Function at 0x5e6b86
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x681697
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
mov eax, 0x61d4
call fcn.0065c660
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 4], 1
mov dword [ebp - 0x358], 0
mov dword [ebp - 0x238], 0
mov dword [ebp - 0x248], 0
mov dword [ebp - 0x234], 0
mov byte [ebp - 0x368], 0
call fcn.00413dd0
push eax
lea ecx, [ebp - 0x350]
call fcn.0062f500
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x258]
call fcn.0065a9e4
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x244]
call fcn.0065a9e4
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x5d0c]
call fcn.005f8bb0
mov byte [ebp - 4], 5
push str.._r_n____
lea ecx, [ebp - 0x5f60]
call fcn.0065aa4a
mov dword [ebp - 0x6070], eax
mov eax, dword [ebp - 0x6070]
mov dword [ebp - 0x6074], eax
mov byte [ebp - 4], 6
push ecx
mov esi, esp
mov dword [ebp - 0x5f5c], esp
mov ecx, dword [ebp - 0x6074]
push ecx
push 0x6fef28
lea ecx, [ebp - 0x5f64]
call fcn.0065aa4a
mov dword [ebp - 0x6078], eax
mov edx, dword [ebp - 0x6078]
mov dword [ebp - 0x607c], edx
mov byte [ebp - 4], 7
mov eax, dword [ebp - 0x607c]
push eax
push esi
call fcn.0065aeac
mov dword [ebp - 0x6080], eax
lea ecx, [ebp - 0x5d0c]
call fcn.005f8f39
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x5f64]
call fcn.0065a9ea
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x5f60]
call fcn.0065a9ea
mov dword [ebp - 0x378], 0
lea ecx, [ebp - 0x5d0c]
call fcn.005f94dd
test eax, eax
jg 0x5e6d5d
push 0
push 0
push 0x6ef974
call fcn.00413dd0
mov ecx, eax
call fcn.0065adaa
mov dword [ebp - 0x5f68], 0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x5d0c]
call fcn.005f8d5e
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x244]
call fcn.0065a9ea
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x258]
call fcn.0065a9ea
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x350]
call fcn.0062f5ea
mov byte [ebp - 4], 0
lea ecx, [ebp + 8]
call fcn.0065a9ea
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0xc]
call fcn.0065a9ea
mov eax, dword [ebp - 0x5f68]
jmp 0x5e89cd
lea ecx, [ebp - 0x240]
call fcn.0065a9e4
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x230]
call fcn.0065a9e4
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x364]
call fcn.0065a9e4
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x364]
push ecx
lea edx, [ebp - 0x230]
push edx
lea eax, [ebp + 8]
push eax
call fcn.005f067a
add esp, 0xc
push 0x6ef994
lea ecx, [ebp - 0x230]
push ecx
lea edx, [ebp - 0x5f6c]
push edx
call fcn.0065aa08
mov dword [ebp - 0x6084], eax
mov eax, dword [ebp - 0x6084]
mov dword [ebp - 0x6088], eax
mov byte [ebp - 4], 0xb
mov ecx, dword [ebp - 0x6088]
push ecx
lea ecx, [ebp - 0x240]
call fcn.0065aa2c
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x5f6c]
call fcn.0065a9ea
lea edx, [ebp - 0x230]
push edx
lea ecx, [ebp - 0x244]
call fcn.0065aa2c
lea ecx, [ebp - 0x23c]
call fcn.0065a9e4
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x250]
call fcn.0065a9e4
mov byte [ebp - 4], 0xd
push 0x6fef28
lea ecx, [ebp - 0x23c]
call fcn.0065abd6
push 0x6ef99c
lea ecx, [ebp - 0x23c]
call fcn.0065aa44
lea eax, [ebp - 0x240]
push eax
lea ecx, [ebp - 0x23c]
call fcn.0065ad92
lea ecx, [ebp + 0xc]
push ecx
lea ecx, [ebp - 0x250]
call fcn.0065aa2c
push 4
lea edx, [ebp - 0x5f70]
push edx
lea ecx, [ebp + 0xc]
call fcn.0065ad8c
mov dword [ebp - 0x608c], eax
mov eax, dword [ebp - 0x608c]
mov dword [ebp - 0x6090], eax
mov byte [ebp - 4], 0xe
mov ecx, dword [ebp - 0x6090]
push ecx
lea ecx, [ebp - 0x240]
call fcn.0065aa2c
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x5f70]
call fcn.0065a9ea
lea ecx, [ebp - 0x240]
call fcn.0065b1dc
push 0x6ef9a4
lea edx, [ebp - 0x240]
push edx
call fcn.004350b0
and eax, 0xff
test eax, eax
je 0x5e6f20
push 0x6ef9ac
lea eax, [ebp - 0x250]
push eax
lea ecx, [ebp - 0x5f74]
push ecx
call fcn.0065aa08
mov dword [ebp - 0x6094], eax
mov edx, dword [ebp - 0x6094]
mov dword [ebp - 0x6098], edx
mov byte [ebp - 4], 0xf
mov eax, dword [ebp - 0x6098]
push eax
lea ecx, [ebp - 0x250]
call fcn.0065aa2c
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x5f74]
call fcn.0065a9ea
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x250]
call fcn.00403190
push eax
call fcn.004a270c
add esp, 4
mov dword [ebp - 0x358], eax
cmp dword [ebp - 0x358], 0
jne 0x5e6feb
mov dword [ebp - 0x248], 1
mov byte [ebp - 0x368], 1
push ecx
mov ecx, esp
mov dword [ebp - 0x5f78], esp
lea edx, [ebp - 0x250]
push edx
call fcn.0065aa3e
mov dword [ebp - 0x609c], eax
call fcn.005eb679
add esp, 4
push 0x10f0
call fcn.0065aa38
add esp, 4
mov dword [ebp - 0x5f7c], eax
mov byte [ebp - 4], 0x11
cmp dword [ebp - 0x5f7c], 0
je 0x5e6fc0
push 0
lea ecx, [ebp - 0x250]
call fcn.00403190
push eax
mov ecx, dword [ebp - 0x5f7c]
call fcn.004a2a52
mov dword [ebp - 0x60a0], eax
jmp 0x5e6fca
mov dword [ebp - 0x60a0], 0
mov eax, dword [ebp - 0x60a0]
mov dword [ebp - 0x5f80], eax
mov byte [ebp - 4], 0x10
mov ecx, dword [ebp - 0x5f80]
mov dword [ebp - 0x358], ecx
call fcn.004a2a2b
push ecx
mov ecx, esp
mov dword [ebp - 0x5f84], esp
lea edx, [ebp - 0x23c]
push edx
call fcn.0065aa3e
mov dword [ebp - 0x60a4], eax
call fcn.005bad8d
add esp, 4
test eax, eax
jne 0x5e70d5
lea ecx, [ebp - 0x5d10]
call fcn.0065a9e4
mov byte [ebp - 4], 0x12
push 0x6fef28
lea ecx, [ebp - 0x5d10]
call fcn.0065abd6
push 0x6ef9b4
lea ecx, [ebp - 0x5d10]
call fcn.0065aa44
push 0x6ef9bc
lea eax, [ebp - 0x230]
push eax
lea ecx, [ebp - 0x5f88]
push ecx
call fcn.0065aa08
mov dword [ebp - 0x60a8], eax
mov edx, dword [ebp - 0x60a8]
mov dword [ebp - 0x60ac], edx
mov byte [ebp - 4], 0x13
mov eax, dword [ebp - 0x60ac]
push eax
lea ecx, [ebp - 0x240]
call fcn.0065aa2c
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x5f88]
call fcn.0065a9ea
lea ecx, [ebp - 0x240]
push ecx
lea ecx, [ebp - 0x5d10]
call fcn.0065ad92
push 0
lea ecx, [ebp - 0x23c]
call fcn.00403190
push eax
lea ecx, [ebp - 0x5d10]
call fcn.00403190
push eax
call dword [0x705b1c]
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x5d10]
call fcn.0065a9ea
lea ecx, [ebp - 0x23c]
call fcn.00403190
push eax
call fcn.004a270c
add esp, 4
mov dword [ebp - 0x238], eax
cmp dword [ebp - 0x238], 0
jne 0x5e719c
mov dword [ebp - 0x234], 1
mov byte [ebp - 0x368], 2
push ecx
mov ecx, esp
mov dword [ebp - 0x5f8c], esp
lea edx, [ebp - 0x23c]
push edx
call fcn.0065aa3e
mov dword [ebp - 0x60b0], eax
call fcn.005eb679
add esp, 4
push 0x10f0
call fcn.0065aa38
add esp, 4
mov dword [ebp - 0x5f90], eax
mov byte [ebp - 4], 0x14
cmp dword [ebp - 0x5f90], 0
je 0x5e7171
push 0
lea ecx, [ebp - 0x23c]
call fcn.00403190
push eax
mov ecx, dword [ebp - 0x5f90]
call fcn.004a2a52
mov dword [ebp - 0x60b4], eax
jmp 0x5e717b
mov dword [ebp - 0x60b4], 0
mov eax, dword [ebp - 0x60b4]
mov dword [ebp - 0x5f94], eax
mov byte [ebp - 4], 0x10
mov ecx, dword [ebp - 0x5f94]
mov dword [ebp - 0x238], ecx
call fcn.004a2a2b
jmp 0x5e7598
mov dword [ebp - 4], 0xd
mov dword [ebp - 0x370], 1
mov ecx, dword [ebp - 0x238]
call fcn.004a5583
test eax, eax
ja 0x5e75d8
lea ecx, [ebp - 0x23c]
call fcn.00403150
push eax
lea ecx, [ebp - 0x23c]
call fcn.0065aa26
push eax
call fcn.005ea815
add esp, 4
mov edx, dword [ebp - 0x238]
add edx, 0x528
push edx
mov ecx, dword [ebp - 0x358]
call fcn.004a6083
test eax, eax
jne 0x5e777e
push 4
push 0x6ef9f4
push 0x6ef9fc
call fcn.00413dd0
mov ecx, eax
call fcn.0065adaa
cmp eax, 7
jne 0x5e7774
cmp dword [ebp - 0x248], 0
je 0x5e766b
cmp dword [ebp - 0x358], 0
je 0x5e766b
mov eax, dword [ebp - 0x358]
mov dword [ebp - 0x5fd8], eax
mov ecx, dword [ebp - 0x5fd8]
mov dword [ebp - 0x5fd4], ecx
cmp dword [ebp - 0x5fd4], 0
je 0x5e7661
push 1
mov ecx, dword [ebp - 0x5fd4]
call fcn.00403120
mov dword [ebp - 0x6110], eax
jmp 0x5e766b
mov dword [ebp - 0x6110], 0
cmp dword [ebp - 0x234], 0
je 0x5e76bd
cmp dword [ebp - 0x238], 0
je 0x5e76bd
mov edx, dword [ebp - 0x238]
mov dword [ebp - 0x5fe0], edx
mov eax, dword [ebp - 0x5fe0]
mov dword [ebp - 0x5fdc], eax
cmp dword [ebp - 0x5fdc], 0
je 0x5e76b3
push 1
mov ecx, dword [ebp - 0x5fdc]
call fcn.00403120
mov dword [ebp - 0x6114], eax
jmp 0x5e76bd
mov dword [ebp - 0x6114], 0
mov dword [ebp - 0x5fe4], 0
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x250]
call fcn.0065a9ea
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x23c]
call fcn.0065a9ea
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x364]
call fcn.0065a9ea
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x230]
call fcn.0065a9ea
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x240]
call fcn.0065a9ea
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x5d0c]
call fcn.005f8d5e
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x244]
call fcn.0065a9ea
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x258]
call fcn.0065a9ea
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x350]
call fcn.0062f5ea
mov byte [ebp - 4], 0
lea ecx, [ebp + 8]
call fcn.0065a9ea
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0xc]
call fcn.0065a9ea
mov eax, dword [ebp - 0x5fe4]
jmp 0x5e89cd
mov dword [ebp - 0x370], 0
mov dword [ebp - 0x24c], 0
mov ecx, dword [ebp - 0x358]
call fcn.004a5583
mov dword [ebp - 0x36c], eax
mov dword [ebp - 0x360], 0
mov dword [ebp - 0x354], 0
mov dword [ebp - 0x2f0], 1
mov dword [ebp - 0x2ec], 1
lea ecx, [ebp - 0x350]
call fcn.0062f97e
push 1
lea ecx, [ebp - 0x350]
call fcn.0062f7a1
lea ecx, [ebp - 0x35c]
call fcn.0065a9e4
mov byte [ebp - 4], 0x20
push 0x6efa18
lea ecx, [ebp - 0x244]
push ecx
push 0x6efa20
lea ecx, [ebp - 0x5fe8]
call fcn.0065aa4a
mov dword [ebp - 0x6118], eax
mov edx, dword [ebp - 0x6118]
mov dword [ebp - 0x611c], edx
mov byte [ebp - 4], 0x21
mov eax, dword [ebp - 0x611c]
push eax
lea ecx, [ebp - 0x5fec]
push ecx
call fcn.0065aeac
mov dword [ebp - 0x6120], eax
mov edx, dword [ebp - 0x6120]
mov dword [ebp - 0x6124], edx
mov byte [ebp - 4], 0x22
mov eax, dword [ebp - 0x6124]
push eax
lea ecx, [ebp - 0x5ff0]
push ecx
call fcn.0065aa08
mov dword [ebp - 0x6128], eax
mov edx, dword [ebp - 0x6128]
mov dword [ebp - 0x612c], edx
mov byte [ebp - 4], 0x23
mov eax, dword [ebp - 0x612c]
push eax
lea ecx, [ebp - 0x35c]
call fcn.0065aa2c
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x5ff0]
call fcn.0065a9ea
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x5fec]
call fcn.0065a9ea
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x5fe8]
call fcn.0065a9ea
push ecx
mov ecx, esp
mov dword [ebp - 0x5ff4], esp
lea edx, [ebp - 0x35c]
push edx
call fcn.0065aa3e
mov dword [ebp - 0x6130], eax
lea ecx, [ebp - 0x350]
call fcn.0062f7e7
push ecx
mov ecx, esp
mov dword [ebp - 0x5ff8], esp
push 0x6efa38
call fcn.0065aa4a
mov dword [ebp - 0x6134], eax
mov eax, dword [ebp - 0x36c]
push eax
lea ecx, [ebp - 0x350]
call fcn.0062f851
mov dword [ebp - 0x14], 1
mov dword [ebp - 0x254], 1
jmp 0x5e791e
mov ecx, dword [ebp - 0x254]
add ecx, 1
mov dword [ebp - 0x254], ecx
mov edx, dword [ebp - 0x254]
cmp edx, dword [ebp - 0x36c]
ja 0x5e8852
mov eax, dword [ebp - 0x254]
push eax
lea ecx, [ebp - 0x258]
push ecx
mov ecx, dword [ebp - 0x358]
call fcn.005a9f3d
mov edx, dword [ebp - 0x254]
push edx
lea eax, [ebp - 0x22c]
push eax
mov ecx, dword [ebp - 0x358]
call fcn.0051ebaf
mov ecx, dword [ebp - 0x254]
push ecx
mov ecx, dword [ebp - 0x358]
call fcn.005aa589
mov byte [ebp - 0x5d14], al
lea ecx, [ebp - 0x350]
call fcn.0062f960
push 0x100
push 0x20
lea edx, [ebp - 0x218]
push edx
call fcn.0065c656
add esp, 0xc
mov byte [ebp - 0x118], 0
push 0x100
lea ecx, [ebp - 0x258]
call fcn.0065aa26
push eax
call fcn.005fdb04
add esp, 4
test eax, eax
jne 0x5e882d
push 0x100
lea ecx, [ebp - 0x258]
call fcn.0065aa26
push eax
lea eax, [ebp - 0x218]
push eax
call fcn.0065c460
add esp, 8
mov ecx, dword [0x6ff14c]
mov byte [ebp + ecx - 0x218], 0
lea edx, [ebp - 0x218]
push edx
lea eax, [ebp - 0x5d18]
push eax
call fcn.0062a247
add esp, 8
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0x5d18]
call fcn.0065afc0
cmp dword [ebp - 0x22c], 0
je 0x5e881e
lea ecx, [ebp - 0x218]
push ecx
lea ecx, [ebp - 0x5d0c]
call fcn.005fa747
test eax, eax
je 0x5e8261
lea edx, [ebp - 0x22c]
push edx
push 0x100
lea ecx, [ebp - 0x244]
call fcn.0065aa26
push eax
lea ecx, [ebp - 0x5d0c]
call fcn.005fa3f6
mov dword [ebp - 0x24c], eax
cmp dword [ebp - 0x24c], 0
jne 0x5e7ac6
push 0
mov ecx, dword [ebp - 0x238]
call fcn.004a8f1b
mov dword [ebp - 0x24c], eax
mov eax, dword [ebp - 0x24c]
push eax
lea ecx, [ebp - 0x22c]
push ecx
push 0x100
lea ecx, [ebp - 0x244]
call fcn.0065aa26
push eax
lea ecx, [ebp - 0x5d0c]
call fcn.005f9bb6
lea ecx, [ebp - 0x5d0c]
call fcn.005fa9b3
mov dword [ebp - 0x360], 1
jmp 0x5e825f
cmp dword [ebp - 0x24c], 1
jne 0x5e7d77
push 0
mov ecx, dword [ebp - 0x238]
call fcn.004a8f1b
mov dword [ebp - 0x24c], eax
push 1
lea edx, [ebp - 0x22c]
push edx
push 0x100
lea ecx, [ebp - 0x244]
call fcn.0065aa26
push eax
lea ecx, [ebp - 0x5d0c]
call fcn.005f9dad
mov eax, dword [ebp - 0x24c]
push eax
lea ecx, [ebp - 0x22c]
push ecx
push 0x100
lea ecx, [ebp - 0x244]
call fcn.0065aa26
push eax
lea ecx, [ebp - 0x5d0c]
call fcn.005f9bb6
lea ecx, [ebp - 0x5d0c]
call fcn.005fa9b3
push 0
push 1
mov edx, dword [ebp - 0x238]
add edx, 0x528
push edx
lea ecx, [ebp - 0x5da8]
call fcn.0049b400
mov byte [ebp - 4], 0x25
mov eax, dword [ebp - 0x24c]
push eax
lea ecx, [ebp - 0x5da8]
call fcn.0049ee65
mov dword [ebp - 0x5d2c], 1
push 1
lea ecx, [ebp - 0x5da8]
call fcn.0049d13d
push 0x6ff8d8
lea ecx, [ebp - 0x5dac]
call fcn.0065aa4a
mov byte [ebp - 4], 0x26
cmp dword [0x6e4dc8], 0
je 0x5e7bf3
lea ecx, [ebp - 0x5d0c]
push ecx
lea edx, [ebp - 0x5ffc]
push edx
call fcn.005f5288
add esp, 8
mov dword [ebp - 0x6138], eax
mov eax, dword [ebp - 0x6138]
mov dword [ebp - 0x613c], eax
mov byte [ebp - 4], 0x27
mov ecx, dword [ebp - 0x613c]
push ecx
lea ecx, [ebp - 0x5dac]
call fcn.0065aa2c
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0x5ffc]
call fcn.0065a9ea
lea ecx, [ebp - 0x5dac]
call fcn.0040df80
test eax, eax
je 0x5e7c4b
lea edx, [ebp - 0x218]
push edx
lea ecx, [ebp - 0x6000]
call fcn.0065aa4a
mov dword [ebp - 0x6140], eax
mov eax, dword [ebp - 0x6140]
mov dword [ebp - 0x6144], eax
mov byte [ebp - 4], 0x28
mov ecx, dword [ebp - 0x6144]
push ecx
lea ecx, [ebp - 0x5dac]
call fcn.0065aa2c
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0x6000]
call fcn.0065a9ea
mov edx, dword [ebp - 0x24c]
push edx
push ecx
mov ecx, esp
mov dword [ebp - 0x6004], esp
lea eax, [ebp - 0x5dac]
push eax
call fcn.0065aa3e
mov dword [ebp - 0x6148], eax
mov ecx, dword [ebp - 0x238]
call fcn.005a9e55
mov cl, byte [ebp - 0x5d14]
push ecx
mov edx, dword [ebp - 0x24c]
push edx
mov ecx, dword [ebp - 0x238]
call fcn.005aa5f7
mov eax, dword [ebp - 0x24c]
push eax
lea ecx, [ebp - 0x22c]
push ecx
mov ecx, dword [ebp - 0x238]
call fcn.0051eab3
push 0
push 0
mov edx, dword [ebp - 0x238]
add edx, 0x528
push edx
lea ecx, [ebp - 0x5e48]
call fcn.0049b400
mov byte [ebp - 4], 0x29
push 1
lea ecx, [ebp - 0x5e48]
call fcn.0049ee65
mov dword [ebp - 0x5dcc], 1
push 1
lea ecx, [ebp - 0x5e48]
call fcn.0049d13d
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x6008], esp
push 0x6ff8dc
call fcn.0065aa4a
mov dword [ebp - 0x614c], eax
mov ecx, dword [ebp - 0x238]
call fcn.005a9e55
push 0
push 1
mov ecx, dword [ebp - 0x238]
call fcn.005aa5f7
push 0x14
push 0
lea eax, [ebp - 0x5dc0]
push eax
call fcn.0065c656
add esp, 0xc
push 1
lea ecx, [ebp - 0x5dc0]
push ecx
mov ecx, dword [ebp - 0x238]
call fcn.0051eab3
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0x5e48]
call fcn.0049b4fd
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0x5dac]
call fcn.0065a9ea
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0x5da8]
call fcn.0049b4fd
cmp dword [ebp + 0x10], 0
jne 0x5e7d91
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x5d18]
call fcn.0065a9ea
jmp 0x5e790f
lea ecx, [ebp - 0x5d20]
call fcn.0065a9e4
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0x5d1c]
call fcn.0065a9e4
mov byte [ebp - 4], 0x2b
lea edx, [ebp - 0x22c]
push edx
lea eax, [ebp - 0x5d1c]
push eax
call fcn.00455dcc
add esp, 8
lea ecx, [ebp - 0x230]
push ecx
push 0x6efa48
lea ecx, [ebp - 0x600c]
call fcn.0065aa4a
mov dword [ebp - 0x6150], eax
mov edx, dword [ebp - 0x6150]
mov dword [ebp - 0x6154], edx
mov byte [ebp - 4], 0x2c
mov eax, dword [ebp - 0x6154]
push eax
lea ecx, [ebp - 0x6010]
push ecx
call fcn.0065aeac
mov dword [ebp - 0x6158], eax
mov edx, dword [ebp - 0x6158]
mov dword [ebp - 0x615c], edx
mov byte [ebp - 4], 0x2d
mov eax, dword [ebp - 0x615c]
push eax
lea ecx, [ebp - 0x5d20]
call fcn.0065aa2c
mov byte [ebp - 4], 0x2c
lea ecx, [ebp - 0x6010]
call fcn.0065a9ea
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0x600c]
call fcn.0065a9ea
push 0x6efa50
lea ecx, [ebp - 0x6014]
call fcn.0065aa4a
mov dword [ebp - 0x6160], eax
mov ecx, dword [ebp - 0x6160]
mov dword [ebp - 0x6164], ecx
mov byte [ebp - 4], 0x2e
mov edx, dword [ebp - 0x6164]
push edx
lea ecx, [ebp - 0x5d20]
call fcn.0065ad92
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0x6014]
call fcn.0065a9ea
lea eax, [ebp - 0x5d18]
push eax
lea ecx, [ebp - 0x5d20]
call fcn.0065ad92
push 0x6efa60
lea ecx, [ebp - 0x6018]
call fcn.0065aa4a
mov dword [ebp - 0x6168], eax
mov ecx, dword [ebp - 0x6168]
mov dword [ebp - 0x616c], ecx
mov byte [ebp - 4], 0x2f
mov edx, dword [ebp - 0x616c]
push edx
lea ecx, [ebp - 0x5d20]
call fcn.0065ad92
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0x6018]
call fcn.0065a9ea
lea eax, [ebp - 0x5d1c]
push eax
lea ecx, [ebp - 0x5d20]
call fcn.0065ad92
cmp dword [0x6fad18], 0
jne 0x5e80e5
movsx ecx, byte [0x6fad1c]
test ecx, ecx
jne 0x5e80d6
cmp dword [ebp - 0x36c], 1
ja 0x5e7fe6
push 4
push 0x6efa70
push 0x6efa78
lea ecx, [ebp - 0x6020]
call fcn.0065aa4a
mov dword [ebp - 0x6170], eax
mov edx, dword [ebp - 0x6170]
mov dword [ebp - 0x6174], edx
mov byte [ebp - 4], 0x30
mov eax, dword [ebp - 0x6174]
push eax
lea ecx, [ebp - 0x5d20]
push ecx
lea edx, [ebp - 0x6024]
push edx
call fcn.0065aeac
mov dword [ebp - 0x6178], eax
mov eax, dword [ebp - 0x6178]
mov dword [ebp - 0x617c], eax
mov byte [ebp - 4], 0x31
mov ecx, dword [ebp - 0x617c]
call fcn.00403190
push eax
call fcn.00413dd0
mov ecx, eax
call fcn.0065adaa
xor ecx, ecx
cmp eax, 6
sete cl
mov byte [ebp - 0x601c], cl
mov byte [ebp - 4], 0x30
lea ecx, [ebp - 0x6024]
call fcn.0065a9ea
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0x6020]
call fcn.0065a9ea
mov edx, dword [ebp - 0x601c]
and edx, 0xff
test edx, edx
je 0x5e7fe1
mov dword [ebp - 0x360], 1
jmp 0x5e80d4
push ecx
mov ecx, esp
mov dword [ebp - 0x6028], esp
push 0x6efaa0
call fcn.0065aa4a
mov dword [ebp - 0x6180], eax
mov eax, dword [ebp - 0x6180]
mov dword [ebp - 0x6184], eax
mov byte [ebp - 4], 0x32
push 0x6efaa8
lea ecx, [ebp - 0x6030]
call fcn.0065aa4a
mov dword [ebp - 0x6188], eax
mov ecx, dword [ebp - 0x6188]
mov dword [ebp - 0x618c], ecx
mov byte [ebp - 4], 0x33
push ecx
mov edx, esp
mov dword [ebp - 0x602c], esp
mov eax, dword [ebp - 0x618c]
push eax
lea ecx, [ebp - 0x5d20]
push ecx
push edx
call fcn.0065aeac
mov dword [ebp - 0x6190], eax
push 0
mov byte [ebp - 4], 0x34
call fcn.005ffbf1
add esp, 0xc
mov dword [ebp - 0x360], eax
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0x6030]
call fcn.0065a9ea
cmp dword [ebp - 0x360], 6
jne 0x5e8090
mov dword [ebp - 0x360], 1
jmp 0x5e80d4
cmp dword [ebp - 0x360], 2
jne 0x5e80a5
mov dword [ebp - 0x360], 0xffffffff
jmp 0x5e80d4
cmp dword [ebp - 0x360], 7
jne 0x5e80ba
mov dword [ebp - 0x360], 0
jmp 0x5e80d4
cmp dword [ebp - 0x360], 0xa
jne 0x5e80d4
mov byte [0x6fad1c], 1
mov dword [ebp - 0x360], 1
jmp 0x5e80e0
mov dword [ebp - 0x360], 1
jmp 0x5e823a
movsx edx, byte [0x6fad1c]
test edx, edx
je 0x5e810a
movsx eax, byte [0x6fad1c]
cmp eax, 1
jne 0x5e8230
cmp dword [ebp - 0x14], 0
je 0x5e8230
push ecx
mov ecx, esp
mov dword [ebp - 0x6034], esp
push 0x6efad0
call fcn.0065aa4a
mov dword [ebp - 0x6194], eax
mov ecx, dword [ebp - 0x6194]
mov dword [ebp - 0x6198], ecx
mov byte [ebp - 4], 0x35
push 0x6efad8
lea ecx, [ebp - 0x603c]
call fcn.0065aa4a
mov dword [ebp - 0x619c], eax
mov edx, dword [ebp - 0x619c]
mov dword [ebp - 0x61a0], edx
mov byte [ebp - 4], 0x36
push ecx
mov eax, esp
mov dword [ebp - 0x6038], esp
mov ecx, dword [ebp - 0x61a0]
push ecx
lea edx, [ebp - 0x5d20]
push edx
push eax
call fcn.0065aeac
mov dword [ebp - 0x61a4], eax
mov eax, dword [ebp - 0x61a4]
mov dword [ebp - 0x61a8], eax
mov byte [ebp - 4], 0x37
call fcn.00413dd0
push eax
mov byte [ebp - 4], 0x38
call fcn.00658879
add esp, 0xc
mov dword [ebp - 0x360], eax
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0x603c]
call fcn.0065a9ea
cmp dword [ebp - 0x360], 6
jne 0x5e81c8
mov dword [ebp - 0x360], 1
jmp 0x5e822e
cmp dword [ebp - 0x360], 2
jne 0x5e81dd
mov dword [ebp - 0x360], 0xffffffff
jmp 0x5e822e
cmp dword [ebp - 0x360], 7
jne 0x5e81f2
mov dword [ebp - 0x360], 0
jmp 0x5e822e
cmp dword [ebp - 0x360], 0x4ab
jne 0x5e8211
mov byte [0x6fad1c], 1
mov dword [ebp - 0x360], 1
jmp 0x5e822e
cmp dword [ebp - 0x360], 0x575
jne 0x5e822e
mov byte [0x6fad1c], 2
mov dword [ebp - 0x360], 1
jmp 0x5e823a
mov dword [ebp - 0x360], 1
mov dword [ebp - 0x14], 0
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0x5d1c]
call fcn.0065a9ea
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0x5d20]
call fcn.0065a9ea
jmp 0x5e82cc
mov dword [ebp - 0x360], 1
push 0
mov ecx, dword [ebp - 0x238]
call fcn.004a8f1b
mov dword [ebp - 0x24c], eax
mov ecx, dword [0x6ff14c]
push ecx
lea edx, [ebp - 0x218]
push edx
lea ecx, [ebp - 0x5d0c]
call fcn.005f979d
mov eax, dword [ebp - 0x24c]
push eax
lea ecx, [ebp - 0x22c]
push ecx
push 0x100
lea ecx, [ebp - 0x244]
call fcn.0065aa26
push eax
lea ecx, [ebp - 0x5d0c]
call fcn.005f9bb6
lea ecx, [ebp - 0x5d0c]
call fcn.005fa9b3
cmp dword [ebp - 0x360], 1
jne 0x5e87d1
push ecx
mov esi, esp
mov dword [ebp - 0x6040], esp
push 0x6efb00
lea edx, [ebp - 0x5d18]
push edx
push 0x6efb08
lea ecx, [ebp - 0x6044]
call fcn.0065aa4a
mov dword [ebp - 0x61ac], eax
mov eax, dword [ebp - 0x61ac]
mov dword [ebp - 0x61b0], eax
mov byte [ebp - 4], 0x39
mov ecx, dword [ebp - 0x61b0]
push ecx
lea edx, [ebp - 0x6048]
push edx
call fcn.0065aeac
mov dword [ebp - 0x61b4], eax
mov eax, dword [ebp - 0x61b4]
mov dword [ebp - 0x61b8], eax
mov byte [ebp - 4], 0x3a
mov ecx, dword [ebp - 0x61b8]
push ecx
push esi
call fcn.0065aa08
mov dword [ebp - 0x61bc], eax
lea ecx, [ebp - 0x350]
call fcn.0062f8f6
mov byte [ebp - 4], 0x39
lea ecx, [ebp - 0x6048]
call fcn.0065a9ea
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0x6044]
call fcn.0065a9ea
cmp dword [ebp - 0x370], 0
je 0x5e83fb
push 0
mov edx, dword [ebp - 0x254]
push edx
mov eax, dword [ebp - 0x358]
add eax, 0x528
push eax
lea ecx, [ebp - 0x5ed4]
call fcn.0049b400
mov byte [ebp - 4], 0x3b
mov ecx, dword [ebp - 0x238]
add ecx, 0x528
push ecx
lea ecx, [ebp - 0x5ed4]
call fcn.0049f5ce
mov edx, dword [ebp - 0x24c]
push edx
lea ecx, [ebp - 0x5ed4]
call fcn.0049ee65
mov dword [ebp - 0x5e58], 1
push 1
lea ecx, [ebp - 0x5ed4]
call fcn.0049d13d
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0x5ed4]
call fcn.0049b4fd
jmp 0x5e86a1
lea eax, [ebp - 0x5ed8]
push eax
lea ecx, [ebp - 0x5ee0]
push ecx
push 0
mov ecx, dword [ebp - 0x238]
call fcn.00515030
lea edx, [ebp - 0x5eec]
push edx
lea eax, [ebp - 0x5ee4]
push eax
push 0
mov ecx, dword [ebp - 0x358]
call fcn.00515030
mov ecx, dword [ebp - 0x238]
call fcn.004a559c
test eax, eax
je 0x5e844b
mov ecx, dword [ebp - 0x238]
call fcn.0051c9b1
mov ecx, dword [ebp - 0x5ee0]
and ecx, 0xffff
mov edx, dword [ebp - 0x5ee4]
and edx, 0xffff
cmp ecx, edx
jge 0x5e8477
mov ax, word [ebp - 0x5ee0]
mov word [ebp - 0x61be], ax
jmp 0x5e8485
mov cx, word [ebp - 0x5ee4]
mov word [ebp - 0x61be], cx
mov dx, word [ebp - 0x61be]
mov word [ebp - 0x5ee8], dx
mov eax, dword [ebp - 0x5ed8]
and eax, 0xffff
mov ecx, dword [ebp - 0x5eec]
and ecx, 0xffff
cmp eax, ecx
jge 0x5e84be
mov dx, word [ebp - 0x5ed8]
mov word [ebp - 0x61c0], dx
jmp 0x5e84cc
mov ax, word [ebp - 0x5eec]
mov word [ebp - 0x61c0], ax
mov cx, word [ebp - 0x61c0]
mov word [ebp - 0x5ef0], cx
push 0
mov edx, dword [ebp - 0x24c]
push edx
mov ecx, dword [ebp - 0x238]
call fcn.0051d823
mov eax, dword [ebp - 0x238]
mov dword [eax + 0xfc0], 1
mov dword [ebp - 0x5edc], 1
jmp 0x5e8519
mov ecx, dword [ebp - 0x5edc]
add ecx, 1
mov dword [ebp - 0x5edc], ecx
mov edx, dword [ebp - 0x5ee8]
and edx, 0xffff
cmp dword [ebp - 0x5edc], edx
jg 0x5e8686
mov dword [ebp - 0x5ef4], 1
jmp 0x5e854c
mov eax, dword [ebp - 0x5ef4]
add eax, 1
mov dword [ebp - 0x5ef4], eax
mov ecx, dword [ebp - 0x5ef0]
and ecx, 0xffff
cmp dword [ebp - 0x5ef4], ecx
jg 0x5e8681
mov dx, word [ebp - 0x5edc]
mov word [ebp - 0x5f00], dx
mov ax, word [ebp - 0x5f00]
mov word [ebp - 0x5f06], ax
mov cx, word [ebp - 0x5ef4]
mov word [ebp - 0x5efe], cx
mov dx, word [ebp - 0x5efe]
mov word [ebp - 0x5f04], dx
lea eax, [ebp - 0x5f08]
push eax
lea ecx, [ebp - 0x5ef8]
push ecx
push 0
push 0
mov ecx, dword [ebp - 0x358]
call fcn.004a38f6
lea edx, [ebp - 0x5f08]
push edx
lea eax, [ebp - 0x5efc]
push eax
push 0
push 0
mov ecx, dword [ebp - 0x238]
call fcn.004a38f6
cmp dword [ebp - 0x5efc], 3
jne 0x5e85e4
jmp 0x5e853d
mov ecx, dword [ebp - 0x5ef8]
cmp ecx, dword [ebp - 0x5efc]
je 0x5e8616
cmp dword [ebp - 0x5ef8], 0
jne 0x5e8604
cmp dword [ebp - 0x5efc], 1
je 0x5e8616
cmp dword [ebp - 0x5ef8], 1
jne 0x5e867c
cmp dword [ebp - 0x5efc], 0
jne 0x5e867c
push 0
mov edx, dword [ebp - 0x254]
push edx
mov eax, dword [ebp - 0x5ef4]
push eax
mov ecx, dword [ebp - 0x5edc]
push ecx
lea edx, [ebp - 0x5f58]
push edx
mov ecx, dword [ebp - 0x358]
call fcn.0051b71c
cmp dword [ebp - 0x5f58], 0
je 0x5e867c
push 0
mov eax, dword [ebp - 0x24c]
push eax
mov ecx, dword [ebp - 0x5ef4]
push ecx
mov edx, dword [ebp - 0x5edc]
push edx
sub esp, 0x50
mov ecx, 0x14
lea esi, [ebp - 0x5f58]
mov edi, esp
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [ebp - 0x238]
call fcn.0051bb9b
jmp 0x5e853d
jmp 0x5e850a
mov eax, dword [ebp - 0x238]
mov dword [eax + 0xfc0], 0
mov ecx, dword [ebp - 0x238]
call fcn.0051db17
push 0x6ff8e0
lea ecx, [ebp - 0x5e4c]
call fcn.0065aa4a
mov byte [ebp - 4], 0x3c
cmp dword [0x6e4dc8], 0
je 0x5e870b
lea ecx, [ebp - 0x5d0c]
push ecx
lea edx, [ebp - 0x604c]
push edx
call fcn.005f5288
add esp, 8
mov dword [ebp - 0x61c4], eax
mov eax, dword [ebp - 0x61c4]
mov dword [ebp - 0x61c8], eax
mov byte [ebp - 4], 0x3d
mov ecx, dword [ebp - 0x61c8]
push ecx
lea ecx, [ebp - 0x5e4c]
call fcn.0065aa2c
mov byte [ebp - 4], 0x3c
lea ecx, [ebp - 0x604c]
call fcn.0065a9ea
lea ecx, [ebp - 0x5e4c]
call fcn.0040df80
test eax, eax
je 0x5e8763
lea edx, [ebp - 0x218]
push edx
lea ecx, [ebp - 0x6050]
call fcn.0065aa4a
mov dword [ebp - 0x61cc], eax
mov eax, dword [ebp - 0x61cc]
mov dword [ebp - 0x61d0], eax
mov byte [ebp - 4], 0x3e
mov ecx, dword [ebp - 0x61d0]
push ecx
lea ecx, [ebp - 0x5e4c]
call fcn.0065aa2c
mov byte [ebp - 4], 0x3c
lea ecx, [ebp - 0x6050]
call fcn.0065a9ea
mov edx, dword [ebp - 0x24c]
push edx
push ecx
mov ecx, esp
mov dword [ebp - 0x6054], esp
lea eax, [ebp - 0x5e4c]
push eax
call fcn.0065aa3e
mov dword [ebp - 0x61d4], eax
mov ecx, dword [ebp - 0x238]
call fcn.005a9e55
mov cl, byte [ebp - 0x5d14]
push ecx
mov edx, dword [ebp - 0x24c]
push edx
mov ecx, dword [ebp - 0x238]
call fcn.005aa5f7
mov eax, dword [ebp - 0x24c]
push eax
lea ecx, [ebp - 0x22c]
push ecx
mov ecx, dword [ebp - 0x238]
call fcn.0051eab3
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0x5e4c]
call fcn.0065a9ea
push ecx
mov ecx, esp
mov dword [ebp - 0x6058], esp
push 0x6ff8e4
call fcn.0065aa4a
mov dword [ebp - 0x61d8], eax
mov edx, dword [ebp - 0x61d8]
mov dword [ebp - 0x61dc], edx
mov byte [ebp - 4], 0x3f
lea eax, [ebp - 0x22c]
push eax
push 0x101
lea ecx, [ebp - 0x230]
call fcn.0065aa26
push eax
mov byte [ebp - 4], 0x24
call fcn.00632306
add esp, 0xc
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x5d18]
call fcn.0065a9ea
cmp dword [ebp - 0x360], 0xffffffff
jne 0x5e8838
jmp 0x5e8852
mov dword [ebp - 0x360], 0
lea ecx, [ebp - 0x350]
call fcn.0062f960
jmp 0x5e790f
mov ecx, dword [ebp - 0x238]
call fcn.0051db17
lea ecx, [ebp - 0x350]
call fcn.0062f9e4
cmp dword [ebp - 0x248], 0
je 0x5e88ba
cmp dword [ebp - 0x358], 0
je 0x5e88ba
mov ecx, dword [ebp - 0x358]
mov dword [ebp - 0x6060], ecx
mov edx, dword [ebp - 0x6060]
mov dword [ebp - 0x605c], edx
cmp dword [ebp - 0x605c], 0
je 0x5e88b0
push 1
mov ecx, dword [ebp - 0x605c]
call fcn.00403120
mov dword [ebp - 0x61e0], eax
jmp 0x5e88ba
mov dword [ebp - 0x61e0], 0
cmp dword [ebp - 0x234], 0
je 0x5e890c
cmp dword [ebp - 0x238], 0
je 0x5e890c
mov eax, dword [ebp - 0x238]
mov dword [ebp - 0x6068], eax
mov ecx, dword [ebp - 0x6068]
mov dword [ebp - 0x6064], ecx
cmp dword [ebp - 0x6064], 0
je 0x5e8902
push 1
mov ecx, dword [ebp - 0x6064]
call fcn.00403120
mov dword [ebp - 0x61e4], eax
jmp 0x5e890c
mov dword [ebp - 0x61e4], 0
mov dword [ebp - 0x606c], 1
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x35c]
call fcn.0065a9ea
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x250]
call fcn.0065a9ea
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x23c]
call fcn.0065a9ea
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x364]
call fcn.0065a9ea
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x230]
call fcn.0065a9ea
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x240]
call fcn.0065a9ea
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x5d0c]
call fcn.005f8d5e
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x244]
call fcn.0065a9ea
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x258]
call fcn.0065a9ea
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x350]
call fcn.0062f5ea
mov byte [ebp - 4], 0
lea ecx, [ebp + 8]
call fcn.0065a9ea
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0xc]
call fcn.0065a9ea
mov eax, dword [ebp - 0x606c]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret