Function at 0x611b89
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0xffffffffffffffff
push 0x77d96a
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x14
push ebx
push esi
mov esi, ecx
push edi
mov dword [esp + 0x14], esi
call fcn.005d40d0
xor ebx, ebx
mov dword [esi], 0x8bf954
mov dword [esi + 0xdc], ebx
mov dword [esi + 0xd8], ebx
mov dword [esi + 0xe4], ebx
mov dword [esi + 0xe0], ebx
mov dword [esi + 0xec], ebx
mov dword [esi + 0xe8], ebx
mov dword [esi + 0xf4], ebx
mov dword [esi + 0xf0], ebx
mov dword [esi + 0xfc], ebx
mov dword [esi + 0xf8], ebx
mov dword [esi + 0x104], ebx
mov dword [esi + 0x100], ebx
mov dword [esi + 0x10c], ebx
mov dword [esi + 0x108], ebx
mov dword [esi + 0x114], ebx
mov dword [esi + 0x110], ebx
mov dword [esi + 0x11c], ebx
mov dword [esi + 0x118], ebx
mov dword [esi + 0x124], ebx
mov dword [esi + 0x120], ebx
mov dword [esi + 0x12c], ebx
mov dword [esi + 0x128], ebx
mov dword [esi + 0x134], ebx
mov dword [esi + 0x130], ebx
mov dword [esi + 0x13c], ebx
mov dword [esi + 0x138], ebx
mov dword [esi + 0x144], ebx
mov dword [esi + 0x140], ebx
mov dword [esi + 0x14c], ebx
mov dword [esi + 0x148], ebx
mov dword [esi + 0x154], ebx
mov dword [esi + 0x150], ebx
mov dword [esi + 0x15c], ebx
mov dword [esi + 0x158], ebx
mov dword [esi + 0x164], ebx
mov dword [esi + 0x160], ebx
mov dword [esi + 0x16c], ebx
mov dword [esi + 0x168], ebx
mov dword [esi + 0x174], ebx
mov dword [esi + 0x170], ebx
mov dword [esi + 0x17c], ebx
mov dword [esi + 0x178], ebx
mov dword [esi + 0x184], ebx
mov dword [esi + 0x180], ebx
mov dword [esi + 0x18c], ebx
mov dword [esi + 0x188], ebx
mov dword [esi + 0x194], ebx
mov dword [esi + 0x190], ebx
mov dword [esi + 0x19c], ebx
mov dword [esi + 0x198], ebx
mov dword [esi + 0x1a4], ebx
mov dword [esi + 0x1a0], ebx
mov dword [esi + 0x1ac], ebx
mov dword [esi + 0x1a8], ebx
mov dword [esi + 0x1b4], ebx
mov dword [esi + 0x1b0], ebx
mov dword [esi + 0x1bc], ebx
mov dword [esi + 0x1b8], ebx
mov dword [esi + 0x1c4], ebx
mov dword [esi + 0x1c0], ebx
mov dword [esi + 0x1cc], ebx
mov dword [esi + 0x1c8], ebx
mov dword [esi + 0x1d4], ebx
mov dword [esi + 0x1d0], ebx
mov dword [esi + 0x1dc], ebx
mov dword [esi + 0x1d8], ebx
mov dword [esi + 0x1e4], ebx
mov dword [esi + 0x1e0], ebx
mov dword [esi + 0x1ec], ebx
mov dword [esi + 0x1e8], ebx
mov dword [esp + 0x28], ebx
mov dword [esi + 0x1f4], ebx
mov dword [esi + 0x1f0], ebx
mov dword [esi + 0x1fc], ebx
mov dword [esi + 0x1f8], ebx
mov dword [esi + 0x204], ebx
mov dword [esi + 0x200], ebx
lea eax, [esi + 0x214]
lea ecx, [ebx + 9]
mov dword [eax + 4], ebx
mov dword [eax], ebx
mov dword [eax + 0xc], ebx
mov dword [eax + 8], ebx
add eax, 0x10
sub ecx, 1
jns 0x611d73
push 0x623dd0
push fcn.0060f5f0
push 0xa
push 8
lea eax, [esi + 0x2b4]
push eax
call fcn.0074d3bf
mov byte [esp + 0x28], 1
lea eax, [esi + 0x308]
mov ecx, 9
mov dword [eax + 4], ebx
mov dword [eax], ebx
mov dword [eax + 0xc], ebx
mov dword [eax + 8], ebx
add eax, 0x10
sub ecx, 1
jns 0x611db0
push ebp
push 0x623dd0
push fcn.0060f5f0
push 0xa
push 8
lea ecx, [esi + 0x3a8]
push ecx
call fcn.0074d3bf
lea edi, [esi + 0x43c]
mov dword [edi], ebx
lea ebp, [esi + 0x45c]
mov dword [ebp], ebx
mov dword [esi + 0x464], ebx
mov dword [esi + 0x46c], ebx
mov dword [esi + 0x474], ebx
push fcn.004350c0
push fcn.0060f5f0
push 3
lea eax, [esi + 0x484]
push 4
push eax
mov byte [esp + 0x40], 7
call fcn.0074d3bf
push fcn.004350c0
push fcn.0060f5f0
push 4
lea eax, [esi + 0x4b4]
push 4
mov dword [esi + 0x494], ebx
mov dword [esi + 0x490], ebx
push eax
mov byte [esp + 0x40], 8
mov dword [esi + 0x49c], ebx
mov dword [esi + 0x498], ebx
call fcn.0074d3bf
mov dword [esi + 0x4c8], ebx
mov dword [esi + 0x4c4], ebx
mov dword [esi + 0x4d0], ebx
mov dword [esi + 0x4cc], ebx
mov dword [esi + 0x4dc], ebx
mov dword [esi + 0x4e4], ebx
mov dword [esi + 0x4e8], ebx
mov dword [esi + 0x4f0], ebx
mov dword [esi + 0x4f8], ebx
mov dword [esi + 0x504], ebx
mov dword [esi + 0x50c], ebx
mov dword [esi + 0x514], ebx
mov dword [esi + 0x520], ebx
mov dword [esi + 0x528], ebx
mov dword [esi + 0x530], ebx
mov dword [esi + 0x538], ebx
mov dword [esi + 0x540], ebx
mov dword [esi + 0x554], ebx
push fcn.004350c0
push fcn.0060f5f0
push 0x28
mov byte [esp + 0x38], 0x17
push 4
lea edx, [esi + 0x5f8]
push edx
call fcn.0074d3bf
mov dword [esi + 0x908], ebx
mov dword [esi + 0x910], ebx
mov dword [esi + 0x90c], ebx
mov dword [esi + 0x918], ebx
mov dword [esi + 0x914], ebx
mov dword [esi + 0x95c], ebx
mov dword [esi + 0x964], ebx
mov dword [esi + 0x960], ebx
mov dword [esi + 0x96c], ebx
mov dword [esi + 0x968], ebx
mov dword [esi + 0x9b0], ebx
mov dword [esi + 0x9b8], ebx
mov dword [esi + 0x9b4], ebx
mov dword [esi + 0x9c0], ebx
mov dword [esi + 0x9bc], ebx
mov dword [esi + 0xa04], ebx
mov dword [esi + 0xa0c], ebx
mov dword [esi + 0xa08], ebx
mov dword [esi + 0xa14], ebx
mov dword [esi + 0xa10], ebx
mov dword [esi + 0xa38], ebx
mov dword [esi + 0xa34], ebx
mov byte [esp + 0x2c], 0x1c
mov dword [esi + 0xa40], ebx
mov dword [esi + 0xa3c], ebx
lea eax, [esi + 0xa44]
mov ecx, 3
mov dword [eax + 4], ebx
mov dword [eax], ebx
mov dword [eax + 0xc], ebx
mov dword [eax + 8], ebx
add eax, 0x10
sub ecx, 1
jns 0x611f82
mov dword [esi + 0xa8c], ebx
mov dword [esi + 0xa88], ebx
push ebx
lea ecx, [esp + 0x14]
mov byte [esi + 0x3fc], bl
call fcn.00435170
lea eax, [esp + 0x10]
push eax
mov ecx, edi
mov byte [esp + 0x30], 0x1d
call fcn.00435280
lea ecx, [esp + 0x10]
mov byte [esp + 0x2c], 0x1c
call fcn.004350c0
mov dword [esi + 0x440], ebx
mov dword [esi + 0x444], 0x12c
mov dword [esi + 0x448], ebx
mov dword [esi + 0x44c], ebx
mov byte [esi + 0x79c], bl
mov dword [esi + 0x6a8], 0xffffffff
mov dword [esi + 0xe8], ebx
mov dword [esi + 0xec], ebx
mov edi, 1
mov dword [esi + 0xf0], edi
mov dword [esi + 0xf4], edi
mov dword [esi + 0xd8], ebx
mov dword [esi + 0xdc], ebx
mov dword [esi + 0xe0], edi
mov dword [esi + 0xe4], edi
mov dword [esi + 0xf8], ebx
mov dword [esi + 0xfc], ebx
mov dword [esi + 0x100], edi
mov dword [esi + 0x104], edi
mov dword [esi + 0x108], ebx
mov dword [esi + 0x10c], ebx
mov dword [esi + 0x110], edi
mov dword [esi + 0x114], edi
mov dword [esi + 0x118], ebx
mov dword [esi + 0x11c], ebx
mov dword [esi + 0x120], edi
mov dword [esi + 0x124], edi
mov dword [esi + 0x128], ebx
mov dword [esi + 0x12c], ebx
mov dword [esi + 0x130], edi
mov dword [esi + 0x134], edi
mov dword [esi + 0x138], ebx
mov dword [esi + 0x13c], ebx
mov dword [esi + 0x140], edi
mov dword [esi + 0x144], edi
mov dword [esi + 0x148], ebx
mov dword [esi + 0x14c], ebx
mov dword [esi + 0x150], edi
mov dword [esi + 0x154], edi
mov dword [esi + 0x168], ebx
mov dword [esi + 0x16c], ebx
mov dword [esi + 0x170], edi
mov dword [esi + 0x174], edi
mov dword [esi + 0x178], ebx
mov dword [esi + 0x17c], ebx
mov dword [esi + 0x180], edi
mov dword [esi + 0x184], edi
mov dword [esi + 0x158], ebx
mov dword [esi + 0x15c], ebx
mov dword [esi + 0x160], edi
mov dword [esi + 0x164], edi
mov dword [esi + 0x198], ebx
mov dword [esi + 0x19c], ebx
mov dword [esi + 0x1a0], edi
mov dword [esi + 0x1a4], edi
mov dword [esi + 0x1a8], ebx
mov dword [esi + 0x1ac], ebx
mov dword [esi + 0x1b0], edi
mov dword [esi + 0x1b4], edi
mov dword [esi + 0x1b8], ebx
mov dword [esi + 0x1bc], ebx
mov dword [esi + 0x1c0], edi
mov dword [esi + 0x1c4], edi
mov dword [esi + 0x1c8], ebx
mov dword [esi + 0x1cc], ebx
mov dword [esi + 0x1d0], edi
mov dword [esi + 0x1d4], edi
mov dword [esi + 0x1d8], ebx
mov dword [esi + 0x1dc], ebx
mov dword [esi + 0x1e0], edi
mov dword [esi + 0x1e4], edi
mov dword [esi + 0x490], ebx
mov dword [esi + 0x494], ebx
mov dword [esi + 0x498], edi
mov dword [esi + 0x49c], edi
mov dword [esi + 0x4c4], ebx
mov dword [esi + 0x4c8], ebx
mov dword [esi + 0x4cc], edi
mov dword [esi + 0x4d0], edi
mov dword [esi + 0x1e8], ebx
mov dword [esi + 0x1ec], ebx
mov dword [esi + 0x1f0], edi
mov dword [esi + 0x1f4], edi
mov dword [esi + 0x1f8], ebx
mov dword [esi + 0x1fc], ebx
push ebx
mov dword [esi + 0x200], edi
mov dword [esi + 0x204], edi
mov ecx, dword [0x992210]
push 0x7958c8
call fcn.004148b0
push ebx
lea ecx, [esp + 0x14]
mov dword [esi + 0x4d8], eax
call fcn.00435170
lea ecx, [esp + 0x10]
push ecx
lea ecx, [esi + 0x4dc]
mov byte [esp + 0x30], 0x1e
call fcn.00435280
lea ecx, [esp + 0x10]
mov byte [esp + 0x2c], 0x1c
call fcn.004350c0
mov ecx, dword [0x992210]
push ebx
push 0x7958c8
call fcn.004148b0
push ebx
lea ecx, [esp + 0x14]
mov dword [esi + 0x4e0], eax
call fcn.00435170
lea edx, [esp + 0x10]
push edx
lea ecx, [esi + 0x4e4]
mov byte [esp + 0x30], 0x1f
call fcn.00435280
lea ecx, [esp + 0x10]
mov byte [esp + 0x2c], 0x1c
call fcn.004350c0
mov ecx, dword [0x992210]
push ebx
push 0x7958c8
call fcn.004148b0
push ebx
lea ecx, [esp + 0x14]
mov dword [esi + 0x4ec], eax
call fcn.00435170
lea eax, [esp + 0x10]
push eax
lea ecx, [esi + 0x4e8]
mov byte [esp + 0x30], 0x20
call fcn.00435280
lea ecx, [esp + 0x10]
mov byte [esp + 0x2c], 0x1c
call fcn.004350c0
mov ecx, dword [0x992210]
push ebx
push 0x7958c8
call fcn.004148b0
push ebx
lea ecx, [esp + 0x14]
mov dword [esi + 0x4f4], eax
call fcn.00435170
lea ecx, [esp + 0x10]
push ecx
lea ecx, [esi + 0x4f0]
mov byte [esp + 0x30], 0x21
call fcn.00435280
lea ecx, [esp + 0x10]
mov byte [esp + 0x2c], 0x1c
call fcn.004350c0
mov ecx, dword [0x992210]
push ebx
push 0x7958c8
call fcn.004148b0
push ebx
lea ecx, [esp + 0x14]
mov dword [esi + 0x4fc], eax
call fcn.00435170
lea edx, [esp + 0x10]
push edx
lea ecx, [esi + 0x4f8]
mov byte [esp + 0x30], 0x22
call fcn.00435280
lea ecx, [esp + 0x10]
mov byte [esp + 0x2c], 0x1c
call fcn.004350c0
mov ecx, dword [0x992210]
push ebx
push 0x7958c8
call fcn.004148b0
push ebx
lea ecx, [esp + 0x14]
mov dword [esi + 0x500], eax
call fcn.00435170
lea eax, [esp + 0x10]
push eax
lea ecx, [esi + 0x504]
mov byte [esp + 0x30], 0x23
call fcn.00435280
lea ecx, [esp + 0x10]
mov byte [esp + 0x2c], 0x1c
call fcn.004350c0
mov ecx, dword [0x992210]
push ebx
push 0x7958c8
call fcn.004148b0
push ebx
lea ecx, [esp + 0x14]
mov dword [esi + 0x510], eax
call fcn.00435170
lea ecx, [esp + 0x10]
push ecx
lea ecx, [esi + 0x514]
mov byte [esp + 0x30], 0x24
call fcn.00435280
lea ecx, [esp + 0x10]
mov byte [esp + 0x2c], 0x1c
call fcn.004350c0
mov ecx, dword [0x992210]
push ebx
push 0x7958c8
call fcn.004148b0
push ebx
lea ecx, [esp + 0x14]
mov dword [esi + 0x458], eax
call fcn.00435170
lea edx, [esp + 0x10]
push edx
mov ecx, ebp
mov byte [esp + 0x30], 0x25
call fcn.00435280
lea ecx, [esp + 0x10]
mov byte [esp + 0x2c], 0x1c
call fcn.004350c0
mov ecx, dword [0x992210]
push ebx
push 0x7958c8
call fcn.004148b0
mov dword [esi + 0x51c], eax
push ebx
lea ecx, [esp + 0x14]
call fcn.00435170
lea eax, [esp + 0x10]
push eax
lea ecx, [esi + 0x520]
mov byte [esp + 0x30], 0x26
call fcn.00435280
lea ecx, [esp + 0x10]
mov byte [esp + 0x2c], 0x1c
call fcn.004350c0
mov ecx, dword [0x992210]
push ebx
push 0x7958c8
call fcn.004148b0
push ebx
lea ecx, [esp + 0x14]
mov dword [esi + 0x524], eax
call fcn.00435170
lea ecx, [esp + 0x10]
push ecx
lea ecx, [esi + 0x528]
mov byte [esp + 0x30], 0x27
call fcn.00435280
lea ecx, [esp + 0x10]
mov byte [esp + 0x2c], 0x1c
call fcn.004350c0
mov ecx, dword [0x992210]
push ebx
push 0x7958c8
call fcn.004148b0
push ebx
lea ecx, [esp + 0x14]
mov dword [esi + 0x534], eax
call fcn.00435170
lea edx, [esp + 0x10]
push edx
lea ecx, [esi + 0x538]
mov byte [esp + 0x30], 0x28
call fcn.00435280
lea ecx, [esp + 0x10]
mov byte [esp + 0x2c], 0x1c
call fcn.004350c0
mov ecx, dword [0x992210]
push ebx
push 0x7958c8
call fcn.004148b0
push ebx
lea ecx, [esp + 0x14]
mov dword [esi + 0x53c], eax
call fcn.00435170
lea eax, [esp + 0x10]
push eax
lea ecx, [esi + 0x540]
mov byte [esp + 0x30], 0x29
call fcn.00435280
lea ecx, [esp + 0x10]
mov byte [esp + 0x2c], 0x1c
call fcn.004350c0
mov ecx, dword [0x992210]
push ebx
push 0x7958c8
call fcn.004148b0
push ebx
lea ecx, [esp + 0x14]
mov dword [esi + 0x52c], eax
call fcn.00435170
lea ecx, [esp + 0x10]
push ecx
lea ecx, [esi + 0x530]
mov byte [esp + 0x30], 0x2a
call fcn.00435280
lea ecx, [esp + 0x10]
mov byte [esp + 0x2c], 0x1c
call fcn.004350c0
push ebx
mov ecx, dword [0x992210]
push 0x7958c8
call fcn.004148b0
push ebx
lea ecx, [esp + 0x14]
mov dword [esi + 0x468], eax
call fcn.00435170
lea edx, [esp + 0x10]
push edx
lea ecx, [esi + 0x46c]
mov byte [esp + 0x30], 0x2b
call fcn.00435280
lea ecx, [esp + 0x10]
mov byte [esp + 0x2c], 0x1c
call fcn.004350c0
mov ecx, dword [0x992210]
push ebx
push 0x7958c8
call fcn.004148b0
push ebx
lea ecx, [esp + 0x14]
mov dword [esi + 0x460], eax
call fcn.00435170
lea eax, [esp + 0x10]
push eax
lea ecx, [esi + 0x464]
mov byte [esp + 0x30], 0x2c
call fcn.00435280
lea ecx, [esp + 0x10]
mov byte [esp + 0x2c], 0x1c
call fcn.004350c0
mov ecx, dword [0x992210]
push ebx
push 0x7958c8
call fcn.004148b0
push ebx
lea ecx, [esp + 0x14]
mov dword [esi + 0x550], eax
call fcn.00435170
lea ecx, [esp + 0x10]
push ecx
lea ecx, [esi + 0x554]
mov byte [esp + 0x30], 0x2d
call fcn.00435280
lea ecx, [esp + 0x10]
mov byte [esp + 0x2c], 0x1c
call fcn.004350c0
mov ecx, dword [0x992210]
push ebx
push 0x7958c8
call fcn.004148b0
push ebx
lea ecx, [esp + 0x14]
mov dword [esi + 0x470], eax
call fcn.00435170
lea edx, [esp + 0x10]
push edx
lea ecx, [esi + 0x474]
mov byte [esp + 0x30], 0x2e
call fcn.00435280
lea ecx, [esp + 0x10]
mov byte [esp + 0x2c], 0x1c
call fcn.004350c0
lea ebp, [esi + 0x484]
mov dword [esp + 0x14], 3
nop
mov ecx, dword [0x992210]
push ebx
push 0x7958c8
call fcn.004148b0
push ebx
lea ecx, [esp + 0x14]
mov dword [ebp - 0xc], eax
call fcn.00435170
lea eax, [esp + 0x10]
push eax
mov ecx, ebp
mov byte [esp + 0x30], 0x2f
call fcn.00435280
lea ecx, [esp + 0x10]
mov byte [esp + 0x2c], 0x1c
call fcn.004350c0
add ebp, 4
sub dword [esp + 0x14], edi
jne 0x612670
mov dword [esi + 0x4a0], 0xffffffff
lea ebp, [esi + 0x4b4]
mov dword [esp + 0x10], 4
mov edi, edi
mov ecx, dword [0x992210]
push ebx
push 0x7958c8
call fcn.004148b0
push ebx
lea ecx, [esp + 0x18]
mov dword [ebp - 0x10], eax
call fcn.00435170
lea ecx, [esp + 0x14]
push ecx
mov ecx, ebp
mov byte [esp + 0x30], 0x30
call fcn.00435280
cmp byte [0x992082], bl
mov dword [esp + 0x1c], 0x1ab9950
je 0x61271a
push 0x1ab9950
call dword [0x794290]
mov byte [esp + 0x20], 1
lea ecx, [esp + 0x14]
mov byte [esp + 0x2c], 0x31
call fcn.00541eb0
cmp byte [0x992082], bl
mov byte [esp + 0x2c], 0x1c
je 0x612745
push 0x1ab9950
call dword [0x79428c]
add ebp, 4
sub dword [esp + 0x10], edi
mov byte [esp + 0x20], bl
jne 0x6126d0
mov dword [esi + 0x4d4], 0xffffffff
fld1
mov dword [esi + 0x544], ebx
mov dword [esi + 0x548], 0xc8
mov byte [esi + 0x54c], bl
mov byte [esi + 0x54d], bl
mov dword [esi + 0x69c], ebx
mov dword [esi + 0x6a4], 0x1e
fst dword [esi + 0x6ac]
fst dword [esi + 0x6b0]
lea eax, [esi + 0x314]
fst dword [esi + 0x6b4]
mov ecx, 0xa
fst dword [esi + 0x6b8]
mov byte [esi + 0x8b8], bl
fldz
fst dword [esi + 0x8ac]
fst dword [esi + 0x8b0]
fst dword [esi + 0x8b4]
fxch st(1)
fst dword [esi + 0x81c]
fst dword [esi + 0x828]
fxch st(1)
fst dword [esi + 0x820]
fst dword [esi + 0x824]
fst dword [esi + 0x82c]
fxch st(1)
fst dword [esi + 0x830]
fst dword [esi + 0x838]
fxch st(1)
fst dword [esi + 0x834]
fxch st(1)
fst dword [esi + 0x83c]
fst dword [esi + 0x848]
fxch st(1)
fst dword [esi + 0x840]
fst dword [esi + 0x844]
fst dword [esi + 0x84c]
fst dword [esi + 0x850]
fst dword [esi + 0x854]
fxch st(1)
fst dword [esi + 0x858]
fst dword [esi + 0x864]
fst dword [esi + 0x868]
fxch st(1)
fst dword [esi + 0x85c]
fst dword [esi + 0x860]
fst dword [esi + 0x86c]
fst dword [esi + 0x870]
fxch st(1)
fst dword [esi + 0x874]
fst dword [esi + 0x878]
fst dword [esi + 0x888]
fxch st(1)
fst dword [esi + 0x87c]
fst dword [esi + 0x880]
fst dword [esi + 0x884]
fst dword [esi + 0x88c]
fst dword [esi + 0x890]
fxch st(1)
fst dword [esi + 0x894]
fst dword [esi + 0x898]
fst dword [esi + 0x8a4]
fstp dword [esi + 0x8a8]
fst dword [esi + 0x89c]
fstp dword [esi + 0x8a0]
lea esp, [esp]
mov dword [eax - 0x100], ebx
mov dword [eax - 0xfc], ebx
mov dword [eax - 0xf8], edi
mov dword [eax - 0xf4], edi
mov dword [eax - 0xc], ebx
mov dword [eax - 8], ebx
mov dword [eax - 4], edi
mov dword [eax], edi
add eax, 0x10
sub ecx, edi
jne 0x6128c0
mov dword [esi + 0x3f8], ebx
mov dword [esi + 0x304], ebx
mov byte [esi + 0x208], bl
mov byte [esi + 0x209], bl
mov byte [esi + 0x20a], bl
mov byte [esi + 0x20b], bl
mov byte [esi + 0x20c], bl
mov byte [esi + 0x20d], bl
mov byte [esi + 0x20e], bl
mov byte [esi + 0x210], bl
mov byte [esi + 0x211], bl
mov byte [esi + 0x212], bl
mov byte [esi + 0x213], bl
mov dword [esi + 0x8bc], ebx
mov dword [esi + 0x8c0], ebx
mov byte [esi + 0x8c4], 1
mov byte [esi + 0x8c5], bl
cmp byte [0x992082], bl
mov ebp, 0x1ab9950
mov dword [esp + 0x1c], ebp
je 0x612969
push ebp
call dword [0x794290]
mov byte [esp + 0x20], 1
lea ecx, [esp + 0x10]
mov byte [esp + 0x2c], 0x32
mov dword [esp + 0x10], ebx
call fcn.00540f30
cmp byte [0x992082], bl
je 0x61298f
push ebp
call dword [0x79428c]
lea edx, [esp + 0x10]
push edx
lea ecx, [esi + 0x908]
mov byte [esp + 0x30], 0x33
call fcn.00435280
cmp byte [0x992082], bl
mov dword [esp + 0x1c], ebp
je 0x6129b7
push ebp
call dword [0x794290]
mov byte [esp + 0x20], 1
lea ecx, [esp + 0x10]
mov byte [esp + 0x2c], 0x34
call fcn.00541eb0
cmp byte [0x992082], bl
je 0x6129d9
push ebp
call dword [0x79428c]
mov byte [esi + 0x91c], bl
cmp byte [0x992082], bl
mov dword [esp + 0x1c], ebp
je 0x6129f2
push ebp
call dword [0x794290]
mov byte [esp + 0x20], 1
lea ecx, [esp + 0x10]
mov byte [esp + 0x2c], 0x35
mov dword [esp + 0x10], ebx
call fcn.00540f30
cmp byte [0x992082], bl
je 0x612a18
push ebp
call dword [0x79428c]
lea eax, [esp + 0x10]
push eax
lea ecx, [esi + 0x95c]
mov byte [esp + 0x30], 0x36
call fcn.00435280
cmp byte [0x992082], bl
mov dword [esp + 0x1c], ebp
je 0x612a40
push ebp
call dword [0x794290]
mov byte [esp + 0x20], 1
lea ecx, [esp + 0x10]
mov byte [esp + 0x2c], 0x37
call fcn.00541eb0
cmp byte [0x992082], bl
je 0x612a62
push ebp
call dword [0x79428c]
mov byte [esi + 0x970], bl
cmp byte [0x992082], bl
mov dword [esp + 0x1c], ebp
je 0x612a7b
push ebp
call dword [0x794290]
mov byte [esp + 0x20], 1
lea ecx, [esp + 0x10]
mov byte [esp + 0x2c], 0x38
mov dword [esp + 0x10], ebx
call fcn.00540f30
cmp byte [0x992082], bl
je 0x612aa1
push ebp
call dword [0x79428c]
lea ecx, [esp + 0x10]
push ecx
lea ecx, [esi + 0x9b0]
mov byte [esp + 0x30], 0x39
call fcn.00435280
cmp byte [0x992082], bl
mov dword [esp + 0x1c], ebp
je 0x612ac9
push ebp
call dword [0x794290]
mov byte [esp + 0x20], 1
lea ecx, [esp + 0x10]
mov byte [esp + 0x2c], 0x3a
call fcn.00541eb0
cmp byte [0x992082], bl
je 0x612aeb
push ebp
call dword [0x79428c]
mov byte [esi + 0x9c4], bl
cmp byte [0x992082], bl
mov dword [esp + 0x1c], ebp
je 0x612b04
push ebp
call dword [0x794290]
mov byte [esp + 0x20], 1
lea ecx, [esp + 0x10]
mov byte [esp + 0x2c], 0x3b
mov dword [esp + 0x10], ebx
call fcn.00540f30
cmp byte [0x992082], bl
je 0x612b2a
push ebp
call dword [0x79428c]
lea edx, [esp + 0x10]
push edx
lea ecx, [esi + 0xa04]
mov byte [esp + 0x30], 0x3c
call fcn.00435280
cmp byte [0x992082], bl
mov dword [esp + 0x1c], ebp
je 0x612b52
push ebp
call dword [0x794290]
mov byte [esp + 0x20], 1
lea ecx, [esp + 0x10]
mov byte [esp + 0x2c], 0x3d
call fcn.00541eb0
cmp byte [0x992082], bl
je 0x612b74
push ebp
call dword [0x79428c]
mov dword [esi + 0x90c], ebx
mov dword [esi + 0x910], ebx
mov dword [esi + 0x914], edi
mov dword [esi + 0x918], edi
mov dword [esi + 0x960], ebx
mov dword [esi + 0x964], ebx
mov dword [esi + 0x968], edi
mov dword [esi + 0x96c], edi
mov dword [esi + 0x9b4], ebx
mov dword [esi + 0x9b8], ebx
mov dword [esi + 0x9bc], edi
mov dword [esi + 0x9c0], edi
mov dword [esi + 0xa08], ebx
mov dword [esi + 0xa0c], ebx
mov dword [esi + 0xa10], edi
mov dword [esi + 0xa14], edi
mov dword [esi + 0xa18], ebx
mov byte [esi + 0xa30], bl
mov byte [esi + 0xa85], bl
lea eax, [esi + 0xa48]
mov ecx, 4
pop ebp
mov dword [eax - 4], edi
mov dword [eax], edi
mov dword [eax + 4], ebx
mov dword [eax + 8], ebx
add eax, 0x10
sub ecx, edi
jne 0x612bf2
mov ecx, dword [esp + 0x20]
mov byte [esi + 0xa84], bl
mov dword [esi + 0xa34], ebx
mov dword [esi + 0xa38], ebx
mov dword [esi + 0xa3c], edi
mov dword [esi + 0xa40], edi
mov dword [esi + 0xa88], ebx
mov dword [esi + 0xa8c], ebx
mov dword [esi + 0xa1c], ebx
mov dword [esi + 0xa20], ebx
mov dword [esi + 0xa24], ebx
mov dword [esi + 0xa28], ebx
pop edi
mov eax, esi
pop esi
pop ebx
mov dword fs:[0], ecx
add esp, 0x20
ret