dword [ebp - 0x34]
call fcn.0040b018
lea eax, [ebp - 0x28]
push eax
mov ecx, 1
mov edx, 1
mov eax, dword [ebp - 0x2c]
call fcn.0040b018
xor eax, eax
mov dword [0x6f5864], eax
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x5c]
push eax
lea ecx, [ebp - 0x4c]
mov edx, 0x6f5864
lea eax, [ebp - 0x54]
call fcn.005ee030
lea eax, [ebp - 0x28]
mov edx, 0x5f10f8
call fcn.0040a1dc
cmp dword [ebp - 0x18], 0
jle 0x5efcda
mov eax, dword [ebp - 0x58]
add eax, 0x9b
mov dword [ebp - 0x54], eax
lea eax, [ebp - 0x28]
push eax
mov ecx, 1
mov edx, 1
mov eax, dword [ebp - 0x2c]
call fcn.0040b018
mov eax, dword [ebp - 0x50]
sub eax, 0xaa
mov dword [ebp - 0x70], eax
imul eax, dword [ebp - 0x48], 0xd8
mov dword [ebp - 0x60], eax
imul eax, dword [ebp - 0x4c], 0xd5
mov dword [ebp - 0x64], eax
mov eax, dword [ebp - 0x44]
sub eax, 0x70
mov dword [ebp - 0x6c], eax
push 4
push 0x1000
mov eax, dword [ebp - 0x18]
push eax
mov eax, dword [ebp - 0x24]
mov eax, dword [eax + 0xc]
add eax, dword [ebp - 0x1c]
push eax
call fcn.00525ff0
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x3c]
sub eax, dword [ebp - 0x60]
cmp eax, dword [ebp - 0x64]
jne 0x5ef649
lea eax, [ebp - 0x28]
mov edx, dword [ebp - 0x30]
call fcn.0040a1dc
jmp 0x5ef743
mov eax, dword [ebp - 0x64]
sub eax, dword [ebp - 0x60]
cmp eax, 0xe7
jge 0x5ef68d
mov eax, dword [ebp - 0x64]
imul dword [ebp - 0x7c]
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0x58]
add eax, 0xa8
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x60]
add eax, dword [ebp - 0x40]
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x78]
sub eax, 0x2f
mov dword [ebp - 0x5c], eax
lea eax, [ebp - 0x34]
mov edx, dword [ebp - 0x34]
call fcn.0040a1dc
xor eax, eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0
jge 0x5ef6e9
inc dword [ebp - 0x3c]
lea eax, [ebp - 0x28]
mov edx, dword [ebp - 0x34]
call fcn.0040a1dc
lea eax, [ebp - 0x2c]
mov edx, 0x5f1134
call fcn.0040a1dc
lea eax, [ebp - 0x30]
mov edx, dword [ebp - 0x34]
call fcn.0040a1dc
lea eax, [ebp - 0x2c]
mov edx, dword [ebp - 0x2c]
call fcn.0040a1dc
lea eax, [ebp - 0x30]
mov edx, dword [ebp - 0x28]
call fcn.0040a1dc
lea eax, [ebp - 0x2c]
mov edx, 0x5f115c
call fcn.0040a1dc
jmp 0x5ef6e9
mov eax, dword [ebp - 0x70]
add eax, dword [ebp - 0x60]
cmp eax, dword [ebp - 0x60]
jne 0x5ef738
lea eax, [ebp - 0x34]
mov edx, 0x5f11a4
call fcn.0040a1dc
lea eax, [ebp - 0x28]
mov edx, dword [ebp - 0x30]
call fcn.0040a1dc
lea eax, [ebp - 0x2c]
mov edx, dword [ebp - 0x28]
call fcn.0040a1dc
lea eax, [ebp - 0x30]
mov edx, dword [ebp - 0x30]
call fcn.0040a1dc
lea eax, [ebp - 0x28]
mov edx, dword [ebp - 0x34]
call fcn.0040a1dc
lea eax, [ebp - 0x2c]
mov edx, dword [ebp - 0x2c]
call fcn.0040a1dc
lea eax, [ebp - 0x34]
mov edx, dword [ebp - 0x28]
call fcn.0040a1dc
lea eax, [ebp - 0x28]
push eax
mov ecx, 2
mov edx, 1
mov eax, dword [ebp - 0x30]
call fcn.0040b018
lea eax, [ebp - 0x2c]
mov edx, dword [ebp - 0x2c]
call fcn.0040a1dc
lea eax, [ebp - 0x34]
mov edx, dword [ebp - 0x28]
call fcn.0040a1dc
lea eax, [ebp - 0x28]
mov edx, dword [ebp - 0x34]
call fcn.0040a1dc
lea eax, [ebp - 0x2c]
push eax
mov ecx, 2
mov edx, 1
mov eax, dword [ebp - 0x30]
call fcn.0040b018
cmp dword [ebp - 0x20], 0
jne 0x5ef917
mov eax, dword [0x6f5854]
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0
je 0x5ef7bf
mov eax, dword [ebp - 0x88]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0x98
jle 0x5ef7da
mov eax, dword [0x6f5864]
mov dword [0x6f5860], eax
jmp 0x5ef8a3
mov eax, dword [0x6f5860]
sub eax, dword [0x6f585c]
cmp eax, dword [0x6f5860]
jge 0x5ef831
mov eax, dword [ebp - 0x7c]
add eax, 0xb4
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x5c]
sub eax, 0xc2
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x3c]
add eax, dword [ebp - 0x38]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x78]
imul dword [ebp - 0x44]
mov dword [ebp - 0x54], eax
mov eax, dword [0x6f585c]
add eax, dword [0x6f5860]
mov dword [0x6f5864], eax
imul eax, dword [ebp - 0x60], 0x9a
mov dword [ebp - 0x70], eax
jmp 0x5ef877
mov eax, dword [0x6f5860]
sub dword [0x6f5860], eax
sub dword [0x6f5864], 0x2e
sub dword [0x6f585c], 0xc5
mov eax, dword [0x6f5860]
mov dword [0x6f585c], eax
mov eax, dword [0x6f585c]
imul eax, dword [0x6f5860]
mov dword [0x6f5860], eax
mov eax, dword [0x6f5860]
add eax, 0xef
mov dword [0x6f5864], eax
imul eax, dword [0x6f5864], 0x7a
mov dword [0x6f585c], eax
lea eax, [ebp - 0x28]
mov edx, dword [ebp - 0x28]
call fcn.0040a1dc
mov eax, dword [0x6f5864]
mov dword [0x6f5860], eax
lea eax, [ebp - 0x28]
mov edx, dword [ebp - 0x30]
call fcn.0040a1dc
mov eax, dword [0x6f585c]
mov dword [0x6f5860], eax
xor eax, eax
mov dword [0x6f5864], eax
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x60]
push eax
lea ecx, [ebp - 0x54]
mov edx, 0x6f585c
lea eax, [ebp - 0x38]
call fcn.005ee030
xor eax, eax
mov dword [0x6f5860], eax
push 0x6f5864
push 0x6f585c
lea eax, [ebp - 0x4c]
push eax
mov ecx, 0x6f5864
mov edx, 0x6f585c
lea eax, [ebp - 0x44]
call fcn.005e77ac
lea eax, [ebp - 0x28]
mov edx, dword [ebp - 0x30]
call fcn.0040a1dc
mov eax, dword [0x6f5860]
sub eax, dword [0x6f5864]
mov dword [0x6f5864], eax
mov byte [ebp - 0xd], 0
jmp 0x5f0fb1
mov eax, dword [ebp - 0x24]
mov eax, dword [eax + 0xc]
add eax, dword [ebp - 0x1c]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x7c]
add eax, 0x45
mov dword [ebp - 0x54], eax
lea eax, [ebp - 0x28]
mov edx, dword [ebp - 0x30]
call fcn.0040a1dc
mov eax, dword [0x6f5850]
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 0
je 0x5ef95c
mov eax, dword [ebp - 0x8c]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 0xf8
jle 0x5ef98b
mov eax, dword [ebp - 0x48]
add eax, 0xdb
mov dword [ebp - 0x5c], eax
lea eax, [ebp - 0x28]
push eax
xor ecx, ecx
mov edx, 1
mov eax, dword [ebp - 0x28]
call fcn.0040b018
jmp 0x5efa2a
mov eax, dword [ebp - 0x68]
add eax, dword [ebp - 0x40]
cmp eax, dword [ebp - 0x40]
jle 0x5ef9dd
mov eax, dword [ebp - 0x6c]
add eax, dword [ebp - 0x68]
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x4c]
sub eax, 0x5d
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x44]
add eax, 0x41
mov dword [ebp - 0x78], eax
mov eax, dword [ebp - 0x60]
add eax, dword [ebp - 0x64]
mov dword [ebp - 0x58], eax
lea eax, [ebp - 0x34]
mov edx, dword [ebp - 0x2c]
call fcn.0040a1dc
lea eax, [ebp - 0x2c]
push eax
mov ecx, 2
mov edx, 1
mov eax, dword [ebp - 0x30]
call fcn.0040b018
jmp 0x5efa2a
lea eax, [ebp - 0x34]
mov edx, dword [ebp - 0x2c]
call fcn.0040a1dc
lea eax, [ebp - 0x2c]
mov edx, dword [ebp - 0x30]
call fcn.0040a1dc
lea eax, [ebp - 0x30]
mov edx, dword [ebp - 0x2c]
call fcn.0040a1dc
lea eax, [ebp - 0x34]
mov edx, dword [ebp - 0x34]
call fcn.0040a1dc
lea eax, [ebp - 0x30]
mov edx, dword [ebp - 0x2c]
call fcn.0040a1dc
lea eax, [ebp - 0x34]
push eax
mov ecx, 3
mov edx, 1
mov eax, dword [ebp - 0x34]
call fcn.0040b018
mov eax, 0xe2
sub eax, dword [ebp - 0x68]
cmp eax, 0xf5
jge 0x5efa44
lea eax, [ebp - 0x28]
mov edx, dword [ebp - 0x34]
call fcn.0040a1dc
mov eax, dword [ebp - 0x74]
add eax, dword [ebp - 0x68]
cmp eax, dword [ebp - 0x68]
jne 0x5efa5a
lea eax, [ebp - 0x28]
mov edx, dword [ebp - 0x2c]
call fcn.0040a1dc
mov eax, dword [ebp - 0x64]
add eax, 0xb9
cmp eax, dword [ebp - 0x70]
jge 0x5efa76
lea eax, [ebp - 0x28]
mov edx, 0x5f11cc
call fcn.0040a1dc
jmp 0x5eface
mov eax, dword [ebp - 0x78]
sub eax, dword [ebp - 0x3c]
cmp eax, dword [ebp - 0x78]
jge 0x5eface
lea eax, [ebp - 0x28]
mov edx, dword [ebp - 0x2c]
call fcn.0040a1dc
lea eax, [ebp - 0x30]
push eax
mov ecx, 2
mov edx, 1
mov eax, dword [ebp - 0x30]
call fcn.0040b018
lea eax, [ebp - 0x34]
mov edx, dword [ebp - 0x28]
call fcn.0040a1dc
lea eax, [ebp - 0x30]
mov edx, dword [ebp - 0x2c]
call fcn.0040a1dc
lea eax, [ebp - 0x34]
mov edx, dword [ebp - 0x34]
call fcn.0040a1dc
lea eax, [ebp - 0x28]
mov edx, dword [ebp - 0x2c]
call fcn.0040a1dc
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp - 0x20]
mov dword [eax + 8], edx
xor eax, eax
mov dword [ebp - 0x74], eax
xor eax, eax
mov dword [ebp - 0x44], eax
lea ecx, [ebp - 0x54]
lea edx, [ebp - 0x68]
lea eax, [ebp - 0x74]
call fcn.005d2e1c
lea eax, [ebp - 0x28]
mov edx, dword [ebp - 0x2c]
call fcn.0040a1dc
xor eax, eax
mov dword [ebp - 0x64], eax
mov eax, dword [ebp - 0x6c]
sub eax, dword [ebp - 0x4c]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x3c]
add eax, 0x44
mov dword [ebp - 0x78], eax
mov eax, dword [ebp - 0x58]
sub eax, 0x69
mov dword [ebp - 0x5c], eax
mov eax, dword [0x6f5860]
sub eax, 0xf5
mov dword [0x6f5864], eax
add dword [0x6f585c], 0x26
inc dword [ebp - 0x64]
cmp dword [ebp - 0x64], 0xa
jne 0x5efaff
lea eax, [ebp - 0x28]
mov edx, dword [ebp - 0x28]
call fcn.0040a1dc
inc dword [ebp - 0x74]
cmp dword [ebp - 0x74], 9
jne 0x5efadc
mov eax, 0xa4
sub eax, dword [0x6f5864]
mov dword [0x6f5864], eax
mov eax, dword [0x6f5864]
add eax, 0xd7
cmp eax, dword [0x6f5860]
jge 0x5efb80
lea eax, [ebp - 0x28]
mov edx, dword [ebp - 0x34]
call fcn.0040a1dc
mov eax, dword [0x6f585c]
mov dword [0x6f5860], eax
lea eax, [ebp - 0x28]
mov edx, dword [ebp - 0x30]
call fcn.0040a1dc
mov eax, dword [0x6f5864]
mov dword [0x6f5864], eax
mov eax, dword [0x6f5864]
mov dword [0x6f585c], eax
mov eax, dword [0x6f585c]
cmp eax, dword [0x6f5864]
jle 0x5efc21
mov eax, dword [0x6f5864]
add eax, 0xe0
cmp eax, dword [0x6f5860]
jge 0x5efc21
imul eax, dword [0x6f5864], 0x6f
mov dword [0x6f585c], eax
mov eax, dword [0x6f5860]
sub eax, 0x9f
mov dword [0x6f585c], eax
mov eax, dword [0x6f5864]
imul eax, dword [0x6f5860]
mov dword [0x6f5860], eax
mov eax, dword [0x6f585c]
imul dword [0x6f5860]
mov dword [0x6f5864], eax
mov eax, dword [0x6f5860]
sub eax, 0x2f
mov dword [0x6f585c], eax
mov eax, dword [0x6f585c]
sub eax, dword [0x6f585c]
mov dword [0x6f5860], eax
mov edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x20]
xor ecx, ecx
call fcn.004077b8
mov eax, dword [ebp - 0x7c]
add eax, 0xe7
mov dword [ebp - 0x4c], eax
lea eax, [ebp - 0x28]
mov edx, dword [ebp - 0x34]
call fcn.0040a1dc
xor eax, eax
mov dword [ebp - 0x74], eax
lea eax, [ebp - 0x28]
mov edx, dword [ebp - 0x28]
call fcn.0040a1dc
mov eax, dword [ebp - 0x38]
add eax, 0xfd
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x64]
add eax, dword [ebp - 0x5c]
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0x60]
add eax, 0xfb
mov dword [ebp - 0x54], eax
mov eax, dword [0x6f5860]
imul eax, dword [0x6f5864]
mov dword [0x6f5864], eax
imul eax, dword [0x6f5864], 0x58
mov dword [0x6f585c], eax
sub dword [0x6f5860], 0x89
mov eax, dword [0x6f5864]
add eax, dword [0x6f5860]
mov dword [0x6f585c], eax
jmp 0x5efcb5
mov eax, dword [0x6f5860]
add dword [0x6f5864], eax
imul eax, dword [0x6f585c], 0xdb
mov dword [0x6f585c], eax
lea eax, [ebp - 0x28]
mov edx, dword [ebp - 0x30]
call fcn.0040a1dc
mov eax, dword [ebp - 0x78]
shl eax, 6
mov dword [ebp - 0x4c], eax
mov eax, dword [0x6f5a00]
mov al, byte [eax]
mov byte [ebp - 0x8d], al
mov al, byte [ebp - 0x8d]
add al, 0x9f
sub al, 0x1a
jae 0x5efd03
sub byte [ebp - 0x8d], 0x20
mov eax, dword [0x6f5b98]
mov al, byte [eax]
mov byte [ebp - 0x8e], al
mov al, byte [ebp - 0x8e]
add al, 0x9f
sub al, 0x1a
jae 0x5efd23
sub byte [ebp - 0x8e], 0x20
lea eax, [ebp - 0x104]
mov dl, byte [ebp - 0x8d]
mov ecx, 0
call fcn.0040a4d4
push dword [ebp - 0x104]
lea eax, [ebp - 0x108]
mov edx, dword [0x6f5bfc]
mov dl, byte [edx]
mov ecx, 0
call fcn.0040a4d4
push dword [ebp - 0x108]
lea eax, [ebp - 0x10c]
mov edx, dword [0x6f5cb0]
mov dl, byte [edx]
mov ecx, 0
call fcn.0040a4d4
push dword [ebp - 0x10c]
lea eax, [ebp - 0x110]
mov edx, dword [0x6f5d24]
mov dl, byte [edx]
mov ecx, 0
call fcn.0040a4d4
push dword [ebp - 0x110]
lea eax, [ebp - 0x114]
mov edx, dword [0x6f5990]
mov dl, byte [edx]
mov ecx, 0
call fcn.0040a4d4
push dword [ebp - 0x114]
lea eax, [ebp - 0x118]
mov edx, dword [0x6f5a00]
mov dl, byte [edx]
mov ecx, 0
call fcn.0040a4d4
push dword [ebp - 0x118]
lea eax, [ebp - 0x11c]
mov edx, dword [0x6f5e20]
mov dl, byte [edx]
mov ecx, 0
call fcn.0040a4d4
push dword [ebp - 0x11c]
lea eax, [ebp - 0x120]
mov dl, byte [ebp - 0x8e]
mov ecx, 0
call fcn.0040a4d4
push dword [ebp - 0x120]
lea eax, [ebp - 0x124]
mov edx, dword [0x6f5990]
mov dl, byte [edx]
mov ecx, 0
call fcn.0040a4d4
push dword [ebp - 0x124]
lea eax, [ebp - 0x128]
mov edx, dword [0x6f5d24]
mov dl, byte [edx]
mov ecx, 0
call fcn.0040a4d4
push dword [ebp - 0x128]
lea eax, [ebp - 0x12c]
mov edx, dword [0x6f59f4]
mov dl, byte [edx]
mov ecx, 0
call fcn.0040a4d4
push dword [ebp - 0x12c]
lea eax, [ebp - 0x130]
mov edx, dword [0x6f5b98]
mov dl, byte [edx]
mov ecx, 0
call fcn.0040a4d4
push dword [ebp - 0x130]
lea eax, [ebp - 0x134]
mov edx, dword [0x6f5e20]
mov dl, byte [edx]
mov ecx, 0
call fcn.0040a4d4
push dword [ebp - 0x134]
push 0x5f1200
lea eax, [ebp - 0x138]
mov edx, dword [0x6f5d24]
mov dl, byte [edx]
mov ecx, 0
call fcn.0040a4d4
push dword [ebp - 0x138]
lea eax, [ebp - 0x13c]
mov edx, dword [0x6f5b78]
mov dl, byte [edx]
mov ecx, 0
call fcn.0040a4d4
push dword [ebp - 0x13c]
lea eax, [ebp - 0x140]
mov edx, dword [0x6f5b78]
mov dl, byte [edx]
mov ecx, 0
call fcn.0040a4d4
push dword [ebp - 0x140]
lea eax, [ebp - 0x100]
mov edx, 0x11
call fcn.0040a684
mov edx, dword [ebp - 0x100]
lea eax, [ebp - 0x28]
call fcn.0040ad14
xor eax, eax
mov dword [0x6f5860], eax
lea eax, [ebp - 0x64]
push eax
push 0x6f5860
push 0x6f5860
lea ecx, [ebp - 0x70]
lea edx, [ebp - 0x58]
mov eax, 0x6f585c
call fcn.005ec8cc
xor eax, eax
mov dword [ebp - 0x48], eax
lea ecx, [ebp - 0x48]
mov edx, 0x6f585c
lea eax, [ebp - 0x68]
call fcn.005d2e1c
mov eax, dword [0x6f5b64]
mov al, byte [eax]
mov byte [ebp - 0x8f], al
mov al, byte [ebp - 0x8f]
add al, 0x9f
sub al, 0x1a
jae 0x5eff7c
sub byte [ebp - 0x8f], 0x20
mov eax, dword [0x6f5e20]
mov al, byte [eax]
mov byte [ebp - 0x90], al
mov al, byte [ebp - 0x90]
add al, 0x9f
sub al, 0x1a
jae 0x5eff9c
sub byte [ebp - 0x90], 0x20
mov eax, dword [0x6f5e20]
mov al, byte [eax]
mov byte [ebp - 0x91], al
mov al, byte [ebp - 0x91]
add al, 0x9f
sub al, 0x1a
jae 0x5effbc
sub byte [ebp - 0x91], 0x20
mov eax, dword [0x6f59f4]
mov al, byte [eax]
mov byte [ebp - 0x92], al
mov al, byte [ebp - 0x92]
add al, 0x9f
sub al, 0x1a
jae 0x5effdc
sub byte [ebp - 0x92], 0x20
lea eax, [ebp - 0x148]
mov dl, byte [ebp - 0x8f]
mov ecx, 0
call fcn.0040a4d4
push dword [ebp - 0x148]
lea eax, [ebp - 0x14c]
mov edx, dword [0x6f5c84]
mov dl, byte [edx]
mov ecx, 0
call fcn.0040a4d4
push dword [ebp - 0x14c]
lea eax, [ebp - 0x150]
mov edx, dword [0x6f59f4]
mov dl, byte [edx]
mov ecx, 0
call fcn.0040a4d4
push dword [ebp - 0x150]
lea eax, [ebp - 0x154]
mov edx, dword [0x6f5a48]
mov dl, byte [edx]
mov ecx, 0
call fcn.0040a4d4
push dword [ebp - 0x154]
lea eax, [ebp - 0x158]
mov edx, dword [0x6f5bc4]
mov dl, byte [edx]
mov ecx, 0
call fcn.0040a4d4
push dword [ebp - 0x158]
lea eax, [ebp - 0x15c]
mov dl, byte [ebp - 0x90]
mov ecx, 0
call fcn.0040a4d4
push dword [ebp - 0x15c]
lea eax, [ebp - 0x160]
mov edx, dword [0x6f59f4]
mov dl, byte [edx]
mov ecx, 0
call fcn.0040a4d4
push dword [ebp - 0x160]
lea eax, [ebp - 0x164]
mov edx, dword [0x6f5a48]
mov dl, byte [edx]
mov ecx, 0
call fcn.0040a4d4
push dword [ebp - 0x164]
lea eax, [ebp - 0x168]
mov edx, dword [0x6f5c48]
mov dl, byte [edx]
mov ecx, 0
call fcn.0040a4d4
push dword [ebp - 0x168]
lea eax, [ebp - 0x16c]
mov edx, dword [0x6f5bfc]
mov dl, byte [edx]
mov ecx, 0
call fcn.0040a4d4
push dword [ebp - 0x16c]
lea eax, [ebp - 0x170]
mov edx, dword [0x6f5b98]
mov dl, byte [edx]
mov ecx, 0
call fcn.0040a4d4
push dword [ebp - 0x170]
lea eax, [ebp - 0x174]
mov edx, dword [0x6f59f4]
mov dl, byte [edx]
mov ecx, 0
call fcn.0040a4d4
push dword [ebp - 0x174]
lea eax, [ebp - 0x178]
mov dl, byte [ebp - 0x91]
mov ecx, 0
call fcn.0040a4d4
push dword [ebp - 0x178]
lea eax, [ebp - 0x17c]
mov edx, dword [0x6f5b90]
mov dl, byte [edx]
mov ecx, 0
call fcn.0040a4d4
push dword [ebp - 0x17c]
lea eax, [ebp - 0x180]
mov edx, dword [0x6f5c18]
mov dl, byte [edx]
mov ecx, 0
call fcn.0040a4d4
push dword [ebp - 0x180]
lea eax, [ebp - 0x184]
mov edx, dword [0x6f5b90]
mov dl, byte [edx]
mov ecx, 0
call fcn.0040a4d4
push dword [ebp - 0x184]
lea eax, [ebp - 0x188]
mov edx, dword [0x6f5c84]
mov dl, byte [edx]
mov ecx, 0
call fcn.0040a4d4
push dword [ebp - 0x188]
lea eax, [ebp - 0x18c]
mov edx, dword [0x6f5e20]
mov dl, byte [edx]
mov ecx, 0
call fcn.0040a4d4
push dword [ebp - 0x18c]
lea eax, [ebp - 0x190]
mov dl, byte [ebp - 0x92]
mov ecx, 0
call fcn.0040a4d4
push dword [ebp - 0x190]
lea eax, [ebp - 0x194]
mov edx, dword [0x6f5c54]
mov dl, byte [edx]
mov ecx, 0
call fcn.0040a4d4
push dword [ebp - 0x194]
lea eax, [ebp - 0x144]
mov edx, 0x14
call fcn.0040a684
mov edx, dword [ebp - 0x144]
lea eax, [ebp - 0x28]
call fcn.0040ad14
lea eax, [ebp - 0x28]
mov edx, dword [ebp - 0x28]
call fcn.0040a1dc
add dword [ebp - 0x24], 0x28
jmp 0x5f0f44
mov eax, dword [ebp - 0x54]
sub eax, 0x1d
mov dword [ebp - 0x6c], eax
imul eax, dword [ebp - 0x4c], 0xaf
mov dword [ebp - 0x5c], eax
imul eax, dword [ebp - 0x3c], 0xea
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x50]
add eax, 0x99
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x70]
add eax, dword [ebp - 0x74]
mov dword [ebp - 0x78], eax
push 4
push 0x1000
mov eax, dword [ebp - 0x24]
mov eax, dword [eax + 0x10]
push eax
mov eax, dword [ebp - 0x24]
mov eax, dword [eax + 0xc]
add eax, dword [ebp - 0x1c]
push eax
call fcn.00525ff0
mov dword [ebp - 0x20], eax
mov eax, dword [0x6f5860]
sub eax, dword [0x6f585c]
cmp eax, dword [0x6f5860]
jge 0x5f02d5
lea eax, [ebp - 0x28]
mov edx, dword [ebp - 0x34]
call fcn.0040a1dc
jmp 0x5f02fd
lea eax, [ebp - 0x28]
mov edx, dword [ebp - 0x34]
call fcn.0040a1dc
lea eax, [ebp - 0x28]
push eax
mov ecx, 1
mov edx, 1
mov eax, dword [ebp - 0x2c]
call fcn.0040b018
add dword [0x6f5860], 0x3f
mov eax, dword [0x6f585c]
add eax, dword [0x6f5860]
cmp eax, dword [0x6f5860]
jne 0x5f034e
lea eax, [ebp - 0x28]
push eax
mov ecx, 2
mov edx, 1
mov eax, dword [ebp - 0x30]
call fcn.0040b018
xor eax, eax
mov dword [0x6f5860], eax
push 0x6f5864
lea eax, [ebp - 0x78]
push eax
push 0x6f5864
lea ecx, [ebp - 0x40]
lea edx, [ebp - 0x78]
lea eax, [ebp - 0x68]
call fcn.005e957c
jmp 0x5f0425
imul eax, dword [0x6f585c], 0xaa
mov dword [0x6f5864], eax
mov eax, dword [0x6f5864]
call fcn.00407258
mov dword [0x6f5864], eax
mov eax, dword [0x6f5864]
call fcn.00407258
mov dword [0x6f5864], eax
mov eax, dword [0x6f5864]
cmp eax, dword [0x6f5864]
jge 0x5f03da
mov eax, dword [0x6f5864]
sub eax, 0x69
mov dword [0x6f585c], eax
imul eax, dword [0x6f585c], 0x66
mov dword [0x6f5860], eax
mov eax, dword [0x6f5860]
imul eax, dword [0x6f5864]
mov dword [0x6f5864], eax
imul eax, dword [0x6f5864], 0xfa
mov dword [0x6f585c], eax
sub dword [0x6f5860], 0x2a
mov eax, dword [0x6f585c]
sub eax, dword [0x6f5864]
mov dword [0x6f5860], eax
jmp 0x5f0425
mov eax, dword [0x6f585c]
sub eax, 0x24
mov dword [0x6f5864], eax
mov eax, dword [0x6f5864]
add eax, 0x53
mov dword [0x6f5860], eax
add dword [0x6f5860], 0xe9
mov eax, dword [0x6f585c]
add eax, dword [0x6f585c]
mov dword [0x6f5864], eax
mov eax, dword [0x6f5860]
sub eax, dword [0x6f5860]
mov dword [0x6f585c], eax
add dword [0x6f5860], 0x14
mov eax, dword [0x6f5864]
mov dword [0x6f5864], eax
mov eax, dword [0x6f5864]
cmp eax, dword [0x6f5864]
jle 0x5f0447
mov eax, dword [0x6f5860]
sub dword [0x6f585c], eax
mov eax, dword [0x6f585c]
imul dword [0x6f585c]
mov dword [0x6f5864], eax
lea eax, [ebp - 0x28]
mov edx, dword [ebp - 0x30]
call fcn.0040a1dc
xor eax, eax
mov dword [0x6f585c], eax
lea edx, [ebp - 0x40]
lea eax, [ebp - 0x6c]
call fcn.005c76ac
cmp dword [ebp - 0x20], 0
jne 0x5f084d
mov eax, dword [0x6f5860]
add eax, dword [0x6f5864]
mov edx, dword [0x6f585c]
add edx, dword [0x6f5860]
cmp eax, edx
jge 0x5f05fd
lea eax, [ebp - 0x28]
mov edx, dword [ebp - 0x2c]
call fcn.0040a1dc
mov eax, dword [0x6f5864]
call fcn.00407258
mov dword [0x6f5864], eax
mov eax, dword [0x6f585c]
call fcn.00407258
mov dword [0x6f585c], eax
mov eax, dword [0x6f585c]
cmp eax, dword [0x6f5864]
jle 0x5f0513
mov eax, 0x15
sub eax, dword [ebp - 0x64]
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x70]
add eax, dword [ebp - 0x7c]
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x68]
sub eax, dword [ebp - 0x54]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x60]
add eax, 0x1b
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x3c]
add eax, 0x57
mov dword [ebp - 0x6c], eax
imul eax, dword [0x6f585c], 0xd8
mov dword [0x6f585c], eax
jmp 0x5f056c
imul eax, dword [0x6f5864], 0xd1
mov dword [0x6f5864], eax
imul eax, dword [0x6f585c], 0x68
mov dword [0x6f585c], eax
mov eax, dword [0x6f5864]
imul dword [0x6f5864]
mov dword [0x6f5860], eax
mov eax, dword [0x6f585c]
sub eax, 0x95
mov dword [0x6f5864], eax
mov eax, dword [0x6f5864]
add eax, 0xc6
mov dword [0x6f585c], eax
mov eax, dword [0x6f5860]
add eax, dword [0x6f5864]
mov dword [0x6f585c], eax
lea eax, [ebp - 0x28]
push eax
mov ecx, 3
mov edx, 1
mov eax, dword [ebp - 0x34]
call fcn.0040b018
mov ecx, 1
mov edx, dword [ebp - 0x34]
mov eax, 0x5f1210
call fcn.0040b170
cmp eax, 6
je 0x5f06f3
mov eax, 0xaf
sub eax, dword [0x6f5864]
mov dword [0x6f585c], eax
mov eax, dword [0x6f585c]
sub eax, dword [0x6f585c]
mov dword [0x6f5860], eax
mov eax, dword [0x6f5860]
imul eax, dword [0x6f5864]
mov dword [0x6f5864], eax
mov eax, dword [0x6f5864]
add eax, 0xa5
mov dword [0x6f585c], eax
mov eax, dword [0x6f585c]
sub eax, dword [0x6f585c]
mov dword [0x6f5860], eax
mov eax, dword [0x6f585c]
sub dword [0x6f5864], eax
jmp 0x5f06f3
lea eax, [ebp - 0x28]
push eax
mov ecx, 3
mov edx, 1
mov eax, dword [ebp - 0x34]
call fcn.0040b018
mov eax, dword [0x6f5858]
mov edx, dword [0x6f5854]
call fcn.0040afe0
jne 0x5f066e
mov eax, dword [0x6f5864]
sub eax, 0x85
mov dword [0x6f585c], eax
mov eax, dword [0x6f585c]
sub dword [0x6f5860], eax
mov eax, dword [0x6f5860]
add eax, 0x18
mov dword [0x6f5864], eax
imul eax, dword [0x6f585c], 0x49
mov dword [0x6f585c], eax
imul eax, dword [0x6f5864], 0x79
mov dword [0x6f5860], eax
sub dword [0x6f5860], 0xaa
mov eax, dword [0x6f585c]
add eax, 0x69
mov dword [0x6f5864], eax
lea eax, [ebp - 0x28]
push eax
mov ecx, 3
mov edx, 1
mov eax, dword [ebp - 0x34]
call fcn.0040b018
mov eax, dword [0x6f5858]
mov edx, 0x5f1264
call fcn.0040afe0
jne 0x5f06f3
add dword [0x6f585c], 0xb9
mov eax, dword [0x6f5864]
sub eax, dword [0x6f5860]
mov dword [0x6f5860], eax
mov eax, dword [0x6f585c]
sub eax, dword [0x6f5864]
mov dword [0x6f5864], eax
sub dword [0x6f585c], 0x49
mov eax, dword [0x6f5864]
sub eax, dword [0x6f585c]
mov dword [0x6f5860], eax
mov eax, dword [0x6f585c]
imul dword [0x6f5860]
mov dword [0x6f5864], eax
lea eax, [ebp - 0x28]
mov edx, dword [ebp - 0x34]
call fcn.0040a1dc
add dword [0x6f5860], 0xc1
lea eax, [ebp - 0x28]
mov edx, dword [ebp - 0x2c]
call fcn.0040a1dc
add dword [0x6f5864], 0xa7
mov eax, dword [0x6f5860]
sub eax, dword [0x6f5864]
cmp eax, 0x73
jge 0x5f0742
lea eax, [ebp - 0x28]
push eax
xor ecx, ecx
mov edx, 1
mov eax, dword [ebp - 0x28]
call fcn.0040b018
jmp 0x5f074d
mov eax, dword [0x6f5860]
sub dword [0x6f5864], eax
mov byte [ebp - 0xd], 0
jmp 0x5f0fb1
mov eax, dword [ebp - 0x24]
mov eax, dword [eax + 0xc]
add eax, dword [ebp - 0x1c]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x70]
add eax, 0x10
mov dword [ebp - 0x54], eax
lea eax, [ebp - 0x28]
push eax
mov ecx, 2
mov edx, 1
mov eax, dword [ebp - 0x30]
call fcn.0040b018
mov eax, dword [0x6f5850]
mov edx, 0x5f12bc
call fcn.0040afe0
jne 0x5f0892
imul eax, dword [ebp - 0x78], 0x7d
mov dword [ebp - 0x50], eax
jmp 0x5f089d
mov eax, 0xef
sub eax, dword [ebp - 0x6c]
mov dword [ebp - 0x60], eax
xor eax, eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0xf
jge 0x5f0e13
inc dword [ebp - 0x40]
mov eax, dword [ebp - 0x54]
sub eax, dword [ebp - 0x68]
cmp eax, dword [ebp - 0x60]
jne 0x5f0ad7
mov eax, dword [ebp - 0x58]
add eax, 0xb2
mov dword [ebp - 0x68], eax
lea eax, [ebp - 0x28]
mov edx, dword [ebp - 0x34]
call fcn.0040a1dc
lea eax, [ebp - 0x2c]
mov edx, dword [ebp - 0x2c]
call fcn.0040a1dc
lea eax, [ebp - 0x28]
mov edx, dword [ebp - 0x34]
call fcn.0040a1dc
lea eax, [ebp - 0x30]
push eax
mov ecx, 3
mov edx, 1
mov eax, dword [ebp - 0x34]
call fcn.0040b018
mov eax, dword [0x6f5a00]
mov al, byte [eax]
mov byte [ebp - 0x93], al
mov al, byte [ebp - 0x93]
add al, 0x9f
sub al, 0x1a
jae 0x5f0920
sub byte [ebp - 0x93], 0x20
mov eax, dword [0x6f5ce8]
mov al, byte [eax]
mov byte [ebp - 0x94], al
mov al, byte [ebp - 0x94]
add al, 0x9f
sub al, 0x1a
jae 0x5f0940
sub byte [ebp - 0x94], 0x20
lea eax, [ebp - 0xa0]
mov edx, dword [0x6f5c54]
mov dl, byte [edx]
mov byte [eax + 1], dl
mov byte [eax], 1
lea edx, [ebp - 0xa0]
lea eax, [ebp - 0xa4]
call fcn.0040a438
lea eax, [ebp - 0xa8]
mov edx, dword [0x6f5a48]
mov dl, byte [edx]
mov byte [eax + 1], dl
mov byte [eax], 1
lea edx, [ebp - 0xa8]
lea eax, [ebp - 0xa4]
mov cl, 2
call fcn.0040a460
lea edx, [ebp - 0xa4]
lea eax, [ebp - 0x19c]
mov ecx, 0
call fcn.0040a558
push dword [ebp - 0x19c]
lea eax, [ebp - 0x1a0]
mov dl, byte [ebp - 0x93]
mov ecx, 0
call fcn.0040a4d4
push dword [ebp - 0x1a0]
lea eax, [ebp - 0x1a4]
mov dl, byte [ebp - 0x94]
mov ecx, 0
call fcn.0040a4d4
push dword [ebp - 0x1a4]
lea eax, [ebp - 0x1a8]
mov edx, dword [0x6f5b98]
mov dl, byte [edx]
mov ecx, 0
call fcn.0040a4d4
push dword [ebp - 0x1a8]
lea eax, [ebp - 0x1ac]
mov edx, dword [0x6f5ce8]
mov dl, byte [edx]
mov ecx, 0
call fcn.0040a4d4
push dword [ebp - 0x1ac]
lea eax, [ebp - 0x1b0]
mov edx, dword [0x6f5e20]
mov dl, byte [edx]
mov ecx, 0
call fcn.0040a4d4
push dword [ebp - 0x1b0]
lea eax, [ebp - 0x1b4]
mov edx, dword [0x6f5b90]
mov dl, byte [edx]
mov ecx, 0
call fcn.0040a4d4
push dword [ebp - 0x1b4]
push 0x5f1200
lea eax, [ebp - 0x1b8]
mov edx, dword [0x6f5d24]
mov dl, byte [edx]
mov ecx, 0
call fcn.0040a4d4
push dword [ebp - 0x1b8]
lea eax, [ebp - 0x1bc]
mov edx, dword [0x6f5b78]
mov dl, byte [edx]
mov ecx, 0
call fcn.0040a4d4
push dword [ebp - 0x1bc]
lea eax, [ebp - 0x1c0]
mov edx, dword [0x6f5b78]
mov dl, byte [edx]
mov ecx, 0
call fcn.0040a4d4
push dword [ebp - 0x1c0]
lea eax, [ebp - 0x198]
mov edx, 0xb
call fcn.0040a684
mov edx, dword [ebp - 0x198]
lea eax, [ebp - 0x28]
call fcn.0040ad14
jmp 0x5f0b24
lea eax, [ebp - 0x30]
mov edx, dword [ebp - 0x30]
call fcn.0040a1dc
lea eax, [ebp - 0x34]
mov edx, dword [ebp - 0x28]
call fcn.0040a1dc
lea eax, [ebp - 0x28]
mov edx, dword [ebp - 0x30]
call fcn.0040a1dc
lea eax, [ebp - 0x2c]
mov edx, dword [ebp - 0x28]
call fcn.0040a1dc
lea eax, [ebp - 0x34]
mov edx, dword [ebp - 0x2c]
call fcn.0040a1dc
lea eax, [ebp - 0x2c]
push eax
mov ecx, 2
mov edx, 1
mov eax, dword [ebp - 0x30]
call fcn.0040b018
mov eax, dword [ebp - 0x64]
cmp eax, dword [ebp - 0x70]
jle 0x5f0dbc
lea eax, [ebp - 0x34]
mov edx, dword [ebp - 0x34]
call fcn.0040a1dc
lea eax, [ebp - 0x28]
mov edx, dword [ebp - 0x2c]
call fcn.0040a1dc
lea eax, [ebp - 0x30]
push eax
mov ecx, 1
mov edx, 1
mov eax, dword [ebp - 0x2c]
call fcn.0040b018
lea eax, [ebp - 0xa0]
mov edx, dword [0x6f5ce8]
mov dl, byte [edx]
mov byte [eax + 1], dl
mov byte [eax], 1
lea edx, [ebp - 0xa0]
lea eax, [ebp - 0xa4]
call fcn.0040a438
lea eax, [ebp - 0xa8]
mov edx, dword [0x6f59f4]
mov dl, byte [edx]
mov byte [eax + 1], dl
mov byte [eax], 1
lea edx, [ebp - 0xa8]
lea eax, [ebp - 0xa4]
mov cl, 2
call fcn.0040a460
lea edx, [ebp - 0xa4]
lea eax, [ebp - 0xac]
call fcn.0040a438
lea eax, [ebp - 0xa8]
mov edx, dword [0x6f5a48]
mov dl, byte [edx]
mov byte [eax + 1], dl
mov byte [eax], 1
lea edx, [ebp - 0xa8]
lea eax, [ebp - 0xac]
mov cl, 3
call fcn.0040a460
lea edx, [ebp - 0xac]
lea eax, [ebp - 0xb4]
call fcn.0040a438
lea eax, [ebp - 0xa8]
mov edx, dword [0x6f5a9c]
mov dl, byte [edx]
mov byte [eax + 1], dl
mov byte [eax], 1
lea edx, [ebp - 0xa8]
lea eax, [ebp - 0xb4]
mov cl, 4
call fcn.0040a460
lea edx, [ebp - 0xb4]
lea eax, [ebp - 0xbc]
call fcn.0040a438
lea eax, [ebp - 0xa8]
mov edx, dword [0x6f5cb0]
mov dl, byte [edx]
mov byte [eax + 1], dl
mov byte [eax], 1
lea edx, [ebp - 0xa8]
lea eax, [ebp - 0xbc]
mov cl, 5
call fcn.0040a460
lea edx, [ebp - 0xbc]
lea eax, [ebp - 0xc4]
call fcn.0040a438
lea eax, [ebp - 0xa8]
mov edx, dword [0x6f59f4]
mov dl, byte [edx]
mov byte [eax + 1], dl
mov byte [eax], 1
lea edx, [ebp - 0xa8]
lea eax, [ebp - 0xc4]
mov cl, 6
call fcn.0040a460
lea edx, [ebp - 0xc4]
lea eax, [ebp - 0xcc]
call fcn.0040a438
lea eax, [ebp - 0xa8]
mov edx, dword [0x6f5b90]
mov dl, byte [edx]
mov byte [eax + 1], dl
mov byte [eax], 1
lea edx, [ebp - 0xa8]
lea eax, [ebp - 0xcc]
mov cl, 7
call fcn.0040a460
lea edx, [ebp - 0xcc]
lea eax, [ebp - 0xd8]
call fcn.0040a438
mov edx, 0x5f0fec
lea eax, [ebp - 0xd8]
mov cl, 8
call fcn.0040a460
lea edx, [ebp - 0xd8]
lea eax, [ebp - 0xe4]
call fcn.0040a438
lea eax, [ebp - 0xa8]
mov edx, dword [0x6f5d24]
mov dl, byte [edx]
mov byte [eax + 1], dl
mov byte [eax], 1
lea edx, [ebp - 0xa8]
lea eax, [ebp - 0xe4]
mov cl, 9
call fcn.0040a460
lea edx, [ebp - 0xe4]
lea eax, [ebp - 0xf0]
call fcn.0040a438
lea eax, [ebp - 0xa8]
mov edx, dword [0x6f5b78]
mov dl, byte [edx]
mov byte [eax + 1], dl
mov byte [eax], 1
lea edx, [ebp - 0xa8]
lea eax, [ebp - 0xf0]
mov cl, 0xa
call fcn.0040a460
lea edx, [ebp - 0xf0]
lea eax, [ebp - 0xfc]
call fcn.0040a438
lea eax, [ebp - 0xa8]
mov edx, dword [0x6f5b78]
mov dl, byte [edx]
mov byte [eax + 1], dl
mov byte [eax], 1
lea edx, [ebp - 0xa8]
lea eax, [ebp - 0xfc]
mov cl, 0xb
call fcn.0040a460
lea edx, [ebp - 0xfc]
lea eax, [ebp - 0x34]
call fcn.0040adc4
lea eax, [ebp - 0x2c]
mov edx, dword [ebp - 0x28]
call fcn.0040a1dc
lea eax, [ebp - 0x30]
push eax
mov ecx, 2
mov edx, 1
mov eax, dword [ebp - 0x30]
call fcn.0040b018
jmp 0x5f0e09
lea eax, [ebp - 0x28]
mov edx, dword [ebp - 0x34]
call fcn.0040a1dc
lea eax, [ebp - 0x34]
mov edx, dword [ebp - 0x2c]
call fcn.0040a1dc
lea eax, [ebp - 0x2c]
push eax
mov ecx, 2
mov edx, 1
mov eax, dword [ebp - 0x30]
call fcn.0040b018
lea eax, [ebp - 0x30]
mov edx, dword [ebp - 0x28]
call fcn.0040a1dc
lea eax, [ebp - 0x28]
mov edx, dword [ebp - 0x2c]
call fcn.0040a1dc
lea eax, [ebp - 0x2c]
mov edx, dword [ebp - 0x28]
call fcn.0040a1dc
cmp dword [ebp - 0x40], 0xf
jl 0x5f08ac
lea eax, [ebp - 0x2c]
mov edx, dword [ebp - 0x28]
call fcn.0040a1dc
lea eax, [ebp - 0x28]
mov edx, dword [ebp - 0x34]
call fcn.0040a1dc
mov eax, dword [ebp - 0x24]
mov eax, dword [eax + 0x14]
add eax, dword [ebp - 4]
mov dword [ebp - 0x98], eax
mov eax, dword [ebp - 0x24]
mov eax, dword [eax + 0x10]
mov dword [ebp - 0x9c], eax
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x9c]
call fcn.00407014
mov eax, dword [ebp - 0x4c]
sub eax, dword [ebp - 0x64]
mov dword [ebp - 0x54], eax
lea eax, [ebp - 0x28]
mov edx, dword [ebp - 0x30]
call fcn.0040a1dc
mov eax, dword [ebp - 0x6c]
add eax, 0xc7
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x28]
mov edx, 0x5f12e4
call fcn.0040a1dc
xor eax, eax
mov dword [ebp - 0x74], eax
lea eax, [ebp - 0x28]
mov edx, dword [ebp - 0x2c]
call fcn.0040a1dc
inc dword [ebp - 0x74]
cmp dword [ebp - 0x74], 0xc
jne 0x5f0e89
mov eax, dword [ebp - 0x78]
shl eax, 3
lea eax, [eax + eax*2]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp - 0x20]
mov dword [eax + 8], edx
mov eax, dword [0x6f5860]
call fcn.00407258
mov dword [0x6f5860], eax
xor eax, eax
mov dword [ebp - 0x4c], eax
lea edx, [ebp - 0x44]
lea eax, [ebp - 0x54]
call fcn.005c76ac
lea eax, [ebp - 0x28]
mov edx, 0x5f1308
call fcn.0040a1dc
xor eax, eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0xe
jge 0x5f0f24
inc dword [ebp - 0x70]
xor eax, eax
mov dword [ebp - 0x48], eax
mov eax, dword [0x6f5860]
push eax
mov ecx, dword [0x6f5860]
mov edx, dword [ebp - 0x78]
mov eax, dword [ebp - 0x60]
call fcn.005d255c
lea eax, [ebp - 0x28]
push eax
mov ecx, 2
mov edx, 1
mov eax, dword [ebp - 0x30]
call fcn.0040b018
cmp dword [ebp - 0x70], 0xe
jl 0x5f0ee9
mov eax, dword [ebp - 0x68]
sub eax, dword [ebp - 0x44]
mov dword [ebp - 0x54], eax
lea eax, [ebp - 0x28]
push eax
xor ecx, ecx
mov edx, 1
mov eax, dword [ebp - 0x28]
call fcn.0040b018
add dword [ebp - 0x24], 0x28
inc dword [ebp - 0x14]
dec dword [ebp - 0x80]
jne 0x5eef9d
mov byte [ebp - 0xd], 1
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x54], eax
lea eax, [ebp - 0x28]
mov edx, dword [ebp - 0x30]
call fcn.0040a1dc
xor eax, eax
mov dword [ebp - 0x74], eax
xor eax, eax
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x68]
push eax
lea eax, [ebp - 0x70]
push eax
lea ecx, [ebp - 0x44]
mov edx, 0x6f5860
mov eax, 0x6f585c
call fcn.005ee030
jmp 0x5f0f94
mov eax, dword [ebp - 0x5c]
add eax, dword [ebp - 0x78]
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x6c]
imul dword [ebp - 0x68]
mov dword [ebp - 0x7c], eax
lea eax, [ebp - 0x28]
mov edx, dword [ebp - 0x30]
call fcn.0040a1dc
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x5f0fe3
lea eax, [ebp - 0x1c0]
mov edx, 0x31
call fcn.00409e44
lea eax, [ebp - 0x34]
mov edx, 4
call fcn.00409e14
ret