Function at 0x435d10
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x51ed0e
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
mov eax, 0x105c
call fcn.004da570
mov eax, dword [0x566450]
push ebx
push esi
push edi
push 0x24e4
mov dword [esp + 0x1068], eax
mov dword [esp + 0x24], ecx
call fcn.004f5012
add esp, 4
mov dword [esp + 0x18], eax
xor esi, esi
cmp eax, esi
mov dword [esp + 0x1074], esi
je 0x435d70
mov ecx, eax
call fcn.00434fc0
mov esi, eax
lea ebx, [esi + 0x70]
mov byte [esi + 0x28], 0
mov eax, dword [ebx]
sub eax, ebx
mov dword [eax - 0x66d6], 0x64
mov eax, dword [ebx]
sub eax, ebx
sub eax, 0x66d6
push 4
push eax
mov dword [esp + 0x107c], 0xffffffff
call fcn.004c48f0
add esp, 8
mov edi, eax
mov dword [esp + 0xc], ebx
call fcn.004c4920
lea ecx, [esp + 0xc]
push ecx
mov ecx, eax
call fcn.00434630
mov dword [eax], edi
mov edx, dword [esi + 0x80]
lea ebx, [esi + 0x80]
sub edx, ebx
mov dword [edx - 0x66d6], 0xa0
mov eax, dword [ebx]
sub eax, ebx
sub eax, 0x66d6
push 4
push eax
call fcn.004c48f0
add esp, 8
mov edi, eax
mov dword [esp + 0xc], ebx
call fcn.004c4920
lea ecx, [esp + 0xc]
push ecx
mov ecx, eax
call fcn.00434630
mov dword [eax], edi
lea ebx, [esi + 0x84]
mov dword [esi + 0x20ac], 0xffffffff
mov edx, dword [ebx]
sub edx, ebx
mov dword [edx - 0x66d6], 0x78
mov eax, dword [ebx]
sub eax, ebx
sub eax, 0x66d6
push 4
push eax
call fcn.004c48f0
add esp, 8
mov edi, eax
mov dword [esp + 0xc], ebx
call fcn.004c4920
lea ecx, [esp + 0xc]
push ecx
mov ecx, eax
call fcn.00434630
mov dword [eax], edi
mov edx, dword [esi + 0x24d8]
lea ebx, [esi + 0x24d8]
sub edx, ebx
mov dword [edx - 0x66d6], 0
mov eax, dword [ebx]
sub eax, ebx
sub eax, 0x66d6
push 4
push eax
call fcn.004c48f0
add esp, 8
mov edi, eax
mov dword [esp + 0xc], ebx
call fcn.004c4920
lea ecx, [esp + 0xc]
push ecx
mov ecx, eax
call fcn.00434630
mov ecx, dword [ebp + 8]
mov dword [eax], edi
call fcn.004c21c0
test eax, eax
mov dword [esp + 0x18], eax
mov dword [esp + 0xc], 0
jle 0x4397e6
mov edi, edi
xor eax, eax
mov ecx, 0x40
lea edi, [esp + 0xf60]
rep stosd dword es:[edi], eax
mov ecx, 0x10
lea edi, [esp + 0xf20]
rep stosd dword es:[edi], eax
mov ecx, dword [esp + 0xc]
lea edx, [esp + 0xf60]
push edx
lea eax, [esp + 0xf24]
push eax
push ecx
mov ecx, dword [ebp + 8]
call fcn.004c3010
lea edx, [esp + 0xe8]
push 0x52f4c8
push edx
call fcn.0048fea0
mov ecx, dword [eax + 0x18]
add esp, 8
cmp ecx, 0x10
jb 0x435f0d
mov eax, dword [eax + 4]
jmp 0x435f10
add eax, 4
push eax
lea eax, [esp + 0xf24]
push eax
call fcn.004dcb79
add esp, 8
mov ebx, eax
mov eax, dword [esp + 0x100]
neg ebx
sbb bl, bl
inc bl
cmp eax, 0x10
jb 0x435f45
mov ecx, dword [esp + 0xec]
push ecx
call fcn.004f503d
add esp, 4
xor edi, edi
test bl, bl
mov dword [esp + 0x100], 0xf
mov dword [esp + 0xfc], edi
mov byte [esp + 0xec], 0
je 0x435f7c
lea edx, [esp + 0xf60]
push edx
call fcn.004dcb2f
add esp, 4
mov dword [esi], eax
jmp 0x4397d1
lea eax, [esp + 0x120]
push 0x52f4bc
push eax
call fcn.0048fea0
mov ecx, dword [eax + 0x18]
add esp, 8
cmp ecx, 0x10
jb 0x435f9e
mov eax, dword [eax + 4]
jmp 0x435fa1
add eax, 4
push eax
lea ecx, [esp + 0xf24]
push ecx
call fcn.004dcb79
add esp, 8
mov ebx, eax
mov eax, dword [esp + 0x138]
neg ebx
sbb bl, bl
inc bl
cmp eax, 0x10
jb 0x435fd6
mov edx, dword [esp + 0x124]
push edx
call fcn.004f503d
add esp, 4
test bl, bl
mov dword [esp + 0x138], 0xf
mov dword [esp + 0x134], edi
mov byte [esp + 0x124], 0
je 0x436057
lea eax, [esp + 0xf60]
push eax
call fcn.00480320
mov ecx, eax
call fcn.00480b60
mov edx, dword [esi + 4]
mov ecx, dword [edx]
sub ecx, edx
sub ecx, 0x66d6
mov dl, byte [eax]
inc eax
mov byte [ecx], dl
inc ecx
test dl, dl
jne 0x436015
mov edi, dword [esi + 4]
push 0x100
mov eax, dword [edi]
sub eax, edi
sub eax, 0x66d6
push eax
call fcn.004c48f0
add esp, 8
mov ebx, eax
mov dword [esp + 0x10], edi
call fcn.004c4920
lea ecx, [esp + 0x10]
push ecx
mov ecx, eax
call fcn.00434630
mov dword [eax], ebx
jmp 0x4397d1
lea edx, [esp + 0x78]
push 0x5329c8
push edx
call fcn.0048fea0
mov ecx, dword [eax + 0x18]
add esp, 8
cmp ecx, 0x10
jb 0x436076
mov eax, dword [eax + 4]
jmp 0x436079
add eax, 4
push eax
lea eax, [esp + 0xf24]
push eax
call fcn.004dcb79
add esp, 8
mov ebx, eax
mov eax, dword [esp + 0x90]
neg ebx
sbb bl, bl
inc bl
cmp eax, 0x10
jb 0x4360ab
mov ecx, dword [esp + 0x7c]
push ecx
call fcn.004f503d
add esp, 4
test bl, bl
mov dword [esp + 0x90], 0xf
mov dword [esp + 0x8c], edi
mov byte [esp + 0x7c], 0
je 0x436470
lea edx, [esp + 0x24]
push 0x5329b8
push edx
call fcn.0048fea0
mov ecx, dword [eax + 0x18]
add esp, 8
cmp ecx, 0x10
jb 0x4360e9
mov eax, dword [eax + 4]
jmp 0x4360ec
add eax, 4
push eax
lea eax, [esp + 0xf64]
push eax
call fcn.004dcb79
add esp, 8
mov ebx, eax
mov eax, dword [esp + 0x3c]
neg ebx
sbb bl, bl
inc bl
cmp eax, 0x10
jb 0x43611b
mov ecx, dword [esp + 0x28]
push ecx
call fcn.004f503d
add esp, 4
test bl, bl
mov dword [esp + 0x3c], 0xf
mov dword [esp + 0x38], edi
mov byte [esp + 0x28], 0
je 0x436148
mov edx, dword [esi + 0x10]
lea eax, [esi + 0x10]
sub edx, eax
mov dword [edx - 0x66d6], edi
lea edi, [esi + 0x10]
push 4
jmp 0x436027
lea eax, [esp + 0xb0]
push 0x5329a8
push eax
call fcn.0048fea0
mov ecx, dword [eax + 0x18]
add esp, 8
cmp ecx, 0x10
jb 0x43616a
mov eax, dword [eax + 4]
jmp 0x43616d
add eax, 4
push eax
lea ecx, [esp + 0xf64]
push ecx
call fcn.004dcb79
add esp, 8
mov ebx, eax
mov eax, dword [esp + 0xc8]
neg ebx
sbb bl, bl
inc bl
cmp eax, 0x10
jb 0x4361a2
mov edx, dword [esp + 0xb4]
push edx
call fcn.004f503d
add esp, 4
test bl, bl
mov dword [esp + 0xc8], 0xf
mov dword [esp + 0xc4], edi
mov byte [esp + 0xb4], 0
je 0x4361dc
mov ecx, dword [esi + 0x10]
lea eax, [esi + 0x10]
sub ecx, eax
mov dword [ecx - 0x66d6], 1
lea edi, [esi + 0x10]
push 4
jmp 0x436027
lea edx, [esp + 0x40]
push 0x532998
push edx
call fcn.0048fea0
mov ecx, dword [eax + 0x18]
add esp, 8
cmp ecx, 0x10
jb 0x4361fb
mov eax, dword [eax + 4]
jmp 0x4361fe
add eax, 4
push eax
lea eax, [esp + 0xf64]
push eax
call fcn.004dcb79
add esp, 8
mov ebx, eax
mov eax, dword [esp + 0x58]
neg ebx
sbb bl, bl
inc bl
cmp eax, 0x10
jb 0x43622d
mov ecx, dword [esp + 0x44]
push ecx
call fcn.004f503d
add esp, 4
test bl, bl
mov dword [esp + 0x58], 0xf
mov dword [esp + 0x54], edi
mov byte [esp + 0x44], 0
je 0x43625e
mov edx, dword [esi + 0x10]
lea eax, [esi + 0x10]
sub edx, eax
mov dword [edx - 0x66d6], 2
lea edi, [esi + 0x10]
push 4
jmp 0x436027
lea eax, [esp + 0xb68]
push 0x532988
push eax
call fcn.0048fea0
mov ecx, dword [eax + 0x18]
mov edi, 0x10
add esp, 8
cmp ecx, edi
jb 0x436284
mov eax, dword [eax + 4]
jmp 0x436287
add eax, 4
push eax
lea ecx, [esp + 0xf64]
push ecx
call fcn.004dcb79
add esp, 8
mov ebx, eax
neg ebx
sbb bl, bl
lea ecx, [esp + 0xb68]
inc bl
call fcn.0040527b
test bl, bl
je 0x4362cc
mov edx, dword [esi + 0x10]
lea eax, [esi + 0x10]
sub edx, eax
mov dword [edx - 0x66d6], 3
lea edi, [esi + 0x10]
push 4
jmp 0x436027
lea eax, [esp + 0x190]
push 0x532978
push eax
call fcn.0048fea0
mov ecx, dword [eax + 0x18]
add esp, 8
cmp ecx, edi
jb 0x4362ed
mov eax, dword [eax + 4]
jmp 0x4362f0
add eax, 4
push eax
lea ecx, [esp + 0xf64]
push ecx
call fcn.004dcb79
add esp, 8
mov ebx, eax
neg ebx
sbb bl, bl
lea ecx, [esp + 0x190]
inc bl
call fcn.0040527b
test bl, bl
je 0x436335
mov edx, dword [esi + 0x10]
lea eax, [esi + 0x10]
sub edx, eax
mov dword [edx - 0x66d6], 4
lea edi, [esi + 0x10]
push 4
jmp 0x436027
lea eax, [esp + 0xbd8]
push 0x532968
push eax
call fcn.0048fea0
mov ecx, dword [eax + 0x18]
add esp, 8
cmp ecx, edi
jb 0x436356
mov eax, dword [eax + 4]
jmp 0x436359
add eax, 4
push eax
lea ecx, [esp + 0xf64]
push ecx
call fcn.004dcb79
add esp, 8
mov ebx, eax
neg ebx
sbb bl, bl
lea ecx, [esp + 0xbd8]
inc bl
call fcn.0040527b
test bl, bl
je 0x43639e
mov edx, dword [esi + 0x10]
lea eax, [esi + 0x10]
sub edx, eax
mov dword [edx - 0x66d6], 5
lea edi, [esi + 0x10]
push 4
jmp 0x436027
lea eax, [esp + 0x1c8]
push 0x532950
push eax
call fcn.0048fea0
mov ecx, dword [eax + 0x18]
add esp, 8
cmp ecx, edi
jb 0x4363bf
mov eax, dword [eax + 4]
jmp 0x4363c2
add eax, 4
push eax
lea ecx, [esp + 0xf64]
push ecx
call fcn.004dcb79
add esp, 8
mov ebx, eax
neg ebx
sbb bl, bl
lea ecx, [esp + 0x1c8]
inc bl
call fcn.0040527b
test bl, bl
je 0x436407
mov edx, dword [esi + 0x10]
lea eax, [esi + 0x10]
sub edx, eax
mov dword [edx - 0x66d6], 6
lea edi, [esi + 0x10]
push 4
jmp 0x436027
lea eax, [esp + 0x890]
push 0x53293c
push eax
call fcn.0048fea0
mov ecx, dword [eax + 0x18]
add esp, 8
cmp ecx, edi
jb 0x436428
mov eax, dword [eax + 4]
jmp 0x43642b
add eax, 4
push eax
lea ecx, [esp + 0xf64]
push ecx
call fcn.004dcb79
add esp, 8
mov ebx, eax
neg ebx
sbb bl, bl
lea ecx, [esp + 0x890]
inc bl
call fcn.0040527b
test bl, bl
je 0x436466
mov edx, dword [esi + 0x10]
lea eax, [esi + 0x10]
sub edx, eax
mov dword [edx - 0x66d6], 7
lea edi, [esi + 0x10]
push 4
jmp 0x436027
lea edx, [esp + 0x5c]
push 0x532928
push edx
call fcn.0048fea0
mov ecx, dword [eax + 0x18]
add esp, 8
cmp ecx, 0x10
jb 0x43648f
mov eax, dword [eax + 4]
jmp 0x436492
add eax, 4
push eax
lea eax, [esp + 0xf24]
push eax
call fcn.004dcb79
add esp, 8
mov ebx, eax
mov eax, dword [esp + 0x74]
neg ebx
sbb bl, bl
inc bl
cmp eax, 0x10
jb 0x4364c1
mov ecx, dword [esp + 0x60]
push ecx
call fcn.004f503d
add esp, 4
test bl, bl
mov dword [esp + 0x74], 0xf
mov dword [esp + 0x70], edi
mov byte [esp + 0x60], 0
je 0x436687
lea edx, [esp + 0x94]
push 0x532920
push edx
call fcn.0048fea0
mov ecx, dword [eax + 0x18]
add esp, 8
cmp ecx, 0x10
jb 0x4364fc
mov eax, dword [eax + 4]
jmp 0x4364ff
add eax, 4
push eax
lea eax, [esp + 0xf64]
push eax
call fcn.004dcb79
add esp, 8
mov ebx, eax
mov eax, dword [esp + 0xac]
neg ebx
sbb bl, bl
inc bl
cmp eax, 0x10
jb 0x436534
mov ecx, dword [esp + 0x98]
push ecx
call fcn.004f503d
add esp, 4
test bl, bl
mov dword [esp + 0xac], 0xf
mov dword [esp + 0xa8], edi
mov byte [esp + 0x98], 0
je 0x436565
mov edx, dword [esi + 0x14]
lea eax, [esi + 0x14]
sub edx, eax
mov dword [edx - 0x66d6], edi
jmp 0x436651
lea eax, [esp + 0xcc]
push 0x532918
push eax
call fcn.0048fea0
mov ecx, dword [eax + 0x18]
add esp, 8
cmp ecx, 0x10
jb 0x436587
mov eax, dword [eax + 4]
jmp 0x43658a
add eax, 4
push eax
lea ecx, [esp + 0xf64]
push ecx
call fcn.004dcb79
add esp, 8
mov ebx, eax
mov eax, dword [esp + 0xe4]
neg ebx
sbb bl, bl
inc bl
cmp eax, 0x10
jb 0x4365bf
mov edx, dword [esp + 0xd0]
push edx
call fcn.004f503d
add esp, 4
test bl, bl
mov dword [esp + 0xe4], 0xf
mov dword [esp + 0xe0], edi
mov byte [esp + 0xd0], 0
je 0x4365f1
mov ecx, dword [esi + 0x14]
lea eax, [esi + 0x14]
sub ecx, eax
mov dword [ecx - 0x66d6], 1
jmp 0x436651
lea edx, [esp + 0x200]
push 0x532910
push edx
call fcn.0048fea0
mov ecx, dword [eax + 0x18]
add esp, 8
cmp ecx, 0x10
jb 0x436613
mov eax, dword [eax + 4]
jmp 0x436616
add eax, 4
push eax
lea eax, [esp + 0xf64]
push eax
call fcn.004dcb79
add esp, 8
mov ebx, eax
neg ebx
sbb bl, bl
lea ecx, [esp + 0x200]
inc bl
call fcn.0040527b
test bl, bl
je 0x436651
mov ecx, dword [esi + 0x14]
lea eax, [esi + 0x14]
sub ecx, eax
mov dword [ecx - 0x66d6], 0xffffffff
mov eax, dword [esi + 0x14]
lea edi, [esi + 0x14]
sub eax, edi
sub eax, 0x66d6
push 4
push eax
call fcn.004c48f0
add esp, 8
mov ebx, eax
mov dword [esp + 0x10], edi
call fcn.004c4920
lea edx, [esp + 0x10]
push edx
mov ecx, eax
call fcn.00434630
mov dword [eax], ebx
jmp 0x4397d1
lea eax, [esp + 0x104]
push 0x5328f8
push eax
call fcn.0048fea0
mov ecx, dword [eax + 0x18]
add esp, 8
cmp ecx, 0x10
jb 0x4366a9
mov eax, dword [eax + 4]
jmp 0x4366ac
add eax, 4
push eax
lea ecx, [esp + 0xf24]
push ecx
call fcn.004dcb79
add esp, 8
mov ebx, eax
mov eax, dword [esp + 0x11c]
neg ebx
sbb bl, bl
inc bl
cmp eax, 0x10
jb 0x4366e1
mov edx, dword [esp + 0x108]
push edx
call fcn.004f503d
add esp, 4
test bl, bl
mov dword [esp + 0x11c], 0xf
mov dword [esp + 0x118], edi
mov byte [esp + 0x108], 0
je 0x436714
lea eax, [esp + 0xf60]
push eax
call fcn.004dcb2f
lea ecx, [esi + 0x18]
jmp 0x4397bf
lea eax, [esp + 0x13c]
push 0x5328ec
push eax
call fcn.0048fea0
mov ecx, dword [eax + 0x18]
add esp, 8
cmp ecx, 0x10
jb 0x436736
mov eax, dword [eax + 4]
jmp 0x436739
add eax, 4
push eax
lea ecx, [esp + 0xf24]
push ecx
call fcn.004dcb79
add esp, 8
mov ebx, eax
mov eax, dword [esp + 0x154]
neg ebx
sbb bl, bl
inc bl
cmp eax, 0x10
jb 0x43676e
mov edx, dword [esp + 0x140]
push edx
call fcn.004f503d
add esp, 4
test bl, bl
mov dword [esp + 0x154], 0xf
mov dword [esp + 0x150], edi
mov byte [esp + 0x140], 0
je 0x436c74
lea eax, [esp + 0xd98]
push 0x5328e0
push eax
call fcn.0048fea0
mov ecx, dword [eax + 0x18]
add esp, 8
cmp ecx, 0x10
jb 0x4367b2
mov eax, dword [eax + 4]
jmp 0x4367b5
add eax, 4
push eax
lea ecx, [esp + 0xf64]
push ecx
call fcn.004dcb79
add esp, 8
mov ebx, eax
neg ebx
sbb bl, bl
lea ecx, [esp + 0xd98]
inc bl
call fcn.0040527b
test bl, bl
je 0x4367e6
mov dword [esi + 0x1c], edi
jmp 0x4397d1
lea edx, [esp + 0x238]
push 0x5328d0
push edx
call fcn.0048fea0
mov ecx, dword [eax + 0x18]
mov edi, 0x10
add esp, 8
cmp ecx, edi
jb 0x43680c
mov eax, dword [eax + 4]
jmp 0x43680f
add eax, 4
push eax
lea eax, [esp + 0xf64]
push eax
call fcn.004dcb79
add esp, 8
mov ebx, eax
neg ebx
sbb bl, bl
lea ecx, [esp + 0x238]
inc bl
call fcn.0040527b
test bl, bl
je 0x436844
mov dword [esi + 0x1c], 1
jmp 0x4397d1
lea ecx, [esp + 0x8c8]
push 0x5328c0
push ecx
call fcn.0048fea0
mov ecx, dword [eax + 0x18]
add esp, 8
cmp ecx, edi
jb 0x436865
mov eax, dword [eax + 4]
jmp 0x436868
add eax, 4
push eax
lea edx, [esp + 0xf64]
push edx
call fcn.004dcb79
add esp, 8
mov ebx, eax
neg ebx
sbb bl, bl
lea ecx, [esp + 0x8c8]
inc bl
call fcn.0040527b
test bl, bl
je 0x43689d
mov dword [esi + 0x1c], 2
jmp 0x4397d1
lea eax, [esp + 0x270]
push 0x5328b0
push eax
call fcn.0048fea0
mov ecx, dword [eax + 0x18]
add esp, 8
cmp ecx, edi
jb 0x4368be
mov eax, dword [eax + 4]
jmp 0x4368c1
add eax, 4
push eax
lea ecx, [esp + 0xf64]
push ecx
call fcn.004dcb79
add esp, 8
mov ebx, eax
neg ebx
sbb bl, bl
lea ecx, [esp + 0x270]
inc bl
call fcn.0040527b
test bl, bl
je 0x4368f6
mov dword [esi + 0x1c], 3
jmp 0x4397d1
lea edx, [esp + 0xc10]
push 0x5328a4
push edx
call fcn.0048fea0
mov ecx, dword [eax + 0x18]
add esp, 8
cmp ecx, edi
jb 0x436917
mov eax, dword [eax + 4]
jmp 0x43691a
add eax, 4
push eax
lea eax, [esp + 0xf64]
push eax
call fcn.004dcb79
add esp, 8
mov ebx, eax
neg ebx
sbb bl, bl
lea ecx, [esp + 0xc10]
inc bl
call fcn.0040527b
test bl, bl
je 0x43694f
mov dword [esi + 0x1c], 4
jmp 0x4397d1
lea ecx, [esp + 0x2a8]
push 0x532894
push ecx
call fcn.0048fea0
mov ecx, dword [eax + 0x18]
add esp, 8
cmp ecx, edi
jb 0x436970
mov eax, dword [eax + 4]
jmp 0x436973
add eax, 4
push eax
lea edx, [esp + 0xf64]
push edx
call fcn.004dcb79
add esp, 8
mov ebx, eax
neg ebx
sbb bl, bl
lea ecx, [esp + 0x2a8]
inc bl
call fcn.0040527b
test bl, bl
je 0x4369a8
mov dword [esi + 0x1c], 5
jmp 0x4397d1
lea eax, [esp + 0x900]
push 0x532884
push eax
call fcn.0048fea0
mov ecx, dword [eax + 0x18]
add esp, 8
cmp ecx, edi
jb 0x4369c9
mov eax, dword [eax + 4]
jmp 0x4369cc
add eax, 4
push eax
lea ecx, [esp + 0xf64]
push ecx
call fcn.004dcb79
add esp, 8
mov ebx, eax
neg ebx
sbb bl, bl
lea ecx, [esp + 0x900]
inc bl
call fcn.0040527b
test bl, bl
je 0x436a01
mov dword [esi + 0x1c], 6
jmp 0x4397d1
lea edx, [esp + 0x2e0]
push 0x532878
push edx
call fcn.0048fea0
mov ecx, dword [eax + 0x18]
add esp, 8
cmp ecx, edi
jb 0x436a22
mov eax, dword [eax + 4]
jmp 0x436a25
add eax, 4
push eax
lea eax, [esp + 0xf64]
push eax
call fcn.004dcb79
add esp, 8
mov ebx, eax
neg ebx
sbb bl, bl
lea ecx, [esp + 0x2e0]
inc bl
call fcn.0040527b
test bl, bl
je 0x436a5a
mov dword [esi + 0x1c], 7
jmp 0x4397d1
lea ecx, [esp + 0xe78]
push 0x53286c
push ecx
call fcn.0048fea0
mov ecx, dword [eax + 0x18]
add esp, 8
cmp ecx, edi
jb 0x436a7b
mov eax, dword [eax + 4]
jmp 0x436a7e
add eax, 4
push eax
lea edx, [esp + 0xf64]
push edx
call fcn.004dcb79
add esp, 8
mov ebx, eax
neg ebx
sbb bl, bl
lea ecx, [esp + 0xe78]
inc bl
call fcn.0040527b
test bl, bl
je 0x436ab3
mov dword [esi + 0x1c], 8
jmp 0x4397d1
lea eax, [esp + 0x318]
push 0x53285c
push eax
call fcn.0048fea0
mov ecx, dword [eax + 0x18]
add esp, 8
cmp ecx, edi
jb 0x436ad4
mov eax, dword [eax + 4]
jmp 0x436ad7
add eax, 4
push eax
lea ecx, [esp + 0xf64]
push ecx
call fcn.004dcb79
add esp, 8
mov ebx, eax
neg ebx
sbb bl, bl
lea ecx, [esp + 0x318]
inc bl
call fcn.0040527b
test bl, bl
je 0x436b0c
mov dword [esi + 0x1c], 9
jmp 0x4397d1
lea edx, [esp + 0x938]
push 0x53284c
push edx
call fcn.0048fea0
mov ecx, dword [eax + 0x18]
add esp, 8
cmp ecx, edi
jb 0x436b2d
mov eax, dword [eax + 4]
jmp 0x436b30
add eax, 4
push eax
lea eax, [esp + 0xf64]
push eax
call fcn.004dcb79
add esp, 8
mov ebx, eax
neg ebx
sbb bl, bl
lea ecx, [esp + 0x938]
inc bl
call fcn.0040527b
test bl, bl
je 0x436b65
mov dword [esi + 0x1c], 0xa
jmp 0x4397d1
lea ecx, [esp + 0x350]
push 0x53283c
push ecx
call fcn.0048fea0
mov ecx, dword [eax + 0x18]
add esp, 8
cmp ecx, edi
jb 0x436b86
mov eax, dword [eax + 4]
jmp 0x436b89
add eax, 4
push eax
lea edx, [esp + 0xf64]
push edx
call fcn.004dcb79
add esp, 8
mov ebx, eax
neg ebx
sbb bl, bl
lea ecx, [esp + 0x350]
inc bl
call fcn.0040527b
test bl, bl
je 0x436bbe
mov dword [esi + 0x1c], 0xb
jmp 0x4397d1
lea eax, [esp + 0xc48]
push 0x532824
push eax
call fcn.0048fea0
mov ecx, dword [eax + 0x18]
add esp, 8
cmp ecx, edi
jb 0x436bdf
mov eax, dword [eax + 4]
jmp 0x436be2
add eax, 4
push eax
lea ecx, [esp + 0xf64]
push ecx
call fcn.004dcb79
add esp, 8
mov ebx, eax
neg ebx
sbb bl, bl
lea ecx, [esp + 0xc48]
inc bl
call fcn.0040527b
test bl, bl
je 0x436c17
mov dword [esi + 0x1c], 0xc
jmp 0x4397d1
lea edx, [esp + 0x388]
push 0x532810
push edx
call fcn.0048fea0
mov ecx, dword [eax + 0x18]
add esp, 8
cmp ecx, edi
jb 0x436c38
mov eax, dword [eax + 4]
jmp 0x436c3b
add eax, 4
push eax
lea eax, [esp + 0xf64]
push eax
call fcn.004dcb79
add esp, 8
mov ebx, eax
neg ebx
sbb bl, bl
lea ecx, [esp + 0x388]
inc bl
call fcn.0040527b
test bl, bl
je 0x4397d1
mov dword [esi + 0x1c], 0xd
jmp 0x4397d1
lea ecx, [esp + 0x970]
push 0x532800
push ecx
call fcn.0048fea0
mov ecx, dword [eax + 0x18]
add esp, 8
cmp ecx, 0x10
jb 0x436c96
mov eax, dword [eax + 4]
jmp 0x436c99
add eax, 4
push eax
lea edx, [esp + 0xf24]
push edx
call fcn.004dcb79
add esp, 8
mov ebx, eax
neg ebx
sbb bl, bl
lea ecx, [esp + 0x970]
inc bl
call fcn.0040527b
test bl, bl
je 0x437a7b
lea eax, [esp + 0xf60]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x436cd0
sub eax, edx
mov dword [esp + 0x10], eax
jne 0x436cfa
mov ecx, dword [esi + 0xc]
lea eax, [esi + 0xc]
sub ecx, eax
mov dword [ecx - 0x66d6], edi
lea ecx, [esi + 0xc]
call fcn.00434750
jmp 0x4397d1
lea edx, [esp + 0x3c0]
push 0x5327f0
push edx
call fcn.0048fea0
mov ecx, dword [eax + 0x18]
mov edi, 0x10
add esp, 8
cmp ecx, edi
jb 0x436d20
mov eax, dword [eax + 4]
jmp 0x436d23
add eax, 4
push eax
lea eax, [esp + 0xf64]
push eax
call fcn.004dcb79
add esp, 8
mov ebx, eax
neg ebx
sbb bl, bl
lea ecx, [esp + 0x3c0]
inc bl
call fcn.0040527b
test bl, bl
je 0x436d6b
mov ecx, dword [esi + 0xc]
lea eax, [esi + 0xc]
sub ecx, eax
mov dword [ecx - 0x66d6], 1
lea ecx, [esi + 0xc]
call fcn.00434750
jmp 0x4397d1
lea edx, [esp + 0xdd0]
push 0x5327d8
push edx
call fcn.0048fea0
mov ecx, dword [eax + 0x18]
add esp, 8
cmp ecx, edi
jb 0x436d8c
mov eax, dword [eax + 4]
jmp 0x436d8f
add eax, 4
push eax
lea eax, [esp + 0xf64]
push eax
call fcn.004dcb79
add esp, 8
mov ebx, eax
neg ebx
sbb bl, bl
lea ecx, [esp + 0xdd0]
inc bl
call fcn.0040527b
test bl, bl
je 0x436dd7
mov ecx, dword [esi + 0xc]
lea eax, [esi + 0xc]
sub ecx, eax
mov dword [ecx - 0x66d6], 2
lea ecx, [esi + 0xc]
call fcn.00434750
jmp 0x4397d1
lea edx, [esp + 0x3f8]
push 0x5327c8
push edx
call fcn.0048fea0
mov ecx, dword [eax + 0x18]
add esp, 8
cmp ecx, edi
jb 0x436df8
mov eax, dword [eax + 4]
jmp 0x436dfb
add eax, 4
push eax
lea eax, [esp + 0xf64]
push eax
call fcn.004dcb79
add esp, 8
mov ebx, eax
neg ebx
sbb bl, bl
lea ecx, [esp + 0x3f8]
inc bl
call fcn.0040527b
test bl, bl
je 0x436e43
mov ecx, dword [esi + 0xc]
lea eax, [esi + 0xc]
sub ecx, eax
mov dword [ecx - 0x66d6], 3
lea ecx, [esi + 0xc]
call fcn.00434750
jmp 0x4397d1
lea edx, [esp + 0x9a8]
push 0x5327b0
push edx
call fcn.0048fea0
mov ecx, dword [eax + 0x18]
add esp, 8
cmp ecx, edi
jb 0x436e64
mov eax, dword [eax + 4]
jmp 0x436e67
add eax, 4
push eax
lea eax, [esp + 0xf64]
push eax
call fcn.004dcb79
add esp, 8
mov ebx, eax
neg ebx
sbb bl, bl
lea ecx, [esp + 0x9a8]
inc bl
call fcn.0040527b
test bl, bl
je 0x436eaf
mov ecx, dword [esi + 0xc]
lea eax, [esi + 0xc]
sub ecx, eax
mov dword [ecx - 0x66d6], 4
lea ecx, [esi + 0xc]
call fcn.00434750
jmp 0x4397d1
lea edx, [esp + 0x430]
push 0x532794
push edx
call fcn.0048fea0
mov ecx, dword [eax + 0x18]
add esp, 8
cmp ecx, edi
jb 0x436ed0
mov eax, dword [eax + 4]
jmp 0x436ed3
add eax, 4
push eax
lea eax, [esp + 0xf64]
push eax
call fcn.004dcb79
add esp, 8
mov ebx, eax
neg ebx
sbb bl, bl
lea ecx, [esp + 0x430]
inc bl
call fcn.0040527b
test bl, bl
je 0x436f1b
mov ecx, dword [esi + 0xc]
lea eax, [esi + 0xc]
sub ecx, eax
mov dword [ecx - 0x66d6], 5
lea ecx, [esi + 0xc]
call fcn.00434750
jmp 0x4397d1
lea edx, [esp + 0xc80]
push 0x532784
push edx
call fcn.0048fea0
mov ecx, dword [eax + 0x18]
add esp, 8
cmp ecx, edi
jb 0x436f3c
mov eax, dword [eax + 4]
jmp 0x436f3f
add eax, 4
push eax
lea eax, [esp + 0xf64]
push eax
call fcn.004dcb79
add esp, 8
mov ebx, eax
neg ebx
sbb bl, bl
lea ecx, [esp + 0xc80]
inc bl
call fcn.0040527b
test bl, bl
je 0x436f87
mov ecx, dword [esi + 0xc]
lea eax, [esi + 0xc]
sub ecx, eax
mov dword [ecx - 0x66d6], 6
lea ecx, [esi + 0xc]
call fcn.00434750
jmp 0x4397d1
lea edx, [esp + 0x468]
push 0x532770
push edx
call fcn.0048fea0
mov ecx, dword [eax + 0x18]
add esp, 8
cmp ecx, edi
jb 0x436fa8
mov eax, dword [eax + 4]
jmp 0x436fab
add eax, 4
push eax
lea eax, [esp + 0xf64]
push eax
call fcn.004dcb79
add esp, 8
mov ebx, eax
neg ebx
sbb bl, bl
lea ecx, [esp + 0x468]
inc bl
call fcn.0040527b
test bl, bl
je 0x436ff3
mov ecx, dword [esi + 0xc]
lea eax, [esi + 0xc]
sub ecx, eax
mov dword [ecx - 0x66d6], 7
lea ecx, [esi + 0xc]
call fcn.00434750
jmp 0x4397d1
lea edx, [esp + 0x9e0]
push 0x53275c
push edx
call fcn.0048fea0
mov ecx, dword [eax + 0x18]
add esp, 8
cmp ecx, edi
jb 0x437014
mov eax, dword [eax + 4]
jmp 0x437017
add eax, 4
push eax
lea eax, [esp + 0xf64]
push eax
call fcn.004dcb79
add esp, 8
mov ebx, eax
neg ebx
sbb bl, bl
lea ecx, [esp + 0x9e0]
inc bl
call fcn.0040527b
test bl, bl
je 0x43705f
mov ecx, dword [esi + 0xc]
lea eax, [esi + 0xc]
sub ecx, eax
mov dword [ecx - 0x66d6], 8
lea ecx, [esi + 0xc]
call fcn.00434750
jmp 0x4397d1
lea edx, [esp + 0x4a0]
push 0x532744
push edx
call fcn.0048fea0
mov ecx, dword [eax + 0x18]
add esp, 8
cmp ecx, edi
jb 0x437080
mov eax, dword [eax + 4]
jmp 0x437083
add eax, 4
push eax
lea eax, [esp + 0xf64]
push eax
call fcn.004dcb79
add esp, 8
mov ebx, eax
neg ebx
sbb bl, bl
lea ecx, [esp + 0x4a0]
inc bl
call fcn.0040527b
test bl, bl
je 0x4370cb
mov ecx, dword [esi + 0xc]
lea eax, [esi + 0xc]
sub ecx, eax
mov dword [ecx - 0x66d6], 9
lea ecx, [esi + 0xc]
call fcn.00434750
jmp 0x4397d1
lea edx, [esp + 0xee8]
push 0x532738
push edx
call fcn.0048fea0
mov ecx, dword [eax + 0x18]
add esp, 8
cmp ecx, edi
jb 0x4370ec
mov eax, dword [eax + 4]
jmp 0x4370ef
add eax, 4
push eax
lea eax, [esp + 0xf64]
push eax
call fcn.004dcb79
add esp, 8
mov ebx, eax
neg ebx
sbb bl, bl
lea ecx, [esp + 0xee8]
inc bl
call fcn.0040527b
test bl, bl
je 0x437137
mov ecx, dword [esi + 0xc]
lea eax, [esi + 0xc]
sub ecx, eax
mov dword [ecx - 0x66d6], 0xa
lea ecx, [esi + 0xc]
call fcn.00434750
jmp 0x4397d1
lea edx, [esp + 0x4d8]
push 0x532728
push edx
call fcn.0048fea0
mov ecx, dword [eax + 0x18]
add esp, 8
cmp ecx, edi
jb 0x437158
mov eax, dword [eax + 4]
jmp 0x43715b
add eax, 4
push eax
lea eax, [esp + 0xf64]
push eax
call fcn.004dcb79
add esp, 8
mov ebx, eax
neg ebx
sbb bl, bl
lea ecx, [esp + 0x4d8]
inc bl
call fcn.0040527b
test bl, bl
je 0x4371a3
mov ecx, dword [esi + 0xc]
lea eax, [esi + 0xc]
sub ecx, eax
mov dword [ecx - 0x66d6], 0xb
lea ecx, [esi + 0xc]
call fcn.00434750
jmp 0x4397d1
lea edx, [esp + 0xa18]
push 0x532714
push edx
call fcn.0048fea0
mov ecx, dword [eax + 0x18]
add esp, 8
cmp ecx, edi
jb 0x4371c4
mov eax, dword [eax + 4]
jmp 0x4371c7
add eax, 4
push eax
lea eax, [esp + 0xf64]
push eax
call fcn.004dcb79
add esp, 8
mov ebx, eax
neg ebx
sbb bl, bl
lea ecx, [esp + 0xa18]
inc bl
call fcn.0040527b
test bl, bl
je 0x43720f
mov ecx, dword [esi + 0xc]
lea eax, [esi + 0xc]
sub ecx, eax
mov dword [ecx - 0x66d6], 0xc
lea ecx, [esi + 0xc]
call fcn.00434750
jmp 0x4397d1
lea edx, [esp + 0x510]
push 0x5326f8
push edx
call fcn.0048fea0
mov ecx, dword [eax + 0x18]
add esp, 8
cmp ecx, edi
jb 0x437230
mov eax, dword [eax + 4]
jmp 0x437233
add eax, 4
push eax
lea eax, [esp + 0xf64]
push eax
call fcn.004dcb79
add esp, 8
mov ebx, eax
neg ebx
sbb bl, bl
lea ecx, [esp + 0x510]
inc bl
call fcn.0040527b
test bl, bl
je 0x43727b
mov ecx, dword [esi + 0xc]
lea eax, [esi + 0xc]
sub ecx, eax
mov dword [ecx - 0x66d6], 0xd
lea ecx, [esi + 0xc]
call fcn.00434750
jmp 0x4397d1
lea edx, [esp + 0xcb8]
push 0x5326e8
push edx
call fcn.0048fea0
mov ecx, dword [eax + 0x18]
add esp, 8
cmp ecx, edi
jb 0x43729c
mov eax, dword [eax + 4]
jmp 0x43729f
add eax, 4
push eax
lea eax, [esp + 0xf64]
push eax
call fcn.004dcb79
add esp, 8
mov ebx, eax
neg ebx
sbb bl, bl
lea ecx, [esp + 0xcb8]
inc bl
call fcn.0040527b
test bl, bl
je 0x4372e7
mov ecx, dword [esi + 0xc]
lea eax, [esi + 0xc]
sub ecx, eax
mov dword [ecx - 0x66d6], 0xe
lea ecx, [esi + 0xc]
call fcn.00434750
jmp 0x4397d1
lea edx, [esp + 0x548]
push 0x5326d0
push edx
call fcn.0048fea0
mov ecx, dword [eax + 0x18]
add esp, 8
cmp ecx, edi
jb 0x437308
mov eax, dword [eax + 4]
jmp 0x43730b
add eax, 4
push eax
lea eax, [esp + 0xf64]
push eax
call fcn.004dcb79
add esp, 8
mov ebx, eax
neg ebx
sbb bl, bl
lea ecx, [esp + 0x548]
inc bl
call fcn.0040527b
test bl, bl
je 0x437353
mov ecx, dword [esi + 0xc]
lea eax, [esi + 0xc]
sub ecx, eax
mov dword [ecx - 0x66d6], 0xf
lea ecx, [esi + 0xc]
call fcn.00434750
jmp 0x4397d1
lea edx, [esp + 0xa50]
push 0x5326c0
push edx
call fcn.0048fea0
mov ecx, dword [eax + 0x18]
add esp, 8
cmp ecx, edi
jb 0x437374
mov eax, dword [eax + 4]
jmp 0x437377
add eax, 4
push eax
lea eax, [esp + 0xf64]
push eax
call fcn.004dcb79
add esp, 8
mov ebx, eax
neg ebx
sbb bl, bl
lea ecx, [esp + 0xa50]
inc bl
call fcn.0040527b
test bl, bl
je 0x4373bb
mov ecx, dword [esi + 0xc]
lea eax, [esi + 0xc]
sub ecx, eax
mov dword [ecx - 0x66d6], edi
lea ecx, [esi + 0xc]
call fcn.00434750
jmp 0x4397d1
lea edx, [esp + 0x580]
push 0x5326b0
push edx
call fcn.0048fea0
mov ecx, dword [eax + 0x18]
add esp, 8
cmp ecx, edi
jb 0x4373dc
mov eax, dword [eax + 4]
jmp 0x4373df
add eax, 4
push eax
lea eax, [esp + 0xf64]
push eax
call fcn.004dcb79
add esp, 8
mov ebx, eax
neg ebx
sbb bl, bl
lea ecx, [esp + 0x580]
inc bl
call fcn.0040527b
test bl, bl
je 0x437427
mov ecx, dword [esi + 0xc]
lea eax, [esi + 0xc]
sub ecx, eax
mov dword [ecx - 0x66d6], 0x11
lea ecx, [esi + 0xc]
call fcn.00434750
jmp 0x4397d1
lea edx, [esp + 0xe08]
push 0x5326a0
push edx
call fcn.0048fea0
mov ecx, dword [eax + 0x18]
add esp, 8
cmp ecx, edi
jb 0x437448
mov eax, dword [eax + 4]
jmp 0x43744b
add eax, 4
push eax
lea eax, [esp + 0xf64]
push eax
call fcn.004dcb79
add esp, 8
mov ebx, eax
neg ebx
sbb bl, bl
lea ecx, [esp + 0xe08]
inc bl
call fcn.0040527b
test bl, bl
je 0x437493
mov ecx, dword [esi + 0xc]
lea eax, [esi + 0xc]
sub ecx, eax
mov dword [ecx - 0x66d6], 0x12
lea ecx, [esi + 0xc]
call fcn.00434750
jmp 0x4397d1
lea edx, [esp + 0x5b8]
push 0x532688
push edx
call fcn.0048fea0
mov ecx, dword [eax + 0x18]
add esp, 8
cmp ecx, edi
jb 0x4374b4
mov eax, dword [eax + 4]
jmp 0x4374b7
add eax, 4
push eax
lea eax, [esp + 0xf64]
push eax
call fcn.004dcb79
add esp, 8
mov ebx, eax
neg ebx
sbb bl, bl
lea ecx, [esp + 0x5b8]
inc bl
call fcn.0040527b
test bl, bl
je 0x4374ff
mov ecx, dword [esi + 0xc]
lea eax, [esi + 0xc]
sub ecx, eax
mov dword [ecx - 0x66d6], 0x13
lea ecx, [esi + 0xc]
call fcn.00434750
jmp 0x4397d1
lea edx, [esp + 0xa88]
push 0x532670
push edx
call fcn.0048fea0
mov ecx, dword [eax + 0x18]
add esp, 8
cmp ecx, edi
jb 0x437520
mov eax, dword [eax + 4]
jmp 0x437523
add eax, 4
push eax
lea eax, [esp + 0xf64]
push eax
call fcn.004dcb79
add esp, 8
mov ebx, eax
neg ebx
sbb bl, bl
lea ecx, [esp + 0xa88]
inc bl
call fcn.0040527b
test bl, bl
je 0x43756b
mov ecx, dword [esi + 0xc]
lea eax, [esi + 0xc]
sub ecx, eax
mov dword [ecx - 0x66d6], 0x14
lea ecx, [esi + 0xc]
call fcn.00434750
jmp 0x4397d1
lea edx, [esp + 0x5f0]
push 0x532658
push edx
call fcn.0048fea0
mov ecx, dword [eax + 0x18]
add esp, 8
cmp ecx, edi
jb 0x43758c
mov eax, dword [eax + 4]
jmp 0x43758f
add eax, 4
push eax
lea eax, [esp + 0xf64]
push eax
call fcn.004dcb79
add esp, 8
mov ebx, eax
neg ebx
sbb bl, bl
lea ecx, [esp + 0x5f0]
inc bl
call fcn.0040527b
test bl, bl
je 0x4375d7
mov ecx, dword [esi + 0xc]
lea eax, [esi + 0xc]
sub ecx, eax
mov dword [ecx - 0x66d6], 0x15
lea ecx, [esi + 0xc]
call fcn.00434750
jmp 0x4397d1
lea edx, [esp + 0xcf0]
push 0x53264c
push edx
call fcn.0048fea0
mov ecx, dword [eax + 0x18]
add esp, 8
cmp ecx, edi
jb 0x4375f8
mov eax, dword [eax + 4]
jmp 0x4375fb
add eax, 4
push eax
lea eax, [esp + 0xf64]
push eax
call fcn.004dcb79
add esp, 8
mov ebx, eax
neg ebx
sbb bl, bl
lea ecx, [esp + 0xcf0]
inc bl
call fcn.0040527b
test bl, bl
je 0x437643
mov ecx, dword [esi + 0xc]
lea eax, [esi + 0xc]
sub ecx, eax
mov dword [ecx - 0x66d6], 0x16
lea ecx, [esi + 0xc]
call fcn.00434750
jmp 0x4397d1
lea edx, [esp + 0x628]
push 0x53263c
push edx
call fcn.0048fea0
mov ecx, dword [eax + 0x18]
add esp, 8
cmp ecx, edi
jb 0x437664
mov eax, dword [eax + 4]
jmp 0x437667
add eax, 4
push eax
lea eax, [esp + 0xf64]
push eax
call fcn.004dcb79
add esp, 8
mov ebx, eax
neg ebx
sbb bl, bl
lea ecx, [esp + 0x628]
inc bl
call fcn.0040527b
test bl, bl
je 0x4376af
mov ecx, dword [esi + 0xc]
lea eax, [esi + 0xc]
sub ecx, eax
mov dword [ecx - 0x66d6], 0x17
lea ecx, [esi + 0xc]
call fcn.00434750
jmp 0x4397d1
lea edx, [esp + 0xac0]
push 0x53262c
push edx
call fcn.0048fea0
mov ecx, dword [eax + 0x18]
add esp, 8
cmp ecx, edi
jb 0x4376d0
mov eax, dword [eax + 4]
jmp 0x4376d3
add eax, 4
push eax
lea eax, [esp + 0xf64]
push eax
call fcn.004dcb79
add esp, 8
mov ebx, eax
neg ebx
sbb bl, bl
lea ecx, [esp + 0xac0]
inc bl
call fcn.0040527b
test bl, bl
je 0x43771b
mov ecx, dword [esi + 0xc]
lea eax, [esi + 0xc]
sub ecx, eax
mov dword [ecx - 0x66d6], 0x19
lea ecx, [esi + 0xc]
call fcn.00434750
jmp 0x4397d1
lea edx, [esp + 0x660]
push 0x532620
push edx
call fcn.0048fea0
mov ecx, dword [eax + 0x18]
add esp, 8
cmp ecx, edi
jb 0x43773c
mov eax, dword [eax + 4]
jmp 0x43773f
add eax, 4
push eax
lea eax, [esp + 0xf64]
push eax
call fcn.004dcb79
add esp, 8
mov ebx, eax
neg ebx
sbb bl, bl
lea ecx, [esp + 0x660]
inc bl
call fcn.0040527b
test bl, bl
je 0x437787
mov ecx, dword [esi + 0xc]
lea eax, [esi + 0xc]
sub ecx, eax
mov dword [ecx - 0x66d6], 0x18
lea ecx, [esi + 0xc]
call fcn.00434750
jmp 0x4397d1
lea edx, [esp + 0xeb0]
push 0x532604
push edx
call fcn.0048fea0
mov ecx, dword [eax + 0x18]
add esp, 8
cmp ecx, edi
jb 0x4377a8
mov eax, dword [eax + 4]
jmp 0x4377ab
add eax, 4
push eax
lea eax, [esp + 0xf64]
push eax
call fcn.004dcb79
add esp, 8
mov ebx, eax
neg ebx
sbb bl, bl
lea ecx, [esp + 0xeb0]
inc bl
call fcn.0040527b
test bl, bl
je 0x4377f3
mov ecx, dword [esi + 0xc]
lea eax, [esi + 0xc]
sub ecx, eax
mov dword [ecx - 0x66d6], 0x1a
lea ecx, [esi + 0xc]
call fcn.00434750
jmp 0x4397d1
lea edx, [esp + 0x698]
push 0x5325e8
push edx
call fcn.0048fea0
mov ecx, dword [eax + 0x18]
add esp, 8
cmp ecx, edi
jb 0x437814
mov eax, dword [eax + 4]
jmp 0x437817
add eax, 4
push eax
lea eax, [esp + 0xf64]
push eax
call fcn.004dcb79
add esp, 8
mov ebx, eax
neg ebx
sbb bl, bl
lea ecx, [esp + 0x698]
inc bl
call fcn.0040527b
test bl, bl
je 0x43785f
mov ecx, dword [esi + 0xc]
lea eax, [esi + 0xc]
sub ecx, eax
mov dword [ecx - 0x66d6], 0x1b
lea ecx, [esi + 0xc]
call fcn.00434750
jmp 0x4397d1
lea edx, [esp + 0xaf8]
push 0x5325c0
push edx
call fcn.0048fea0
mov ecx, dword [eax + 0x18]
add esp, 8
cmp ecx, edi
jb 0x437880
mov eax, dword [eax + 4]
jmp 0x437883
add eax, 4
push eax
lea eax, [esp + 0xf64]
push eax
call fcn.004dcb79
add esp, 8
mov ebx, eax
neg ebx
sbb bl, bl
lea ecx, [esp + 0xaf8]
inc bl
call fcn.0040527b
test bl, bl
je 0x4378cb
mov ecx, dword [esi + 0xc]
lea eax, [esi + 0xc]
sub ecx, eax
mov dword [ecx - 0x66d6], 0x1c
lea ecx, [esi + 0xc]
call fcn.00434750
jmp 0x4397d1
lea edx, [esp + 0x6d0]
push 0x5325a0
push edx
call fcn.0048fea0
mov ecx, dword [eax + 0x18]
add esp, 8
cmp ecx, edi
jb 0x4378ec
mov eax, dword [eax + 4]
jmp 0x4378ef
add eax, 4
push eax
lea eax, [esp + 0xf64]
push eax
call fcn.004dcb79
add esp, 8
mov ebx, eax
neg ebx
sbb bl, bl
lea ecx, [esp + 0x6d0]
inc bl
call fcn.0040527b
test bl, bl
je 0x437937
mov ecx, dword [esi + 0xc]
lea eax, [esi + 0xc]
sub ecx, eax
mov dword [ecx - 0x66d6], 0x1d
lea ecx, [esi + 0xc]
call fcn.00434750
jmp 0x4397d1
lea edx, [esp + 0xd28]
push 0x532590
push edx
call fcn.0048fea0
mov ecx, dword [eax + 0x18]
add esp, 8
cmp ecx, edi
jb 0x437958
mov eax, dword [eax + 4]
jmp 0x43795b
add eax, 4
push eax
lea eax, [esp + 0xf64]
push eax
call fcn.004dcb79
add esp, 8
mov ebx, eax
neg ebx
sbb bl, bl
lea ecx, [esp + 0xd28]
inc bl
call fcn.0040527b
test bl, bl
je 0x4379a3
mov ecx, dword [esi + 0xc]
lea eax, [esi + 0xc]
sub ecx, eax
mov dword [ecx - 0x66d6], 0x1e
lea ecx, [esi + 0xc]
call fcn.00434750
jmp 0x4397d1
lea edx, [esp + 0x708]
push 0x532584
push edx
call fcn.0048fea0
mov ecx, dword [eax + 0x18]
add esp, 8
cmp ecx, edi
jb 0x4379c4
mov eax, dword [eax + 4]
jmp 0x4379c7
add eax, 4
push eax
lea eax, [esp + 0xf64]
push eax
call fcn.004dcb79
add esp, 8
mov ebx, eax
neg ebx
sbb bl, bl
lea ecx, [esp + 0x708]
inc bl
call fcn.0040527b
test bl, bl
je 0x437a0f
mov ecx, dword [esi + 0xc]
lea eax, [esi + 0xc]
sub ecx, eax
mov dword [ecx - 0x66d6], 0x1f
lea ecx, [esi + 0xc]
call fcn.00434750
jmp 0x4397d1
lea edx, [esp + 0xb30]
push 0x532570
push edx
call fcn.0048fea0
mov ecx, dword [eax + 0x18]
add esp, 8
cmp ecx, edi
jb 0x437a30
mov eax, dword [eax + 4]
jmp 0x437a33
add eax, 4
push eax
lea eax, [esp + 0xf64]
push eax
call fcn.004dcb79
add esp, 8
mov ebx, eax
neg ebx
sbb bl, bl
lea ecx, [esp + 0xb30]
inc bl
call fcn.0040527b
test bl, bl
je 0x437a6e
mov ecx, dword [esi + 0xc]
lea eax, [esi + 0xc]
sub ecx, eax
mov dword [ecx - 0x66d6], 0x20
lea ecx, [esi + 0xc]
call fcn.00434750
jmp 0x4397d1
lea edx, [esp + 0x740]
push 0x532558
push edx
call fcn.0048fea0
mov ecx, dword [eax + 0x18]
add esp, 8
cmp ecx, 0x10
jb 0x437a9d
mov eax, dword [eax + 4]
jmp 0x437aa0
add eax, 4
push eax
lea eax, [esp + 0xf24]
push eax
call fcn.004dcb79
add esp, 8
mov ebx, eax
neg ebx
sbb bl, bl
lea ecx, [esp + 0x740]
inc bl
call fcn.0040527b
test bl, bl
je 0x437ce3
lea eax, [esp + 0xf60]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x437ad7
sub eax, edx
mov dword [esp + 0x10], eax
jne 0x437b0a
mov ecx, dword [esi + 0x20a4]
lea eax, [esi + 0x20a4]
sub ecx, eax
mov dword [ecx - 0x66d6], edi
lea ecx, [esi + 0x20a4]
call fcn.00434750
jmp 0x4397d1
lea edx, [esp + 0xe40]
push 0x532548
push edx
call fcn.0048fea0
mov ecx, dword [eax + 0x18]
mov edi, 0x10
add esp, 8
cmp ecx, edi
jb 0x437b30
mov eax, dword [eax + 4]
jmp 0x437b33
add eax, 4
push eax
lea eax, [esp + 0xf64]
push eax
call fcn.004dcb79
add esp, 8
mov ebx, eax
neg ebx
sbb bl, bl
lea ecx, [esp + 0xe40]
inc bl
call fcn.0040527b
test bl, bl
je 0x437b84
mov ecx, dword [esi + 0x20a4]
lea eax, [esi + 0x20a4]
sub ecx, eax
mov dword [ecx - 0x66d6], 1
lea ecx, [esi + 0x20a4]
call fcn.00434750
jmp 0x4397d1
lea edx, [esp + 0x778]
push 0x532534
push edx
call fcn.0048fea0
mov ecx, dword [eax + 0x18]
add esp, 8
cmp ecx, edi
jb 0x437ba5
mov eax, dword [eax + 4]
jmp 0x437ba8
add eax, 4
push eax
lea eax, [esp + 0xf64]
push eax
call fcn.004dcb79
add esp, 8
mov ebx, eax
neg ebx
sbb bl, bl
lea ecx, [esp + 0x778]
inc bl
call fcn.0040527b
test bl, bl
je 0x437bf9
mov ecx, dword [esi + 0x20a4]
lea eax, [esi + 0x20a4]
sub ecx, eax
mov dword [ecx - 0x66d6], 2
lea ecx, [esi + 0x20a4]
call fcn.00434750
jmp 0x4397d1
lea edx, [esp + 0x158]
push 0x53251c
push edx
call fcn.0048fea0
mov ecx, dword [eax + 0x18]
add esp, 8
cmp ecx, edi
jb 0x437c1a
mov eax, dword [eax + 4]
jmp 0x437c1d
add eax, 4
push eax
lea eax, [esp + 0xf64]
push eax
call fcn.004dcb79
add esp, 8
mov ebx, eax
neg ebx
sbb bl, bl
lea ecx, [esp + 0x158]
inc bl
call fcn.0040527b
test bl, bl
je 0x437c6e
mov ecx, dword [esi + 0x20a4]
lea eax, [esi + 0x20a4]
sub ecx, eax
mov dword [ecx - 0x66d6], 3
lea ecx, [esi + 0x20a4]
call fcn.00434750
jmp 0x4397d1
lea edx, [esp + 0x7b0]
push 0x532950
push edx
call fcn.0048fea0
mov ecx, dword [eax + 0x18]
add esp, 8
cmp ecx, edi
jb 0x437c8f
mov eax, dword [eax + 4]
jmp 0x437c92
add eax, 4
push eax
lea eax, [esp + 0xf64]
push eax
call fcn.004dcb79
add esp, 8
mov ebx, eax
neg ebx
sbb bl, bl
lea ecx, [esp + 0x7b0]
inc bl
call fcn.0040527b
test bl, bl
je 0x437cd3
mov ecx, dword [esi + 0x20a4]
lea eax, [esi + 0x20a4]
sub ecx, eax
mov dword [ecx - 0x66d6], 4
lea ecx, [esi + 0x20a4]
call fcn.00434750
jmp 0x4397d1
lea edx, [esp + 0xd60]
push 0x532500
push edx
call fcn.0048fea0
mov ecx, dword [eax + 0x18]
add esp, 8
cmp ecx, 0x10
jb 0x437d05
mov eax, dword [eax + 4]
jmp 0x437d08
add eax, 4
push eax
lea eax, [esp + 0xf24]
push eax
call fcn.004dcb79
add esp, 8
mov ebx, eax
neg ebx
sbb bl, bl
lea ecx, [esp + 0xd60]
inc bl
call fcn.0040527b
test bl, bl
je 0x437d49
lea ecx, [esp + 0xf60]
push ecx
call fcn.004dcb2f
lea ecx, [esi + 0x88]
jmp 0x4397bf
lea eax, [esp + 0x7e8]
push 0x5324f0
push eax
call fcn.0048fea0
mov ecx, dword [eax + 0x18]
add esp, 8
cmp ecx, 0x10
jb 0x437d6b
mov eax, dword [eax + 4]
jmp 0x437d6e
add eax, 4
push eax
lea ecx, [esp + 0xf24]
push ecx
call fcn.004dcb79
add esp, 8
mov ebx, eax
neg ebx
sbb bl, bl
lea ecx, [esp + 0x7e8]
inc bl
call fcn.0040527b
test bl, bl
je 0x437dac
lea edx, [esp + 0xf60]
push edx
call fcn.004dcb2f
lea ecx, [esi + 0x20]
jmp 0x4397bf
lea eax, [esp + 0xba0]
push 0x5324dc
push eax
call fcn.0048fea0
mov ecx, dword [eax + 0x18]
add esp, 8
cmp ecx, 0x10
jb 0x437dce
mov eax, dword [eax + 4]
jmp 0x437dd1
add eax, 4
push eax
lea ecx, [esp + 0xf24]
push ecx
call fcn.004dcb79
add esp, 8
mov ebx, eax
neg ebx
sbb bl, bl
lea ecx, [esp + 0xba0]
inc bl
call fcn.0040527b
test bl, bl
je 0x437e0f
lea edx, [esp + 0xf60]
push edx
call fcn.004dcb2f
lea ecx, [esi + 0x24]
jmp 0x4397bf
lea eax, [esp + 0x820]
push 0x5324cc
push eax
call fcn.0048fea0
mov ecx, dword [eax + 0x18]
add esp, 8
cmp ecx, 0x10
jb 0x437e31
mov eax, dword [eax + 4]
jmp 0x437e34
add eax, 4
push eax
lea ecx, [esp + 0xf24]
push ecx
call fcn.004dcb79
add esp, 8
mov ebx, eax
neg ebx
sbb bl, bl
lea ecx, [esp + 0x820]
inc bl
call fcn.0040527b
test bl, bl
je 0x437e75
lea edx, [esp + 0xf60]
push edx
call fcn.004dcb2f
lea ecx, [esi + 0x8c]
jmp 0x4397bf
lea eax, [esp + 0xf04]
push 0x5324b4
push eax
call fcn.0048fea0
mov ecx, dword [eax + 0x18]
add esp, 8
cmp ecx, 0x10
jb 0x437e97
mov eax, dword [eax + 4]
jmp 0x437e9a
add eax, 4
push eax
lea ecx, [esp + 0xf24]
push ecx
call fcn.004dcb79
add esp, 8
mov ebx, eax
neg ebx
sbb bl, bl
lea ecx, [esp + 0xf04]
inc bl
call fcn.0040527b
test bl, bl
je 0x437edb
lea edx, [esp + 0xf60]
push edx
call fcn.004dcb2f
lea ecx, [esi + 0x90]
jmp 0x4397bf
lea eax, [esp + 0x858]
push 0x53249c
push eax
call fcn.0048fea0
mov ecx, dword [eax + 0x18]
add esp, 8
cmp ecx, 0x10
jb 0x437efd
mov eax, dword [eax + 4]
jmp 0x437f00
add eax, 4
push eax
lea ecx, [esp + 0xf24]
push ecx
call fcn.004dcb79
add esp, 8
mov ebx, eax
neg ebx
sbb bl, bl
lea ecx, [esp + 0x858]
inc bl
call fcn.0040527b
test bl, bl
je 0x4382a2
lea eax, [esp + 0xf60]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x437f37
sub eax, edx
mov dword [esp + 0x10], eax
jne 0x437f6a
mov edx, dword [esi + 0x98]
lea eax, [esi + 0x98]
sub edx, eax
lea ecx, [esi + 0x98]
mov dword [edx - 0x66d6], edi
call fcn.00434750
jmp 0x4397d1
lea eax, [esp + 0x174]
push 0x532490
push eax
call fcn.0048fea0
mov ecx, dword [eax + 0x18]
mov edi, 0x10
add esp, 8
cmp ecx, edi
jb 0x437f90
mov eax, dword [eax + 4]
jmp 0x437f93
add eax, 4
push eax
lea ecx, [esp + 0xf64]
push ecx
call fcn.004dcb79
add esp, 8
mov ebx, eax
neg ebx
sbb bl, bl
lea ecx, [esp + 0x174]
inc bl
call fcn.0040527b
test bl, bl
je 0x437fe4
mov edx, dword [esi + 0x98]
lea eax, [esi + 0x98]
sub edx, eax
lea ecx, [esi + 0x98]
mov dword [edx - 0x66d6], 1
call fcn.00434750
jmp 0x4397d1
lea eax, [esp + 0x1ac]
push 0x532484
push eax
call fcn.0048fea0
mov ecx, dword [eax + 0x18]
add esp, 8
cmp ecx, edi
jb 0x438005
mov eax, dword [eax + 4]
jmp 0x438008
add eax, 4
push eax
lea ecx, [esp + 0xf64]
push ecx
call fcn.004dcb79
add esp, 8
mov ebx, eax
neg ebx
sbb bl, bl
lea ecx, [esp + 0x1ac]
inc bl
call fcn.0040527b
test bl, bl
je 0x438059
mov edx, dword [esi + 0x98]
lea eax, [esi + 0x98]
sub edx, eax
lea ecx, [esi + 0x98]
mov dword [edx - 0x66d6], 2
call fcn.00434750
jmp 0x4397d1
lea eax, [esp + 0x1e4]
push 0x532470
push eax
call fcn.0048fea0
mov ecx, dword [eax + 0x18]
add esp, 8
cmp ecx, edi
jb 0x43807a
mov eax, dword [eax + 4]
jmp 0x43807d
add eax, 4
push eax
lea ecx, [esp + 0xf64]
push ecx
call fcn.004dcb79
add esp, 8
mov ebx, eax
neg ebx
sbb bl, bl
lea ecx, [esp + 0x1e4]
inc bl
call fcn.0040527b
test bl, bl
je 0x4380ce
mov edx, dword [esi + 0x98]
lea eax, [esi + 0x98]
sub edx, eax
lea ecx, [esi + 0x98]
mov dword [edx - 0x66d6], 3
call fcn.00434750
jmp 0x4397d1
lea eax, [esp + 0x21c]
push 0x532458
push eax
call fcn.0048fea0
mov ecx, dword [eax + 0x18]
add esp, 8
cmp ecx, edi
jb 0x4380ef
mov eax, dword [eax + 4]
jmp 0x4380f2
add eax, 4
push eax
lea ecx, [esp + 0xf64]
push ecx
call fcn.004dcb79
add esp, 8
mov ebx, eax
neg ebx
sbb bl, bl
lea ecx, [esp + 0x21c]
inc bl
call fcn.0040527b
test bl, bl
je 0x438143
mov edx, dword [esi + 0x98]
lea eax, [esi + 0x98]
sub edx, eax
lea ecx, [esi + 0x98]
mov dword [edx - 0x66d6], 4
call fcn.00434750
jmp 0x4397d1
lea eax, [esp + 0x254]
push 0x53244c
push eax
call fcn.0048fea0
mov ecx, dword [eax + 0x18]
add esp, 8
cmp ecx, edi
jb 0x438164
mov eax, dword [eax + 4]
jmp 0x438167
add eax, 4
push eax
lea ecx, [esp + 0xf64]
push ecx
call fcn.004dcb79
add esp, 8
mov ebx, eax
neg ebx
sbb bl, bl
lea ecx, [esp + 0x254]
inc bl
call fcn.0040527b
test bl, bl
je 0x4381b8
mov edx, dword [esi + 0x98]
lea eax, [esi + 0x98]
sub edx, eax
lea ecx, [esi + 0x98]
mov dword [edx - 0x66d6], 5
call fcn.00434750
jmp 0x4397d1
lea eax, [esp + 0x28c]
push 0x53243c
push eax
call fcn.0048fea0
mov ecx, dword [eax + 0x18]
add esp, 8
cmp ecx, edi
jb 0x4381d9
mov eax, dword [eax + 4]
jmp 0x4381dc
add eax, 4
push eax
lea ecx, [esp + 0xf64]
push ecx
call fcn.004dcb79
add esp, 8
mov ebx, eax
neg ebx
sbb bl, bl
lea ecx, [esp + 0x28c]
inc bl
call fcn.0040527b
test bl, bl
je 0x43822d
mov edx, dword [esi + 0x98]
lea eax, [esi + 0x98]
sub edx, eax
lea ecx, [esi + 0x98]
mov dword [edx - 0x66d6], 6
call fcn.00434750
jmp 0x4397d1
lea eax, [esp + 0x2c4]
push 0x53242c
push eax
call fcn.0048fea0
mov ecx, dword [eax + 0x18]
add esp, 8
cmp ecx, edi
jb 0x43824e
mov eax, dword [eax + 4]
jmp 0x438251
add eax, 4
push eax
lea ecx, [esp + 0xf64]
push ecx
call fcn.004dcb79
add esp, 8
mov ebx, eax
neg ebx
sbb bl, bl
lea ecx, [esp + 0x2c4]
inc bl
call fcn.0040527b
test bl, bl
je 0x438292
mov edx, dword [esi + 0x98]
lea eax, [esi + 0x98]
sub edx, eax
mov dword [edx - 0x66d6], 7
lea ecx, [esi + 0x98]
call fcn.00434750
jmp 0x4397d1
lea eax, [esp + 0x2fc]
push 0x532414
push eax
call fcn.0048fea0
mov ecx, dword [eax + 0x18]
mov edi, 0x10
add esp, 8
cmp ecx, edi
jb 0x4382c8
mov eax, dword [eax + 4]
jmp 0x4382cb
add eax, 4
push eax
lea ecx, [esp + 0xf24]
push ecx
call fcn.004dcb79
add esp, 8
mov ebx, eax
neg ebx
sbb bl, bl
lea ecx, [esp + 0x2fc]
inc bl
call fcn.0040527b
test bl, bl
je 0x43830c
lea edx, [esp + 0xf60]
push edx
call fcn.004dcb2f
lea ecx, [esi + 0x94]
jmp 0x4397bf
lea eax, [esp + 0x334]
push 0x532400
push eax
call fcn.0048fea0
mov ecx, dword [eax + 0x18]
add esp, 8
cmp ecx, edi
jb 0x43832d
mov eax, dword [eax + 4]
jmp 0x438330
add eax, 4
push eax
lea ecx, [esp + 0xf24]
push ecx
call fcn.004dcb79
add esp, 8
mov ebx, eax
neg ebx
sbb bl, bl
lea ecx, [esp + 0x334]
inc bl
call fcn.0040527b
test bl, bl
je 0x438371
lea edx, [esp + 0xf60]
push edx
call fcn.004dcb2f
lea ecx, [esi + 0x9c]
jmp 0x4397bf
lea eax, [esp + 0x36c]
push 0x5323e8
push eax
call fcn.0048fea0
mov ecx, dword [eax + 0x18]
add esp, 8
cmp ecx, edi
jb 0x438392
mov eax, dword [eax + 4]
jmp 0x438395
add eax, 4
push eax
lea ecx, [esp + 0xf24]
push ecx
call fcn.004dcb79
add esp, 8
mov ebx, eax
neg ebx
sbb bl, bl
lea ecx, [esp + 0x36c]
inc bl
call fcn.0040527b
test bl, bl
je 0x438414
lea edx, [esp + 0x3a4]
push 0x5323dc
push edx
call fcn.0048fea0
mov ecx, dword [eax + 0x18]
add esp, 8
cmp ecx, edi
jb 0x4383df
mov eax, dword [eax + 4]
jmp 0x4383e2
add eax, 4
push eax
lea eax, [esp + 0xf64]
push eax
call fcn.004dcb79
add esp, 8
mov ebx, eax
neg ebx
sbb bl, bl
lea ecx, [esp + 0x3a4]
inc bl
call fcn.0040527b
test bl, bl
setne cl
mov byte [esi + 0x28], cl
jmp 0x4397d1
lea edx, [esp + 0x3dc]
push 0x5323c4
push edx
call fcn.0048fea0
mov ecx, dword [eax + 0x18]
add esp, 8
cmp ecx, edi
jb 0x438435
mov eax, dword [eax + 4]
jmp 0x438438
add eax, 4
push eax
lea eax, [esp + 0xf24]
push eax
call fcn.004dcb79
add esp, 8
mov ebx, eax
neg ebx
sbb bl, bl
lea ecx, [esp + 0x3dc]
inc bl
call fcn.0040527b
test bl, bl
je 0x438479
lea ecx, [esp + 0xf60]
push ecx
call fcn.004dcb2f
add esp, 4
mov dword [esi + 0x34], eax
jmp 0x4397d1
lea edx, [esp + 0x414]
push 0x5323b4
push edx
call fcn.0048fea0
mov ecx, dword [eax + 0x18]
add esp, 8
cmp ecx, edi
jb 0x43849a
mov eax, dword [eax + 4]
jmp 0x43849d
add eax, 4
push eax
lea eax, [esp + 0xf24]
push eax
call fcn.004dcb79
add esp, 8
mov ebx, eax
neg ebx
sbb bl, bl
lea ecx, [esp + 0x414]
inc bl
call fcn.0040527b
test bl, bl
je 0x4384d3
lea ecx, [esp + 0xf60]
push ecx
jmp 0x4397b7
lea eax, [esp + 0x44c]
push 0x532398
push eax
call fcn.0048fea0
mov ecx, dword [eax + 0x18]
add esp, 8
cmp ecx, edi
jb 0x4384f4
mov eax, dword [eax + 4]
jmp 0x4384f7
add eax, 4
push eax
lea ecx, [esp + 0xf24]
push ecx
call fcn.004dcb79
add esp, 8
mov ebx, eax
neg ebx
sbb bl, bl
lea ecx, [esp + 0x44c]
inc bl
call fcn.0040527b
test bl, bl
je 0x438535
lea edx, [esp + 0xf60]
push edx
call fcn.004dcb2f
lea ecx, [esi + 0x38]
jmp 0x4397bf
lea eax, [esp + 0x484]
push 0x532384
push eax
call fcn.0048fea0
mov ecx, dword [eax + 0x18]
add esp, 8
cmp ecx, edi
jb 0x438556
mov eax, dword [eax + 4]
jmp 0x438559
add eax, 4
push eax
lea ecx, [esp + 0xf24]
push ecx
call fcn.004dcb79
add esp, 8
mov ebx, eax
neg ebx
sbb bl, bl
lea ecx, [esp + 0x484]
inc bl
call fcn.0040527b
test bl, bl
je 0x438597
lea edx, [esp + 0xf60]
push edx
call fcn.004dcb2f
lea ecx, [esi + 0x3c]
jmp 0x4397bf
lea eax, [esp + 0x4bc]
push 0x53236c
push eax
call fcn.0048fea0
mov ecx, dword [eax + 0x18]
add esp, 8
cmp ecx, edi
jb 0x4385b8
mov eax, dword [eax + 4]
jmp 0x4385bb
add eax, 4
push eax
lea ecx, [esp + 0xf24]
push ecx
call fcn.004dcb79
add esp, 8
mov ebx, eax
neg ebx
sbb bl, bl
lea ecx, [esp + 0x4bc]
inc bl
call fcn.0040527b
test bl, bl
je 0x4385f9
lea edx, [esp + 0xf60]
push edx
call fcn.004dcb2f
lea ecx, [esi + 0x40]
jmp 0x4397bf
lea eax, [esp + 0x4f4]
push 0x532354
push eax
call fcn.0048fea0
mov ecx, dword [eax + 0x18]
add esp, 8
cmp ecx, edi
jb 0x43861a
mov eax, dword [eax + 4]
jmp 0x43861d
add eax, 4
push eax
lea ecx, [esp + 0xf24]
push ecx
call fcn.004dcb79
add esp, 8
mov ebx, eax
neg ebx
sbb bl, bl
lea ecx, [esp + 0x4f4]
inc bl
call fcn.0040527b
test bl, bl
je 0x43865b
lea edx, [esp + 0xf60]
push edx
call fcn.004dcb2f
lea ecx, [esi + 0x44]
jmp 0x4397bf
lea eax, [esp + 0x52c]
push 0x532338
push eax
call fcn.0048fea0
mov ecx, dword [eax + 0x18]
add esp, 8
cmp ecx, edi
jb 0x43867c
mov eax, dword [eax + 4]
jmp 0x43867f
add eax, 4
push eax
lea ecx, [esp + 0xf24]
push ecx
call fcn.004dcb79
add esp, 8
mov ebx, eax
neg ebx
sbb bl, bl
lea ecx, [esp + 0x52c]
inc bl
call fcn.0040527b
test bl, bl
je 0x4386fe
lea edx, [esp + 0x564]
push 0x5323dc
push edx
call fcn.0048fea0
mov ecx, dword [eax + 0x18]
add esp, 8
cmp ecx, edi
jb 0x4386c9
mov eax, dword [eax + 4]
jmp 0x4386cc
add eax, 4
push eax
lea eax, [esp + 0xf64]
push eax
call fcn.004dcb79
add esp, 8
mov ebx, eax
neg ebx
sbb bl, bl
lea ecx, [esp + 0x564]
inc bl
call fcn.0040527b
test bl, bl
setne cl
mov byte [esi + 0x48], cl
jmp 0x4397d1
lea edx, [esp + 0x59c]
push 0x532330
push edx
call fcn.0048fea0
mov ecx, dword [eax + 0x18]
add esp, 8
cmp ecx, edi
jb 0x43871f
mov eax, dword [eax + 4]
jmp 0x438722
add eax, 4
push eax
lea eax, [esp + 0xf24]
push eax
call fcn.004dcb79
add esp, 8
mov ebx, eax
neg ebx
sbb bl, bl
lea ecx, [esp + 0x59c]
inc bl
call fcn.0040527b
test bl, bl
je 0x438760
lea ecx, [esp + 0xf60]
push ecx
call fcn.004dcb2f
lea ecx, [esi + 0x50]
jmp 0x4397bf
lea eax, [esp + 0x5d4]
push 0x532328
push eax
call fcn.0048fea0
mov ecx, dword [eax + 0x18]
add esp, 8
cmp ecx, edi
jb 0x438781
mov eax, dword [eax + 4]
jmp 0x438784
add eax, 4
push eax
lea ecx, [esp + 0xf24]
push ecx
call fcn.004dcb79
add esp, 8
mov ebx, eax
neg ebx
sbb bl, bl
lea ecx, [esp + 0x5d4]
inc bl
call fcn.0040527b
test bl, bl
je 0x4387c2
lea edx, [esp + 0xf60]
push edx
call fcn.004dcb2f
lea ecx, [esi + 0x54]
jmp 0x4397bf
lea eax, [esp + 0x60c]
push 0x532318
push eax
call fcn.0048fea0
mov ecx, dword [eax + 0x18]
add esp, 8
cmp ecx, edi
jb 0x4387e3
mov eax, dword [eax + 4]
jmp 0x4387e6
add eax, 4
push eax
lea ecx, [esp + 0xf24]
push ecx
call fcn.004dcb79
add esp, 8
mov ebx, eax
neg ebx
sbb bl, bl
lea ecx, [esp + 0x60c]
inc bl
call fcn.0040527b
test bl, bl
je 0x438824
lea edx, [esp + 0xf60]
push edx
call fcn.004dcb2f
lea ecx, [esi + 0x58]
jmp 0x4397bf
lea eax, [esp + 0x644]
push 0x532310
push eax
call fcn.0048fea0
mov ecx, dword [eax + 0x18]
add esp, 8
cmp ecx, edi
jb 0x438845
mov eax, dword [eax + 4]
jmp 0x438848
add eax, 4
push eax
lea ecx, [esp + 0xf24]
push ecx
call fcn.004dcb79
add esp, 8
mov ebx, eax
neg ebx
sbb bl, bl
lea ecx, [esp + 0x644]
inc bl
call fcn.0040527b
test bl, bl
je 0x438886
lea edx, [esp + 0xf60]
push edx
call fcn.004dcb2f
lea ecx, [esi + 0x5c]
jmp 0x4397bf
lea eax, [esp + 0x67c]
push 0x532308
push eax
call fcn.0048fea0
mov ecx, dword [eax + 0x18]
add esp, 8
cmp ecx, edi
jb 0x4388a7
mov eax, dword [eax + 4]
jmp 0x4388aa
add eax, 4
push eax
lea ecx, [esp + 0xf24]
push ecx
call fcn.004dcb79
add esp, 8
mov ebx, eax
neg ebx
sbb bl, bl
lea ecx, [esp + 0x67c]
inc bl
call fcn.0040527b
test bl, bl
je 0x4388e8
lea edx, [esp + 0xf60]
push edx
call fcn.004dcb2f
lea ecx, [esi + 0x60]
jmp 0x4397bf
lea eax, [esp + 0x6b4]
push 0x532300
push eax
call fcn.0048fea0
add esp, 8
mov ecx, eax
call fcn.00404269
push eax
lea ecx, [esp + 0xf24]
push ecx
call fcn.004dcb79
add esp, 8
mov ebx, eax
neg ebx
sbb bl, bl
lea ecx, [esp + 0x6b4]
inc bl
call fcn.0040527b
test bl, bl
je 0x438942
lea edx, [esp + 0xf60]
push edx
call fcn.004dcb2f
lea ecx, [esi + 0x64]
jmp 0x4397bf
lea eax, [esp + 0x6ec]
push 0x5322f8
push eax
call fcn.0048fea0
add esp, 8
mov ecx, eax
call fcn.00404269
push eax
lea ecx, [esp + 0xf24]
push ecx
call fcn.004dcb79
add esp, 8
mov ebx, eax
neg ebx
sbb bl, bl
lea ecx, [esp + 0x6ec]
inc bl
call fcn.0040527b
test bl, bl
je 0x43899c
lea edx, [esp + 0xf60]
push edx
call fcn.004dcb2f
lea ecx, [esi + 0x68]
jmp 0x4397bf
lea eax, [esp + 0x724]
push 0x5322f0
push eax
call fcn.0048fea0
add esp, 8
mov ecx, eax
call fcn.00404269
push eax
lea ecx, [esp + 0xf24]
push ecx
call fcn.004dcb79
add esp, 8
mov ebx, eax
neg ebx
sbb bl, bl
lea ecx, [esp + 0x724]
inc bl
call fcn.0040527b
test bl, bl
je 0x4389f6
lea edx, [esp + 0xf60]
push edx
call fcn.004dcb2f
lea ecx, [esi + 0x6c]
jmp 0x4397bf
lea eax, [esp + 0x75c]
push 0x5322d8
push eax
call fcn.0048fea0
add esp, 8
mov ecx, eax
call fcn.00404269
push eax
lea ecx, [esp + 0xf24]
push ecx
call fcn.004dcb79
add esp, 8
mov ebx, eax
neg ebx
sbb bl, bl
lea ecx, [esp + 0x75c]
inc bl
call fcn.0040527b
test bl, bl
je 0x438a50
lea edx, [esp + 0xf60]
push edx
call fcn.004dcb2f
lea ecx, [esi + 0x70]
jmp 0x4397bf
lea eax, [esp + 0x794]
push 0x5322c0
push eax
call fcn.0048fea0
add esp, 8
mov ecx, eax
call fcn.00404269
push eax
lea ecx, [esp + 0xf24]
push ecx
call fcn.004dcb79
add esp, 8
mov ebx, eax
neg ebx
sbb bl, bl
lea ecx, [esp + 0x794]
inc bl
call fcn.0040527b
test bl, bl
je 0x438aaa
lea edx, [esp + 0xf60]
push edx
call fcn.004dcb2f
lea ecx, [esi + 0x74]
jmp 0x4397bf
lea eax, [esp + 0x7cc]
push 0x5322a4
push eax
call fcn.0048fea0
add esp, 8
mov ecx, eax
call fcn.00404269
push eax
lea ecx, [esp + 0xf24]
push ecx
call fcn.004dcb79
add esp, 8
mov ebx, eax
neg ebx
sbb bl, bl
lea ecx, [esp + 0x7cc]
inc bl
call fcn.0040527b
test bl, bl
je 0x438b04
lea edx, [esp + 0xf60]
push edx
call fcn.004dcb2f
lea ecx, [esi + 0x78]
jmp 0x4397bf
lea eax, [esp + 0x804]
push 0x53228c
push eax
call fcn.0048fea0
add esp, 8
mov ecx, eax
call fcn.00404269
push eax
lea ecx, [esp + 0xf24]
push ecx
call fcn.004dcb79
add esp, 8
mov ebx, eax
neg ebx
sbb bl, bl
lea ecx, [esp + 0x804]
inc bl
call fcn.0040527b
test bl, bl
je 0x438b5e
lea edx, [esp + 0xf60]
push edx
call fcn.004dcb2f
lea ecx, [esi + 0x7c]
jmp 0x4397bf
lea eax, [esp + 0x83c]
push 0x53227c
push eax
call fcn.0048fea0
add esp, 8
mov ecx, eax
call fcn.00404269
push eax
lea ecx, [esp + 0xf24]
push ecx
call fcn.004dcb79
add esp, 8
mov ebx, eax
neg ebx
sbb bl, bl
lea ecx, [esp + 0x83c]
inc bl
call fcn.0040527b
test bl, bl
je 0x438bbb
lea edx, [esp + 0xf60]
push edx
call fcn.004dcb2f
lea ecx, [esi + 0x80]
jmp 0x4397bf
lea eax, [esp + 0x874]
push 0x53226c
push eax
call fcn.0048fea0
add esp, 8
mov ecx, eax
call fcn.00404269
push eax
lea ecx, [esp + 0xf24]
push ecx
call fcn.004dcb79
add esp, 8
mov ebx, eax
neg ebx
sbb bl, bl
lea ecx, [esp + 0x874]
inc bl
call fcn.0040527b
test bl, bl
je 0x438c18
lea edx, [esp + 0xf60]
push edx
call fcn.004dcb2f
lea ecx, [esi + 0x84]
jmp 0x4397bf
lea eax, [esp + 0x8ac]
push 0x53225c
push eax
call fcn.0048fea0
add esp, 8
mov ecx, eax
call fcn.00404269
push eax
lea ecx, [esp + 0xf24]
push ecx
call fcn.004dcb79
add esp, 8
mov ebx, eax
neg ebx
sbb bl, bl
lea ecx, [esp + 0x8ac]
inc bl
call fcn.0040527b
test bl, bl
jne 0x4397d1
lea edx, [esp + 0x8e4]
push 0x532250
push edx
call fcn.0048fea0
add esp, 8
mov ecx, eax
call fcn.00404269
push eax
lea eax, [esp + 0xf24]
push eax
call fcn.004dcb79
add esp, 8
mov ebx, eax
neg ebx
sbb bl, bl
lea ecx, [esp + 0x8e4]
inc bl
call fcn.0040527b
test bl, bl
je 0x438ccf
lea ecx, [esp + 0xf60]
push ecx
call fcn.00480320
mov ecx, eax
call fcn.00480b60
lea edx, [esi + 0xa0]
mov cl, byte [eax]
inc eax
mov byte [edx], cl
inc edx
test cl, cl
jne 0x438cc0
jmp 0x4397d1
lea edx, [esp + 0x91c]
push 0x532238
push edx
call fcn.0048fea0
add esp, 8
mov ecx, eax
call fcn.00404269
push eax
lea eax, [esp + 0xf24]
push eax
call fcn.004dcb79
add esp, 8
mov ebx, eax
neg ebx
sbb bl, bl
lea ecx, [esp + 0x91c]
inc bl
call fcn.0040527b
test bl, bl
je 0x438d3e
mov ecx, dword [esi + 4]
mov eax, dword [ecx]
sub eax, ecx
lea edx, [esp + 0xf60]
sub eax, 0x6656
mov cl, byte [edx]
inc edx
mov byte [eax], cl
inc eax
test cl, cl
jne 0x438d27
mov ecx, dword [esi + 4]
call fcn.00434790
jmp 0x4397d1
lea ecx, [esp + 0x954]
push 0x532224
push ecx
call fcn.0048fea0
add esp, 8
mov ecx, eax
call fcn.00404269
push eax
lea edx, [esp + 0xf24]
push edx
call fcn.004dcb79
add esp, 8
mov ebx, eax
neg ebx
sbb bl, bl
lea ecx, [esp + 0x954]
inc bl
call fcn.0040527b
test bl, bl
je 0x438d9e
lea eax, [esp + 0xf60]
push eax
call fcn.004dcb2f
add esp, 4
mov dword [esi + 0x20b0], eax
jmp 0x4397d1
lea ecx, [esp + 0x98c]
push 0x532200
push ecx
call fcn.0048fea0
add esp, 8
mov ecx, eax
call fcn.00404269
push eax
lea edx, [esp + 0xf24]
push edx
call fcn.004dcb79
add esp, 8
mov ebx, eax
neg ebx
sbb bl, bl
lea ecx, [esp + 0x98c]
inc bl
call fcn.0040527b
test bl, bl
je 0x438dfe
lea eax, [esp + 0xf60]
push eax
call fcn.004dcb2f
add esp, 4
mov dword [esi + 0x20b4], eax
jmp 0x4397d1
lea ecx, [esp + 0x9c4]
push 0x5321d8
push ecx
call fcn.0048fea0
add esp, 8
mov ecx, eax
call fcn.00404269
push eax
lea edx, [esp + 0xf24]
push edx
call fcn.004dcb79
add esp, 8
mov ebx, eax
neg ebx
sbb bl, bl
lea ecx, [esp + 0x9c4]
inc bl
call fcn.0040527b
test bl, bl
je 0x438e5e
lea eax, [esp + 0xf60]
push eax
call fcn.004dcb2f
add esp, 4
mov dword [esi + 0x20b8], eax
jmp 0x4397d1
lea ecx, [esp + 0x9fc]
push 0x5321c0
push ecx
call fcn.0048fea0
add esp, 8
mov ecx, eax
call fcn.00404269
push eax
lea edx, [esp + 0xf24]
push edx
call fcn.004dcb79
add esp, 8
mov ebx, eax
neg ebx
sbb bl, bl
lea ecx, [esp + 0x9fc]
inc bl
call fcn.0040527b
test bl, bl
je 0x438ec3
lea eax, [esp + 0xf60]
lea edx, [esi + 0x20bc]
mov ecx, eax
sub edx, ecx
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x438eb4
jmp 0x4397d1
lea edx, [esp + 0xa34]
push 0x5321ac
push edx
call fcn.0048fea0
add esp, 8
mov ecx, eax
call fcn.00404269
push eax
lea eax, [esp + 0xf24]
push eax
call fcn.004dcb79
add esp, 8
mov ebx, eax
neg ebx
sbb bl, bl
lea ecx, [esp + 0xa34]
inc bl
call fcn.0040527b
test bl, bl
je 0x438f2f
lea eax, [esp + 0xf60]
lea edx, [esi + 0x21bc]
mov ecx, eax
sub edx, ecx
lea esp, [esp]
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x438f20
jmp 0x4397d1
lea edx, [esp + 0xa6c]
push 0x532190
push edx
call fcn.0048fea0
add esp, 8
mov ecx, eax
call fcn.00404269
push eax
lea eax, [esp + 0xf24]
push eax
call fcn.004dcb79
add esp, 8
mov ebx, eax
neg ebx
sbb bl, bl
lea ecx, [esp + 0xa6c]
inc bl
call fcn.0040527b
test bl, bl
je 0x438f94
lea eax, [esp + 0xf60]
lea edx, [esi + 0x22bc]
mov ecx, eax
sub edx, ecx
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x438f85
jmp 0x4397d1
lea edx, [esp + 0xaa4]
push 0x53216c
push edx
call fcn.0048fea0
add esp, 8
mov ecx, eax
call fcn.00404269
push eax
lea eax, [esp + 0xf24]
push eax
call fcn.004dcb79
add esp, 8
mov ebx, eax
neg ebx
sbb bl, bl
lea ecx, [esp + 0xaa4]
inc bl
call fcn.0040527b
test bl, bl
je 0x438fff
lea eax, [esp + 0xf60]
lea edx, [esi + 0x23bc]
mov ecx, eax
sub edx, ecx
lea ebx, [ebx]
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x438ff0
jmp 0x4397d1
lea edx, [esp + 0xadc]
push 0x532154
push edx
call fcn.0048fea0
add esp, 8
mov ecx, eax
call fcn.00404269
push eax
lea eax, [esp + 0xf24]
push eax
call fcn.004dcb79
add esp, 8
mov ebx, eax
neg ebx
sbb bl, bl
lea ecx, [esp + 0xadc]
inc bl
call fcn.0040527b
test bl, bl
je 0x439059
lea ecx, [esp + 0xf60]
push ecx
call fcn.004dcb2f
lea ecx, [esi + 0x4c]
jmp 0x4397bf
lea eax, [esp + 0xb14]
push 0x532134
push eax
call fcn.0048fea0
add esp, 8
mov ecx, eax
call fcn.00404269
push eax
lea ecx, [esp + 0xf24]
push ecx
call fcn.004dcb79
add esp, 8
mov ebx, eax
neg ebx
sbb bl, bl
lea ecx, [esp + 0xb14]
inc bl
call fcn.0040527b
test bl, bl
je 0x4390c7
lea edx, [esp + 0xf60]
push edx
call fcn.004dcb2f
mov dword [esp + 0x14], eax
fild dword [esp + 0x14]
add esp, 4
fmul dword [0x53123c]
fstp dword [esi + 0x24bc]
jmp 0x4397d1
lea eax, [esp + 0xb4c]
push 0x532114
push eax
call fcn.0048fea0
add esp, 8
mov ecx, eax
call fcn.00404269
push eax
lea ecx, [esp + 0xf24]
push ecx
call fcn.004dcb79
add esp, 8
mov ebx, eax
neg ebx
sbb bl, bl
lea ecx, [esp + 0xb4c]
inc bl
call fcn.0040527b
test bl, bl
je 0x439135
lea edx, [esp + 0xf60]
push edx
call fcn.004dcb2f
mov dword [esp + 0x14], eax
fild dword [esp + 0x14]
add esp, 4
fmul dword [0x53123c]
fstp dword [esi + 0x24c0]
jmp 0x4397d1
lea eax, [esp + 0xb84]
push 0x5320f4
push eax
call fcn.0048fea0
add esp, 8
mov ecx, eax
call fcn.00404269
push eax
lea ecx, [esp + 0xf24]
push ecx
call fcn.004dcb79
add esp, 8
mov ebx, eax
neg ebx
sbb bl, bl
lea ecx, [esp + 0xb84]
inc bl
call fcn.0040527b
test bl, bl
je 0x4391a3
lea edx, [esp + 0xf60]
push edx
call fcn.004dcb2f
mov dword [esp + 0x14], eax
fild dword [esp + 0x14]
add esp, 4
fmul dword [0x53123c]
fstp dword [esi + 0x24c4]
jmp 0x4397d1
lea eax, [esp + 0xbbc]
push 0x5320d4
push eax
call fcn.0048fea0
add esp, 8
mov ecx, eax
call fcn.00404269
push eax
lea ecx, [esp + 0xf24]
push ecx
call fcn.004dcb79
add esp, 8
mov ebx, eax
neg ebx
sbb bl, bl
lea ecx, [esp + 0xbbc]
inc bl
call fcn.0040527b
test bl, bl
je 0x439211
lea edx, [esp + 0xf60]
push edx
call fcn.004dcb2f
mov dword [esp + 0x14], eax
fild dword [esp + 0x14]
add esp, 4
fmul dword [0x53123c]
fstp dword [esi + 0x24c8]
jmp 0x4397d1
lea eax, [esp + 0xbf4]
push 0x5320b4
push eax
call fcn.0048fea0
add esp, 8
mov ecx, eax
call fcn.00404269
push eax
lea ecx, [esp + 0xf24]
push ecx
call fcn.004dcb79
add esp, 8
mov ebx, eax
neg ebx
sbb bl, bl
lea ecx, [esp + 0xbf4]
inc bl
call fcn.0040527b
test bl, bl
je 0x43927f
lea edx, [esp + 0xf60]
push edx
call fcn.004dcb2f
mov dword [esp + 0x14], eax
fild dword [esp + 0x14]
add esp, 4
fmul dword [0x53123c]
fstp dword [esi + 0x24cc]
jmp 0x4397d1
lea eax, [esp + 0xc2c]
push 0x532094
push eax
call fcn.0048fea0
add esp, 8
mov ecx, eax
call fcn.00404269
push eax
lea ecx, [esp + 0xf24]
push ecx
call fcn.004dcb79
add esp, 8
mov ebx, eax
neg ebx
sbb bl, bl
lea ecx, [esp + 0xc2c]
inc bl
call fcn.0040527b
test bl, bl
je 0x4392ed
lea edx, [esp + 0xf60]
push edx
call fcn.004dcb2f
mov dword [esp + 0x14], eax
fild dword [esp + 0x14]
add esp, 4
fmul dword [0x53123c]
fstp dword [esi + 0x24d0]
jmp 0x4397d1
lea eax, [esp + 0xc64]
push 0x53207c
push eax
call fcn.0048fea0
add esp, 8
mov ecx, eax
call fcn.00404269
push eax
lea ecx, [esp + 0xf24]
push ecx
call fcn.004dcb79
add esp, 8
mov ebx, eax
neg ebx
sbb bl, bl
lea ecx, [esp + 0xc64]
inc bl
call fcn.0040527b
test bl, bl
je 0x439383
lea edx, [esp + 0xc9c]
push 0x53206c
push edx
call fcn.0048fea0
add esp, 8
lea ecx, [esp + 0xf60]
push ecx
mov ecx, eax
call fcn.00404269
push eax
call fcn.004dcb79
add esp, 8
mov ebx, eax
neg ebx
sbb bl, bl
lea ecx, [esp + 0xc9c]
inc bl
call fcn.0040527b
test bl, bl
sete dl
mov byte [esi + 0x20a0], dl
jmp 0x4397d1
lea eax, [esp + 0xcd4]
push 0x532050
push eax
call fcn.0048fea0
add esp, 8
mov ecx, eax
call fcn.00404269
push eax
lea ecx, [esp + 0xf24]
push ecx
call fcn.004dcb79
add esp, 8
mov ebx, eax
neg ebx
sbb bl, bl
lea ecx, [esp + 0xcd4]
inc bl
call fcn.0040527b
test bl, bl
je 0x439478
lea edx, [esp + 0xd0c]
push 0x532038
push edx
call fcn.0048fea0
add esp, 8
mov ecx, eax
call fcn.00404269
push eax
lea eax, [esp + 0xf64]
push eax
call fcn.004dcb79
add esp, 8
mov ebx, eax
neg ebx
sbb bl, bl
lea ecx, [esp + 0xd0c]
inc bl
call fcn.0040527b
test bl, bl
je 0x439420
mov dword [esi + 0x24d4], 1
jmp 0x4397d1
lea ecx, [esp + 0xd44]
push 0x53201c
push ecx
call fcn.0048fea0
add esp, 8
mov ecx, eax
call fcn.00404269
push eax
lea edx, [esp + 0xf64]
push edx
call fcn.004dcb79
add esp, 8
mov ebx, eax
neg ebx
sbb bl, bl
lea ecx, [esp + 0xd44]
inc bl
call fcn.0040527b
test bl, bl
je 0x4397d1
mov dword [esi + 0x24d4], 2
jmp 0x4397d1
lea eax, [esp + 0xd7c]
push 0x532000
push eax
call fcn.0048fea0
add esp, 8
mov ecx, eax
call fcn.00404269
push eax
lea ecx, [esp + 0xf24]
push ecx
call fcn.004dcb79
add esp, 8
mov ebx, eax
neg ebx
sbb bl, bl
lea ecx, [esp + 0xd7c]
inc bl
call fcn.0040527b
test bl, bl
je 0x4394d5
lea edx, [esp + 0xf60]
push edx
call fcn.004dcb2f
lea ecx, [esi + 0x24d8]
jmp 0x4397bf
lea eax, [esp + 0xdb4]
push 0x531fe4
push eax
call fcn.0048fea0
add esp, 8
mov ecx, eax
call fcn.00404269
push eax
lea ecx, [esp + 0xf24]
push ecx
call fcn.004dcb79
add esp, 8
mov ebx, eax
neg ebx
sbb bl, bl
lea ecx, [esp + 0xdb4]
inc bl
call fcn.0040527b
test bl, bl
je 0x43955a
lea edx, [esp + 0xf60]
push edx
call fcn.00480320
mov ecx, eax
call fcn.00480b60
mov edx, dword [esi + 0x20a8]
mov ecx, dword [edx]
sub ecx, edx
sub ecx, 0x66d6
mov edi, edi
mov dl, byte [eax]
inc eax
mov byte [ecx], dl
inc ecx
test dl, dl
jne 0x439540
mov ecx, dword [esi + 0x20a8]
call fcn.004347d0
jmp 0x4397d1
lea eax, [esp + 0xdec]
push 0x531fc8
push eax
call fcn.0048fea0
add esp, 8
mov ecx, eax
call fcn.00404269
push eax
lea ecx, [esp + 0xf24]
push ecx
call fcn.004dcb79
add esp, 8
mov ebx, eax
neg ebx
sbb bl, bl
lea ecx, [esp + 0xdec]
inc bl
call fcn.0040527b
test bl, bl
je 0x4395dd
lea edx, [esp + 0xf60]
push edx
call fcn.00480320
mov ecx, eax
call fcn.00480b60
mov edx, dword [esi + 0x20a8]
mov ecx, dword [edx]
sub ecx, edx
sub ecx, 0x6656
mov dl, byte [eax]
inc eax
mov byte [ecx], dl
inc ecx
test dl, dl
jne 0x4395c3
mov ecx, dword [esi + 0x20a8]
call fcn.004347d0
jmp 0x4397d1
lea eax, [esp + 0xe24]
push 0x531fac
push eax
call fcn.0048fea0
add esp, 8
mov ecx, eax
call fcn.00404269
push eax
lea ecx, [esp + 0xf24]
push ecx
call fcn.004dcb79
add esp, 8
mov ebx, eax
neg ebx
sbb bl, bl
lea ecx, [esp + 0xe24]
inc bl
call fcn.0040527b
test bl, bl
je 0x439660
lea edx, [esp + 0xf60]
push edx
call fcn.00480320
mov ecx, eax
call fcn.00480b60
mov edx, dword [esi + 0x20a8]
mov ecx, dword [edx]
sub ecx, edx
sub ecx, 0x65d6
mov dl, byte [eax]
inc eax
mov byte [ecx], dl
inc ecx
test dl, dl
jne 0x439646
mov ecx, dword [esi + 0x20a8]
call fcn.004347d0
jmp 0x4397d1
lea eax, [esp + 0xe5c]
push 0x531f90
push eax
call fcn.0048fea0
add esp, 8
mov ecx, eax
call fcn.00404269
push eax
lea ecx, [esp + 0xf24]
push ecx
call fcn.004dcb79
add esp, 8
mov ebx, eax
neg ebx
sbb bl, bl
lea ecx, [esp + 0xe5c]
inc bl
call fcn.0040527b
test bl, bl
je 0x4396ea
lea edx, [esp + 0xf60]
push edx
call fcn.00480320
mov ecx, eax
call fcn.00480b60
mov edx, dword [esi + 0x20a8]
mov ecx, dword [edx]
sub ecx, edx
sub ecx, 0x6556
lea esp, [esp]
mov dl, byte [eax]
inc eax
mov byte [ecx], dl
inc ecx
test dl, dl
jne 0x4396d0
mov ecx, dword [esi + 0x20a8]
call fcn.004347d0
jmp 0x4397d1
lea eax, [esp + 0xe94]
push 0x531f74
push eax
call fcn.0048fea0
add esp, 8
mov ecx, eax
call fcn.00404269
push eax
lea ecx, [esp + 0xf24]
push ecx
call fcn.004dcb79
add esp, 8
mov ebx, eax
neg ebx
sbb bl, bl
lea ecx, [esp + 0xe94]
inc bl
call fcn.0040527b
test bl, bl
je 0x43976a
lea edx, [esp + 0xf60]
push edx
call fcn.00480320
mov ecx, eax
call fcn.00480b60
mov edx, dword [esi + 0x20a8]
mov ecx, dword [edx]
sub ecx, edx
sub ecx, 0x64d6
mov dl, byte [eax]
inc eax
mov byte [ecx], dl
inc ecx
test dl, dl
jne 0x439753
mov ecx, dword [esi + 0x20a8]
call fcn.004347d0
jmp 0x4397d1
lea eax, [esp + 0xecc]
push 0x5323b4
push eax
call fcn.0048fea0
add esp, 8
mov ecx, eax
call fcn.00404269
push eax
lea ecx, [esp + 0xf24]
push ecx
call fcn.004dcb79
add esp, 8
mov ebx, eax
neg ebx
sbb bl, bl
lea ecx, [esp + 0xecc]
inc bl
call fcn.0040527b
test bl, bl
je 0x4397d1
lea edx, [esp + 0xf60]
push edx
call fcn.004dcb2f
lea ecx, [esi + 0x2c]
mov edx, dword [ecx]
sub edx, ecx
add esp, 4
mov dword [edx - 0x66d6], eax
call fcn.00434750
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x18]
inc eax
cmp eax, ecx
mov dword [esp + 0xc], eax
jl 0x435eb0
mov al, byte [esi + 0x20a0]
test al, al
je 0x439808
mov ecx, dword [esi + 0x20a4]
lea eax, [esi + 0x20a4]
sub ecx, eax
mov eax, dword [ecx - 0x66d6]
test eax, eax
je 0x439862
mov edx, dword [esi + 0x20a4]
lea eax, [esi + 0x20a4]
sub edx, eax
cmp dword [edx - 0x66d6], 1
jne 0x439837
mov ecx, dword [esi + 0xc]
lea eax, [esi + 0xc]
sub ecx, eax
mov eax, dword [ecx - 0x66d6]
cmp eax, 0x1e
jl 0x439862
cmp eax, 0x20
jg 0x439862
mov ebx, dword [esp + 0x20]
mov edi, dword [esi]
lea edx, [esp + 0x18]
push edx
lea eax, [esp + 0x14]
add ebx, 4
push eax
mov ecx, ebx
mov dword [esp + 0x20], edi
call fcn.0040f6e3
mov edx, dword [esp + 0x20]
mov ecx, dword [esp + 0x10]
cmp ecx, dword [edx + 8]
je 0x439866
xor al, al
jmp 0x439881
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x14]
push ecx
mov ecx, ebx
mov dword [esp + 0x20], edi
mov dword [esp + 0x24], esi
call fcn.0040e31c
mov al, 1
mov ecx, dword [esp + 0x106c]
mov dword fs:[0], ecx
mov ecx, dword [esp + 0x1064]
call fcn.004da561
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4