Function at 0x61aa7f
Capabilities:
Parse pe header

Disassembly:
mov eax, 0x8b6e29
call fcn.00879bb8
sub esp, 0x1dc
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
xor ebx, ebx
lea ecx, [ebp - 0x3c]
mov dword [ebp - 4], 1
mov dword [ebp - 0x38], ebx
call fcn.0061d257
push ebx
push ebx
push ecx
mov eax, esp
mov dword [ebp - 0x74], esp
push 0x3b4
mov esi, 0x97bc68
push eax
mov ecx, esi
mov byte [ebp - 4], 2
call fcn.00679e4e
lea eax, [ebp - 0x1b8]
push eax
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 2
call fcn.0040263d
mov ecx, eax
call fcn.004048a4
mov ecx, eax
mov byte [ebp - 4], 4
call fcn.004032b4
cmp eax, ebx
mov dword [ebp - 0xb4], eax
mov dword [ebp - 0x40], ebx
je 0x61ab19
lea eax, [ebp - 0xb4]
push eax
lea ecx, [ebp - 0x40]
call fcn.00404b30
cmp eax, ebx
jge 0x61ab19
cmp eax, 0x80004002
je 0x61ab19
push eax
call fcn.00878dfb
lea eax, [ebp - 0x1b8]
push eax
mov byte [ebp - 4], 6
call fcn.00402bc3
cmp eax, ebx
pop ecx
jge 0x61ab34
push eax
call fcn.00878dfb
mov eax, dword [ebp + 0xc]
lea ecx, [ebp - 0x5c]
mov dword [ebp - 0x5c], eax
call fcn.004125cc
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0x38]
mov dword [ecx], eax
mov ecx, dword [0x973a94]
push eax
lea eax, [ebp - 0x58]
push eax
mov byte [ebp - 4], 7
call fcn.0045a1d8
push eax
mov eax, dword [ebp - 0x38]
lea ecx, [eax + 4]
mov byte [ebp - 4], 8
call fcn.00414f8b
mov eax, dword [ebp - 0x58]
cmp eax, ebx
mov byte [ebp - 4], 7
je 0x61ab83
add eax, 0xfffffff4
push eax
call fcn.00434e38
pop ecx
push ebx
push ebx
push ecx
mov eax, esp
mov dword [ebp - 0x74], esp
push 0x6a3
push eax
mov ecx, esi
call fcn.00679e4e
lea eax, [ebp - 0x1e8]
push eax
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 7
call fcn.0040263d
mov ecx, eax
call fcn.004048a4
mov ecx, eax
mov byte [ebp - 4], 0xa
call fcn.004032b4
cmp eax, ebx
mov dword [ebp - 0xa8], eax
mov dword [ebp - 0x60], ebx
je 0x61abea
lea eax, [ebp - 0xa8]
push eax
lea ecx, [ebp - 0x60]
call fcn.00404b30
cmp eax, ebx
jge 0x61abea
cmp eax, 0x80004002
je 0x61abea
push eax
call fcn.00878dfb
lea eax, [ebp - 0x1e8]
push eax
mov byte [ebp - 4], 0xc
call fcn.00402bc3
cmp eax, ebx
pop ecx
jge 0x61ac05
push eax
call fcn.00878dfb
mov dword [ebp - 0x44], ebx
push ebx
lea ecx, [ebp - 0x60]
call fcn.00411581
test al, al
jne 0x61b551
push 0x20
pop eax
call fcn.0087a1b0
mov eax, esp
push ebx
push ebx
push eax
push dword [ebp - 0x44]
call fcn.00412335
pop ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004033a1
lea eax, [ebp - 0x1d8]
push eax
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], 0xc
call fcn.0040263d
mov ecx, eax
call fcn.004048a4
mov ecx, eax
mov byte [ebp - 4], 0xe
call fcn.004032b4
cmp eax, ebx
mov dword [ebp - 0xb0], eax
mov dword [ebp - 0x48], ebx
je 0x61ac8c
lea eax, [ebp - 0xb0]
push eax
lea ecx, [ebp - 0x48]
call fcn.00404b30
cmp eax, ebx
jge 0x61ac8c
cmp eax, 0x80004002
je 0x61ac8c
push eax
call fcn.00878dfb
lea eax, [ebp - 0x1d8]
push eax
mov byte [ebp - 4], 0x10
call fcn.00402bc3
cmp eax, ebx
pop ecx
jge 0x61aca7
push eax
call fcn.00878dfb
cmp dword [ebp - 0x48], ebx
je 0x61b545
mov eax, dword [ebp - 0x38]
push 0xffffffffffffffff
lea ecx, [eax + 0x44]
call fcn.0061d35f
push ebx
push ecx
mov edi, eax
mov eax, esp
mov dword [ebp - 0x1c], esp
push 0x6a4
push eax
mov ecx, esi
mov dword [ebp - 0x2c], edi
call fcn.00679e4e
lea eax, [ebp - 0x1c8]
push eax
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x10
call fcn.0040263d
mov ecx, eax
call fcn.004048a4
push eax
mov byte [ebp - 4], 0x12
call fcn.00412550
mov dword [edi + 8], eax
lea eax, [ebp - 0x1c8]
push eax
mov byte [ebp - 4], 0x10
call fcn.00402bc3
add esp, 0xc
cmp eax, ebx
jge 0x61ad1a
push eax
call fcn.00878dfb
push ebx
push ecx
mov eax, esp
mov dword [ebp - 0x1c], esp
push 0x6a5
push eax
mov ecx, esi
call fcn.00679e4e
lea eax, [ebp - 0x178]
push eax
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x10
call fcn.0040263d
mov ecx, eax
call fcn.004048a4
push eax
mov byte [ebp - 4], 0x14
call fcn.00412550
mov dword [edi + 0xc], eax
lea eax, [ebp - 0x178]
push eax
mov byte [ebp - 4], 0x10
call fcn.00402bc3
add esp, 0xc
cmp eax, ebx
jge 0x61ad72
push eax
call fcn.00878dfb
push ebx
push ecx
mov eax, esp
mov dword [ebp - 0x1c], esp
push 0x5db
push eax
mov ecx, esi
call fcn.00679e4e
lea eax, [ebp - 0x1a8]
push eax
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x10
call fcn.0040263d
mov ecx, eax
call fcn.004048a4
push eax
mov byte [ebp - 4], 0x16
call fcn.00412550
mov dword [edi], eax
lea eax, [ebp - 0x1a8]
push eax
mov byte [ebp - 4], 0x10
call fcn.00402bc3
add esp, 0xc
cmp eax, ebx
jge 0x61adc9
push eax
call fcn.00878dfb
push ebx
push ecx
mov eax, esp
mov dword [ebp - 0x1c], esp
push 0x5dc
push eax
mov ecx, esi
call fcn.00679e4e
lea eax, [ebp - 0x198]
push eax
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x10
call fcn.0040263d
mov ecx, eax
call fcn.004048a4
push eax
mov byte [ebp - 4], 0x18
call fcn.00412550
mov dword [edi + 4], eax
lea eax, [ebp - 0x198]
push eax
mov byte [ebp - 4], 0x10
call fcn.00402bc3
add esp, 0xc
cmp eax, ebx
jge 0x61ae21
push eax
call fcn.00878dfb
push ecx
mov eax, esp
mov dword [ebp - 0x1c], esp
push 0x6a6
push eax
mov ecx, esi
call fcn.00679e4e
lea eax, [ebp - 0x138]
push eax
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x10
call fcn.0040263d
mov ecx, eax
call fcn.004048a4
cmp word [eax], 8
mov byte [ebp - 4], 0x1a
jne 0x61ae5d
mov eax, dword [eax + 8]
jmp 0x61ae62
mov eax, 0x97812c
push eax
lea ecx, [ebp - 0x24]
call fcn.00402e8e
lea eax, [ebp - 0x138]
push eax
mov byte [ebp - 4], 0x1c
call fcn.00402bc3
cmp eax, ebx
pop ecx
jge 0x61ae86
push eax
call fcn.00878dfb
push ecx
lea eax, [ebp - 0x24]
mov dword [ebp - 0x1c], esp
mov ecx, esp
push eax
call fcn.0040810c
push dword [ebp + 8]
lea eax, [ebp + 0x10]
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.00424dbc
lea eax, [ebp - 0x28]
push eax
call fcn.007d6c55
add esp, 0x10
mov byte [ebp - 4], 0x1d
push ebx
push ebx
lea ecx, [ebp - 0x28]
call fcn.0045ed72
mov ecx, eax
call fcn.0045ee27
push eax
lea ecx, [ebp - 0x28]
call fcn.00414f8b
push ebx
push ebx
push 0x968224
lea ecx, [ebp - 0x28]
call fcn.004538dc
mov edi, eax
cmp edi, ebx
jl 0x61af6c
push edi
lea eax, [ebp - 0x98]
push eax
lea ecx, [ebp - 0x28]
call fcn.0045e070
push eax
mov eax, dword [ebp - 0x2c]
push 0xffffffffffffffff
lea ecx, [eax + 0x10]
mov byte [ebp - 4], 0x1e
call fcn.004655d4
mov ecx, eax
call fcn.00414f8b
mov eax, dword [ebp - 0x98]
cmp eax, ebx
mov byte [ebp - 4], 0x1d
je 0x61af2b
add eax, 0xfffffff4
push eax
call fcn.00434e38
pop ecx
push 0xffffffffffffffff
inc edi
push edi
lea eax, [ebp - 0x94]
push eax
lea ecx, [ebp - 0x28]
call fcn.0045e053
push eax
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x1f
call fcn.00414f8b
mov eax, dword [ebp - 0x94]
cmp eax, ebx
mov byte [ebp - 4], 0x1d
je 0x61aeb7
add eax, 0xfffffff4
push eax
call fcn.00434e38
pop ecx
jmp 0x61aeb7
mov eax, dword [ebp - 0x28]
cmp eax, ebx
je 0x61af8f
cmp byte [eax], bl
je 0x61af8f
lea eax, [ebp - 0x28]
push eax
mov eax, dword [ebp - 0x2c]
push 0xffffffffffffffff
lea ecx, [eax + 0x10]
call fcn.004655d4
mov ecx, eax
call fcn.00414f8b
push ebx
push ebx
push ecx
mov eax, esp
mov dword [ebp - 0x1c], esp
push 0x6a7
push eax
mov ecx, esi
call fcn.00679e4e
lea eax, [ebp - 0xe8]
push eax
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x1d
call fcn.0040263d
mov ecx, eax
call fcn.004048a4
mov ecx, eax
mov byte [ebp - 4], 0x21
call fcn.004032b4
cmp eax, ebx
mov dword [ebp - 0x78], eax
mov dword [ebp - 0x34], ebx
je 0x61aff0
lea eax, [ebp - 0x78]
push eax
lea ecx, [ebp - 0x34]
call fcn.00404b30
cmp eax, ebx
jge 0x61aff0
cmp eax, 0x80004002
je 0x61aff0
push eax
call fcn.00878dfb
lea eax, [ebp - 0xe8]
push eax
mov byte [ebp - 4], 0x23
call fcn.00402bc3
cmp eax, ebx
pop ecx
jge 0x61b00b
push eax
call fcn.00878dfb
cmp dword [ebp - 0x34], ebx
je 0x61b89b
mov dword [ebp - 0x20], ebx
push 0x20
pop eax
call fcn.0087a1b0
mov eax, esp
push ebx
push ebx
push eax
push dword [ebp - 0x20]
call fcn.00412335
pop ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004033a1
lea eax, [ebp - 0x108]
push eax
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0x23
call fcn.0040263d
mov ecx, eax
call fcn.004048a4
mov ecx, eax
mov byte [ebp - 4], 0x25
call fcn.004032b4
cmp eax, ebx
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x54], ebx
je 0x61b084
lea eax, [ebp - 0x70]
push eax
lea ecx, [ebp - 0x54]
call fcn.00404b30
cmp eax, ebx
jge 0x61b084
cmp eax, 0x80004002
je 0x61b084
push eax
call fcn.00878dfb
lea eax, [ebp - 0x108]
push eax
mov byte [ebp - 4], 0x27
call fcn.00402bc3
cmp eax, ebx
pop ecx
jge 0x61b09f
push eax
call fcn.00878dfb
cmp dword [ebp - 0x54], ebx
je 0x61b249
mov eax, dword [ebp - 0x2c]
push 0xffffffffffffffff
lea ecx, [eax + 0x14]
call fcn.0061d2cf
push ecx
mov edi, eax
mov eax, esp
mov dword [ebp - 0x1c], esp
push 0x43d
push eax
mov ecx, esi
call fcn.00679e4e
lea eax, [ebp - 0xd8]
push eax
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x27
call fcn.0040263d
mov ecx, eax
call fcn.004048a4
cmp word [eax], 8
mov byte [ebp - 4], 0x29
jne 0x61b0f3
mov eax, dword [eax + 8]
jmp 0x61b0f8
mov eax, 0x97812c
push eax
lea ecx, [ebp - 0xa4]
call fcn.00402e8e
lea eax, [ebp - 0xa4]
push eax
mov ecx, edi
call fcn.00402f41
lea ecx, [ebp - 0xa4]
call fcn.00402fa6
lea eax, [ebp - 0xd8]
push eax
mov byte [ebp - 4], 0x27
call fcn.00402bc3
cmp eax, ebx
pop ecx
jge 0x61b138
push eax
call fcn.00878dfb
mov dword [ebp - 0x1c], ebx
push 0x20
pop eax
call fcn.0087a1b0
mov eax, esp
push eax
push dword [ebp - 0x1c]
call fcn.00412335
add esp, 4
mov dword [ebp - 0x18], esp
mov ecx, esp
push eax
call fcn.00402e8e
lea eax, [ebp - 0xf8]
push eax
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x27
call fcn.0040263d
mov ecx, eax
call fcn.004048a4
cmp word [ebp - 0xf8], bx
mov byte [ebp - 4], 0x2b
je 0x61b21a
push ecx
lea eax, [ebp - 0xf8]
mov dword [ebp - 0x18], esp
mov ecx, esp
push eax
call fcn.0040675b
push dword [ebp + 8]
lea eax, [ebp + 0x10]
push ecx
mov ecx, esp
mov dword [ebp - 0x18], esp
push eax
call fcn.00424dbc
lea eax, [ebp - 0x50]
push eax
call fcn.007d6c55
add esp, 0x10
push dword [eax]
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0x2c
call fcn.00432cfc
mov eax, dword [ebp - 0x50]
cmp eax, ebx
mov byte [ebp - 4], 0x2e
je 0x61b1da
add eax, 0xfffffff4
push eax
call fcn.00434e38
pop ecx
push 0xffffffffffffffff
lea ecx, [edi + 4]
call fcn.004d6cfb
lea ecx, [ebp - 0x7c]
push ecx
mov ecx, eax
call fcn.00402f41
lea ecx, [ebp - 0x7c]
call fcn.00402fa6
lea eax, [ebp - 0xf8]
push eax
mov byte [ebp - 4], 0x27
call fcn.00402bc3
cmp eax, ebx
pop ecx
jge 0x61b212
push eax
call fcn.00878dfb
inc dword [ebp - 0x1c]
jmp 0x61b13b
lea eax, [ebp - 0xf8]
push eax
mov byte [ebp - 4], 0x27
call fcn.00402bc3
cmp eax, ebx
pop ecx
jge 0x61b235
push eax
call fcn.00878dfb
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x23
call fcn.004027eb
inc dword [ebp - 0x20]
jmp 0x61b017
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x23
call fcn.004027eb
push ebx
push ebx
push ecx
mov eax, esp
mov dword [ebp - 0x18], esp
push 0x6a8
push eax
mov ecx, esi
call fcn.00679e4e
lea eax, [ebp - 0x118]
push eax
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x23
call fcn.0040263d
mov ecx, eax
call fcn.004048a4
mov ecx, eax
mov byte [ebp - 4], 0x30
call fcn.004032b4
cmp eax, ebx
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x4c], ebx
je 0x61b2b6
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp - 0x4c]
call fcn.00404b30
cmp eax, ebx
jge 0x61b2b6
cmp eax, 0x80004002
je 0x61b2b6
push eax
call fcn.00878dfb
lea eax, [ebp - 0x118]
push eax
mov byte [ebp - 4], 0x32
call fcn.00402bc3
cmp eax, ebx
pop ecx
jge 0x61b2d1
push eax
call fcn.00878dfb
mov dword [ebp - 0x20], ebx
push ebx
lea ecx, [ebp - 0x4c]
call fcn.00411581
test al, al
jne 0x61b50d
push 0x20
pop eax
call fcn.0087a1b0
mov eax, esp
push ebx
push ebx
push eax
push dword [ebp - 0x20]
call fcn.00412335
pop ecx
mov ecx, esp
mov dword [ebp - 0x18], esp
push eax
call fcn.004033a1
lea eax, [ebp - 0x148]
push eax
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 0x32
call fcn.0040263d
mov ecx, eax
call fcn.004048a4
mov ecx, eax
mov byte [ebp - 4], 0x34
call fcn.004032b4
cmp eax, ebx
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x30], ebx
je 0x61b352
lea eax, [ebp - 0x6c]
push eax
lea ecx, [ebp - 0x30]
call fcn.00404b30
cmp eax, ebx
jge 0x61b352
cmp eax, 0x80004002
je 0x61b352
push eax
call fcn.00878dfb
lea eax, [ebp - 0x148]
push eax
mov byte [ebp - 4], 0x36
call fcn.00402bc3
cmp eax, ebx
pop ecx
jge 0x61b36d
push eax
call fcn.00878dfb
cmp dword [ebp - 0x30], ebx
je 0x61b505
mov eax, dword [ebp - 0x2c]
push 0xffffffffffffffff
lea ecx, [eax + 0x18]
call fcn.0061d2cf
push ecx
mov edi, eax
mov eax, esp
mov dword [ebp - 0x18], esp
push 0x43d
push eax
mov ecx, esi
call fcn.00679e4e
lea eax, [ebp - 0x8c]
push eax
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x36
call fcn.0040263d
mov ecx, eax
call fcn.004048a4
cmp word [eax], 8
mov byte [ebp - 4], 0x38
jne 0x61b3c1
mov eax, dword [eax + 8]
jmp 0x61b3c6
mov eax, 0x97812c
push eax
lea ecx, [ebp - 0x64]
call fcn.00402e8e
lea eax, [ebp - 0x64]
push eax
mov ecx, edi
call fcn.00402f41
lea ecx, [ebp - 0x64]
call fcn.00402fa6
lea eax, [ebp - 0x8c]
push eax
mov byte [ebp - 4], 0x36
call fcn.00402bc3
cmp eax, ebx
pop ecx
jge 0x61b3fd
push eax
call fcn.00878dfb
mov dword [ebp - 0x1c], ebx
push 0x20
pop eax
call fcn.0087a1b0
mov eax, esp
push eax
push dword [ebp - 0x1c]
call fcn.00412335
add esp, 4
mov dword [ebp - 0x18], esp
mov ecx, esp
push eax
call fcn.00402e8e
lea eax, [ebp - 0xc4]
push eax
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x36
call fcn.0040263d
mov ecx, eax
call fcn.004048a4
cmp word [ebp - 0xc4], bx
mov byte [ebp - 4], 0x3a
je 0x61b4d6
push ecx
lea eax, [ebp - 0xc4]
mov dword [ebp - 0x18], esp
mov ecx, esp
push eax
call fcn.0040675b
push dword [ebp + 8]
lea eax, [ebp + 0x10]
push ecx
mov ecx, esp
mov dword [ebp - 0x18], esp
push eax
call fcn.00424dbc
lea eax, [ebp - 0x74]
push eax
call fcn.007d6c55
add esp, 0x10
push dword [eax]
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x3b
call fcn.00432cfc
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 0x3d
call fcn.00414ebb
push 0xffffffffffffffff
lea ecx, [edi + 4]
call fcn.004d6cfb
lea ecx, [ebp - 0x58]
push ecx
mov ecx, eax
call fcn.00402f41
lea ecx, [ebp - 0x58]
call fcn.00402fa6
lea eax, [ebp - 0xc4]
push eax
mov byte [ebp - 4], 0x36
call fcn.00402bc3
cmp eax, ebx
pop ecx
jge 0x61b4ce
push eax
call fcn.00878dfb
inc dword [ebp - 0x1c]
jmp 0x61b400
lea eax, [ebp - 0xc4]
push eax
mov byte [ebp - 4], 0x36
call fcn.00402bc3
cmp eax, ebx
pop ecx
jge 0x61b4f1
push eax
call fcn.00878dfb
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x32
call fcn.004027eb
inc dword [ebp - 0x20]
jmp 0x61b2d4
lea ecx, [ebp - 0x30]
call fcn.004027eb
lea ecx, [ebp - 0x4c]
call fcn.004027eb
lea ecx, [ebp - 0x34]
call fcn.004027eb
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x1c
call fcn.00414ebb
lea ecx, [ebp - 0x24]
call fcn.00402fa6
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0xc
call fcn.004027eb
inc dword [ebp - 0x44]
jmp 0x61ac08
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0xc
call fcn.004027eb
push ebx
push ebx
push ecx
mov eax, esp
mov dword [ebp - 0x18], esp
push 0x6ae
push eax
mov ecx, esi
call fcn.00679e4e
lea eax, [ebp - 0x8c]
push eax
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0xc
call fcn.0040263d
mov ecx, eax
call fcn.004048a4
mov ecx, eax
mov byte [ebp - 4], 0x3f
call fcn.004032b4
cmp eax, ebx
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x90], ebx
je 0x61b5b8
lea eax, [ebp - 0x74]
push eax
lea ecx, [ebp - 0x90]
call fcn.00404b30
cmp eax, ebx
jge 0x61b5b8
cmp eax, 0x80004002
je 0x61b5b8
push eax
call fcn.00878dfb
lea eax, [ebp - 0x8c]
push eax
mov byte [ebp - 4], 0x41
call fcn.00402bc3
cmp eax, ebx
pop ecx
jge 0x61b5d3
push eax
call fcn.00878dfb
mov dword [ebp - 0x44], ebx
cmp dword [ebp - 0x90], ebx
je 0x61bd5a
push 0x20
pop eax
call fcn.0087a1b0
mov eax, esp
push ebx
push ebx
push eax
push dword [ebp - 0x44]
call fcn.00412335
pop ecx
mov ecx, esp
mov dword [ebp - 0x18], esp
push eax
call fcn.004033a1
lea eax, [ebp - 0x148]
push eax
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 0x41
call fcn.0040263d
mov ecx, eax
call fcn.004048a4
mov ecx, eax
mov byte [ebp - 4], 0x43
call fcn.004032b4
cmp eax, ebx
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x28], ebx
je 0x61b652
lea eax, [ebp - 0x6c]
push eax
lea ecx, [ebp - 0x28]
call fcn.00404b30
cmp eax, ebx
jge 0x61b652
cmp eax, 0x80004002
je 0x61b652
push eax
call fcn.00878dfb
lea eax, [ebp - 0x148]
push eax
mov byte [ebp - 4], 0x45
call fcn.00402bc3
cmp eax, ebx
pop ecx
jge 0x61b66d
push eax
call fcn.00878dfb
cmp dword [ebp - 0x28], ebx
je 0x61bd56
mov eax, dword [ebp - 0x38]
push 0xffffffffffffffff
lea ecx, [eax + 0x48]
call fcn.0061d3e4
push ebx
push ecx
mov edi, eax
mov eax, esp
mov dword [ebp - 0x18], esp
push 0x5db
push eax
mov ecx, esi
mov dword [ebp - 0x7c], edi
call fcn.00679e4e
lea eax, [ebp - 0x118]
push eax
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x45
call fcn.0040263d
mov ecx, eax
call fcn.004048a4
push eax
mov byte [ebp - 4], 0x47
call fcn.00412550
mov dword [edi], eax
lea eax, [ebp - 0x118]
push eax
mov byte [ebp - 4], 0x45
call fcn.00402bc3
add esp, 0xc
cmp eax, ebx
jge 0x61b6df
push eax
call fcn.00878dfb
push ebx
push ecx
mov eax, esp
mov dword [ebp - 0x18], esp
push 0x5dc
push eax
mov ecx, esi
call fcn.00679e4e
lea eax, [ebp - 0xd8]
push eax
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x45
call fcn.0040263d
mov ecx, eax
call fcn.004048a4
push eax
mov byte [ebp - 4], 0x49
call fcn.00412550
mov dword [edi + 4], eax
lea eax, [ebp - 0xd8]
push eax
mov byte [ebp - 4], 0x45
call fcn.00402bc3
add esp, 0xc
cmp eax, ebx
jge 0x61b737
push eax
call fcn.00878dfb
push ebx
push ebx
push ecx
mov eax, esp
mov dword [ebp - 0x18], esp
push 0x6a7
push eax
mov ecx, esi
call fcn.00679e4e
lea eax, [ebp - 0x108]
push eax
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x45
call fcn.0040263d
mov ecx, eax
call fcn.004048a4
mov ecx, eax
mov byte [ebp - 4], 0x4b
call fcn.004032b4
cmp eax, ebx
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x30], ebx
je 0x61b798
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp - 0x30]
call fcn.00404b30
cmp eax, ebx
jge 0x61b798
cmp eax, 0x80004002
je 0x61b798
push eax
call fcn.00878dfb
lea eax, [ebp - 0x108]
push eax
mov byte [ebp - 4], 0x4d
call fcn.00402bc3
cmp eax, ebx
pop ecx
jge 0x61b7b3
push eax
call fcn.00878dfb
cmp dword [ebp - 0x30], ebx
je 0x61bf85
mov dword [ebp - 0x20], ebx
push 0x20
pop eax
call fcn.0087a1b0
mov eax, esp
push ebx
push ebx
push eax
push dword [ebp - 0x20]
call fcn.00412335
pop ecx
mov ecx, esp
mov dword [ebp - 0x18], esp
push eax
call fcn.004033a1
lea eax, [ebp - 0xe8]
push eax
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x4d
call fcn.0040263d
mov ecx, eax
call fcn.004048a4
mov ecx, eax
mov byte [ebp - 4], 0x4f
call fcn.004032b4
cmp eax, ebx
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x34], ebx
je 0x61b82c
lea eax, [ebp - 0x50]
push eax
lea ecx, [ebp - 0x34]
call fcn.00404b30
cmp eax, ebx
jge 0x61b82c
cmp eax, 0x80004002
je 0x61b82c
push eax
call fcn.00878dfb
lea eax, [ebp - 0xe8]
push eax
mov byte [ebp - 4], 0x51
call fcn.00402bc3
cmp eax, ebx
pop ecx
jge 0x61b847
push eax
call fcn.00878dfb
cmp dword [ebp - 0x34], ebx
je 0x61ba4a
mov eax, dword [ebp - 0x7c]
push 0xffffffffffffffff
lea ecx, [eax + 8]
call fcn.0061d2cf
push ecx
mov edi, eax
mov eax, esp
mov dword [ebp - 0x18], esp
push 0x43d
push eax
mov ecx, esi
call fcn.00679e4e
lea eax, [ebp - 0x138]
push eax
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0x51
call fcn.0040263d
mov ecx, eax
call fcn.004048a4
cmp word [eax], 8
mov byte [ebp - 4], 0x53
jne 0x61b901
mov eax, dword [eax + 8]
jmp 0x61b906
lea ecx, [ebp - 0x34]
call fcn.004027eb
mov eax, dword [ebp - 0x28]
cmp eax, ebx
mov byte [ebp - 4], 0x1c
je 0x61b8b8
add eax, 0xfffffff4
push eax
call fcn.00434e38
pop ecx
lea ecx, [ebp - 0x24]
call fcn.00402fa6
lea ecx, [ebp - 0x48]
call fcn.004027eb
lea ecx, [ebp - 0x60]
call fcn.004027eb
lea ecx, [ebp - 0x5c]
call fcn.004027eb
lea ecx, [ebp - 0x40]
call fcn.004027eb
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 1
call fcn.0061d28a
lea ecx, [ebp + 0xc]
call fcn.004027eb
lea ecx, [ebp + 0x10]
call fcn.004027eb
jmp 0x61d10f
mov eax, 0x97812c
push eax
lea ecx, [ebp - 0x58]
call fcn.00402e8e
lea eax, [ebp - 0x58]
push eax
mov ecx, edi
call fcn.00402f41
lea ecx, [ebp - 0x58]
call fcn.00402fa6
lea eax, [ebp - 0x138]
push eax
mov byte [ebp - 4], 0x51
call fcn.00402bc3
cmp eax, ebx
pop ecx
jge 0x61b93d
push eax
call fcn.00878dfb
mov dword [ebp - 0x24], ebx
push 0x20
pop eax
call fcn.0087a1b0
mov eax, esp
push eax
push dword [ebp - 0x24]
call fcn.00412335
add esp, 4
mov dword [ebp - 0x18], esp
mov ecx, esp
push eax
call fcn.00402e8e
lea eax, [ebp - 0xc4]
push eax
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0x51
call fcn.0040263d
mov ecx, eax
call fcn.004048a4
cmp word [ebp - 0xc4], bx
mov byte [ebp - 4], 0x55
je 0x61ba16
push ecx
lea eax, [ebp - 0xc4]
mov dword [ebp - 0x18], esp
mov ecx, esp
push eax
call fcn.0040675b
push dword [ebp + 8]
lea eax, [ebp + 0x10]
push ecx
mov ecx, esp
mov dword [ebp - 0x18], esp
push eax
call fcn.00424dbc
lea eax, [ebp - 0x70]
push eax
call fcn.007d6c55
add esp, 0x10
push dword [eax]
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x56
call fcn.00432cfc
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x58
call fcn.00414ebb
push 0xffffffffffffffff
lea ecx, [edi + 4]
call fcn.004d6cfb
lea ecx, [ebp - 0x64]
push ecx
mov ecx, eax
call fcn.00402f41
lea ecx, [ebp - 0x64]
call fcn.00402fa6
lea eax, [ebp - 0xc4]
push eax
mov byte [ebp - 4], 0x51
call fcn.00402bc3
cmp eax, ebx
pop ecx
jge 0x61ba0e
push eax
call fcn.00878dfb
inc dword [ebp - 0x24]
jmp 0x61b940
lea eax, [ebp - 0xc4]
push eax
mov byte [ebp - 4], 0x51
call fcn.00402bc3
cmp eax, ebx
pop ecx
jge 0x61ba31
push eax
call fcn.00878dfb
mov eax, dword [ebp - 0x34]
cmp eax, ebx
mov byte [ebp - 4], 0x4d
je 0x61ba42
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
inc dword [ebp - 0x20]
jmp 0x61b7bf
push ebx
push ebx
push ecx
mov eax, esp
mov dword [ebp - 0x18], esp
push 0x6a8
push eax
mov ecx, esi
mov byte [ebp - 4], 0x4d
call fcn.00679e4e
lea eax, [ebp - 0x198]
push eax
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x4d
call fcn.0040263d
mov ecx, eax
call fcn.004048a4
mov ecx, eax
mov byte [ebp - 4], 0x5a
call fcn.004032b4
cmp eax, ebx
mov dword [ebp - 0x78], eax
mov dword [ebp - 0x2c], ebx
je 0x61baaf
lea eax, [ebp - 0x78]
push eax
lea ecx, [ebp - 0x2c]
call fcn.00404b30
cmp eax, ebx
jge 0x61baaf
cmp eax, 0x80004002
je 0x61baaf
push eax
call fcn.00878dfb
lea eax, [ebp - 0x198]
push eax
mov byte [ebp - 4], 0x5c
call fcn.00402bc3
cmp eax, ebx
pop ecx
jge 0x61baca
push eax
call fcn.00878dfb
mov dword [ebp - 0x20], ebx
cmp dword [ebp - 0x2c], ebx
je 0x61bd1b
push 0x20
pop eax
call fcn.0087a1b0
mov eax, esp
push ebx
push ebx
push eax
push dword [ebp - 0x20]
call fcn.00412335
pop ecx
mov ecx, esp
mov dword [ebp - 0x18], esp
push eax
call fcn.004033a1
lea eax, [ebp - 0x1a8]
push eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x5c
call fcn.0040263d
mov ecx, eax
call fcn.004048a4
mov ecx, eax
mov byte [ebp - 4], 0x5e
call fcn.004032b4
cmp eax, ebx
mov dword [ebp - 0x94], eax
mov dword [ebp - 0x4c], ebx
je 0x61bb49
lea eax, [ebp - 0x94]
push eax
lea ecx, [ebp - 0x4c]
call fcn.00404b30
cmp eax, ebx
jge 0x61bb49
cmp eax, 0x80004002
je 0x61bb49
push eax
call fcn.00878dfb
lea eax, [ebp - 0x1a8]
push eax
mov byte [ebp - 4], 0x60
call fcn.00402bc3
cmp eax, ebx
pop ecx
jge 0x61bb64
push eax
call fcn.00878dfb
cmp dword [ebp - 0x4c], ebx
je 0x61bd1b
mov eax, dword [ebp - 0x7c]
push 0xffffffffffffffff
lea ecx, [eax + 0xc]
call fcn.0061d2cf
push ecx
mov edi, eax
mov eax, esp
mov dword [ebp - 0x18], esp
push 0x43d
push eax
mov ecx, esi
call fcn.00679e4e
lea eax, [ebp - 0x178]
push eax
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 0x60
call fcn.0040263d
mov ecx, eax
call fcn.004048a4
cmp word [eax], 8
mov byte [ebp - 4], 0x62
jne 0x61bbb8
mov eax, dword [eax + 8]
jmp 0x61bbbd
mov eax, 0x97812c
push eax
lea ecx, [ebp - 0x1c]
call fcn.00402e8e
lea ecx, [ebp - 0x1c]
call fcn.00408b49
mov ecx, edi
call fcn.00402fa6
mov ecx, dword [ebp - 0x1c]
cmp ecx, ebx
mov dword [edi], ecx
je 0x61bbe6
call fcn.004030b1
mov dword [ebp - 0x1c], ebx
lea eax, [ebp - 0x178]
push eax
mov byte [ebp - 4], 0x60
call fcn.00402bc3
cmp eax, ebx
pop ecx
jge 0x61bc01
push eax
call fcn.00878dfb
mov dword [ebp - 0x24], ebx
push 0x20
pop eax
call fcn.0087a1b0
mov eax, esp
push eax
push dword [ebp - 0x24]
call fcn.00412335
add esp, 4
mov dword [ebp - 0x18], esp
mov ecx, esp
push eax
call fcn.00402e8e
lea eax, [ebp - 0xf8]
push eax
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 0x60
call fcn.0040263d
mov ecx, eax
call fcn.004048a4
cmp word [ebp - 0xf8], bx
mov byte [ebp - 4], 0x64
je 0x61bce7
push ecx
lea eax, [ebp - 0xf8]
mov dword [ebp - 0x18], esp
mov ecx, esp
push eax
call fcn.0040675b
push dword [ebp + 8]
lea eax, [ebp + 0x10]
push ecx
mov ecx, esp
mov dword [ebp - 0x18], esp
push eax
call fcn.00424dbc
lea eax, [ebp - 0x98]
push eax
call fcn.007d6c55
add esp, 0x10
push dword [eax]
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x65
call fcn.00432cfc
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 0x67
call fcn.00414ebb
push 0xffffffffffffffff
lea ecx, [edi + 4]
call fcn.004d6cfb
lea ecx, [ebp - 0x54]
push ecx
mov ecx, eax
call fcn.00402f41
mov ecx, dword [ebp - 0x54]
cmp ecx, ebx
je 0x61bcc4
call fcn.004030b1
mov dword [ebp - 0x54], ebx
lea eax, [ebp - 0xf8]
push eax
mov byte [ebp - 4], 0x60
call fcn.00402bc3
cmp eax, ebx
pop ecx
jge 0x61bcdf
push eax
call fcn.00878dfb
inc dword [ebp - 0x24]
jmp 0x61bc04
lea eax, [ebp - 0xf8]
push eax
mov byte [ebp - 4], 0x60
call fcn.00402bc3
cmp eax, ebx
pop ecx
jge 0x61bd02
push eax
call fcn.00878dfb
mov eax, dword [ebp - 0x4c]
cmp eax, ebx
mov byte [ebp - 4], 0x5c
je 0x61bd13
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
inc dword [ebp - 0x20]
jmp 0x61bacd
mov eax, dword [ebp - 0x2c]
cmp eax, ebx
mov byte [ebp - 4], 0x4d
je 0x61bd2c
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x30]
cmp eax, ebx
mov byte [ebp - 4], 0x45
je 0x61bd3d
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x28]
cmp eax, ebx
mov byte [ebp - 4], 0x41
je 0x61bd4e
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
inc dword [ebp - 0x44]
jmp 0x61b5d6
mov byte [ebp - 4], 0x41
push ebx
push ebx
push ecx
mov eax, esp
mov dword [ebp - 0x18], esp
push 0xe75
push eax
mov ecx, esi
call fcn.00679e4e
lea eax, [ebp - 0x148]
push eax
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0x41
call fcn.0040263d
mov ecx, eax
call fcn.004048a4
mov ecx, eax
mov byte [ebp - 4], 0x69
call fcn.004032b4
cmp eax, ebx
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0xa0], ebx
je 0x61bdc1
lea eax, [ebp - 0x6c]
push eax
lea ecx, [ebp - 0xa0]
call fcn.00404b30
cmp eax, ebx
jge 0x61bdc1
cmp eax, 0x80004002
je 0x61bdc1
push eax
call fcn.00878dfb
lea eax, [ebp - 0x148]
push eax
mov byte [ebp - 4], 0x6b
call fcn.00402bc3
cmp eax, ebx
pop ecx
jge 0x61bddc
push eax
call fcn.00878dfb
mov dword [ebp - 0x44], ebx
cmp dword [ebp - 0xa0], ebx
je 0x61c0f2
push 0x20
pop eax
call fcn.0087a1b0
mov eax, esp
push ebx
push ebx
push eax
push dword [ebp - 0x44]
call fcn.00412335
pop ecx
mov ecx, esp
mov dword [ebp - 0x18], esp
push eax
call fcn.004033a1
lea eax, [ebp - 0x118]
push eax
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], 0x6b
call fcn.0040263d
mov ecx, eax
call fcn.004048a4
mov ecx, eax
mov byte [ebp - 4], 0x6d
call fcn.004032b4
cmp eax, ebx
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x20], ebx
je 0x61be5b
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp - 0x20]
call fcn.00404b30
cmp eax, ebx
jge 0x61be5b
cmp eax, 0x80004002
je 0x61be5b
push eax
call fcn.00878dfb
lea eax, [ebp - 0x118]
push eax
mov byte [ebp - 4], 0x6f
call fcn.00402bc3
cmp eax, ebx
pop ecx
jge 0x61be76
push eax
call fcn.00878dfb
cmp dword [ebp - 0x20], ebx
je 0x61c0ee
mov eax, dword [ebp - 0x38]
push 0xffffffffffffffff
lea ecx, [eax + 0x4c]
call fcn.0061d473
push ebx
push ecx
mov edi, eax
mov eax, esp
mov dword [ebp - 0x18], esp
push 0x5db
push eax
mov ecx, esi
call fcn.00679e4e
lea eax, [ebp - 0xd8]
push eax
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x6f
call fcn.0040263d
mov ecx, eax
call fcn.004048a4
push eax
mov byte [ebp - 4], 0x71
call fcn.00412550
mov dword [edi], eax
lea eax, [ebp - 0xd8]
push eax
mov byte [ebp - 4], 0x6f
call fcn.00402bc3
add esp, 0xc
cmp eax, ebx
jge 0x61bee5
push eax
call fcn.00878dfb
push ebx
push ecx
mov eax, esp
mov dword [ebp - 0x18], esp
push 0x5dc
push eax
mov ecx, esi
call fcn.00679e4e
lea eax, [ebp - 0x108]
push eax
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x6f
call fcn.0040263d
mov ecx, eax
call fcn.004048a4
push eax
mov byte [ebp - 4], 0x73
call fcn.00412550
mov dword [edi + 4], eax
lea eax, [ebp - 0x108]
push eax
mov byte [ebp - 4], 0x6f
call fcn.00402bc3
add esp, 0xc
cmp eax, ebx
jge 0x61bf3d
push eax
call fcn.00878dfb
push 0xffffffffffffffff
lea ecx, [edi + 8]
call fcn.0061d2cf
push ecx
mov edi, eax
mov eax, esp
mov dword [ebp - 0x18], esp
push 0x43d
push eax
mov ecx, esi
call fcn.00679e4e
lea eax, [ebp - 0xe8]
push eax
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x6f
call fcn.0040263d
mov ecx, eax
call fcn.004048a4
cmp word [eax], 8
mov byte [ebp - 4], 0x75
jne 0x61bf91
mov eax, dword [eax + 8]
jmp 0x61bf96
mov eax, dword [ebp - 0x28]
mov byte [ebp - 4], 0x41
jmp 0x61d088
mov eax, 0x97812c
push eax
lea ecx, [ebp - 0x24]
call fcn.00402e8e
lea ecx, [ebp - 0x24]
call fcn.00408b49
mov ecx, edi
call fcn.00402fa6
mov ecx, dword [ebp - 0x24]
cmp ecx, ebx
mov dword [edi], ecx
je 0x61bfbf
call fcn.004030b1
mov dword [ebp - 0x24], ebx
lea eax, [ebp - 0xe8]
push eax
mov byte [ebp - 4], 0x6f
call fcn.00402bc3
cmp eax, ebx
pop ecx
jge 0x61bfda
push eax
call fcn.00878dfb
mov dword [ebp - 0x2c], ebx
push 0x20
pop eax
call fcn.0087a1b0
mov eax, esp
push eax
push dword [ebp - 0x2c]
call fcn.00412335
add esp, 4
mov dword [ebp - 0x18], esp
mov ecx, esp
push eax
call fcn.00402e8e
lea eax, [ebp - 0xc4]
push eax
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x6f
call fcn.0040263d
mov ecx, eax
call fcn.004048a4
cmp word [ebp - 0xc4], bx
mov byte [ebp - 4], 0x77
je 0x61c0ba
push ecx
lea eax, [ebp - 0xc4]
mov dword [ebp - 0x18], esp
mov ecx, esp
push eax
call fcn.0040675b
push dword [ebp + 8]
lea eax, [ebp + 0x10]
push ecx
mov ecx, esp
mov dword [ebp - 0x18], esp
push eax
call fcn.00424dbc
lea eax, [ebp - 0x50]
push eax
call fcn.007d6c55
add esp, 0x10
push dword [eax]
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x78
call fcn.00432cfc
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 0x7a
call fcn.00414ebb
push 0xffffffffffffffff
lea ecx, [edi + 4]
call fcn.004d6cfb
lea ecx, [ebp - 0x1c]
push ecx
mov ecx, eax
call fcn.00402f41
mov ecx, dword [ebp - 0x1c]
cmp ecx, ebx
je 0x61c097
call fcn.004030b1
mov dword [ebp - 0x1c], ebx
lea eax, [ebp - 0xc4]
push eax
mov byte [ebp - 4], 0x6f
call fcn.00402bc3
cmp eax, ebx
pop ecx
jge 0x61c0b2
push eax
call fcn.00878dfb
inc dword [ebp - 0x2c]
jmp 0x61bfdd
lea eax, [ebp - 0xc4]
push eax
mov byte [ebp - 4], 0x6f
call fcn.00402bc3
cmp eax, ebx
pop ecx
jge 0x61c0d5
push eax
call fcn.00878dfb
mov eax, dword [ebp - 0x20]
cmp eax, ebx
mov byte [ebp - 4], 0x6b
je 0x61c0e6
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
inc dword [ebp - 0x44]
jmp 0x61bddf
mov byte [ebp - 4], 0x6b
push ebx
push ebx
push ecx
mov eax, esp
mov dword [ebp - 0x18], esp
push 0xf16
push eax
mov ecx, esi
call fcn.00679e4e
lea eax, [ebp - 0x118]
push eax
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0x6b
call fcn.0040263d
mov ecx, eax
call fcn.004048a4
mov ecx, eax
mov byte [ebp - 4], 0x7c
call fcn.004032b4
cmp eax, ebx
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x9c], ebx
je 0x61c159
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp - 0x9c]
call fcn.00404b30
cmp eax, ebx
jge 0x61c159
cmp eax, 0x80004002
je 0x61c159
push eax
call fcn.00878dfb
lea eax, [ebp - 0x118]
push eax
mov byte [ebp - 4], 0x7e
call fcn.00402bc3
cmp eax, ebx
pop ecx
jge 0x61c174
push eax
call fcn.00878dfb
mov dword [ebp - 0x44], ebx
cmp dword [ebp - 0x9c], ebx
je 0x61c37f
push 0x20
pop eax
call fcn.0087a1b0
mov eax, esp
push ebx
push ebx
push eax
push dword [ebp - 0x44]
call fcn.00412335
pop ecx
mov ecx, esp
mov dword [ebp - 0x18], esp
push eax
call fcn.004033a1
lea eax, [ebp - 0xd8]
push eax
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 0x7e
call fcn.0040263d
mov ecx, eax
call fcn.004048a4
mov ecx, eax
mov byte [ebp - 4], 0x80
call fcn.004032b4
cmp eax, ebx
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x30], ebx
je 0x61c1f3
lea eax, [ebp - 0x50]
push eax
lea ecx, [ebp - 0x30]
call fcn.00404b30
cmp eax, ebx
jge 0x61c1f3
cmp eax, 0x80004002
je 0x61c1f3
push eax
call fcn.00878dfb
lea eax, [ebp - 0xd8]
push eax
mov byte [ebp - 4], 0x82
call fcn.00402bc3
cmp eax, ebx
pop ecx
jge 0x61c20e
push eax
call fcn.00878dfb
cmp dword [ebp - 0x30], ebx
je 0x61c37f
mov eax, dword [ebp - 0x38]
push 0xffffffffffffffff
lea ecx, [eax + 0x50]
call fcn.0061d4f8
push ebx
push ecx
mov edi, eax
mov eax, esp
mov dword [ebp - 0x18], esp
push 0x5db
push eax
mov ecx, esi
call fcn.00679e4e
lea eax, [ebp - 0x108]
push eax
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x82
call fcn.0040263d
mov ecx, eax
call fcn.004048a4
push eax
mov byte [ebp - 4], 0x84
call fcn.00412550
mov dword [edi], eax
lea eax, [ebp - 0x108]
push eax
mov byte [ebp - 4], 0x82
call fcn.00402bc3
add esp, 0xc
cmp eax, ebx
jge 0x61c27d
push eax
call fcn.00878dfb
push ebx
push ecx
mov eax, esp
mov dword [ebp - 0x18], esp
push 0x5dc
push eax
mov ecx, esi
call fcn.00679e4e
lea eax, [ebp - 0xe8]
push eax
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x82
call fcn.0040263d
mov ecx, eax
call fcn.004048a4
push eax
mov byte [ebp - 4], 0x86
call fcn.00412550
mov dword [edi + 4], eax
lea eax, [ebp - 0xe8]
push eax
mov byte [ebp - 4], 0x82
call fcn.00402bc3
add esp, 0xc
cmp eax, ebx
jge 0x61c2d5
push eax
call fcn.00878dfb
push 0xffffffffffffffff
lea ecx, [edi + 8]
call fcn.0061d2cf
push ecx
mov edi, eax
mov eax, esp
mov dword [ebp - 0x18], esp
push 0x43d
push eax
mov ecx, esi
call fcn.00679e4e
lea eax, [ebp - 0x138]
push eax
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x82
call fcn.0040263d
mov ecx, eax
call fcn.004048a4
cmp word [eax], 8
mov byte [ebp - 4], 0x88
jne 0x61c31d
mov eax, dword [eax + 8]
jmp 0x61c322
mov eax, 0x97812c
push eax
lea ecx, [ebp - 0x24]
call fcn.00402e8e
lea ecx, [ebp - 0x24]
call fcn.00408b49
mov ecx, edi
call fcn.00402fa6
mov ecx, dword [ebp - 0x24]
cmp ecx, ebx
mov dword [edi], ecx
je 0x61c34b
call fcn.004030b1
mov dword [ebp - 0x24], ebx
lea eax, [ebp - 0x138]
push eax
mov byte [ebp - 4], 0x82
call fcn.00402bc3
cmp eax, ebx
pop ecx
jge 0x61c366
push eax
call fcn.00878dfb
mov eax, dword [ebp - 0x30]
cmp eax, ebx
mov byte [ebp - 4], 0x7e
je 0x61c377
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
inc dword [ebp - 0x44]
jmp 0x61c177
push 0x20
pop eax
mov byte [ebp - 4], 0x89
call fcn.0087a1b0
mov eax, esp
push ebx
push ebx
push eax
push dword [ebp + 8]
call fcn.00412335
pop ecx
pop ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x18], esp
push eax
call fcn.004033a1
lea ecx, [ebp + 0x10]
mov byte [ebp - 4], 0x8a
call fcn.0040263d
lea ecx, [ebp - 0xd8]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0x89
call fcn.004048a4
mov ecx, eax
mov byte [ebp - 4], 0x8b
call fcn.004032b4
cmp eax, ebx
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x34], ebx
je 0x61c3f6
lea eax, [ebp - 0x50]
push eax
lea ecx, [ebp - 0x34]
call fcn.00404b30
cmp eax, ebx
jge 0x61c3f6
cmp eax, 0x80004002
je 0x61c3f6
push eax
call fcn.00878dfb
lea eax, [ebp - 0xd8]
push eax
mov byte [ebp - 4], 0x8d
call fcn.00402bc3
cmp eax, ebx
pop ecx
jge 0x61c411
push eax
call fcn.00878dfb
cmp dword [ebp - 0x34], ebx
je 0x61c587
push ebx
push ebx
push ecx
mov ecx, esp
mov dword [ebp - 0x18], esp
push 0x968208
call fcn.004033a1
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0x8e
call fcn.0040263d
lea ecx, [ebp - 0x108]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0x8d
call fcn.004048a4
mov ecx, eax
mov byte [ebp - 4], 0x8f
call fcn.004032b4
cmp eax, ebx
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x2c], ebx
je 0x61c47c
lea eax, [ebp - 0x70]
push eax
lea ecx, [ebp - 0x2c]
call fcn.00404b30
cmp eax, ebx
jge 0x61c47c
cmp eax, 0x80004002
je 0x61c47c
push eax
call fcn.00878dfb
lea eax, [ebp - 0x108]
push eax
mov byte [ebp - 4], 0x91
call fcn.00402bc3
cmp eax, ebx
pop ecx
jge 0x61c497
push eax
call fcn.00878dfb
mov ecx, dword [ebp - 0x2c]
cmp ecx, ebx
jne 0x61c4b8
mov eax, dword [ebp - 0x34]
cmp eax, ebx
mov byte [ebp - 4], 0x89
je 0x61c587
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x61c587
call fcn.0040cf4d
lea ecx, [ebp - 0x11]
push ecx
push 1
mov dword [ebp - 0x78], eax
push eax
mov eax, dword [ebp - 0x38]
lea ecx, [eax + 0x58]
call fcn.0046691d
xor edi, edi
cmp edi, dword [ebp - 0x78]
jge 0x61c560
push 0x20
pop eax
call fcn.0087a1b0
mov eax, esp
push eax
push edi
call fcn.00412335
pop ecx
pop ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x18], esp
push eax
call fcn.004033a1
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x92
call fcn.0040263d
lea ecx, [ebp - 0xe8]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0x91
call fcn.004048a4
cmp word [eax], 8
mov byte [ebp - 4], 0x93
jne 0x61c529
mov eax, dword [eax + 8]
jmp 0x61c52e
mov eax, 0x97812c
mov ecx, dword [ebp - 0x38]
mov ecx, dword [ecx + 0x58]
push 0xffffffffffffffff
lea ecx, [ecx + edi*4]
push eax
call fcn.00454081
lea eax, [ebp - 0xe8]
push eax
mov byte [ebp - 4], 0x91
call fcn.00402bc3
cmp eax, ebx
pop ecx
jge 0x61c55a
push eax
call fcn.00878dfb
inc edi
jmp 0x61c4d4
mov eax, dword [ebp - 0x2c]
cmp eax, ebx
mov byte [ebp - 4], 0x8d
je 0x61c49e
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x61c49e
lea eax, [ebp - 0x11]
push eax
mov eax, dword [ebp - 0x38]
push 1
push 7
lea ecx, [eax + 0x54]
mov dword [ebp - 4], 0x7e
call fcn.0046691d
xor edi, edi
lea ecx, [edi + 0x979548]
call fcn.00411641
push ecx
mov dword [ebp - 0x18], esp
mov ecx, esp
push eax
call fcn.00402e8e
push dword [ebp + 8]
lea eax, [ebp + 0x10]
push ecx
mov ecx, esp
mov dword [ebp - 0x18], esp
push eax
call fcn.00424dbc
lea eax, [ebp - 0x24]
push eax
call fcn.007d6c55
add esp, 0x10
mov eax, dword [ebp - 0x24]
cmp eax, ebx
mov byte [ebp - 4], 0x95
je 0x61c5f8
cmp byte [eax], bl
je 0x61c5f8
lea eax, [ebp - 0x24]
push eax
mov eax, dword [ebp - 0x38]
mov ecx, dword [eax + 0x54]
add ecx, edi
call fcn.00414f8b
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0x7e
call fcn.00414ebb
add edi, 4
cmp edi, 0x18
jl 0x61c5a3
push ecx
mov eax, esp
mov dword [ebp - 0x18], esp
push 0x411
push eax
mov ecx, esi
call fcn.00679e4e
lea eax, [ebp - 0x158]
push eax
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0x7e
call fcn.0040263d
mov ecx, eax
call fcn.004048a4
push ecx
mov eax, esp
mov dword [ebp - 0x18], esp
push 0x3ef
push eax
mov ecx, esi
mov byte [ebp - 4], 0x97
call fcn.00679e4e
lea eax, [ebp - 0x168]
push eax
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0x97
call fcn.0040263d
mov ecx, eax
call fcn.004048a4
push ecx
mov eax, esp
mov dword [ebp - 0x18], esp
push 0x5c8
push eax
mov ecx, esi
mov byte [ebp - 4], 0x99
call fcn.00679e4e
lea eax, [ebp - 0x188]
push eax
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0x99
call fcn.0040263d
mov ecx, eax
call fcn.004048a4
xor ecx, ecx
cmp word [ebp - 0x158], bx
mov byte [ebp - 4], 0x9b
setne cl
xor eax, eax
cmp word [ebp - 0x168], bx
setne al
mov edi, eax
xor eax, eax
cmp word [ebp - 0x188], bx
setne al
cmp eax, ebx
je 0x61c6d5
mov eax, dword [ebp - 0x38]
mov dword [eax + 8], 3
jmp 0x61c6ef
cmp ecx, ebx
je 0x61d019
cmp edi, ebx
je 0x61d019
mov eax, dword [ebp - 0x38]
mov dword [eax + 8], 2
push 3
push ecx
mov eax, esp
mov dword [ebp - 0x18], esp
push 0x437
push eax
mov ecx, esi
call fcn.00679e4e
lea eax, [ebp - 0x8c]
push eax
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x9b
call fcn.0040263d
mov ecx, eax
call fcn.004048a4
push eax
mov byte [ebp - 4], 0x9d
call fcn.00412550
pop ecx
pop ecx
lea ecx, [ebp - 0x3c]
mov edi, eax
call fcn.0061d22d
mov dword [eax + 0xc], edi
lea eax, [ebp - 0x8c]
push eax
mov byte [ebp - 4], 0x9b
call fcn.00402bc3
cmp eax, ebx
pop ecx
jge 0x61c752
push eax
call fcn.00878dfb
push ebx
push ecx
mov eax, esp
mov dword [ebp - 0x18], esp
push 0x95a
push eax
mov ecx, esi
call fcn.00679e4e
lea eax, [ebp - 0x8c]
push eax
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x9b
call fcn.0040263d
mov ecx, eax
call fcn.004048a4
push eax
mov byte [ebp - 4], 0x9f
call fcn.00412550
pop ecx
pop ecx
lea ecx, [ebp - 0x3c]
mov edi, eax
call fcn.0061d22d
mov dword [eax + 0x10], edi
lea eax, [ebp - 0x8c]
push eax
mov byte [ebp - 4], 0x9b
call fcn.00402bc3
cmp eax, ebx
pop ecx
jge 0x61c7b4
push eax
call fcn.00878dfb
push ebx
push ecx
mov eax, esp
mov dword [ebp - 0x18], esp
push 0x959
push eax
mov ecx, esi
call fcn.00679e4e
lea eax, [ebp - 0x8c]
push eax
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x9b
call fcn.0040263d
mov ecx, eax
call fcn.004048a4
push eax
mov byte [ebp - 4], 0xa1
call fcn.00412550
pop ecx
pop ecx
lea ecx, [ebp - 0x3c]
mov edi, eax
call fcn.0061d22d
mov dword [eax + 0x14], edi
lea eax, [ebp - 0x8c]
push eax
mov byte [ebp - 4], 0x9b
call fcn.00402bc3
cmp eax, ebx
pop ecx
jge 0x61c816
push eax
call fcn.00878dfb
push ebx
push ecx
mov eax, esp
mov dword [ebp - 0x18], esp
push 0xbd1
push eax
mov ecx, esi
call fcn.00679e4e
lea eax, [ebp - 0x8c]
push eax
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x9b
call fcn.0040263d
mov ecx, eax
call fcn.004048a4
push eax
mov byte [ebp - 4], 0xa3
call fcn.00412550
mov edi, eax
pop ecx
neg edi
pop ecx
sbb edi, edi
lea ecx, [ebp - 0x3c]
neg edi
call fcn.0061d22d
mov dword [eax + 0x18], edi
lea eax, [ebp - 0x8c]
push eax
mov byte [ebp - 4], 0x9b
call fcn.00402bc3
cmp eax, ebx
pop ecx
jge 0x61c87e
push eax
call fcn.00878dfb
push ebx
push ecx
mov eax, esp
mov dword [ebp - 0x18], esp
push 0xbd4
push eax
mov ecx, esi
call fcn.00679e4e
lea eax, [ebp - 0x8c]
push eax
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x9b
call fcn.0040263d
mov ecx, eax
call fcn.004048a4
push eax
mov byte [ebp - 4], 0xa5
call fcn.00412550
mov edi, eax
pop ecx
neg edi
pop ecx
sbb edi, edi
lea ecx, [ebp - 0x3c]
neg edi
call fcn.0061d22d
lea ecx, [ebp - 0x8c]
mov dword [eax + 0x1c], edi
mov byte [ebp - 4], 0x9b
call fcn.00404892
push ebx
push ecx
mov eax, esp
mov dword [ebp - 0x18], esp
push 0xbd5
push eax
mov ecx, esi
call fcn.00679e4e
lea eax, [ebp - 0x8c]
push eax
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x9b
call fcn.0040263d
mov ecx, eax
call fcn.004048a4
push eax
mov byte [ebp - 4], 0xa7
call fcn.00412550
mov edi, eax
pop ecx
neg edi
pop ecx
sbb edi, edi
lea ecx, [ebp - 0x3c]
neg edi
call fcn.0061d22d
lea ecx, [ebp - 0x8c]
mov dword [eax + 0x20], edi
mov byte [ebp - 4], 0x9b
call fcn.00404892
push ebx
push ecx
mov eax, esp
mov dword [ebp - 0x18], esp
push 0xbd6
push eax
mov ecx, esi
call fcn.00679e4e
lea eax, [ebp - 0x8c]
push eax
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x9b
call fcn.0040263d
mov ecx, eax
call fcn.004048a4
push eax
mov byte [ebp - 4], 0xa9
call fcn.00412550
mov edi, eax
pop ecx
neg edi
pop ecx
sbb edi, edi
lea ecx, [ebp - 0x3c]
neg edi
call fcn.0061d22d
lea ecx, [ebp - 0x8c]
mov dword [eax + 0x24], edi
mov byte [ebp - 4], 0x9b
call fcn.00404892
push ebx
push ecx
mov eax, esp
mov dword [ebp - 0x18], esp
push 0xbd8
push eax
mov ecx, esi
call fcn.00679e4e
lea eax, [ebp - 0x8c]
push eax
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x9b
call fcn.0040263d
mov ecx, eax
call fcn.004048a4
push eax
mov byte [ebp - 4], 0xab
call fcn.00412550
mov edi, eax
pop ecx
neg edi
pop ecx
sbb edi, edi
lea ecx, [ebp - 0x3c]
neg edi
call fcn.0061d22d
lea ecx, [ebp - 0x8c]
mov dword [eax + 0x28], edi
mov byte [ebp - 4], 0x9b
call fcn.00404892
push ebx
push ecx
mov eax, esp
mov dword [ebp - 0x18], esp
push 0xbd9
push eax
mov ecx, esi
call fcn.00679e4e
lea eax, [ebp - 0x8c]
push eax
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x9b
call fcn.0040263d
mov ecx, eax
call fcn.004048a4
push eax
mov byte [ebp - 4], 0xad
call fcn.00412550
mov edi, eax
pop ecx
neg edi
pop ecx
sbb edi, edi
lea ecx, [ebp - 0x3c]
neg edi
call fcn.0061d22d
lea ecx, [ebp - 0x8c]
mov dword [eax + 0x2c], edi
mov byte [ebp - 4], 0x9b
call fcn.00404892
push ebx
push ecx
mov eax, esp
mov dword [ebp - 0x18], esp
push 0x11de
push eax
mov ecx, esi
call fcn.00679e4e
lea eax, [ebp - 0x8c]
push eax
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x9b
call fcn.0040263d
mov ecx, eax
call fcn.004048a4
push eax
mov byte [ebp - 4], 0xaf
call fcn.00412550
mov edi, eax
pop ecx
neg edi
pop ecx
sbb edi, edi
lea ecx, [ebp - 0x3c]
neg edi
call fcn.0061d22d
lea ecx, [ebp - 0x8c]
mov dword [eax + 0x30], edi
mov byte [ebp - 4], 0x9b
call fcn.00404892
push ebx
push ecx
mov eax, esp
mov dword [ebp - 0x18], esp
push 0xdb2
push eax
mov ecx, esi
call fcn.00679e4e
lea eax, [ebp - 0x8c]
push eax
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x9b
call fcn.0040263d
mov ecx, eax
call fcn.004048a4
push eax
mov byte [ebp - 4], 0xb1
call fcn.00412550
mov edi, eax
pop ecx
neg edi
pop ecx
sbb edi, edi
lea ecx, [ebp - 0x3c]
neg edi
call fcn.0061d22d
lea ecx, [ebp - 0x8c]
mov dword [eax + 0x34], edi
mov byte [ebp - 4], 0x9b
call fcn.00404892
push ebx
push ecx
mov eax, esp
mov dword [ebp - 0x18], esp
push 0x11e1
push eax
mov ecx, esi
call fcn.00679e4e
lea eax, [ebp - 0x8c]
push eax
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x9b
call fcn.0040263d
mov ecx, eax
call fcn.004048a4
mov byte [ebp - 4], 0xb3
push eax
call fcn.00412550
mov edi, eax
pop ecx
neg edi
pop ecx
sbb edi, edi
lea ecx, [ebp - 0x3c]
neg edi
call fcn.0061d22d
lea ecx, [ebp - 0x8c]
mov dword [eax + 0x38], edi
mov byte [ebp - 4], 0x9b
call fcn.00404892
lea eax, [ebp - 0x74]
push eax
lea ecx, [ebp - 0x5c]
call fcn.0040263d
mov ecx, eax
call fcn.00404960
push eax
lea ecx, [ebp - 0xac]
mov byte [ebp - 4], 0xb4
call fcn.004035f5
lea ecx, [ebp - 0x74]
call fcn.00402623
lea ecx, [ebp - 0x128]
call fcn.00550bb6
mov byte [ebp - 4], 0xb7
mov dword [ebp - 0xc8], ebx
lea ecx, [ebp - 0xac]
call fcn.005593b9
mov ecx, dword [eax]
lea edx, [ebp - 0xc8]
push edx
lea edx, [ebp - 0x128]
push edx
push 1
push eax
call dword [ecx + 0xc]
test eax, eax
jne 0x61cf46
mov edi, dword [ebp - 0x120]
push 0x3b4
lea eax, [ebp - 0x7c]
push eax
mov ecx, esi
call fcn.00679d86
mov ecx, eax
mov byte [ebp - 4], 0xb8
call fcn.00411641
push eax
push edi
call fcn.0087c71f
test eax, eax
pop ecx
pop ecx
je 0x61cee4
push 0x6af
lea eax, [ebp - 0x6c]
push eax
mov ecx, esi
call fcn.00679d86
mov ecx, eax
mov byte [ebp - 4], 0xb9
call fcn.00411641
push eax
push edi
call fcn.0087c71f
neg eax
pop ecx
sbb al, al
pop ecx
inc al
lea ecx, [ebp - 0x6c]
mov byte [ebp - 0x11], al
mov byte [ebp - 4], 0xb8
call fcn.00402676
cmp byte [ebp - 0x11], bl
jne 0x61cee4
push 0x6a3
lea eax, [ebp - 0x50]
push eax
mov ecx, esi
call fcn.00679d86
mov ecx, eax
mov byte [ebp - 4], 0xba
call fcn.00411641
push eax
push edi
call fcn.0087c71f
neg eax
pop ecx
sbb al, al
pop ecx
inc al
lea ecx, [ebp - 0x50]
mov byte [ebp - 0x11], al
mov byte [ebp - 4], 0xb8
call fcn.00402676
cmp byte [ebp - 0x11], bl
jne 0x61cee4
push 0x6ae
lea eax, [ebp - 0x70]
push eax
mov ecx, esi
call fcn.00679d86
mov ecx, eax
mov byte [ebp - 4], 0xbb
call fcn.00411641
push eax
push edi
call fcn.0087c71f
neg eax
pop ecx
sbb al, al
pop ecx
inc al
lea ecx, [ebp - 0x70]
mov byte [ebp - 0x11], al
mov byte [ebp - 4], 0xb8
call fcn.00402676
cmp byte [ebp - 0x11], bl
jne 0x61cee4
push 0x3ef
lea eax, [ebp - 0x78]
push eax
mov ecx, esi
call fcn.00679d86
mov ecx, eax
mov byte [ebp - 4], 0xbc
call fcn.00411641
push eax
push edi
call fcn.0087c71f
neg eax
pop ecx
sbb al, al
pop ecx
inc al
lea ecx, [ebp - 0x78]
mov byte [ebp - 0x11], al
mov byte [ebp - 4], 0xb8
call fcn.00402676
cmp byte [ebp - 0x11], bl
jne 0x61cee4
push 0x40c
lea eax, [ebp - 0x94]
push eax
mov ecx, esi
call fcn.00679d86
mov ecx, eax
mov byte [ebp - 4], 0xbd
call fcn.00411641
push eax
push edi
call fcn.0087c71f
neg eax
pop ecx
sbb al, al
pop ecx
inc al
lea ecx, [ebp - 0x94]
mov byte [ebp - 0x11], al
mov byte [ebp - 4], 0xb8
call fcn.00402676
cmp byte [ebp - 0x11], bl
jne 0x61cee4
push 0x40d
lea eax, [ebp - 0x98]
push eax
mov ecx, esi
call fcn.00679d86
mov ecx, eax
mov byte [ebp - 4], 0xbe
call fcn.00411641
push eax
push edi
call fcn.0087c71f
neg eax
pop ecx
sbb al, al
pop ecx
inc al
lea ecx, [ebp - 0x98]
mov byte [ebp - 0x11], al
mov byte [ebp - 4], 0xb8
call fcn.00402676
cmp byte [ebp - 0x11], bl
jne 0x61cee4
push 0x411
lea eax, [ebp - 0xb0]
push eax
mov ecx, esi
call fcn.00679d86
mov ecx, eax
mov byte [ebp - 4], 0xbf
call fcn.00411641
push eax
push edi
call fcn.0087c71f
neg eax
pop ecx
sbb al, al
pop ecx
inc al
lea ecx, [ebp - 0xb0]
mov byte [ebp - 0x11], al
mov byte [ebp - 4], 0xb8
call fcn.00402676
cmp byte [ebp - 0x11], bl
jne 0x61cee4
push 0x437
lea eax, [ebp - 0xa8]
push eax
mov ecx, esi
call fcn.00679d86
mov ecx, eax
mov byte [ebp - 4], 0xc0
call fcn.00411641
push eax
push edi
call fcn.0087c71f
neg eax
pop ecx
sbb al, al
pop ecx
inc al
lea ecx, [ebp - 0xa8]
mov byte [ebp - 0x11], al
mov byte [ebp - 4], 0xb8
call fcn.00402676
cmp byte [ebp - 0x11], bl
jne 0x61cee4
push 0x435
lea eax, [ebp - 0xb4]
push eax
mov ecx, esi
call fcn.00679d86
mov ecx, eax
mov byte [ebp - 4], 0xc1
call fcn.00411641
push eax
push edi
call fcn.0087c71f
neg eax
pop ecx
sbb al, al
pop ecx
inc al
lea ecx, [ebp - 0xb4]
mov byte [ebp - 0x11], al
mov byte [ebp - 4], 0xb8
call fcn.00402676
cmp byte [ebp - 0x11], bl
jne 0x61cee4
push 0x436
lea eax, [ebp - 0x58]
push eax
mov ecx, esi
call fcn.00679d86
mov ecx, eax
mov byte [ebp - 4], 0xc2
call fcn.00411641
push eax
push edi
call fcn.0087c71f
neg eax
pop ecx
sbb al, al
pop ecx
inc al
lea ecx, [ebp - 0x58]
mov byte [ebp - 0x11], al
mov byte [ebp - 4], 0xb8
call fcn.00402676
cmp byte [ebp - 0x11], bl
jne 0x61cee4
push 0x438
lea eax, [ebp - 0x64]
push eax
mov ecx, esi
call fcn.00679d86
mov ecx, eax
mov byte [ebp - 4], 0xc3
call fcn.00411641
push eax
push edi
call fcn.0087c71f
neg eax
pop ecx
sbb al, al
pop ecx
inc al
lea ecx, [ebp - 0x64]
mov byte [ebp - 0x11], al
mov byte [ebp - 4], 0xb8
call fcn.00402676
cmp byte [ebp - 0x11], bl
mov byte [ebp - 0x11], bl
je 0x61cee8
mov byte [ebp - 0x11], 1
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0xb7
call fcn.00402676
cmp byte [ebp - 0x11], bl
jne 0x61cf36
lea eax, [ebp - 0x128]
push eax
lea eax, [ebp - 0xa4]
push eax
call fcn.00405a23
pop ecx
pop ecx
push 0xffffffffffffffff
push eax
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 0xc4
call fcn.0061d22d
mov ecx, eax
add ecx, 0x3c
call fcn.0061d1e7
lea ecx, [ebp - 0xa4]
mov byte [ebp - 4], 0xb7
call fcn.00403621
lea ecx, [ebp - 0x128]
call fcn.00550ba4
jmp 0x61cb9e
mov edi, dword [ebp + 8]
push ebx
lea eax, [ebp + 8]
mov esi, 0x979530
push eax
mov ecx, esi
mov dword [ebp + 8], edi
call fcn.0061d57d
test eax, eax
jne 0x61cf76
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp + 8]
push eax
mov ecx, esi
mov dword [ebp + 8], edi
call fcn.0061d204
push 1
pop ebx
lea ecx, [ebp - 0x128]
mov byte [ebp - 4], 0xb6
call fcn.00404892
lea ecx, [ebp - 0xac]
call fcn.00402653
lea ecx, [ebp - 0x188]
mov byte [ebp - 4], 0x99
call fcn.00404892
lea ecx, [ebp - 0x168]
mov byte [ebp - 4], 0x97
call fcn.00404892
lea ecx, [ebp - 0x158]
mov byte [ebp - 4], 0x7e
call fcn.00404892
lea ecx, [ebp - 0x9c]
call fcn.00402630
lea ecx, [ebp - 0xa0]
call fcn.00402630
lea ecx, [ebp - 0x90]
call fcn.00402630
lea ecx, [ebp - 0x60]
call fcn.00402630
lea ecx, [ebp - 0x5c]
call fcn.00402630
lea ecx, [ebp - 0x40]
call fcn.00402630
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 1
call fcn.0061d217
lea ecx, [ebp + 0xc]
call fcn.00402630
lea ecx, [ebp + 0x10]
call fcn.00402630
mov eax, ebx
jmp 0x61d111
lea eax, [ebp - 0x188]
push eax
mov byte [ebp - 4], 0x99
call fcn.00402bc3
cmp eax, ebx
pop ecx
jge 0x61d034
push eax
call fcn.00878dfb
lea eax, [ebp - 0x168]
push eax
mov byte [ebp - 4], 0x97
call fcn.00402bc3
cmp eax, ebx
pop ecx
jge 0x61d04f
push eax
call fcn.00878dfb
lea eax, [ebp - 0x158]
push eax
mov byte [ebp - 4], 0x7e
call fcn.00402bc3
cmp eax, ebx
pop ecx
jge 0x61d06a
push eax
call fcn.00878dfb
mov eax, dword [ebp - 0x9c]
cmp eax, ebx
mov byte [ebp - 4], 0x6b
je 0x61d07e
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0xa0]
mov byte [ebp - 4], 0x41
cmp eax, ebx
je 0x61d092
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x90]
cmp eax, ebx
mov byte [ebp - 4], 0xc
je 0x61d0a6
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x60]
cmp eax, ebx
mov byte [ebp - 4], 7
je 0x61d0b7
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x5c]
cmp eax, ebx
mov byte [ebp - 4], 6
je 0x61d0c8
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x40]
cmp eax, ebx
mov byte [ebp - 4], 2
je 0x61d0d9
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
cmp dword [ebp - 0x38], ebx
mov byte [ebp - 4], 1
je 0x61d0ee
push ebx
lea ecx, [ebp - 0x3c]
call fcn.0061d2a0
mov dword [ebp - 0x38], ebx
mov eax, dword [ebp + 0xc]
cmp eax, ebx
mov byte [ebp - 4], bl
je 0x61d0fe
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp + 0x10]
or dword [ebp - 4], 0xffffffff
cmp eax, ebx
je 0x61d10f
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
xor eax, eax
mov ecx, dword [ebp - 0xc]
lea esp, [ebp - 0x1f4]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
leave
ret