Function at 0x6182f4
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x8c4eda
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x984
mov dword [ebp - 0x10], esp
mov dword [ebp - 0xa8], ebx
mov dword [ebp - 0xb0], edi
mov dword [ebp - 0xac], esi
mov dword [ebp - 0x6c], ecx
lea ecx, [ebp - 0x794]
call fcn.0041cbf8
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x790]
call fcn.004e4b6c
mov dword [ebp - 4], 1
mov byte [ebp - 0x778], 0
lea ecx, [ebp - 0x730]
call fcn.004e4b6c
mov dword [ebp - 4], 2
xor bl, bl
lea ecx, [ebp - 0x6f8]
lea edi, [ebp - 0x71c]
lea esi, [ebp - 0x720]
xor edx, edx
lea eax, [ebp - 0x780]
push 1
push eax
push edx
push edx
push esi
push edi
push ecx
mov ecx, dword [ebp + 0xc]
call fcn.004ea170
movzx eax, al
test eax, eax
jne 0x618403
movzx eax, byte [ebp + 0x14]
test eax, eax
je 0x6183a6
mov bl, 0x11
jmp 0x618403
mov dword [ebp - 4], 1
lea ecx, [ebp - 0x730]
call fcn.0040b540
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x790]
call fcn.0040b540
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x794]
call fcn.00406220
mov eax, 9
mov edi, dword [ebp - 0xb0]
mov esi, dword [ebp - 0xac]
mov ebx, dword [ebp - 0xa8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 0x10
movzx eax, byte [ebp + 0x14]
test eax, eax
je 0x618525
test bl, bl
jne 0x618422
mov eax, dword [ebp - 0x718]
cmp eax, 0xffffffff
je 0x61984e
lea ecx, [ebp - 0x6f0]
call fcn.0041cbf8
mov dword [ebp - 0x6f4], 0
mov dword [ebp - 4], 3
lea ecx, [ebp - 0x98c]
push 0xa35140
call fcn.004061ac
lea eax, [ebp - 0x6f4]
mov dword [ebp - 0x990], eax
mov dword [ebp - 0x988], 5
mov dword [ebp - 4], 4
lea edx, [ebp - 0x98c]
mov eax, dword [ebp - 0x988]
and eax, 0xf
or eax, 0x10
mov ecx, dword [ebp - 0x990]
push eax
push edx
call fcn.0043ec3c
mov dword [ebp - 4], 3
lea ecx, [ebp - 0x98c]
call fcn.00406220
mov dword [ebp - 4], 2
lea eax, [ebp - 0x6f4]
mov dword [ebp - 0x980], eax
mov dword [ebp - 4], 5
mov dword [ebp - 4], 2
lea ecx, [ebp - 0x6f0]
call fcn.00406220
mov dword [ebp - 4], 1
lea ecx, [ebp - 0x730]
call fcn.0040b540
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x790]
call fcn.0040b540
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x794]
call fcn.00406220
mov eax, 0xa
mov edi, dword [ebp - 0xb0]
mov esi, dword [ebp - 0xac]
mov ebx, dword [ebp - 0xa8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 0x10
test bl, bl
jne 0x61974b
xor eax, eax
movzx edx, byte [ebp + 0x14]
test edx, edx
mov dword [ebp - 0x30], eax
jne 0x618677
mov eax, dword [ebp - 0x720]
test eax, eax
jne 0x6185a5
mov dword [ebp - 4], 1
lea ecx, [ebp - 0x730]
call fcn.0040b540
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x790]
call fcn.0040b540
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x794]
call fcn.00406220
mov eax, 0xa
mov edi, dword [ebp - 0xb0]
mov esi, dword [ebp - 0xac]
mov ebx, dword [ebp - 0xa8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 0x10
mov al, byte [ebp - 0x778]
test al, al
jne 0x61860c
mov dword [ebp - 4], 1
lea ecx, [ebp - 0x730]
call fcn.0040b540
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x790]
call fcn.0040b540
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x794]
call fcn.00406220
mov eax, 0xa
mov edi, dword [ebp - 0xb0]
mov esi, dword [ebp - 0xac]
mov ebx, dword [ebp - 0xa8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 0x10
movzx eax, byte [ebp - 0x750]
test eax, eax
mov dword [ebp - 0x30], eax
jne 0x618677
mov dword [ebp - 4], 1
lea ecx, [ebp - 0x730]
call fcn.0040b540
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x790]
call fcn.0040b540
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x794]
call fcn.00406220
mov eax, 0xa
mov edi, dword [ebp - 0xb0]
mov esi, dword [ebp - 0xac]
mov ebx, dword [ebp - 0xa8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 0x10
lea ecx, [ebp - 0x690]
call fcn.005f91c4
mov dword [ebp - 4], 0xb
lea ecx, [ebp - 0x648]
call fcn.004e4b6c
mov dword [ebp - 4], 0xc
lea ecx, [ebp - 0x638]
call fcn.004e4b6c
mov dword [ebp - 4], 0xd
lea ecx, [ebp - 0x628]
call fcn.0041cbf8
mov dword [ebp - 4], 0xe
push 1
call fcn.00410c88
pop ecx
movzx eax, al
test eax, eax
je 0x618a70
lea ecx, [ebp - 0x730]
call fcn.004e2e74
movzx eax, al
test eax, eax
je 0x618a70
mov eax, 1
lea ecx, [ebp - 0x624]
lea edx, [ebp - 0x778]
mov byte [ebp - 0x664], al
mov dword [ebp - 0x65c], eax
mov byte [ebp - 0x66e], al
mov dword [ebp - 0x660], 0
push edx
call fcn.004061ac
mov dword [ebp - 4], 0xf
lea ecx, [ebp - 0x628]
lea eax, [ebp - 0x624]
push eax
call fcn.004061ec
mov dword [ebp - 4], 0xe
lea ecx, [ebp - 0x624]
call fcn.00406220
lea ecx, [ebp - 0x628]
push 1
call fcn.004062e8
mov ecx, 0x9ec5a0
call fcn.004e2e74
movzx eax, al
test eax, eax
jne 0x6187c2
mov ecx, 0x9ec5a0
call fcn.004e2de4
cmp eax, 1
jne 0x6187c2
mov ecx, 0x9ec5a0
call fcn.004e2e50
movzx eax, al
test eax, eax
jne 0x6187c2
mov ecx, 0x9ec5a0
lea eax, [ebp - 0x620]
push 0
push eax
call fcn.004e5490
mov dword [ebp - 4], 0x10
lea ecx, [ebp - 0x668]
lea eax, [ebp - 0x620]
push eax
call fcn.004061ec
mov dword [ebp - 4], 0xe
lea ecx, [ebp - 0x620]
call fcn.00406220
mov dword [ebp - 0x66c], 0
push edi
mov ecx, esp
lea eax, [ebp - 0x628]
push eax
call fcn.0040618c
lea ecx, [ebp - 0x690]
call fcn.0056432c
movzx eax, al
test eax, eax
jne 0x618896
mov dword [ebp - 4], 0xd
lea ecx, [ebp - 0x628]
call fcn.00406220
mov dword [ebp - 4], 0xc
lea ecx, [ebp - 0x638]
call fcn.0040b540
mov dword [ebp - 4], 0xb
lea ecx, [ebp - 0x648]
call fcn.0040b540
mov dword [ebp - 4], 2
lea ecx, [ebp - 0x690]
call fcn.0046bef8
mov dword [ebp - 4], 1
lea ecx, [ebp - 0x730]
call fcn.0040b540
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x790]
call fcn.0040b540
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x794]
call fcn.00406220
mov eax, 0xa
mov edi, dword [ebp - 0xb0]
mov esi, dword [ebp - 0xac]
mov ebx, dword [ebp - 0xa8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 0x10
add esp, 0xfffffff8
mov ecx, esp
lea eax, [ebp - 0x678]
push eax
call fcn.0040618c
lea ecx, [ebp - 0x648]
xor eax, eax
mov word [esp + 4], ax
call fcn.004e83f4
lea ecx, [ebp - 0x614]
call fcn.004e4b6c
mov dword [ebp - 4], 0x11
add esp, 0xfffffff8
mov ecx, esp
lea eax, [ebp - 0x674]
push eax
call fcn.0040618c
lea ecx, [ebp - 0x614]
xor eax, eax
mov word [esp + 4], ax
call fcn.004e83f4
lea ecx, [ebp - 0x614]
call fcn.004e2e74
movzx eax, al
test eax, eax
je 0x61897a
lea ecx, [ebp - 0x648]
lea eax, [ebp - 0x600]
push eax
call fcn.004e4df4
mov dword [ebp - 4], 0x12
lea ecx, [ebp - 0x614]
lea eax, [ebp - 0x600]
push eax
call fcn.004e2d98
mov dword [ebp - 4], 0x11
lea ecx, [ebp - 0x600]
call fcn.0040b540
lea ecx, [ebp - 0x614]
lea eax, [ebp - 0x5f0]
push eax
call fcn.004e5be4
mov dword [ebp - 4], 0x13
lea ecx, [ebp - 0x614]
lea eax, [ebp - 0x5f0]
push eax
call fcn.004e2d98
mov dword [ebp - 4], 0x11
lea ecx, [ebp - 0x5f0]
call fcn.0040b540
lea ecx, [ebp - 0x614]
lea eax, [ebp - 0x5e0]
push 0
push eax
call fcn.004e5490
mov dword [ebp - 4], 0x14
lea ecx, [ebp - 0x794]
lea eax, [ebp - 0x5e0]
push eax
call fcn.004061ec
mov dword [ebp - 4], 0x11
lea ecx, [ebp - 0x5e0]
call fcn.00406220
lea ecx, [ebp - 0x794]
push 0xa13d30
call fcn.004060d4
add esp, 0xfffffff8
mov ecx, esp
lea eax, [ebp - 0x794]
push eax
call fcn.0040618c
lea ecx, [ebp - 0x614]
xor eax, eax
mov word [esp + 4], ax
call fcn.004e83f4
lea ecx, [ebp - 0x614]
call fcn.007efe9c
lea ecx, [ebp - 0x614]
call fcn.004e2ff4
lea ecx, [ebp - 0x648]
lea eax, [ebp - 0x5d8]
push eax
call fcn.004e4e80
mov dword [ebp - 4], 0x15
lea ecx, [ebp - 0x638]
lea eax, [ebp - 0x5d8]
push eax
call fcn.004e2d98
mov dword [ebp - 4], 0x11
lea ecx, [ebp - 0x5d8]
call fcn.0040b540
lea ecx, [ebp - 0x638]
lea eax, [ebp - 0x614]
push eax
call fcn.004e3380
lea eax, [ebp - 0x638]
push eax
call fcn.0043c6a0
pop ecx
mov dword [ebp - 4], 0xe
lea ecx, [ebp - 0x614]
call fcn.0040b540
xor eax, eax
xor edx, edx
xor ebx, ebx
mov dword [ebp - 0x88], eax
xor esi, esi
xor edi, edi
mov dword [ebp - 0xa4], edx
mov ecx, dword [ebp - 0x71c]
mov eax, dword [ebp - 0x718]
mov dword [ebp - 0x9c], ebx
add esp, 0xfffffff4
mov dword [ebp - 0x8c], esi
mov dword [ebp - 0x80], edi
mov dword [ebp - 0x90], ecx
mov ecx, esp
mov dword [ebp - 0xa0], eax
push 0xa31bf8
call fcn.004061ac
lea ecx, [esp + 8]
call fcn.0041cbf8
lea ecx, [ebp - 0x5c0]
mov byte [esp + 4], 1
call fcn.005659f8
mov dword [ebp - 4], 0x16
mov dword [ebp - 0x5a8], 0
movzx eax, byte [ebp + 0x14]
test eax, eax
je 0x618b09
mov eax, dword [ebp - 0x90]
cmp eax, 0x19
je 0x6199cd
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0x88], eax
xor eax, eax
movzx edx, byte [ebp + 0x14]
test edx, edx
mov dword [ebp - 0x4c], eax
je 0x618b7f
mov esi, dword [ebp - 0x88]
mov eax, dword [ebp - 0xa4]
cmp esi, eax
jg 0x618b7f
mov eax, dword [ebp - 0xa0]
cmp eax, 0xffffffff
je 0x619a09
mov dword [ebp - 0x8c], eax
mov dword [ebp - 0x9c], eax
mov ebx, dword [ebp - 0x9c]
mov eax, dword [ebp - 0x8c]
cmp ebx, eax
jg 0x6199f5
lea eax, [ebp - 0x71c]
push eax
push ebx
push esi
call fcn.0041fde8
mov eax, dword [ebp - 0x4c]
inc ebx
mov edx, dword [ebp - 0x8c]
add eax, dword [ebp - 0x700]
cmp ebx, edx
mov dword [ebp - 0x4c], eax
jle 0x618b55
jmp 0x6199f5
xor eax, eax
xor edx, edx
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x588], edx
mov dword [ebp - 0x584], edx
mov dword [ebp - 0x580], edx
mov dword [ebp - 4], 0x17
xor al, al
mov ecx, dword [ebp - 0xa4]
mov edx, dword [ebp - 0x88]
mov byte [ebp - 0x78], al
cmp edx, ecx
jg 0x619a61
fldz
mov ebx, dword [ebp - 0x6c]
lea eax, [ebx + 0x16dcc]
fstp qword [ebp - 0x38]
lea edx, [ebx + 0x28]
lea ecx, [ebx + 0x40]
mov dword [ebp - 0x84], eax
lea esi, [ebx + 0x390]
mov edi, dword [ebp - 0x4c]
mov dword [ebp - 0x74], edx
mov dword [ebp - 0x90], ecx
mov dword [ebp - 0x94], esi
mov dword [ebp - 0xb8], edi
fild dword [ebp - 0xb8]
fstp qword [ebp - 0x40]
movzx eax, byte [ebp + 0x14]
test eax, eax
je 0x618ccb
mov al, byte [ebp - 0x78]
test al, al
jne 0x619a61
mov eax, dword [ebp - 0xa0]
cmp eax, 0xffffffff
je 0x619a32
mov dword [ebp - 0x8c], eax
mov dword [ebp - 0x9c], eax
lea ecx, [ebp - 0x578]
call fcn.004e4b6c
mov dword [ebp - 4], 0x18
lea ecx, [ebp - 0x794]
mov eax, dword [ebp - 0x88]
lea edx, [eax + 0x41]
push edx
push 0xa351d4
push ecx
call fcn.00406768
add esp, 0xc
lea ecx, [ebp - 0x578]
lea eax, [ebp - 0x730]
push eax
call fcn.004e2d98
lea ecx, [ebp - 0x568]
lea eax, [ebp - 0x794]
push 1
push eax
call fcn.004e2e90
mov dword [ebp - 4], 0x19
lea ecx, [ebp - 0x578]
lea eax, [ebp - 0x568]
push eax
call fcn.004e3380
mov dword [ebp - 4], 0x18
lea ecx, [ebp - 0x568]
call fcn.0040b540
lea eax, [ebp - 0x578]
push eax
call fcn.0043c6a0
pop ecx
mov dword [ebp - 4], 0x17
lea ecx, [ebp - 0x578]
call fcn.0040b540
mov eax, dword [ebp - 0x9c]
mov edx, dword [ebp - 0x8c]
cmp eax, edx
mov dword [ebp - 0x98], eax
jg 0x61972b
mov al, byte [ebp - 0x78]
mov edx, dword [ebp - 0x88]
lea ecx, [edx + 0x41]
mov byte [ebp - 0x60], al
mov dword [ebp - 0x7c], ecx
mov al, byte [ebp - 0x60]
test al, al
jne 0x61972b
lea ecx, [ebp - 0x558]
call fcn.004e4b6c
mov dword [ebp - 4], 0x1a
movzx eax, byte [ebp + 0x14]
test eax, eax
jne 0x61b50c
xor eax, eax
mov edx, dword [ebp - 0x80]
test edx, edx
mov dword [ebp - 0x64], eax
jl 0x619e1b
mov al, byte [ebp - 0x60]
test al, al
jne 0x619e1b
movzx eax, byte [ebp + 0x14]
test eax, eax
je 0x618f04
lea ecx, [ebp - 0x71c]
lea eax, [ebp - 0x508]
mov edx, dword [ebp - 0x64]
push eax
push edx
push ecx
call fcn.004215cc
lea ecx, [ebp - 0x71c]
lea edx, [ebp - 0x508]
lea eax, [ebp - 0x780]
push eax
push edx
push ecx
call fcn.00421df8
movzx eax, byte [ebp - 0x750]
test eax, eax
mov dword [ebp - 0x30], eax
jne 0x618d99
mov eax, dword [ebp - 0x64]
inc eax
mov edx, dword [ebp - 0x80]
mov dword [ebp - 0x64], eax
cmp eax, edx
jle 0x618d30
jmp 0x619e1b
lea edx, [ebp - 0x794]
mov eax, dword [ebp - 0x7c]
push eax
push 0xa351d4
push edx
call fcn.00406768
add esp, 0xc
lea ecx, [ebp - 0x638]
lea eax, [ebp - 0x730]
push eax
call fcn.004e2d98
lea ecx, [ebp - 0x308]
lea eax, [ebp - 0x794]
push 1
push eax
call fcn.004e2e90
mov dword [ebp - 4], 0x1f
lea ecx, [ebp - 0x638]
lea eax, [ebp - 0x308]
push eax
call fcn.004e3380
mov dword [ebp - 4], 0x1a
lea ecx, [ebp - 0x308]
call fcn.0040b540
lea edx, [ebp - 0x794]
lea eax, [ebp - 0x714]
push eax
push 0x9f5b18
push edx
call fcn.00406768
add esp, 0xc
lea ecx, [ebp - 0x794]
push 1
call fcn.004062e8
lea ecx, [ebp - 0x2f8]
lea eax, [ebp - 0x794]
push 1
push eax
call fcn.004e2e90
mov dword [ebp - 4], 0x20
lea ecx, [ebp - 0x638]
lea eax, [ebp - 0x2f8]
push eax
call fcn.004e3380
mov dword [ebp - 4], 0x1a
lea ecx, [ebp - 0x2f8]
call fcn.0040b540
lea edx, [ebp - 0x794]
lea eax, [ebp - 0x778]
push eax
push 0x9f5b18
push edx
call fcn.00406768
add esp, 0xc
lea ecx, [ebp - 0x794]
push 1
call fcn.004062e8
lea ecx, [ebp - 0x648]
lea eax, [ebp - 0x638]
push eax
call fcn.004e2d98
lea ecx, [ebp - 0x2e8]
lea eax, [ebp - 0x794]
push 0
push eax
call fcn.004e2e90
mov dword [ebp - 4], 0x21
lea ecx, [ebp - 0x648]
lea eax, [ebp - 0x2e8]
push eax
call fcn.004e3380
mov dword [ebp - 4], 0x1a
lea ecx, [ebp - 0x2e8]
call fcn.0040b540
add esp, 0xfffffff8
mov ecx, esp
push 0x9ffe20
call fcn.004061ac
lea ecx, [ebp - 0x648]
mov dword [esp + 4], 0xffffffff
call fcn.004e5ef4
mov al, byte [ebp + 0x10]
test al, al
je 0x618f20
mov edx, dword [ebp + 8]
mov eax, dword [ebp - 0x6c]
mov ecx, dword [eax + edx*4 + 0x16fcc]
mov dword [ebp - 0x48], ecx
jmp 0x61904c
movzx eax, byte [ebp + 0x14]
test eax, eax
jne 0x618f79
mov edx, dword [ebp + 8]
mov eax, dword [ebp - 0x6c]
mov ecx, dword [eax + edx*4 + 0x16fcc]
xor ebx, ebx
test ecx, ecx
setne bl
test ebx, ebx
je 0x618f47
mov ecx, eax
call fcn.0058e7e0
call fcn.0041109c
movzx edx, byte [0x9ec108]
mov esi, dword [ebp + 8]
mov ecx, dword [ebp - 0x84]
push eax
mov eax, dword [ebp - 0x74]
push edx
push eax
push esi
call fcn.00566a74
mov dword [ebp - 0x48], eax
test ebx, ebx
je 0x618fe4
mov ecx, dword [ebp - 0x6c]
call fcn.0058e6c8
jmp 0x618fe4
mov dword [ebp - 0x2d4], 0
push 0x9678
call fcn.00898760
mov dword [ebp - 0x48], eax
add esp, 4
test eax, eax
mov dword [ebp - 0x2d0], eax
je 0x61b502
mov dword [ebp - 0x2d4], 1
mov dword [ebp - 4], 0x22
mov ecx, eax
call fcn.0057c47c
mov dword [ebp - 0x2d4], 0
mov dword [ebp - 4], 0x1a
mov eax, dword [ebp - 0x74]
mov edx, dword [ebp - 0x48]
mov dword [edx + 0x801c], eax
call fcn.0041109c
mov edx, dword [ebp - 0x48]
mov dword [edx + 0x9048], eax
lea ecx, [ebp - 0x2cc]
lea eax, [ebp - 0x778]
push eax
call fcn.004061ac
mov dword [ebp - 4], 0x23
mov eax, dword [ebp - 0x48]
lea ecx, [eax + 0x9040]
lea edx, [ebp - 0x2cc]
push edx
call fcn.004061ec
mov dword [ebp - 4], 0x1a
lea ecx, [ebp - 0x2cc]
call fcn.00406220
movsx edx, byte [ebp - 0x738]
movsx eax, byte [ebp - 0x739]
push eax
push edx
call fcn.00423238
fstp qword [ebp - 0x38]
add esp, 8
mov eax, dword [ebp - 0x48]
mov dword [eax + 0x905c], 0x3f800000
mov eax, dword [ebp - 0x48]
test eax, eax
je 0x61b3f3
mov eax, 1
xor edx, edx
mov ecx, dword [ebp - 0x30]
mov dword [ebp - 0x70], eax
test ecx, ecx
mov dword [ebp - 0x18], edx
jle 0x619ed7
lea ecx, [ebp - 0x780]
lea eax, [ebp - 0x2c8]
mov edx, dword [ebp - 0x18]
push eax
push edx
push ecx
call fcn.004224dc
test eax, eax
jne 0x619097
mov eax, dword [ebp - 0x238]
test eax, eax
mov dword [ebp - 0x28], eax
jne 0x6190aa
mov eax, dword [ebp - 0x18]
inc eax
mov edx, dword [ebp - 0x30]
mov dword [ebp - 0x18], eax
cmp eax, edx
jl 0x61906f
jmp 0x619ed7
fld dword [0xa34890]
movzx eax, byte [ebp + 0x14]
test eax, eax
je 0x6190d1
mov eax, dword [ebp - 0x68]
fdiv qword [ebp - 0x40]
mov dword [ebp - 0xb8], eax
fild dword [ebp - 0xb8]
fmulp st(1)
fstp qword [ebp - 0x20]
jmp 0x6190f6
mov eax, dword [ebp - 0x18]
mov edx, dword [ebp - 0x30]
mov dword [ebp - 0xb8], eax
fild dword [ebp - 0xb8]
mov dword [ebp - 0xb8], edx
fild dword [ebp - 0xb8]
fdivp st(2)
fmulp st(1)
fstp qword [ebp - 0x20]
lea ecx, [ebp - 0x230]
call fcn.004e4b6c
mov dword [ebp - 4], 0x26
xor eax, eax
mov byte [ebp + eax - 0x220], 0
inc eax
cmp eax, 4
jl 0x61910a
xor eax, eax
mov edx, dword [ebp - 0x28]
test edx, edx
mov dword [ebp - 0x14], eax
jle 0x619210
lea edx, [ebp - 0x220]
mov esi, dword [ebp - 0x14]
add edx, esi
mov al, byte [ebp + esi - 0x220]
test al, al
jne 0x6191fe
mov byte [edx], 1
xor al, al
mov edx, esi
mov byte [ebp - 0x4c], al
lea ecx, [edx + edx]
add ecx, ecx
mov byte [ebp - 0x21c], 0
lea ebx, [ecx + ecx]
add ebx, ebx
add ebx, ebx
sub ebx, ecx
lea edi, [ebp - 0x2a8]
mov dword [ebp - 0x2c], ebx
add edi, ebx
mov dword [ebp - 0x54], edi
xor eax, eax
mov dh, byte [edi]
mov ecx, edi
test dh, dh
je 0x619181
inc ecx
inc eax
mov dl, byte [ecx]
test dl, dl
jne 0x619179
mov ecx, eax
lea ebx, [ecx - 1]
mov dl, byte [0x9ec0e4]
test dl, dl
je 0x6191a3
cmp ebx, 1
jle 0x6191a3
mov edx, dword [ebp - 0x54]
cmp byte [ecx + edx - 2], 0x2d
je 0x61a9e5
mov al, byte [ebp - 0x4c]
test al, al
je 0x6191b2
lea esi, [ebp - 0x21c]
jmp 0x6191b4
xor esi, esi
lea ecx, [ebp - 0x71c]
lea eax, [ebp - 0x1fc]
mov edx, dword [ebp - 0x54]
push eax
push edx
push ecx
call fcn.004211dc
test eax, eax
jne 0x6191fe
lea ecx, [ebp - 0x230]
mov eax, dword [ebp - 0x54]
push 0
push esi
push eax
push dword [ebp - 0x718]
push dword [ebp - 0x71c]
push dword [ebp - 0x6f8]
call fcn.004e986c
movzx eax, al
test eax, eax
jne 0x61929c
mov eax, dword [ebp - 0x14]
inc eax
mov edx, dword [ebp - 0x28]
mov dword [ebp - 0x14], eax
cmp eax, edx
jl 0x619128
mov al, byte [ebp - 0x60]
test al, al
jne 0x61ab0e
mov dword [ebp - 4], 0x1a
lea eax, [ebp - 0x230]
mov dword [ebp - 0x8c0], eax
mov dword [ebp - 4], 0x4c
mov dword [ebp - 4], 0x1a
mov eax, dword [ebp - 0x22c]
mov edx, dword [ebp - 0x228]
cmp eax, edx
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x28], edx
je 0x61aaee
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x8b8], eax
mov dword [ebp - 4], 0x4d
mov dword [ebp - 4], 0x4e
mov dword [ebp - 4], 0x4d
lea ecx, [eax + 0xc]
call fcn.00406220
mov eax, dword [ebp - 0x14]
lea ecx, [eax + 8]
call fcn.00406220
mov eax, dword [ebp - 0x14]
add eax, 0x10
mov edx, dword [ebp - 0x28]
mov dword [ebp - 0x14], eax
cmp eax, edx
jne 0x619256
jmp 0x61aae5
mov eax, dword [ebp - 0x6c]
mov ecx, dword [ebp - 0x48]
push dword [eax + 0x16cf8]
push dword [eax + 0x16974]
push 0xffffffffffffffff
call fcn.0056f2e0
mov dword [ebp - 0x5c], eax
add esp, 0xfffffff0
lea edx, [ebp - 0x780]
lea ecx, [ebp - 0x2c8]
mov ebx, dword [ebp - 0x54]
mov dword [esp + 0xc], ebx
call fcn.0061b830
add esp, 0x10
movzx eax, al
test eax, eax
je 0x6192e7
mov eax, dword [ebp - 0x48]
mov byte [eax + 0x9045], 0xff
fld qword [ebp - 0x38]
mov eax, dword [ebp - 0x5c]
fmul dword [eax + 0x20]
fstp dword [eax + 0x20]
mov ecx, dword [ebp - 0x48]
push eax
call fcn.0057cee8
mov edx, dword [ebp - 0x5c]
lea ecx, [edx + 8]
inc eax
push eax
push 0xa351f0
push ecx
call fcn.00406768
add esp, 0xc
mov eax, dword [ebp - 0x5c]
mov ecx, dword [ebp - 0x48]
push eax
call fcn.0061c494
mov ebx, eax
test ebx, ebx
jl 0x61b3de
mov edx, dword [ebp - 0x5c]
mov ecx, dword [ebp - 0x48]
push edx
call fcn.0057cee8
push eax
mov ecx, dword [ebp - 0x48]
call fcn.0057d208
mov edx, dword [ebp - 0x48]
mov eax, dword [edx + ebx*4 + 0x4000]
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x5c]
mov ecx, dword [ebp - 0x48]
push eax
call fcn.0057cee8
push eax
mov ecx, dword [ebp - 0x48]
call fcn.0057c994
mov dword [ebp - 0x58], eax
fld dword [0xa3488c]
mov eax, 0x3f000000
test esi, esi
je 0x61b3b1
fstp st(0)
mov edx, dword [ebp - 0x58]
mov dword [edx + 0x2a8], eax
mov eax, dword [ebp - 0x2c]
movsx ecx, byte [ebp + eax - 0x298]
movsx edx, byte [ebp + eax - 0x299]
push edx
push ecx
call fcn.00423238
mov eax, dword [ebp - 0x58]
fstp dword [eax + 0x2ac]
push 0
call fcn.00410b40
mov dword [ebp - 0x54], eax
add esp, 0xc
xor eax, eax
lea ecx, [ebp - 0x648]
mov dword [ebp - 0x50], eax
call fcn.004e2e74
movzx eax, al
test eax, eax
je 0x61b39f
mov eax, 1
movzx edx, byte [ebp + 0x14]
test edx, edx
mov dword [ebp - 0x4c], eax
jne 0x61b376
lea ecx, [ebp - 0x1c0]
call fcn.004e4b6c
mov dword [ebp - 4], 0x27
lea edi, [ebp - 0x230]
lea esi, [ebp - 0x1c0]
xor ebx, ebx
lea edx, [ebp - 0x5c0]
mov eax, dword [ebp - 0x4c]
mov ecx, dword [ebp - 0x50]
push eax
mov eax, dword [ebp - 0x70]
push ecx
mov ecx, dword [ebp - 0x58]
push eax
mov eax, dword [ebp - 0x54]
push ebx
push edx
push ebx
push eax
mov eax, dword [ebp - 0x74]
push eax
push esi
push edi
call fcn.00525aac
mov ebx, eax
test ebx, ebx
je 0x619633
mov edx, dword [ebp - 0x58]
mov ecx, dword [ebp - 0x48]
push edx
call fcn.0057ceb4
push eax
mov ecx, dword [ebp - 0x48]
call fcn.0057cf20
xor edx, edx
cmp ebx, 4
mov dword [ebp - 0x58], edx
je 0x61afb4
mov ebx, 1
movzx eax, byte [ebp + 0x14]
test eax, eax
je 0x619487
mov ecx, dword [ebp - 0x58]
mov edx, dword [ecx + 0x4c]
add esp, 0xfffffff8
lea eax, [ebp - 0x58c]
add edx, 0x748
call fcn.0061dcdc
add esp, 8
movzx eax, al
xor ebx, ebx
test eax, eax
sete bl
lea ecx, [ebp - 0x648]
call fcn.004e2e74
movzx eax, al
test eax, eax
jne 0x6195b2
test ebx, ebx
je 0x6195b2
mov eax, dword [ebp - 0x58]
mov edx, dword [eax + 0x4c]
mov ecx, dword [edx + 0x550]
test ecx, ecx
je 0x6195b2
lea ecx, [ebp - 0x194]
call fcn.004e4b6c
mov dword [ebp - 4], 0x35
mov eax, dword [ebp - 0x58]
mov ecx, dword [eax + 0x4c]
add ecx, 0x748
lea edx, [ebp - 0x184]
push edx
call fcn.004e4df4
mov dword [ebp - 4], 0x36
lea ecx, [ebp - 0x184]
lea eax, [ebp - 0x174]
push 0
push eax
call fcn.004e5490
mov dword [ebp - 4], 0x37
lea eax, [ebp - 0x794]
push dword [ebp - 0x174]
push 0x9f5b18
push eax
call fcn.00406768
add esp, 0xc
mov dword [ebp - 4], 0x36
lea ecx, [ebp - 0x174]
call fcn.00406220
mov dword [ebp - 4], 0x35
lea eax, [ebp - 0x184]
mov dword [ebp - 0x920], eax
mov dword [ebp - 4], 0x38
mov dword [ebp - 4], 0x35
mov eax, dword [ebp - 0x180]
mov edx, dword [ebp - 0x17c]
cmp eax, edx
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x54], edx
je 0x61abb8
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x918], eax
mov dword [ebp - 4], 0x39
mov dword [ebp - 4], 0x3a
mov dword [ebp - 4], 0x39
lea ecx, [eax + 0xc]
call fcn.00406220
mov eax, dword [ebp - 0x4c]
lea ecx, [eax + 8]
call fcn.00406220
mov eax, dword [ebp - 0x4c]
add eax, 0x10
mov edx, dword [ebp - 0x54]
mov dword [ebp - 0x4c], eax
cmp eax, edx
jne 0x61956c
jmp 0x61abaf
mov dword [ebp - 4], 0x26
lea eax, [ebp - 0x1c0]
mov dword [ebp - 0x8e0], eax
mov dword [ebp - 4], 0x46
mov dword [ebp - 4], 0x26
mov eax, dword [ebp - 0x1bc]
mov edx, dword [ebp - 0x1b8]
cmp eax, edx
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x2c], edx
je 0x61af94
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x8d8], eax
mov dword [ebp - 4], 0x47
mov dword [ebp - 4], 0x48
mov dword [ebp - 4], 0x47
lea ecx, [eax + 0xc]
call fcn.00406220
mov eax, dword [ebp - 0x4c]
lea ecx, [eax + 8]
call fcn.00406220
mov eax, dword [ebp - 0x4c]
add eax, 0x10
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x4c], eax
cmp eax, edx
jne 0x6195ed
jmp 0x61af8b
xor eax, eax
lea ecx, [ebp - 0x1b0]
mov dword [ebp - 0x70], eax
call fcn.0041cbf8
mov dword [ebp - 4], 0x28
lea ecx, [ebp - 0x230]
lea eax, [ebp - 0x1ac]
push eax
call fcn.004e4df4
mov dword [ebp - 4], 0x29
lea ecx, [ebp - 0x1ac]
lea eax, [ebp - 0x19c]
push 0
push eax
call fcn.004e5490
mov dword [ebp - 4], 0x2a
lea eax, [ebp - 0x1b0]
push dword [ebp - 0x19c]
push 0xa0947c
push eax
call fcn.00406768
add esp, 0xc
mov dword [ebp - 4], 0x29
lea ecx, [ebp - 0x19c]
call fcn.00406220
mov dword [ebp - 4], 0x28
lea eax, [ebp - 0x1ac]
mov dword [ebp - 0x950], eax
mov dword [ebp - 4], 0x2b
mov dword [ebp - 4], 0x28
mov eax, dword [ebp - 0x1a8]
mov edx, dword [ebp - 0x1a4]
cmp eax, edx
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x4c], edx
je 0x61b0cc
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x948], eax
mov dword [ebp - 4], 0x2c
mov dword [ebp - 4], 0x2d
mov dword [ebp - 4], 0x2c
lea ecx, [eax + 0xc]
call fcn.00406220
mov eax, dword [ebp - 0x50]
lea ecx, [eax + 8]
call fcn.00406220
mov eax, dword [ebp - 0x50]
add eax, 0x10
mov edx, dword [ebp - 0x4c]
mov dword [ebp - 0x50], eax
cmp eax, edx
jne 0x6196e5
jmp 0x61b0c3
mov eax, dword [ebp - 0x88]
inc eax
mov edx, dword [ebp - 0xa4]
mov dword [ebp - 0x88], eax
cmp eax, edx
jle 0x618bf9
jmp 0x619a61
lea ecx, [ebp - 0x694]
call fcn.0041cbf8
mov dword [ebp - 0x698], 0
mov dword [ebp - 4], 8
lea ecx, [ebp - 0x974]
push 0xa351a0
call fcn.004061ac
lea eax, [ebp - 0x698]
mov dword [ebp - 0x978], eax
mov dword [ebp - 0x970], 2
mov dword [ebp - 4], 9
lea edx, [ebp - 0x974]
mov eax, dword [ebp - 0x970]
and eax, 0xf
or eax, 0x10
mov ecx, dword [ebp - 0x978]
push eax
push edx
call fcn.0043ec3c
mov dword [ebp - 4], 8
lea ecx, [ebp - 0x974]
call fcn.00406220
mov dword [ebp - 4], 2
lea eax, [ebp - 0x698]
mov dword [ebp - 0x968], eax
mov dword [ebp - 4], 0xa
mov dword [ebp - 4], 2
lea ecx, [ebp - 0x694]
call fcn.00406220
mov dword [ebp - 4], 1
lea ecx, [ebp - 0x730]
call fcn.0040b540
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x790]
call fcn.0040b540
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x794]
call fcn.00406220
mov eax, 0xa
mov edi, dword [ebp - 0xb0]
mov esi, dword [ebp - 0xac]
mov ebx, dword [ebp - 0xa8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 0x10
mov eax, dword [ebp - 0x71c]
cmp eax, 0xffffffff
je 0x618422
lea ecx, [ebp - 0x6ec]
call fcn.005f91c4
mov dword [ebp - 4], 6
mov ecx, 0x9ec5a0
call fcn.004e2e74
movzx eax, al
test eax, eax
jne 0x6198f0
mov ecx, 0x9ec5a0
call fcn.004e2de4
cmp eax, 1
jne 0x6198f0
mov ecx, 0x9ec5a0
call fcn.004e2e50
movzx eax, al
test eax, eax
jne 0x6198f0
mov ecx, 0x9ec5a0
lea eax, [ebp - 0x6a4]
push 0
push eax
call fcn.004e5490
mov dword [ebp - 4], 7
lea ecx, [ebp - 0x794]
lea eax, [ebp - 0x6a4]
push eax
call fcn.004061ec
mov dword [ebp - 4], 6
lea ecx, [ebp - 0x6a4]
call fcn.00406220
lea ecx, [ebp - 0x6c4]
lea eax, [ebp - 0x794]
push eax
call fcn.004061ec
mov dword [ebp - 0x6c8], 0xc
push edi
mov ecx, esp
push 0x9ee0a0
call fcn.004061ac
lea ecx, [ebp - 0x6ec]
call fcn.0056432c
movzx eax, al
test eax, eax
jne 0x619988
mov dword [ebp - 4], 2
lea ecx, [ebp - 0x6ec]
call fcn.0046bef8
mov dword [ebp - 4], 1
lea ecx, [ebp - 0x730]
call fcn.0040b540
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x790]
call fcn.0040b540
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x794]
call fcn.00406220
mov eax, 0xa
mov edi, dword [ebp - 0xb0]
mov esi, dword [ebp - 0xac]
mov ebx, dword [ebp - 0xa8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 0x10
add esp, 0xfffffff8
mov ecx, esp
lea eax, [ebp - 0x6d4]
push eax
call fcn.0040618c
lea ecx, [ebp - 0x730]
xor eax, eax
mov word [esp + 4], ax
call fcn.004e83f4
lea ecx, [ebp - 0x730]
call fcn.004e2ff4
mov dword [ebp - 4], 2
lea ecx, [ebp - 0x6ec]
call fcn.0046bef8
jmp 0x61852d
mov dword [ebp - 0x594], 0
lea eax, [ebp - 0x594]
push eax
call fcn.0041fac0
mov eax, dword [ebp - 0x594]
dec eax
mov dword [ebp - 0xa4], eax
jmp 0x618b09
inc esi
mov eax, dword [ebp - 0xa4]
cmp esi, eax
jle 0x618b26
jmp 0x618b7f
mov dword [ebp - 0x590], 0
lea eax, [ebp - 0x590]
push eax
push esi
call fcn.0041fbfc
mov eax, dword [ebp - 0x590]
dec eax
mov dword [ebp - 0x8c], eax
jmp 0x618b41
mov dword [ebp - 0x57c], 0
lea eax, [ebp - 0x57c]
mov edx, dword [ebp - 0x88]
push eax
push edx
call fcn.0041fbfc
mov eax, dword [ebp - 0x57c]
dec eax
mov dword [ebp - 0x8c], eax
jmp 0x618c2b
mov dword [ebp - 4], 0x16
mov eax, dword [ebp - 0x588]
mov edx, dword [ebp - 0x584]
cmp eax, edx
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x80], edx
je 0x619b24
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x7e0], eax
mov dword [ebp - 4], 0x7a
mov dword [ebp - 4], 0x16
mov edx, dword [eax + 4]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x2c], edx
cmp edx, ecx
mov dword [ebp - 0x48], ecx
je 0x619af3
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x7d8], eax
mov dword [ebp - 4], 0x7b
mov dword [ebp - 4], 0x7c
mov dword [ebp - 4], 0x7b
lea ecx, [eax + 0xc]
call fcn.00406220
mov eax, dword [ebp - 0x2c]
lea ecx, [eax + 8]
call fcn.00406220
mov eax, dword [ebp - 0x2c]
add eax, 0x10
mov edx, dword [ebp - 0x48]
mov dword [ebp - 0x2c], eax
cmp eax, edx
jne 0x619aa9
mov eax, dword [ebp - 0x64]
mov edx, dword [eax + 4]
mov dword [ebp - 0x2c], edx
mov eax, edx
push eax
call fcn.00888fb0
pop ecx
xor eax, eax
mov edx, dword [ebp - 0x64]
mov ecx, dword [ebp - 0x80]
mov dword [edx + 4], eax
mov dword [edx + 8], eax
mov dword [edx + 0xc], eax
add edx, 0x10
cmp edx, ecx
mov dword [ebp - 0x64], edx
jne 0x619a82
mov eax, dword [ebp - 0x588]
mov dword [ebp - 0x64], eax
push eax
call fcn.00888fb0
pop ecx
xor eax, eax
mov dword [ebp - 0x588], eax
mov dword [ebp - 0x584], eax
mov dword [ebp - 0x580], eax
mov dword [ebp - 4], 0xe
lea ecx, [ebp - 0x5c0]
call fcn.00565c00
mov dword [ebp - 4], 0xd
lea ecx, [ebp - 0x628]
call fcn.00406220
mov dword [ebp - 4], 0xc
lea eax, [ebp - 0x638]
mov dword [ebp - 0x7d0], eax
mov dword [ebp - 4], 0x7d
mov dword [ebp - 4], 0xc
mov eax, dword [ebp - 0x634]
mov edx, dword [ebp - 0x630]
cmp eax, edx
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x7c], edx
je 0x619be4
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x7c8], eax
mov dword [ebp - 4], 0x7e
mov dword [ebp - 4], 0x7f
mov dword [ebp - 4], 0x7e
lea ecx, [eax + 0xc]
call fcn.00406220
mov eax, dword [ebp - 0x64]
lea ecx, [eax + 8]
call fcn.00406220
mov eax, dword [ebp - 0x64]
add eax, 0x10
mov edx, dword [ebp - 0x7c]
mov dword [ebp - 0x64], eax
cmp eax, edx
jne 0x619b9a
mov eax, dword [ebp - 0x634]
mov dword [ebp - 0x64], eax
push eax
call fcn.00888fb0
pop ecx
xor eax, eax
mov dword [ebp - 0x634], eax
mov dword [ebp - 0x630], eax
mov dword [ebp - 0x62c], eax
mov dword [ebp - 4], 0xb
lea eax, [ebp - 0x648]
mov dword [ebp - 0x7c0], eax
mov dword [ebp - 4], 0x80
mov dword [ebp - 4], 0xb
mov eax, dword [ebp - 0x644]
mov edx, dword [ebp - 0x640]
cmp eax, edx
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x7c], edx
je 0x619c80
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x7b8], eax
mov dword [ebp - 4], 0x81
mov dword [ebp - 4], 0x82
mov dword [ebp - 4], 0x81
lea ecx, [eax + 0xc]
call fcn.00406220
mov eax, dword [ebp - 0x64]
lea ecx, [eax + 8]
call fcn.00406220
mov eax, dword [ebp - 0x64]
add eax, 0x10
mov edx, dword [ebp - 0x7c]
mov dword [ebp - 0x64], eax
cmp eax, edx
jne 0x619c36
mov eax, dword [ebp - 0x644]
mov dword [ebp - 0x64], eax
push eax
call fcn.00888fb0
pop ecx
xor eax, eax
mov dword [ebp - 0x644], eax
mov dword [ebp - 0x640], eax
mov dword [ebp - 0x63c], eax
mov dword [ebp - 4], 2
lea ecx, [ebp - 0x690]
call fcn.0046bef8
mov dword [ebp - 4], 1
lea eax, [ebp - 0x730]
mov dword [ebp - 0x7b0], eax
mov dword [ebp - 4], 0x83
mov dword [ebp - 4], 1
mov eax, dword [ebp - 0x72c]
mov edx, dword [ebp - 0x728]
cmp eax, edx
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x7c], edx
je 0x619d2e
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x7a8], eax
mov dword [ebp - 4], 0x84
mov dword [ebp - 4], 0x85
mov dword [ebp - 4], 0x84
lea ecx, [eax + 0xc]
call fcn.00406220
mov eax, dword [ebp - 0x64]
lea ecx, [eax + 8]
call fcn.00406220
mov eax, dword [ebp - 0x64]
add eax, 0x10
mov edx, dword [ebp - 0x7c]
mov dword [ebp - 0x64], eax
cmp eax, edx
jne 0x619ce4
mov eax, dword [ebp - 0x72c]
mov dword [ebp - 0x64], eax
push eax
call fcn.00888fb0
pop ecx
xor eax, eax
mov dword [ebp - 0x72c], eax
mov dword [ebp - 0x728], eax
mov dword [ebp - 0x724], eax
mov dword [ebp - 4], 0
lea eax, [ebp - 0x790]
mov dword [ebp - 0x7a0], eax
mov dword [ebp - 4], 0x86
mov dword [ebp - 4], 0
mov eax, dword [ebp - 0x78c]
mov edx, dword [ebp - 0x788]
cmp eax, edx
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x7c], edx
je 0x619dca
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x798], eax
mov dword [ebp - 4], 0x87
mov dword [ebp - 4], 0x88
mov dword [ebp - 4], 0x87
lea ecx, [eax + 0xc]
call fcn.00406220
mov eax, dword [ebp - 0x64]
lea ecx, [eax + 8]
call fcn.00406220
mov eax, dword [ebp - 0x64]
add eax, 0x10
mov edx, dword [ebp - 0x7c]
mov dword [ebp - 0x64], eax
cmp eax, edx
jne 0x619d80
mov eax, dword [ebp - 0x78c]
mov dword [ebp - 0x64], eax
push eax
call fcn.00888fb0
pop ecx
xor eax, eax
mov dword [ebp - 0x78c], eax
mov dword [ebp - 0x788], eax
mov dword [ebp - 0x784], eax
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x794]
call fcn.00406220
xor eax, eax
mov edi, dword [ebp - 0xb0]
mov esi, dword [ebp - 0xac]
mov ebx, dword [ebp - 0xa8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 0x10
mov dword [ebp - 4], 0x17
lea eax, [ebp - 0x558]
mov dword [ebp - 0x7f0], eax
mov dword [ebp - 4], 0x77
mov dword [ebp - 4], 0x17
mov eax, dword [ebp - 0x554]
mov edx, dword [ebp - 0x550]
cmp eax, edx
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x48], edx
je 0x619e9c
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x7e8], eax
mov dword [ebp - 4], 0x78
mov dword [ebp - 4], 0x79
mov dword [ebp - 4], 0x78
lea ecx, [eax + 0xc]
call fcn.00406220
mov eax, dword [ebp - 0x2c]
lea ecx, [eax + 8]
call fcn.00406220
mov eax, dword [ebp - 0x2c]
add eax, 0x10
mov edx, dword [ebp - 0x48]
mov dword [ebp - 0x2c], eax
cmp eax, edx
jne 0x619e52
mov eax, dword [ebp - 0x554]
mov dword [ebp - 0x2c], eax
push eax
call fcn.00888fb0
pop ecx
xor eax, eax
mov edx, dword [ebp - 0x98]
inc edx
mov dword [ebp - 0x554], eax
mov ecx, dword [ebp - 0x8c]
cmp edx, ecx
mov dword [ebp - 0x550], eax
mov dword [ebp - 0x54c], eax
mov dword [ebp - 0x98], edx
jle 0x618cf7
jmp 0x61972b
lea ecx, [ebp - 0x648]
call fcn.004e2e74
movzx eax, al
test eax, eax
jne 0x619f24
movzx eax, byte [ebp + 0x14]
test eax, eax
jne 0x619f24
xor ebx, ebx
mov eax, dword [ebp - 0x48]
mov eax, dword [eax + 0x8004]
test eax, eax
jle 0x61a5cd
mov ecx, dword [ebp - 0x48]
mov eax, dword [ecx + ebx*4]
mov edx, dword [eax + 0x4c]
mov byte [edx + 0x784], 0
mov eax, dword [ecx + 0x8004]
inc ebx
cmp ebx, eax
jl 0x619f04
jmp 0x61a5cd
mov al, byte [ebp - 0x60]
test al, al
jne 0x61a144
mov eax, dword [ebp - 0x48]
mov edx, dword [eax + 0x8000]
test edx, edx
jg 0x619f93
mov eax, dword [ebp - 0x6c]
mov ecx, dword [ebp - 0x48]
push dword [eax + 0x16cf8]
push dword [eax + 0x16974]
push 0xffffffffffffffff
call fcn.0056f2e0
mov dword [ebp - 0x50], eax
lea ecx, [ebp - 0x104]
push 0xa35204
call fcn.004061ac
mov dword [ebp - 4], 0x72
mov ecx, dword [ebp - 0x50]
add ecx, 8
lea eax, [ebp - 0x104]
push eax
call fcn.004061ec
mov dword [ebp - 4], 0x1a
lea ecx, [ebp - 0x104]
call fcn.00406220
lea ecx, [ebp - 0x648]
call fcn.004e2e74
movzx eax, al
test eax, eax
jne 0x61a11c
movzx eax, byte [ebp + 0x14]
test eax, eax
je 0x61a07a
mov ecx, dword [ebp - 0x6c]
mov eax, dword [ecx + 0x16fcc]
mov edx, dword [ebp - 0x48]
mov dword [ebp - 0x70], eax
add esp, 0xffffffc4
xor eax, eax
mov dword [ecx + 0x16fcc], edx
lea ecx, [esp + 4]
mov dword [ebp - 0x800], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], eax
mov dword [ebp - 4], 0x75
lea eax, [ebp - 0x648]
push eax
call fcn.004e2d98
mov dword [ebp - 4], 0x1a
mov dword [ebp - 4], 0x1a
lea ecx, [esp + 0x14]
xor eax, eax
mov dword [ebp - 0x7f8], ecx
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], eax
mov dword [ebp - 4], 0x76
lea eax, [ebp - 0x638]
push eax
call fcn.004e2d98
mov dword [ebp - 4], 0x1a
mov dword [ebp - 4], 0x1a
xor eax, eax
mov edx, 0xffffffff
mov ecx, dword [ebp - 0x6c]
mov dword [esp], eax
mov byte [esp + 0x24], al
mov dword [esp + 0x28], eax
mov byte [esp + 0x2c], al
mov byte [esp + 0x30], al
mov dword [esp + 0x34], edx
mov dword [esp + 0x38], edx
call fcn.0051bb64
mov eax, dword [ebp - 0x70]
mov edx, dword [ebp - 0x6c]
mov dword [edx + 0x16fcc], eax
jmp 0x61a11c
add esp, 0xffffffc4
lea ecx, [esp + 4]
xor eax, eax
mov dword [ebp - 0x810], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], eax
mov dword [ebp - 4], 0x73
lea eax, [ebp - 0x648]
push eax
call fcn.004e2d98
mov dword [ebp - 4], 0x1a
mov dword [ebp - 4], 0x1a
lea ecx, [esp + 0x14]
xor eax, eax
mov dword [ebp - 0x808], ecx
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], eax
mov dword [ebp - 4], 0x74
lea eax, [ebp - 0x638]
push eax
call fcn.004e2d98
mov dword [ebp - 4], 0x1a
mov dword [ebp - 4], 0x1a
mov esi, dword [ebp + 8]
xor eax, eax
mov edx, 0xffffffff
mov dword [esp], esi
mov ecx, dword [ebp - 0x6c]
mov byte [esp + 0x24], al
mov dword [esp + 0x28], eax
mov byte [esp + 0x2c], al
mov byte [esp + 0x30], al
mov dword [esp + 0x34], edx
mov dword [esp + 0x38], edx
call fcn.0051bb64
mov ecx, dword [ebp - 0x48]
call fcn.0057c128
movzx eax, byte [ebp + 0x14]
test eax, eax
je 0x61a13c
mov eax, dword [ebp - 0x48]
test eax, eax
je 0x61a13c
push 1
mov ecx, eax
call fcn.005f013c
inc dword [ebp - 0x68]
jmp 0x618d86
mov al, byte [ebp + 0x10]
test al, al
jne 0x61a174
movzx eax, byte [ebp + 0x14]
test eax, eax
je 0x61a165
mov eax, dword [ebp - 0x48]
test eax, eax
je 0x61a174
push 1
mov ecx, eax
call fcn.005f013c
jmp 0x61a174
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0x84]
push eax
call fcn.00566930
mov dword [ebp - 4], 0x17
lea eax, [ebp - 0x558]
mov dword [ebp - 0x870], eax
mov dword [ebp - 4], 0x60
mov dword [ebp - 4], 0x17
mov eax, dword [ebp - 0x554]
mov edx, dword [ebp - 0x550]
cmp eax, edx
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x4c], edx
je 0x61a1f5
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x868], eax
mov dword [ebp - 4], 0x61
mov dword [ebp - 4], 0x62
mov dword [ebp - 4], 0x61
lea ecx, [eax + 0xc]
call fcn.00406220
mov eax, dword [ebp - 0x2c]
lea ecx, [eax + 8]
call fcn.00406220
mov eax, dword [ebp - 0x2c]
add eax, 0x10
mov edx, dword [ebp - 0x4c]
mov dword [ebp - 0x2c], eax
cmp eax, edx
jne 0x61a1ab
mov eax, dword [ebp - 0x554]
mov dword [ebp - 0x2c], eax
push eax
call fcn.00888fb0
pop ecx
xor eax, eax
mov dword [ebp - 0x554], eax
mov dword [ebp - 0x550], eax
mov dword [ebp - 0x54c], eax
mov dword [ebp - 4], 0x16
mov eax, dword [ebp - 0x588]
mov edx, dword [ebp - 0x584]
cmp eax, edx
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x50], edx
je 0x61a2d3
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x860], eax
mov dword [ebp - 4], 0x63
mov dword [ebp - 4], 0x16
mov edx, dword [eax + 4]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x14], edx
cmp edx, ecx
mov dword [ebp - 0x18], ecx
je 0x61a2a2
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x858], eax
mov dword [ebp - 4], 0x64
mov dword [ebp - 4], 0x65
mov dword [ebp - 4], 0x64
lea ecx, [eax + 0xc]
call fcn.00406220
mov eax, dword [ebp - 0x14]
lea ecx, [eax + 8]
call fcn.00406220
mov eax, dword [ebp - 0x14]
add eax, 0x10
mov edx, dword [ebp - 0x18]
mov dword [ebp - 0x14], eax
cmp eax, edx
jne 0x61a258
mov eax, dword [ebp - 0x30]
mov edx, dword [eax + 4]
mov dword [ebp - 0x14], edx
mov eax, edx
push eax
call fcn.00888fb0
pop ecx
xor eax, eax
mov edx, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x50]
mov dword [edx + 4], eax
mov dword [edx + 8], eax
mov dword [edx + 0xc], eax
add edx, 0x10
cmp edx, ecx
mov dword [ebp - 0x30], edx
jne 0x61a231
mov eax, dword [ebp - 0x588]
mov dword [ebp - 0x30], eax
push eax
call fcn.00888fb0
pop ecx
xor eax, eax
mov dword [ebp - 0x588], eax
mov dword [ebp - 0x584], eax
mov dword [ebp - 0x580], eax
mov dword [ebp - 4], 0xe
lea ecx, [ebp - 0x5c0]
call fcn.00565c00
mov dword [ebp - 4], 0xd
lea ecx, [ebp - 0x628]
call fcn.00406220
mov dword [ebp - 4], 0xc
lea eax, [ebp - 0x638]
mov dword [ebp - 0x850], eax
mov dword [ebp - 4], 0x66
mov dword [ebp - 4], 0xc
mov eax, dword [ebp - 0x634]
mov edx, dword [ebp - 0x630]
cmp eax, edx
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x4c], edx
je 0x61a393
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x848], eax
mov dword [ebp - 4], 0x67
mov dword [ebp - 4], 0x68
mov dword [ebp - 4], 0x67
lea ecx, [eax + 0xc]
call fcn.00406220
mov eax, dword [ebp - 0x2c]
lea ecx, [eax + 8]
call fcn.00406220
mov eax, dword [ebp - 0x2c]
add eax, 0x10
mov edx, dword [ebp - 0x4c]
mov dword [ebp - 0x2c], eax
cmp eax, edx
jne 0x61a349
mov eax, dword [ebp - 0x634]
mov dword [ebp - 0x2c], eax
push eax
call fcn.00888fb0
pop ecx
xor eax, eax
mov dword [ebp - 0x634], eax
mov dword [ebp - 0x630], eax
mov dword [ebp - 0x62c], eax
mov dword [ebp - 4], 0xb
lea eax, [ebp - 0x648]
mov dword [ebp - 0x840], eax
mov dword [ebp - 4], 0x69
mov dword [ebp - 4], 0xb
mov eax, dword [ebp - 0x644]
mov edx, dword [ebp - 0x640]
cmp eax, edx
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x4c], edx
je 0x61a42f
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x838], eax
mov dword [ebp - 4], 0x6a
mov dword [ebp - 4], 0x6b
mov dword [ebp - 4], 0x6a
lea ecx, [eax + 0xc]
call fcn.00406220
mov eax, dword [ebp - 0x2c]
lea ecx, [eax + 8]
call fcn.00406220
mov eax, dword [ebp - 0x2c]
add eax, 0x10
mov edx, dword [ebp - 0x4c]
mov dword [ebp - 0x2c], eax
cmp eax, edx
jne 0x61a3e5
mov eax, dword [ebp - 0x644]
mov dword [ebp - 0x2c], eax
push eax
call fcn.00888fb0
pop ecx
xor eax, eax
mov dword [ebp - 0x644], eax
mov dword [ebp - 0x640], eax
mov dword [ebp - 0x63c], eax
mov dword [ebp - 4], 2
lea ecx, [ebp - 0x690]
call fcn.0046bef8
mov dword [ebp - 4], 1
lea eax, [ebp - 0x730]
mov dword [ebp - 0x830], eax
mov dword [ebp - 4], 0x6c
mov dword [ebp - 4], 1
mov eax, dword [ebp - 0x72c]
mov edx, dword [ebp - 0x728]
cmp eax, edx
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x4c], edx
je 0x61a4dd
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x828], eax
mov dword [ebp - 4], 0x6d
mov dword [ebp - 4], 0x6e
mov dword [ebp - 4], 0x6d
lea ecx, [eax + 0xc]
call fcn.00406220
mov eax, dword [ebp - 0x2c]
lea ecx, [eax + 8]
call fcn.00406220
mov eax, dword [ebp - 0x2c]
add eax, 0x10
mov edx, dword [ebp - 0x4c]
mov dword [ebp - 0x2c], eax
cmp eax, edx
jne 0x61a493
mov eax, dword [ebp - 0x72c]
mov dword [ebp - 0x2c], eax
push eax
call fcn.00888fb0
pop ecx
xor eax, eax
mov dword [ebp - 0x72c], eax
mov dword [ebp - 0x728], eax
mov dword [ebp - 0x724], eax
mov dword [ebp - 4], 0
lea eax, [ebp - 0x790]
mov dword [ebp - 0x820], eax
mov dword [ebp - 4], 0x6f
mov dword [ebp - 4], 0
mov eax, dword [ebp - 0x78c]
mov edx, dword [ebp - 0x788]
cmp eax, edx
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x4c], edx
je 0x61a579
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x818], eax
mov dword [ebp - 4], 0x70
mov dword [ebp - 4], 0x71
mov dword [ebp - 4], 0x70
lea ecx, [eax + 0xc]
call fcn.00406220
mov eax, dword [ebp - 0x2c]
lea ecx, [eax + 8]
call fcn.00406220
mov eax, dword [ebp - 0x2c]
add eax, 0x10
mov edx, dword [ebp - 0x4c]
mov dword [ebp - 0x2c], eax
cmp eax, edx
jne 0x61a52f
mov eax, dword [ebp - 0x78c]
mov dword [ebp - 0x2c], eax
push eax
call fcn.00888fb0
pop ecx
xor eax, eax
mov dword [ebp - 0x78c], eax
mov dword [ebp - 0x788], eax
mov dword [ebp - 0x784], eax
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x794]
call fcn.00406220
mov eax, 1
mov edi, dword [ebp - 0xb0]
mov esi, dword [ebp - 0xac]
mov ebx, dword [ebp - 0xa8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 0x10
xor edx, edx
test eax, eax
mov dword [ebp - 0x50], edx
jle 0x619f24
mov esi, dword [ebp - 0x50]
lea edi, [esi + esi]
add edi, edi
add edi, dword [ebp - 0x48]
mov edx, dword [edi]
mov edx, dword [edx + 0x4c]
mov dword [ebp - 0x4c], edi
mov cl, byte [edx + 0x784]
test cl, cl
je 0x61a607
mov edx, dword [ebp - 0x50]
inc edx
cmp edx, eax
mov dword [ebp - 0x50], edx
jl 0x61a5da
jmp 0x619f24
mov byte [edx + 0x784], 1
lea ecx, [ebp - 0x14c]
call fcn.004e4b6c
mov dword [ebp - 4], 0x4f
mov eax, edi
mov edx, dword [eax]
mov ecx, dword [edx + 0x4c]
add ecx, 0x748
lea ebx, [ebp - 0x13c]
push ebx
call fcn.004e4df4
mov dword [ebp - 4], 0x50
lea ecx, [ebp - 0x13c]
lea eax, [ebp - 0x12c]
push 0
push eax
call fcn.004e5490
mov dword [ebp - 4], 0x51
lea eax, [ebp - 0x794]
push dword [ebp - 0x12c]
push 0x9f5b18
push eax
call fcn.00406768
add esp, 0xc
mov dword [ebp - 4], 0x50
lea ecx, [ebp - 0x12c]
call fcn.00406220
mov dword [ebp - 4], 0x4f
lea eax, [ebp - 0x13c]
mov dword [ebp - 0x8b0], eax
mov dword [ebp - 4], 0x52
mov dword [ebp - 4], 0x4f
mov eax, dword [ebp - 0x138]
mov edx, dword [ebp - 0x134]
cmp eax, edx
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x2c], edx
je 0x61a708
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x8a8], eax
mov dword [ebp - 4], 0x53
mov dword [ebp - 4], 0x54
mov dword [ebp - 4], 0x53
lea ecx, [eax + 0xc]
call fcn.00406220
mov eax, dword [ebp - 0x18]
lea ecx, [eax + 8]
call fcn.00406220
mov eax, dword [ebp - 0x18]
add eax, 0x10
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x18], eax
cmp eax, edx
jne 0x61a6be
mov eax, dword [ebp - 0x138]
mov dword [ebp - 0x18], eax
push eax
call fcn.00888fb0
pop ecx
xor eax, eax
lea ecx, [ebp - 0x794]
mov dword [ebp - 0x138], eax
mov dword [ebp - 0x134], eax
mov dword [ebp - 0x130], eax
push 1
call fcn.004062e8
lea ecx, [ebp - 0x128]
call fcn.004e4b6c
mov dword [ebp - 4], 0x55
movzx eax, byte [ebp + 0x14]
test eax, eax
je 0x61a75e
lea ecx, [ebp - 0x128]
lea eax, [ebp - 0x558]
push eax
call fcn.004e2d98
jmp 0x61a770
lea ecx, [ebp - 0x128]
lea eax, [ebp - 0x638]
push eax
call fcn.004e2d98
lea ecx, [ebp - 0x118]
lea eax, [ebp - 0x794]
push 0
push eax
call fcn.004e2e90
mov dword [ebp - 4], 0x56
lea ecx, [ebp - 0x128]
lea eax, [ebp - 0x118]
push eax
call fcn.004e3380
mov dword [ebp - 4], 0x55
lea eax, [ebp - 0x118]
mov dword [ebp - 0x8a0], eax
mov dword [ebp - 4], 0x57
mov dword [ebp - 4], 0x55
mov eax, dword [ebp - 0x114]
mov edx, dword [ebp - 0x110]
cmp eax, edx
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x2c], edx
je 0x61a81e
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x898], eax
mov dword [ebp - 4], 0x58
mov dword [ebp - 4], 0x59
mov dword [ebp - 4], 0x58
lea ecx, [eax + 0xc]
call fcn.00406220
mov eax, dword [ebp - 0x18]
lea ecx, [eax + 8]
call fcn.00406220
mov eax, dword [ebp - 0x18]
add eax, 0x10
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x18], eax
cmp eax, edx
jne 0x61a7d4
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0x18], eax
push eax
call fcn.00888fb0
pop ecx
xor eax, eax
add esp, 0xfffffff8
mov ecx, esp
mov dword [ebp - 0x114], eax
mov dword [ebp - 0x110], eax
mov dword [ebp - 0x10c], eax
push 0x9f3274
call fcn.004061ac
lea ecx, [ebp - 0x128]
mov dword [esp + 4], 0xffffffff
call fcn.004e5ef4
mov eax, dword [ebp - 0x4c]
mov ebx, dword [eax]
call fcn.00410b5c
mov edx, dword [ebx + 0x4c]
mov esi, dword [ebp - 0x94]
mov dword [edx + 0x14], eax
mov eax, dword [ebp - 0x4c]
mov ebx, dword [eax]
mov edi, dword [ebx + 0x4c]
mov edx, dword [ebp - 0x90]
mov dword [edi + 0x10], esi
mov ecx, dword [eax]
mov ecx, dword [ecx + 0x4c]
mov dword [ecx + 0xc], edx
mov edx, dword [eax]
lea eax, [ebp - 0x128]
push 0
mov ecx, dword [edx + 0x4c]
push 1
push eax
call fcn.004ccb10
mov dword [ebp - 4], 0x4f
lea eax, [ebp - 0x128]
mov dword [ebp - 0x890], eax
mov dword [ebp - 4], 0x5a
mov dword [ebp - 4], 0x4f
mov eax, dword [ebp - 0x124]
mov edx, dword [ebp - 0x120]
cmp eax, edx
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x2c], edx
je 0x61a920
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x888], eax
mov dword [ebp - 4], 0x5b
mov dword [ebp - 4], 0x5c
mov dword [ebp - 4], 0x5b
lea ecx, [eax + 0xc]
call fcn.00406220
mov eax, dword [ebp - 0x18]
lea ecx, [eax + 8]
call fcn.00406220
mov eax, dword [ebp - 0x18]
add eax, 0x10
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x18], eax
cmp eax, edx
jne 0x61a8d6
mov eax, dword [ebp - 0x124]
mov dword [ebp - 0x18], eax
push eax
call fcn.00888fb0
pop ecx
xor eax, eax
mov dword [ebp - 0x124], eax
mov dword [ebp - 0x120], eax
mov dword [ebp - 0x11c], eax
mov dword [ebp - 4], 0x1a
lea eax, [ebp - 0x14c]
mov dword [ebp - 0x880], eax
mov dword [ebp - 4], 0x5d
mov dword [ebp - 4], 0x1a
mov eax, dword [ebp - 0x148]
mov edx, dword [ebp - 0x144]
cmp eax, edx
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x2c], edx
je 0x61a9bc
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x878], eax
mov dword [ebp - 4], 0x5e
mov dword [ebp - 4], 0x5f
mov dword [ebp - 4], 0x5e
lea ecx, [eax + 0xc]
call fcn.00406220
mov eax, dword [ebp - 0x18]
lea ecx, [eax + 8]
call fcn.00406220
mov eax, dword [ebp - 0x18]
add eax, 0x10
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x18], eax
cmp eax, edx
jne 0x61a972
mov eax, dword [ebp - 0x148]
mov dword [ebp - 0x18], eax
push eax
call fcn.00888fb0
pop ecx
xor eax, eax
mov edx, dword [ebp - 0x48]
mov dword [ebp - 0x148], eax
mov dword [ebp - 0x144], eax
mov dword [ebp - 0x140], eax
mov eax, dword [edx + 0x8004]
jmp 0x61a5f7
mov dl, byte [ecx + edx - 1]
cmp dl, 0x52
je 0x61a9f7
cmp dl, 0x4c
jne 0x6191a3
lea esi, [ebp - 0x21c]
mov edi, dword [ebp - 0x54]
mov dl, byte [edi]
inc edi
mov byte [esi], dl
inc esi
test dl, dl
jne 0x61aa00
cmp byte [ebp + ecx - 0x21d], 0x4c
je 0x61aad8
mov byte [ebp + ecx - 0x21d], 0x4c
xor eax, eax
mov dword [ebp - 0x50], eax
mov ebx, dword [ebp - 0x50]
lea eax, [ebx + ebx]
add eax, eax
lea ecx, [eax + eax]
add ecx, ecx
add ecx, ecx
sub ecx, eax
lea edx, [ebp - 0x2a8]
add ecx, edx
mov esi, dword [ebp - 0x14]
cmp ebx, esi
je 0x61aa76
lea esi, [ebp - 0x21c]
mov edi, ecx
mov dl, byte [edi]
cmp dl, byte [esi]
jne 0x61aa6d
or dl, dl
je 0x61aa69
mov dl, byte [edi + 1]
cmp dl, byte [esi + 1]
jne 0x61aa6d
add edi, 2
add esi, 2
or dl, dl
jne 0x61aa4d
xor eax, eax
jmp 0x61aa72
sbb eax, eax
or eax, 1
test eax, eax
je 0x61aa93
mov eax, dword [ebp - 0x50]
inc eax
cmp eax, 4
mov dword [ebp - 0x50], eax
jl 0x61aa25
xor al, al
mov byte [ebp - 0x4c], al
mov byte [ebp - 0x21c], 0
jmp 0x6191a3
add esp, 0xfffffff4
lea eax, [ebp - 0x71c]
mov edx, dword [ebp - 0x54]
call fcn.0061b73c
add esp, 0xc
movzx eax, al
test eax, eax
je 0x61aac7
mov esi, dword [ebp - 0x50]
mov al, byte [ebp - 0x21c]
mov byte [ebp + esi - 0x220], 1
mov byte [ebp - 0x4c], al
jmp 0x6191a3
xor al, al
mov byte [ebp - 0x4c], al
mov byte [ebp - 0x21c], 0
jmp 0x6191a3
mov byte [ebp + ecx - 0x21d], 0x52
jmp 0x61aa20
mov eax, dword [ebp - 0x22c]
mov dword [ebp - 0x14], eax
push eax
call fcn.00888fb0
pop ecx
xor eax, eax
mov dword [ebp - 0x22c], eax
mov dword [ebp - 0x228], eax
mov dword [ebp - 0x224], eax
jmp 0x619097
mov dword [ebp - 4], 0x1a
lea eax, [ebp - 0x230]
mov dword [ebp - 0x8d0], eax
mov dword [ebp - 4], 0x49
mov dword [ebp - 4], 0x1a
mov eax, dword [ebp - 0x22c]
mov edx, dword [ebp - 0x228]
cmp eax, edx
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x2c], edx
je 0x61ab8f
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x8c8], eax
mov dword [ebp - 4], 0x4a
mov dword [ebp - 4], 0x4b
mov dword [ebp - 4], 0x4a
lea ecx, [eax + 0xc]
call fcn.00406220
mov eax, dword [ebp - 0x18]
lea ecx, [eax + 8]
call fcn.00406220
mov eax, dword [ebp - 0x18]
add eax, 0x10
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x18], eax
cmp eax, edx
jne 0x61ab45
mov eax, dword [ebp - 0x22c]
mov dword [ebp - 0x18], eax
push eax
call fcn.00888fb0
pop ecx
xor eax, eax
mov dword [ebp - 0x22c], eax
mov dword [ebp - 0x228], eax
mov dword [ebp - 0x224], eax
jmp 0x619ed7
mov eax, dword [ebp - 0x180]
mov dword [ebp - 0x4c], eax
push eax
call fcn.00888fb0
pop ecx
xor eax, eax
lea ecx, [ebp - 0x794]
mov dword [ebp - 0x180], eax
mov dword [ebp - 0x17c], eax
mov dword [ebp - 0x178], eax
push 1
call fcn.004062e8
lea ecx, [ebp - 0x170]
call fcn.004e4b6c
mov dword [ebp - 4], 0x3b
movzx eax, byte [ebp + 0x14]
test eax, eax
je 0x61ac0e
lea ecx, [ebp - 0x170]
lea eax, [ebp - 0x558]
push eax
call fcn.004e2d98
jmp 0x61ac20
lea ecx, [ebp - 0x170]
lea eax, [ebp - 0x638]
push eax
call fcn.004e2d98
lea ecx, [ebp - 0x160]
lea eax, [ebp - 0x794]
push 0
push eax
call fcn.004e2e90
mov dword [ebp - 4], 0x3c
lea ecx, [ebp - 0x170]
lea eax, [ebp - 0x160]
push eax
call fcn.004e3380
mov dword [ebp - 4], 0x3b
lea eax, [ebp - 0x160]
mov dword [ebp - 0x910], eax
mov dword [ebp - 4], 0x3d
mov dword [ebp - 4], 0x3b
mov eax, dword [ebp - 0x15c]
mov edx, dword [ebp - 0x158]
cmp eax, edx
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x54], edx
je 0x61acce
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x908], eax
mov dword [ebp - 4], 0x3e
mov dword [ebp - 4], 0x3f
mov dword [ebp - 4], 0x3e
lea ecx, [eax + 0xc]
call fcn.00406220
mov eax, dword [ebp - 0x4c]
lea ecx, [eax + 8]
call fcn.00406220
mov eax, dword [ebp - 0x4c]
add eax, 0x10
mov edx, dword [ebp - 0x54]
mov dword [ebp - 0x4c], eax
cmp eax, edx
jne 0x61ac84
mov eax, dword [ebp - 0x15c]
mov dword [ebp - 0x4c], eax
push eax
call fcn.00888fb0
pop ecx
xor eax, eax
add esp, 0xfffffff8
mov ecx, esp
mov dword [ebp - 0x15c], eax
mov dword [ebp - 0x158], eax
mov dword [ebp - 0x154], eax
push 0x9f3274
call fcn.004061ac
lea ecx, [ebp - 0x170]
mov dword [esp + 4], 0xffffffff
call fcn.004e5ef4
lea ebx, [ebp - 0x170]
xor edx, edx
movzx eax, byte [ebp + 0x14]
push eax
mov esi, dword [ebp - 0x58]
mov ecx, dword [esi + 0x4c]
push edx
push edx
push ebx
call fcn.004cbab8
movzx eax, byte [ebp + 0x14]
test eax, eax
je 0x61ad4d
mov eax, esi
mov edx, dword [eax + 0x4c]
add edx, 0x748
lea ecx, [ebp - 0x58c]
push edx
push 1
push dword [ebp - 0x584]
call fcn.0061dd18
mov ebx, esi
mov ebx, dword [ebx + 0x4c]
lea ecx, [ebx + 0x6c]
mov eax, dword [ebx + 0x6c]
call dword [eax + 0x24]
xor eax, eax
lea ecx, [ebx + 0xac]
mov edx, dword [ebx + 0xac]
mov dword [ebx + 0x68], eax
mov dword [ebx + 0x80], eax
mov dword [ebx + 0x84], eax
call dword [edx + 0x24]
xor eax, eax
lea ecx, [ebx + 0xec]
mov edx, dword [ebx + 0xec]
mov dword [ebx + 0xa8], eax
mov dword [ebx + 0xc0], eax
mov dword [ebx + 0xc4], eax
call dword [edx + 0x24]
xor eax, eax
lea ecx, [ebx + 0x12c]
mov edx, dword [ebx + 0x12c]
mov dword [ebx + 0xe8], eax
mov dword [ebx + 0x100], eax
mov dword [ebx + 0x104], eax
call dword [edx + 0x24]
xor eax, eax
lea ecx, [ebx + 0x16c]
mov edx, dword [ebx + 0x16c]
mov dword [ebx + 0x128], eax
mov dword [ebx + 0x140], eax
mov dword [ebx + 0x144], eax
call dword [edx + 0x24]
xor eax, eax
lea ecx, [ebx + 0x1ac]
mov edx, dword [ebx + 0x1ac]
mov dword [ebx + 0x168], eax
mov dword [ebx + 0x180], eax
mov dword [ebx + 0x184], eax
call dword [edx + 0x24]
xor eax, eax
movzx edx, byte [ebp + 0x14]
test edx, edx
mov dword [ebx + 0x1a8], eax
mov dword [ebx + 0x1c0], eax
mov dword [ebx + 0x1c4], eax
mov dword [ebx + 0x550], eax
mov dword [ebx + 0x76c], eax
mov dword [ebx + 0x770], eax
fld qword [0xa34880]
fstp qword [ebx + 0x760]
jne 0x61ae4e
mov eax, dword [ebp - 0x5c]
mov dword [eax + 0xa624], 3
mov dword [ebp - 4], 0x35
lea eax, [ebp - 0x170]
mov dword [ebp - 0x900], eax
mov dword [ebp - 4], 0x40
mov dword [ebp - 4], 0x35
mov eax, dword [ebp - 0x16c]
mov edx, dword [ebp - 0x168]
cmp eax, edx
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x54], edx
je 0x61aecf
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x8f8], eax
mov dword [ebp - 4], 0x41
mov dword [ebp - 4], 0x42
mov dword [ebp - 4], 0x41
lea ecx, [eax + 0xc]
call fcn.00406220
mov eax, dword [ebp - 0x4c]
lea ecx, [eax + 8]
call fcn.00406220
mov eax, dword [ebp - 0x4c]
add eax, 0x10
mov edx, dword [ebp - 0x54]
mov dword [ebp - 0x4c], eax
cmp eax, edx
jne 0x61ae85
mov eax, dword [ebp - 0x16c]
mov dword [ebp - 0x4c], eax
push eax
call fcn.00888fb0
pop ecx
xor eax, eax
mov dword [ebp - 0x16c], eax
mov dword [ebp - 0x168], eax
mov dword [ebp - 0x164], eax
mov dword [ebp - 4], 0x27
lea eax, [ebp - 0x194]
mov dword [ebp - 0x8f0], eax
mov dword [ebp - 4], 0x43
mov dword [ebp - 4], 0x27
mov eax, dword [ebp - 0x190]
mov edx, dword [ebp - 0x18c]
cmp eax, edx
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x54], edx
je 0x61af6b
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x8e8], eax
mov dword [ebp - 4], 0x44
mov dword [ebp - 4], 0x45
mov dword [ebp - 4], 0x44
lea ecx, [eax + 0xc]
call fcn.00406220
mov eax, dword [ebp - 0x4c]
lea ecx, [eax + 8]
call fcn.00406220
mov eax, dword [ebp - 0x4c]
add eax, 0x10
mov edx, dword [ebp - 0x54]
mov dword [ebp - 0x4c], eax
cmp eax, edx
jne 0x61af21
mov eax, dword [ebp - 0x190]
mov dword [ebp - 0x4c], eax
push eax
call fcn.00888fb0
pop ecx
xor eax, eax
mov dword [ebp - 0x190], eax
mov dword [ebp - 0x18c], eax
mov dword [ebp - 0x188], eax
jmp 0x6195b2
mov eax, dword [ebp - 0x1bc]
mov dword [ebp - 0x4c], eax
push eax
call fcn.00888fb0
pop ecx
xor eax, eax
mov dword [ebp - 0x1bc], eax
mov dword [ebp - 0x1b8], eax
mov dword [ebp - 0x1b4], eax
jmp 0x6191fe
mov eax, dword [ebp - 0x48]
mov edx, dword [eax + 0x8000]
test edx, edx
jg 0x61b018
mov eax, dword [ebp - 0x6c]
mov ecx, dword [ebp - 0x48]
push dword [eax + 0x16cf8]
push dword [eax + 0x16974]
push 0xffffffffffffffff
call fcn.0056f2e0
mov dword [ebp - 0x54], eax
lea ecx, [ebp - 0x198]
push 0xa35204
call fcn.004061ac
mov dword [ebp - 4], 0x31
mov ecx, dword [ebp - 0x54]
add ecx, 8
lea eax, [ebp - 0x198]
push eax
call fcn.004061ec
mov dword [ebp - 4], 0x27
lea ecx, [ebp - 0x198]
call fcn.00406220
mov al, 1
mov byte [ebp - 0x78], al
mov dword [ebp - 4], 0x26
lea eax, [ebp - 0x1c0]
mov dword [ebp - 0x930], eax
mov dword [ebp - 4], 0x32
mov dword [ebp - 4], 0x26
mov eax, dword [ebp - 0x1bc]
mov edx, dword [ebp - 0x1b8]
cmp eax, edx
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x28], edx
je 0x61b09e
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x928], eax
mov dword [ebp - 4], 0x33
mov dword [ebp - 4], 0x34
mov dword [ebp - 4], 0x33
lea ecx, [eax + 0xc]
call fcn.00406220
mov eax, dword [ebp - 0x14]
lea ecx, [eax + 8]
call fcn.00406220
mov eax, dword [ebp - 0x14]
add eax, 0x10
mov edx, dword [ebp - 0x28]
mov dword [ebp - 0x14], eax
cmp eax, edx
jne 0x61b054
mov eax, dword [ebp - 0x1bc]
mov dword [ebp - 0x14], eax
push eax
call fcn.00888fb0
pop ecx
xor esi, esi
mov al, 1
mov dword [ebp - 0x1bc], esi
mov dword [ebp - 0x1b8], esi
mov dword [ebp - 0x1b4], esi
mov byte [ebp - 0x60], al
jmp 0x619210
mov eax, dword [ebp - 0x1a8]
mov dword [ebp - 0x50], eax
push eax
call fcn.00888fb0
pop ecx
xor eax, eax
mov edx, dword [ebp - 0x1b0]
add esp, 0xffffffec
mov dword [ebp - 0x1a8], eax
lea ecx, [ebp - 0x5c0]
mov dword [ebp - 0x1a4], eax
mov dword [ebp - 0x1a0], eax
mov dword [esp], edx
fld qword [ebp - 0x20]
fstp dword [esp + 4]
mov dword [esp + 8], 0
mov byte [esp + 0xc], 1
mov dword [esp + 0x10], 0xa31c50
call fcn.00565d60
movzx eax, al
test eax, eax
je 0x61b12b
mov al, 1
mov dl, 1
mov byte [ebp - 0x78], al
mov byte [ebp - 0x60], dl
mov al, byte [ebp - 0x60]
test al, al
jne 0x61b2c3
mov al, byte [ebp - 0x2c7]
mov ecx, dword [ebp - 0x58]
mov dl, byte [ebp - 0x2c8]
mov byte [ecx + 0x29b], al
mov esi, dword [ebp - 0x2c]
mov byte [ecx + 0x29a], dl
mov bl, byte [ebp + esi - 0x29a]
mov byte [ecx + 0x299], bl
mov al, byte [ebp + esi - 0x29b]
mov byte [ecx + 0x298], al
mov al, byte [ebp - 0x1f4]
mov byte [ecx + 0x2a0], al
call fcn.00524364
mov eax, dword [ebp - 0x58]
mov ecx, dword [ebp - 0x48]
push eax
call fcn.0057b124
mov esi, dword [ebp - 0x58]
mov byte [esi + 0x2a1], al
mov esi, dword [esi + 0x4c]
mov eax, dword [ebp - 0x1e0]
shr eax, 0x1f
fild dword [ebp - 0x1e0]
fadd dword [eax*4 + 0xa34898]
fdiv qword [esi + 0x760]
fstp qword [ebp - 0xc0]
mov eax, dword [ebp - 0xc0]
mov edx, dword [ebp - 0xbc]
mov ecx, edx
shr ecx, 0x14
and ecx, 0x7ff
cmp ecx, 0x3fe
jle 0x61b1f6
mov ebx, edx
neg ecx
add ecx, 0x41e
shld ebx, eax, 0xb
or ebx, 0x80000000
shr ebx, cl
test edx, edx
jge 0x61b1f8
neg ebx
jmp 0x61b1f8
xor ebx, ebx
mov eax, dword [ebp - 0x58]
mov edx, dword [ebp - 0x1dc]
shr edx, 0x1f
mov dword [eax + 0x290], ebx
fild dword [ebp - 0x1dc]
fadd dword [edx*4 + 0xa34898]
fdiv qword [esi + 0x760]
fild dword [esi + 0x76c]
fsubp st(1)
fstp qword [ebp - 0xc0]
mov edi, dword [ebp - 0xc0]
mov edx, dword [ebp - 0xbc]
mov ecx, edx
shr ecx, 0x14
and ecx, 0x7ff
cmp ecx, 0x3fe
jle 0x61b267
mov eax, edx
neg ecx
add ecx, 0x41e
shld eax, edi, 0xb
or eax, 0x80000000
shr eax, cl
test edx, edx
jge 0x61b269
neg eax
jmp 0x61b269
xor eax, eax
xor edx, edx
test eax, eax
mov edi, dword [ebp - 0x58]
jl 0x61b274
mov eax, edx
xor ecx, ecx
test ebx, ebx
mov dword [edi + 0x294], eax
jle 0x61b282
mov ecx, ebx
mov dword [edi + 0x290], ecx
mov edx, dword [esi + 0x76c]
add eax, edx
cmp eax, ecx
jge 0x61b29f
sub ecx, edx
inc ecx
mov eax, edi
mov dword [eax + 0x294], ecx
xor eax, eax
mov ecx, edi
push eax
push eax
push 1
call fcn.0052da98
mov dword [ebp - 4], 0x27
lea ecx, [ebp - 0x1b0]
call fcn.00406220
jmp 0x619453
mov dword [ebp - 4], 0x27
lea ecx, [ebp - 0x1b0]
call fcn.00406220
mov dword [ebp - 4], 0x26
lea eax, [ebp - 0x1c0]
mov dword [ebp - 0x940], eax
mov dword [ebp - 4], 0x2e
mov dword [ebp - 4], 0x26
mov eax, dword [ebp - 0x1bc]
mov edx, dword [ebp - 0x1b8]
cmp eax, edx
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x28], edx
je 0x61b356
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x938], eax
mov dword [ebp - 4], 0x2f
mov dword [ebp - 4], 0x30
mov dword [ebp - 4], 0x2f
lea ecx, [eax + 0xc]
call fcn.00406220
mov eax, dword [ebp - 0x14]
lea ecx, [eax + 8]
call fcn.00406220
mov eax, dword [ebp - 0x14]
add eax, 0x10
mov edx, dword [ebp - 0x28]
mov dword [ebp - 0x14], eax
cmp eax, edx
jne 0x61b30c
mov eax, dword [ebp - 0x1bc]
mov dword [ebp - 0x14], eax
push eax
call fcn.00888fb0
pop ecx
xor eax, eax
mov dword [ebp - 0x1bc], eax
mov dword [ebp - 0x1b8], eax
mov dword [ebp - 0x1b4], eax
jmp 0x619210
add esp, 0xfffffff8
lea eax, [ebp - 0x58c]
lea edx, [ebp - 0x230]
call fcn.0061dcdc
add esp, 8
movzx esi, al
xor eax, eax
test esi, esi
sete al
mov dword [ebp - 0x4c], eax
jmp 0x6193df
xor eax, eax
mov dword [ebp - 0x54], eax
call fcn.00410b5c
mov dword [ebp - 0x50], eax
jmp 0x6193cb
mov eax, dword [ebp - 0x2c]
movsx edx, byte [ebp + eax - 0x295]
mov ecx, dword [ebp - 0x58]
mov dword [ebp - 0xb8], edx
fild dword [ebp - 0xb8]
fmul dword [0xa34888]
faddp st(1)
fstp dword [ecx + 0x2a8]
jmp 0x619380
mov ecx, dword [ebp - 0x5c]
call fcn.005f8d84
mov ecx, dword [ebp - 0x5c]
call fcn.00595df4
jmp 0x61934a
mov dword [ebp - 4], 0x17
lea ecx, [ebp - 0x558]
call fcn.0040b540
mov dword [ebp - 4], 0x16
lea ecx, [ebp - 0x58c]
call fcn.0061e06c
mov dword [ebp - 4], 0xe
lea ecx, [ebp - 0x5c0]
call fcn.00565c00
mov dword [ebp - 4], 0xd
lea ecx, [ebp - 0x628]
call fcn.00406220
mov dword [ebp - 4], 0xc
lea ecx, [ebp - 0x638]
call fcn.0040b540
mov dword [ebp - 4], 0xb
lea ecx, [ebp - 0x648]
call fcn.0040b540
mov dword [ebp - 4], 2
lea ecx, [ebp - 0x690]
call fcn.0046bef8
mov dword [ebp - 4], 1
lea eax, [ebp - 0x730]
mov dword [ebp - 0x960], eax
mov dword [ebp - 4], 0x24
mov dword [ebp - 4], 1
lea ecx, [ebp - 0x730]
call fcn.00411738
mov dword [ebp - 4], 0
lea eax, [ebp - 0x790]
mov dword [ebp - 0x958], eax
mov dword [ebp - 4], 0x25
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x790]
call fcn.00411738
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x794]
call fcn.00406220
mov eax, 0xa
mov edi, dword [ebp - 0xb0]
mov esi, dword [ebp - 0xac]
mov ebx, dword [ebp - 0xa8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 0x10
xor eax, eax
mov dword [ebp - 0x48], eax
jmp 0x618fc3
lea ecx, [ebp - 0x58c]
call fcn.0061b6c8
lea eax, [ebp - 0x71c]
mov edx, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x88]
push eax
push edx
push ecx
call fcn.0041fde8
mov eax, dword [ebp - 0x700]
dec eax
lea ecx, [ebp - 0x548]
mov dword [ebp - 0x80], eax
call fcn.004e4b6c
mov dword [ebp - 4], 0x1b
lea edx, [ebp - 0x794]
mov eax, dword [ebp - 0x7c]
push eax
push 0xa351d4
push edx
call fcn.00406768
add esp, 0xc
lea ecx, [ebp - 0x548]
lea eax, [ebp - 0x730]
push eax
call fcn.004e2d98
lea ecx, [ebp - 0x538]
lea eax, [ebp - 0x794]
push 1
push eax
call fcn.004e2e90
mov dword [ebp - 4], 0x1c
lea ecx, [ebp - 0x548]
lea eax, [ebp - 0x538]
push eax
call fcn.004e3380
mov dword [ebp - 4], 0x1b
lea ecx, [ebp - 0x538]
call fcn.0040b540
lea edx, [ebp - 0x794]
lea eax, [ebp - 0x714]
push eax
push 0x9f5b18
push edx
call fcn.00406768
add esp, 0xc
lea ecx, [ebp - 0x794]
push 1
call fcn.004062e8
lea ecx, [ebp - 0x528]
lea eax, [ebp - 0x794]
push 1
push eax
call fcn.004e2e90
mov dword [ebp - 4], 0x1d
lea ecx, [ebp - 0x548]
lea eax, [ebp - 0x528]
push eax
call fcn.004e3380
mov dword [ebp - 4], 0x1b
lea ecx, [ebp - 0x528]
call fcn.0040b540
lea eax, [ebp - 0x548]
push eax
call fcn.0043c6a0
pop ecx
lea ecx, [ebp - 0x558]
lea eax, [ebp - 0x548]
push eax
call fcn.004e2d98
lea edx, [ebp - 0x794]
lea eax, [ebp - 0x714]
push eax
push 0xa351e4
push edx
call fcn.00406768
add esp, 0xc
lea ecx, [ebp - 0x794]
push 1
call fcn.004062e8
lea ecx, [ebp - 0x518]
lea eax, [ebp - 0x794]
push 1
push eax
call fcn.004e2e90
mov dword [ebp - 4], 0x1e
lea ecx, [ebp - 0x558]
lea eax, [ebp - 0x518]
push eax
call fcn.004e3380
mov dword [ebp - 4], 0x1b
lea ecx, [ebp - 0x518]
call fcn.0040b540
lea eax, [ebp - 0x558]
push eax
call fcn.0043c6a0
pop ecx
mov dword [ebp - 4], 0x1a
lea ecx, [ebp - 0x548]
call fcn.0040b540
jmp 0x618d20