Function at 0x658ee0
Capabilities:
Check http status code
Enumerate pe sections
Reference absolute stream path on windows
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
mov esi, dword [ecx + 8]
cmp esi, 0xfffffade
je 0x666048
lea eax, [esp + 0x370]
sub eax, esi
cmp eax, 0x26b4
jbe 0x666048
sub esp, 0x23c4
mov eax, 0
lea edi, [esp + 0xc4c]
call fcn.0044c885
mov byte [esp + 0x2400], 0
lea edi, [esp + 0xfec]
lea esi, [0x79f940]
call fcn.0044cd14
mov eax, dword [0x9b8614]
mov ecx, dword [eax + 0x70]
mov eax, dword [eax + 0x6c]
mov dword [esp + 0xff4], eax
mov dword [esp + 0xff8], ecx
mov eax, dword [0x9b8614]
mov ecx, dword [eax + 0x78]
mov eax, dword [eax + 0x74]
mov dword [esp + 0x1004], eax
mov dword [esp + 0x1008], ecx
mov eax, dword [0x9b8614]
mov ecx, dword [eax + 0x88]
mov eax, dword [eax + 0x84]
mov dword [esp + 0x1014], eax
mov dword [esp + 0x1018], ecx
mov dword [esp], 0
lea eax, [esp + 0xfec]
mov dword [esp + 4], eax
mov dword [esp + 8], 7
mov dword [esp + 0xc], 7
call fcn.0043be60
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
lea edx, [0x71a996]
mov dword [esp], edx
mov dword [esp + 4], 4
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call fcn.005f1610
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
test edx, edx
jne 0x665df1
mov dword [esp + 0x2a8], eax
mov dword [esp], eax
mov dword [esp + 4], 0xb2d05e00
mov dword [esp + 8], 0
call fcn.005f1f30
mov eax, dword [esp + 0x2a8]
mov dword [esp], eax
mov dword [esp + 4], 0xffffffff
call fcn.005f1e20
mov eax, dword [esp + 0x2a8]
mov dword [esp + 8], eax
mov dword [esp], 4
lea ecx, [0x74f8c0]
mov dword [esp + 4], ecx
call fcn.004262e0
test eax, eax
jne 0x665de4
movzx eax, byte [0x8b90a3]
test al, al
jne 0x665d76
mov eax, dword [esp + 0x23dc]
mov dword [esp], eax
mov ecx, dword [esp + 0x23e0]
mov dword [esp + 4], ecx
lea edx, [0x719eab]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 1
call fcn.004b0480
mov eax, dword [esp + 0x10]
mov dword [esp + 0x14c], eax
mov ecx, dword [esp + 0x23dc]
mov dword [esp], ecx
mov edx, dword [esp + 0x23e0]
mov dword [esp + 4], edx
call fcn.004b1870
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
mov dword [esp], ecx
mov dword [esp + 4], eax
lea eax, [0x71a45e]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 4
call fcn.004b0480
mov eax, dword [esp + 0x14c]
inc eax
mov ecx, dword [esp + 0x10]
cmp eax, ecx
ja 0x666041
mov edx, dword [esp + 0x23e0]
cmp ecx, edx
ja 0x666041
sub ecx, eax
mov dword [esp + 0x100], ecx
mov ebx, ecx
neg ecx
sar ecx, 0x1f
and ecx, eax
mov eax, dword [esp + 0x23dc]
add ecx, eax
mov dword [esp + 0x2a4], ecx
mov ebp, dword [esp + 0x23f0]
cmp ebp, 3
jne 0x665d6d
mov esi, dword [esp + 0x23ec]
movzx edi, word [esi]
cmp di, 0x5242
jne 0x665d68
movzx edi, byte [esi + 2]
xchg edi, eax
cmp al, 0x47
xchg edi, eax
jne 0x665cf8
call fcn.0047d8f0
lea edi, [esp + 0xb48]
mov esi, esp
call fcn.0044cd6e
mov edi, esp
lea esi, [esp + 0xb48]
call fcn.0044cd6e
lea eax, [0x71a47e]
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], 4
call fcn.00475950
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x2a4]
mov dword [esp], edx
mov edx, dword [esp + 0x100]
mov dword [esp + 4], edx
lea edx, [0x71a71a]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 4
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], 1
call fcn.004b2060
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x1c]
cmp eax, 9
jne 0x665ced
lea edx, [ecx + 7]
mov ebx, 1
movzx ebp, byte [esp + 0x23f4]
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x665ce1
mov esi, dword [esp + 0x23f0]
cmp esi, 3
jne 0x665cd1
mov edi, dword [esp + 0x23ec]
movzx esi, word [edi]
cmp si, 0x4252
jne 0x665cc8
movzx esi, byte [edi + 2]
xchg esi, eax
cmp al, 0x48
xchg esi, eax
jne 0x665cbf
cmp eax, 4
jb 0x66603a
lea edx, [ecx + 3]
xchg ebp, eax
test al, al
xchg ebp, eax
mov ebx, 1
je 0x665cb3
mov esi, dword [esp + 0x23f0]
cmp esi, 3
jne 0x65927c
movzx ebp, word [edi]
cmp bp, 0x5050
jne 0x65927c
movzx ebp, byte [edi + 2]
xchg ebp, eax
cmp al, 0x4d
xchg ebp, eax
jne 0x65927c
cmp eax, 4
jb 0x666033
lea edx, [ecx + 3]
mov ebx, 1
mov dword [esp + 0x100], eax
mov dword [esp + 0x2a4], ecx
cmp esi, 6
jne 0x665cab
mov ebp, dword [edi]
cmp ebp, 0x424d454d
jne 0x665ca3
movzx ebp, word [edi + 4]
cmp bp, 0x5245
je 0x665b8a
cmp esi, 3
jne 0x6592ce
movzx ebp, word [edi]
cmp bp, 0x4252
jne 0x6592ce
movzx ebp, byte [edi + 2]
xchg ebp, eax
cmp al, 0x48
xchg ebp, eax
je 0x665b0e
mov dword [esp + 0x128], ebx
mov dword [esp + 0x2cc], edx
mov eax, dword [esp + 0x23dc]
mov dword [esp], eax
mov ecx, dword [esp + 0x23e0]
mov dword [esp + 4], ecx
lea ebp, [0x71a0b5]
mov dword [esp + 8], ebp
mov dword [esp + 0xc], 3
call fcn.004b0480
mov eax, dword [esp + 0x10]
cmp eax, 0xffffffff
jg 0x665a94
mov eax, 0xf
lea ecx, [0x7221db]
mov dword [esp + 0x104], eax
mov dword [esp + 0x2ac], ecx
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0048a660
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
test ecx, ecx
jne 0x66588f
mov dword [esp], 0
mov eax, dword [esp + 0x2ac]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x104]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x2a4]
mov dword [esp + 0xc], eax
mov ecx, dword [esp + 0x100]
mov dword [esp + 0x10], ecx
lea edx, [0x719eb2]
mov dword [esp + 0x14], edx
mov dword [esp + 0x18], 1
mov edx, dword [esp + 0x23e4]
mov dword [esp + 0x1c], edx
mov ebx, dword [esp + 0x23e8]
mov dword [esp + 0x20], ebx
lea ebp, [0x71a45a]
mov dword [esp + 0x24], ebp
mov dword [esp + 0x28], 4
call fcn.0043c170
mov eax, dword [esp + 0x30]
mov dword [esp + 0x104], eax
mov ecx, dword [esp + 0x2c]
mov dword [esp + 0x2ac], ecx
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00608e90
movzx eax, byte [esp + 8]
test al, al
jne 0x665870
mov eax, dword [esp + 0x2ac]
mov dword [esp], eax
mov ecx, dword [esp + 0x104]
mov dword [esp + 4], ecx
call fcn.00488930
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xc]
test edx, edx
je 0x659598
mov dword [esp + 0x29c], ecx
mov dword [esp + 0x28c], edx
mov ebx, dword [esp + 0x23dc]
mov dword [esp + 0x870], ebx
mov ebx, dword [esp + 0x23e0]
mov dword [esp + 0x874], ebx
je 0x659591
mov ebx, dword [edx + 4]
mov dword [esp + 0x310], ebx
lea edi, [esp + 0xbec]
xor eax, eax
call fcn.0044c88a
lea ecx, [0x6cae00]
mov dword [esp + 0xbec], ecx
lea edx, [0x79a3e0]
mov dword [esp + 0xbf0], edx
mov dword [esp], ecx
lea edx, [esp + 0x870]
mov dword [esp + 4], edx
call fcn.0040bcf0
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 8]
mov dword [esp + 0xbf4], edx
mov dword [esp + 0xbf8], ecx
mov ecx, dword [esp + 0x310]
mov dword [esp + 0xbfc], ecx
mov ecx, dword [esp + 0x29c]
mov dword [esp + 0xc00], ecx
lea edx, [esp + 0xbec]
mov dword [esp], edx
mov dword [esp + 4], 3
mov dword [esp + 8], 3
call fcn.004a3000
mov ecx, dword [esp + 0x28c]
test ecx, ecx
je 0x65958a
mov eax, dword [ecx + 4]
mov dword [esp + 0xae8], 0
mov dword [esp + 0xaec], 0
mov dword [esp + 0xaf0], 0
mov dword [esp + 0xaf4], 0
lea ecx, [0x6cae00]
mov dword [esp + 0xae8], ecx
lea ecx, [0x79a3f0]
mov dword [esp + 0xaec], ecx
mov dword [esp + 0xaf0], eax
mov eax, dword [esp + 0x29c]
mov dword [esp + 0xaf4], eax
mov eax, dword [0x9b8620]
mov dword [esp], eax
lea eax, [esp + 0xae8]
mov dword [esp + 4], eax
mov dword [esp + 8], 2
mov dword [esp + 0xc], 2
call fcn.00554610
mov byte [esp + 0x2400], 0
nop
call fcn.00426b00
add esp, 0x23c4
ret
mov eax, ecx
jmp 0x6594f1
mov ebx, edx
jmp 0x65944c
mov dword [esp + 0x30c], eax
mov eax, dword [esp + 0x23dc]
mov dword [esp], eax
mov ecx, dword [esp + 0x23e0]
mov dword [esp + 4], ecx
lea edx, [0x71a6ea]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 4
call fcn.006223f0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
test edx, edx
jne 0x66579e
mov dword [esp + 0x2a0], eax
mov ecx, dword [esp + 0x23f0]
cmp ecx, 6
jge 0x665686
cmp ecx, 3
jne 0x66567d
mov edx, dword [esp + 0x23ec]
movzx ebx, word [edx]
cmp bx, 0x4252
jne 0x665618
movzx ebx, byte [edx + 2]
cmp bl, 0x48
jne 0x665618
mov ebx, dword [0x9b8614]
mov ebp, dword [ebx + 0x118]
mov ebx, dword [ebx + 0x114]
mov dword [esp + 0xe0], ebp
mov dword [esp + 0x274], ebx
mov esi, dword [esp + 0x100]
cmp esi, ebp
je 0x665593
mov edi, 1
mov dword [esp + 0x188], eax
lea eax, [0x719e91]
mov dword [esp + 0x23e4], eax
mov eax, dword [esp + 0x188]
lea eax, [esp + 0x1c]
mov dword [esp + 0x308], eax
cmp ecx, 3
jne 0x665501
movzx eax, word [edx]
cmp ax, 0x5242
jne 0x66558b
movzx eax, byte [edx + 2]
cmp al, 0x47
jne 0x6654fe
cmp edi, 1
je 0x6654e4
mov eax, dword [esp + 0x23e4]
mov dword [esp], eax
mov dword [esp + 4], edi
call fcn.004600c0
mov eax, dword [esp + 8]
cmp eax, 0xa
jge 0x6654dc
xor eax, eax
mov ecx, dword [esp + 0x23f0]
cmp ecx, 7
jne 0x6654d0
mov edx, dword [esp + 0x23ec]
mov ebx, dword [edx]
cmp ebx, 0x43534944
jne 0x659702
movzx ebx, word [edx + 4]
cmp bx, 0x5553
jne 0x659702
movzx ebx, byte [edx + 6]
cmp bl, 0x50
je 0x66548b
mov ebx, dword [esp + 0xe0]
mov ebp, dword [esp + 0x100]
cmp ebx, ebp
je 0x66522e
mov dword [esp + 0xec], eax
mov ecx, dword [0x9b8624]
mov edx, dword [ecx + 4]
mov ecx, dword [ecx]
mov dword [esp], ecx
mov dword [esp + 4], edx
call fcn.00453750
mov eax, dword [esp + 8]
mov dword [esp + 0x10c], eax
lea ecx, [0x6cb000]
mov dword [esp], ecx
mov dword [esp + 4], 0x1000
mov dword [esp + 8], 0x1000
call fcn.00439020
mov eax, dword [esp + 0x14]
mov dword [esp + 0x14c], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x148], ecx
mov edx, dword [esp + 0xc]
mov dword [esp + 0x304], edx
lea ebx, [0x6ee400]
mov dword [esp], ebx
call fcn.0040e460
mov eax, dword [esp + 4]
mov dword [esp + 0x210], eax
mov ecx, dword [esp + 0x148]
mov dword [eax + 0xc], ecx
mov ecx, dword [esp + 0x14c]
mov dword [eax + 0x10], ecx
mov ecx, dword [0x9cadb0]
lea edx, [eax + 8]
test ecx, ecx
jne 0x66520f
mov ecx, dword [esp + 0x304]
mov dword [eax + 8], ecx
lea ecx, [0x79bac0]
mov dword [eax + 0x18], ecx
mov ecx, dword [0x9cadb0]
lea edx, [eax + 0x1c]
test ecx, ecx
jne 0x6651f0
mov ecx, dword [esp + 0x30c]
mov dword [eax + 0x1c], ecx
mov byte [esp + 0x89c], 0
mov dword [esp + 0x8a0], eax
mov eax, dword [esp + 0x10c]
mov dword [esp + 0x898], eax
mov eax, dword [esp + 0x2a0]
mov ecx, dword [eax + 0x30]
mov dword [esp + 0xfc], ecx
mov edx, dword [eax + 0x2c]
mov dword [esp + 0x284], edx
call fcn.006093b0
mov eax, dword [esp + 4]
mov ecx, dword [esp]
mov dword [esp + 0x850], ecx
mov dword [esp + 0x854], eax
mov dword [esp], 0
mov eax, dword [esp + 0x2a4]
mov dword [esp + 4], eax
mov ecx, dword [esp + 0x100]
mov dword [esp + 8], ecx
lea edx, [0x73025d]
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], 0x28
call fcn.0043c050
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x848], ecx
mov dword [esp + 0x84c], eax
mov dword [esp + 0xac8], 0
mov dword [esp + 0xacc], 0
mov dword [esp + 0xad0], 0
mov dword [esp + 0xad4], 0
lea eax, [0x6cae00]
mov dword [esp], eax
lea ecx, [esp + 0x850]
mov dword [esp + 4], ecx
call fcn.0040bcf0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
mov dword [esp + 0xac8], ecx
mov dword [esp + 0xacc], eax
lea eax, [0x6cae00]
mov dword [esp], eax
lea ecx, [esp + 0x848]
mov dword [esp + 4], ecx
call fcn.0040bcf0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
mov dword [esp + 0xad0], ecx
mov dword [esp + 0xad4], eax
mov eax, dword [0x9b8620]
mov dword [esp], eax
lea eax, [esp + 0xac8]
mov dword [esp + 4], eax
mov dword [esp + 8], 2
mov dword [esp + 0xc], 2
call fcn.00554610
mov eax, dword [esp + 0x23f0]
cmp eax, 8
jne 0x6651e4
mov ecx, dword [esp + 0x23ec]
mov edx, dword [ecx]
cmp edx, 0x50505553
jne 0x65996b
mov edx, dword [ecx + 4]
cmp edx, 0x5245494c
je 0x664ba7
cmp eax, 4
jne 0x65997e
mov edx, dword [ecx]
cmp edx, 0x54504544
je 0x664ba7
cmp eax, 7
jne 0x664b9f
mov edx, dword [ecx]
cmp edx, 0x43534944
jne 0x664b97
movzx edx, word [ecx + 4]
cmp dx, 0x5553
jne 0x664b8f
movzx edx, byte [ecx + 6]
cmp dl, 0x50
jne 0x6618be
lea edx, [esp + 0x10]
mov dword [esp + 0x300], edx
mov ebx, dword [esp + 0xec]
jmp 0x6599dc
mov ecx, dword [esp + 0x23ec]
mov edx, dword [esp + 0x300]
mov ebx, eax
mov eax, dword [esp + 0x23f0]
mov ebp, dword [esp + 0x2a0]
mov esi, dword [ebp + 4]
cmp ebx, esi
jge 0x65b266
movzx esi, word [ebp + 8]
movzx edi, word [ebp + 0xa]
imul edi, ebx
lea edx, [esi + edi]
mov ecx, dword [ebp + 0x70]
mov eax, dword [ebp + 0x6c]
mov ebp, dword [ebp + 0x68]
lea esi, [edi + esi + 1]
cmp esi, eax
jg 0x659a35
cmp edx, esi
ja 0x666010
cmp esi, ecx
ja 0x666010
sub ecx, edx
neg ecx
sar ecx, 0x1f
and edx, ecx
movzx eax, byte [ebp + edx]
cmp al, 0x2a
jne 0x659a35
lea eax, [ebx + 1]
jmp 0x6599c5
mov dword [esp + 0x88], ebx
mov eax, dword [esp + 0x2a0]
mov dword [esp], eax
mov dword [esp + 4], ebx
call fcn.00623210
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 8]
test eax, eax
jbe 0x666009
mov dword [esp + 0xac], eax
mov dword [esp + 0xcc], ecx
mov dword [esp + 0x258], edx
mov ebx, dword [edx + 4]
mov ebp, dword [edx]
cmp ebx, 5
jg 0x65b079
je 0x65ae57
cmp eax, 4
jbe 0x666002
mov ebx, dword [edx + 0x20]
mov ebp, dword [edx + 0x24]
cmp ebp, 8
je 0x659c91
call fcn.006093b0
mov eax, dword [esp]
mov ecx, dword [esp + 4]
mov dword [esp + 0x7e0], eax
mov dword [esp + 0x7e4], ecx
mov eax, dword [esp + 0x88]
mov dword [esp], eax
call fcn.00465390
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp], 0
mov edx, dword [esp + 0x2a4]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0x100]
mov dword [esp + 8], ebx
lea ebp, [0x71f9e5]
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], 0xb
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], ecx
lea eax, [0x731751]
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], 0x2b
call fcn.0043c110
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x7d8], eax
mov dword [esp + 0x7dc], ecx
mov dword [esp + 0xa78], 0
mov dword [esp + 0xa7c], 0
mov dword [esp + 0xa80], 0
mov dword [esp + 0xa84], 0
lea eax, [0x6cae00]
mov dword [esp], eax
lea ecx, [esp + 0x7e0]
mov dword [esp + 4], ecx
call fcn.0040bcf0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0xa78], eax
mov dword [esp + 0xa7c], ecx
lea eax, [0x6cae00]
mov dword [esp], eax
lea ecx, [esp + 0x7d8]
mov dword [esp + 4], ecx
call fcn.0040bcf0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0xa80], eax
mov dword [esp + 0xa84], ecx
mov eax, dword [0x9b861c]
mov dword [esp], eax
lea eax, [esp + 0xa78]
mov dword [esp + 4], eax
mov dword [esp + 8], 2
mov dword [esp + 0xc], 2
call fcn.00554610
mov eax, dword [esp + 0x258]
mov dword [esp + 0x94c], eax
mov eax, dword [esp + 0xac]
mov dword [esp + 0x950], eax
mov eax, dword [esp + 0xcc]
mov dword [esp + 0x954], eax
mov dword [esp + 0x7d0], 0
mov dword [esp + 0x7d4], 0
lea eax, [0x6ba9e0]
mov dword [esp], eax
lea ecx, [esp + 0x94c]
mov dword [esp + 4], ecx
call fcn.0040bd80
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x7d0], eax
mov dword [esp + 0x7d4], ecx
mov eax, dword [0x9b861c]
mov dword [esp], eax
lea eax, [esp + 0x7d0]
mov dword [esp + 4], eax
mov dword [esp + 8], 1
mov dword [esp + 0xc], 1
call fcn.00554610
mov eax, dword [esp + 0x88]
inc eax
jmp 0x6599c5
mov dword [esp + 0x21c], ebx
mov dword [esp + 0x54], ebp
mov dword [esp], ebx
mov dword [esp + 4], ebp
call fcn.004600c0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
test ecx, ecx
je 0x659ee1
call fcn.006093b0
mov eax, dword [esp]
mov ecx, dword [esp + 4]
mov dword [esp + 0x7c8], eax
mov dword [esp + 0x7cc], ecx
mov eax, dword [esp + 0x88]
mov dword [esp], eax
call fcn.00465390
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp + 0x14c], ecx
lea edi, [esp + 0xf14]
lea esi, [0x79eb40]
call fcn.0044cd28
mov ecx, dword [esp + 0x2a4]
mov dword [esp + 0xf14], ecx
mov edx, dword [esp + 0x100]
mov dword [esp + 0xf18], edx
mov dword [esp + 0xf24], eax
mov eax, dword [esp + 0x14c]
mov dword [esp + 0xf28], eax
mov eax, dword [esp + 0x21c]
mov dword [esp + 0xf34], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 0xf38], eax
mov dword [esp], 0
lea eax, [esp + 0xf14]
mov dword [esp + 4], eax
mov dword [esp + 8], 6
mov dword [esp + 0xc], 6
call fcn.0043be60
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x7c0], eax
mov dword [esp + 0x7c4], ecx
mov dword [esp + 0xa68], 0
mov dword [esp + 0xa6c], 0
mov dword [esp + 0xa70], 0
mov dword [esp + 0xa74], 0
lea eax, [0x6cae00]
mov dword [esp], eax
lea ecx, [esp + 0x7c8]
mov dword [esp + 4], ecx
call fcn.0040bcf0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0xa68], eax
mov dword [esp + 0xa6c], ecx
lea eax, [0x6cae00]
mov dword [esp], eax
lea ecx, [esp + 0x7c0]
mov dword [esp + 4], ecx
call fcn.0040bcf0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
mov dword [esp + 0xa70], ecx
mov dword [esp + 0xa74], eax
mov eax, dword [0x9b861c]
mov dword [esp], eax
lea eax, [esp + 0xa68]
mov dword [esp + 4], eax
mov dword [esp + 8], 2
mov dword [esp + 0xc], 2
call fcn.00554610
mov eax, dword [esp + 0x258]
mov dword [esp + 0x940], eax
mov eax, dword [esp + 0xac]
mov dword [esp + 0x944], eax
mov eax, dword [esp + 0xcc]
mov dword [esp + 0x948], eax
mov dword [esp + 0x7b8], 0
mov dword [esp + 0x7bc], 0
lea eax, [0x6ba9e0]
mov dword [esp], eax
lea ecx, [esp + 0x940]
mov dword [esp + 4], ecx
call fcn.0040bd80
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x7b8], eax
mov dword [esp + 0x7bc], ecx
mov eax, dword [0x9b861c]
mov dword [esp], eax
lea eax, [esp + 0x7b8]
mov dword [esp + 4], eax
mov dword [esp + 8], 1
mov dword [esp + 0xc], 1
call fcn.00554610
mov eax, dword [esp + 0x88]
inc eax
jmp 0x6599c5
cmp eax, 0x121eac0
jl 0x659cb8
mov eax, dword [esp + 0xac]
cmp eax, 5
jbe 0x665ffb
mov ecx, dword [esp + 0x258]
mov edx, dword [ecx + 0x28]
mov ebx, dword [ecx + 0x2c]
cmp ebx, 8
je 0x65a0ff
call fcn.006093b0
mov eax, dword [esp]
mov ecx, dword [esp + 4]
mov dword [esp + 0x7b0], eax
mov dword [esp + 0x7b4], ecx
mov eax, dword [esp + 0x88]
mov dword [esp], eax
call fcn.00465390
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp], 0
mov edx, dword [esp + 0x2a4]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0x100]
mov dword [esp + 8], ebx
lea ebp, [0x71f9e5]
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], 0xb
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], ecx
lea eax, [0x7323e1]
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], 0x2d
call fcn.0043c110
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x7a8], eax
mov dword [esp + 0x7ac], ecx
mov dword [esp + 0xa58], 0
mov dword [esp + 0xa5c], 0
mov dword [esp + 0xa60], 0
mov dword [esp + 0xa64], 0
lea eax, [0x6cae00]
mov dword [esp], eax
lea ecx, [esp + 0x7b0]
mov dword [esp + 4], ecx
call fcn.0040bcf0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0xa58], eax
mov dword [esp + 0xa5c], ecx
lea eax, [0x6cae00]
mov dword [esp], eax
lea ecx, [esp + 0x7a8]
mov dword [esp + 4], ecx
call fcn.0040bcf0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
mov dword [esp + 0xa60], ecx
mov dword [esp + 0xa64], eax
mov eax, dword [0x9b861c]
mov dword [esp], eax
lea eax, [esp + 0xa58]
mov dword [esp + 4], eax
mov dword [esp + 8], 2
mov dword [esp + 0xc], 2
call fcn.00554610
mov eax, dword [esp + 0x258]
mov dword [esp + 0x934], eax
mov eax, dword [esp + 0xac]
mov dword [esp + 0x938], eax
mov eax, dword [esp + 0xcc]
mov dword [esp + 0x93c], eax
mov dword [esp + 0x7a0], 0
mov dword [esp + 0x7a4], 0
lea eax, [0x6ba9e0]
mov dword [esp], eax
lea ecx, [esp + 0x934]
mov dword [esp + 4], ecx
call fcn.0040bd80
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
mov dword [esp + 0x7a0], ecx
mov dword [esp + 0x7a4], eax
mov eax, dword [0x9b861c]
mov dword [esp], eax
lea eax, [esp + 0x7a0]
mov dword [esp + 4], eax
mov dword [esp + 8], 1
mov dword [esp + 0xc], 1
call fcn.00554610
mov eax, dword [esp + 0x88]
inc eax
jmp 0x6599c5
mov dword [esp + 0x21c], edx
mov dword [esp + 0x54], ebx
mov dword [esp], edx
mov dword [esp + 4], ebx
call fcn.004600c0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
test eax, eax
jne 0x65ac2e
cmp ecx, 0x121eac0
jl 0x65ac2e
xor eax, eax
jmp 0x65a13d
mov ebp, dword [esp + 0x44]
lea eax, [ebp + 1]
mov ecx, dword [esp + 0xac]
cmp eax, ecx
jge 0x65a2b1
mov edx, dword [esp + 0x258]
lea ebx, [edx + eax*8]
mov dword [esp + 0x2fc], ebx
mov ebp, dword [ebx]
mov esi, dword [ebx + 4]
lea edi, [edx + eax*8 + 4]
mov ebx, dword [esp + 0xfc]
cmp eax, ebx
jae 0x665ff4
mov dword [esp + 0x244], ebp
mov dword [esp + 0x44], eax
mov dword [esp + 0x2f8], edi
imul eax, eax, 0x2c
mov edi, dword [esp + 0x284]
movzx ebp, byte [edi + eax + 8]
xchg ebp, eax
cmp al, 0x4e
xchg ebp, eax
jne 0x65a136
mov dword [esp + 0x70], esi
movzx eax, byte [edi + eax + 9]
lea ecx, [0x719e8b]
mov dword [esp], ecx
mov dword [esp + 4], 1
mov dword [esp + 8], eax
call fcn.004b15b0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x70]
cmp ecx, edx
je 0x65a1f1
mov ecx, dword [esp + 0xac]
mov edx, dword [esp + 0x258]
mov ebx, dword [esp + 0xfc]
mov edi, dword [esp + 0x284]
jmp 0x65a136
mov ecx, dword [esp + 0x244]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], edx
call fcn.0044c4d0
movzx eax, byte [esp + 0xc]
test al, al
je 0x65a290
mov eax, dword [esp + 0x44]
mov ecx, dword [esp + 0xac]
cmp eax, ecx
jae 0x665fed
mov edx, dword [esp + 0x2f8]
mov dword [edx], 1
mov edx, dword [0x9cadb0]
test edx, edx
jne 0x65a264
lea edx, [0x719e91]
mov ebx, dword [esp + 0x2fc]
mov dword [ebx], edx
mov edx, dword [esp + 0x258]
mov ebx, dword [esp + 0xfc]
mov edi, dword [esp + 0x284]
jmp 0x65a136
mov eax, dword [esp + 0x2fc]
mov dword [esp], eax
lea eax, [0x719e91]
mov dword [esp + 4], eax
call fcn.0040ecd0
mov eax, dword [esp + 0x44]
mov ecx, dword [esp + 0xac]
lea edx, [0x719e91]
jmp 0x65a24a
mov ecx, dword [esp + 0xac]
mov edx, dword [esp + 0x258]
mov ebx, dword [esp + 0xfc]
mov edi, dword [esp + 0x284]
jmp 0x65a136
cmp ecx, 8
jbe 0x665fe6
mov eax, dword [esp + 0x258]
mov ecx, dword [eax + 0x40]
mov edx, dword [eax + 0x44]
cmp edx, 1
je 0x65a2db
mov ecx, dword [esp + 0x88]
lea eax, [ecx + 1]
jmp 0x6599c5
movzx ecx, byte [ecx]
cmp cl, 0x54
jne 0x65a2cc
mov ecx, dword [eax + 0x14]
test ecx, ecx
jne 0x65a2f9
mov ecx, dword [esp + 0x88]
lea eax, [ecx + 1]
jmp 0x6599c5
mov ecx, dword [eax + 0x20]
mov edx, dword [eax + 0x24]
mov dword [esp], ecx
mov dword [esp + 4], edx
lea ecx, [0x71d8ac]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 8
call fcn.0044c620
mov eax, dword [esp + 0x10]
test eax, eax
jge 0x65a334
mov ecx, dword [esp + 0x88]
lea eax, [ecx + 1]
jmp 0x6599c5
mov eax, dword [esp + 0x258]
mov ecx, dword [eax + 8]
mov edx, dword [eax + 0xc]
mov dword [esp], ecx
mov dword [esp + 4], edx
lea ecx, [0x719e88]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 1
lea edx, [0x719ede]
mov dword [esp + 0x10], edx
mov dword [esp + 0x14], 2
mov dword [esp + 0x18], 0xffffffff
call fcn.004b2060
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x258]
mov dword [edx + 0xc], ecx
mov ecx, dword [0x9cadb0]
lea ebx, [edx + 8]
test ecx, ecx
jne 0x65ac16
mov dword [edx + 8], eax
mov eax, dword [edx + 0x18]
mov ecx, dword [edx + 0x1c]
mov dword [esp], eax
mov dword [esp + 4], ecx
lea eax, [0x719e88]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
lea ecx, [0x719ede]
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], 2
mov dword [esp + 0x18], 0xffffffff
call fcn.004b2060
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x258]
mov dword [edx + 0x1c], eax
mov eax, dword [0x9cadb0]
lea ebx, [edx + 0x18]
test eax, eax
jne 0x65abfe
mov dword [edx + 0x18], ecx
mov eax, dword [edx]
mov ecx, dword [edx + 4]
mov dword [esp], eax
mov dword [esp + 4], ecx
lea eax, [0x719e84]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
call fcn.004b1f10
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x258]
mov dword [edx + 4], ecx
mov ecx, dword [0x9cadb0]
test ecx, ecx
jne 0x65abe6
mov dword [edx], eax
mov eax, dword [edx + 0x10]
mov ecx, dword [edx + 0x14]
mov dword [esp], eax
mov dword [esp + 4], ecx
lea eax, [0x719e84]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
call fcn.004b1f10
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x258]
mov dword [edx + 0x14], eax
lea eax, [edx + 0x10]
mov ebx, dword [0x9cadb0]
test ebx, ebx
jne 0x65abce
mov dword [edx + 0x10], ecx
mov ecx, dword [edx + 0x34]
lea ebx, [edx + 0x30]
test ecx, ecx
jne 0x65abc3
mov dword [edx + 0x34], 1
mov ecx, dword [0x9cadb0]
test ecx, ecx
jne 0x65ab9f
lea ecx, [0x719e91]
mov dword [edx + 0x30], ecx
mov ebx, dword [edx + 0x3c]
lea ebp, [edx + 0x38]
test ebx, ebx
jne 0x65a4e0
mov dword [edx + 0x3c], 1
mov ebx, dword [0x9cadb0]
test ebx, ebx
jne 0x65ab81
mov dword [edx + 0x38], ecx
lea edi, [esp + 0xb34]
xor eax, eax
call fcn.0044c88b
mov ecx, dword [edx + 0x24]
mov ebx, dword [edx + 0x20]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
lea ecx, [0x71d8a4]
mov dword [esp], ecx
mov dword [esp + 4], 8
call fcn.00477510
lea edi, [esp + 0xb34]
mov esi, dword [esp + 0x300]
call fcn.0044cd6e
lea edi, [esp + 0xaf8]
lea esi, [esp + 0xb34]
call fcn.0044cd6e
mov edi, esp
lea esi, [esp + 0xaf8]
call fcn.0044cd6e
lea ecx, [0x71ef72]
mov dword [esp + 0x14], ecx
mov dword [esp + 0x18], 0xa
call fcn.00475950
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x2b0], ecx
mov edx, dword [esp + 0x20]
mov dword [esp + 0x108], edx
lea edi, [esp + 0xb20]
xor eax, eax
call fcn.0044c88b
mov ecx, dword [esp + 0x258]
mov ebx, dword [ecx + 0x28]
mov ebp, dword [ecx + 0x2c]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ebp
lea ebx, [0x71d8a4]
mov dword [esp], ebx
mov dword [esp + 4], 8
call fcn.00477510
lea edi, [esp + 0xb20]
mov esi, dword [esp + 0x300]
call fcn.0044cd6e
lea edi, [esp + 0xb0c]
lea esi, [esp + 0xb20]
call fcn.0044cd6e
mov edi, esp
lea esi, [esp + 0xb0c]
call fcn.0044cd6e
lea ecx, [0x71ef72]
mov dword [esp + 0x14], ecx
mov dword [esp + 0x18], 0xa
call fcn.00475950
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x20]
lea edi, [esp + 0x1e94]
lea esi, [0x7a5b20]
mov eax, ecx
mov ecx, 0x92
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [0x9b8614]
mov ebx, dword [ecx + 0x84]
mov ecx, dword [ecx + 0x88]
mov dword [esp + 0x1e9c], ebx
mov dword [esp + 0x1ea0], ecx
mov ecx, dword [esp + 0x258]
mov ebx, dword [ecx]
mov ebp, dword [ecx + 4]
mov dword [esp + 0x1eb0], ebp
mov dword [esp + 0x1eac], ebx
mov ebx, dword [0x9b8614]
mov ebp, dword [ebx + 0x84]
mov ebx, dword [ebx + 0x88]
mov dword [esp + 0x1ec0], ebx
mov dword [esp + 0x1ebc], ebp
mov ebx, dword [ecx + 0x10]
mov ebp, dword [ecx + 0x14]
mov dword [esp + 0x1ed0], ebp
mov dword [esp + 0x1ecc], ebx
mov ebx, dword [0x9b8614]
mov ebp, dword [ebx + 0x84]
mov ebx, dword [ebx + 0x88]
mov dword [esp + 0x1ee0], ebx
mov dword [esp + 0x1edc], ebp
mov ebx, dword [ecx]
mov ebp, dword [ecx + 4]
mov dword [esp + 0x1ef0], ebp
mov dword [esp + 0x1eec], ebx
mov ebx, dword [esp + 0x108]
mov dword [esp + 0x1f00], ebx
mov ebp, dword [esp + 0x2b0]
mov dword [esp + 0x1efc], ebp
mov dword [esp + 0x1f10], edx
mov dword [esp + 0x1f0c], eax
mov esi, dword [0x9b8614]
mov edi, edx
mov edx, dword [esi + 0x84]
mov esi, dword [esi + 0x88]
mov dword [esp + 0x1f20], esi
mov dword [esp + 0x1f1c], edx
mov edx, dword [ecx + 4]
mov esi, dword [ecx]
mov dword [esp + 0x1f30], edx
mov dword [esp + 0x1f2c], esi
mov dword [esp + 0x1f40], ebx
mov dword [esp + 0x1f3c], ebp
mov dword [esp + 0x1f50], edi
mov dword [esp + 0x1f4c], eax
mov dword [esp + 0x1f60], ebx
mov dword [esp + 0x1f5c], ebp
mov dword [esp + 0x1f70], edi
mov dword [esp + 0x1f6c], eax
mov edx, dword [ecx]
mov esi, dword [ecx + 4]
mov dword [esp + 0x1f80], esi
mov dword [esp + 0x1f7c], edx
mov edx, dword [ecx + 8]
mov esi, dword [ecx + 0xc]
mov dword [esp + 0x1f90], esi
mov dword [esp + 0x1f8c], edx
mov edx, dword [0x9b8614]
mov esi, dword [edx + 0x84]
mov edx, dword [edx + 0x88]
mov dword [esp + 0x1fa0], edx
mov dword [esp + 0x1f9c], esi
mov edx, dword [ecx + 4]
mov esi, dword [ecx]
mov dword [esp + 0x1fb0], edx
mov dword [esp + 0x1fac], esi
mov dword [esp + 0x1fc0], ebx
mov dword [esp + 0x1fbc], ebp
mov dword [esp + 0x1fd0], edi
mov dword [esp + 0x1fcc], eax
mov edx, dword [ecx + 0x14]
mov esi, dword [ecx + 0x10]
mov dword [esp + 0x1fe0], edx
mov dword [esp + 0x1fdc], esi
mov edx, dword [0x9b8614]
mov esi, dword [edx + 0x84]
mov edx, dword [edx + 0x88]
mov dword [esp + 0x1ff0], edx
mov dword [esp + 0x1fec], esi
mov edx, dword [ecx + 4]
mov esi, dword [ecx]
mov dword [esp + 0x2000], edx
mov dword [esp + 0x1ffc], esi
mov dword [esp + 0x2010], ebx
mov dword [esp + 0x200c], ebp
mov dword [esp + 0x2020], edi
mov dword [esp + 0x201c], eax
mov edx, dword [ecx + 0x10]
mov esi, dword [ecx + 0x14]
mov dword [esp + 0x2030], esi
mov dword [esp + 0x202c], edx
mov edx, dword [ecx + 0x1c]
mov esi, dword [ecx + 0x18]
mov dword [esp + 0x2040], edx
mov dword [esp + 0x203c], esi
mov edx, dword [ecx + 0x30]
mov esi, dword [ecx + 0x34]
mov dword [esp + 0x2050], esi
mov dword [esp + 0x204c], edx
mov edx, dword [ecx + 0x38]
mov esi, dword [ecx + 0x3c]
mov dword [esp + 0x2060], esi
mov dword [esp + 0x205c], edx
mov edx, dword [0x9b8614]
mov esi, dword [edx + 0x84]
mov edx, dword [edx + 0x88]
mov dword [esp + 0x2070], edx
mov dword [esp + 0x206c], esi
mov edx, dword [ecx + 0x30]
mov esi, dword [ecx + 0x34]
mov dword [esp + 0x2080], esi
mov dword [esp + 0x207c], edx
mov edx, dword [ecx + 0x3c]
mov esi, dword [ecx + 0x38]
mov dword [esp + 0x2090], edx
mov dword [esp + 0x208c], esi
mov edx, dword [ecx + 4]
mov esi, dword [ecx]
mov dword [esp + 0x20a0], edx
mov dword [esp + 0x209c], esi
mov dword [esp + 0x20b0], ebx
mov dword [esp + 0x20ac], ebp
mov dword [esp + 0x20c0], edi
mov dword [esp + 0x20bc], eax
mov edx, dword [ecx + 0x14]
mov ecx, dword [ecx + 0x10]
mov dword [esp + 0x20d0], edx
mov dword [esp + 0x20cc], ecx
mov dword [esp], 0
lea ecx, [esp + 0x1e94]
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x49
mov dword [esp + 0xc], 0x49
call fcn.0043be60
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x2c0], ecx
mov edx, dword [esp + 0x14]
mov dword [esp + 0x114], edx
mov ebx, dword [esp + 0x2a8]
mov dword [esp], ebx
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
call fcn.005f3dd0
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x24]
test ecx, ecx
je 0x65ab60
mov dword [esp + 0x288], ecx
mov dword [esp + 0x298], edx
mov eax, dword [ecx + 0x10]
mov dword [esp], edx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp], 0
lea edx, [0x7383c1]
mov dword [esp + 4], edx
mov dword [esp + 8], 0x4d
mov ebx, dword [esp + 0x2c0]
mov dword [esp + 0xc], ebx
mov ebp, dword [esp + 0x114]
mov dword [esp + 0x10], ebp
lea esi, [0x719eac]
mov dword [esp + 0x14], esi
mov dword [esp + 0x18], 1
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], ecx
call fcn.0043c110
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x24]
mov dword [esp + 0x778], ecx
mov dword [esp + 0x77c], eax
mov dword [esp + 0x780], 0
mov dword [esp + 0x784], 0
lea eax, [0x6cae00]
mov dword [esp], eax
lea ecx, [esp + 0x778]
mov dword [esp + 4], ecx
call fcn.0040bcf0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x780], eax
mov dword [esp + 0x784], ecx
lea eax, [esp + 0x780]
mov dword [esp], eax
mov dword [esp + 4], 1
mov dword [esp + 8], 1
call fcn.004a3000
mov eax, dword [esp + 0x288]
mov eax, dword [eax + 0x10]
mov ecx, dword [esp + 0x298]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp], 0
lea edx, [0x7383c1]
mov dword [esp + 4], edx
mov dword [esp + 8], 0x4d
mov ebx, dword [esp + 0x2c0]
mov dword [esp + 0xc], ebx
mov ebx, dword [esp + 0x114]
mov dword [esp + 0x10], ebx
lea ebx, [0x719eac]
mov dword [esp + 0x14], ebx
mov dword [esp + 0x18], 1
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], ecx
call fcn.0043c110
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x768], eax
mov dword [esp + 0x76c], ecx
mov dword [esp + 0x770], 0
mov dword [esp + 0x774], 0
lea eax, [0x6cae00]
mov dword [esp], eax
lea ecx, [esp + 0x768]
mov dword [esp + 4], ecx
call fcn.0040bcf0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x770], eax
mov dword [esp + 0x774], ecx
mov eax, dword [0x9b8620]
mov dword [esp], eax
lea eax, [esp + 0x770]
mov dword [esp + 4], eax
mov dword [esp + 8], 1
mov dword [esp + 0xc], 1
call fcn.00554610
mov eax, dword [esp + 0x88]
inc eax
jmp 0x6599c5
mov dword [esp], 0x1c9c380
mov dword [esp + 4], 0
call fcn.0043f8c0
mov eax, dword [esp + 0x88]
inc eax
jmp 0x6599c5
mov dword [esp], ebp
mov dword [esp + 4], ecx
call fcn.0040ecd0
lea ecx, [0x719e91]
mov edx, dword [esp + 0x258]
jmp 0x65a4e0
mov dword [esp], ebx
lea eax, [0x719e91]
mov dword [esp + 4], eax
call fcn.0040ecd0
lea ecx, [0x719e91]
mov edx, dword [esp + 0x258]
jmp 0x65a4be
lea ecx, [0x719e91]
jmp 0x65a4be
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.0040ecd0
mov edx, dword [esp + 0x258]
jmp 0x65a492
mov dword [esp], edx
mov dword [esp + 4], eax
call fcn.0040ecd0
mov edx, dword [esp + 0x258]
jmp 0x65a448
mov dword [esp], ebx
mov dword [esp + 4], ecx
call fcn.0040ecd0
mov edx, dword [esp + 0x258]
jmp 0x65a403
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.0040ecd0
mov edx, dword [esp + 0x258]
jmp 0x65a39f
call fcn.006093b0
mov eax, dword [esp + 4]
mov ecx, dword [esp]
mov dword [esp + 0x798], ecx
mov dword [esp + 0x79c], eax
mov eax, dword [esp + 0x88]
mov dword [esp], eax
call fcn.00465390
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp + 0x14c], ecx
lea edi, [esp + 0xee4]
lea esi, [0x79eb80]
call fcn.0044cd28
mov ecx, dword [esp + 0x2a4]
mov dword [esp + 0xee4], ecx
mov edx, dword [esp + 0x100]
mov dword [esp + 0xee8], edx
mov dword [esp + 0xef4], eax
mov eax, dword [esp + 0x14c]
mov dword [esp + 0xef8], eax
mov eax, dword [esp + 0x21c]
mov dword [esp + 0xf04], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 0xf08], eax
mov dword [esp], 0
lea eax, [esp + 0xee4]
mov dword [esp + 4], eax
mov dword [esp + 8], 6
mov dword [esp + 0xc], 6
call fcn.0043be60
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x790], eax
mov dword [esp + 0x794], ecx
mov dword [esp + 0xa48], 0
mov dword [esp + 0xa4c], 0
mov dword [esp + 0xa50], 0
mov dword [esp + 0xa54], 0
lea eax, [0x6cae00]
mov dword [esp], eax
lea ecx, [esp + 0x798]
mov dword [esp + 4], ecx
call fcn.0040bcf0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0xa48], eax
mov dword [esp + 0xa4c], ecx
lea eax, [0x6cae00]
mov dword [esp], eax
lea ecx, [esp + 0x790]
mov dword [esp + 4], ecx
call fcn.0040bcf0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0xa50], eax
mov dword [esp + 0xa54], ecx
mov eax, dword [0x9b861c]
mov dword [esp], eax
lea eax, [esp + 0xa48]
mov dword [esp + 4], eax
mov dword [esp + 8], 2
mov dword [esp + 0xc], 2
call fcn.00554610
mov eax, dword [esp + 0x258]
mov dword [esp + 0x928], eax
mov eax, dword [esp + 0xac]
mov dword [esp + 0x92c], eax
mov eax, dword [esp + 0xcc]
mov dword [esp + 0x930], eax
mov dword [esp + 0x788], 0
mov dword [esp + 0x78c], 0
lea eax, [0x6ba9e0]
mov dword [esp], eax
lea ecx, [esp + 0x928]
mov dword [esp + 4], ecx
call fcn.0040bd80
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
mov dword [esp + 0x788], ecx
mov dword [esp + 0x78c], eax
mov eax, dword [0x9b861c]
mov dword [esp], eax
lea eax, [esp + 0x788]
mov dword [esp + 4], eax
mov dword [esp + 8], 1
mov dword [esp + 0xc], 1
call fcn.00554610
mov eax, dword [esp + 0x88]
inc eax
jmp 0x6599c5
lea eax, [ebp + 3]
mov dword [esp], eax
mov dword [esp + 4], 2
call fcn.004600c0
mov eax, dword [esp + 0xc]
test eax, eax
jne 0x65ae8c
mov eax, dword [esp + 0xac]
mov ecx, dword [esp + 0xcc]
mov edx, dword [esp + 0x258]
jmp 0x659a8c
call fcn.006093b0
mov eax, dword [esp]
mov ecx, dword [esp + 4]
mov dword [esp + 0x7f8], eax
mov dword [esp + 0x7fc], ecx
mov eax, dword [esp + 0x88]
mov dword [esp], eax
call fcn.00465390
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp], 0
mov edx, dword [esp + 0x2a4]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0x100]
mov dword [esp + 8], ebx
lea ebp, [0x71f9e5]
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], 0xb
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], ecx
lea eax, [0x7316d0]
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], 0x2b
call fcn.0043c110
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x7f0], eax
mov dword [esp + 0x7f4], ecx
mov dword [esp + 0xa88], 0
mov dword [esp + 0xa8c], 0
mov dword [esp + 0xa90], 0
mov dword [esp + 0xa94], 0
lea eax, [0x6cae00]
mov dword [esp], eax
lea ecx, [esp + 0x7f8]
mov dword [esp + 4], ecx
call fcn.0040bcf0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0xa88], eax
mov dword [esp + 0xa8c], ecx
lea eax, [0x6cae00]
mov dword [esp], eax
lea ecx, [esp + 0x7f0]
mov dword [esp + 4], ecx
call fcn.0040bcf0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0xa90], eax
mov dword [esp + 0xa94], ecx
mov eax, dword [0x9b861c]
mov dword [esp], eax
lea eax, [esp + 0xa88]
mov dword [esp + 4], eax
mov dword [esp + 8], 2
mov dword [esp + 0xc], 2
call fcn.00554610
mov eax, dword [esp + 0x258]
mov dword [esp + 0x958], eax
mov eax, dword [esp + 0xac]
mov dword [esp + 0x95c], eax
mov eax, dword [esp + 0xcc]
mov dword [esp + 0x960], eax
mov dword [esp + 0x7e8], 0
mov dword [esp + 0x7ec], 0
lea eax, [0x6ba9e0]
mov dword [esp], eax
lea ecx, [esp + 0x958]
mov dword [esp + 4], ecx
call fcn.0040bd80
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x7e8], eax
mov dword [esp + 0x7ec], ecx
mov eax, dword [0x9b861c]
mov dword [esp], eax
lea eax, [esp + 0x7e8]
mov dword [esp + 4], eax
mov dword [esp + 8], 1
mov dword [esp + 0xc], 1
call fcn.00554610
mov eax, dword [esp + 0x88]
inc eax
jmp 0x6599c5
call fcn.006093b0
mov eax, dword [esp + 4]
mov ecx, dword [esp]
mov dword [esp + 0x810], ecx
mov dword [esp + 0x814], eax
mov eax, dword [esp + 0x88]
mov dword [esp], eax
call fcn.00465390
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp], 0
mov edx, dword [esp + 0x2a4]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0x100]
mov dword [esp + 8], ebx
lea ebp, [0x71f9e5]
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], 0xb
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], ecx
lea eax, [0x730a2d]
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], 0x29
call fcn.0043c110
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x24]
mov dword [esp + 0x808], ecx
mov dword [esp + 0x80c], eax
mov dword [esp + 0xa98], 0
mov dword [esp + 0xa9c], 0
mov dword [esp + 0xaa0], 0
mov dword [esp + 0xaa4], 0
lea eax, [0x6cae00]
mov dword [esp], eax
lea ecx, [esp + 0x810]
mov dword [esp + 4], ecx
call fcn.0040bcf0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0xa98], eax
mov dword [esp + 0xa9c], ecx
lea eax, [0x6cae00]
mov dword [esp], eax
lea ecx, [esp + 0x808]
mov dword [esp + 4], ecx
call fcn.0040bcf0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
mov dword [esp + 0xaa0], ecx
mov dword [esp + 0xaa4], eax
mov eax, dword [0x9b861c]
mov dword [esp], eax
lea eax, [esp + 0xa98]
mov dword [esp + 4], eax
mov dword [esp + 8], 2
mov dword [esp + 0xc], 2
call fcn.00554610
mov eax, dword [esp + 0x258]
mov dword [esp + 0x964], eax
mov eax, dword [esp + 0xac]
mov dword [esp + 0x968], eax
mov eax, dword [esp + 0xcc]
mov dword [esp + 0x96c], eax
mov dword [esp + 0x800], 0
mov dword [esp + 0x804], 0
lea eax, [0x6ba9e0]
mov dword [esp], eax
lea ecx, [esp + 0x964]
mov dword [esp + 4], ecx
call fcn.0040bd80
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x800], eax
mov dword [esp + 0x804], ecx
mov eax, dword [0x9b861c]
mov dword [esp], eax
lea eax, [esp + 0x800]
mov dword [esp + 4], eax
mov dword [esp + 8], 1
mov dword [esp + 0xc], 1
call fcn.00554610
mov eax, dword [esp + 0x88]
inc eax
jmp 0x6599c5
mov dword [esp], ebx
call fcn.00465390
mov eax, dword [esp + 8]
mov dword [esp + 0x130], eax
mov ecx, dword [esp + 4]
mov dword [esp + 0x2d8], ecx
lea edx, [esp + 0x898]
mov dword [esp], edx
call fcn.0060a0b0
call fcn.006093b0
mov eax, dword [esp + 4]
mov ecx, dword [esp]
mov dword [esp + 0x638], ecx
mov dword [esp + 0x63c], eax
mov dword [esp], 0
mov eax, dword [esp + 0x2a4]
mov dword [esp + 4], eax
mov ecx, dword [esp + 0x100]
mov dword [esp + 8], ecx
lea edx, [0x72f58e]
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], 0x26
call fcn.0043c050
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x630], ecx
mov dword [esp + 0x634], eax
mov dword [esp + 0x988], 0
mov dword [esp + 0x98c], 0
mov dword [esp + 0x990], 0
mov dword [esp + 0x994], 0
lea eax, [0x6cae00]
mov dword [esp], eax
lea ecx, [esp + 0x638]
mov dword [esp + 4], ecx
call fcn.0040bcf0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
mov dword [esp + 0x988], ecx
mov dword [esp + 0x98c], eax
lea eax, [0x6cae00]
mov dword [esp], eax
lea ecx, [esp + 0x630]
mov dword [esp + 4], ecx
call fcn.0040bcf0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
mov dword [esp + 0x990], ecx
mov dword [esp + 0x994], eax
mov eax, dword [0x9b8620]
mov dword [esp], eax
lea eax, [esp + 0x988]
mov dword [esp + 4], eax
mov dword [esp + 8], 2
mov dword [esp + 0xc], 2
call fcn.00554610
mov eax, dword [esp + 0x30c]
mov dword [esp], eax
call fcn.00489750
mov eax, dword [esp + 0x23f0]
cmp eax, 3
jne 0x65b3e3
mov ecx, dword [esp + 0x23ec]
movzx edx, word [ecx]
cmp dx, 0x4252
jne 0x65b3e3
movzx edx, byte [ecx + 2]
cmp dl, 0x48
je 0x661846
lea edi, [esp + 0x1024]
lea esi, [0x7a0040]
call fcn.0044ccec
mov eax, dword [0x9b8614]
mov ecx, dword [eax + 0x84]
mov eax, dword [eax + 0x88]
mov dword [esp + 0x102c], ecx
mov dword [esp + 0x1030], eax
mov eax, dword [esp + 0x2a4]
mov dword [esp + 0x103c], eax
mov ecx, dword [esp + 0x100]
mov dword [esp + 0x1040], ecx
mov dword [esp + 0x104c], eax
mov dword [esp + 0x1050], ecx
mov dword [esp + 0x105c], eax
mov dword [esp + 0x1060], ecx
mov dword [esp], 0
lea edx, [esp + 0x1024]
mov dword [esp + 4], edx
mov dword [esp + 8], 9
mov dword [esp + 0xc], 9
call fcn.0043be60
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
xor edx, edx
xor ebx, ebx
xor ebp, ebp
mov esi, dword [esp + 0x284]
jmp 0x65b4a0
mov edi, dword [esp + 0x2f4]
add edi, 0x2c
inc ebp
mov edx, eax
mov eax, ebx
mov ebx, ecx
mov ecx, esi
mov esi, edi
mov edi, edx
mov edx, dword [esp + 0xfc]
cmp ebp, edx
jge 0x65b7ba
mov dword [esp + 0x14c], edi
mov dword [esp + 0x280], ebx
mov dword [esp + 0x2b4], ecx
mov dword [esp + 0x48], ebp
mov dword [esp + 0x2f4], esi
lea edi, [esp + 0xc78]
call fcn.0044cd32
lea edi, [esp + 0xc4c]
lea esi, [esp + 0xc78]
call fcn.0044cd32
movzx ecx, byte [esp + 0xc54]
cmp cl, 0x43
je 0x65b728
mov ecx, 9
lea esi, [0x71ea2e]
movzx edi, byte [esp + 0xc54]
xchg edi, eax
cmp al, 0x44
xchg edi, eax
jne 0x65b526
mov ecx, 0xd
lea esi, [0x72150c]
xchg edi, eax
cmp al, 0x4e
xchg edi, eax
jne 0x65b548
movzx ecx, byte [esp + 0xc56]
test cl, cl
jbe 0x65b718
mov ecx, 5
lea esi, [0x71b194]
mov edi, dword [esp + 0xc4c]
mov ebp, dword [esp + 0xc50]
cmp ebp, 3
jne 0x65b70f
movzx edx, word [edi]
cmp dx, 0x4f54
jne 0x65b706
movzx edx, byte [edi + 2]
cmp dl, 0x50
jne 0x65b6fd
mov edx, 3
lea ebp, [0x71a289]
mov dword [esp + 0xf4], edx
mov dword [esp + 0x27c], ebp
mov dword [esp], 0
mov ebx, dword [esp + 0x2b4]
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], edx
lea eax, [0x719e84]
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], 1
mov dword [esp + 0x1c], esi
mov dword [esp + 0x20], ecx
call fcn.0043c110
mov eax, dword [esp + 0x28]
mov dword [esp + 0x11c], eax
mov ecx, dword [esp + 0x24]
mov dword [esp + 0x2b4], ecx
mov dword [esp], 0
mov edx, dword [esp + 0x280]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x14c]
mov dword [esp + 8], edx
mov edx, dword [esp + 0x27c]
mov dword [esp + 0xc], edx
mov edx, dword [esp + 0xf4]
mov dword [esp + 0x10], edx
call fcn.0043c050
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0xfc]
lea ebx, [edx - 1]
mov ebp, dword [esp + 0x48]
cmp ebp, ebx
jl 0x65b64b
mov ebx, dword [esp + 0x11c]
mov esi, dword [esp + 0x2b4]
jmp 0x65b48b
mov dword [esp + 0xf8], eax
mov dword [esp + 0x2f0], ecx
mov dword [esp], 0
mov eax, dword [esp + 0x2b4]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x11c]
mov dword [esp + 8], eax
lea eax, [0x719eec]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 2
call fcn.0043c050
mov eax, dword [esp + 0x14]
mov dword [esp + 0x2b4], eax
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x11c], ecx
mov dword [esp], 0
mov edx, dword [esp + 0x2f0]
mov dword [esp + 4], edx
mov edx, dword [esp + 0xf8]
mov dword [esp + 8], edx
lea edx, [0x719eec]
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], 2
call fcn.0043c050
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov edx, dword [esp + 0xfc]
mov ebp, dword [esp + 0x48]
mov ebx, dword [esp + 0x11c]
mov esi, dword [esp + 0x2b4]
jmp 0x65b48b
mov edx, ebp
mov ebp, edi
jmp 0x65b585
mov edx, ebp
mov ebp, edi
jmp 0x65b585
mov edx, ebp
mov ebp, edi
jmp 0x65b585
mov ecx, 6
lea esi, [0x71bc4d]
jmp 0x65b548
mov dword [esp + 0x11c], eax
movzx eax, byte [esp + 0xc55]
mov dword [esp], eax
call fcn.00465390
mov eax, dword [esp + 8]
mov ecx, dword [esp + 4]
lea edx, [esp + 0x190]
mov dword [esp], edx
lea edx, [0x71ea2e]
mov dword [esp + 4], edx
mov dword [esp + 8], 9
lea ebx, [0x719e89]
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], 1
mov dword [esp + 0x14], ecx
mov dword [esp + 0x18], eax
lea eax, [0x719e8a]
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], 1
call fcn.0043c110
mov esi, dword [esp + 0x24]
mov ecx, dword [esp + 0x28]
mov eax, dword [esp + 0x11c]
mov edx, dword [esp + 0xfc]
mov ebx, dword [esp + 0x280]
mov ebp, dword [esp + 0x48]
jmp 0x65b50c
mov dword [esp], 0
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
lea eax, [0x719e8a]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 1
call fcn.0043c050
mov eax, dword [esp + 0x18]
mov dword [esp + 0x11c], eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x2b4], ecx
mov edx, dword [esp + 0x2a8]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
call fcn.005f3dd0
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x20]
test ecx, ecx
jne 0x66165b
mov eax, dword [esp + 0x2ac]
mov dword [esp], eax
mov ecx, dword [esp + 0x104]
mov dword [esp + 4], ecx
lea edx, [0x71e920]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 9
call fcn.004b0370
movzx eax, byte [esp + 0x10]
test al, al
jne 0x661288
mov eax, dword [esp + 0x104]
mov ecx, dword [esp + 0x2ac]
mov dword [esp + 0x2ac], ecx
lea edi, [esp + 0xfb4]
lea esi, [0x79f980]
call fcn.0044cd14
mov ecx, dword [0x9b8614]
mov edx, dword [ecx + 0x84]
mov ecx, dword [ecx + 0x88]
mov dword [esp + 0xfbc], edx
mov dword [esp + 0xfc0], ecx
mov ecx, dword [esp + 0x2a4]
mov dword [esp + 0xfcc], ecx
mov edx, dword [esp + 0x100]
mov dword [esp + 0xfd0], edx
mov ebx, dword [esp + 0x2ac]
mov dword [esp + 0xfdc], ebx
mov dword [esp + 0xfe0], eax
mov dword [esp], 0
lea eax, [esp + 0xfb4]
mov dword [esp + 4], eax
mov dword [esp + 8], 7
mov dword [esp + 0xc], 7
call fcn.0043be60
mov eax, dword [esp + 0x10]
mov dword [esp + 0x2b4], eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x11c], ecx
mov edx, dword [esp + 0x2a8]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
call fcn.005f3dd0
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x24]
test eax, eax
jne 0x66109d
mov eax, dword [0x9b8614]
mov ecx, dword [eax + 0x84]
mov eax, dword [eax + 0x88]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
mov dword [esp], 0
lea eax, [0x720881]
mov dword [esp + 4], eax
mov dword [esp + 8], 0xc
lea eax, [0x71f9f0]
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], 0xb
mov ecx, dword [esp + 0x2a4]
mov dword [esp + 0x1c], ecx
mov edx, dword [esp + 0x100]
mov dword [esp + 0x20], edx
lea ebx, [0x72b082]
mov dword [esp + 0x24], ebx
mov dword [esp + 0x28], 0x1d
call fcn.0043c170
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x2b4], eax
mov ecx, dword [esp + 0x30]
mov dword [esp + 0x11c], ecx
mov edx, dword [esp + 0x2a8]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
call fcn.005f3dd0
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x24]
test eax, eax
jne 0x660eb2
mov eax, dword [esp + 0x23f0]
cmp eax, 4
jne 0x660ea3
mov ecx, dword [esp + 0x23ec]
mov edx, dword [ecx]
cmp edx, 0x54504544
jne 0x660e9b
mov edx, dword [esp + 0x128]
test edx, edx
jne 0x660810
xor ebx, ebx
xor ebp, ebp
mov dword [esp + 0x120], ebx
mov dword [esp + 0x2c8], ebp
lea edi, [esp + 0x12c4]
lea esi, [0x7a2440]
call fcn.0044cbfc
mov eax, dword [0x9b8614]
mov ecx, dword [eax + 0x84]
mov eax, dword [eax + 0x88]
mov dword [esp + 0x12cc], ecx
mov dword [esp + 0x12d0], eax
mov eax, dword [0x9b8614]
mov ecx, dword [eax + 0x84]
mov eax, dword [eax + 0x88]
mov dword [esp + 0x12dc], ecx
mov dword [esp + 0x12e0], eax
mov eax, dword [0x9b8614]
mov ecx, dword [eax + 0x84]
mov eax, dword [eax + 0x88]
mov dword [esp + 0x12ec], ecx
mov dword [esp + 0x12f0], eax
mov eax, dword [esp + 0x2a4]
mov dword [esp + 0x12fc], eax
mov ecx, dword [esp + 0x100]
mov dword [esp + 0x1300], ecx
mov edx, dword [0x9b8614]
mov esi, ecx
mov ecx, dword [edx + 0x84]
mov edx, dword [edx + 0x88]
mov dword [esp + 0x130c], ecx
mov dword [esp + 0x1310], edx
mov dword [esp + 0x131c], ebp
mov dword [esp + 0x1320], ebx
mov dword [esp + 0x132c], ebp
mov dword [esp + 0x1330], ebx
mov ecx, dword [0x9b8614]
mov edx, dword [ecx + 0x88]
mov ecx, dword [ecx + 0x84]
mov dword [esp + 0x133c], ecx
mov dword [esp + 0x1340], edx
mov dword [esp + 0x134c], eax
mov dword [esp + 0x1350], esi
mov ecx, dword [0x9b8614]
mov edx, dword [ecx + 0x88]
mov ecx, dword [ecx + 0x84]
mov dword [esp + 0x135c], ecx
mov dword [esp + 0x1360], edx
mov dword [esp], 0
lea ecx, [esp + 0x12c4]
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x15
mov dword [esp + 0xc], 0x15
call fcn.0043be60
mov eax, dword [esp + 0x10]
mov dword [esp + 0x2b4], eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x11c], ecx
mov edx, dword [esp + 0x2a8]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
call fcn.005f3dd0
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x24]
test eax, eax
jne 0x660625
mov eax, dword [0x9b8614]
mov ecx, dword [eax + 0x88]
mov eax, dword [eax + 0x84]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp], 0
lea eax, [0x71b608]
mov dword [esp + 4], eax
mov dword [esp + 8], 5
lea eax, [0x73bd0d]
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], 0xff
call fcn.0043c0b0
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x2bc], eax
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x110], ecx
mov edx, dword [esp + 0x2a8]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
call fcn.005f3dd0
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x24]
test eax, eax
jne 0x6603bc
lea edi, [esp + 0x10c4]
lea esi, [0x7a1400]
call fcn.0044cc74
mov eax, dword [0x9b8614]
mov ecx, dword [eax + 0x84]
mov eax, dword [eax + 0x88]
mov dword [esp + 0x10cc], ecx
mov dword [esp + 0x10d0], eax
mov eax, dword [0x9b8614]
mov ecx, dword [eax + 0x84]
mov eax, dword [eax + 0x88]
mov dword [esp + 0x10dc], ecx
mov dword [esp + 0x10e0], eax
mov eax, dword [0x9b8614]
mov ecx, dword [eax + 0x84]
mov eax, dword [eax + 0x88]
mov dword [esp + 0x10ec], ecx
mov dword [esp + 0x10f0], eax
mov eax, dword [esp + 0x2a4]
mov dword [esp + 0x10fc], eax
mov ecx, dword [esp + 0x100]
mov dword [esp + 0x1100], ecx
mov edx, dword [0x9b8614]
mov ebx, dword [edx + 0x88]
mov edx, dword [edx + 0x84]
mov dword [esp + 0x110c], edx
mov dword [esp + 0x1110], ebx
mov dword [esp + 0x111c], eax
mov dword [esp + 0x1120], ecx
mov edx, dword [0x9b8614]
mov ebx, dword [edx + 0x84]
mov edx, dword [edx + 0x88]
mov dword [esp + 0x112c], ebx
mov dword [esp + 0x1130], edx
mov dword [esp], 0
lea edx, [esp + 0x10c4]
mov dword [esp + 4], edx
mov dword [esp + 8], 0xf
mov dword [esp + 0xc], 0xf
call fcn.0043be60
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x128]
cmp edx, 1
je 0x6603a2
mov dword [esp + 0x2ec], ecx
lea edi, [esp + 0x11bc]
lea esi, [0x7a1b00]
call fcn.0044cc60
mov ecx, dword [esp + 0x2ec]
mov dword [esp + 0x11bc], ecx
mov dword [esp + 0x11c0], eax
mov eax, dword [0x9b8614]
mov ecx, dword [eax + 0x88]
mov eax, dword [eax + 0x84]
mov dword [esp + 0x11cc], eax
mov dword [esp + 0x11d0], ecx
mov eax, dword [0x9b8614]
mov ecx, dword [eax + 0x88]
mov eax, dword [eax + 0x84]
mov dword [esp + 0x11dc], eax
mov dword [esp + 0x11e0], ecx
mov eax, dword [esp + 0x2a4]
mov dword [esp + 0x11ec], eax
mov ecx, dword [esp + 0x100]
mov dword [esp + 0x11f0], ecx
mov edx, dword [0x9b8614]
mov ebx, dword [edx + 0x88]
mov edx, dword [edx + 0x84]
mov dword [esp + 0x11fc], edx
mov dword [esp + 0x1200], ebx
mov dword [esp + 0x120c], eax
mov dword [esp + 0x1210], ecx
mov edx, dword [0x9b8614]
mov ebx, dword [edx + 0x88]
mov edx, dword [edx + 0x84]
mov dword [esp + 0x121c], edx
mov dword [esp + 0x1220], ebx
mov edx, dword [0x9b8614]
mov ebx, dword [edx + 0x88]
mov edx, dword [edx + 0x84]
mov dword [esp + 0x122c], edx
mov dword [esp + 0x1230], ebx
mov dword [esp], 0
lea edx, [esp + 0x11bc]
mov dword [esp + 4], edx
mov dword [esp + 8], 0x10
mov dword [esp + 0xc], 0x10
call fcn.0043be60
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x2bc], ecx
lea edi, [esp + 0x1adc]
lea esi, [0x7a3440]
call fcn.0044caf8
mov ecx, dword [esp + 0x2bc]
mov dword [esp + 0x1adc], ecx
mov dword [esp + 0x1ae0], eax
mov eax, dword [0x9b8614]
mov ecx, dword [eax + 0x88]
mov eax, dword [eax + 0x84]
mov dword [esp + 0x1aec], eax
mov dword [esp + 0x1af0], ecx
mov eax, dword [esp + 0x2a4]
mov dword [esp + 0x1afc], eax
mov ecx, dword [esp + 0x100]
mov dword [esp + 0x1b00], ecx
mov edx, dword [0x9b8614]
mov ebx, dword [edx + 0x88]
mov edx, dword [edx + 0x84]
mov dword [esp + 0x1b0c], edx
mov dword [esp + 0x1b10], ebx
mov dword [esp + 0x1b1c], eax
mov dword [esp + 0x1b20], ecx
mov edx, dword [0x9b8614]
mov ebx, dword [edx + 0x88]
mov edx, dword [edx + 0x84]
mov dword [esp + 0x1b2c], edx
mov dword [esp + 0x1b30], ebx
mov dword [esp + 0x1b3c], eax
mov dword [esp + 0x1b40], ecx
mov edx, dword [0x9b8614]
mov ebx, dword [edx + 0x88]
mov edx, dword [edx + 0x84]
mov dword [esp + 0x1b4c], edx
mov dword [esp + 0x1b50], ebx
mov dword [esp + 0x1b5c], eax
mov dword [esp + 0x1b60], ecx
mov edx, dword [0x9b8614]
mov ebx, dword [edx + 0x88]
mov edx, dword [edx + 0x84]
mov dword [esp + 0x1b6c], edx
mov dword [esp + 0x1b70], ebx
mov dword [esp + 0x1b7c], eax
mov dword [esp + 0x1b80], ecx
mov edx, dword [esp + 0x2c8]
mov dword [esp + 0x1b8c], edx
mov ebx, dword [esp + 0x120]
mov dword [esp + 0x1b90], ebx
mov dword [esp + 0x1b9c], edx
mov dword [esp + 0x1ba0], ebx
mov edx, dword [0x9b8614]
mov ebx, dword [edx + 0x88]
mov edx, dword [edx + 0x84]
mov dword [esp + 0x1bac], edx
mov dword [esp + 0x1bb0], ebx
mov dword [esp + 0x1bbc], eax
mov dword [esp + 0x1bc0], ecx
mov edx, dword [0x9b8614]
mov ebx, dword [edx + 0x88]
mov edx, dword [edx + 0x84]
mov dword [esp + 0x1bcc], edx
mov dword [esp + 0x1bd0], ebx
mov dword [esp + 0x1bdc], eax
mov dword [esp + 0x1be0], ecx
mov dword [esp], 0
lea edx, [esp + 0x1adc]
mov dword [esp + 4], edx
mov dword [esp + 8], 0x22
mov dword [esp + 0xc], 0x22
call fcn.0043be60
mov eax, dword [esp + 0x14]
mov dword [esp + 0x110], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x2bc], ecx
mov edx, dword [esp + 0x2a8]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
call fcn.005f3dd0
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x20]
test ecx, ecx
jne 0x6601b7
mov eax, dword [0x9b8614]
mov ecx, dword [eax + 0x88]
mov eax, dword [eax + 0x84]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp], 0
lea eax, [0x71fe94]
mov dword [esp + 4], eax
mov dword [esp + 8], 0xb
lea ecx, [0x71f9f0]
mov dword [esp + 0x14], ecx
mov dword [esp + 0x18], 0xb
mov edx, dword [esp + 0x2a4]
mov dword [esp + 0x1c], edx
mov ebx, dword [esp + 0x100]
mov dword [esp + 0x20], ebx
call fcn.0043c110
mov eax, dword [esp + 0x28]
mov dword [esp + 0x110], eax
mov ecx, dword [esp + 0x24]
mov dword [esp + 0x2bc], ecx
mov edx, dword [esp + 0x2a8]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
call fcn.005f3dd0
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x20]
test ecx, ecx
jne 0x65ffcc
mov eax, dword [esp + 0x23f0]
cmp eax, 8
jne 0x65ffbd
mov ecx, dword [esp + 0x23ec]
mov edx, dword [ecx]
cmp edx, 0x50505553
jne 0x65ffb5
mov edx, dword [ecx + 4]
cmp edx, 0x5245494c
jne 0x65ffad
mov edx, dword [esp + 0x128]
test edx, edx
jne 0x65f91b
xor ebx, ebx
xor ebp, ebp
mov dword [esp + 0x124], ebx
mov dword [esp + 0x2c4], ebp
lea edi, [esp + 0x15d4]
lea esi, [0x7a2d20]
call fcn.0044cb5c
mov eax, dword [0x9b8614]
mov ecx, dword [eax + 0x88]
mov eax, dword [eax + 0x84]
mov dword [esp + 0x15dc], eax
mov dword [esp + 0x15e0], ecx
mov eax, dword [esp + 0x2cc]
mov dword [esp + 0x15ec], eax
mov dword [esp + 0x15f0], edx
mov ecx, dword [0x9b8614]
mov esi, ebx
mov ebx, dword [ecx + 0x88]
mov ecx, dword [ecx + 0x84]
mov dword [esp + 0x15fc], ecx
mov dword [esp + 0x1600], ebx
mov dword [esp + 0x160c], eax
mov dword [esp + 0x1610], edx
mov ecx, dword [0x9b8614]
mov ebx, dword [ecx + 0x88]
mov ecx, dword [ecx + 0x84]
mov dword [esp + 0x161c], ecx
mov dword [esp + 0x1620], ebx
mov ecx, dword [esp + 0x2a4]
mov dword [esp + 0x162c], ecx
mov ebx, dword [esp + 0x100]
mov dword [esp + 0x1630], ebx
mov edi, ebx
mov ebx, dword [0x9b8614]
mov ecx, dword [ebx + 0x88]
mov ebx, dword [ebx + 0x84]
mov dword [esp + 0x163c], ebx
mov dword [esp + 0x1640], ecx
mov dword [esp + 0x164c], eax
mov dword [esp + 0x1650], edx
mov dword [esp + 0x165c], ebp
mov dword [esp + 0x1660], esi
mov dword [esp + 0x166c], ebp
mov dword [esp + 0x1670], esi
mov ecx, dword [0x9b8614]
mov ebx, dword [ecx + 0x88]
mov ecx, dword [ecx + 0x84]
mov dword [esp + 0x167c], ecx
mov dword [esp + 0x1680], ebx
mov ecx, dword [esp + 0x2a4]
mov dword [esp + 0x168c], ecx
mov dword [esp + 0x1690], edi
mov ebx, dword [0x9b8614]
mov ebp, dword [ebx + 0x84]
mov ebx, dword [ebx + 0x88]
mov dword [esp + 0x169c], ebp
mov dword [esp + 0x16a0], ebx
mov dword [esp + 0x16ac], eax
mov dword [esp + 0x16b0], edx
mov dword [esp], 0
lea ebx, [esp + 0x15d4]
mov dword [esp + 4], ebx
mov dword [esp + 8], 0x1d
mov dword [esp + 0xc], 0x1d
call fcn.0043be60
mov eax, dword [esp + 0x14]
mov dword [esp + 0x11c], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x2b4], ecx
mov edx, dword [esp + 0x2a8]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
call fcn.005f3dd0
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x20]
test ecx, ecx
jne 0x65f730
lea edi, [esp + 0x106c]
lea esi, [0x7a06a0]
call fcn.0044ccc4
mov eax, dword [0x9b8614]
mov ecx, dword [eax + 0x88]
mov eax, dword [eax + 0x84]
mov dword [esp + 0x1074], eax
mov dword [esp + 0x1078], ecx
mov eax, dword [0x9b8614]
mov ecx, dword [eax + 0x88]
mov eax, dword [eax + 0x84]
mov dword [esp + 0x1084], eax
mov dword [esp + 0x1088], ecx
mov eax, dword [esp + 0x2a4]
mov dword [esp + 0x1094], eax
mov ecx, dword [esp + 0x100]
mov dword [esp + 0x1098], ecx
mov edx, dword [0x9b8614]
mov ebx, dword [edx + 0x88]
mov edx, dword [edx + 0x84]
mov dword [esp + 0x10a4], edx
mov dword [esp + 0x10a8], ebx
mov dword [esp + 0x10b4], eax
mov dword [esp + 0x10b8], ecx
mov dword [esp], 0
lea edx, [esp + 0x106c]
mov dword [esp + 4], edx
mov dword [esp + 8], 0xb
mov dword [esp + 0xc], 0xb
call fcn.0043be60
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x128]
cmp edx, 1
je 0x65f716
mov dword [esp + 0x144], ecx
lea edi, [esp + 0x113c]
lea esi, [0x7a1b80]
call fcn.0044cc60
mov dword [esp + 0x113c], eax
mov eax, dword [esp + 0x144]
mov dword [esp + 0x1140], eax
mov eax, dword [0x9b8614]
mov ecx, dword [eax + 0x88]
mov eax, dword [eax + 0x84]
mov dword [esp + 0x114c], eax
mov dword [esp + 0x1150], ecx
mov eax, dword [0x9b8614]
mov ecx, dword [eax + 0x88]
mov eax, dword [eax + 0x84]
mov dword [esp + 0x115c], eax
mov dword [esp + 0x1160], ecx
mov eax, dword [esp + 0x2a4]
mov dword [esp + 0x116c], eax
mov ecx, dword [esp + 0x100]
mov dword [esp + 0x1170], ecx
mov edx, dword [0x9b8614]
mov ebx, dword [edx + 0x88]
mov edx, dword [edx + 0x84]
mov dword [esp + 0x117c], edx
mov dword [esp + 0x1180], ebx
mov dword [esp + 0x118c], eax
mov dword [esp + 0x1190], ecx
mov edx, dword [0x9b8614]
mov ebx, dword [edx + 0x88]
mov edx, dword [edx + 0x84]
mov dword [esp + 0x119c], edx
mov dword [esp + 0x11a0], ebx
mov edx, dword [0x9b8614]
mov ebx, dword [edx + 0x88]
mov edx, dword [edx + 0x84]
mov dword [esp + 0x11ac], edx
mov dword [esp + 0x11b0], ebx
mov dword [esp], 0
lea edx, [esp + 0x113c]
mov dword [esp + 4], edx
mov dword [esp + 8], 0x10
mov dword [esp + 0xc], 0x10
call fcn.0043be60
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x11c], ecx
lea edi, [esp + 0x19cc]
lea esi, [0x7a3560]
call fcn.0044caf8
mov dword [esp + 0x19cc], eax
mov eax, dword [esp + 0x11c]
mov dword [esp + 0x19d0], eax
mov eax, dword [0x9b8614]
mov ecx, dword [eax + 0x84]
mov eax, dword [eax + 0x88]
mov dword [esp + 0x19dc], ecx
mov dword [esp + 0x19e0], eax
mov eax, dword [esp + 0x2a4]
mov dword [esp + 0x19ec], eax
mov ecx, dword [esp + 0x100]
mov dword [esp + 0x19f0], ecx
mov edx, dword [0x9b8614]
mov ebx, dword [edx + 0x84]
mov edx, dword [edx + 0x88]
mov dword [esp + 0x19fc], ebx
mov dword [esp + 0x1a00], edx
mov dword [esp + 0x1a0c], eax
mov dword [esp + 0x1a10], ecx
mov edx, dword [0x9b8614]
mov ebx, dword [edx + 0x84]
mov edx, dword [edx + 0x88]
mov dword [esp + 0x1a1c], ebx
mov dword [esp + 0x1a20], edx
mov dword [esp + 0x1a2c], eax
mov dword [esp + 0x1a30], ecx
mov edx, dword [0x9b8614]
mov ebx, dword [edx + 0x84]
mov edx, dword [edx + 0x88]
mov dword [esp + 0x1a3c], ebx
mov dword [esp + 0x1a40], edx
mov dword [esp + 0x1a4c], eax
mov dword [esp + 0x1a50], ecx
mov edx, dword [0x9b8614]
mov ebx, dword [edx + 0x84]
mov edx, dword [edx + 0x88]
mov dword [esp + 0x1a5c], ebx
mov dword [esp + 0x1a60], edx
mov dword [esp + 0x1a6c], eax
mov dword [esp + 0x1a70], ecx
mov edx, dword [esp + 0x2c4]
mov dword [esp + 0x1a7c], edx
mov ebx, dword [esp + 0x124]
mov dword [esp + 0x1a80], ebx
mov dword [esp + 0x1a8c], edx
mov dword [esp + 0x1a90], ebx
mov edx, dword [0x9b8614]
mov ebx, dword [edx + 0x84]
mov edx, dword [edx + 0x88]
mov dword [esp + 0x1a9c], ebx
mov dword [esp + 0x1aa0], edx
mov dword [esp + 0x1aac], eax
mov dword [esp + 0x1ab0], ecx
mov edx, dword [0x9b8614]
mov ebx, dword [edx + 0x84]
mov edx, dword [edx + 0x88]
mov dword [esp + 0x1abc], ebx
mov dword [esp + 0x1ac0], edx
mov dword [esp + 0x1acc], eax
mov dword [esp + 0x1ad0], ecx
mov dword [esp], 0
lea edx, [esp + 0x19cc]
mov dword [esp + 4], edx
mov dword [esp + 8], 0x22
mov dword [esp + 0xc], 0x22
call fcn.0043be60
mov eax, dword [esp + 0x10]
mov dword [esp + 0x2b4], eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x11c], ecx
mov edx, dword [esp + 0x2a8]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
call fcn.005f3dd0
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x24]
test eax, eax
jne 0x65f52b
mov eax, dword [0x9b8614]
mov ecx, dword [eax + 0x84]
mov eax, dword [eax + 0x88]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
mov dword [esp], 0
lea eax, [0x71fe94]
mov dword [esp + 4], eax
mov dword [esp + 8], 0xb
lea ecx, [0x71f9f0]
mov dword [esp + 0x14], ecx
mov dword [esp + 0x18], 0xb
mov edx, dword [esp + 0x2a4]
mov dword [esp + 0x1c], edx
mov ebx, dword [esp + 0x100]
mov dword [esp + 0x20], ebx
call fcn.0043c110
mov eax, dword [esp + 0x23f0]
cmp eax, 3
jne 0x65f51c
mov ecx, dword [esp + 0x23ec]
movzx edx, word [ecx]
cmp dx, 0x5242
jne 0x65f514
movzx edx, byte [ecx + 2]
cmp dl, 0x47
jne 0x65f50c
mov edx, dword [esp + 0x128]
cmp edx, 1
jne 0x65f500
mov ebx, dword [esp + 0x2cc]
movzx ebp, byte [ebx]
xchg ebp, eax
cmp al, 0x35
xchg ebp, eax
jne 0x65f479
xor ebp, ebp
xor esi, esi
xor edi, edi
mov dword [esp + 0x180], eax
xor eax, eax
mov dword [esp + 0x270], eax
mov dword [esp + 0x178], ecx
lea ecx, [0x71a14e]
mov dword [esp + 0x228], ecx
mov dword [esp + 0x170], edx
mov edx, 0x1a
mov dword [esp + 0x68], edx
mov dword [esp + 0x168], ebx
lea ebx, [0x729978]
mov dword [esp + 0x22c], ebx
mov edx, dword [esp + 0x170]
mov ebx, dword [esp + 0x168]
mov dword [esp + 0x12c], ebp
mov dword [esp + 0x2d4], esi
mov dword [esp + 0xdc], edi
lea edi, [esp + 0x17b4]
lea esi, [0x7a3320]
call fcn.0044cb0c
mov ecx, dword [0x9b8614]
mov ebp, dword [ecx + 0x84]
mov ecx, dword [ecx + 0x88]
mov dword [esp + 0x17bc], ebp
mov dword [esp + 0x17c0], ecx
mov dword [esp + 0x17cc], ebx
mov dword [esp + 0x17d0], edx
mov ecx, dword [0x9b8614]
mov ebp, dword [ecx + 0x84]
mov ecx, dword [ecx + 0x88]
mov dword [esp + 0x17dc], ebp
mov dword [esp + 0x17e0], ecx
mov dword [esp + 0x17ec], ebx
mov dword [esp + 0x17f0], edx
mov ecx, dword [0x9b8614]
mov ebp, dword [ecx + 0x84]
mov ecx, dword [ecx + 0x88]
mov dword [esp + 0x17fc], ebp
mov dword [esp + 0x1800], ecx
mov ecx, dword [esp + 0x2a4]
mov dword [esp + 0x180c], ecx
mov ebp, dword [esp + 0x100]
mov dword [esp + 0x1810], ebp
mov eax, dword [0x9b8614]
mov ebp, dword [eax + 0x84]
mov eax, dword [eax + 0x88]
mov dword [esp + 0x181c], ebp
mov dword [esp + 0x1820], eax
mov dword [esp + 0x182c], ebx
mov dword [esp + 0x1830], edx
mov eax, dword [esp + 0x22c]
mov dword [esp + 0x183c], eax
mov ebp, dword [esp + 0x68]
mov dword [esp + 0x1840], ebp
mov dword [esp + 0x184c], 0
mov dword [esp + 0x1850], 0
mov dword [esp + 0x185c], eax
mov dword [esp + 0x1860], ebp
mov dword [esp + 0x186c], 0
mov dword [esp + 0x1870], 0
mov ebp, dword [0x9b8614]
mov eax, dword [ebp + 0x84]
mov ebp, dword [ebp + 0x88]
mov dword [esp + 0x187c], eax
mov dword [esp + 0x1880], ebp
mov dword [esp + 0x188c], ecx
mov eax, dword [esp + 0x100]
mov dword [esp + 0x1890], eax
mov ebp, dword [0x9b8614]
mov eax, dword [ebp + 0x84]
mov ebp, dword [ebp + 0x88]
mov dword [esp + 0x189c], eax
mov dword [esp + 0x18a0], ebp
mov dword [esp + 0x18ac], ebx
mov dword [esp + 0x18b0], edx
mov dword [esp], 0
lea eax, [esp + 0x17b4]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x21
mov dword [esp + 0xc], 0x21
call fcn.0043be60
mov eax, dword [esp + 0x10]
mov dword [esp + 0x2b4], eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x11c], ecx
mov edx, dword [esp + 0x2a8]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
call fcn.005f3dd0
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x24]
test eax, eax
jne 0x65f28e
lea edi, [esp + 0x136c]
lea esi, [0x7a2800]
call fcn.0044cbd4
mov eax, dword [0x9b8614]
mov ecx, dword [eax + 0x84]
mov eax, dword [eax + 0x88]
mov dword [esp + 0x1374], ecx
mov dword [esp + 0x1378], eax
mov eax, dword [esp + 0x270]
mov dword [esp + 0x1384], eax
mov ecx, dword [esp + 0xdc]
mov dword [esp + 0x1388], ecx
mov edx, dword [0x9b8614]
mov ebx, dword [edx + 0x84]
mov edx, dword [edx + 0x88]
mov dword [esp + 0x1394], ebx
mov dword [esp + 0x1398], edx
mov edx, dword [esp + 0x2a4]
mov dword [esp + 0x13a4], edx
mov ebx, dword [esp + 0x100]
mov dword [esp + 0x13a8], ebx
mov ebp, dword [0x9b8614]
mov esi, ecx
mov ecx, dword [ebp + 0x84]
mov ebp, dword [ebp + 0x88]
mov dword [esp + 0x13b4], ecx
mov dword [esp + 0x13b8], ebp
mov ecx, dword [esp + 0x228]
mov dword [esp + 0x13c4], ecx
mov dword [esp + 0x13c8], 3
mov ecx, dword [esp + 0x2d4]
mov dword [esp + 0x13d4], ecx
mov ecx, dword [esp + 0x12c]
mov dword [esp + 0x13d8], ecx
mov ecx, dword [0x9b8614]
mov ebp, dword [ecx + 0x84]
mov ecx, dword [ecx + 0x88]
mov dword [esp + 0x13e4], ebp
mov dword [esp + 0x13e8], ecx
mov dword [esp + 0x13f4], edx
mov dword [esp + 0x13f8], ebx
mov dword [esp + 0x1404], eax
mov dword [esp + 0x1408], esi
mov ecx, dword [0x9b8614]
mov ebp, dword [ecx + 0x84]
mov ecx, dword [ecx + 0x88]
mov dword [esp + 0x1414], ebp
mov dword [esp + 0x1418], ecx
mov dword [esp], 0
lea ecx, [esp + 0x136c]
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x17
mov dword [esp + 0xc], 0x17
call fcn.0043be60
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x11c], ecx
lea edi, [esp + 0x1bec]
lea esi, [0x7a3da0]
call fcn.0044ca58
mov dword [esp + 0x1bec], eax
mov eax, dword [esp + 0x11c]
mov dword [esp + 0x1bf0], eax
mov eax, dword [0x9b8614]
mov ecx, dword [eax + 0x84]
mov eax, dword [eax + 0x88]
mov dword [esp + 0x1bfc], ecx
mov dword [esp + 0x1c00], eax
mov eax, dword [esp + 0x2a4]
mov dword [esp + 0x1c0c], eax
mov ecx, dword [esp + 0x100]
mov dword [esp + 0x1c10], ecx
mov edx, dword [esp + 0x270]
mov dword [esp + 0x1c1c], edx
mov edx, dword [esp + 0xdc]
mov dword [esp + 0x1c20], edx
mov edx, dword [0x9b8614]
mov ebx, dword [edx + 0x84]
mov edx, dword [edx + 0x88]
mov dword [esp + 0x1c2c], ebx
mov dword [esp + 0x1c30], edx
mov edx, dword [0x9b8614]
mov ebx, dword [edx + 0x84]
mov edx, dword [edx + 0x88]
mov dword [esp + 0x1c3c], ebx
mov dword [esp + 0x1c40], edx
mov dword [esp + 0x1c4c], eax
mov dword [esp + 0x1c50], ecx
mov edx, dword [0x9b8614]
mov ebx, dword [edx + 0x84]
mov edx, dword [edx + 0x88]
mov dword [esp + 0x1c5c], ebx
mov dword [esp + 0x1c60], edx
mov dword [esp + 0x1c6c], eax
mov dword [esp + 0x1c70], ecx
mov edx, dword [0x9b8614]
mov ebx, dword [edx + 0x84]
mov edx, dword [edx + 0x88]
mov dword [esp + 0x1c7c], ebx
mov dword [esp + 0x1c80], edx
mov dword [esp + 0x1c8c], eax
mov dword [esp + 0x1c90], ecx
mov edx, dword [0x9b8614]
mov ebx, dword [edx + 0x84]
mov edx, dword [edx + 0x88]
mov dword [esp + 0x1c9c], ebx
mov dword [esp + 0x1ca0], edx
mov dword [esp + 0x1cac], eax
mov dword [esp + 0x1cb0], ecx
mov edx, dword [esp + 0x22c]
mov dword [esp + 0x1cbc], edx
mov ebx, dword [esp + 0x68]
mov dword [esp + 0x1cc0], ebx
mov dword [esp + 0x1ccc], 0
mov dword [esp + 0x1cd0], 0
mov dword [esp + 0x1cdc], edx
mov dword [esp + 0x1ce0], ebx
mov dword [esp + 0x1cec], 0
mov dword [esp + 0x1cf0], 0
mov edx, dword [0x9b8614]
mov ebx, dword [edx + 0x84]
mov edx, dword [edx + 0x88]
mov dword [esp + 0x1cfc], ebx
mov dword [esp + 0x1d00], edx
mov dword [esp + 0x1d0c], eax
mov dword [esp + 0x1d10], ecx
mov edx, dword [0x9b8614]
mov ebx, dword [edx + 0x84]
mov edx, dword [edx + 0x88]
mov dword [esp + 0x1d1c], ebx
mov dword [esp + 0x1d20], edx
mov dword [esp + 0x1d2c], eax
mov dword [esp + 0x1d30], ecx
mov dword [esp], 0
lea edx, [esp + 0x1bec]
mov dword [esp + 4], edx
mov dword [esp + 8], 0x2a
mov dword [esp + 0xc], 0x2a
call fcn.0043be60
mov eax, dword [esp + 0x10]
mov dword [esp + 0x2b4], eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x11c], ecx
mov edx, dword [esp + 0x2a8]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
call fcn.005f3dd0
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x24]
test eax, eax
jne 0x65f0a3
mov eax, dword [0x9b8614]
mov ecx, dword [eax + 0x84]
mov eax, dword [eax + 0x88]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
mov dword [esp], 0
lea eax, [0x71fe94]
mov dword [esp + 4], eax
mov dword [esp + 8], 0xb
lea ecx, [0x71f9f0]
mov dword [esp + 0x14], ecx
mov dword [esp + 0x18], 0xb
mov edx, dword [esp + 0x2a4]
mov dword [esp + 0x1c], edx
mov ebx, dword [esp + 0x100]
mov dword [esp + 0x20], ebx
call fcn.0043c110
mov eax, dword [esp + 0x24]
mov dword [esp + 0x2b4], eax
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x11c], ecx
mov edx, dword [esp + 0x2a8]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
call fcn.005f3dd0
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x24]
test eax, eax
jne 0x65eeb8
mov eax, dword [esp + 0x23f0]
cmp eax, 6
jne 0x65eea9
mov ecx, dword [esp + 0x23ec]
mov edx, dword [ecx]
cmp edx, 0x424d454d
jne 0x65eea1
movzx edx, word [ecx + 4]
cmp dx, 0x5245
je 0x65e18d
cmp eax, 3
jne 0x65e17e
movzx edx, word [ecx]
cmp dx, 0x5050
jne 0x65e16f
movzx edx, byte [ecx + 2]
cmp dl, 0x4d
jne 0x65e160
movzx edx, byte [esp + 0x23f4]
test dl, dl
jne 0x65d0c6
je 0x65d06f
mov byte [esp + 0x2400], 1
nop
call fcn.00426b00
add esp, 0x23c4
ret
mov edx, dword [0x9b8614]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov eax, dword [esp + 0x2d8]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x130]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x2a4]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x100]
mov dword [esp + 0x18], eax
mov edi, dword [esp + 0x308]
lea esi, [esp + 0x23c8]
call fcn.0044cd6e
call fcn.0066eea0
jmp 0x65d05a
lea eax, [0x6cae00]
mov dword [esp], eax
call fcn.0040e460
mov eax, dword [esp + 4]
mov dword [esp + 0x314], eax
lea edi, [esp + 0x1424]
lea esi, [0x7a28c0]
call fcn.0044cbac
mov ecx, dword [0x9b8614]
mov edx, dword [ecx + 0x84]
mov ecx, dword [ecx + 0x88]
mov dword [esp + 0x142c], edx
mov dword [esp + 0x1430], ecx
mov ecx, dword [esp + 0x2cc]
mov dword [esp + 0x143c], ecx
mov edx, dword [esp + 0x128]
mov dword [esp + 0x1440], edx
mov ebx, dword [0x9b8614]
mov ebp, dword [ebx + 0x84]
mov ebx, dword [ebx + 0x88]
mov dword [esp + 0x144c], ebp
mov dword [esp + 0x1450], ebx
mov dword [esp + 0x145c], ecx
mov dword [esp + 0x1460], edx
mov ebx, dword [0x9b8614]
mov ebp, dword [ebx + 0x84]
mov ebx, dword [ebx + 0x88]
mov dword [esp + 0x146c], ebp
mov dword [esp + 0x1470], ebx
mov ebx, dword [esp + 0x2a4]
mov dword [esp + 0x147c], ebx
mov ebp, dword [esp + 0x100]
mov dword [esp + 0x1480], ebp
mov esi, dword [0x9b8614]
mov edi, dword [esi + 0x84]
mov esi, dword [esi + 0x88]
mov dword [esp + 0x148c], edi
mov dword [esp + 0x1490], esi
mov dword [esp + 0x149c], ecx
mov dword [esp + 0x14a0], edx
mov esi, dword [0x9b8614]
mov edi, dword [esi + 0x84]
mov esi, dword [esi + 0x88]
mov dword [esp + 0x14ac], edi
mov dword [esp + 0x14b0], esi
mov dword [esp + 0x14bc], ebx
mov dword [esp + 0x14c0], ebp
mov esi, dword [0x9b8614]
mov edi, dword [esi + 0x84]
mov esi, dword [esi + 0x88]
mov dword [esp + 0x14cc], edi
mov dword [esp + 0x14d0], esi
mov dword [esp + 0x14dc], ecx
mov dword [esp + 0x14e0], edx
mov dword [esp], 0
lea ecx, [esp + 0x1424]
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x19
mov dword [esp + 0xc], 0x19
call fcn.0043be60
mov eax, dword [esp + 0x10]
mov dword [esp + 0x2b4], eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x11c], ecx
mov edx, dword [esp + 0x2a8]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
call fcn.005f3dd0
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x24]
test eax, eax
jne 0x65df75
mov eax, dword [0x9b8614]
mov ecx, dword [eax + 0x84]
mov eax, dword [eax + 0x88]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
mov dword [esp], 0
lea eax, [0x737512]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x43
lea eax, [0x71f9f0]
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], 0xb
mov ecx, dword [esp + 0x2a4]
mov dword [esp + 0x1c], ecx
mov edx, dword [esp + 0x100]
mov dword [esp + 0x20], edx
call fcn.0043c110
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x2a8]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
call fcn.005f4630
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x268], ecx
mov edx, dword [esp + 0x20]
mov dword [esp + 0x26c], edx
test ecx, ecx
jne 0x65dd8c
mov dword [esp + 0x2d0], eax
mov dword [esp + 8], eax
mov dword [esp], 0xc
lea ecx, [0x74f6e8]
mov dword [esp + 4], ecx
call fcn.004262e0
test eax, eax
jne 0x65dd7f
jmp 0x65d459
mov ecx, dword [esp + 0x2a4]
mov dword [esp + 0x340], ecx
mov edx, dword [esp + 0x100]
mov dword [esp + 0x344], edx
mov ebx, dword [esp + 0x314]
mov ebp, dword [ebx]
mov esi, dword [ebx + 4]
mov dword [esp + 0x338], ebp
mov dword [esp + 0x33c], esi
lea edi, [esp + 0xb5c]
xor eax, eax
call fcn.0044c88a
lea ecx, [0x6cae00]
mov dword [esp], ecx
lea ebp, [esp + 0x340]
mov dword [esp + 4], ebp
call fcn.0040bcf0
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0xc]
mov dword [esp + 0xb5c], ecx
mov dword [esp + 0xb60], edx
lea ecx, [0x6cae00]
mov dword [esp + 0xb64], ecx
lea edx, [0x79a420]
mov dword [esp + 0xb68], edx
mov dword [esp], ecx
lea ebx, [esp + 0x338]
mov dword [esp + 4], ebx
call fcn.0040bcf0
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0xc]
mov dword [esp + 0xb6c], ecx
mov dword [esp + 0xb70], edx
lea ecx, [esp + 0xb5c]
mov dword [esp], ecx
mov dword [esp + 4], 3
mov dword [esp + 8], 3
call fcn.004a3000
mov eax, dword [esp + 0x2d0]
mov dword [esp], eax
call fcn.005f56f0
movzx eax, byte [esp + 4]
test al, al
je 0x65dac6
mov dword [esp + 0x388], 0
mov dword [esp + 0x38c], 0
lea eax, [0x6b4580]
mov dword [esp + 0x388], eax
mov ecx, dword [esp + 0x314]
mov dword [esp + 0x38c], ecx
mov edx, dword [esp + 0x2d0]
mov dword [esp], edx
lea ebx, [esp + 0x388]
mov dword [esp + 4], ebx
mov dword [esp + 8], 1
mov dword [esp + 0xc], 1
call fcn.005f5aa0
mov eax, dword [esp + 0x314]
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov dword [esp], ecx
mov dword [esp + 4], edx
call fcn.00651bd0
movzx eax, byte [esp + 8]
test al, al
je 0x65d8dd
lea edi, [esp + 0x16bc]
lea esi, [0x7a3020]
call fcn.0044cb34
mov eax, dword [esp + 0x314]
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov dword [esp + 0x16c4], ecx
mov dword [esp + 0x16c8], edx
mov ecx, dword [0x9b8614]
mov edx, dword [ecx + 0x84]
mov ecx, dword [ecx + 0x88]
mov dword [esp + 0x16d4], edx
mov dword [esp + 0x16d8], ecx
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov dword [esp + 0x16e4], ecx
mov dword [esp + 0x16e8], edx
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov dword [esp + 0x16f4], ecx
mov dword [esp + 0x16f8], edx
mov ecx, dword [0x9b8614]
mov edx, dword [ecx + 0x58]
mov ecx, dword [ecx + 0x5c]
mov dword [esp + 0x1704], edx
mov dword [esp + 0x1708], ecx
mov ecx, dword [0x9b8614]
mov edx, dword [ecx + 0x58]
mov ecx, dword [ecx + 0x5c]
mov dword [esp + 0x1714], edx
mov dword [esp + 0x1718], ecx
mov ecx, dword [0x9b8614]
mov edx, dword [ecx + 0x84]
mov ecx, dword [ecx + 0x88]
mov dword [esp + 0x1724], edx
mov dword [esp + 0x1728], ecx
mov ecx, dword [esp + 0x2a4]
mov dword [esp + 0x1734], ecx
mov edx, dword [esp + 0x100]
mov dword [esp + 0x1738], edx
mov ebx, dword [eax]
mov ebp, dword [eax + 4]
mov dword [esp + 0x1744], ebx
mov dword [esp + 0x1748], ebp
mov ebx, dword [eax]
mov ebp, dword [eax + 4]
mov dword [esp + 0x1754], ebx
mov dword [esp + 0x1758], ebp
mov ebx, dword [0x9b8614]
mov ebp, dword [ebx + 0x84]
mov ebx, dword [ebx + 0x88]
mov dword [esp + 0x1764], ebp
mov dword [esp + 0x1768], ebx
mov ebx, dword [0x9b8614]
mov ebp, dword [ebx + 0x84]
mov ebx, dword [ebx + 0x88]
mov dword [esp + 0x1774], ebp
mov dword [esp + 0x1778], ebx
mov ebx, dword [eax]
mov ebp, dword [eax + 4]
mov dword [esp + 0x1784], ebx
mov dword [esp + 0x1788], ebp
mov ebx, dword [eax]
mov ebp, dword [eax + 4]
mov dword [esp + 0x1794], ebx
mov dword [esp + 0x1798], ebp
mov ebx, dword [eax]
mov ebp, dword [eax + 4]
mov dword [esp + 0x17a4], ebx
mov dword [esp + 0x17a8], ebp
mov dword [esp], 0
lea ebx, [esp + 0x16bc]
mov dword [esp + 4], ebx
mov dword [esp + 8], 0x1f
mov dword [esp + 0xc], 0x1f
call fcn.0043be60
mov eax, dword [esp + 0x10]
mov dword [esp + 0x2b4], eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x11c], ecx
mov edx, dword [esp + 0x2a8]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
call fcn.005f3dd0
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x24]
test eax, eax
je 0x65d384
mov dword [esp + 0x28c], eax
mov dword [esp + 0x29c], ecx
mov edx, dword [eax + 0x10]
mov dword [esp], ecx
call edx
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp], 0
lea edx, [0x737730]
mov dword [esp + 4], edx
mov dword [esp + 8], 0x44
mov ebx, dword [esp + 0x2b4]
mov dword [esp + 0xc], ebx
mov ebp, dword [esp + 0x11c]
mov dword [esp + 0x10], ebp
lea esi, [0x719eac]
mov dword [esp + 0x14], esi
mov dword [esp + 0x18], 1
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], ecx
call fcn.0043c110
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x358], eax
mov dword [esp + 0x35c], ecx
mov dword [esp + 0x360], 0
mov dword [esp + 0x364], 0
lea eax, [0x6cae00]
mov dword [esp], eax
lea ecx, [esp + 0x358]
mov dword [esp + 4], ecx
call fcn.0040bcf0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x360], eax
mov dword [esp + 0x364], ecx
lea eax, [esp + 0x360]
mov dword [esp], eax
mov dword [esp + 4], 1
mov dword [esp + 8], 1
call fcn.004a3000
mov eax, dword [esp + 0x28c]
mov eax, dword [eax + 0x10]
mov ecx, dword [esp + 0x29c]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp], 0
lea edx, [0x737730]
mov dword [esp + 4], edx
mov dword [esp + 8], 0x44
mov edx, dword [esp + 0x2b4]
mov dword [esp + 0xc], edx
mov edx, dword [esp + 0x11c]
mov dword [esp + 0x10], edx
lea edx, [0x719eac]
mov dword [esp + 0x14], edx
mov dword [esp + 0x18], 1
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], ecx
call fcn.0043c110
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x348], eax
mov dword [esp + 0x34c], ecx
mov dword [esp + 0x350], 0
mov dword [esp + 0x354], 0
lea eax, [0x6cae00]
mov dword [esp], eax
lea eax, [esp + 0x348]
mov dword [esp + 4], eax
call fcn.0040bcf0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x350], eax
mov dword [esp + 0x354], ecx
mov eax, dword [0x9b8620]
mov dword [esp], eax
lea eax, [esp + 0x350]
mov dword [esp + 4], eax
mov dword [esp + 8], 1
mov dword [esp + 0xc], 1
call fcn.00554610
mov byte [esp + 0x2400], 0
nop
call fcn.00426b00
add esp, 0x23c4
ret
call fcn.006093b0
mov eax, dword [esp]
mov ecx, dword [esp + 4]
mov dword [esp + 0x380], eax
mov dword [esp + 0x384], ecx
mov eax, dword [esp + 0x268]
mov ecx, dword [eax + 0x10]
mov edx, dword [esp + 0x26c]
mov dword [esp], edx
call ecx
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp + 0x378], eax
mov dword [esp + 0x37c], ecx
lea edi, [esp + 0xb8c]
xor eax, eax
call fcn.0044c88a
lea ecx, [0x6cae00]
mov dword [esp], ecx
lea edx, [esp + 0x380]
mov dword [esp + 4], edx
call fcn.0040bcf0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0xb8c], eax
mov dword [esp + 0xb90], ecx
lea eax, [0x6cae00]
mov dword [esp + 0xb94], eax
lea ecx, [0x79a410]
mov dword [esp + 0xb98], ecx
mov dword [esp], eax
lea ecx, [esp + 0x378]
mov dword [esp + 4], ecx
call fcn.0040bcf0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0xb9c], eax
mov dword [esp + 0xba0], ecx
lea eax, [esp + 0xb8c]
mov dword [esp], eax
mov dword [esp + 4], 3
mov dword [esp + 8], 3
call fcn.004a3000
call fcn.006093b0
mov eax, dword [esp]
mov ecx, dword [esp + 4]
mov dword [esp + 0x370], eax
mov dword [esp + 0x374], ecx
mov eax, dword [esp + 0x268]
mov eax, dword [eax + 0x10]
mov ecx, dword [esp + 0x26c]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp + 0x368], eax
mov dword [esp + 0x36c], ecx
lea edi, [esp + 0xb74]
xor eax, eax
call fcn.0044c88a
lea eax, [0x6cae00]
mov dword [esp], eax
lea ecx, [esp + 0x370]
mov dword [esp + 4], ecx
call fcn.0040bcf0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0xb74], eax
mov dword [esp + 0xb78], ecx
lea eax, [0x6cae00]
mov dword [esp + 0xb7c], eax
lea ecx, [0x79a418]
mov dword [esp + 0xb80], ecx
mov dword [esp], eax
lea eax, [esp + 0x368]
mov dword [esp + 4], eax
call fcn.0040bcf0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0xb84], eax
mov dword [esp + 0xb88], ecx
mov eax, dword [0x9b8620]
mov dword [esp], eax
lea eax, [esp + 0xb74]
mov dword [esp + 4], eax
mov dword [esp + 8], 3
mov dword [esp + 0xc], 3
call fcn.00554610
mov byte [esp + 0x2400], 0
nop
call fcn.00426b00
add esp, 0x23c4
ret
mov eax, dword [0x9b8614]
mov ecx, dword [eax + 0x84]
mov eax, dword [eax + 0x88]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
mov dword [esp], 0
lea eax, [0x71fe94]
mov dword [esp + 4], eax
mov dword [esp + 8], 0xb
lea eax, [0x71f9f0]
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], 0xb
mov eax, dword [esp + 0x2a4]
mov dword [esp + 0x1c], eax
mov ecx, dword [esp + 0x100]
mov dword [esp + 0x20], ecx
call fcn.0043c110
mov eax, dword [esp + 0x24]
mov dword [esp + 0x2b4], eax
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x11c], ecx
mov edx, dword [esp + 0x2a8]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
call fcn.005f3dd0
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x24]
test eax, eax
jne 0x65db94
movzx edx, byte [esp + 0x23f4]
test dl, dl
mov eax, dword [esp + 0x23f0]
mov ecx, dword [esp + 0x23ec]
jmp 0x65d058
mov dword [esp + 0x28c], eax
mov dword [esp + 0x29c], ecx
mov edx, dword [eax + 0x10]
mov dword [esp], ecx
call edx
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp], 0
lea edx, [0x73790d]
mov dword [esp + 4], edx
mov dword [esp + 8], 0x45
mov ebx, dword [esp + 0x2b4]
mov dword [esp + 0xc], ebx
mov ebp, dword [esp + 0x11c]
mov dword [esp + 0x10], ebp
lea esi, [0x719eac]
mov dword [esp + 0x14], esi
mov dword [esp + 0x18], 1
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], ecx
call fcn.0043c110
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x328], eax
mov dword [esp + 0x32c], ecx
mov dword [esp + 0x330], 0
mov dword [esp + 0x334], 0
lea eax, [0x6cae00]
mov dword [esp], eax
lea ecx, [esp + 0x328]
mov dword [esp + 4], ecx
call fcn.0040bcf0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x330], eax
mov dword [esp + 0x334], ecx
lea eax, [esp + 0x330]
mov dword [esp], eax
mov dword [esp + 4], 1
mov dword [esp + 8], 1
call fcn.004a3000
mov eax, dword [esp + 0x28c]
mov eax, dword [eax + 0x10]
mov ecx, dword [esp + 0x29c]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp], 0
lea edx, [0x73790d]
mov dword [esp + 4], edx
mov dword [esp + 8], 0x45
mov edx, dword [esp + 0x2b4]
mov dword [esp + 0xc], edx
mov edx, dword [esp + 0x11c]
mov dword [esp + 0x10], edx
lea edx, [0x719eac]
mov dword [esp + 0x14], edx
mov dword [esp + 0x18], 1
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], ecx
call fcn.0043c110
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x318], eax
mov dword [esp + 0x31c], ecx
mov dword [esp + 0x320], 0
mov dword [esp + 0x324], 0
lea eax, [0x6cae00]
mov dword [esp], eax
lea eax, [esp + 0x318]
mov dword [esp + 4], eax
call fcn.0040bcf0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x320], eax
mov dword [esp + 0x324], ecx
mov eax, dword [0x9b8620]
mov dword [esp], eax
lea eax, [esp + 0x320]
mov dword [esp + 4], eax
mov dword [esp + 8], 1
mov dword [esp + 0xc], 1
call fcn.00554610
mov byte [esp + 0x2400], 0
nop
call fcn.00426b00
add esp, 0x23c4
ret
nop
call fcn.00426b00
add esp, 0x23c4
ret
call fcn.006093b0
mov eax, dword [esp]
mov ecx, dword [esp + 4]
mov dword [esp + 0x3a8], eax
mov dword [esp + 0x3ac], ecx
mov eax, dword [esp + 0x268]
mov ecx, dword [eax + 0x10]
mov edx, dword [esp + 0x26c]
mov dword [esp], edx
call ecx
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp + 0x3a0], eax
mov dword [esp + 0x3a4], ecx
lea edi, [esp + 0xbbc]
xor eax, eax
call fcn.0044c88a
lea ecx, [0x6cae00]
mov dword [esp], ecx
lea edx, [esp + 0x3a8]
mov dword [esp + 4], edx
call fcn.0040bcf0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0xbbc], eax
mov dword [esp + 0xbc0], ecx
lea eax, [0x6cae00]
mov dword [esp + 0xbc4], eax
lea ecx, [0x79a400]
mov dword [esp + 0xbc8], ecx
mov dword [esp], eax
lea ecx, [esp + 0x3a0]
mov dword [esp + 4], ecx
call fcn.0040bcf0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0xbcc], eax
mov dword [esp + 0xbd0], ecx
lea eax, [esp + 0xbbc]
mov dword [esp], eax
mov dword [esp + 4], 3
mov dword [esp + 8], 3
call fcn.004a3000
call fcn.006093b0
mov eax, dword [esp]
mov ecx, dword [esp + 4]
mov dword [esp + 0x398], eax
mov dword [esp + 0x39c], ecx
mov eax, dword [esp + 0x268]
mov eax, dword [eax + 0x10]
mov ecx, dword [esp + 0x26c]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp + 0x390], eax
mov dword [esp + 0x394], ecx
lea edi, [esp + 0xba4]
xor eax, eax
call fcn.0044c88a
lea eax, [0x6cae00]
mov dword [esp], eax
lea ecx, [esp + 0x398]
mov dword [esp + 4], ecx
call fcn.0040bcf0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0xba4], eax
mov dword [esp + 0xba8], ecx
lea eax, [0x6cae00]
mov dword [esp + 0xbac], eax
lea ecx, [0x79a408]
mov dword [esp + 0xbb0], ecx
mov dword [esp], eax
lea eax, [esp + 0x390]
mov dword [esp + 4], eax
call fcn.0040bcf0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0xbb4], eax
mov dword [esp + 0xbb8], ecx
mov eax, dword [0x9b8620]
mov dword [esp], eax
lea eax, [esp + 0xba4]
mov dword [esp + 4], eax
mov dword [esp + 8], 3
mov dword [esp + 0xc], 3
call fcn.00554610
mov byte [esp + 0x2400], 0
nop
call fcn.00426b00
add esp, 0x23c4
ret
mov dword [esp + 0x28c], eax
mov dword [esp + 0x29c], ecx
mov edx, dword [eax + 0x10]
mov dword [esp], ecx
call edx
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp], 0
lea edx, [0x737730]
mov dword [esp + 4], edx
mov dword [esp + 8], 0x44
mov ebx, dword [esp + 0x2b4]
mov dword [esp + 0xc], ebx
mov ebp, dword [esp + 0x11c]
mov dword [esp + 0x10], ebp
lea esi, [0x719eac]
mov dword [esp + 0x14], esi
mov dword [esp + 0x18], 1
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], ecx
call fcn.0043c110
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x3c0], eax
mov dword [esp + 0x3c4], ecx
mov dword [esp + 0x3c8], 0
mov dword [esp + 0x3cc], 0
lea eax, [0x6cae00]
mov dword [esp], eax
lea ecx, [esp + 0x3c0]
mov dword [esp + 4], ecx
call fcn.0040bcf0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x3c8], eax
mov dword [esp + 0x3cc], ecx
lea eax, [esp + 0x3c8]
mov dword [esp], eax
mov dword [esp + 4], 1
mov dword [esp + 8], 1
call fcn.004a3000
mov eax, dword [esp + 0x28c]
mov eax, dword [eax + 0x10]
mov ecx, dword [esp + 0x29c]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp], 0
lea edx, [0x737730]
mov dword [esp + 4], edx
mov dword [esp + 8], 0x44
mov edx, dword [esp + 0x2b4]
mov dword [esp + 0xc], edx
mov edx, dword [esp + 0x11c]
mov dword [esp + 0x10], edx
lea edx, [0x719eac]
mov dword [esp + 0x14], edx
mov dword [esp + 0x18], 1
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], ecx
call fcn.0043c110
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x3b0], eax
mov dword [esp + 0x3b4], ecx
mov dword [esp + 0x3b8], 0
mov dword [esp + 0x3bc], 0
lea eax, [0x6cae00]
mov dword [esp], eax
lea eax, [esp + 0x3b0]
mov dword [esp + 4], eax
call fcn.0040bcf0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x3b8], eax
mov dword [esp + 0x3bc], ecx
mov eax, dword [0x9b8620]
mov dword [esp], eax
lea eax, [esp + 0x3b8]
mov dword [esp + 4], eax
mov dword [esp + 8], 1
mov dword [esp + 0xc], 1
call fcn.00554610
mov byte [esp + 0x2400], 0
nop
call fcn.00426b00
add esp, 0x23c4
ret
movzx edx, byte [esp + 0x23f4]
test dl, dl
jmp 0x65d058
movzx edx, byte [esp + 0x23f4]
test dl, dl
jmp 0x65d058
movzx edx, byte [esp + 0x23f4]
test dl, dl
jmp 0x65d058
lea eax, [esp + 0x1d0]
mov dword [esp], eax
mov eax, dword [esp + 0x2cc]
mov dword [esp + 4], eax
mov ecx, dword [esp + 0x128]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
call fcn.0043c050
mov eax, dword [0x9b8614]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [eax + 0x58]
mov eax, dword [eax + 0x5c]
cmp eax, 3
jne 0x65ee96
movzx ebp, word [ebx]
cmp bp, 0x5043
jne 0x65ee88
movzx ebp, byte [ebx + 2]
xchg ebp, eax
cmp al, 0x52
xchg ebp, eax
jne 0x65ee7a
cmp eax, 3
mov ecx, 2
lea edx, [0x719f06]
jne 0x65e22f
movzx ebp, word [ebx]
cmp bp, 0x5053
jne 0x65ee72
movzx ebp, byte [ebx + 2]
xchg ebp, eax
cmp al, 0x47
xchg ebp, eax
jne 0x65ee6a
cmp eax, 3
mov ecx, 2
lea edx, [0x719f0a]
jne 0x65ee61
movzx ebp, word [ebx]
cmp bp, 0x5750
jne 0x65ee55
movzx ebp, byte [ebx + 2]
xchg ebp, eax
cmp al, 0x54
xchg ebp, eax
jne 0x65ee49
cmp eax, 3
mov eax, 2
lea ecx, [0x719f0e]
jne 0x65e280
movzx edx, word [ebx]
cmp dx, 0x574b
jne 0x65e280
movzx edx, byte [ebx + 2]
cmp dl, 0x47
jne 0x65e280
mov eax, 2
lea ecx, [0x719f10]
mov dword [esp + 0xe4], eax
mov dword [esp + 0x278], ecx
lea edi, [esp + 0x14ec]
lea esi, [0x7a2e20]
call fcn.0044cb5c
mov ecx, dword [0x9b8614]
mov edx, dword [ecx + 0x84]
mov ecx, dword [ecx + 0x88]
mov dword [esp + 0x14f4], edx
mov dword [esp + 0x14f8], ecx
mov ecx, dword [esp + 0x2cc]
mov dword [esp + 0x1504], ecx
mov edx, dword [esp + 0x128]
mov dword [esp + 0x1508], edx
mov ebx, dword [0x9b8614]
mov ebp, dword [ebx + 0x84]
mov ebx, dword [ebx + 0x88]
mov dword [esp + 0x1514], ebp
mov dword [esp + 0x1518], ebx
mov dword [esp + 0x1524], ecx
mov dword [esp + 0x1528], edx
mov ebx, dword [0x9b8614]
mov ebp, dword [ebx + 0x84]
mov ebx, dword [ebx + 0x88]
mov dword [esp + 0x1534], ebp
mov dword [esp + 0x1538], ebx
mov ebx, dword [esp + 0x2a4]
mov dword [esp + 0x1544], ebx
mov ebp, dword [esp + 0x100]
mov dword [esp + 0x1548], ebp
mov eax, dword [0x9b8614]
mov edi, ebp
mov ebp, dword [eax + 0x84]
mov eax, dword [eax + 0x88]
mov dword [esp + 0x1554], ebp
mov dword [esp + 0x1558], eax
mov dword [esp + 0x1564], ecx
mov dword [esp + 0x1568], edx
mov dword [esp + 0x1574], 0
mov dword [esp + 0x1578], 0
mov dword [esp + 0x1584], 0
mov dword [esp + 0x1588], 0
mov eax, dword [0x9b8614]
mov ebp, dword [eax + 0x84]
mov eax, dword [eax + 0x88]
mov dword [esp + 0x1594], ebp
mov dword [esp + 0x1598], eax
mov dword [esp + 0x15a4], ebx
mov dword [esp + 0x15a8], edi
mov eax, dword [0x9b8614]
mov ebp, dword [eax + 0x84]
mov eax, dword [eax + 0x88]
mov dword [esp + 0x15b4], ebp
mov dword [esp + 0x15b8], eax
mov dword [esp + 0x15c4], ecx
mov dword [esp + 0x15c8], edx
mov dword [esp], 0
lea eax, [esp + 0x14ec]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x1d
mov dword [esp + 0xc], 0x1d
call fcn.0043be60
mov eax, dword [esp + 0x10]
mov dword [esp + 0x2b4], eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x11c], ecx
mov edx, dword [esp + 0x2a8]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
call fcn.005f3dd0
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x24]
test eax, eax
jne 0x65ec5e
lea edi, [esp + 0x123c]
lea esi, [0x7a1e00]
call fcn.0044cc4c
mov eax, dword [0x9b8614]
mov ecx, dword [eax + 0x84]
mov eax, dword [eax + 0x88]
mov dword [esp + 0x1244], ecx
mov dword [esp + 0x1248], eax
mov eax, dword [0x9b8614]
mov ecx, dword [eax + 0x58]
mov eax, dword [eax + 0x5c]
mov dword [esp + 0x1254], ecx
mov dword [esp + 0x1258], eax
mov eax, dword [0x9b8614]
mov ecx, dword [eax + 0x84]
mov eax, dword [eax + 0x88]
mov dword [esp + 0x1264], ecx
mov dword [esp + 0x1268], eax
mov eax, dword [esp + 0x2a4]
mov dword [esp + 0x1274], eax
mov ecx, dword [esp + 0x100]
mov dword [esp + 0x1278], ecx
mov edx, dword [esp + 0x278]
mov dword [esp + 0x1284], edx
mov edx, dword [esp + 0xe4]
mov dword [esp + 0x1288], edx
mov edx, dword [0x9b8614]
mov ebx, dword [edx + 0x84]
mov edx, dword [edx + 0x88]
mov dword [esp + 0x1294], ebx
mov dword [esp + 0x1298], edx
mov edx, dword [0x9b8614]
mov ebx, dword [edx + 0x84]
mov edx, dword [edx + 0x88]
mov dword [esp + 0x12a4], ebx
mov dword [esp + 0x12a8], edx
mov dword [esp + 0x12b4], eax
mov dword [esp + 0x12b8], ecx
mov dword [esp], 0
lea edx, [esp + 0x123c]
mov dword [esp + 4], edx
mov dword [esp + 8], 0x11
mov dword [esp + 0xc], 0x11
call fcn.0043be60
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x11c], ecx
lea edi, [esp + 0x18bc]
lea esi, [0x7a3680]
call fcn.0044caf8
mov dword [esp + 0x18bc], eax
mov eax, dword [esp + 0x11c]
mov dword [esp + 0x18c0], eax
mov eax, dword [0x9b8614]
mov ecx, dword [eax + 0x84]
mov eax, dword [eax + 0x88]
mov dword [esp + 0x18cc], ecx
mov dword [esp + 0x18d0], eax
mov eax, dword [esp + 0x2a4]
mov dword [esp + 0x18dc], eax
mov ecx, dword [esp + 0x100]
mov dword [esp + 0x18e0], ecx
mov edx, dword [0x9b8614]
mov ebx, dword [edx + 0x84]
mov edx, dword [edx + 0x88]
mov dword [esp + 0x18ec], ebx
mov dword [esp + 0x18f0], edx
mov dword [esp + 0x18fc], eax
mov dword [esp + 0x1900], ecx
mov edx, dword [0x9b8614]
mov ebx, dword [edx + 0x84]
mov edx, dword [edx + 0x88]
mov dword [esp + 0x190c], ebx
mov dword [esp + 0x1910], edx
mov dword [esp + 0x191c], eax
mov dword [esp + 0x1920], ecx
mov edx, dword [0x9b8614]
mov ebx, dword [edx + 0x84]
mov edx, dword [edx + 0x88]
mov dword [esp + 0x192c], ebx
mov dword [esp + 0x1930], edx
mov dword [esp + 0x193c], eax
mov dword [esp + 0x1940], ecx
mov edx, dword [0x9b8614]
mov ebx, dword [edx + 0x84]
mov edx, dword [edx + 0x88]
mov dword [esp + 0x194c], ebx
mov dword [esp + 0x1950], edx
mov dword [esp + 0x195c], eax
mov dword [esp + 0x1960], ecx
mov dword [esp + 0x196c], 0
mov dword [esp + 0x1970], 0
mov dword [esp + 0x197c], 0
mov dword [esp + 0x1980], 0
mov edx, dword [0x9b8614]
mov ebx, dword [edx + 0x84]
mov edx, dword [edx + 0x88]
mov dword [esp + 0x198c], ebx
mov dword [esp + 0x1990], edx
mov dword [esp + 0x199c], eax
mov dword [esp + 0x19a0], ecx
mov edx, dword [0x9b8614]
mov ebx, dword [edx + 0x84]
mov edx, dword [edx + 0x88]
mov dword [esp + 0x19ac], ebx
mov dword [esp + 0x19b0], edx
mov dword [esp + 0x19bc], eax
mov dword [esp + 0x19c0], ecx
mov dword [esp], 0
lea edx, [esp + 0x18bc]
mov dword [esp + 4], edx
mov dword [esp + 8], 0x22
mov dword [esp + 0xc], 0x22
call fcn.0043be60
mov eax, dword [esp + 0x10]
mov dword [esp + 0x2b4], eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x11c], ecx
mov edx, dword [esp + 0x2a8]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
call fcn.005f3dd0
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x24]
test eax, eax
jne 0x65ea73
mov eax, dword [0x9b8614]
mov ecx, dword [eax + 0x84]
mov eax, dword [eax + 0x88]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
mov dword [esp], 0
lea eax, [0x71fe94]
mov dword [esp + 4], eax
mov dword [esp + 8], 0xb
lea ecx, [0x71f9f0]
mov dword [esp + 0x14], ecx
mov dword [esp + 0x18], 0xb
mov edx, dword [esp + 0x2a4]
mov dword [esp + 0x1c], edx
mov ebx, dword [esp + 0x100]
mov dword [esp + 0x20], ebx
call fcn.0043c110
mov eax, dword [esp + 0x24]
mov dword [esp + 0x2b4], eax
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x11c], ecx
mov edx, dword [esp + 0x2a8]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
call fcn.005f3dd0
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x24]
test eax, eax
jne 0x65e888
mov eax, dword [esp + 0x23f0]
cmp eax, 3
mov ecx, dword [esp + 0x23ec]
jmp 0x65d02b
mov dword [esp + 0x28c], eax
mov dword [esp + 0x29c], ecx
mov edx, dword [eax + 0x10]
mov dword [esp], ecx
call edx
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp], 0
lea edx, [0x737179]
mov dword [esp + 4], edx
mov dword [esp + 8], 0x41
mov ebx, dword [esp + 0x2b4]
mov dword [esp + 0xc], ebx
mov ebp, dword [esp + 0x11c]
mov dword [esp + 0x10], ebp
lea esi, [0x719eac]
mov dword [esp + 0x14], esi
mov dword [esp + 0x18], 1
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], ecx
call fcn.0043c110
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x3e0], eax
mov dword [esp + 0x3e4], ecx
mov dword [esp + 0x3e8], 0
mov dword [esp + 0x3ec], 0
lea eax, [0x6cae00]
mov dword [esp], eax
lea ecx, [esp + 0x3e0]
mov dword [esp + 4], ecx
call fcn.0040bcf0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x3e8], eax
mov dword [esp + 0x3ec], ecx
lea eax, [esp + 0x3e8]
mov dword [esp], eax
mov dword [esp + 4], 1
mov dword [esp + 8], 1
call fcn.004a3000
mov eax, dword [esp + 0x28c]
mov eax, dword [eax + 0x10]
mov ecx, dword [esp + 0x29c]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp], 0
lea edx, [0x737179]
mov dword [esp + 4], edx
mov dword [esp + 8], 0x41
mov edx, dword [esp + 0x2b4]
mov dword [esp + 0xc], edx
mov edx, dword [esp + 0x11c]
mov dword [esp + 0x10], edx
lea edx, [0x719eac]
mov dword [esp + 0x14], edx
mov dword [esp + 0x18], 1
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], ecx
call fcn.0043c110
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x3d0], eax
mov dword [esp + 0x3d4], ecx
mov dword [esp + 0x3d8], 0
mov dword [esp + 0x3dc], 0
lea eax, [0x6cae00]
mov dword [esp], eax
lea eax, [esp + 0x3d0]
mov dword [esp + 4], eax
call fcn.0040bcf0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x3d8], eax
mov dword [esp + 0x3dc], ecx
mov eax, dword [0x9b8620]
mov dword [esp], eax
lea eax, [esp + 0x3d8]
mov dword [esp + 4], eax
mov dword [esp + 8], 1
mov dword [esp + 0xc], 1
call fcn.00554610
mov byte [esp + 0x2400], 0
nop
call fcn.00426b00
add esp, 0x23c4
ret
mov dword [esp + 0x28c], eax
mov dword [esp + 0x29c], ecx
mov edx, dword [eax + 0x10]
mov dword [esp], ecx
call edx
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp], 0
lea edx, [0x737138]
mov dword [esp + 4], edx
mov dword [esp + 8], 0x41
mov ebx, dword [esp + 0x2b4]
mov dword [esp + 0xc], ebx
mov ebp, dword [esp + 0x11c]
mov dword [esp + 0x10], ebp
lea esi, [0x719eac]
mov dword [esp + 0x14], esi
mov dword [esp + 0x18], 1
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], ecx
call fcn.0043c110
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x400], eax
mov dword [esp + 0x404], ecx
mov dword [esp + 0x408], 0
mov dword [esp + 0x40c], 0
lea eax, [0x6cae00]
mov dword [esp], eax
lea ecx, [esp + 0x400]
mov dword [esp + 4], ecx
call fcn.0040bcf0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x408], eax
mov dword [esp + 0x40c], ecx
lea eax, [esp + 0x408]
mov dword [esp], eax
mov dword [esp + 4], 1
mov dword [esp + 8], 1
call fcn.004a3000
mov eax, dword [esp + 0x28c]
mov eax, dword [eax + 0x10]
mov ecx, dword [esp + 0x29c]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp], 0
lea edx, [0x737138]
mov dword [esp + 4], edx
mov dword [esp + 8], 0x41
mov edx, dword [esp + 0x2b4]
mov dword [esp + 0xc], edx
mov edx, dword [esp + 0x11c]
mov dword [esp + 0x10], edx
lea edx, [0x719eac]
mov dword [esp + 0x14], edx
mov dword [esp + 0x18], 1
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], ecx
call fcn.0043c110
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x3f0], eax
mov dword [esp + 0x3f4], ecx
mov dword [esp + 0x3f8], 0
mov dword [esp + 0x3fc], 0
lea eax, [0x6cae00]
mov dword [esp], eax
lea eax, [esp + 0x3f0]
mov dword [esp + 4], eax
call fcn.0040bcf0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x3f8], eax
mov dword [esp + 0x3fc], ecx
mov eax, dword [0x9b8620]
mov dword [esp], eax
lea eax, [esp + 0x3f8]
mov dword [esp + 4], eax
mov dword [esp + 8], 1
mov dword [esp + 0xc], 1
call fcn.00554610
mov byte [esp + 0x2400], 0
nop
call fcn.00426b00
add esp, 0x23c4
ret
mov dword [esp + 0x28c], eax
mov dword [esp + 0x29c], ecx
mov edx, dword [eax + 0x10]
mov dword [esp], ecx
call edx
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp], 0
lea edx, [0x737c9b]
mov dword [esp + 4], edx
mov dword [esp + 8], 0x47
mov ebx, dword [esp + 0x2b4]
mov dword [esp + 0xc], ebx
mov ebp, dword [esp + 0x11c]
mov dword [esp + 0x10], ebp
lea esi, [0x719eac]
mov dword [esp + 0x14], esi
mov dword [esp + 0x18], 1
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], ecx
call fcn.0043c110
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x420], eax
mov dword [esp + 0x424], ecx
mov dword [esp + 0x428], 0
mov dword [esp + 0x42c], 0
lea eax, [0x6cae00]
mov dword [esp], eax
lea ecx, [esp + 0x420]
mov dword [esp + 4], ecx
call fcn.0040bcf0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x428], eax
mov dword [esp + 0x42c], ecx
lea eax, [esp + 0x428]
mov dword [esp], eax
mov dword [esp + 4], 1
mov dword [esp + 8], 1
call fcn.004a3000
mov eax, dword [esp + 0x28c]
mov eax, dword [eax + 0x10]
mov ecx, dword [esp + 0x29c]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp], 0
lea edx, [0x737c9b]
mov dword [esp + 4], edx
mov dword [esp + 8], 0x47
mov edx, dword [esp + 0x2b4]
mov dword [esp + 0xc], edx
mov edx, dword [esp + 0x11c]
mov dword [esp + 0x10], edx
lea edx, [0x719eac]
mov dword [esp + 0x14], edx
mov dword [esp + 0x18], 1
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], ecx
call fcn.0043c110
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x410], eax
mov dword [esp + 0x414], ecx
mov dword [esp + 0x418], 0
mov dword [esp + 0x41c], 0
lea eax, [0x6cae00]
mov dword [esp], eax
lea eax, [esp + 0x410]
mov dword [esp + 4], eax
call fcn.0040bcf0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x418], eax
mov dword [esp + 0x41c], ecx
mov eax, dword [0x9b8620]
mov dword [esp], eax
lea eax, [esp + 0x418]
mov dword [esp + 4], eax
mov dword [esp + 8], 1
mov dword [esp + 0xc], 1
call fcn.00554610
mov byte [esp + 0x2400], 0
nop
call fcn.00426b00
add esp, 0x23c4
ret
cmp eax, 3
mov eax, ecx
mov ecx, edx
jmp 0x65e260
cmp eax, 3
mov eax, ecx
mov ecx, edx
jmp 0x65e260
mov eax, ecx
mov ecx, edx
jmp 0x65e260
cmp eax, 3
jmp 0x65e22f
cmp eax, 3
jmp 0x65e22f
cmp eax, 3
mov ebp, ecx
mov ecx, edx
mov edx, ebp
jmp 0x65e202
cmp eax, 3
mov ebp, ecx
mov ecx, edx
mov edx, ebp
jmp 0x65e202
mov ebp, ecx
mov ecx, edx
mov edx, ebp
jmp 0x65e202
cmp eax, 3
jmp 0x65d02b
cmp eax, 3
mov ecx, dword [esp + 0x23ec]
jmp 0x65d02b
mov dword [esp + 0x28c], eax
mov dword [esp + 0x29c], ecx
mov edx, dword [eax + 0x10]
mov dword [esp], ecx
call edx
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp], 0
lea edx, [0x7376ec]
mov dword [esp + 4], edx
mov dword [esp + 8], 0x44
mov ebx, dword [esp + 0x2b4]
mov dword [esp + 0xc], ebx
mov ebp, dword [esp + 0x11c]
mov dword [esp + 0x10], ebp
lea esi, [0x719eac]
mov dword [esp + 0x14], esi
mov dword [esp + 0x18], 1
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], ecx
call fcn.0043c110
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x440], eax
mov dword [esp + 0x444], ecx
mov dword [esp + 0x448], 0
mov dword [esp + 0x44c], 0
lea eax, [0x6cae00]
mov dword [esp], eax
lea ecx, [esp + 0x440]
mov dword [esp + 4], ecx
call fcn.0040bcf0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x448], eax
mov dword [esp + 0x44c], ecx
lea eax, [esp + 0x448]
mov dword [esp], eax
mov dword [esp + 4], 1
mov dword [esp + 8], 1
call fcn.004a3000
mov eax, dword [esp + 0x28c]
mov eax, dword [eax + 0x10]
mov ecx, dword [esp + 0x29c]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp], 0
lea edx, [0x7376ec]
mov dword [esp + 4], edx
mov dword [esp + 8], 0x44
mov edx, dword [esp + 0x2b4]
mov dword [esp + 0xc], edx
mov edx, dword [esp + 0x11c]
mov dword [esp + 0x10], edx
lea edx, [0x719eac]
mov dword [esp + 0x14], edx
mov dword [esp + 0x18], 1
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], ecx
call fcn.0043c110
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x430], eax
mov dword [esp + 0x434], ecx
mov dword [esp + 0x438], 0
mov dword [esp + 0x43c], 0
lea eax, [0x6cae00]
mov dword [esp], eax
lea eax, [esp + 0x430]
mov dword [esp + 4], eax
call fcn.0040bcf0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x438], eax
mov dword [esp + 0x43c], ecx
mov eax, dword [0x9b8620]
mov dword [esp], eax
lea eax, [esp + 0x438]
mov dword [esp + 4], eax
mov dword [esp + 8], 1
mov dword [esp + 0xc], 1
call fcn.00554610
mov byte [esp + 0x2400], 0
nop
call fcn.00426b00
add esp, 0x23c4
ret
mov dword [esp + 0x28c], eax
mov dword [esp + 0x29c], ecx
mov edx, dword [eax + 0x10]
mov dword [esp], ecx
call edx
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp], 0
lea edx, [0x7376a8]
mov dword [esp + 4], edx
mov dword [esp + 8], 0x44
mov ebx, dword [esp + 0x2b4]
mov dword [esp + 0xc], ebx
mov ebp, dword [esp + 0x11c]
mov dword [esp + 0x10], ebp
lea esi, [0x719eac]
mov dword [esp + 0x14], esi
mov dword [esp + 0x18], 1
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], ecx
call fcn.0043c110
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x460], eax
mov dword [esp + 0x464], ecx
mov dword [esp + 0x468], 0
mov dword [esp + 0x46c], 0
lea eax, [0x6cae00]
mov dword [esp], eax
lea ecx, [esp + 0x460]
mov dword [esp + 4], ecx
call fcn.0040bcf0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x468], eax
mov dword [esp + 0x46c], ecx
lea eax, [esp + 0x468]
mov dword [esp], eax
mov dword [esp + 4], 1
mov dword [esp + 8], 1
call fcn.004a3000
mov eax, dword [esp + 0x28c]
mov eax, dword [eax + 0x10]
mov ecx, dword [esp + 0x29c]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp], 0
lea edx, [0x7376a8]
mov dword [esp + 4], edx
mov dword [esp + 8], 0x44
mov edx, dword [esp + 0x2b4]
mov dword [esp + 0xc], edx
mov edx, dword [esp + 0x11c]
mov dword [esp + 0x10], edx
lea edx, [0x719eac]
mov dword [esp + 0x14], edx
mov dword [esp + 0x18], 1
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], ecx
call fcn.0043c110
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x450], eax
mov dword [esp + 0x454], ecx
mov dword [esp + 0x458], 0
mov dword [esp + 0x45c], 0
lea eax, [0x6cae00]
mov dword [esp], eax
lea eax, [esp + 0x450]
mov dword [esp + 4], eax
call fcn.0040bcf0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x458], eax
mov dword [esp + 0x45c], ecx
mov eax, dword [0x9b8620]
mov dword [esp], eax
lea eax, [esp + 0x458]
mov dword [esp + 4], eax
mov dword [esp + 8], 1
mov dword [esp + 0xc], 1
call fcn.00554610
mov byte [esp + 0x2400], 0
nop
call fcn.00426b00
add esp, 0x23c4
ret
mov dword [esp + 0x28c], eax
mov dword [esp + 0x29c], ecx
mov edx, dword [eax + 0x10]
mov dword [esp], ecx
call edx
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp], 0
lea edx, [0x737664]
mov dword [esp + 4], edx
mov dword [esp + 8], 0x44
mov ebx, dword [esp + 0x2b4]
mov dword [esp + 0xc], ebx
mov ebp, dword [esp + 0x11c]
mov dword [esp + 0x10], ebp
lea esi, [0x719eac]
mov dword [esp + 0x14], esi
mov dword [esp + 0x18], 1
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], ecx
call fcn.0043c110
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x480], eax
mov dword [esp + 0x484], ecx
mov dword [esp + 0x488], 0
mov dword [esp + 0x48c], 0
lea eax, [0x6cae00]
mov dword [esp], eax
lea ecx, [esp + 0x480]
mov dword [esp + 4], ecx
call fcn.0040bcf0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x488], eax
mov dword [esp + 0x48c], ecx
lea eax, [esp + 0x488]
mov dword [esp], eax
mov dword [esp + 4], 1
mov dword [esp + 8], 1
call fcn.004a3000
mov eax, dword [esp + 0x28c]
mov eax, dword [eax + 0x10]
mov ecx, dword [esp + 0x29c]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp], 0
lea edx, [0x737664]
mov dword [esp + 4], edx
mov dword [esp + 8], 0x44
mov edx, dword [esp + 0x2b4]
mov dword [esp + 0xc], edx
mov edx, dword [esp + 0x11c]
mov dword [esp + 0x10], edx
lea edx, [0x719eac]
mov dword [esp + 0x14], edx
mov dword [esp + 0x18], 1
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], ecx
call fcn.0043c110
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x470], eax
mov dword [esp + 0x474], ecx
mov dword [esp + 0x478], 0
mov dword [esp + 0x47c], 0
lea eax, [0x6cae00]
mov dword [esp], eax
lea eax, [esp + 0x470]
mov dword [esp + 4], eax
call fcn.0040bcf0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x478], eax
mov dword [esp + 0x47c], ecx
mov eax, dword [0x9b8620]
mov dword [esp], eax
lea eax, [esp + 0x478]
mov dword [esp + 4], eax
mov dword [esp + 8], 1
mov dword [esp + 0xc], 1
call fcn.00554610
mov byte [esp + 0x2400], 0
nop
call fcn.00426b00
add esp, 0x23c4
ret
lea eax, [esp + 0x1f0]
mov dword [esp], eax
lea eax, [0x719e8f]
mov dword [esp + 4], eax
mov dword [esp + 8], 1
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], edx
call fcn.0043c050
mov eax, dword [esp + 0x14]
mov edi, dword [esp + 0x18]
mov edx, dword [esp + 0x128]
mov ebx, dword [esp + 0x2cc]
mov ebp, 0x1e
lea esi, [0x72ba23]
mov dword [esp + 0x270], eax
lea ecx, [0x71a14b]
mov dword [esp + 0x228], ecx
mov edx, 4
mov dword [esp + 0x68], edx
lea ebx, [0x71a672]
mov dword [esp + 0x22c], ebx
mov edx, dword [esp + 0x128]
mov ebx, dword [esp + 0x2cc]
jmp 0x65c92b
mov ebx, dword [esp + 0x2cc]
jmp 0x65f479
cmp eax, 6
jmp 0x65cffe
cmp eax, 6
jmp 0x65cffe
cmp eax, 6
mov ecx, dword [esp + 0x23ec]
jmp 0x65cffe
mov dword [esp + 0x28c], eax
mov dword [esp + 0x29c], ecx
mov edx, dword [eax + 0x10]
mov dword [esp], ecx
call edx
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp], 0
lea edx, [0x7374cf]
mov dword [esp + 4], edx
mov dword [esp + 8], 0x43
mov ebx, dword [esp + 0x2b4]
mov dword [esp + 0xc], ebx
mov ebp, dword [esp + 0x11c]
mov dword [esp + 0x10], ebp
lea esi, [0x719eac]
mov dword [esp + 0x14], esi
mov dword [esp + 0x18], 1
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], ecx
call fcn.0043c110
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x4a0], eax
mov dword [esp + 0x4a4], ecx
mov dword [esp + 0x4a8], 0
mov dword [esp + 0x4ac], 0
lea eax, [0x6cae00]
mov dword [esp], eax
lea ecx, [esp + 0x4a0]
mov dword [esp + 4], ecx
call fcn.0040bcf0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x4a8], eax
mov dword [esp + 0x4ac], ecx
lea eax, [esp + 0x4a8]
mov dword [esp], eax
mov dword [esp + 4], 1
mov dword [esp + 8], 1
call fcn.004a3000
mov eax, dword [esp + 0x28c]
mov eax, dword [eax + 0x10]
mov ecx, dword [esp + 0x29c]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp], 0
lea edx, [0x7374cf]
mov dword [esp + 4], edx
mov dword [esp + 8], 0x43
mov edx, dword [esp + 0x2b4]
mov dword [esp + 0xc], edx
mov edx, dword [esp + 0x11c]
mov dword [esp + 0x10], edx
lea edx, [0x719eac]
mov dword [esp + 0x14], edx
mov dword [esp + 0x18], 1
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], ecx
call fcn.0043c110
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x490], eax
mov dword [esp + 0x494], ecx
mov dword [esp + 0x498], 0
mov dword [esp + 0x49c], 0
lea eax, [0x6cae00]
mov dword [esp], eax
lea eax, [esp + 0x490]
mov dword [esp + 4], eax
call fcn.0040bcf0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x498], eax
mov dword [esp + 0x49c], ecx
mov eax, dword [0x9b8620]
mov dword [esp], eax
lea eax, [esp + 0x498]
mov dword [esp + 4], eax
mov dword [esp + 8], 1
mov dword [esp + 0xc], 1
call fcn.00554610
mov byte [esp + 0x2400], 0
nop
call fcn.00426b00
add esp, 0x23c4
ret
mov ebx, dword [esp + 0x2cc]
movzx ebp, byte [ebx]
xchg ebp, eax
cmp al, 0x35
xchg ebp, eax
jne 0x65c4cd
jmp 0x65c5f4
mov dword [esp + 0x29c], eax
mov dword [esp + 0x28c], ecx
mov edx, dword [ecx + 0x10]
mov dword [esp], eax
call edx
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp], 0
lea edx, [0x737faf]
mov dword [esp + 4], edx
mov dword [esp + 8], 0x49
mov ebx, dword [esp + 0x2b4]
mov dword [esp + 0xc], ebx
mov ebp, dword [esp + 0x11c]
mov dword [esp + 0x10], ebp
lea esi, [0x719eac]
mov dword [esp + 0x14], esi
mov dword [esp + 0x18], 1
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], ecx
call fcn.0043c110
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x4c0], eax
mov dword [esp + 0x4c4], ecx
mov dword [esp + 0x4c8], 0
mov dword [esp + 0x4cc], 0
lea eax, [0x6cae00]
mov dword [esp], eax
lea ecx, [esp + 0x4c0]
mov dword [esp + 4], ecx
call fcn.0040bcf0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
mov dword [esp + 0x4c8], ecx
mov dword [esp + 0x4cc], eax
lea eax, [esp + 0x4c8]
mov dword [esp], eax
mov dword [esp + 4], 1
mov dword [esp + 8], 1
call fcn.004a3000
mov eax, dword [esp + 0x28c]
mov eax, dword [eax + 0x10]
mov ecx, dword [esp + 0x29c]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 8]
mov ecx, dword [esp + 4]
mov dword [esp], 0
lea edx, [0x737faf]
mov dword [esp + 4], edx
mov dword [esp + 8], 0x49
mov edx, dword [esp + 0x2b4]
mov dword [esp + 0xc], edx
mov edx, dword [esp + 0x11c]
mov dword [esp + 0x10], edx
lea edx, [0x719eac]
mov dword [esp + 0x14], edx
mov dword [esp + 0x18], 1
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x20], eax
call fcn.0043c110
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x4b0], eax
mov dword [esp + 0x4b4], ecx
mov dword [esp + 0x4b8], 0
mov dword [esp + 0x4bc], 0
lea eax, [0x6cae00]
mov dword [esp], eax
lea eax, [esp + 0x4b0]
mov dword [esp + 4], eax
call fcn.0040bcf0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x4b8], eax
mov dword [esp + 0x4bc], ecx
mov eax, dword [0x9b8620]
mov dword [esp], eax
lea eax, [esp + 0x4b8]
mov dword [esp + 4], eax
mov dword [esp + 8], 1
mov dword [esp + 0xc], 1
call fcn.00554610
mov byte [esp + 0x2400], 0
nop
call fcn.00426b00
add esp, 0x23c4
ret
mov eax, dword [0x9b8614]
mov ecx, dword [eax + 0x88]
mov eax, dword [eax + 0x84]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp], 0
lea eax, [0x7202d5]
mov dword [esp + 4], eax
mov dword [esp + 8], 0xc
lea eax, [0x71f9f0]
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], 0xb
mov ecx, dword [esp + 0x2a4]
mov dword [esp + 0x1c], ecx
mov edx, dword [esp + 0x100]
mov dword [esp + 0x20], edx
lea ebx, [0x72c93e]
mov dword [esp + 0x24], ebx
mov dword [esp + 0x28], 0x20
call fcn.0043c170
mov eax, dword [esp + 0x30]
mov dword [esp + 0x11c], eax
mov ecx, dword [esp + 0x2c]
mov dword [esp + 0x2b4], ecx
mov edx, dword [esp + 0x2a8]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
call fcn.005f3dd0
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x24]
test eax, eax
jne 0x65fd44
lea edi, [esp + 0xf44]
lea esi, [0x79fa00]
call fcn.0044cd14
mov eax, dword [0x9b8614]
mov ecx, dword [eax + 0x84]
mov eax, dword [eax + 0x88]
mov dword [esp + 0xf4c], ecx
mov dword [esp + 0xf50], eax
mov eax, dword [esp + 0x2a4]
mov dword [esp + 0xf5c], eax
mov ecx, dword [esp + 0x100]
mov dword [esp + 0xf60], ecx
mov edx, dword [esp + 0x2cc]
mov dword [esp + 0xf6c], edx
mov ebx, dword [esp + 0x128]
mov dword [esp + 0xf70], ebx
mov dword [esp], 0
lea ebp, [esp + 0xf44]
mov dword [esp + 4], ebp
mov dword [esp + 8], 7
mov dword [esp + 0xc], 7
call fcn.0043be60
mov eax, dword [esp + 0x10]
mov dword [esp + 0x2b4], eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x11c], ecx
mov edx, dword [esp + 0x2a8]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
call fcn.005f3dd0
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x20]
test ecx, ecx
jne 0x65fadb
mov edx, dword [esp + 0x128]
mov ebx, 0xf
lea ebp, [0x7220a0]
jmp 0x65c206
mov dword [esp + 0x29c], eax
mov dword [esp + 0x28c], ecx
mov edx, dword [ecx + 0x10]
mov dword [esp], eax
call edx
mov eax, dword [esp + 8]
mov ecx, dword [esp + 4]
mov dword [esp + 0x310], ecx
lea edi, [esp + 0xcd4]
lea esi, [0x79ee40]
call fcn.0044cd28
mov ecx, dword [esp + 0x2cc]
mov dword [esp + 0xcdc], ecx
mov edx, dword [esp + 0x128]
mov dword [esp + 0xce0], edx
mov ebx, dword [esp + 0x2b4]
mov dword [esp + 0xcec], ebx
mov ebp, dword [esp + 0x11c]
mov dword [esp + 0xcf0], ebp
mov esi, dword [esp + 0x310]
mov dword [esp + 0xcfc], esi
mov dword [esp + 0xd00], eax
mov dword [esp], 0
lea eax, [esp + 0xcd4]
mov dword [esp + 4], eax
mov dword [esp + 8], 6
mov dword [esp + 0xc], 6
call fcn.0043be60
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x4e0], ecx
mov dword [esp + 0x4e4], eax
mov dword [esp + 0x4e8], 0
mov dword [esp + 0x4ec], 0
lea eax, [0x6cae00]
mov dword [esp], eax
lea ecx, [esp + 0x4e0]
mov dword [esp + 4], ecx
call fcn.0040bcf0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
mov dword [esp + 0x4e8], ecx
mov dword [esp + 0x4ec], eax
lea eax, [esp + 0x4e8]
mov dword [esp], eax
mov dword [esp + 4], 1
mov dword [esp + 8], 1
call fcn.004a3000
mov eax, dword [esp + 0x28c]
mov eax, dword [eax + 0x10]
mov ecx, dword [esp + 0x29c]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 8]
mov ecx, dword [esp + 4]
mov dword [esp + 0x310], ecx
lea edi, [esp + 0xca4]
lea esi, [0x79ee80]
call fcn.0044cd28
mov ecx, dword [esp + 0x2cc]
mov dword [esp + 0xcac], ecx
mov ecx, dword [esp + 0x128]
mov dword [esp + 0xcb0], ecx
mov ecx, dword [esp + 0x2b4]
mov dword [esp + 0xcbc], ecx
mov ecx, dword [esp + 0x11c]
mov dword [esp + 0xcc0], ecx
mov ecx, dword [esp + 0x310]
mov dword [esp + 0xccc], ecx
mov dword [esp + 0xcd0], eax
mov dword [esp], 0
lea eax, [esp + 0xca4]
mov dword [esp + 4], eax
mov dword [esp + 8], 6
mov dword [esp + 0xc], 6
call fcn.0043be60
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x4d0], ecx
mov dword [esp + 0x4d4], eax
mov dword [esp + 0x4d8], 0
mov dword [esp + 0x4dc], 0
lea eax, [0x6cae00]
mov dword [esp], eax
lea eax, [esp + 0x4d0]
mov dword [esp + 4], eax
call fcn.0040bcf0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x4d8], eax
mov dword [esp + 0x4dc], ecx
mov eax, dword [0x9b8620]
mov dword [esp], eax
lea eax, [esp + 0x4d8]
mov dword [esp + 4], eax
mov dword [esp + 8], 1
mov dword [esp + 0xc], 1
call fcn.00554610
mov byte [esp + 0x2400], 0
nop
call fcn.00426b00
add esp, 0x23c4
ret
mov dword [esp + 0x28c], eax
mov dword [esp + 0x29c], ecx
mov edx, dword [eax + 0x10]
mov dword [esp], ecx
call edx
mov eax, dword [esp + 8]
mov ecx, dword [esp + 4]
mov dword [esp + 0x310], ecx
lea edi, [esp + 0xd34]
lea esi, [0x79edc0]
call fcn.0044cd28
mov ecx, dword [esp + 0x2cc]
mov dword [esp + 0xd3c], ecx
mov edx, dword [esp + 0x128]
mov dword [esp + 0xd40], edx
mov ebx, dword [esp + 0x2b4]
mov dword [esp + 0xd4c], ebx
mov ebp, dword [esp + 0x11c]
mov dword [esp + 0xd50], ebp
mov esi, dword [esp + 0x310]
mov dword [esp + 0xd5c], esi
mov dword [esp + 0xd60], eax
mov dword [esp], 0
lea eax, [esp + 0xd34]
mov dword [esp + 4], eax
mov dword [esp + 8], 6
mov dword [esp + 0xc], 6
call fcn.0043be60
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x500], eax
mov dword [esp + 0x504], ecx
mov dword [esp + 0x508], 0
mov dword [esp + 0x50c], 0
lea eax, [0x6cae00]
mov dword [esp], eax
lea ecx, [esp + 0x500]
mov dword [esp + 4], ecx
call fcn.0040bcf0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
mov dword [esp + 0x508], ecx
mov dword [esp + 0x50c], eax
lea eax, [esp + 0x508]
mov dword [esp], eax
mov dword [esp + 4], 1
mov dword [esp + 8], 1
call fcn.004a3000
mov eax, dword [esp + 0x28c]
mov eax, dword [eax + 0x10]
mov ecx, dword [esp + 0x29c]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp + 0x14c], ecx
lea edi, [esp + 0xd04]
lea esi, [0x79ee00]
call fcn.0044cd28
mov ecx, dword [esp + 0x2cc]
mov dword [esp + 0xd0c], ecx
mov ecx, dword [esp + 0x128]
mov dword [esp + 0xd10], ecx
mov ecx, dword [esp + 0x2b4]
mov dword [esp + 0xd1c], ecx
mov ecx, dword [esp + 0x11c]
mov dword [esp + 0xd20], ecx
mov dword [esp + 0xd2c], eax
mov eax, dword [esp + 0x14c]
mov dword [esp + 0xd30], eax
mov dword [esp], 0
lea eax, [esp + 0xd04]
mov dword [esp + 4], eax
mov dword [esp + 8], 6
mov dword [esp + 0xc], 6
call fcn.0043be60
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x4f0], ecx
mov dword [esp + 0x4f4], eax
mov dword [esp + 0x4f8], 0
mov dword [esp + 0x4fc], 0
lea eax, [0x6cae00]
mov dword [esp], eax
lea eax, [esp + 0x4f0]
mov dword [esp + 4], eax
call fcn.0040bcf0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
mov dword [esp + 0x4f8], ecx
mov dword [esp + 0x4fc], eax
mov eax, dword [0x9b8620]
mov dword [esp], eax
lea eax, [esp + 0x4f8]
mov dword [esp + 4], eax
mov dword [esp + 8], 1
mov dword [esp + 0xc], 1
call fcn.00554610
mov byte [esp + 0x2400], 0
nop
call fcn.00426b00
add esp, 0x23c4
ret
cmp eax, 3
jmp 0x65c882
cmp eax, 3
jmp 0x65c882
cmp eax, 3
mov ecx, dword [esp + 0x23ec]
jmp 0x65c882
mov dword [esp + 0x29c], eax
mov dword [esp + 0x28c], ecx
mov edx, dword [ecx + 0x10]
mov dword [esp], eax
call edx
mov eax, dword [esp + 8]
mov ecx, dword [esp + 4]
mov dword [esp], 0
lea edx, [0x736bfc]
mov dword [esp + 4], edx
mov dword [esp + 8], 0x3f
mov ebx, dword [esp + 0x2bc]
mov dword [esp + 0xc], ebx
mov ebp, dword [esp + 0x110]
mov dword [esp + 0x10], ebp
lea esi, [0x719eac]
mov dword [esp + 0x14], esi
mov dword [esp + 0x18], 1
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x20], eax
call fcn.0043c110
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x24]
mov dword [esp + 0x520], ecx
mov dword [esp + 0x524], eax
mov dword [esp + 0x528], 0
mov dword [esp + 0x52c], 0
lea eax, [0x6cae00]
mov dword [esp], eax
lea ecx, [esp + 0x520]
mov dword [esp + 4], ecx
call fcn.0040bcf0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
mov dword [esp + 0x528], ecx
mov dword [esp + 0x52c], eax
lea eax, [esp + 0x528]
mov dword [esp], eax
mov dword [esp + 4], 1
mov dword [esp + 8], 1
call fcn.004a3000
mov eax, dword [esp + 0x28c]
mov eax, dword [eax + 0x10]
mov ecx, dword [esp + 0x29c]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 8]
mov ecx, dword [esp + 4]
mov dword [esp], 0
lea edx, [0x736bfc]
mov dword [esp + 4], edx
mov dword [esp + 8], 0x3f
mov edx, dword [esp + 0x2bc]
mov dword [esp + 0xc], edx
mov edx, dword [esp + 0x110]
mov dword [esp + 0x10], edx
lea edx, [0x719eac]
mov dword [esp + 0x14], edx
mov dword [esp + 0x18], 1
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x20], eax
call fcn.0043c110
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x24]
mov dword [esp + 0x510], ecx
mov dword [esp + 0x514], eax
mov dword [esp + 0x518], 0
mov dword [esp + 0x51c], 0
lea eax, [0x6cae00]
mov dword [esp], eax
lea eax, [esp + 0x510]
mov dword [esp + 4], eax
call fcn.0040bcf0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
mov dword [esp + 0x518], ecx
mov dword [esp + 0x51c], eax
mov eax, dword [0x9b8620]
mov dword [esp], eax
lea eax, [esp + 0x518]
mov dword [esp + 4], eax
mov dword [esp + 8], 1
mov dword [esp + 0xc], 1
call fcn.00554610
mov byte [esp + 0x2400], 0
nop
call fcn.00426b00
add esp, 0x23c4
ret
mov dword [esp + 0x29c], eax
mov dword [esp + 0x28c], ecx
mov edx, dword [ecx + 0x10]
mov dword [esp], eax
call edx
mov eax, dword [esp + 8]
mov ecx, dword [esp + 4]
mov dword [esp], 0
lea edx, [0x736bbd]
mov dword [esp + 4], edx
mov dword [esp + 8], 0x3f
mov ebx, dword [esp + 0x2bc]
mov dword [esp + 0xc], ebx
mov ebp, dword [esp + 0x110]
mov dword [esp + 0x10], ebp
lea esi, [0x719eac]
mov dword [esp + 0x14], esi
mov dword [esp + 0x18], 1
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x20], eax
call fcn.0043c110
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x24]
mov dword [esp + 0x540], ecx
mov dword [esp + 0x544], eax
mov dword [esp + 0x548], 0
mov dword [esp + 0x54c], 0
lea eax, [0x6cae00]
mov dword [esp], eax
lea ecx, [esp + 0x540]
mov dword [esp + 4], ecx
call fcn.0040bcf0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
mov dword [esp + 0x548], ecx
mov dword [esp + 0x54c], eax
lea eax, [esp + 0x548]
mov dword [esp], eax
mov dword [esp + 4], 1
mov dword [esp + 8], 1
call fcn.004a3000
mov eax, dword [esp + 0x28c]
mov eax, dword [eax + 0x10]
mov ecx, dword [esp + 0x29c]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 8]
mov ecx, dword [esp + 4]
mov dword [esp], 0
lea edx, [0x736bbd]
mov dword [esp + 4], edx
mov dword [esp + 8], 0x3f
mov edx, dword [esp + 0x2bc]
mov dword [esp + 0xc], edx
mov edx, dword [esp + 0x110]
mov dword [esp + 0x10], edx
lea edx, [0x719eac]
mov dword [esp + 0x14], edx
mov dword [esp + 0x18], 1
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x20], eax
call fcn.0043c110
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x24]
mov dword [esp + 0x530], ecx
mov dword [esp + 0x534], eax
mov dword [esp + 0x538], 0
mov dword [esp + 0x53c], 0
lea eax, [0x6cae00]
mov dword [esp], eax
lea eax, [esp + 0x530]
mov dword [esp + 4], eax
call fcn.0040bcf0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
mov dword [esp + 0x538], ecx
mov dword [esp + 0x53c], eax
mov eax, dword [0x9b8620]
mov dword [esp], eax
lea eax, [esp + 0x538]
mov dword [esp + 4], eax
mov dword [esp + 8], 1
mov dword [esp + 0xc], 1
call fcn.00554610
mov byte [esp + 0x2400], 0
nop
call fcn.00426b00
add esp, 0x23c4
ret
mov ebx, dword [esp + 0x2cc]
movzx ebp, byte [ebx]
xchg ebp, eax
cmp al, 0x35
xchg ebp, eax
jne 0x65bdbf
jmp 0x65bee6
mov dword [esp + 0x28c], eax
mov dword [esp + 0x29c], ecx
mov edx, dword [eax + 0x10]
mov dword [esp], ecx
call edx
mov eax, dword [esp + 8]
mov ecx, dword [esp + 4]
mov dword [esp + 0x310], ecx
lea edi, [esp + 0xd94]
lea esi, [0x79ed40]
call fcn.0044cd28
mov ecx, dword [esp + 0x2cc]
mov dword [esp + 0xd9c], ecx
mov edx, dword [esp + 0x128]
mov dword [esp + 0xda0], edx
mov ebx, dword [esp + 0x2bc]
mov dword [esp + 0xdac], ebx
mov ebp, dword [esp + 0x110]
mov dword [esp + 0xdb0], ebp
mov esi, dword [esp + 0x310]
mov dword [esp + 0xdbc], esi
mov dword [esp + 0xdc0], eax
mov dword [esp], 0
lea eax, [esp + 0xd94]
mov dword [esp + 4], eax
mov dword [esp + 8], 6
mov dword [esp + 0xc], 6
call fcn.0043be60
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x560], ecx
mov dword [esp + 0x564], eax
mov dword [esp + 0x568], 0
mov dword [esp + 0x56c], 0
lea eax, [0x6cae00]
mov dword [esp], eax
lea ecx, [esp + 0x560]
mov dword [esp + 4], ecx
call fcn.0040bcf0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x568], eax
mov dword [esp + 0x56c], ecx
lea eax, [esp + 0x568]
mov dword [esp], eax
mov dword [esp + 4], 1
mov dword [esp + 8], 1
call fcn.004a3000
mov eax, dword [esp + 0x28c]
mov eax, dword [eax + 0x10]
mov ecx, dword [esp + 0x29c]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 8]
mov ecx, dword [esp + 4]
mov dword [esp + 0x310], ecx
lea edi, [esp + 0xd64]
lea esi, [0x79ed80]
call fcn.0044cd28
mov ecx, dword [esp + 0x2cc]
mov dword [esp + 0xd6c], ecx
mov ecx, dword [esp + 0x128]
mov dword [esp + 0xd70], ecx
mov ecx, dword [esp + 0x2bc]
mov dword [esp + 0xd7c], ecx
mov ecx, dword [esp + 0x110]
mov dword [esp + 0xd80], ecx
mov ecx, dword [esp + 0x310]
mov dword [esp + 0xd8c], ecx
mov dword [esp + 0xd90], eax
mov dword [esp], 0
lea eax, [esp + 0xd64]
mov dword [esp + 4], eax
mov dword [esp + 8], 6
mov dword [esp + 0xc], 6
call fcn.0043be60
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x550], ecx
mov dword [esp + 0x554], eax
mov dword [esp + 0x558], 0
mov dword [esp + 0x55c], 0
lea eax, [0x6cae00]
mov dword [esp], eax
lea eax, [esp + 0x550]
mov dword [esp + 4], eax
call fcn.0040bcf0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
mov dword [esp + 0x558], ecx
mov dword [esp + 0x55c], eax
mov eax, dword [0x9b8620]
mov dword [esp], eax
lea eax, [esp + 0x558]
mov dword [esp + 4], eax
mov dword [esp + 8], 1
mov dword [esp + 0xc], 1
call fcn.00554610
mov byte [esp + 0x2400], 0
nop
call fcn.00426b00
add esp, 0x23c4
ret
mov dword [esp + 0x28c], eax
mov dword [esp + 0x29c], ecx
mov edx, dword [eax + 0x10]
mov dword [esp], ecx
call edx
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp], 0
lea edx, [0x737952]
mov dword [esp + 4], edx
mov dword [esp + 8], 0x45
mov ebx, dword [esp + 0x2b4]
mov dword [esp + 0xc], ebx
mov ebp, dword [esp + 0x11c]
mov dword [esp + 0x10], ebp
lea esi, [0x719eac]
mov dword [esp + 0x14], esi
mov dword [esp + 0x18], 1
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], ecx
call fcn.0043c110
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x580], eax
mov dword [esp + 0x584], ecx
mov dword [esp + 0x588], 0
mov dword [esp + 0x58c], 0
lea eax, [0x6cae00]
mov dword [esp], eax
lea ecx, [esp + 0x580]
mov dword [esp + 4], ecx
call fcn.0040bcf0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
mov dword [esp + 0x588], ecx
mov dword [esp + 0x58c], eax
lea eax, [esp + 0x588]
mov dword [esp], eax
mov dword [esp + 4], 1
mov dword [esp + 8], 1
call fcn.004a3000
mov eax, dword [esp + 0x28c]
mov eax, dword [eax + 0x10]
mov ecx, dword [esp + 0x29c]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp], 0
lea edx, [0x737952]
mov dword [esp + 4], edx
mov dword [esp + 8], 0x45
mov edx, dword [esp + 0x2b4]
mov dword [esp + 0xc], edx
mov edx, dword [esp + 0x11c]
mov dword [esp + 0x10], edx
lea edx, [0x719eac]
mov dword [esp + 0x14], edx
mov dword [esp + 0x18], 1
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], ecx
call fcn.0043c110
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x24]
mov dword [esp + 0x570], ecx
mov dword [esp + 0x574], eax
mov dword [esp + 0x578], 0
mov dword [esp + 0x57c], 0
lea eax, [0x6cae00]
mov dword [esp], eax
lea eax, [esp + 0x570]
mov dword [esp + 4], eax
call fcn.0040bcf0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x578], eax
mov dword [esp + 0x57c], ecx
mov eax, dword [0x9b8620]
mov dword [esp], eax
lea eax, [esp + 0x578]
mov dword [esp + 4], eax
mov dword [esp + 8], 1
mov dword [esp + 0xc], 1
call fcn.00554610
mov byte [esp + 0x2400], 0
nop
call fcn.00426b00
add esp, 0x23c4
ret
mov eax, dword [0x9b8614]
mov ecx, dword [eax + 0x88]
mov eax, dword [eax + 0x84]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp], 0
lea eax, [0x7202d5]
mov dword [esp + 4], eax
mov dword [esp + 8], 0xc
lea ecx, [0x71f9f0]
mov dword [esp + 0x14], ecx
mov dword [esp + 0x18], 0xb
mov edx, dword [esp + 0x2a4]
mov dword [esp + 0x1c], edx
mov ebx, dword [esp + 0x100]
mov dword [esp + 0x20], ebx
lea ebp, [0x72c91e]
mov dword [esp + 0x24], ebp
mov dword [esp + 0x28], 0x20
call fcn.0043c170
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x2b4], eax
mov ecx, dword [esp + 0x30]
mov dword [esp + 0x11c], ecx
mov edx, dword [esp + 0x2a8]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
call fcn.005f3dd0
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x24]
test eax, eax
jne 0x660c32
lea edi, [esp + 0xf7c]
lea esi, [0x79f9c0]
call fcn.0044cd14
mov eax, dword [0x9b8614]
mov ecx, dword [eax + 0x84]
mov eax, dword [eax + 0x88]
mov dword [esp + 0xf84], ecx
mov dword [esp + 0xf88], eax
mov eax, dword [esp + 0x2a4]
mov dword [esp + 0xf94], eax
mov ecx, dword [esp + 0x100]
mov dword [esp + 0xf98], ecx
mov edx, dword [esp + 0x2cc]
mov dword [esp + 0xfa4], edx
mov ebx, dword [esp + 0x128]
mov dword [esp + 0xfa8], ebx
mov dword [esp], 0
lea ebp, [esp + 0xf7c]
mov dword [esp + 4], ebp
mov dword [esp + 8], 7
mov dword [esp + 0xc], 7
call fcn.0043be60
mov eax, dword [esp + 0x10]
mov dword [esp + 0x2b4], eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x11c], ecx
mov edx, dword [esp + 0x2a8]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
call fcn.005f3dd0
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x24]
test eax, eax
jne 0x6609c9
mov ebx, 0xf
lea ebp, [0x722091]
jmp 0x65ba61
mov dword [esp + 0x28c], eax
mov dword [esp + 0x29c], ecx
mov edx, dword [eax + 0x10]
mov dword [esp], ecx
call edx
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp + 0x14c], ecx
lea edi, [esp + 0xdf4]
lea esi, [0x79ecc0]
call fcn.0044cd28
mov ecx, dword [esp + 0x2cc]
mov dword [esp + 0xdfc], ecx
mov edx, dword [esp + 0x128]
mov dword [esp + 0xe00], edx
mov ebx, dword [esp + 0x2b4]
mov dword [esp + 0xe0c], ebx
mov ebp, dword [esp + 0x11c]
mov dword [esp + 0xe10], ebp
mov dword [esp + 0xe1c], eax
mov eax, dword [esp + 0x14c]
mov dword [esp + 0xe20], eax
mov dword [esp], 0
lea eax, [esp + 0xdf4]
mov dword [esp + 4], eax
mov dword [esp + 8], 6
mov dword [esp + 0xc], 6
call fcn.0043be60
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x5a0], eax
mov dword [esp + 0x5a4], ecx
mov dword [esp + 0x5a8], 0
mov dword [esp + 0x5ac], 0
lea eax, [0x6cae00]
mov dword [esp], eax
lea ecx, [esp + 0x5a0]
mov dword [esp + 4], ecx
call fcn.0040bcf0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x5a8], eax
mov dword [esp + 0x5ac], ecx
lea eax, [esp + 0x5a8]
mov dword [esp], eax
mov dword [esp + 4], 1
mov dword [esp + 8], 1
call fcn.004a3000
mov eax, dword [esp + 0x28c]
mov eax, dword [eax + 0x10]
mov ecx, dword [esp + 0x29c]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp + 0x14c], ecx
lea edi, [esp + 0xdc4]
lea esi, [0x79ed00]
call fcn.0044cd28
mov ecx, dword [esp + 0x2cc]
mov dword [esp + 0xdcc], ecx
mov ecx, dword [esp + 0x128]
mov dword [esp + 0xdd0], ecx
mov ecx, dword [esp + 0x2b4]
mov dword [esp + 0xddc], ecx
mov ecx, dword [esp + 0x11c]
mov dword [esp + 0xde0], ecx
mov dword [esp + 0xdec], eax
mov eax, dword [esp + 0x14c]
mov dword [esp + 0xdf0], eax
mov dword [esp], 0
lea eax, [esp + 0xdc4]
mov dword [esp + 4], eax
mov dword [esp + 8], 6
mov dword [esp + 0xc], 6
call fcn.0043be60
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x590], ecx
mov dword [esp + 0x594], eax
mov dword [esp + 0x598], 0
mov dword [esp + 0x59c], 0
lea eax, [0x6cae00]
mov dword [esp], eax
lea eax, [esp + 0x590]
mov dword [esp + 4], eax
call fcn.0040bcf0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x598], eax
mov dword [esp + 0x59c], ecx
mov eax, dword [0x9b8620]
mov dword [esp], eax
lea eax, [esp + 0x598]
mov dword [esp + 4], eax
mov dword [esp + 8], 1
mov dword [esp + 0xc], 1
call fcn.00554610
mov byte [esp + 0x2400], 0
nop
call fcn.00426b00
add esp, 0x23c4
ret
mov dword [esp + 0x28c], eax
mov dword [esp + 0x29c], ecx
mov edx, dword [eax + 0x10]
mov dword [esp], ecx
call edx
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp + 0x14c], ecx
lea edi, [esp + 0xe54]
lea esi, [0x79ec40]
call fcn.0044cd28
mov ecx, dword [esp + 0x2cc]
mov dword [esp + 0xe5c], ecx
mov edx, dword [esp + 0x128]
mov dword [esp + 0xe60], edx
mov ebx, dword [esp + 0x2b4]
mov dword [esp + 0xe6c], ebx
mov ebp, dword [esp + 0x11c]
mov dword [esp + 0xe70], ebp
mov dword [esp + 0xe7c], eax
mov eax, dword [esp + 0x14c]
mov dword [esp + 0xe80], eax
mov dword [esp], 0
lea eax, [esp + 0xe54]
mov dword [esp + 4], eax
mov dword [esp + 8], 6
mov dword [esp + 0xc], 6
call fcn.0043be60
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x5c0], eax
mov dword [esp + 0x5c4], ecx
mov dword [esp + 0x5c8], 0
mov dword [esp + 0x5cc], 0
lea eax, [0x6cae00]
mov dword [esp], eax
lea ecx, [esp + 0x5c0]
mov dword [esp + 4], ecx
call fcn.0040bcf0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x5c8], eax
mov dword [esp + 0x5cc], ecx
lea eax, [esp + 0x5c8]
mov dword [esp], eax
mov dword [esp + 4], 1
mov dword [esp + 8], 1
call fcn.004a3000
mov eax, dword [esp + 0x28c]
mov eax, dword [eax + 0x10]
mov ecx, dword [esp + 0x29c]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 8]
mov ecx, dword [esp + 4]
mov dword [esp + 0x310], ecx
lea edi, [esp + 0xe24]
lea esi, [0x79ec80]
call fcn.0044cd28
mov ecx, dword [esp + 0x2cc]
mov dword [esp + 0xe2c], ecx
mov ecx, dword [esp + 0x128]
mov dword [esp + 0xe30], ecx
mov ecx, dword [esp + 0x2b4]
mov dword [esp + 0xe3c], ecx
mov ecx, dword [esp + 0x11c]
mov dword [esp + 0xe40], ecx
mov ecx, dword [esp + 0x310]
mov dword [esp + 0xe4c], ecx
mov dword [esp + 0xe50], eax
mov dword [esp], 0
lea eax, [esp + 0xe24]
mov dword [esp + 4], eax
mov dword [esp + 8], 6
mov dword [esp + 0xc], 6
call fcn.0043be60
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x5b0], eax
mov dword [esp + 0x5b4], ecx
mov dword [esp + 0x5b8], 0
mov dword [esp + 0x5bc], 0
lea eax, [0x6cae00]
mov dword [esp], eax
lea eax, [esp + 0x5b0]
mov dword [esp + 4], eax
call fcn.0040bcf0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x5b8], eax
mov dword [esp + 0x5bc], ecx
mov eax, dword [0x9b8620]
mov dword [esp], eax
lea eax, [esp + 0x5b8]
mov dword [esp + 4], eax
mov dword [esp + 8], 1
mov dword [esp + 0xc], 1
call fcn.00554610
mov byte [esp + 0x2400], 0
nop
call fcn.00426b00
add esp, 0x23c4
ret
cmp eax, 8
jmp 0x65c1c9
cmp eax, 8
mov ecx, dword [esp + 0x23ec]
jmp 0x65c1c9
mov dword [esp + 0x28c], eax
mov dword [esp + 0x29c], ecx
mov edx, dword [eax + 0x10]
mov dword [esp], ecx
call edx
mov eax, dword [esp + 8]
mov ecx, dword [esp + 4]
mov dword [esp], 0
lea edx, [0x72fe15]
mov dword [esp + 4], edx
mov dword [esp + 8], 0x27
mov ebx, dword [esp + 0x2b4]
mov dword [esp + 0xc], ebx
mov ebp, dword [esp + 0x11c]
mov dword [esp + 0x10], ebp
lea esi, [0x719eac]
mov dword [esp + 0x14], esi
mov dword [esp + 0x18], 1
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x20], eax
call fcn.0043c110
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x5e0], eax
mov dword [esp + 0x5e4], ecx
mov dword [esp + 0x5e8], 0
mov dword [esp + 0x5ec], 0
lea eax, [0x6cae00]
mov dword [esp], eax
lea ecx, [esp + 0x5e0]
mov dword [esp + 4], ecx
call fcn.0040bcf0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x5e8], eax
mov dword [esp + 0x5ec], ecx
lea eax, [esp + 0x5e8]
mov dword [esp], eax
mov dword [esp + 4], 1
mov dword [esp + 8], 1
call fcn.004a3000
mov eax, dword [esp + 0x28c]
mov eax, dword [eax + 0x10]
mov ecx, dword [esp + 0x29c]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp], 0
lea edx, [0x72fe15]
mov dword [esp + 4], edx
mov dword [esp + 8], 0x27
mov edx, dword [esp + 0x2b4]
mov dword [esp + 0xc], edx
mov edx, dword [esp + 0x11c]
mov dword [esp + 0x10], edx
lea edx, [0x719eac]
mov dword [esp + 0x14], edx
mov dword [esp + 0x18], 1
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], ecx
call fcn.0043c110
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x5d0], eax
mov dword [esp + 0x5d4], ecx
mov dword [esp + 0x5d8], 0
mov dword [esp + 0x5dc], 0
lea eax, [0x6cae00]
mov dword [esp], eax
lea eax, [esp + 0x5d0]
mov dword [esp + 4], eax
call fcn.0040bcf0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x5d8], eax
mov dword [esp + 0x5dc], ecx
mov eax, dword [0x9b8620]
mov dword [esp], eax
lea eax, [esp + 0x5d8]
mov dword [esp + 4], eax
mov dword [esp + 8], 1
mov dword [esp + 0xc], 1
call fcn.00554610
mov byte [esp + 0x2400], 0
nop
call fcn.00426b00
add esp, 0x23c4
ret
mov dword [esp + 0x28c], eax
mov dword [esp + 0x29c], ecx
mov edx, dword [eax + 0x10]
mov dword [esp], ecx
call edx
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp], 0
lea edx, [0x72fe15]
mov dword [esp + 4], edx
mov dword [esp + 8], 0x27
mov ebx, dword [esp + 0x2b4]
mov dword [esp + 0xc], ebx
mov ebp, dword [esp + 0x11c]
mov dword [esp + 0x10], ebp
lea esi, [0x719eac]
mov dword [esp + 0x14], esi
mov dword [esp + 0x18], 1
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], ecx
call fcn.0043c110
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x600], eax
mov dword [esp + 0x604], ecx
mov dword [esp + 0x608], 0
mov dword [esp + 0x60c], 0
lea eax, [0x6cae00]
mov dword [esp], eax
lea ecx, [esp + 0x600]
mov dword [esp + 4], ecx
call fcn.0040bcf0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x608], eax
mov dword [esp + 0x60c], ecx
lea eax, [esp + 0x608]
mov dword [esp], eax
mov dword [esp + 4], 1
mov dword [esp + 8], 1
call fcn.004a3000
mov eax, dword [esp + 0x28c]
mov eax, dword [eax + 0x10]
mov ecx, dword [esp + 0x29c]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp], 0
lea edx, [0x72fe15]
mov dword [esp + 4], edx
mov dword [esp + 8], 0x27
mov edx, dword [esp + 0x2b4]
mov dword [esp + 0xc], edx
mov edx, dword [esp + 0x11c]
mov dword [esp + 0x10], edx
lea edx, [0x719eac]
mov dword [esp + 0x14], edx
mov dword [esp + 0x18], 1
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], ecx
call fcn.0043c110
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x5f0], eax
mov dword [esp + 0x5f4], ecx
mov dword [esp + 0x5f8], 0
mov dword [esp + 0x5fc], 0
lea eax, [0x6cae00]
mov dword [esp], eax
lea eax, [esp + 0x5f0]
mov dword [esp + 4], eax
call fcn.0040bcf0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x5f8], eax
mov dword [esp + 0x5fc], ecx
mov eax, dword [0x9b8620]
mov dword [esp], eax
lea eax, [esp + 0x5f8]
mov dword [esp + 4], eax
mov dword [esp + 8], 1
mov dword [esp + 0xc], 1
call fcn.00554610
mov byte [esp + 0x2400], 0
nop
call fcn.00426b00
add esp, 0x23c4
ret
mov eax, dword [esp + 0x2ac]
mov dword [esp], eax
mov eax, dword [esp + 0x104]
mov dword [esp + 4], eax
lea eax, [0x723ba8]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0x11
lea eax, [0x719f34]
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], 2
mov dword [esp + 0x18], 1
call fcn.004b2060
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
mov dword [esp], eax
mov dword [esp + 4], ecx
lea eax, [0x7231ef]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0x10
lea eax, [0x719f34]
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], 2
mov dword [esp + 0x18], 1
call fcn.004b2060
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
mov dword [esp], eax
mov dword [esp + 4], ecx
lea eax, [0x723bca]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0x11
lea eax, [0x719f34]
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], 2
mov dword [esp + 0x18], 1
call fcn.004b2060
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x1c]
mov dword [esp], ecx
mov dword [esp + 4], eax
lea eax, [0x72320f]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0x10
lea eax, [0x719f34]
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], 2
mov dword [esp + 0x18], 1
call fcn.004b2060
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x1c]
mov dword [esp], ecx
mov dword [esp + 4], eax
lea eax, [0x723bb9]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0x11
lea eax, [0x719f34]
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], 2
mov dword [esp + 0x18], 1
call fcn.004b2060
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
mov dword [esp], eax
mov dword [esp + 4], ecx
lea eax, [0x7231ff]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0x10
lea eax, [0x719f34]
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], 2
mov dword [esp + 0x18], 1
call fcn.004b2060
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
mov dword [esp], eax
mov dword [esp + 4], ecx
lea eax, [0x723bdb]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0x11
lea ecx, [0x719f34]
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], 2
mov dword [esp + 0x18], 1
call fcn.004b2060
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x1c]
mov dword [esp], ecx
mov dword [esp + 4], eax
lea eax, [0x72321f]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0x10
lea eax, [0x719f34]
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], 2
mov dword [esp + 0x18], 1
call fcn.004b2060
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
mov dword [esp], eax
mov dword [esp + 4], ecx
lea eax, [0x723bdb]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0x11
lea eax, [0x719f34]
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], 2
mov dword [esp + 0x18], 1
call fcn.004b2060
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x1c]
mov dword [esp], ecx
mov dword [esp + 4], eax
lea eax, [0x724815]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0x12
lea eax, [0x719f38]
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], 2
mov dword [esp + 0x18], 1
call fcn.004b2060
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
mov dword [esp], eax
mov dword [esp + 4], ecx
lea eax, [0x72560f]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0x13
lea eax, [0x719f38]
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], 2
mov dword [esp + 0x18], 1
call fcn.004b2060
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
mov dword [esp], eax
mov dword [esp + 4], ecx
lea eax, [0x724803]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0x12
lea eax, [0x719f38]
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], 2
mov dword [esp + 0x18], 1
call fcn.004b2060
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
mov dword [esp], eax
mov dword [esp + 4], ecx
lea eax, [0x7255fc]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0x13
lea eax, [0x719f38]
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], 2
mov dword [esp + 0x18], 1
call fcn.004b2060
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
mov dword [esp], eax
mov dword [esp + 4], ecx
lea eax, [0x7247f1]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0x12
lea eax, [0x719f38]
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], 2
mov dword [esp + 0x18], 1
call fcn.004b2060
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x1c]
mov dword [esp], ecx
mov dword [esp + 4], eax
lea eax, [0x7255e9]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0x13
lea eax, [0x719f38]
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], 2
mov dword [esp + 0x18], 1
call fcn.004b2060
mov ecx, dword [esp + 0x1c]
mov eax, dword [esp + 0x20]
jmp 0x65b87c
mov dword [esp + 0x29c], eax
mov dword [esp + 0x28c], ecx
mov edx, dword [ecx + 0x10]
mov dword [esp], eax
call edx
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp], 0
lea edx, [0x72fdee]
mov dword [esp + 4], edx
mov dword [esp + 8], 0x27
mov ebx, dword [esp + 0x2b4]
mov dword [esp + 0xc], ebx
mov ebp, dword [esp + 0x11c]
mov dword [esp + 0x10], ebp
lea esi, [0x719eac]
mov dword [esp + 0x14], esi
mov dword [esp + 0x18], 1
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], ecx
call fcn.0043c110
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x620], eax
mov dword [esp + 0x624], ecx
mov dword [esp + 0x628], 0
mov dword [esp + 0x62c], 0
lea eax, [0x6cae00]
mov dword [esp], eax
lea ecx, [esp + 0x620]
mov dword [esp + 4], ecx
call fcn.0040bcf0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x628], eax
mov dword [esp + 0x62c], ecx
lea eax, [esp + 0x628]
mov dword [esp], eax
mov dword [esp + 4], 1
mov dword [esp + 8], 1
call fcn.004a3000
mov eax, dword [esp + 0x28c]
mov eax, dword [eax + 0x10]
mov ecx, dword [esp + 0x29c]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp], 0
lea edx, [0x72fdee]
mov dword [esp + 4], edx
mov dword [esp + 8], 0x27
mov edx, dword [esp + 0x2b4]
mov dword [esp + 0xc], edx
mov edx, dword [esp + 0x11c]
mov dword [esp + 0x10], edx
lea edx, [0x719eac]
mov dword [esp + 0x14], edx
mov dword [esp + 0x18], 1
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], ecx
call fcn.0043c110
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x610], eax
mov dword [esp + 0x614], ecx
mov dword [esp + 0x618], 0
mov dword [esp + 0x61c], 0
lea eax, [0x6cae00]
mov dword [esp], eax
lea eax, [esp + 0x610]
mov dword [esp + 4], eax
call fcn.0040bcf0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
mov dword [esp + 0x618], ecx
mov dword [esp + 0x61c], eax
mov eax, dword [0x9b8620]
mov dword [esp], eax
lea eax, [esp + 0x618]
mov dword [esp + 4], eax
mov dword [esp + 8], 1
mov dword [esp + 0xc], 1
call fcn.00554610
mov byte [esp + 0x2400], 0
nop
call fcn.00426b00
add esp, 0x23c4
ret
movzx edx, byte [esp + 0x23f4]
test dl, dl
je 0x661867
mov byte [esp + 0x2400], 1
nop
call fcn.00426b00
add esp, 0x23c4
ret
mov edx, dword [0x9b8614]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov eax, dword [esp + 0x2d8]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x130]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x2a4]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x100]
mov dword [esp + 0x18], eax
mov edi, dword [esp + 0x308]
lea esi, [esp + 0x23c8]
call fcn.0044cd6e
call fcn.0066eea0
jmp 0x661852
cmp eax, 6
jne 0x664b87
mov edx, dword [ecx]
cmp edx, 0x424d454d
jne 0x664b7f
movzx edx, word [ecx + 4]
cmp dx, 0x5245
jne 0x66225a
mov edx, dword [esp + 0xec]
jmp 0x6618fd
mov ecx, dword [esp + 0x23ec]
mov edx, eax
mov eax, dword [esp + 0x23f0]
mov ebx, dword [esp + 0x2a0]
mov ebp, dword [ebx + 4]
cmp edx, ebp
jge 0x662253
movzx ebp, word [ebx + 8]
movzx esi, word [ebx + 0xa]
imul esi, edx
lea edi, [ebp + esi]
mov ecx, dword [ebx + 0x6c]
mov eax, dword [ebx + 0x70]
lea ebp, [esi + ebp + 1]
mov esi, dword [ebx + 0x68]
cmp ebp, ecx
jg 0x661956
cmp edi, ebp
ja 0x665fdf
cmp ebp, eax
ja 0x665fdf
sub eax, edi
neg eax
sar eax, 0x1f
and edi, eax
movzx eax, byte [esi + edi]
cmp al, 0x2a
jne 0x661956
lea eax, [edx + 1]
jmp 0x6618ed
mov dword [esp + 0x90], edx
mov dword [esp], ebx
mov dword [esp + 4], edx
call fcn.00623210
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
test ecx, ecx
jbe 0x665fd8
mov dword [esp + 0x25c], eax
mov dword [esp + 0xa4], ecx
mov dword [esp + 0xbc], edx
mov ecx, dword [eax + 4]
mov edx, dword [eax]
mov dword [esp], edx
mov dword [esp + 4], ecx
call fcn.004600c0
mov eax, dword [esp + 0xc]
test eax, eax
jne 0x66205f
mov eax, dword [esp + 0xa4]
cmp eax, 4
jbe 0x665fd1
mov ecx, dword [esp + 0x25c]
mov edx, dword [ecx + 0x20]
mov ebx, dword [ecx + 0x24]
lea ebp, [ecx + 0x20]
cmp ebx, 8
je 0x661bcc
call fcn.006093b0
mov eax, dword [esp + 4]
mov ecx, dword [esp]
mov dword [esp + 0x748], ecx
mov dword [esp + 0x74c], eax
mov eax, dword [esp + 0x90]
mov dword [esp], eax
call fcn.00465390
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp], 0
mov edx, dword [esp + 0x2a4]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0x100]
mov dword [esp + 8], ebx
lea ebp, [0x71f9e5]
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], 0xb
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], ecx
lea eax, [0x731726]
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], 0x2b
call fcn.0043c110
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x740], eax
mov dword [esp + 0x744], ecx
mov dword [esp + 0xa28], 0
mov dword [esp + 0xa2c], 0
mov dword [esp + 0xa30], 0
mov dword [esp + 0xa34], 0
lea eax, [0x6cae00]
mov dword [esp], eax
lea ecx, [esp + 0x748]
mov dword [esp + 4], ecx
call fcn.0040bcf0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
mov dword [esp + 0xa28], ecx
mov dword [esp + 0xa2c], eax
lea eax, [0x6cae00]
mov dword [esp], eax
lea ecx, [esp + 0x740]
mov dword [esp + 4], ecx
call fcn.0040bcf0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
mov dword [esp + 0xa30], ecx
mov dword [esp + 0xa34], eax
mov eax, dword [0x9b861c]
mov dword [esp], eax
lea eax, [esp + 0xa28]
mov dword [esp + 4], eax
mov dword [esp + 8], 2
mov dword [esp + 0xc], 2
call fcn.00554610
mov eax, dword [esp + 0x25c]
mov dword [esp + 0x910], eax
mov eax, dword [esp + 0xa4]
mov dword [esp + 0x914], eax
mov eax, dword [esp + 0xbc]
mov dword [esp + 0x918], eax
mov dword [esp + 0x738], 0
mov dword [esp + 0x73c], 0
lea eax, [0x6ba9e0]
mov dword [esp], eax
lea ecx, [esp + 0x910]
mov dword [esp + 4], ecx
call fcn.0040bd80
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x738], eax
mov dword [esp + 0x73c], ecx
mov eax, dword [0x9b861c]
mov dword [esp], eax
lea eax, [esp + 0x738]
mov dword [esp + 4], eax
mov dword [esp + 8], 1
mov dword [esp + 0xc], 1
call fcn.00554610
mov eax, dword [esp + 0x90]
inc eax
mov ebx, dword [esp + 0x2a0]
jmp 0x6618ed
mov dword [esp + 0x214], edx
mov dword [esp + 0x5c], ebx
mov dword [esp + 0x2fc], ebp
mov dword [esp], edx
mov dword [esp + 4], ebx
call fcn.004600c0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
test eax, eax
jne 0x661dcf
cmp ecx, 0x121eac0
jl 0x661dcf
cmp ecx, 0x138ce20
jg 0x661dcf
xor eax, eax
jmp 0x661c1d
mov esi, dword [esp + 0x40]
lea eax, [esi + 1]
mov ecx, dword [esp + 0xa4]
cmp eax, ecx
jge 0x661d92
mov edx, dword [esp + 0x25c]
lea ebx, [edx + eax*8 + 4]
lea ebp, [edx + eax*8]
mov dword [esp + 0x2fc], ebp
mov esi, dword [ebp + 4]
mov edi, dword [ebp]
mov ebp, dword [esp + 0xfc]
cmp eax, ebp
jae 0x665fca
mov dword [esp + 0x2f8], ebx
mov dword [esp + 0x238], edi
mov dword [esp + 0x40], eax
imul eax, eax, 0x2c
mov ebx, dword [esp + 0x284]
movzx edi, byte [ebx + eax + 8]
xchg edi, eax
cmp al, 0x4e
xchg edi, eax
jne 0x661c16
mov dword [esp + 0x78], esi
movzx eax, byte [ebx + eax + 9]
lea ecx, [0x719e8b]
mov dword [esp], ecx
mov dword [esp + 4], 1
mov dword [esp + 8], eax
call fcn.004b15b0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x78]
cmp ecx, edx
je 0x661cd2
mov ecx, dword [esp + 0xa4]
mov edx, dword [esp + 0x25c]
mov ebx, dword [esp + 0x284]
mov ebp, dword [esp + 0xfc]
jmp 0x661c16
mov ecx, dword [esp + 0x238]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], edx
call fcn.0044c4d0
movzx eax, byte [esp + 0xc]
test al, al
je 0x661d71
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0xa4]
cmp eax, ecx
jae 0x665fc3
mov edx, dword [esp + 0x2f8]
mov dword [edx], 1
mov edx, dword [0x9cadb0]
test edx, edx
jne 0x661d45
lea edx, [0x719e91]
mov ebx, dword [esp + 0x2fc]
mov dword [ebx], edx
mov edx, dword [esp + 0x25c]
mov ebx, dword [esp + 0x284]
mov ebp, dword [esp + 0xfc]
jmp 0x661c16
mov eax, dword [esp + 0x2fc]
mov dword [esp], eax
lea eax, [0x719e91]
mov dword [esp + 4], eax
call fcn.0040ecd0
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0xa4]
lea edx, [0x719e91]
jmp 0x661d2b
mov ecx, dword [esp + 0xa4]
mov edx, dword [esp + 0x25c]
mov ebx, dword [esp + 0x284]
mov ebp, dword [esp + 0xfc]
jmp 0x661c16
lea eax, [esp + 0x898]
mov dword [esp], eax
mov edx, dword [esp + 0x25c]
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov ecx, dword [esp + 0xbc]
mov dword [esp + 0xc], ecx
call fcn.00609cf0
mov eax, dword [esp + 0x90]
inc eax
mov ebx, dword [esp + 0x2a0]
jmp 0x6618ed
mov dword [esp], 0
lea eax, [0x719f08]
mov dword [esp + 4], eax
mov dword [esp + 8], 2
mov ecx, dword [esp + 0x214]
lea edx, [ecx + 2]
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], 6
call fcn.0043c050
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x25c]
mov dword [edx + 0x24], eax
mov eax, dword [0x9cadb0]
test eax, eax
jne 0x662047
mov dword [edx + 0x20], ecx
call fcn.006093b0
mov eax, dword [esp]
mov ecx, dword [esp + 4]
mov dword [esp + 0x730], eax
mov dword [esp + 0x734], ecx
mov eax, dword [esp + 0x90]
mov dword [esp], eax
call fcn.00465390
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp + 0x14c], ecx
lea edi, [esp + 0xeb4]
lea esi, [0x79ebc0]
call fcn.0044cd28
mov ecx, dword [esp + 0x2a4]
mov dword [esp + 0xeb4], ecx
mov edx, dword [esp + 0x100]
mov dword [esp + 0xeb8], edx
mov dword [esp + 0xec4], eax
mov eax, dword [esp + 0x14c]
mov dword [esp + 0xec8], eax
mov eax, dword [esp + 0x214]
mov dword [esp + 0xed4], eax
mov eax, dword [esp + 0x5c]
mov dword [esp + 0xed8], eax
mov dword [esp], 0
lea eax, [esp + 0xeb4]
mov dword [esp + 4], eax
mov dword [esp + 8], 6
mov dword [esp + 0xc], 6
call fcn.0043be60
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x728], ecx
mov dword [esp + 0x72c], eax
mov dword [esp + 0xa18], 0
mov dword [esp + 0xa1c], 0
mov dword [esp + 0xa20], 0
mov dword [esp + 0xa24], 0
lea eax, [0x6cae00]
mov dword [esp], eax
lea ecx, [esp + 0x730]
mov dword [esp + 4], ecx
call fcn.0040bcf0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
mov dword [esp + 0xa18], ecx
mov dword [esp + 0xa1c], eax
lea eax, [0x6cae00]
mov dword [esp], eax
lea ecx, [esp + 0x728]
mov dword [esp + 4], ecx
call fcn.0040bcf0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0xa20], eax
mov dword [esp + 0xa24], ecx
mov eax, dword [0x9b861c]
mov dword [esp], eax
lea eax, [esp + 0xa18]
mov dword [esp + 4], eax
mov dword [esp + 8], 2
mov dword [esp + 0xc], 2
call fcn.00554610
mov eax, dword [esp + 0x25c]
mov dword [esp + 0x904], eax
mov ecx, dword [esp + 0xa4]
mov dword [esp + 0x908], ecx
mov edx, dword [esp + 0xbc]
mov dword [esp + 0x90c], edx
mov dword [esp + 0x720], 0
mov dword [esp + 0x724], 0
lea ebx, [0x6ba9e0]
mov dword [esp], ebx
lea ebp, [esp + 0x904]
mov dword [esp + 4], ebp
call fcn.0040bd80
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x720], eax
mov dword [esp + 0x724], ecx
mov eax, dword [0x9b861c]
mov dword [esp], eax
lea eax, [esp + 0x720]
mov dword [esp + 4], eax
mov dword [esp + 8], 1
mov dword [esp + 0xc], 1
call fcn.00554610
jmp 0x661c12
mov eax, dword [esp + 0x2fc]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.0040ecd0
jmp 0x661e26
call fcn.006093b0
mov eax, dword [esp + 4]
mov ecx, dword [esp]
mov dword [esp + 0x760], ecx
mov dword [esp + 0x764], eax
mov eax, dword [esp + 0x90]
mov dword [esp], eax
call fcn.00465390
mov eax, dword [esp + 8]
mov ecx, dword [esp + 4]
mov dword [esp], 0
mov edx, dword [esp + 0x2a4]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0x100]
mov dword [esp + 8], ebx
lea ebp, [0x71f9e5]
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], 0xb
mov dword [esp + 0x14], ecx
mov dword [esp + 0x18], eax
lea eax, [0x72dc08]
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], 0x22
call fcn.0043c110
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x24]
mov dword [esp + 0x758], ecx
mov dword [esp + 0x75c], eax
mov dword [esp + 0xa38], 0
mov dword [esp + 0xa3c], 0
mov dword [esp + 0xa40], 0
mov dword [esp + 0xa44], 0
lea eax, [0x6cae00]
mov dword [esp], eax
lea ecx, [esp + 0x760]
mov dword [esp + 4], ecx
call fcn.0040bcf0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0xa38], eax
mov dword [esp + 0xa3c], ecx
lea eax, [0x6cae00]
mov dword [esp], eax
lea ecx, [esp + 0x758]
mov dword [esp + 4], ecx
call fcn.0040bcf0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
mov dword [esp + 0xa40], ecx
mov dword [esp + 0xa44], eax
mov eax, dword [0x9b861c]
mov dword [esp], eax
lea eax, [esp + 0xa38]
mov dword [esp + 4], eax
mov dword [esp + 8], 2
mov dword [esp + 0xc], 2
call fcn.00554610
mov eax, dword [esp + 0x25c]
mov dword [esp + 0x91c], eax
mov eax, dword [esp + 0xa4]
mov dword [esp + 0x920], eax
mov eax, dword [esp + 0xbc]
mov dword [esp + 0x924], eax
mov dword [esp + 0x750], 0
mov dword [esp + 0x754], 0
lea eax, [0x6ba9e0]
mov dword [esp], eax
lea ecx, [esp + 0x91c]
mov dword [esp + 4], ecx
call fcn.0040bd80
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x750], eax
mov dword [esp + 0x754], ecx
mov eax, dword [0x9b861c]
mov dword [esp], eax
lea eax, [esp + 0x750]
mov dword [esp + 4], eax
mov dword [esp + 8], 1
mov dword [esp + 0xc], 1
call fcn.00554610
mov eax, dword [esp + 0x90]
inc eax
mov ebx, dword [esp + 0x2a0]
jmp 0x6618ed
mov ebx, edx
jmp 0x65b266
cmp eax, 3
jne 0x662be8
movzx edx, word [ecx]
cmp dx, 0x5050
jne 0x664b77
movzx edx, byte [ecx + 2]
cmp dl, 0x4d
jne 0x662be5
mov edx, dword [esp + 0xec]
jmp 0x662297
mov ecx, dword [esp + 0x23ec]
mov edx, eax
mov eax, dword [esp + 0x23f0]
mov ebx, dword [esp + 0x2a0]
mov ebp, dword [ebx + 4]
cmp edx, ebp
jge 0x662253
movzx ebp, word [ebx + 8]
movzx esi, word [ebx + 0xa]
imul esi, edx
lea edi, [ebp + esi]
mov ecx, dword [ebx + 0x6c]
mov eax, dword [ebx + 0x68]
lea ebp, [esi + ebp + 1]
mov esi, dword [ebx + 0x70]
cmp ebp, ecx
jg 0x6622f0
cmp edi, ebp
ja 0x665fbc
cmp ebp, esi
ja 0x665fbc
sub esi, edi
xchg esi, ebx
neg ebx
xchg esi, ebx
sar esi, 0x1f
and edi, esi
movzx eax, byte [eax + edi]
cmp al, 0x2a
jne 0x6622f0
lea eax, [edx + 1]
jmp 0x662287
mov dword [esp + 0x9c], edx
mov dword [esp], ebx
mov dword [esp + 4], edx
call fcn.00623210
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 8]
test eax, eax
jbe 0x665fb5
mov dword [esp + 0xa8], eax
mov dword [esp + 0xc4], ecx
mov dword [esp + 0x264], edx
mov eax, dword [edx]
mov ecx, dword [edx + 4]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.004600c0
mov eax, dword [esp + 0xc]
test eax, eax
jne 0x6629f1
mov eax, dword [esp + 0xa8]
cmp eax, 1
jbe 0x665fae
mov ecx, dword [esp + 0x264]
mov edx, dword [ecx + 8]
mov ebx, dword [ecx + 0xc]
lea ebp, [ecx + 8]
cmp ebx, 8
je 0x662566
call fcn.006093b0
mov eax, dword [esp + 4]
mov ecx, dword [esp]
mov dword [esp + 0x700], ecx
mov dword [esp + 0x704], eax
mov eax, dword [esp + 0x9c]
mov dword [esp], eax
call fcn.00465390
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp], 0
mov edx, dword [esp + 0x2a4]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0x100]
mov dword [esp + 8], ebx
lea ebp, [0x71f9e5]
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], 0xb
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], ecx
lea eax, [0x72ef2e]
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], 0x25
call fcn.0043c110
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x6f8], eax
mov dword [esp + 0x6fc], ecx
mov dword [esp + 0x9f8], 0
mov dword [esp + 0x9fc], 0
mov dword [esp + 0xa00], 0
mov dword [esp + 0xa04], 0
lea eax, [0x6cae00]
mov dword [esp], eax
lea ecx, [esp + 0x700]
mov dword [esp + 4], ecx
call fcn.0040bcf0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x9f8], eax
mov dword [esp + 0x9fc], ecx
lea eax, [0x6cae00]
mov dword [esp], eax
lea ecx, [esp + 0x6f8]
mov dword [esp + 4], ecx
call fcn.0040bcf0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
mov dword [esp + 0xa00], ecx
mov dword [esp + 0xa04], eax
mov eax, dword [0x9b861c]
mov dword [esp], eax
lea eax, [esp + 0x9f8]
mov dword [esp + 4], eax
mov dword [esp + 8], 2
mov dword [esp + 0xc], 2
call fcn.00554610
mov eax, dword [esp + 0x264]
mov dword [esp + 0x8ec], eax
mov eax, dword [esp + 0xa8]
mov dword [esp + 0x8f0], eax
mov eax, dword [esp + 0xc4]
mov dword [esp + 0x8f4], eax
mov dword [esp + 0x6f0], 0
mov dword [esp + 0x6f4], 0
lea eax, [0x6ba9e0]
mov dword [esp], eax
lea ecx, [esp + 0x8ec]
mov dword [esp + 4], ecx
call fcn.0040bd80
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
mov dword [esp + 0x6f0], ecx
mov dword [esp + 0x6f4], eax
mov eax, dword [0x9b861c]
mov dword [esp], eax
lea eax, [esp + 0x6f0]
mov dword [esp + 4], eax
mov dword [esp + 8], 1
mov dword [esp + 0xc], 1
call fcn.00554610
mov eax, dword [esp + 0x9c]
inc eax
mov ebx, dword [esp + 0x2a0]
jmp 0x662287
mov dword [esp + 0x2fc], ebp
mov dword [esp + 0x218], edx
mov dword [esp + 0x58], ebx
mov dword [esp], edx
mov dword [esp + 4], ebx
call fcn.004600c0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
test ecx, ecx
jne 0x662761
cmp eax, 0x121eac0
jl 0x662761
xor eax, eax
jmp 0x6625aa
mov ebp, dword [esp + 0x38]
lea eax, [ebp + 1]
mov ecx, dword [esp + 0xa8]
cmp eax, ecx
jge 0x662724
mov edx, dword [esp + 0x264]
lea ebx, [edx + eax*8]
mov dword [esp + 0x2fc], ebx
mov ebp, dword [ebx]
lea esi, [edx + eax*8 + 4]
mov edi, dword [ebx + 4]
mov ebx, dword [esp + 0xfc]
cmp eax, ebx
jae 0x665fa7
mov dword [esp + 0x240], ebp
mov dword [esp + 0x2f8], esi
mov dword [esp + 0x38], eax
imul eax, eax, 0x2c
mov esi, dword [esp + 0x284]
movzx ebp, byte [eax + esi + 8]
xchg ebp, eax
cmp al, 0x4e
xchg ebp, eax
jne 0x6625a3
mov dword [esp + 0x84], edi
movzx eax, byte [eax + esi + 9]
lea ecx, [0x719e8b]
mov dword [esp], ecx
mov dword [esp + 4], 1
mov dword [esp + 8], eax
call fcn.004b15b0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x84]
cmp ecx, edx
je 0x662664
mov ecx, dword [esp + 0xa8]
mov edx, dword [esp + 0x264]
mov ebx, dword [esp + 0xfc]
mov esi, dword [esp + 0x284]
jmp 0x6625a3
mov ecx, dword [esp + 0x240]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], edx
call fcn.0044c4d0
movzx eax, byte [esp + 0xc]
test al, al
je 0x662703
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0xa8]
cmp eax, ecx
jae 0x665fa0
mov edx, dword [esp + 0x2f8]
mov dword [edx], 1
mov edx, dword [0x9cadb0]
test edx, edx
jne 0x6626d7
lea edx, [0x719e91]
mov ebx, dword [esp + 0x2fc]
mov dword [ebx], edx
mov edx, dword [esp + 0x264]
mov ebx, dword [esp + 0xfc]
mov esi, dword [esp + 0x284]
jmp 0x6625a3
mov eax, dword [esp + 0x2fc]
mov dword [esp], eax
lea eax, [0x719e91]
mov dword [esp + 4], eax
call fcn.0040ecd0
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0xa8]
lea edx, [0x719e91]
jmp 0x6626bd
mov ecx, dword [esp + 0xa8]
mov edx, dword [esp + 0x264]
mov ebx, dword [esp + 0xfc]
mov esi, dword [esp + 0x284]
jmp 0x6625a3
lea eax, [esp + 0x898]
mov dword [esp], eax
mov edx, dword [esp + 0x264]
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov ecx, dword [esp + 0xc4]
mov dword [esp + 0xc], ecx
call fcn.00609cf0
mov eax, dword [esp + 0x9c]
inc eax
mov ebx, dword [esp + 0x2a0]
jmp 0x662287
mov dword [esp], 0
lea eax, [0x719f08]
mov dword [esp + 4], eax
mov dword [esp + 8], 2
mov ecx, dword [esp + 0x218]
lea edx, [ecx + 2]
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], 6
call fcn.0043c050
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x264]
mov dword [edx + 0xc], ecx
mov ecx, dword [0x9cadb0]
test ecx, ecx
jne 0x6629d9
mov dword [edx + 8], eax
call fcn.006093b0
mov eax, dword [esp]
mov ecx, dword [esp + 4]
mov dword [esp + 0x6e8], eax
mov dword [esp + 0x6ec], ecx
mov eax, dword [esp + 0x9c]
mov dword [esp], eax
call fcn.00465390
mov eax, dword [esp + 8]
mov ecx, dword [esp + 4]
mov dword [esp + 0x310], ecx
lea edi, [esp + 0xe84]
lea esi, [0x79ec00]
call fcn.0044cd28
mov ecx, dword [esp + 0x2a4]
mov dword [esp + 0xe84], ecx
mov edx, dword [esp + 0x100]
mov dword [esp + 0xe88], edx
mov ebx, dword [esp + 0x310]
mov dword [esp + 0xe94], ebx
mov dword [esp + 0xe98], eax
mov eax, dword [esp + 0x218]
mov dword [esp + 0xea4], eax
mov eax, dword [esp + 0x58]
mov dword [esp + 0xea8], eax
mov dword [esp], 0
lea eax, [esp + 0xe84]
mov dword [esp + 4], eax
mov dword [esp + 8], 6
mov dword [esp + 0xc], 6
call fcn.0043be60
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x6e0], eax
mov dword [esp + 0x6e4], ecx
mov dword [esp + 0x9e8], 0
mov dword [esp + 0x9ec], 0
mov dword [esp + 0x9f0], 0
mov dword [esp + 0x9f4], 0
lea eax, [0x6cae00]
mov dword [esp], eax
lea ecx, [esp + 0x6e8]
mov dword [esp + 4], ecx
call fcn.0040bcf0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x9e8], eax
mov dword [esp + 0x9ec], ecx
lea eax, [0x6cae00]
mov dword [esp], eax
lea ecx, [esp + 0x6e0]
mov dword [esp + 4], ecx
call fcn.0040bcf0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x9f0], eax
mov dword [esp + 0x9f4], ecx
mov eax, dword [0x9b861c]
mov dword [esp], eax
lea eax, [esp + 0x9e8]
mov dword [esp + 4], eax
mov dword [esp + 8], 2
mov dword [esp + 0xc], 2
call fcn.00554610
mov eax, dword [esp + 0x264]
mov dword [esp + 0x8e0], eax
mov ecx, dword [esp + 0xa8]
mov dword [esp + 0x8e4], ecx
mov edx, dword [esp + 0xc4]
mov dword [esp + 0x8e8], edx
mov dword [esp + 0x6d8], 0
mov dword [esp + 0x6dc], 0
lea ebx, [0x6ba9e0]
mov dword [esp], ebx
lea ebp, [esp + 0x8e0]
mov dword [esp + 4], ebp
call fcn.0040bd80
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x6d8], eax
mov dword [esp + 0x6dc], ecx
mov eax, dword [0x9b861c]
mov dword [esp], eax
lea eax, [esp + 0x6d8]
mov dword [esp + 4], eax
mov dword [esp + 8], 1
mov dword [esp + 0xc], 1
call fcn.00554610
jmp 0x66259f
mov ecx, dword [esp + 0x2fc]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0040ecd0
jmp 0x6627b8
call fcn.006093b0
mov eax, dword [esp]
mov ecx, dword [esp + 4]
mov dword [esp + 0x718], eax
mov dword [esp + 0x71c], ecx
mov eax, dword [esp + 0x9c]
mov dword [esp], eax
call fcn.00465390
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp], 0
mov edx, dword [esp + 0x2a4]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0x100]
mov dword [esp + 8], ebx
lea ebp, [0x71f9e5]
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], 0xb
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], ecx
lea eax, [0x72dc08]
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], 0x22
call fcn.0043c110
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x710], eax
mov dword [esp + 0x714], ecx
mov dword [esp + 0xa08], 0
mov dword [esp + 0xa0c], 0
mov dword [esp + 0xa10], 0
mov dword [esp + 0xa14], 0
lea eax, [0x6cae00]
mov dword [esp], eax
lea ecx, [esp + 0x718]
mov dword [esp + 4], ecx
call fcn.0040bcf0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0xa08], eax
mov dword [esp + 0xa0c], ecx
lea eax, [0x6cae00]
mov dword [esp], eax
lea ecx, [esp + 0x710]
mov dword [esp + 4], ecx
call fcn.0040bcf0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0xa10], eax
mov dword [esp + 0xa14], ecx
mov eax, dword [0x9b861c]
mov dword [esp], eax
lea eax, [esp + 0xa08]
mov dword [esp + 4], eax
mov dword [esp + 8], 2
mov dword [esp + 0xc], 2
call fcn.00554610
mov eax, dword [esp + 0x264]
mov dword [esp + 0x8f8], eax
mov eax, dword [esp + 0xa8]
mov dword [esp + 0x8fc], eax
mov eax, dword [esp + 0xc4]
mov dword [esp + 0x900], eax
mov dword [esp + 0x708], 0
mov dword [esp + 0x70c], 0
lea eax, [0x6ba9e0]
mov dword [esp], eax
lea ecx, [esp + 0x8f8]
mov dword [esp + 4], ecx
call fcn.0040bd80
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x708], eax
mov dword [esp + 0x70c], ecx
mov eax, dword [0x9b861c]
mov dword [esp], eax
lea eax, [esp + 0x708]
mov dword [esp + 4], eax
mov dword [esp + 8], 1
mov dword [esp + 0xc], 1
call fcn.00554610
mov eax, dword [esp + 0x9c]
inc eax
mov ebx, dword [esp + 0x2a0]
jmp 0x662287
cmp eax, 3
jne 0x66348c
movzx edx, word [ecx]
cmp dx, 0x5242
jne 0x664b6f
movzx edx, byte [ecx + 2]
cmp dl, 0x47
jne 0x663489
mov edx, dword [esp + 0xec]
jmp 0x662c22
mov ecx, dword [esp + 0x23ec]
mov edx, eax
mov eax, dword [esp + 0x23f0]
mov ebx, dword [esp + 0x2a0]
mov ebp, dword [ebx + 4]
cmp edx, ebp
jge 0x662253
movzx ebp, word [ebx + 8]
movzx esi, word [ebx + 0xa]
imul esi, edx
lea edi, [ebp + esi]
mov ecx, dword [ebx + 0x68]
mov eax, dword [ebx + 0x70]
mov ebx, dword [ebx + 0x6c]
lea ebp, [esi + ebp + 1]
cmp ebp, ebx
jg 0x662c7b
cmp edi, ebp
ja 0x665f99
cmp ebp, eax
ja 0x665f99
sub eax, edi
neg eax
sar eax, 0x1f
and edi, eax
movzx eax, byte [ecx + edi]
cmp al, 0x2a
jne 0x662c7b
lea eax, [edx + 1]
jmp 0x662c12
mov dword [esp + 0x8c], edx
mov eax, dword [esp + 0x2a0]
mov dword [esp], eax
mov dword [esp + 4], edx
call fcn.00623210
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 8]
test eax, eax
jbe 0x665f92
mov dword [esp + 0xb4], eax
mov dword [esp + 0xc0], ecx
mov dword [esp + 0x24c], edx
mov ebx, dword [edx]
mov ebp, dword [edx + 4]
cmp ebp, 6
jge 0x662eb9
call fcn.006093b0
mov eax, dword [esp]
mov ecx, dword [esp + 4]
mov dword [esp + 0x6d0], eax
mov dword [esp + 0x6d4], ecx
mov eax, dword [esp + 0x8c]
mov dword [esp], eax
call fcn.00465390
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp], 0
mov edx, dword [esp + 0x2a4]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0x100]
mov dword [esp + 8], ebx
lea ebp, [0x71f9e5]
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], 0xb
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], ecx
lea eax, [0x72f4f6]
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], 0x26
call fcn.0043c110
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x6c8], eax
mov dword [esp + 0x6cc], ecx
mov dword [esp + 0x9d8], 0
mov dword [esp + 0x9dc], 0
mov dword [esp + 0x9e0], 0
mov dword [esp + 0x9e4], 0
lea eax, [0x6cae00]
mov dword [esp], eax
lea ecx, [esp + 0x6d0]
mov dword [esp + 4], ecx
call fcn.0040bcf0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
mov dword [esp + 0x9d8], ecx
mov dword [esp + 0x9dc], eax
lea eax, [0x6cae00]
mov dword [esp], eax
lea ecx, [esp + 0x6c8]
mov dword [esp + 4], ecx
call fcn.0040bcf0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x9e0], eax
mov dword [esp + 0x9e4], ecx
mov eax, dword [0x9b861c]
mov dword [esp], eax
lea eax, [esp + 0x9d8]
mov dword [esp + 4], eax
mov dword [esp + 8], 2
mov dword [esp + 0xc], 2
call fcn.00554610
mov eax, dword [esp + 0x24c]
mov dword [esp + 0x8d4], eax
mov eax, dword [esp + 0xb4]
mov dword [esp + 0x8d8], eax
mov eax, dword [esp + 0xc0]
mov dword [esp + 0x8dc], eax
mov dword [esp + 0x6c0], 0
mov dword [esp + 0x6c4], 0
lea eax, [0x6ba9e0]
mov dword [esp], eax
lea ecx, [esp + 0x8d4]
mov dword [esp + 4], ecx
call fcn.0040bd80
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x6c0], eax
mov dword [esp + 0x6c4], ecx
mov eax, dword [0x9b861c]
mov dword [esp], eax
lea eax, [esp + 0x6c0]
mov dword [esp + 4], eax
mov dword [esp + 8], 1
mov dword [esp + 0xc], 1
call fcn.00554610
mov eax, dword [esp + 0x8c]
inc eax
jmp 0x662c12
lea eax, [ebp - 1]
mov ecx, eax
neg eax
sar eax, 0x1f
and eax, 1
add eax, ebx
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.004600c0
mov eax, dword [esp + 0xc]
test eax, eax
jne 0x66329c
mov eax, dword [esp + 0xb4]
cmp eax, 4
jbe 0x665f8b
mov ecx, dword [esp + 0x24c]
mov edx, dword [ecx + 0x24]
cmp edx, 0x19
jg 0x6630af
xor edx, edx
jmp 0x662f0e
mov ebp, dword [esp + 0x50]
lea edx, [ebp + 1]
cmp edx, eax
jge 0x663080
lea ebx, [ecx + edx*8]
mov dword [esp + 0x2fc], ebx
mov ebp, dword [ebx]
lea esi, [ecx + edx*8 + 4]
mov edi, dword [ebx + 4]
mov ebx, dword [esp + 0xfc]
cmp edx, ebx
jae 0x665f84
mov dword [esp + 0x230], ebp
mov dword [esp + 0x2f8], esi
mov dword [esp + 0x50], edx
imul edx, edx, 0x2c
mov esi, dword [esp + 0x284]
movzx ebp, byte [esi + edx + 8]
xchg ebp, eax
cmp al, 0x4e
xchg ebp, eax
jne 0x662f07
mov dword [esp + 0x80], edi
movzx eax, byte [esi + edx + 9]
lea ecx, [0x719e8b]
mov dword [esp], ecx
mov dword [esp + 4], 1
mov dword [esp + 8], eax
call fcn.004b15b0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x80]
cmp ecx, edx
je 0x662fba
mov eax, dword [esp + 0xb4]
mov ecx, dword [esp + 0x24c]
mov ebx, dword [esp + 0xfc]
mov esi, dword [esp + 0x284]
jmp 0x662f07
mov ecx, dword [esp + 0x230]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], edx
call fcn.0044c4d0
movzx eax, byte [esp + 0xc]
test al, al
je 0x66305f
mov eax, dword [esp + 0x50]
mov ecx, dword [esp + 0xb4]
cmp eax, ecx
jae 0x665f7d
mov edx, dword [esp + 0x2f8]
mov dword [edx], 1
mov edx, dword [0x9cadb0]
test edx, edx
jne 0x663033
lea edx, [0x719e91]
mov ebx, dword [esp + 0x2fc]
mov dword [ebx], edx
mov eax, ecx
mov ecx, dword [esp + 0x24c]
mov ebx, dword [esp + 0xfc]
mov esi, dword [esp + 0x284]
jmp 0x662f07
mov eax, dword [esp + 0x2fc]
mov dword [esp], eax
lea eax, [0x719e91]
mov dword [esp + 4], eax
call fcn.0040ecd0
mov eax, dword [esp + 0x50]
mov ecx, dword [esp + 0xb4]
lea edx, [0x719e91]
jmp 0x663017
mov eax, dword [esp + 0xb4]
mov ecx, dword [esp + 0x24c]
mov ebx, dword [esp + 0xfc]
mov esi, dword [esp + 0x284]
jmp 0x662f07
lea edx, [esp + 0x898]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov eax, dword [esp + 0xc0]
mov dword [esp + 0xc], eax
call fcn.00609cf0
mov eax, dword [esp + 0x8c]
inc eax
jmp 0x662c12
call fcn.006093b0
mov eax, dword [esp]
mov ecx, dword [esp + 4]
mov dword [esp + 0x6a0], eax
mov dword [esp + 0x6a4], ecx
mov eax, dword [esp + 0x8c]
mov dword [esp], eax
call fcn.00465390
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp], 0
mov edx, dword [esp + 0x2a4]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0x100]
mov dword [esp + 8], ebx
lea ebp, [0x71f9e5]
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], 0xb
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], ecx
lea eax, [0x7316fb]
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], 0x2b
call fcn.0043c110
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x24]
mov dword [esp + 0x698], ecx
mov dword [esp + 0x69c], eax
mov dword [esp + 0x9b8], 0
mov dword [esp + 0x9bc], 0
mov dword [esp + 0x9c0], 0
mov dword [esp + 0x9c4], 0
lea eax, [0x6cae00]
mov dword [esp], eax
lea ecx, [esp + 0x6a0]
mov dword [esp + 4], ecx
call fcn.0040bcf0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x9b8], eax
mov dword [esp + 0x9bc], ecx
lea eax, [0x6cae00]
mov dword [esp], eax
lea ecx, [esp + 0x698]
mov dword [esp + 4], ecx
call fcn.0040bcf0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x9c0], eax
mov dword [esp + 0x9c4], ecx
mov eax, dword [0x9b861c]
mov dword [esp], eax
lea eax, [esp + 0x9b8]
mov dword [esp + 4], eax
mov dword [esp + 8], 2
mov dword [esp + 0xc], 2
call fcn.00554610
mov eax, dword [esp + 0x24c]
mov dword [esp + 0x8bc], eax
mov eax, dword [esp + 0xb4]
mov dword [esp + 0x8c0], eax
mov eax, dword [esp + 0xc0]
mov dword [esp + 0x8c4], eax
mov dword [esp + 0x690], 0
mov dword [esp + 0x694], 0
lea eax, [0x6ba9e0]
mov dword [esp], eax
lea ecx, [esp + 0x8bc]
mov dword [esp + 4], ecx
call fcn.0040bd80
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x690], eax
mov dword [esp + 0x694], ecx
mov eax, dword [0x9b861c]
mov dword [esp], eax
lea eax, [esp + 0x690]
mov dword [esp + 4], eax
mov dword [esp + 8], 1
mov dword [esp + 0xc], 1
call fcn.00554610
mov eax, dword [esp + 0x8c]
inc eax
jmp 0x662c12
call fcn.006093b0
mov eax, dword [esp]
mov ecx, dword [esp + 4]
mov dword [esp + 0x6b8], eax
mov dword [esp + 0x6bc], ecx
mov eax, dword [esp + 0x8c]
mov dword [esp], eax
call fcn.00465390
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp], 0
mov edx, dword [esp + 0x2a4]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0x100]
mov dword [esp + 8], ebx
lea ebp, [0x71f9e5]
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], 0xb
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], ecx
lea eax, [0x7301bd]
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], 0x28
call fcn.0043c110
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x24]
mov dword [esp + 0x6b0], ecx
mov dword [esp + 0x6b4], eax
mov dword [esp + 0x9c8], 0
mov dword [esp + 0x9cc], 0
mov dword [esp + 0x9d0], 0
mov dword [esp + 0x9d4], 0
lea eax, [0x6cae00]
mov dword [esp], eax
lea ecx, [esp + 0x6b8]
mov dword [esp + 4], ecx
call fcn.0040bcf0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x9c8], eax
mov dword [esp + 0x9cc], ecx
lea eax, [0x6cae00]
mov dword [esp], eax
lea ecx, [esp + 0x6b0]
mov dword [esp + 4], ecx
call fcn.0040bcf0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
mov dword [esp + 0x9d0], ecx
mov dword [esp + 0x9d4], eax
mov eax, dword [0x9b861c]
mov dword [esp], eax
lea eax, [esp + 0x9c8]
mov dword [esp + 4], eax
mov dword [esp + 8], 2
mov dword [esp + 0xc], 2
call fcn.00554610
mov eax, dword [esp + 0x24c]
mov dword [esp + 0x8c8], eax
mov eax, dword [esp + 0xb4]
mov dword [esp + 0x8cc], eax
mov eax, dword [esp + 0xc0]
mov dword [esp + 0x8d0], eax
mov dword [esp + 0x6a8], 0
mov dword [esp + 0x6ac], 0
lea eax, [0x6ba9e0]
mov dword [esp], eax
lea ecx, [esp + 0x8c8]
mov dword [esp + 4], ecx
call fcn.0040bd80
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x6a8], eax
mov dword [esp + 0x6ac], ecx
mov eax, dword [0x9b861c]
mov dword [esp], eax
lea eax, [esp + 0x6a8]
mov dword [esp + 4], eax
mov dword [esp + 8], 1
mov dword [esp + 0xc], 1
call fcn.00554610
mov eax, dword [esp + 0x8c]
inc eax
jmp 0x662c12
cmp eax, 3
jne 0x6646f1
movzx edx, word [ecx]
cmp dx, 0x4252
jne 0x6646f1
movzx edx, byte [ecx + 2]
cmp dl, 0x48
jne 0x6646f1
mov edx, dword [esp + 0xec]
jmp 0x6634c6
mov ecx, dword [esp + 0x23ec]
mov edx, eax
mov eax, dword [esp + 0x23f0]
mov ebx, dword [esp + 0x2a0]
mov ebp, dword [ebx + 4]
cmp edx, ebp
jge 0x662253
movzx ebp, word [ebx + 8]
movzx esi, word [ebx + 0xa]
imul esi, edx
lea edi, [ebp + esi]
mov ecx, dword [ebx + 0x6c]
lea ebp, [esi + ebp + 1]
mov esi, dword [ebx + 0x70]
mov eax, dword [ebx + 0x68]
cmp ebp, ecx
jg 0x663523
cmp edi, ebp
ja 0x665f76
cmp ebp, esi
ja 0x665f76
sub esi, edi
xchg esi, ebx
neg ebx
xchg esi, ebx
sar esi, 0x1f
and edi, esi
movzx eax, byte [eax + edi]
cmp al, 0x2a
jne 0x663523
lea eax, [edx + 1]
jmp 0x6634b6
mov dword [esp + 0x98], edx
mov dword [esp], ebx
mov dword [esp + 4], edx
call fcn.00623210
mov eax, dword [esp + 0x10]
mov dword [esp + 0xc8], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0xa0], ecx
mov edx, dword [esp + 8]
mov dword [esp + 0x250], edx
movzx ebx, byte [esp + 0x23f4]
test bl, bl
jne 0x66467e
test ecx, ecx
jbe 0x665f68
mov ebp, dword [edx + 4]
cmp ebp, 8
jne 0x66448a
xor eax, eax
jmp 0x663588
inc eax
movzx ebx, byte [esp + 0x23f4]
cmp eax, ecx
jge 0x6637ac
lea ebp, [edx + eax*8 + 4]
lea esi, [edx + eax*8]
mov edi, dword [esi + 4]
mov ebx, dword [esi]
mov dword [esp + 0x234], ebx
mov ebx, dword [esp + 0xfc]
cmp eax, ebx
jae 0x665f61
mov dword [esp + 0x7c], edi
mov dword [esp + 0x4c], eax
imul eax, eax, 0x2c
mov edi, dword [esp + 0x284]
movzx ebx, byte [eax + edi + 8]
cmp bl, 0x4e
je 0x663654
movzx eax, byte [eax + edi + 8]
cmp al, 0x4e
jne 0x66364e
mov eax, dword [esp + 0x4c]
cmp eax, ecx
jae 0x665f53
mov ebx, dword [esi + 4]
test ebx, ebx
jne 0x663643
mov dword [ebp], 4
mov ebx, dword [0x9cadb0]
test ebx, ebx
jne 0x66360d
lea ebx, [0x71a63a]
mov dword [esi], ebx
jmp 0x66357f
mov dword [esp], esi
lea eax, [0x71a63a]
mov dword [esp + 4], eax
call fcn.0040ecd0
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0xa0]
mov edx, dword [esp + 0x250]
lea ebx, [0x71a63a]
mov edi, dword [esp + 0x284]
jmp 0x66357f
lea ebx, [0x71a63a]
jmp 0x66357f
mov eax, dword [esp + 0x4c]
jmp 0x663643
mov dword [esp + 0x2f8], ebp
mov dword [esp + 0x2fc], esi
mov dword [esp + 0x14c], eax
movzx ecx, byte [eax + edi + 9]
lea edx, [0x719e8b]
mov dword [esp], edx
mov dword [esp + 4], 1
mov dword [esp + 8], ecx
call fcn.004b15b0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x7c]
cmp ecx, edx
je 0x6636c7
mov eax, dword [esp + 0x14c]
mov ecx, dword [esp + 0xa0]
mov edx, dword [esp + 0x250]
mov ebp, dword [esp + 0x2f8]
mov esi, dword [esp + 0x2fc]
mov edi, dword [esp + 0x284]
jmp 0x6635d2
mov ecx, dword [esp + 0x234]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], edx
call fcn.0044c4d0
movzx eax, byte [esp + 0xc]
test al, al
je 0x66377d
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0xa0]
cmp eax, ecx
jae 0x665f5a
mov edx, dword [esp + 0x2f8]
mov dword [edx], 1
mov ebx, dword [0x9cadb0]
test ebx, ebx
jne 0x663743
lea ebx, [0x719e91]
mov ebp, dword [esp + 0x2fc]
mov dword [ebp], ebx
mov eax, dword [esp + 0x14c]
mov esi, ebp
mov edi, dword [esp + 0x284]
mov ebp, edx
mov edx, dword [esp + 0x250]
jmp 0x6635d2
mov eax, dword [esp + 0x2fc]
mov dword [esp], eax
lea ecx, [0x719e91]
mov dword [esp + 4], ecx
call fcn.0040ecd0
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0xa0]
mov edx, dword [esp + 0x2f8]
lea ebx, [0x719e91]
mov ebp, dword [esp + 0x2fc]
jmp 0x663725
mov eax, dword [esp + 0x14c]
mov ecx, dword [esp + 0xa0]
mov edx, dword [esp + 0x250]
mov ebp, dword [esp + 0x2f8]
mov esi, dword [esp + 0x2fc]
mov edi, dword [esp + 0x284]
jmp 0x6635d2
cmp ecx, 5
jbe 0x665f4c
mov eax, dword [edx + 0x28]
mov ecx, dword [edx + 0x2c]
mov dword [esp], eax
mov dword [esp + 4], ecx
lea eax, [0x719e88]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
lea ecx, [0x719ede]
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], 2
mov dword [esp + 0x18], 0xffffffff
call fcn.004b2060
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x250]
mov dword [edx + 0x2c], ecx
mov ecx, dword [0x9cadb0]
lea ebx, [edx + 0x28]
test ecx, ecx
jne 0x664472
mov dword [edx + 0x28], eax
mov eax, dword [esp + 0xa0]
cmp eax, 0xf
jbe 0x665f45
mov eax, dword [edx + 0x78]
mov ecx, dword [edx + 0x7c]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x20
call fcn.0045ed90
movsd xmm0, qword [esp + 0xc]
mov eax, dword [esp + 0xa0]
cmp eax, 0x10
jbe 0x665f3e
movsd qword [esp + 0x150], xmm0
mov eax, dword [esp + 0x250]
mov ecx, dword [eax + 0x80]
mov edx, dword [eax + 0x84]
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], 0x20
call fcn.0045ed90
movsd xmm0, qword [esp + 0xc]
mov eax, dword [esp + 0xa0]
cmp eax, 0x12
jbe 0x665f37
movsd qword [esp + 0x160], xmm0
mov eax, dword [esp + 0x250]
mov ecx, dword [eax + 0x94]
mov edx, dword [eax + 0x90]
mov dword [esp], edx
mov dword [esp + 4], ecx
call fcn.004600c0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xa0]
cmp ecx, 0x13
jbe 0x665f30
mov dword [esp + 0xf0], eax
mov eax, dword [esp + 0x250]
mov ecx, dword [eax + 0x9c]
mov edx, dword [eax + 0x98]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x20
call fcn.0045ed90
movsd xmm0, qword [esp + 0xc]
movsd qword [esp + 0x158], xmm0
mov eax, dword [esp + 0x250]
mov ecx, dword [eax + 0x90]
mov edx, dword [eax + 0x94]
mov dword [esp], ecx
mov dword [esp + 4], edx
call fcn.004600c0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x250]
mov edx, dword [ecx + 0x38]
mov ebx, dword [ecx + 0x3c]
test ebx, ebx
jne 0x66441b
mov edx, 4
lea ebx, [0x71a63a]
mov dword [esp + 0x64], edx
mov dword [esp + 0x224], ebx
movsd xmm0, qword [esp + 0x150]
movsd xmm1, qword [esp + 0x158]
movsd xmm2, xmm0
subsd xmm0, xmm1
cvttsd2si ebp, xmm0
mov esi, dword [esp + 0xf0]
test esi, esi
jle 0x664409
xorps xmm0, xmm0
ucomisd xmm1, xmm0
jbe 0x6643f7
cmp edx, 4
je 0x6643d7
imul ebp, esi
mov eax, 5
lea esi, [0x71ac44]
mov edi, 1
mov dword [esp + 0x60], eax
mov dword [esp + 0x220], esi
mov dword [esp + 0xe8], ebp
mov dword [esp + 0xd8], edi
movsd xmm0, qword [esp + 0x160]
subsd xmm2, xmm0
cvttsd2si ecx, xmm2
mov dword [esp + 0x14c], ecx
mov dword [esp], ecx
call fcn.00465390
mov eax, dword [esp + 4]
mov dword [esp + 0x310], eax
mov ecx, dword [esp + 8]
mov dword [esp + 0x148], ecx
mov edx, dword [esp + 0xe8]
mov dword [esp], edx
call fcn.00465390
mov eax, dword [esp + 4]
mov dword [esp + 0x2e8], eax
mov ecx, dword [esp + 8]
mov dword [esp + 0x140], ecx
mov edx, dword [esp + 0xd8]
mov dword [esp], edx
call fcn.00465390
mov eax, dword [esp + 4]
mov dword [esp + 0x2e4], eax
mov ecx, dword [esp + 8]
mov dword [esp + 0x13c], ecx
mov edx, dword [esp + 0x14c]
mov dword [esp], edx
call fcn.00465390
mov eax, dword [esp + 8]
mov dword [esp + 0x14c], eax
mov ecx, dword [esp + 4]
mov dword [esp + 0x2e0], ecx
mov edx, dword [esp + 0xd8]
mov dword [esp], edx
call fcn.00465390
mov eax, dword [esp + 8]
mov dword [esp + 0x138], eax
mov ecx, dword [esp + 4]
mov dword [esp + 0x2dc], ecx
mov edx, dword [esp + 0xe8]
mov dword [esp], edx
call fcn.00465390
mov eax, dword [esp + 8]
mov ecx, dword [esp + 4]
lea edi, [esp + 0x20dc]
lea esi, [0x7a6b80]
mov edx, ecx
mov ecx, 0xba
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [0x9b8614]
mov ebx, dword [ecx + 0x88]
mov ecx, dword [ecx + 0x84]
mov dword [esp + 0x20e4], ecx
mov dword [esp + 0x20e8], ebx
mov ecx, dword [esp + 0x250]
mov ebx, dword [ecx + 0x18]
mov ebp, dword [ecx + 0x1c]
mov dword [esp + 0x20f8], ebp
mov dword [esp + 0x20f4], ebx
mov ebx, dword [0x9b8614]
mov ebp, dword [ebx + 0x88]
mov ebx, dword [ebx + 0x84]
mov dword [esp + 0x2108], ebp
mov dword [esp + 0x2104], ebx
mov ebx, dword [ecx + 0x20]
mov ebp, dword [ecx + 0x24]
mov dword [esp + 0x2118], ebp
mov dword [esp + 0x2114], ebx
mov ebx, dword [0x9b8614]
mov ebp, dword [ebx + 0x88]
mov ebx, dword [ebx + 0x84]
mov dword [esp + 0x2128], ebp
mov dword [esp + 0x2124], ebx
mov ebx, dword [ecx + 0x14]
mov ebp, dword [ecx + 0x10]
mov dword [esp + 0x2138], ebx
mov dword [esp + 0x2134], ebp
mov ebx, dword [0x9b8614]
mov ebp, dword [ebx + 0x88]
mov ebx, dword [ebx + 0x84]
mov dword [esp + 0x2148], ebp
mov dword [esp + 0x2144], ebx
mov ebx, dword [ecx + 0x14]
mov ebp, dword [ecx + 0x10]
mov dword [esp + 0x2158], ebx
mov dword [esp + 0x2154], ebp
mov ebx, dword [esp + 0x23fc]
mov dword [esp + 0x2160], ebx
mov ebp, dword [esp + 0x23f8]
mov dword [esp + 0x215c], ebp
mov esi, dword [ecx + 0x18]
mov edi, dword [ecx + 0x1c]
mov dword [esp + 0x2170], edi
mov dword [esp + 0x216c], esi
mov esi, dword [ecx + 0x20]
mov edi, dword [ecx + 0x24]
mov dword [esp + 0x2180], edi
mov dword [esp + 0x217c], esi
mov esi, dword [ecx + 0x2c]
mov edi, dword [ecx + 0x28]
mov dword [esp + 0x2190], esi
mov dword [esp + 0x218c], edi
mov esi, dword [ecx + 0x44]
mov edi, dword [ecx + 0x40]
mov dword [esp + 0x21a0], esi
mov dword [esp + 0x219c], edi
mov esi, dword [ecx + 0x34]
mov edi, dword [ecx + 0x30]
mov dword [esp + 0x21b0], esi
mov dword [esp + 0x21ac], edi
mov esi, dword [esp + 0x64]
mov dword [esp + 0x21c0], esi
mov edi, dword [esp + 0x224]
mov dword [esp + 0x21bc], edi
mov ebp, dword [ecx + 0x48]
mov ebx, dword [ecx + 0x4c]
mov dword [esp + 0x21d0], ebx
mov dword [esp + 0x21cc], ebp
mov ebx, dword [ecx + 0x54]
mov ebp, dword [ecx + 0x50]
mov dword [esp + 0x21e0], ebx
mov dword [esp + 0x21dc], ebp
mov ebx, dword [ecx + 0x58]
mov ebp, dword [ecx + 0x5c]
mov dword [esp + 0x21f0], ebp
mov dword [esp + 0x21ec], ebx
mov ebx, dword [ecx + 0x70]
mov ebp, dword [ecx + 0x74]
mov dword [esp + 0x2200], ebp
mov dword [esp + 0x21fc], ebx
mov ebx, dword [ecx + 0x78]
mov ebp, dword [ecx + 0x7c]
mov dword [esp + 0x2210], ebp
mov dword [esp + 0x220c], ebx
mov ebx, dword [esp + 0x148]
mov dword [esp + 0x2220], ebx
mov ebx, dword [esp + 0x310]
mov dword [esp + 0x221c], ebx
mov ebx, dword [esp + 0x140]
mov dword [esp + 0x2230], ebx
mov ebx, dword [esp + 0x2e8]
mov dword [esp + 0x222c], ebx
mov ebx, dword [esp + 0x60]
mov dword [esp + 0x2240], ebx
mov ebp, dword [esp + 0x220]
mov dword [esp + 0x223c], ebp
mov ebp, dword [esp + 0x13c]
mov dword [esp + 0x2250], ebp
mov ebp, dword [esp + 0x2e4]
mov dword [esp + 0x224c], ebp
mov ebp, dword [ecx + 0x88]
mov ebx, dword [ecx + 0x8c]
mov dword [esp + 0x2260], ebx
mov dword [esp + 0x225c], ebp
mov ebx, dword [ecx + 0x90]
mov ebp, dword [ecx + 0x94]
mov dword [esp + 0x2270], ebp
mov dword [esp + 0x226c], ebx
mov ebx, dword [esp + 0xa0]
cmp ebx, 0x14
jbe 0x665f29
mov ebx, dword [ecx + 0xa4]
mov ebp, dword [ecx + 0xa0]
mov dword [esp + 0x2280], ebx
mov dword [esp + 0x227c], ebp
mov ebx, dword [0x9b8614]
mov ebp, dword [ebx + 0x84]
mov ebx, dword [ebx + 0x88]
mov dword [esp + 0x2290], ebx
mov dword [esp + 0x228c], ebp
mov ebx, dword [ecx + 0x18]
mov ebp, dword [ecx + 0x1c]
mov dword [esp + 0x22a0], ebp
mov dword [esp + 0x229c], ebx
mov ebx, dword [ecx + 0x20]
mov ebp, dword [ecx + 0x24]
mov dword [esp + 0x22b0], ebp
mov dword [esp + 0x22ac], ebx
mov ebx, dword [ecx + 0x34]
mov ebp, dword [ecx + 0x30]
mov dword [esp + 0x22c0], ebx
mov dword [esp + 0x22bc], ebp
mov dword [esp + 0x22d0], esi
mov dword [esp + 0x22cc], edi
mov ebx, dword [ecx + 0x7c]
mov ebp, dword [ecx + 0x78]
mov dword [esp + 0x22e0], ebx
mov dword [esp + 0x22dc], ebp
mov ebx, dword [ecx + 0x44]
mov ebp, dword [ecx + 0x40]
mov dword [esp + 0x22f0], ebx
mov dword [esp + 0x22ec], ebp
mov ebx, dword [ecx + 0x4c]
mov ebp, dword [ecx + 0x48]
mov dword [esp + 0x2300], ebx
mov dword [esp + 0x22fc], ebp
mov ebx, dword [ecx + 0x54]
mov ebp, dword [ecx + 0x50]
mov dword [esp + 0x2310], ebx
mov dword [esp + 0x230c], ebp
mov ebx, dword [ecx + 0x58]
mov ebp, dword [ecx + 0x5c]
mov dword [esp + 0x2320], ebp
mov dword [esp + 0x231c], ebx
mov ebx, dword [ecx + 0x74]
mov ebp, dword [ecx + 0x70]
mov dword [esp + 0x2330], ebx
mov dword [esp + 0x232c], ebp
mov ebx, dword [ecx + 0x94]
mov ebp, dword [ecx + 0x90]
mov dword [esp + 0x2340], ebx
mov dword [esp + 0x233c], ebp
mov ebx, dword [ecx + 0xa0]
mov ebp, dword [ecx + 0xa4]
mov dword [esp + 0x2350], ebp
mov dword [esp + 0x234c], ebx
mov ebx, dword [ecx + 0x8c]
mov ebp, dword [ecx + 0x88]
mov dword [esp + 0x2360], ebx
mov dword [esp + 0x235c], ebp
mov ebx, dword [esp + 0x14c]
mov dword [esp + 0x2370], ebx
mov ebx, dword [esp + 0x2e0]
mov dword [esp + 0x236c], ebx
mov ebx, dword [esp + 0x138]
mov dword [esp + 0x2380], ebx
mov ebx, dword [esp + 0x2dc]
mov dword [esp + 0x237c], ebx
mov dword [esp + 0x2390], eax
mov dword [esp + 0x238c], edx
mov eax, dword [esp + 0x60]
mov dword [esp + 0x23a0], eax
mov eax, dword [esp + 0x220]
mov dword [esp + 0x239c], eax
mov eax, dword [ecx + 0x14]
mov edx, dword [ecx + 0x10]
mov dword [esp + 0x23b0], eax
mov dword [esp + 0x23ac], edx
mov eax, dword [esp + 0x23fc]
mov dword [esp + 0x23b8], eax
mov edx, dword [esp + 0x23f8]
mov dword [esp + 0x23b4], edx
mov dword [esp], 0
lea ebx, [esp + 0x20dc]
mov dword [esp + 4], ebx
mov dword [esp + 8], 0x5d
mov dword [esp + 0xc], 0x5d
call fcn.0043be60
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
movzx edx, byte [esp + 0x23f4]
test dl, dl
jne 0x6641c8
mov dword [esp + 0x118], eax
mov dword [esp + 0x2b8], ecx
mov edx, dword [esp + 0x2a8]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
call fcn.005f3dd0
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x24]
test eax, eax
je 0x6641a0
mov dword [esp + 0x28c], eax
mov dword [esp + 0x29c], ecx
mov edx, dword [eax + 0x10]
mov dword [esp], ecx
call edx
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp], 0
lea edx, [0x737ff8]
mov dword [esp + 4], edx
mov dword [esp + 8], 0x49
mov ebx, dword [esp + 0x2b8]
mov dword [esp + 0xc], ebx
mov ebp, dword [esp + 0x118]
mov dword [esp + 0x10], ebp
lea esi, [0x719eac]
mov dword [esp + 0x14], esi
mov dword [esp + 0x18], 1
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], ecx
call fcn.0043c110
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x668], eax
mov dword [esp + 0x66c], ecx
mov dword [esp + 0x670], 0
mov dword [esp + 0x674], 0
lea eax, [0x6cae00]
mov dword [esp], eax
lea ecx, [esp + 0x668]
mov dword [esp + 4], ecx
call fcn.0040bcf0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x670], eax
mov dword [esp + 0x674], ecx
lea eax, [esp + 0x670]
mov dword [esp], eax
mov dword [esp + 4], 1
mov dword [esp + 8], 1
call fcn.004a3000
mov eax, dword [esp + 0x28c]
mov eax, dword [eax + 0x10]
mov ecx, dword [esp + 0x29c]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp], 0
lea edx, [0x737ff8]
mov dword [esp + 4], edx
mov dword [esp + 8], 0x49
mov ebx, dword [esp + 0x2b8]
mov dword [esp + 0xc], ebx
mov ebx, dword [esp + 0x118]
mov dword [esp + 0x10], ebx
lea ebx, [0x719eac]
mov dword [esp + 0x14], ebx
mov dword [esp + 0x18], 1
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], ecx
call fcn.0043c110
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x24]
mov dword [esp + 0x658], ecx
mov dword [esp + 0x65c], eax
mov dword [esp + 0x660], 0
mov dword [esp + 0x664], 0
lea eax, [0x6cae00]
mov dword [esp], eax
lea ecx, [esp + 0x658]
mov dword [esp + 4], ecx
call fcn.0040bcf0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x660], eax
mov dword [esp + 0x664], ecx
mov eax, dword [0x9b8620]
mov dword [esp], eax
lea eax, [esp + 0x660]
mov dword [esp + 4], eax
mov dword [esp + 8], 1
mov dword [esp + 0xc], 1
call fcn.00554610
mov eax, dword [esp + 0x98]
inc eax
mov ebx, dword [esp + 0x2a0]
jmp 0x6634b6
mov dword [esp], 0x1c9c380
mov dword [esp + 4], 0
call fcn.0043f8c0
mov eax, dword [esp + 0x98]
inc eax
mov ebx, dword [esp + 0x2a0]
jmp 0x6634b6
lea edi, [esp + 0x1d3c]
lea esi, [0x7a3f00]
call fcn.0044ca44
mov eax, dword [0x9b8614]
mov ecx, dword [eax + 0x88]
mov eax, dword [eax + 0x84]
mov dword [esp + 0x1d44], eax
mov dword [esp + 0x1d48], ecx
mov eax, dword [esp + 0x250]
mov ecx, dword [eax + 4]
mov edx, dword [eax]
mov dword [esp + 0x1d58], ecx
mov dword [esp + 0x1d54], edx
mov ecx, dword [eax + 0x10]
mov edx, dword [eax + 0x14]
mov dword [esp + 0x1d68], edx
mov dword [esp + 0x1d64], ecx
mov ecx, dword [eax + 0x40]
mov edx, dword [eax + 0x44]
mov dword [esp + 0x1d78], edx
mov dword [esp + 0x1d74], ecx
mov ecx, dword [eax + 0x4c]
mov edx, dword [eax + 0x48]
mov dword [esp + 0x1d88], ecx
mov dword [esp + 0x1d84], edx
mov ecx, dword [eax + 0x50]
mov edx, dword [eax + 0x54]
mov dword [esp + 0x1d98], edx
mov dword [esp + 0x1d94], ecx
mov ecx, dword [eax + 0x58]
mov edx, dword [eax + 0x5c]
mov dword [esp + 0x1da8], edx
mov dword [esp + 0x1da4], ecx
mov ecx, dword [0x9b8614]
mov edx, dword [ecx + 0x88]
mov ecx, dword [ecx + 0x84]
mov dword [esp + 0x1db8], edx
mov dword [esp + 0x1db4], ecx
mov ecx, dword [esp + 0x128]
mov dword [esp + 0x1dc8], ecx
mov edx, dword [esp + 0x2cc]
mov dword [esp + 0x1dc4], edx
mov ebx, dword [eax]
mov ebp, dword [eax + 4]
mov dword [esp + 0x1dd8], ebp
mov dword [esp + 0x1dd4], ebx
mov ebx, dword [eax + 0xc]
mov ebp, dword [eax + 8]
mov dword [esp + 0x1de8], ebx
mov dword [esp + 0x1de4], ebp
mov ebx, dword [eax + 0x10]
mov ebp, dword [eax + 0x14]
mov dword [esp + 0x1df8], ebp
mov dword [esp + 0x1df4], ebx
mov ebx, dword [eax + 0x28]
mov ebp, dword [eax + 0x2c]
mov dword [esp + 0x1e08], ebp
mov dword [esp + 0x1e04], ebx
mov ebx, dword [eax + 0x30]
mov ebp, dword [eax + 0x34]
mov dword [esp + 0x1e18], ebp
mov dword [esp + 0x1e14], ebx
mov ebx, dword [eax + 0x40]
mov ebp, dword [eax + 0x44]
mov dword [esp + 0x1e28], ebp
mov dword [esp + 0x1e24], ebx
mov ebx, dword [eax + 0x48]
mov ebp, dword [eax + 0x4c]
mov dword [esp + 0x1e38], ebp
mov dword [esp + 0x1e34], ebx
mov ebx, dword [eax + 0x50]
mov ebp, dword [eax + 0x54]
mov dword [esp + 0x1e48], ebp
mov dword [esp + 0x1e44], ebx
mov ebx, dword [eax + 0x58]
mov ebp, dword [eax + 0x5c]
mov dword [esp + 0x1e58], ebp
mov dword [esp + 0x1e54], ebx
mov ebx, dword [eax + 0x60]
mov ebp, dword [eax + 0x64]
mov dword [esp + 0x1e68], ebp
mov dword [esp + 0x1e64], ebx
mov ebx, dword [eax + 0x68]
mov ebp, dword [eax + 0x6c]
mov dword [esp + 0x1e78], ebp
mov dword [esp + 0x1e74], ebx
mov ebx, dword [eax + 0x78]
mov eax, dword [eax + 0x7c]
mov dword [esp + 0x1e88], eax
mov dword [esp + 0x1e84], ebx
mov dword [esp], 0
lea eax, [esp + 0x1d3c]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x2b
mov dword [esp + 0xc], 0x2b
call fcn.0043be60
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x14]
jmp 0x663f69
mov edi, dword [ebx]
cmp edi, 0x4c4c554e
jne 0x6639a9
lea esi, [0x71a512]
mov edi, eax
mov eax, 4
jmp 0x6639bc
lea esi, [0x71a512]
mov edi, eax
mov eax, 4
jmp 0x6639bc
lea esi, [0x71a512]
mov edi, eax
mov eax, 4
jmp 0x6639bc
mov dword [esp + 0x134], eax
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ebx
lea eax, [esp + 0x1b0]
mov dword [esp], eax
lea eax, [0x719e88]
mov dword [esp + 4], eax
mov dword [esp + 8], 1
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], 1
call fcn.0043c0b0
mov edx, dword [esp + 0x20]
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0x134]
mov ecx, dword [esp + 0x250]
jmp 0x66395b
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.0040ecd0
mov edx, dword [esp + 0x250]
jmp 0x663819
call fcn.006093b0
mov eax, dword [esp + 4]
mov ecx, dword [esp]
mov dword [esp + 0x688], ecx
mov dword [esp + 0x68c], eax
mov eax, dword [esp + 0x98]
mov dword [esp], eax
call fcn.00465390
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp], 0
mov edx, dword [esp + 0x2a4]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0x100]
mov dword [esp + 8], ebx
lea ebp, [0x71f9e5]
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], 0xb
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], ecx
lea eax, [0x730a56]
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], 0x29
call fcn.0043c110
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x24]
mov dword [esp + 0x680], ecx
mov dword [esp + 0x684], eax
mov dword [esp + 0x9a8], 0
mov dword [esp + 0x9ac], 0
mov dword [esp + 0x9b0], 0
mov dword [esp + 0x9b4], 0
lea eax, [0x6cae00]
mov dword [esp], eax
lea ecx, [esp + 0x688]
mov dword [esp + 4], ecx
call fcn.0040bcf0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x9a8], eax
mov dword [esp + 0x9ac], ecx
lea eax, [0x6cae00]
mov dword [esp], eax
lea ecx, [esp + 0x680]
mov dword [esp + 4], ecx
call fcn.0040bcf0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x9b0], eax
mov dword [esp + 0x9b4], ecx
mov eax, dword [0x9b861c]
mov dword [esp], eax
lea eax, [esp + 0x9a8]
mov dword [esp + 4], eax
mov dword [esp + 8], 2
mov dword [esp + 0xc], 2
call fcn.00554610
mov eax, dword [esp + 0x250]
mov dword [esp + 0x8b0], eax
mov eax, dword [esp + 0xa0]
mov dword [esp + 0x8b4], eax
mov eax, dword [esp + 0xc8]
mov dword [esp + 0x8b8], eax
mov dword [esp + 0x678], 0
mov dword [esp + 0x67c], 0
lea eax, [0x6ba9e0]
mov dword [esp], eax
lea ecx, [esp + 0x8b0]
mov dword [esp + 4], ecx
call fcn.0040bd80
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x678], eax
mov dword [esp + 0x67c], ecx
mov eax, dword [0x9b861c]
mov dword [esp], eax
lea eax, [esp + 0x678]
mov dword [esp + 4], eax
mov dword [esp + 8], 1
mov dword [esp + 0xc], 1
call fcn.00554610
mov eax, dword [esp + 0x98]
inc eax
mov ebx, dword [esp + 0x2a0]
jmp 0x6634b6
cmp ecx, 0x15
jbe 0x665f6f
mov eax, dword [edx + 0xac]
mov ecx, dword [edx + 0xa8]
mov dword [esp], ecx
mov dword [esp + 4], eax
lea eax, [0x719ea6]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
call fcn.004b0480
mov eax, dword [esp + 0x10]
test eax, eax
jge 0x6646cf
mov ecx, dword [esp + 0x98]
lea eax, [ecx + 1]
mov ebx, dword [esp + 0x2a0]
jmp 0x6634b6
mov eax, dword [esp + 0xc8]
mov ecx, dword [esp + 0xa0]
mov edx, dword [esp + 0x250]
movzx ebx, byte [esp + 0x23f4]
jmp 0x663567
mov edx, dword [esp + 0xec]
jmp 0x66470a
mov ecx, dword [esp + 0x23ec]
mov edx, eax
mov eax, dword [esp + 0x23f0]
mov ebx, dword [esp + 0x2a0]
mov ebp, dword [ebx + 4]
cmp edx, ebp
jge 0x662253
movzx ebp, word [ebx + 8]
movzx esi, word [ebx + 0xa]
imul esi, edx
lea edi, [esi + ebp]
mov ecx, dword [ebx + 0x68]
mov eax, dword [ebx + 0x6c]
lea ebp, [esi + ebp + 1]
mov esi, dword [ebx + 0x70]
cmp ebp, eax
jg 0x664766
cmp edi, ebp
ja 0x665f22
cmp ebp, esi
ja 0x665f22
sub esi, edi
xchg esi, ebx
neg ebx
xchg esi, ebx
sar esi, 0x1f
and edi, esi
movzx eax, byte [ecx + edi]
cmp al, 0x2a
jne 0x664766
lea eax, [edx + 1]
jmp 0x6646fa
mov dword [esp + 0x94], edx
mov dword [esp], ebx
mov dword [esp + 4], edx
call fcn.00623210
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0xc]
test edx, edx
jbe 0x665f1b
mov dword [esp + 0xd4], eax
mov dword [esp + 0x260], ecx
mov dword [esp + 0xb8], edx
mov eax, dword [ecx]
mov edx, dword [ecx + 4]
mov dword [esp], eax
mov dword [esp + 4], edx
call fcn.004600c0
mov eax, dword [esp + 0xc]
test eax, eax
jne 0x66497b
xor eax, eax
jmp 0x6647ca
mov ebp, dword [esp + 0x3c]
lea eax, [ebp + 1]
mov ecx, dword [esp + 0xb8]
cmp eax, ecx
jge 0x66493e
mov edx, dword [esp + 0x260]
lea ebx, [edx + eax*8]
mov dword [esp + 0x2fc], ebx
mov ebp, dword [ebx + 4]
lea esi, [edx + eax*8 + 4]
mov edi, dword [ebx]
mov ebx, dword [esp + 0xfc]
cmp eax, ebx
jae 0x665f14
mov dword [esp + 0x2f8], esi
mov dword [esp + 0x23c], edi
mov dword [esp + 0x3c], eax
imul eax, eax, 0x2c
mov esi, dword [esp + 0x284]
movzx edi, byte [eax + esi + 8]
xchg edi, eax
cmp al, 0x4e
xchg edi, eax
jne 0x6647c3
mov dword [esp + 0x6c], ebp
movzx eax, byte [eax + esi + 9]
lea ecx, [0x719e8b]
mov dword [esp], ecx
mov dword [esp + 4], 1
mov dword [esp + 8], eax
call fcn.004b15b0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x6c]
cmp eax, edx
je 0x66487e
mov ecx, dword [esp + 0xb8]
mov edx, dword [esp + 0x260]
mov ebx, dword [esp + 0xfc]
mov esi, dword [esp + 0x284]
jmp 0x6647c3
mov eax, dword [esp + 0x23c]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.0044c4d0
movzx eax, byte [esp + 0xc]
test al, al
je 0x66491d
mov eax, dword [esp + 0x3c]
mov ecx, dword [esp + 0xb8]
cmp eax, ecx
jae 0x665f0d
mov edx, dword [esp + 0x2f8]
mov dword [edx], 1
mov edx, dword [0x9cadb0]
test edx, edx
jne 0x6648f1
lea edx, [0x719e91]
mov ebx, dword [esp + 0x2fc]
mov dword [ebx], edx
mov edx, dword [esp + 0x260]
mov ebx, dword [esp + 0xfc]
mov esi, dword [esp + 0x284]
jmp 0x6647c3
mov eax, dword [esp + 0x2fc]
mov dword [esp], eax
lea eax, [0x719e91]
mov dword [esp + 4], eax
call fcn.0040ecd0
mov eax, dword [esp + 0x3c]
mov ecx, dword [esp + 0xb8]
lea edx, [0x719e91]
jmp 0x6648d7
mov ecx, dword [esp + 0xb8]
mov edx, dword [esp + 0x260]
mov ebx, dword [esp + 0xfc]
mov esi, dword [esp + 0x284]
jmp 0x6647c3
lea eax, [esp + 0x898]
mov dword [esp], eax
mov edx, dword [esp + 0x260]
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov ecx, dword [esp + 0xd4]
mov dword [esp + 0xc], ecx
call fcn.00609cf0
mov eax, dword [esp + 0x94]
inc eax
mov ebx, dword [esp + 0x2a0]
jmp 0x6646fa
call fcn.006093b0
mov eax, dword [esp]
mov ecx, dword [esp + 4]
mov dword [esp + 0x650], eax
mov dword [esp + 0x654], ecx
mov eax, dword [esp + 0x94]
mov dword [esp], eax
call fcn.00465390
mov eax, dword [esp + 8]
mov ecx, dword [esp + 4]
mov dword [esp], 0
mov edx, dword [esp + 0x2a4]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0x100]
mov dword [esp + 8], ebx
lea ebp, [0x71f9e5]
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], 0xb
mov dword [esp + 0x14], ecx
mov dword [esp + 0x18], eax
lea eax, [0x72dc08]
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], 0x22
call fcn.0043c110
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x24]
mov dword [esp + 0x648], ecx
mov dword [esp + 0x64c], eax
mov dword [esp + 0x998], 0
mov dword [esp + 0x99c], 0
mov dword [esp + 0x9a0], 0
mov dword [esp + 0x9a4], 0
lea eax, [0x6cae00]
mov dword [esp], eax
lea ecx, [esp + 0x650]
mov dword [esp + 4], ecx
call fcn.0040bcf0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
mov dword [esp + 0x998], ecx
mov dword [esp + 0x99c], eax
lea eax, [0x6cae00]
mov dword [esp], eax
lea ecx, [esp + 0x648]
mov dword [esp + 4], ecx
call fcn.0040bcf0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x9a0], eax
mov dword [esp + 0x9a4], ecx
mov eax, dword [0x9b861c]
mov dword [esp], eax
lea eax, [esp + 0x998]
mov dword [esp + 4], eax
mov dword [esp + 8], 2
mov dword [esp + 0xc], 2
call fcn.00554610
mov eax, dword [esp + 0x260]
mov dword [esp + 0x8a4], eax
mov eax, dword [esp + 0xb8]
mov dword [esp + 0x8a8], eax
mov eax, dword [esp + 0xd4]
mov dword [esp + 0x8ac], eax
mov dword [esp + 0x640], 0
mov dword [esp + 0x644], 0
lea eax, [0x6ba9e0]
mov dword [esp], eax
lea ecx, [esp + 0x8a4]
mov dword [esp + 4], ecx
call fcn.0040bd80
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
mov dword [esp + 0x640], ecx
mov dword [esp + 0x644], eax
mov eax, dword [0x9b861c]
mov dword [esp], eax
lea eax, [esp + 0x640]
mov dword [esp + 4], eax
mov dword [esp + 8], 1
mov dword [esp + 0xc], 1
call fcn.00554610
mov eax, dword [esp + 0x94]
inc eax
mov ebx, dword [esp + 0x2a0]
jmp 0x6646fa
cmp eax, 3
jmp 0x66348c
cmp eax, 3
jmp 0x662be8
cmp eax, 3
jmp 0x66225d
cmp eax, 3
jmp 0x66225d
cmp eax, 6
jmp 0x6618c1
cmp eax, 6
jmp 0x6618c1
cmp eax, 6
jmp 0x6618c1
mov edx, dword [esp + 0xec]
jmp 0x664d6c
mov edi, dword [esp + 0x34]
lea ebx, [edi + 1]
cmp ebx, ecx
jge 0x664d39
lea ebp, [edx + ebx*8 + 4]
mov dword [esp + 0x2f8], ebp
lea esi, [edx + ebx*8]
mov dword [esp + 0x2fc], esi
mov edi, dword [esi + 4]
mov esi, dword [esi]
mov ebp, dword [esp + 0xfc]
cmp ebx, ebp
jae 0x66601e
mov dword [esp + 0x74], edi
mov dword [esp + 0x248], esi
mov dword [esp + 0x34], ebx
imul ebx, ebx, 0x2c
mov esi, dword [esp + 0x284]
movzx edi, byte [esi + ebx + 8]
xchg edi, eax
cmp al, 0x4e
xchg edi, eax
jne 0x664bb3
movzx eax, byte [esi + ebx + 9]
lea ecx, [0x719e8b]
mov dword [esp], ecx
mov dword [esp + 4], 1
mov dword [esp + 8], eax
call fcn.004b15b0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x74]
cmp eax, edx
je 0x664c67
mov eax, dword [esp + 0xd0]
mov ecx, dword [esp + 0xb0]
mov edx, dword [esp + 0x254]
mov ebp, dword [esp + 0xfc]
mov esi, dword [esp + 0x284]
jmp 0x664bb3
mov eax, dword [esp + 0x248]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.0044c4d0
movzx eax, byte [esp + 0xc]
test al, al
je 0x664d11
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0xb0]
cmp eax, ecx
jae 0x666017
mov edx, dword [esp + 0x2f8]
mov dword [edx], 1
mov edx, dword [0x9cadb0]
test edx, edx
jne 0x664ce5
lea edx, [0x719e91]
mov ebx, dword [esp + 0x2fc]
mov dword [ebx], edx
mov eax, dword [esp + 0xd0]
mov edx, dword [esp + 0x254]
mov ebp, dword [esp + 0xfc]
mov esi, dword [esp + 0x284]
jmp 0x664bb3
mov eax, dword [esp + 0x2fc]
mov dword [esp], eax
lea eax, [0x719e91]
mov dword [esp + 4], eax
call fcn.0040ecd0
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0xb0]
lea edx, [0x719e91]
jmp 0x664cc4
mov eax, dword [esp + 0xd0]
mov ecx, dword [esp + 0xb0]
mov edx, dword [esp + 0x254]
mov ebp, dword [esp + 0xfc]
mov esi, dword [esp + 0x284]
jmp 0x664bb3
lea ebx, [esp + 0x898]
mov dword [esp], ebx
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call fcn.00609cf0
mov eax, dword [esp + 0x140]
inc eax
mov ecx, dword [esp + 0x23ec]
mov edx, eax
mov eax, dword [esp + 0x23f0]
mov ebx, dword [esp + 0x2a0]
mov ebp, dword [ebx + 4]
cmp edx, ebp
jge 0x6651dd
mov dword [esp + 0x140], edx
mov dword [esp], ebx
mov dword [esp + 4], edx
call fcn.00623210
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 8]
test ecx, ecx
jbe 0x666025
mov dword [esp + 0xd0], eax
mov dword [esp + 0xb0], ecx
mov dword [esp + 0x254], edx
mov ebx, dword [edx + 4]
mov ebp, dword [edx]
cmp ebx, 5
jg 0x664ff0
je 0x664dd1
xor ebx, ebx
jmp 0x664bba
lea eax, [ebp + 3]
mov dword [esp], eax
mov dword [esp + 4], 2
call fcn.004600c0
mov eax, dword [esp + 0xc]
test eax, eax
jne 0x664e03
mov eax, dword [esp + 0xd0]
mov ecx, dword [esp + 0xb0]
mov edx, dword [esp + 0x254]
jmp 0x664dca
call fcn.006093b0
mov eax, dword [esp + 4]
mov ecx, dword [esp]
mov dword [esp + 0x828], ecx
mov dword [esp + 0x82c], eax
mov eax, dword [esp + 0x140]
mov dword [esp], eax
call fcn.00465390
mov eax, dword [esp + 8]
mov ecx, dword [esp + 4]
mov dword [esp], 0
mov edx, dword [esp + 0x2a4]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0x100]
mov dword [esp + 8], ebx
lea ebp, [0x71f9e5]
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], 0xb
mov dword [esp + 0x14], ecx
mov dword [esp + 0x18], eax
lea eax, [0x72fba5]
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], 0x27
call fcn.0043c110
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x24]
mov dword [esp + 0x820], ecx
mov dword [esp + 0x824], eax
mov dword [esp + 0xaa8], 0
mov dword [esp + 0xaac], 0
mov dword [esp + 0xab0], 0
mov dword [esp + 0xab4], 0
lea eax, [0x6cae00]
mov dword [esp], eax
lea ecx, [esp + 0x828]
mov dword [esp + 4], ecx
call fcn.0040bcf0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
mov dword [esp + 0xaa8], ecx
mov dword [esp + 0xaac], eax
lea eax, [0x6cae00]
mov dword [esp], eax
lea ecx, [esp + 0x820]
mov dword [esp + 4], ecx
call fcn.0040bcf0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
mov dword [esp + 0xab0], ecx
mov dword [esp + 0xab4], eax
mov eax, dword [0x9b861c]
mov dword [esp], eax
lea eax, [esp + 0xaa8]
mov dword [esp + 4], eax
mov dword [esp + 8], 2
mov dword [esp + 0xc], 2
call fcn.00554610
mov eax, dword [esp + 0x254]
mov dword [esp + 0x970], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 0x974], eax
mov eax, dword [esp + 0xd0]
mov dword [esp + 0x978], eax
mov dword [esp + 0x818], 0
mov dword [esp + 0x81c], 0
lea eax, [0x6ba9e0]
mov dword [esp], eax
lea ecx, [esp + 0x970]
mov dword [esp + 4], ecx
call fcn.0040bd80
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
mov dword [esp + 0x818], ecx
mov dword [esp + 0x81c], eax
mov eax, dword [0x9b861c]
mov dword [esp], eax
lea eax, [esp + 0x818]
mov dword [esp + 4], eax
mov dword [esp + 8], 1
mov dword [esp + 0xc], 1
call fcn.00554610
mov eax, dword [esp + 0x140]
inc eax
jmp 0x664d5c
call fcn.006093b0
mov eax, dword [esp + 4]
mov ecx, dword [esp]
mov dword [esp + 0x840], ecx
mov dword [esp + 0x844], eax
mov eax, dword [esp + 0x140]
mov dword [esp], eax
call fcn.00465390
mov eax, dword [esp + 8]
mov ecx, dword [esp + 4]
mov dword [esp], 0
mov edx, dword [esp + 0x2a4]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0x100]
mov dword [esp + 8], ebx
lea ebp, [0x71f9e5]
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], 0xb
mov dword [esp + 0x14], ecx
mov dword [esp + 0x18], eax
lea eax, [0x72ef09]
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], 0x25
call fcn.0043c110
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x24]
mov dword [esp + 0x838], ecx
mov dword [esp + 0x83c], eax
mov dword [esp + 0xab8], 0
mov dword [esp + 0xabc], 0
mov dword [esp + 0xac0], 0
mov dword [esp + 0xac4], 0
lea eax, [0x6cae00]
mov dword [esp], eax
lea ecx, [esp + 0x840]
mov dword [esp + 4], ecx
call fcn.0040bcf0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
mov dword [esp + 0xab8], ecx
mov dword [esp + 0xabc], eax
lea eax, [0x6cae00]
mov dword [esp], eax
lea ecx, [esp + 0x838]
mov dword [esp + 4], ecx
call fcn.0040bcf0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
mov dword [esp + 0xac0], ecx
mov dword [esp + 0xac4], eax
mov eax, dword [0x9b861c]
mov dword [esp], eax
lea eax, [esp + 0xab8]
mov dword [esp + 4], eax
mov dword [esp + 8], 2
mov dword [esp + 0xc], 2
call fcn.00554610
mov eax, dword [esp + 0x254]
mov dword [esp + 0x97c], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 0x980], eax
mov eax, dword [esp + 0xd0]
mov dword [esp + 0x984], eax
mov dword [esp + 0x830], 0
mov dword [esp + 0x834], 0
lea eax, [0x6ba9e0]
mov dword [esp], eax
lea ecx, [esp + 0x97c]
mov dword [esp + 4], ecx
call fcn.0040bd80
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
mov dword [esp + 0x830], ecx
mov dword [esp + 0x834], eax
mov eax, dword [0x9b861c]
mov dword [esp], eax
lea eax, [esp + 0x830]
mov dword [esp + 4], eax
mov dword [esp + 8], 1
mov dword [esp + 0xc], 1
call fcn.00554610
mov eax, dword [esp + 0x140]
inc eax
jmp 0x664d5c
mov ebx, edx
jmp 0x65b266
mov ecx, dword [esp + 0x23ec]
jmp 0x65996b
mov dword [esp], edx
mov eax, dword [esp + 0x30c]
mov dword [esp + 4], eax
call fcn.0040ecd0
mov eax, dword [esp + 0x210]
jmp 0x6597ec
mov dword [esp], edx
mov eax, dword [esp + 0x304]
mov dword [esp + 4], eax
call fcn.0040ecd0
mov eax, dword [esp + 0x210]
jmp 0x6597c8
mov dword [esp + 0xec], eax
mov eax, dword [esp + 0x2a4]
mov dword [esp], eax
mov ecx, dword [esp + 0x274]
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
call fcn.0044c4d0
movzx eax, byte [esp + 0xc]
test al, al
je 0x665478
mov eax, dword [esp + 0x2a0]
mov ecx, dword [eax + 4]
mov edx, dword [esp + 0xec]
cmp edx, ecx
jge 0x665291
mov eax, edx
mov ecx, dword [esp + 0x23f0]
mov edx, dword [esp + 0x23ec]
mov ebp, dword [esp + 0x100]
jmp 0x659718
mov dword [esp], ecx
call fcn.00465390
mov eax, dword [esp + 8]
mov dword [esp + 0x130], eax
mov ecx, dword [esp + 4]
mov dword [esp + 0x2d8], ecx
call fcn.006093b0
mov eax, dword [esp + 4]
mov ecx, dword [esp]
mov dword [esp + 0x860], ecx
mov dword [esp + 0x864], eax
mov dword [esp], 0
lea eax, [0x72c55d]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x1f
mov eax, dword [esp + 0x2d8]
mov dword [esp + 0xc], eax
mov ecx, dword [esp + 0x130]
mov dword [esp + 0x10], ecx
lea edx, [0x72423f]
mov dword [esp + 0x14], edx
mov dword [esp + 0x18], 0x12
mov edx, dword [esp + 0x2a4]
mov dword [esp + 0x1c], edx
mov ebx, dword [esp + 0x100]
mov dword [esp + 0x20], ebx
lea ebp, [0x72b113]
mov dword [esp + 0x24], ebp
mov dword [esp + 0x28], 0x1d
call fcn.0043c170
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x2c]
mov dword [esp + 0x858], ecx
mov dword [esp + 0x85c], eax
mov dword [esp + 0xad8], 0
mov dword [esp + 0xadc], 0
mov dword [esp + 0xae0], 0
mov dword [esp + 0xae4], 0
lea eax, [0x6cae00]
mov dword [esp], eax
lea ecx, [esp + 0x860]
mov dword [esp + 4], ecx
call fcn.0040bcf0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
mov dword [esp + 0xad8], ecx
mov dword [esp + 0xadc], eax
lea eax, [0x6cae00]
mov dword [esp], eax
lea eax, [esp + 0x858]
mov dword [esp + 4], eax
call fcn.0040bcf0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
mov dword [esp + 0xae0], ecx
mov dword [esp + 0xae4], eax
mov eax, dword [0x9b8620]
mov dword [esp], eax
lea eax, [esp + 0xad8]
mov dword [esp + 4], eax
mov dword [esp + 8], 2
mov dword [esp + 0xc], 2
call fcn.00554610
mov eax, dword [0x9b8614]
mov dword [esp], eax
mov eax, dword [esp + 0x23ec]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x23f0]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x2d8]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x130]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x2a4]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x100]
mov dword [esp + 0x18], eax
mov edi, dword [esp + 0x308]
lea esi, [esp + 0x23c8]
call fcn.0044cd6e
call fcn.0066eea0
mov byte [esp + 0x2400], 0
nop
call fcn.00426b00
add esp, 0x23c4
ret
mov eax, dword [esp + 0x2a0]
mov edx, dword [esp + 0xec]
jmp 0x665275
mov dword [esp + 0x148], eax
mov dword [esp], 0x2a05f200
mov dword [esp + 4], 1
call fcn.0043f8c0
mov eax, dword [esp + 0x148]
cmp eax, 0xc8
jge 0x6654c9
xor eax, eax
mov ecx, dword [esp + 0x23f0]
mov edx, dword [esp + 0x23ec]
jmp 0x659702
add eax, 0xffffff38
jmp 0x6654b6
mov edx, dword [esp + 0x23ec]
jmp 0x659702
add eax, 0xfffffff6
jmp 0x6596c9
mov eax, dword [esp + 0x23e4]
movzx ebx, byte [eax]
cmp bl, 0x30
jne 0x6596a7
xor eax, eax
jmp 0x6596c9
cmp ecx, 3
jne 0x66551c
movzx eax, word [edx]
cmp ax, 0x5050
jne 0x665586
movzx eax, byte [edx + 2]
cmp al, 0x4d
je 0x65969e
cmp ecx, 3
jne 0x665581
movzx eax, word [edx]
cmp ax, 0x4252
jne 0x66557c
movzx eax, byte [edx + 2]
cmp al, 0x48
je 0x65969e
cmp ecx, 6
jne 0x665550
mov eax, dword [edx]
cmp eax, 0x424d454d
jne 0x665550
movzx eax, word [edx + 4]
cmp ax, 0x5245
je 0x65969e
cmp ecx, 7
jne 0x665575
mov eax, dword [edx]
cmp eax, 0x43534944
jne 0x665575
movzx eax, word [edx + 4]
cmp ax, 0x5553
jne 0x665575
movzx eax, byte [edx + 6]
cmp al, 0x50
je 0x65969e
xor eax, eax
jmp 0x659718
cmp ecx, 6
jmp 0x665537
cmp ecx, 6
jmp 0x665537
cmp ecx, 3
jmp 0x66551c
cmp ecx, 3
jmp 0x665501
mov eax, dword [esp + 0x2a4]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], esi
call fcn.0044c4d0
movzx eax, byte [esp + 0xc]
test al, al
je 0x6655e9
mov eax, dword [esp + 0x2a0]
mov ecx, dword [esp + 0x23f0]
mov edx, dword [esp + 0x23ec]
mov ebx, dword [esp + 0x274]
mov ebp, dword [esp + 0xe0]
mov esi, dword [esp + 0x100]
mov edi, dword [esp + 0x23e8]
jmp 0x659670
mov eax, dword [esp + 0x2a0]
mov ecx, dword [esp + 0x23f0]
mov edx, dword [esp + 0x23ec]
mov ebx, dword [esp + 0x274]
mov ebp, dword [esp + 0xe0]
mov esi, dword [esp + 0x100]
jmp 0x659650
cmp ecx, 4
jne 0x665678
mov ebx, dword [edx]
cmp ebx, 0x54504544
jne 0x66563e
mov esi, dword [0x9b8614]
mov ebp, dword [esi + 0xe8]
mov ebx, dword [esi + 0xe4]
jmp 0x659633
cmp ecx, 6
jne 0x66566f
mov ebx, dword [edx]
cmp ebx, 0x49444f4e
jne 0x66566f
movzx ebx, word [edx + 4]
cmp bx, 0x4353
jne 0x66566f
mov esi, dword [0x9b8614]
mov ebp, dword [esi + 0x148]
mov ebx, dword [esi + 0x144]
jmp 0x659633
xor ebp, ebp
xor ebx, ebx
jmp 0x659633
cmp ecx, 6
jmp 0x665641
mov edx, dword [esp + 0x23ec]
jmp 0x665618
je 0x665745
jne 0x66573c
mov edx, dword [esp + 0x23ec]
mov ebx, dword [edx]
cmp ebx, 0x4f504f4e
jne 0x6656c5
movzx ebx, word [edx + 4]
cmp bx, 0x4e49
jne 0x6656c5
mov esi, dword [0x9b8614]
mov ebp, dword [esi + 0x160]
mov ebx, dword [esi + 0x15c]
jmp 0x659633
cmp ecx, 7
jne 0x6656ff
mov ebx, dword [edx]
cmp ebx, 0x43534944
jne 0x6656ff
movzx ebx, word [edx + 4]
cmp bx, 0x5553
jne 0x6656ff
movzx ebx, byte [edx + 6]
cmp bl, 0x50
jne 0x6656ff
mov esi, dword [0x9b8614]
mov ebp, dword [esi + 0x130]
mov ebx, dword [esi + 0x12c]
jmp 0x659633
cmp ecx, 8
jne 0x66566f
mov ebx, dword [edx]
cmp ebx, 0x50505553
jne 0x66566f
mov ebx, dword [edx + 4]
cmp ebx, 0x5245494c
jne 0x66566f
mov esi, dword [0x9b8614]
mov ebp, dword [esi + 0xd0]
mov ebx, dword [esi + 0xcc]
jmp 0x659633
mov edx, dword [esp + 0x23ec]
jmp 0x6656c5
mov eax, dword [esp + 0x23ec]
mov dword [esp], eax
mov dword [esp + 4], ecx
lea edx, [0x71ba0d]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 6
call fcn.0044c620
mov eax, dword [esp + 0x10]
test eax, eax
jg 0x665788
mov ecx, dword [esp + 0x23f0]
cmp ecx, 3
mov eax, dword [esp + 0x2a0]
jmp 0x6595f9
mov ecx, dword [esp + 0x23f0]
cmp ecx, 6
mov eax, dword [esp + 0x2a0]
jmp 0x66568c
mov dword [esp + 0x29c], ecx
mov ebx, dword [esp + 0x23dc]
mov dword [esp + 0x868], ebx
mov ebx, dword [esp + 0x23e0]
mov dword [esp + 0x86c], ebx
test edx, edx
je 0x6657c8
mov edx, dword [edx + 4]
mov dword [esp + 0x310], edx
lea edi, [esp + 0xbd4]
xor eax, eax
call fcn.0044c88a
lea ecx, [0x6cae00]
mov dword [esp + 0xbd4], ecx
lea ebx, [0x79a3f8]
mov dword [esp + 0xbd8], ebx
mov dword [esp], ecx
lea ecx, [esp + 0x868]
mov dword [esp + 4], ecx
call fcn.0040bcf0
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 8]
mov dword [esp + 0xbdc], edx
mov dword [esp + 0xbe0], ecx
mov ecx, dword [esp + 0x310]
mov dword [esp + 0xbe4], ecx
mov ecx, dword [esp + 0x29c]
mov dword [esp + 0xbe8], ecx
lea ecx, [esp + 0xbd4]
mov dword [esp], ecx
mov dword [esp + 4], 3
mov dword [esp + 8], 3
call fcn.004a3000
mov byte [esp + 0x2400], 0
nop
call fcn.00426b00
add esp, 0x23c4
ret
mov eax, dword [esp + 0x2ac]
mov dword [esp], eax
mov ecx, dword [esp + 0x104]
mov dword [esp + 4], ecx
call fcn.00489b50
jmp 0x6593eb
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00486fc0
movzx eax, byte [esp + 8]
test al, al
je 0x65934a
mov eax, dword [esp + 0x2ac]
mov dword [esp], eax
mov ecx, dword [esp + 0x104]
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x1ff
call fcn.00488760
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
test ecx, ecx
je 0x65934a
mov dword [esp + 0x294], eax
mov dword [esp + 0x290], ecx
call fcn.006093b0
mov eax, dword [esp + 4]
mov ecx, dword [esp]
mov dword [esp + 0x880], ecx
mov dword [esp + 0x884], eax
mov eax, dword [esp + 0x290]
test eax, eax
je 0x665a8d
mov ecx, dword [eax + 4]
mov dword [esp + 0x310], ecx
lea edi, [esp + 0xc1c]
xor eax, eax
call fcn.0044c88a
lea ecx, [0x6cae00]
mov dword [esp], ecx
lea edx, [esp + 0x880]
mov dword [esp + 4], edx
call fcn.0040bcf0
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 8]
mov dword [esp + 0xc1c], edx
mov dword [esp + 0xc20], ecx
lea ecx, [0x6cae00]
mov dword [esp + 0xc24], ecx
lea edx, [0x79a3d0]
mov dword [esp + 0xc28], edx
mov edx, dword [esp + 0x310]
mov dword [esp + 0xc2c], edx
mov edx, dword [esp + 0x294]
mov dword [esp + 0xc30], edx
lea ebx, [esp + 0xc1c]
mov dword [esp], ebx
mov dword [esp + 4], 3
mov dword [esp + 8], 3
call fcn.004a3000
call fcn.006093b0
mov ecx, dword [esp + 4]
mov edx, dword [esp]
mov dword [esp + 0x878], edx
mov dword [esp + 0x87c], ecx
mov ecx, dword [esp + 0x290]
test ecx, ecx
je 0x6659d5
mov ecx, dword [ecx + 4]
mov dword [esp + 0x310], ecx
lea edi, [esp + 0xc04]
xor eax, eax
call fcn.0044c88a
lea ecx, [0x6cae00]
mov dword [esp], ecx
lea edx, [esp + 0x878]
mov dword [esp + 4], edx
call fcn.0040bcf0
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 8]
mov dword [esp + 0xc04], edx
mov dword [esp + 0xc08], ecx
lea ecx, [0x6cae00]
mov dword [esp + 0xc0c], ecx
lea ecx, [0x79a3d8]
mov dword [esp + 0xc10], ecx
mov ecx, dword [esp + 0x310]
mov dword [esp + 0xc14], ecx
mov ecx, dword [esp + 0x294]
mov dword [esp + 0xc18], ecx
mov ecx, dword [0x9b8620]
mov dword [esp], ecx
lea ecx, [esp + 0xc04]
mov dword [esp + 4], ecx
mov dword [esp + 8], 3
mov dword [esp + 0xc], 3
call fcn.00554610
mov byte [esp + 0x2400], 0
nop
call fcn.00426b00
add esp, 0x23c4
ret
mov ecx, eax
jmp 0x665914
mov eax, dword [esp + 0x23dc]
mov dword [esp], eax
mov ecx, dword [esp + 0x23e0]
mov dword [esp + 4], ecx
lea edx, [0x719eab]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 1
call fcn.004b0480
mov eax, dword [esp + 0x10]
inc eax
mov ecx, dword [esp + 0x23e0]
cmp eax, ecx
ja 0x66602c
mov dword [esp], 0
mov ecx, dword [esp + 0x23dc]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
lea eax, [0x71a7e2]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 4
call fcn.0043c050
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
jmp 0x659320
mov dword [esp + 0x128], ebx
mov dword [esp + 0x2cc], edx
mov eax, dword [0x9b8614]
mov ecx, dword [eax + 0x84]
mov eax, dword [eax + 0x88]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.004b1730
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
cmp eax, 9
je 0x665b5e
mov eax, dword [esp + 0x128]
mov ecx, dword [esp + 0x2cc]
mov ebx, eax
mov edx, ecx
jmp 0x6592ce
mov dword [esp], ecx
lea ecx, [0x71e62c]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.0044c4d0
movzx eax, byte [esp + 0xc]
test al, al
je 0x665b47
mov eax, 1
lea ecx, [0x719e92]
jmp 0x665b55
mov dword [esp + 0x13c], ebx
mov dword [esp + 0x310], edx
mov eax, dword [0x9b8614]
mov ecx, dword [eax + 0x88]
mov eax, dword [eax + 0x84]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.004b1730
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
cmp eax, 9
je 0x665c49
cmp eax, 0xa
je 0x665c07
mov eax, dword [esp + 0x23f0]
cmp eax, 3
mov ecx, dword [esp + 0x13c]
mov edx, dword [esp + 0x310]
mov eax, dword [esp + 0x100]
mov esi, dword [esp + 0x23f0]
mov edi, dword [esp + 0x23ec]
mov ebx, ecx
mov ecx, dword [esp + 0x2a4]
jmp 0x6592b3
mov dword [esp], ecx
lea ecx, [0x71efc2]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.0044c4d0
movzx eax, byte [esp + 0xc]
test al, al
je 0x665c3d
mov eax, dword [esp + 0x23f0]
cmp eax, 3
mov ecx, 1
lea edx, [0x719e93]
jmp 0x665be4
mov eax, dword [esp + 0x23f0]
cmp eax, 3
jmp 0x665bd6
mov dword [esp + 0x14c], eax
mov dword [esp + 0x2e8], ecx
mov dword [esp], ecx
lea edx, [0x71e62c]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.0044c4d0
movzx eax, byte [esp + 0xc]
test al, al
je 0x665c90
mov eax, dword [esp + 0x23f0]
cmp eax, 3
mov ecx, 1
lea edx, [0x719e92]
jmp 0x665be4
mov eax, dword [esp + 0x14c]
mov ecx, dword [esp + 0x2e8]
jmp 0x665bc7
cmp esi, 3
jmp 0x6592b3
cmp esi, 3
jmp 0x6592b3
mov esi, dword [esp + 0x23f0]
jmp 0x65927c
xchg ebp, eax
test al, al
xchg ebp, eax
jmp 0x659244
xchg ebp, eax
test al, al
xchg ebp, eax
jmp 0x659244
xchg ebp, eax
test al, al
xchg ebp, eax
mov edi, dword [esp + 0x23ec]
jmp 0x659244
mov edi, dword [esp + 0x23ec]
jmp 0x659244
lea edx, [0x719e94]
jmp 0x6591e4
cmp ebp, 3
jne 0x665d16
movzx edi, word [esi]
cmp di, 0x4252
jne 0x665d16
movzx edi, byte [esi + 2]
xchg edi, eax
cmp al, 0x48
xchg edi, eax
je 0x659154
cmp ebp, 4
jne 0x665d29
mov edi, dword [esi]
cmp edi, 0x54504544
je 0x659154
cmp ebp, 8
jne 0x665d5d
mov edi, dword [esi]
cmp edi, 0x50505553
jne 0x665d52
mov edi, dword [esi + 4]
cmp edi, 0x5245494c
je 0x659154
mov eax, ebx
xor ebx, ebx
xor edx, edx
jmp 0x6591e9
mov eax, ebx
xor ebx, ebx
xor edx, edx
jmp 0x6591e9
mov eax, ebx
xor ebx, ebx
xor edx, edx
jmp 0x6591e9
cmp ebp, 3
jmp 0x665cfb
mov esi, dword [esp + 0x23ec]
jmp 0x665cfb
lea eax, [0x719eb4]
mov dword [esp], eax
mov dword [esp + 4], 1
lea eax, [0x719ebc]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
lea eax, [0x72d573]
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], 0x21
call fcn.0060b2d0
mov eax, dword [0x9cadb0]
mov ecx, dword [esp + 0x18]
test eax, eax
jne 0x665dd0
mov dword [0x9b8624], ecx
mov byte [0x8b90a3], 0
jmp 0x659064
lea eax, [0x9b8624]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.0040ecd0
jmp 0x665dc4
nop
call fcn.00426b00
add esp, 0x23c4
ret
mov dword [esp + 0x29c], ecx
mov dword [esp + 0x28c], edx
call fcn.006090b0
mov eax, dword [esp + 4]
mov ecx, dword [esp]
mov dword [esp + 0x890], ecx
mov dword [esp + 0x894], eax
mov eax, dword [esp + 0x28c]
mov eax, dword [eax + 0x10]
mov ecx, dword [esp + 0x29c]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 8]
mov ecx, dword [esp + 4]
mov dword [esp + 0x888], ecx
mov dword [esp + 0x88c], eax
lea edi, [esp + 0xc34]
xor eax, eax
call fcn.0044c88a
lea eax, [0x6cae00]
mov dword [esp], eax
lea ecx, [esp + 0x890]
mov dword [esp + 4], ecx
call fcn.0040bcf0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
mov dword [esp + 0xc34], ecx
mov dword [esp + 0xc38], eax
lea eax, [0x6cae00]
mov dword [esp + 0xc3c], eax
lea ecx, [0x79a3c8]
mov dword [esp + 0xc40], ecx
mov dword [esp], eax
lea eax, [esp + 0x888]
mov dword [esp + 4], eax
call fcn.0040bcf0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
mov dword [esp + 0xc44], ecx
mov dword [esp + 0xc48], eax
lea eax, [esp + 0xc34]
mov dword [esp], eax
mov dword [esp + 4], 3
mov dword [esp + 8], 3
call fcn.004a3000
mov dword [esp], 0x2a05f200
mov dword [esp + 4], 1
call fcn.0043f8c0
mov byte [esp + 0x2400], 0
nop
call fcn.00426b00
add esp, 0x23c4
ret
call fcn.00426060
ud2
call fcn.00426060
ud2
call fcn.00426060
ud2
call fcn.004260c0
ud2
call fcn.00426060
ud2
call fcn.00426060
ud2
call fcn.00426060
ud2
call fcn.00426060
ud2
call fcn.00426060
ud2
call fcn.00426060
ud2
call fcn.00426060
ud2
call fcn.00426060
ud2
call fcn.00426060
ud2
call fcn.00426060
ud2
call fcn.00426060
ud2
call fcn.004260c0
ud2
call fcn.00426060
ud2
call fcn.00426060
ud2
call fcn.00426060
ud2
call fcn.00426060
ud2
call fcn.004260c0
ud2
call fcn.00426060
ud2
call fcn.00426060
ud2
call fcn.00426060
ud2
call fcn.00426060
ud2
call fcn.004260c0
ud2
call fcn.00426060
ud2
call fcn.00426060
ud2
call fcn.00426060
ud2
call fcn.00426060
ud2
call fcn.004260c0
ud2
call fcn.00426060
ud2
call fcn.00426060
ud2
call fcn.00426060
ud2
call fcn.00426060
ud2
call fcn.00426060
ud2
call fcn.00426060
ud2
call fcn.004260c0
ud2
call fcn.00426060
ud2
call fcn.00426060
ud2
call fcn.00426060
ud2
call fcn.004260c0
ud2
call fcn.004260c0
ud2
call fcn.004260c0
ud2
call fcn.004260c0
ud2
call fcn.0044ae20
jmp fcn.00658ee0