Function at 0x60eec0
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x4121
push 0
push 0
dec ecx
jne 0x60eec8
push ebx
push esi
push edi
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
call fcn.00404fa4
xor eax, eax
push ebp
push 0x610074
push dword fs:[eax]
mov dword fs:[eax], esp
mov byte [ebp - 5], 0
mov eax, dword [0x669d2c]
mov byte [eax], 0
xor eax, eax
mov dword [ebp - 0x44], eax
mov byte [ebp - 0x45], 0
mov eax, dword [0x668f70]
mov byte [eax], 3
mov eax, dword [0x669b48]
mov eax, dword [eax]
call fcn.00498e74
mov eax, dword [0x66a00c]
mov eax, dword [eax]
mov eax, dword [eax + 0x39c]
xor edx, edx
call fcn.004d0ab8
mov eax, dword [0x66a00c]
mov eax, dword [eax]
mov eax, dword [eax + 0x45c]
xor edx, edx
call fcn.004d0ab8
lea edx, [ebp - 0x20878]
mov eax, dword [ebp - 4]
call fcn.0040af40
mov ecx, dword [ebp - 0x20878]
lea eax, [ebp - 0x20874]
mov edx, 0x610090
call fcn.00404e00
mov edx, dword [ebp - 0x20874]
mov eax, dword [0x66a00c]
mov eax, dword [eax]
call fcn.0052fa8c
mov eax, dword [0x669b48]
mov eax, dword [eax]
call fcn.00498e74
mov eax, dword [0x66a00c]
mov eax, dword [eax]
mov eax, dword [eax + 0x314]
mov eax, dword [eax + 0x208]
mov edx, 1
call fcn.0044e464
xor edx, edx
call fcn.0044e36c
mov eax, dword [0x66a00c]
mov eax, dword [eax]
mov eax, dword [eax + 0x39c]
mov edx, 0xffff
call fcn.004d0930
mov eax, dword [0x66a00c]
mov eax, dword [eax]
mov eax, dword [eax + 0x39c]
xor edx, edx
call fcn.004d0ab8
mov eax, dword [0x669b48]
mov eax, dword [eax]
call fcn.00498e74
push 0
mov ecx, dword [ebp - 4]
mov dl, 1
mov eax, dword [0x41aa18]
call fcn.00420ab8
mov dword [ebp - 0xc], eax
xor ecx, ecx
xor edx, edx
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x14]
lea edx, [ebp - 0x46]
mov ecx, 1
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0xc]
cmp byte [ebp - 0x46], 0xb2
je 0x60f032
mov eax, dword [0x66a00c]
mov eax, dword [eax]
mov edx, 0x6100ac
call fcn.0052fa8c
call fcn.0064aed4
mov eax, dword [ebp - 0xc]
call fcn.00403c94
jmp 0x610046
lea edx, [ebp - 0x10068]
mov ecx, 4
mov eax, dword [ebp - 0xc]
call fcn.00420704
lea ecx, [ebp - 0x20880]
xor eax, eax
mov al, byte [ebp - 0x10068]
mov edx, 2
call fcn.0040a604
push dword [ebp - 0x20880]
lea ecx, [ebp - 0x20884]
xor eax, eax
mov al, byte [ebp - 0x10067]
mov edx, 2
call fcn.0040a604
push dword [ebp - 0x20884]
lea ecx, [ebp - 0x20888]
xor eax, eax
mov al, byte [ebp - 0x10066]
mov edx, 2
call fcn.0040a604
push dword [ebp - 0x20888]
lea ecx, [ebp - 0x2088c]
xor eax, eax
mov al, byte [ebp - 0x10065]
mov edx, 2
call fcn.0040a604
push dword [ebp - 0x2088c]
lea eax, [ebp - 0x2087c]
mov edx, 4
call fcn.00404e74
mov eax, dword [ebp - 0x2087c]
call fcn.0049b69c
mov dword [ebp - 0x18], eax
mov cx, 1
mov edx, 4
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x14]
mov eax, dword [0x669b48]
mov eax, dword [eax]
call fcn.00498e74
call fcn.006427cc
mov byte [ebp - 0x57], 0
mov eax, dword [0x669b48]
mov eax, dword [eax]
call fcn.00498e74
xor eax, eax
push ebp
push 0x60ff6a
push dword fs:[eax]
mov dword fs:[eax], esp
jmp 0x60ff14
lea edx, [ebp - 0x19]
mov ecx, 1
mov eax, dword [ebp - 0xc]
call fcn.00420704
xor eax, eax
mov al, byte [ebp - 0x19]
cmp eax, 0xea
jg 0x60f15a
je 0x60f1fa
sub eax, 0xc8
je 0x60f35b
sub eax, 0x1c
je 0x60f17c
dec eax
je 0x60f1bb
jmp 0x60fed9
sub eax, 0xee
je 0x60f239
sub eax, 5
je 0x60f2ac
sub eax, 7
je 0x60f2eb
jmp 0x60fed9
lea edx, [ebp - 0x10068]
mov ecx, 2
mov eax, dword [ebp - 0xc]
call fcn.00420704
xor eax, eax
mov al, byte [ebp - 0x10068]
shl eax, 8
xor edx, edx
mov dl, byte [ebp - 0x10067]
add eax, edx
mov dword [ebp - 0x20], eax
mov cx, 1
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x14]
jmp 0x60ff14
lea edx, [ebp - 0x10068]
mov ecx, 2
mov eax, dword [ebp - 0xc]
call fcn.00420704
xor eax, eax
mov al, byte [ebp - 0x10068]
shl eax, 8
xor edx, edx
mov dl, byte [ebp - 0x10067]
add eax, edx
mov dword [ebp - 0x20], eax
mov cx, 1
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x14]
jmp 0x60ff14
lea edx, [ebp - 0x10068]
mov ecx, 2
mov eax, dword [ebp - 0xc]
call fcn.00420704
xor eax, eax
mov al, byte [ebp - 0x10068]
shl eax, 8
xor edx, edx
mov dl, byte [ebp - 0x10067]
add eax, edx
mov dword [ebp - 0x20], eax
mov cx, 1
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x14]
jmp 0x60ff14
mov eax, dword [0x669d2c]
mov byte [eax], 1
mov dl, 1
mov eax, dword [0x41ab08]
call fcn.00403c64
mov edx, dword [0x66a154]
mov dword [edx], eax
lea edx, [ebp - 0x10068]
mov ecx, 2
mov eax, dword [ebp - 0xc]
call fcn.00420704
xor eax, eax
mov al, byte [ebp - 0x10068]
shl eax, 8
xor edx, edx
mov dl, byte [ebp - 0x10067]
add eax, edx
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x20]
cdq
push edx
push eax
mov eax, dword [0x66a154]
mov eax, dword [eax]
mov edx, dword [ebp - 0xc]
call fcn.00420794
mov eax, dword [0x669b48]
mov eax, dword [eax]
call fcn.00498e74
jmp 0x60ff14
lea edx, [ebp - 0x10068]
mov ecx, 2
mov eax, dword [ebp - 0xc]
call fcn.00420704
xor eax, eax
mov al, byte [ebp - 0x10068]
shl eax, 8
xor edx, edx
mov dl, byte [ebp - 0x10067]
add eax, edx
mov dword [ebp - 0x20], eax
mov cx, 1
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x14]
jmp 0x60ff14
mov dl, 1
mov eax, dword [0x41ab08]
call fcn.00403c64
mov dword [ebp - 0x34], eax
push 0
push 0xe
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x34]
call fcn.00420794
xor ecx, ecx
mov edx, 1
mov eax, dword [ebp - 0x34]
mov ebx, dword [eax]
call dword [ebx + 0x14]
lea edx, [ebp - 0x38]
mov ecx, 4
mov eax, dword [ebp - 0x34]
call fcn.00420704
lea eax, [ebp - 0x38]
call fcn.0049b538
mov edx, dword [ebp - 0x38]
sub edx, 9
mov cx, 1
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x14]
mov eax, dword [0x669b48]
mov eax, dword [eax]
call fcn.00498e74
mov eax, dword [ebp - 0x34]
call fcn.00403c94
jmp 0x60ff14
mov byte [ebp - 0x45], 1
mov byte [ebp - 0x58], 1
call fcn.00612374
lea edx, [ebp - 0x10068]
mov ecx, 1
mov eax, dword [ebp - 0xc]
call fcn.00420704
xor eax, eax
mov al, byte [ebp - 0x10068]
mov dword [ebp - 0x20], eax
lea edx, [ebp - 0x28]
mov ecx, 1
mov eax, dword [ebp - 0xc]
call fcn.00420704
mov eax, dword [0x669b48]
mov eax, dword [eax]
call fcn.00498e74
mov eax, dword [ebp - 0x28]
test eax, eax
jle 0x60fe23
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x10], 1
lea edx, [ebp - 0x19]
mov ecx, 1
mov eax, dword [ebp - 0xc]
call fcn.00420704
mov al, byte [ebp - 0x19]
sub al, 0x12
je 0x60f3e3
dec al
je 0x60fc80
sub al, 6
je 0x60f91b
jmp 0x60fe17
mov byte [ebp - 0x2d], 0x12
lea edx, [ebp - 0x24]
mov ecx, 1
mov eax, dword [ebp - 0xc]
call fcn.00420704
sub dword [ebp - 0x24], 3
lea edx, [ebp - 0x2e]
mov ecx, 1
mov eax, dword [ebp - 0xc]
call fcn.00420704
lea edx, [ebp - 0x2f]
mov ecx, 1
mov eax, dword [ebp - 0xc]
call fcn.00420704
lea edx, [ebp - 0x30]
mov ecx, 1
mov eax, dword [ebp - 0xc]
call fcn.00420704
mov eax, dword [0x668f70]
mov al, byte [eax]
cmp al, byte [ebp - 0x2e]
je 0x60f449
mov al, byte [ebp - 0x2e]
call fcn.0060ece0
mov eax, dword [0x668f70]
mov dl, byte [ebp - 0x2e]
mov byte [eax], dl
mov eax, dword [ebp - 0x24]
test eax, eax
jns 0x60f453
add eax, 7
sar eax, 3
mov dword [ebp - 0x2c], eax
mov eax, dword [0x668f00]
xor ecx, ecx
mov edx, 0x10000
call fcn.00408374
mov eax, dword [0x668f00]
mov byte [eax], 0x50
mov eax, dword [0x668f00]
mov byte [eax + 1], 0
mov dword [ebp - 0x4c], 2
mov eax, dword [0x669b48]
mov eax, dword [eax]
call fcn.00498e74
push 0x6100d0
lea edx, [ebp - 0x20894]
mov eax, dword [ebp - 0x2c]
call fcn.0040a40c
push dword [ebp - 0x20894]
push 0x6100e0
lea eax, [ebp - 0x20890]
mov edx, 3
call fcn.00404e74
mov edx, dword [ebp - 0x20890]
mov eax, dword [0x66a00c]
mov eax, dword [eax]
call fcn.0052fa8c
push 0x610108
lea edx, [ebp - 0x2089c]
mov al, byte [ebp - 0x2e]
call fcn.006437fc
push dword [ebp - 0x2089c]
push 0x610118
lea edx, [ebp - 0x208a0]
mov al, byte [ebp - 0x2f]
call fcn.006438c0
push dword [ebp - 0x208a0]
lea eax, [ebp - 0x20898]
mov edx, 4
call fcn.00404e74
mov edx, dword [ebp - 0x20898]
mov eax, dword [0x66a00c]
mov eax, dword [eax]
call fcn.0052fa8c
mov eax, dword [ebp - 0x2c]
dec eax
test eax, eax
jl 0x60f673
inc eax
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x14], 0
mov eax, dword [0x668f00]
mov edx, dword [ebp - 0x4c]
mov cl, byte [ebp - 0x2d]
mov byte [eax + edx], cl
inc dword [ebp - 0x4c]
mov eax, dword [0x668f00]
mov edx, dword [ebp - 0x4c]
mov byte [eax + edx], 0xb
inc dword [ebp - 0x4c]
mov eax, dword [0x668f00]
mov edx, dword [ebp - 0x4c]
mov cl, byte [ebp - 0x2e]
mov byte [eax + edx], cl
inc dword [ebp - 0x4c]
mov eax, dword [0x668f00]
mov edx, dword [ebp - 0x4c]
mov cl, byte [ebp - 0x2f]
mov byte [eax + edx], cl
inc dword [ebp - 0x4c]
mov eax, dword [0x668f00]
mov edx, dword [ebp - 0x4c]
mov cl, byte [ebp - 0x30]
mov byte [eax + edx], cl
inc dword [ebp - 0x4c]
mov eax, dword [0x668f00]
mov edx, dword [ebp - 0x4c]
lea edx, [eax + edx]
mov ecx, 8
mov eax, dword [ebp - 0xc]
call fcn.00420704
mov eax, dword [0x669b48]
mov eax, dword [eax]
call fcn.00498e74
lea edx, [ebp - 0x208a8]
mov al, byte [ebp - 0x2e]
call fcn.006437fc
push dword [ebp - 0x208a8]
push 0x61012c
lea edx, [ebp - 0x208ac]
mov al, byte [ebp - 0x2f]
call fcn.006438c0
push dword [ebp - 0x208ac]
push 0x610138
mov eax, dword [0x668f00]
mov edx, dword [ebp - 0x4c]
add eax, edx
lea ecx, [ebp - 0x208b0]
mov edx, 4
call fcn.0049b85c
push dword [ebp - 0x208b0]
push 0x610150
mov eax, dword [0x668f00]
mov edx, dword [ebp - 0x4c]
lea eax, [eax + edx + 4]
lea ecx, [ebp - 0x208b4]
mov edx, 4
call fcn.0049b85c
push dword [ebp - 0x208b4]
lea eax, [ebp - 0x208a4]
mov edx, 7
call fcn.00404e74
mov edx, dword [ebp - 0x208a4]
mov eax, dword [0x66a00c]
mov eax, dword [eax]
call fcn.0052fa8c
mov eax, dword [0x669b48]
mov eax, dword [eax]
call fcn.00498e74
add dword [ebp - 0x4c], 8
mov eax, dword [0x669b48]
mov eax, dword [eax]
call fcn.00498e74
inc dword [ebp - 0x14]
dec dword [ebp - 0x64]
jne 0x60f539
mov eax, dword [0x66a00c]
mov eax, dword [eax]
mov eax, dword [eax + 0x314]
mov eax, dword [eax + 0x208]
xor edx, edx
call fcn.0044e464
xor edx, edx
call fcn.0044e36c
mov eax, dword [0x66a00c]
mov eax, dword [eax]
mov eax, dword [eax + 0x314]
mov eax, dword [eax + 0x208]
mov edx, 1
call fcn.0044e464
xor edx, edx
call fcn.0044e36c
mov eax, dword [0x669b48]
mov eax, dword [eax]
call fcn.00498e74
mov al, byte [ebp - 0x2c]
mov edx, dword [0x668f00]
mov byte [edx + 1], al
mov edx, dword [ebp - 0x4c]
dec edx
mov eax, dword [0x668f00]
inc eax
call fcn.005d5aa8
mov byte [ebp - 0x55], al
mov eax, dword [0x668f00]
mov edx, dword [ebp - 0x4c]
mov cl, byte [ebp - 0x55]
mov byte [eax + edx], cl
inc dword [ebp - 0x4c]
mov eax, dword [0x669b48]
mov eax, dword [eax]
call fcn.00498e74
mov eax, dword [0x66a00c]
mov eax, dword [eax]
mov eax, dword [eax + 0x39c]
xor edx, edx
call fcn.004d0ab8
mov eax, dword [0x66a00c]
mov eax, dword [eax]
mov eax, dword [eax + 0x39c]
mov edx, 0x190
call fcn.004d0a08
cmp byte [ebp - 0x2f], 0
jne 0x60f75e
mov eax, dword [0x669b48]
mov eax, dword [eax]
call fcn.00498e74
mov eax, dword [0x66a00c]
mov eax, dword [eax]
mov edx, 0x610160
call fcn.0052fa8c
mov edx, 0x68fb0
mov eax, 0x68fb0
call fcn.0049cc90
jmp 0x60f779
mov eax, dword [0x669b48]
mov eax, dword [eax]
call fcn.00498e74
mov edx, 0x2710
mov eax, 0x2710
call fcn.0049cc90
mov eax, dword [0x669b48]
mov eax, dword [eax]
call fcn.00498e74
mov eax, dword [0x66a00c]
mov eax, dword [eax]
mov edx, 0x61018c
call fcn.0052fa8c
mov eax, dword [0x669b48]
mov eax, dword [eax]
call fcn.00498e74
lea edx, [ebp - 0x20870]
mov eax, dword [0x668f00]
mov ecx, dword [ebp - 0x4c]
call fcn.0049b428
mov eax, dword [0x669920]
add eax, 4
mov dx, word [ebp - 0x4c]
mov word [eax], dx
mov eax, dword [0x669920]
mov edx, 6
call fcn.0060a490
lea eax, [ebp - 0x20870]
mov edx, dword [ebp - 0x4c]
call fcn.0060a490
mov eax, dword [0x669b48]
mov eax, dword [eax]
call fcn.00498e74
mov eax, 0x68fb0
call fcn.0060a1cc
mov eax, dword [0x669b48]
mov eax, dword [eax]
call fcn.00498e74
mov eax, 7
call fcn.0060d808
call fcn.00611f8c
test al, al
jne 0x60f8d1
mov eax, dword [0x669b48]
mov eax, dword [eax]
call fcn.00498e74
push 0x6101a8
lea edx, [ebp - 0x208bc]
mov eax, dword [0x668f70]
mov al, byte [eax]
call fcn.006437fc
push dword [ebp - 0x208bc]
push 0x6101b8
lea eax, [ebp - 0x208b8]
mov edx, 3
call fcn.00404e74
mov edx, dword [ebp - 0x208b8]
mov eax, dword [0x66a00c]
mov eax, dword [eax]
call fcn.0052fa8c
lea ecx, [ebp - 0x208c4]
mov eax, dword [0x669488]
mov edx, 7
call fcn.0049b85c
mov ecx, dword [ebp - 0x208c4]
lea eax, [ebp - 0x208c0]
mov edx, 0x6101d0
call fcn.00404e00
mov edx, dword [ebp - 0x208c0]
mov eax, dword [0x66a00c]
mov eax, dword [eax]
call fcn.0052fa8c
mov byte [ebp - 5], 0
mov eax, dword [ebp - 0xc]
call fcn.00403c94
call fcn.00609fb8
mov eax, dword [0x669b48]
mov eax, dword [eax]
call fcn.00498e74
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x610046
call fcn.00609fb8
lea edx, [ebp - 0x208c8]
mov eax, dword [0x668f70]
mov al, byte [eax]
call fcn.006437fc
lea eax, [ebp - 0x208c8]
mov edx, 0x6101e0
call fcn.00404dbc
mov edx, dword [ebp - 0x208c8]
mov eax, dword [0x66a00c]
mov eax, dword [eax]
call fcn.0052fa8c
mov eax, dword [0x669b48]
mov eax, dword [eax]
call fcn.00498e74
jmp 0x60fe17
lea edx, [ebp - 0x39]
mov ecx, 1
mov eax, dword [ebp - 0xc]
call fcn.00420704
lea edx, [ebp - 0x2e]
mov ecx, 1
mov eax, dword [ebp - 0xc]
call fcn.00420704
mov eax, dword [0x668f70]
mov al, byte [eax]
cmp al, byte [ebp - 0x2e]
je 0x60f959
mov al, byte [ebp - 0x2e]
call fcn.0060ece0
mov eax, dword [0x668f70]
mov dl, byte [ebp - 0x2e]
mov byte [eax], dl
mov eax, dword [0x669b48]
mov eax, dword [eax]
call fcn.00498e74
mov eax, dword [ebp - 0xc]
call fcn.004204a8
mov edx, eax
sub edx, 2
xor ecx, ecx
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x14]
mov eax, dword [0x669b48]
mov eax, dword [eax]
call fcn.00498e74
mov edx, 0x2710
mov eax, 0x2710
call fcn.0049cc90
mov eax, dword [0x668f00]
xor ecx, ecx
mov edx, 0x10000
call fcn.00408374
mov eax, dword [0x668f00]
mov byte [eax], 0x50
mov eax, dword [0x668f00]
mov byte [eax + 1], 0
mov dword [ebp - 0x4c], 2
mov eax, dword [0x669b48]
mov eax, dword [eax]
call fcn.00498e74
mov eax, dword [0x668f00]
mov edx, dword [ebp - 0x4c]
mov byte [eax + edx], 0x19
inc dword [ebp - 0x4c]
lea edx, [ebp - 0x39]
mov ecx, 1
mov eax, dword [ebp - 0xc]
call fcn.00420704
mov eax, dword [0x668f00]
mov edx, dword [ebp - 0x4c]
mov cl, byte [ebp - 0x39]
mov byte [eax + edx], cl
inc dword [ebp - 0x4c]
mov eax, dword [0x668f00]
mov edx, dword [ebp - 0x4c]
lea edx, [eax + edx]
xor ecx, ecx
mov cl, byte [ebp - 0x39]
mov eax, dword [ebp - 0xc]
call fcn.00420704
mov eax, dword [0x668f00]
mov edx, dword [ebp - 0x4c]
mov al, byte [eax + edx]
mov byte [ebp - 0x2e], al
mov eax, dword [0x668f00]
mov edx, dword [ebp - 0x4c]
mov al, byte [eax + edx + 1]
mov byte [ebp - 0x2f], al
mov eax, dword [0x668f00]
mov edx, dword [ebp - 0x4c]
mov al, byte [eax + edx + 0xe]
mov byte [ebp - 0x56], al
xor eax, eax
mov al, byte [ebp - 0x39]
add dword [ebp - 0x4c], eax
push 0x6101fc
lea edx, [ebp - 0x208d0]
mov al, byte [ebp - 0x56]
call fcn.0049b9a0
push dword [ebp - 0x208d0]
push 0x61012c
lea edx, [ebp - 0x208d4]
mov al, byte [ebp - 0x2e]
call fcn.006437fc
push dword [ebp - 0x208d4]
push 0x61012c
lea edx, [ebp - 0x208d8]
mov al, byte [ebp - 0x2f]
call fcn.006438c0
push dword [ebp - 0x208d8]
lea eax, [ebp - 0x208cc]
mov edx, 6
call fcn.00404e74
mov edx, dword [ebp - 0x208cc]
mov eax, dword [0x66a00c]
mov eax, dword [eax]
call fcn.0052fa8c
mov eax, dword [0x669b48]
mov eax, dword [eax]
call fcn.00498e74
mov eax, dword [0x668f00]
mov byte [eax + 1], 1
mov edx, dword [ebp - 0x4c]
dec edx
mov eax, dword [0x668f00]
inc eax
call fcn.005d5aa8
mov byte [ebp - 0x55], al
mov eax, dword [0x668f00]
mov edx, dword [ebp - 0x4c]
mov cl, byte [ebp - 0x55]
mov byte [eax + edx], cl
inc dword [ebp - 0x4c]
lea edx, [ebp - 0x20870]
mov eax, dword [0x668f00]
mov ecx, dword [ebp - 0x4c]
call fcn.0049b428
mov eax, dword [0x669920]
add eax, 4
mov dx, word [ebp - 0x4c]
mov word [eax], dx
mov eax, dword [0x669920]
mov edx, 6
call fcn.0060a490
lea eax, [ebp - 0x20870]
mov edx, dword [ebp - 0x4c]
call fcn.0060a490
mov eax, dword [0x669b48]
mov eax, dword [eax]
call fcn.00498e74
call fcn.00609fb8
mov eax, dword [0x669b48]
mov eax, dword [eax]
call fcn.00498e74
mov eax, 7
call fcn.0060d808
call fcn.00611f8c
test al, al
jne 0x60fbff
push 0x6101a8
lea edx, [ebp - 0x208e0]
mov eax, dword [0x668f70]
mov al, byte [eax]
call fcn.006437fc
push dword [ebp - 0x208e0]
push 0x610218
lea eax, [ebp - 0x208dc]
mov edx, 3
call fcn.00404e74
mov edx, dword [ebp - 0x208dc]
mov eax, dword [0x66a00c]
mov eax, dword [eax]
call fcn.0052fa8c
lea ecx, [ebp - 0x208e8]
mov eax, dword [0x669488]
mov edx, 7
call fcn.0049b85c
mov ecx, dword [ebp - 0x208e8]
lea eax, [ebp - 0x208e4]
mov edx, 0x6101d0
call fcn.00404e00
mov edx, dword [ebp - 0x208e4]
mov eax, dword [0x66a00c]
mov eax, dword [eax]
call fcn.0052fa8c
mov byte [ebp - 5], 0
call fcn.00609fb8
mov eax, dword [ebp - 0xc]
call fcn.00403c94
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x610046
call fcn.00609fb8
lea edx, [ebp - 0x208ec]
mov eax, dword [0x668f70]
mov al, byte [eax]
call fcn.006437fc
lea eax, [ebp - 0x208ec]
mov edx, 0x610234
call fcn.00404dbc
mov edx, dword [ebp - 0x208ec]
mov eax, dword [0x66a00c]
mov eax, dword [eax]
call fcn.0052fa8c
mov eax, dword [0x669b48]
mov eax, dword [eax]
call fcn.00498e74
mov eax, dword [0x66a00c]
mov eax, dword [eax]
mov eax, dword [eax + 0x39c]
xor edx, edx
call fcn.004d0ab8
mov eax, dword [0x66a00c]
mov eax, dword [eax]
mov eax, dword [eax + 0x39c]
mov edx, 0x64
call fcn.004d0a08
mov eax, dword [0x669b48]
mov eax, dword [eax]
call fcn.00498e74
jmp 0x60fe17
mov eax, dword [0x668f00]
xor ecx, ecx
mov edx, 0x10000
call fcn.00408374
lea eax, [ebp - 0x5c]
call fcn.00404ae4
lea edx, [ebp - 0x39]
mov ecx, 1
mov eax, dword [ebp - 0xc]
call fcn.00420704
lea edx, [ebp - 0x2d]
mov ecx, 1
mov eax, dword [ebp - 0xc]
call fcn.00420704
xor eax, eax
mov al, byte [ebp - 0x39]
dec eax
mov ecx, 0xc
cdq
idiv ecx
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
dec eax
test eax, eax
jl 0x60fe17
inc eax
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x50], 0
lea eax, [ebp - 0x5c]
call fcn.00404ae4
mov eax, dword [0x669b48]
mov eax, dword [eax]
call fcn.00498e74
mov eax, dword [0x668f00]
mov byte [eax], 0x50
mov eax, dword [0x668f00]
mov byte [eax + 1], 0
mov dword [ebp - 0x4c], 2
mov eax, dword [0x668f00]
mov edx, dword [ebp - 0x4c]
mov byte [eax + edx], 0x13
inc dword [ebp - 0x4c]
mov eax, dword [0x668f00]
mov edx, dword [ebp - 0x4c]
mov byte [eax + edx], 0xd
inc dword [ebp - 0x4c]
mov eax, dword [0x668f00]
mov edx, dword [ebp - 0x4c]
mov cl, byte [ebp - 0x2d]
mov byte [eax + edx], cl
inc dword [ebp - 0x4c]
mov eax, dword [0x668f00]
mov edx, dword [ebp - 0x4c]
lea edx, [eax + edx]
mov ecx, 0xc
mov eax, dword [ebp - 0xc]
call fcn.00420704
xor eax, eax
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x4c]
add eax, dword [ebp - 0x54]
mov edx, dword [0x668f00]
cmp byte [edx + eax], 0
je 0x60fd9c
lea eax, [ebp - 0x208f0]
mov edx, dword [ebp - 0x4c]
add edx, dword [ebp - 0x54]
mov ecx, dword [0x668f00]
mov dl, byte [ecx + edx]
call fcn.00404ccc
mov edx, dword [ebp - 0x208f0]
lea eax, [ebp - 0x5c]
call fcn.00404dbc
inc dword [ebp - 0x54]
cmp dword [ebp - 0x54], 0xc
jne 0x60fd59
add dword [ebp - 0x4c], 0xc
lea eax, [ebp - 0x208f4]
mov ecx, dword [ebp - 0x5c]
mov edx, 0x610254
call fcn.00404e00
mov edx, dword [ebp - 0x208f4]
mov eax, dword [0x66a00c]
mov eax, dword [eax]
call fcn.0052fa8c
mov eax, dword [0x669b48]
mov eax, dword [eax]
call fcn.00498e74
mov eax, dword [0x668f00]
mov byte [eax + 1], 1
mov edx, dword [ebp - 0x4c]
sub edx, 6
mov eax, dword [0x668f00]
inc eax
call fcn.005d5aa8
mov byte [ebp - 0x55], al
mov eax, dword [0x668f00]
mov edx, dword [ebp - 0x4c]
mov cl, byte [ebp - 0x55]
mov byte [eax + edx], cl
inc dword [ebp - 0x4c]
mov eax, dword [0x669b48]
mov eax, dword [eax]
call fcn.00498e74
inc dword [ebp - 0x50]
dec dword [ebp - 0x64]
jne 0x60fce1
inc dword [ebp - 0x10]
dec dword [ebp - 0x60]
jne 0x60f3b7
mov eax, dword [0x669b48]
mov eax, dword [eax]
call fcn.00498e74
mov eax, dword [0x66a00c]
mov eax, dword [eax]
mov eax, dword [eax + 0x39c]
mov edx, 0x64
call fcn.004d0a08
mov eax, dword [0x66a00c]
mov eax, dword [eax]
mov eax, dword [eax + 0x39c]
xor edx, edx
call fcn.004d0ab8
mov byte [ebp - 5], 1
mov eax, dword [0x669b48]
mov eax, dword [eax]
call fcn.00498e74
call fcn.006427e0
lea edx, [ebp - 0x208fc]
mov eax, dword [0x669958]
mov eax, dword [eax]
call fcn.00642808
mov ecx, dword [ebp - 0x208fc]
lea eax, [ebp - 0x208f8]
mov edx, 0x61026c
call fcn.00404e00
mov edx, dword [ebp - 0x208f8]
mov eax, dword [0x66a00c]
mov eax, dword [eax]
call fcn.0052fa8c
mov eax, dword [0x669b48]
mov eax, dword [eax]
call fcn.00498e74
mov edx, 0x2710
mov eax, 0x2710
call fcn.0049cc90
mov eax, dword [ebp - 0xc]
call fcn.00403c94
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x610046
lea edx, [ebp - 0x10068]
mov ecx, 1
mov eax, dword [ebp - 0xc]
call fcn.00420704
xor eax, eax
mov al, byte [ebp - 0x10068]
mov dword [ebp - 0x20], eax
lea edx, [ebp - 0x10068]
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0xc]
call fcn.00420704
mov eax, dword [0x669b48]
mov eax, dword [eax]
call fcn.00498e74
mov eax, dword [ebp - 0xc]
call fcn.004204a8
push edx
push eax
mov eax, dword [ebp - 0x18]
cdq
cmp edx, dword [esp + 4]
jne 0x60ff35
cmp eax, dword [esp]
pop edx
pop eax
ja 0x60f120
jmp 0x60ff3d
pop edx
pop eax
jg 0x60f120
cmp byte [ebp - 0x45], 0
jne 0x60ff58
mov byte [ebp - 5], 1
mov eax, dword [0x66a00c]
mov eax, dword [eax]
mov edx, 0x61028c
call fcn.0052fa8c
mov eax, dword [ebp - 0xc]
call fcn.00403c94
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x60ffb3
mov eax, dword [0x669b48]
mov eax, dword [eax]
call fcn.00498e74
call fcn.006427e0
lea edx, [ebp - 0x20908]
mov eax, dword [0x669958]
mov eax, dword [eax]
call fcn.00642808
mov ecx, dword [ebp - 0x20908]
lea eax, [ebp - 0x20904]
mov edx, 0x61026c
call fcn.00404e00
mov edx, dword [ebp - 0x20904]
mov eax, dword [0x66a00c]
mov eax, dword [eax]
call fcn.0052fa8c
mov eax, dword [0x669b48]
mov eax, dword [eax]
call fcn.00498e74
xor eax, eax
mov dword [ebp - 0x40], eax
mov eax, dword [0x66a00c]
mov eax, dword [eax]
mov eax, dword [eax + 0x39c]
mov edx, 0x64
call fcn.004d0a08
mov eax, dword [0x66a00c]
mov eax, dword [eax]
mov eax, dword [eax + 0x39c]
xor edx, edx
call fcn.004d0ab8
mov eax, dword [0x669b48]
mov eax, dword [eax]
call fcn.00498e74
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x61007b
lea eax, [ebp - 0x20908]
mov edx, 0x26
call fcn.00404b08
lea eax, [ebp - 0x5c]
call fcn.00404ae4
lea eax, [ebp - 4]
call fcn.00404ae4
ret