Function at 0x6618a8
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ecx
mov ecx, 0xdf
push 0
push 0
dec ecx
jne 0x6618b1
xchg dword [ebp - 4], ecx
push ebx
push esi
push edi
mov dword [ebp - 0x38], ecx
mov dword [ebp - 0x34], edx
mov ebx, eax
mov eax, dword [ebp + 8]
call fcn.00405960
xor eax, eax
push ebp
push 0x666727
push dword fs:[eax]
mov dword fs:[eax], esp
cmp dword [ebp + 8], 0
je 0x66668e
mov eax, dword [ebp + 8]
cmp byte [eax], 0x24
jne 0x66668e
mov esi, dword [ebp + 8]
test esi, esi
je 0x6618fe
sub esi, 4
mov esi, dword [esi]
lea eax, [ebp - 0xc]
push eax
mov ecx, esi
dec ecx
mov edx, 2
mov eax, dword [ebp + 8]
call fcn.004059d8
push 0
lea eax, [ebp - 0x10]
push eax
mov byte [ebp - 0x64], 0x2f
lea ecx, [ebp - 0x64]
lea edx, [ebp - 0xc]
mov eax, dword [ebp - 0xc]
call fcn.0048d30c
or edx, 0xffffffff
mov eax, dword [ebp - 0xc]
call fcn.0040adf8
mov edi, eax
or edx, 0xffffffff
mov eax, dword [ebp - 0x10]
call fcn.0040adf8
mov dword [ebp - 0x44], eax
test edi, edi
jge 0x66198b
push 0x666744
lea eax, [ebp - 0x68]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x6c]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x6c]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x68]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
mov eax, dword [ebx + 0x320]
test eax, eax
jne 0x6619a7
mov eax, dword [0x707de8]
mov eax, dword [eax]
xor edx, edx
call fcn.00512514
mov esi, eax
jmp 0x6619a9
mov esi, eax
cmp edi, 0x9f
ja case.0x6619b5.0
jmp dword [edi*4 + 0x6619bc]
mov eax, dword [0x7070f8]
mov eax, dword [eax + 0xac]
push eax
lea eax, [ebp - 0x70]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x74]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x74]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x70]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
mov eax, dword [0x7070f8]
mov eax, dword [eax + 0xb0]
push eax
lea eax, [ebp - 0x78]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x7c]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x7c]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x78]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
mov eax, dword [0x7070f8]
mov eax, dword [eax + 0xb4]
push eax
lea eax, [ebp - 0x80]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x84]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x84]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x80]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
mov eax, dword [0x7070f8]
mov eax, dword [eax + 0xb8]
push eax
lea eax, [ebp - 0x88]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x8c]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x8c]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x88]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
mov eax, dword [0x7070f8]
mov eax, dword [eax + 0xbc]
push eax
lea eax, [ebp - 0x90]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x94]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x94]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x90]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
mov eax, dword [0x7070f8]
mov eax, dword [eax + 0xc0]
push eax
lea eax, [ebp - 0x98]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x9c]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x9c]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x98]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
mov eax, dword [0x7070f8]
mov eax, dword [eax + 0xc4]
push eax
lea eax, [ebp - 0xa0]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0xa4]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0xa4]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0xa0]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
mov eax, dword [0x7070f8]
mov eax, dword [eax + 0xc8]
push eax
lea eax, [ebp - 0xa8]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0xac]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0xac]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0xa8]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
mov eax, dword [0x7070f8]
mov eax, dword [eax + 0xcc]
push eax
lea eax, [ebp - 0xb0]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0xb4]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0xb4]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0xb0]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
mov eax, dword [0x7070f8]
mov eax, dword [eax + 0xd0]
push eax
lea eax, [ebp - 0xb8]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0xbc]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0xbc]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0xb8]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
mov eax, dword [0x7070f8]
mov eax, dword [eax + 0xd4]
push eax
lea eax, [ebp - 0xc0]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0xc4]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0xc4]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0xc0]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
mov eax, dword [0x7070f8]
mov eax, dword [eax + 0xd8]
push eax
lea eax, [ebp - 0xc8]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0xcc]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0xcc]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0xc8]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
mov eax, dword [0x7070f8]
mov eax, dword [eax + 0xdc]
push eax
lea eax, [ebp - 0xd0]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0xd4]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0xd4]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0xd0]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
mov eax, dword [0x7070f8]
mov eax, dword [eax + 0xe0]
push eax
lea eax, [ebp - 0xd8]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0xdc]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0xdc]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0xd8]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
mov eax, dword [0x7070f8]
mov eax, dword [eax + 0xe4]
push eax
lea eax, [ebp - 0xe0]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0xe4]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0xe4]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0xe0]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
mov eax, dword [0x7070f8]
mov eax, dword [eax + 0xe8]
push eax
lea eax, [ebp - 0xe8]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0xec]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0xec]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0xe8]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
mov eax, dword [0x7070f8]
mov eax, dword [eax + 0xec]
push eax
lea eax, [ebp - 0xf0]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0xf4]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0xf4]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0xf0]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
mov eax, dword [0x707bc4]
mov eax, dword [eax]
call fcn.0062b770
lea edx, [ebp - 4]
call fcn.0040ab6c
mov eax, dword [ebp - 4]
push eax
lea eax, [ebp - 0xf8]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0xfc]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0xfc]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0xf8]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
call fcn.0040dc20
fstp qword [ebp - 0x60]
wait
push dword [ebp - 0x5c]
push dword [ebp - 0x60]
lea eax, [ebp - 0x14]
mov edx, 0x66676c
call fcn.0040e970
lea eax, [ebp - 4]
mov edx, dword [ebp - 0x14]
call fcn.00405568
mov eax, dword [ebp - 4]
push eax
lea eax, [ebp - 0x100]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x104]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x104]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x100]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
lea eax, [ebp - 0x10c]
mov edx, dword [ebp - 0x34]
add edx, 0x15
call fcn.00405744
mov eax, dword [ebp - 0x10c]
push eax
lea eax, [ebp - 0x108]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x110]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x110]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x108]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
mov eax, dword [ebp - 0x34]
mov eax, dword [eax + 0x4390]
mov eax, dword [eax + 8]
push eax
lea eax, [ebp - 0x114]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x118]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x118]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x114]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
lea eax, [ebp - 0x120]
mov edx, dword [ebp - 0x34]
add edx, 0xda9
call fcn.00405744
mov eax, dword [ebp - 0x120]
push eax
lea eax, [ebp - 0x11c]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x124]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x124]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x11c]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
mov eax, dword [ebp - 0x34]
mov eax, dword [eax + 0x36e8]
push eax
lea eax, [ebp - 0x128]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x12c]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x12c]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x128]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
mov eax, dword [ebp - 0x34]
mov eax, dword [eax + 0x4390]
mov eax, dword [eax + 4]
push eax
lea eax, [ebp - 0x130]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x134]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x134]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x130]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
lea eax, [ebp - 0x13c]
lea edx, [ebx + 0x15]
call fcn.00405744
mov eax, dword [ebp - 0x13c]
push eax
lea eax, [ebp - 0x138]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x140]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x140]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x138]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
mov eax, dword [ebp - 0x34]
call fcn.006a1e68
mov esi, eax
test esi, esi
je 0x66252f
cmp byte [esi + 0x2b6], 0
jne 0x66252f
lea eax, [ebp - 0x148]
lea edx, [esi + 0x15]
call fcn.00405744
mov eax, dword [ebp - 0x148]
push eax
lea eax, [ebp - 0x144]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x14c]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x14c]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x144]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
push 0x666744
lea eax, [ebp - 0x150]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x154]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x154]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x150]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
mov eax, dword [ebp - 0x34]
mov eax, dword [eax + 0x36c]
mov eax, dword [eax + 8]
push eax
lea eax, [ebp - 0x158]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x15c]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x15c]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x158]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
mov eax, dword [ebp - 0x34]
mov eax, dword [eax + 0x36c]
mov eax, dword [eax + 4]
push eax
lea eax, [ebp - 0x160]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x164]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x164]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x160]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
lea edx, [ebp - 0x16c]
mov eax, dword [ebp - 0x34]
mov eax, dword [eax + 0x24]
call fcn.0040ab6c
mov eax, dword [ebp - 0x16c]
push eax
lea eax, [ebp - 0x168]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x170]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x170]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x168]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
lea edx, [ebp - 0x178]
mov eax, dword [ebp - 0x34]
mov eax, dword [eax + 0x28]
call fcn.0040ab6c
mov eax, dword [ebp - 0x178]
push eax
lea eax, [ebp - 0x174]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x17c]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x17c]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x174]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
lea eax, [ebp - 4]
mov edx, 0x666744
call fcn.00405568
mov eax, dword [ebp - 0x44]
sub eax, 8
jae 0x662737
mov eax, dword [ebp - 0x34]
mov esi, dword [eax + 0x2f4]
test esi, esi
je 0x662737
mov eax, dword [esi + 0x2f8]
mov edx, dword [eax]
call dword [edx + 0x14]
cmp eax, dword [ebp - 0x44]
jle 0x662737
lea ecx, [ebp - 4]
mov eax, dword [ebp - 0x34]
mov eax, dword [eax + 0x2f4]
mov eax, dword [eax + 0x2f8]
mov edx, dword [ebp - 0x44]
mov esi, dword [eax]
call dword [esi + 0xc]
mov eax, dword [ebp - 4]
push eax
lea eax, [ebp - 0x180]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x184]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x184]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x180]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
lea eax, [ebp - 4]
call fcn.004054d0
mov eax, dword [ebp - 0x34]
mov eax, dword [eax + 0x1258]
mov edx, dword [eax]
call dword [edx + 0x14]
mov esi, eax
dec esi
test esi, esi
jl 0x662813
inc esi
mov dword [ebp - 0x3c], 0
lea eax, [ebp - 0x188]
push eax
lea ecx, [ebp - 0x19c]
mov eax, dword [ebp - 0x34]
mov eax, dword [eax + 0x1258]
mov edx, dword [ebp - 0x3c]
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [ebp - 0x19c]
mov dword [ebp - 0x198], eax
mov byte [ebp - 0x194], 0xb
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x190], eax
mov byte [ebp - 0x18c], 0
lea edx, [ebp - 0x198]
mov ecx, 1
mov eax, 0x66678c
call fcn.0040bf74
mov edx, dword [ebp - 0x188]
lea eax, [ebp - 4]
call fcn.004057ac
inc dword [ebp - 0x3c]
dec esi
jne 0x6627a9
mov eax, dword [ebp - 4]
push eax
lea eax, [ebp - 0x1a0]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x1a4]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x1a4]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x1a0]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
mov eax, dword [ebp - 0x34]
mov esi, dword [eax + 0x388]
test esi, esi
je 0x6628ba
mov eax, dword [esi + 4]
push eax
lea eax, [ebp - 0x1a8]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x1ac]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x1ac]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x1a8]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
mov eax, dword [ebp - 0x38]
mov edx, 0x6667b0
call fcn.00405524
jmp 0x66668e
mov eax, dword [ebp - 0x34]
mov eax, dword [eax + 0x390]
push eax
lea eax, [ebp - 0x1b0]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x1b4]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x1b4]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x1b0]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
mov eax, dword [ebp - 0x34]
mov eax, dword [eax + 0x34]
xor edx, edx
push edx
push eax
lea eax, [ebp - 4]
call fcn.0040ad3c
mov eax, dword [ebp - 4]
push eax
lea eax, [ebp - 0x1b8]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x1bc]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x1bc]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x1b8]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
mov eax, dword [ebp - 0x34]
mov eax, dword [eax + 0x16c]
xor edx, edx
push edx
push eax
lea eax, [ebp - 4]
call fcn.0040ad3c
mov eax, dword [ebp - 4]
push eax
lea eax, [ebp - 0x1c0]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x1c4]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x1c4]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x1c0]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
mov eax, dword [ebp - 0x34]
mov eax, dword [eax + 0x174]
xor edx, edx
push edx
push eax
lea eax, [ebp - 4]
call fcn.0040ad3c
mov eax, dword [ebp - 4]
push eax
lea eax, [ebp - 0x1c8]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x1cc]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x1cc]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x1c8]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
mov eax, dword [ebp - 0x34]
mov eax, dword [eax + 0x170]
xor edx, edx
push edx
push eax
lea eax, [ebp - 4]
call fcn.0040ad3c
mov eax, dword [ebp - 4]
push eax
lea eax, [ebp - 0x1d0]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x1d4]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x1d4]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x1d0]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
mov eax, dword [ebp - 0x34]
mov eax, dword [eax + 0x178]
xor edx, edx
push edx
push eax
lea eax, [ebp - 4]
call fcn.0040ad3c
mov eax, dword [ebp - 4]
push eax
lea eax, [ebp - 0x1d8]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x1dc]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x1dc]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x1d8]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
mov eax, dword [ebp - 0x34]
mov eax, dword [eax + 0x144]
xor edx, edx
push edx
push eax
lea eax, [ebp - 4]
call fcn.0040ad3c
mov eax, dword [ebp - 4]
push eax
lea eax, [ebp - 0x1e0]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x1e4]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x1e4]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x1e0]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
mov eax, dword [ebp - 0x34]
mov eax, dword [eax + 0x148]
xor edx, edx
push edx
push eax
lea eax, [ebp - 4]
call fcn.0040ad3c
mov eax, dword [ebp - 4]
push eax
lea eax, [ebp - 0x1e8]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x1ec]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x1ec]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x1e8]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
mov eax, dword [ebp - 0x34]
mov eax, dword [eax + 0x14c]
xor edx, edx
push edx
push eax
lea eax, [ebp - 4]
call fcn.0040ad3c
mov eax, dword [ebp - 4]
push eax
lea eax, [ebp - 0x1f0]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x1f4]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x1f4]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x1f0]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
mov eax, dword [ebp - 0x34]
mov eax, dword [eax + 0x150]
xor edx, edx
push edx
push eax
lea eax, [ebp - 4]
call fcn.0040ad3c
mov eax, dword [ebp - 4]
push eax
lea eax, [ebp - 0x1f8]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x1fc]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x1fc]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x1f8]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
mov eax, dword [ebp - 0x34]
mov eax, dword [eax + 0x154]
xor edx, edx
push edx
push eax
lea eax, [ebp - 4]
call fcn.0040ad3c
mov eax, dword [ebp - 4]
push eax
lea eax, [ebp - 0x200]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x204]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x204]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x200]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
mov eax, dword [ebp - 0x34]
mov eax, dword [eax + 0x158]
xor edx, edx
push edx
push eax
lea eax, [ebp - 4]
call fcn.0040ad3c
mov eax, dword [ebp - 4]
push eax
lea eax, [ebp - 0x208]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x20c]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x20c]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x208]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
mov eax, dword [ebp - 0x34]
mov eax, dword [eax + 0x15c]
xor edx, edx
push edx
push eax
lea eax, [ebp - 4]
call fcn.0040ad3c
mov eax, dword [ebp - 4]
push eax
lea eax, [ebp - 0x210]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x214]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x214]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x210]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
mov eax, dword [ebp - 0x34]
mov eax, dword [eax + 0x160]
xor edx, edx
push edx
push eax
lea eax, [ebp - 4]
call fcn.0040ad3c
mov eax, dword [ebp - 4]
push eax
lea eax, [ebp - 0x218]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x21c]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x21c]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x218]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
mov eax, dword [ebp - 0x34]
mov eax, dword [eax + 0x164]
xor edx, edx
push edx
push eax
lea eax, [ebp - 4]
call fcn.0040ad3c
mov eax, dword [ebp - 4]
push eax
lea eax, [ebp - 0x220]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x224]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x224]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x220]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
mov eax, dword [ebp - 0x34]
mov eax, dword [eax + 0x168]
xor edx, edx
push edx
push eax
lea eax, [ebp - 4]
call fcn.0040ad3c
mov eax, dword [ebp - 4]
push eax
lea eax, [ebp - 0x228]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x22c]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x22c]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x228]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
mov eax, dword [ebp - 0x34]
mov eax, dword [eax + 0x70]
xor edx, edx
push edx
push eax
lea eax, [ebp - 4]
call fcn.0040ad3c
mov eax, dword [ebp - 4]
push eax
lea eax, [ebp - 0x230]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x234]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x234]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x230]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
mov eax, dword [ebp - 0x34]
mov eax, dword [eax + 0x74]
xor edx, edx
push edx
push eax
lea eax, [ebp - 4]
call fcn.0040ad3c
mov eax, dword [ebp - 4]
push eax
lea eax, [ebp - 0x238]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x23c]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x23c]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x238]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
lea edx, [ebp - 4]
mov eax, dword [ebp - 0x34]
movzx eax, word [eax + 0xf8]
call fcn.0040ab6c
mov eax, dword [ebp - 4]
push eax
lea eax, [ebp - 0x240]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x244]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x244]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x240]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
mov eax, dword [ebp - 0x34]
push dword [eax + 0x12b4]
push dword [eax + 0x12b0]
lea eax, [ebp - 4]
call fcn.0040ad3c
mov eax, dword [ebp - 4]
push eax
lea eax, [ebp - 0x248]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x24c]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x24c]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x248]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
lea edx, [ebp - 0x250]
mov eax, dword [ebp - 0x34]
mov eax, dword [eax + 0x30]
call fcn.0040ab6c
push dword [ebp - 0x250]
push 0x6667bc
lea edx, [ebp - 0x254]
mov eax, dword [ebp - 0x34]
mov eax, dword [eax + 0x2e8]
call fcn.0040ab6c
push dword [ebp - 0x254]
lea eax, [ebp - 4]
mov edx, 3
call fcn.00405874
mov eax, dword [ebp - 4]
push eax
lea eax, [ebp - 0x258]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x25c]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x25c]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x258]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
lea edx, [ebp - 4]
mov eax, dword [ebp - 0x34]
mov eax, dword [eax + 0x30]
call fcn.0040ab6c
mov eax, dword [ebp - 4]
push eax
lea eax, [ebp - 0x260]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x264]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x264]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x260]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
lea edx, [ebp - 4]
mov eax, dword [ebp - 0x34]
mov eax, dword [eax + 0x2e8]
call fcn.0040ab6c
mov eax, dword [ebp - 4]
push eax
lea eax, [ebp - 0x268]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x26c]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x26c]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x268]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
lea edx, [ebp - 4]
mov eax, dword [ebp - 0x34]
mov eax, dword [eax + 0x3ad0]
call fcn.0040ab6c
mov eax, dword [ebp - 4]
push eax
lea eax, [ebp - 0x270]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x274]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x274]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x270]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
lea edx, [ebp - 4]
mov eax, dword [ebp - 0x34]
mov eax, dword [eax + 0x1790]
call fcn.0040ab6c
mov eax, dword [ebp - 4]
push eax
lea eax, [ebp - 0x278]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x27c]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x27c]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x278]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
lea edx, [ebp - 4]
mov eax, dword [ebp - 0x34]
mov eax, dword [eax + 0x1724]
call fcn.0040ab6c
mov eax, dword [ebp - 4]
push eax
lea eax, [ebp - 0x280]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x284]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x284]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x280]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
lea edx, [ebp - 4]
mov eax, dword [ebp - 0x34]
mov eax, dword [eax + 0x1728]
call fcn.0040ab6c
mov eax, dword [ebp - 4]
push eax
lea eax, [ebp - 0x288]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x28c]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x28c]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x288]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
lea edx, [ebp - 4]
mov eax, dword [ebp - 0x34]
mov eax, dword [eax + 0x1710]
call fcn.0040ab6c
mov eax, dword [ebp - 4]
push eax
lea eax, [ebp - 0x290]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x294]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x294]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x290]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
lea edx, [ebp - 4]
mov eax, dword [0x7070f8]
mov eax, dword [eax + 0x19c0]
call fcn.0040ab6c
mov eax, dword [ebp - 4]
push eax
lea eax, [ebp - 0x298]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x29c]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x29c]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x298]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
lea eax, [ebp - 4]
mov edx, 0x6667c8
call fcn.00405568
mov eax, dword [ebp - 0x34]
movzx esi, word [eax + 0x548]
test si, si
je 0x663408
lea ecx, [ebp - 4]
movzx edx, si
mov eax, dword [0x707bc4]
mov eax, dword [eax]
call fcn.0062e5c8
mov eax, dword [ebp - 4]
push eax
lea eax, [ebp - 0x2a0]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x2a4]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x2a4]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x2a0]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
mov eax, dword [ebp - 0x34]
push dword [eax + 0xe1c]
push dword [eax + 0xe18]
lea eax, [ebp - 0x18]
xor edx, edx
call fcn.0040e970
lea eax, [ebp - 4]
mov edx, dword [ebp - 0x18]
call fcn.00405568
mov eax, dword [ebp - 4]
push eax
lea eax, [ebp - 0x2a8]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x2ac]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x2ac]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x2a8]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [ebp - 0x34]
sub eax, dword [edx + 0xe20]
mov ecx, 0xea60
xor edx, edx
div ecx
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x2b0]
call fcn.0040ad3c
mov edx, dword [ebp - 0x2b0]
lea eax, [ebp - 4]
mov ecx, 0x6667d8
call fcn.004057f8
mov eax, dword [ebp - 4]
push eax
lea eax, [ebp - 0x2b4]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x2b8]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x2b8]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x2b4]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
mov eax, dword [ebp - 0x34]
cmp dword [eax + 0x4c3], 0
jle 0x663573
lea ecx, [ebp - 4]
mov eax, dword [ebp - 0x34]
movzx edx, word [eax + 0x4c7]
mov eax, dword [0x707bc4]
mov eax, dword [eax]
call fcn.0062e5c8
jmp 0x663580
lea eax, [ebp - 4]
mov edx, 0x6667b0
call fcn.00405568
mov eax, dword [ebp - 4]
push eax
lea eax, [ebp - 0x2bc]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x2c0]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x2c0]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x2bc]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
mov eax, dword [ebp - 0x34]
cmp dword [eax + 0x544], 0
jle 0x6635f4
lea ecx, [ebp - 4]
mov eax, dword [ebp - 0x34]
movzx edx, word [eax + 0x548]
mov eax, dword [0x707bc4]
mov eax, dword [eax]
call fcn.0062e5c8
jmp 0x663601
lea eax, [ebp - 4]
mov edx, 0x6667b0
call fcn.00405568
mov eax, dword [ebp - 4]
push eax
lea eax, [ebp - 0x2c4]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x2c8]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x2c8]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x2c4]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
mov eax, dword [ebp - 0x34]
cmp dword [eax + 0x6c7], 0
jle 0x663675
lea ecx, [ebp - 4]
mov eax, dword [ebp - 0x34]
movzx edx, word [eax + 0x6cb]
mov eax, dword [0x707bc4]
mov eax, dword [eax]
call fcn.0062e5c8
jmp 0x663682
lea eax, [ebp - 4]
mov edx, 0x6667b0
call fcn.00405568
mov eax, dword [ebp - 4]
push eax
lea eax, [ebp - 0x2cc]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x2d0]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x2d0]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x2cc]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
mov eax, dword [ebp - 0x34]
cmp dword [eax + 0x5c5], 0
jle 0x6636f6
lea ecx, [ebp - 4]
mov eax, dword [ebp - 0x34]
movzx edx, word [eax + 0x5c9]
mov eax, dword [0x707bc4]
mov eax, dword [eax]
call fcn.0062e5c8
jmp 0x663703
lea eax, [ebp - 4]
mov edx, 0x6667b0
call fcn.00405568
mov eax, dword [ebp - 4]
push eax
lea eax, [ebp - 0x2d4]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x2d8]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x2d8]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x2d4]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
mov eax, dword [ebp - 0x34]
cmp dword [eax + 0x646], 0
jle 0x663777
lea ecx, [ebp - 4]
mov eax, dword [ebp - 0x34]
movzx edx, word [eax + 0x64a]
mov eax, dword [0x707bc4]
mov eax, dword [eax]
call fcn.0062e5c8
jmp 0x663784
lea eax, [ebp - 4]
mov edx, 0x6667b0
call fcn.00405568
mov eax, dword [ebp - 4]
push eax
lea eax, [ebp - 0x2dc]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x2e0]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x2e0]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x2dc]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
mov eax, dword [ebp - 0x34]
cmp dword [eax + 0x8cb], 0
jle 0x6637f8
lea ecx, [ebp - 4]
mov eax, dword [ebp - 0x34]
movzx edx, word [eax + 0x8cf]
mov eax, dword [0x707bc4]
mov eax, dword [eax]
call fcn.0062e5c8
jmp 0x663805
lea eax, [ebp - 4]
mov edx, 0x6667b0
call fcn.00405568
mov eax, dword [ebp - 4]
push eax
lea eax, [ebp - 0x2e4]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x2e8]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x2e8]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x2e4]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
mov eax, dword [ebp - 0x34]
cmp dword [eax + 0x84a], 0
jle 0x663879
lea ecx, [ebp - 4]
mov eax, dword [ebp - 0x34]
movzx edx, word [eax + 0x84e]
mov eax, dword [0x707bc4]
mov eax, dword [eax]
call fcn.0062e5c8
jmp 0x663886
lea eax, [ebp - 4]
mov edx, 0x6667b0
call fcn.00405568
mov eax, dword [ebp - 4]
push eax
lea eax, [ebp - 0x2ec]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x2f0]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x2f0]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x2ec]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
mov eax, dword [ebp - 0x34]
cmp dword [eax + 0x7c9], 0
jle 0x6638fa
lea ecx, [ebp - 4]
mov eax, dword [ebp - 0x34]
movzx edx, word [eax + 0x7cd]
mov eax, dword [0x707bc4]
mov eax, dword [eax]
call fcn.0062e5c8
jmp 0x663907
lea eax, [ebp - 4]
mov edx, 0x6667b0
call fcn.00405568
mov eax, dword [ebp - 4]
push eax
lea eax, [ebp - 0x2f4]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x2f8]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x2f8]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x2f4]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
mov eax, dword [ebp - 0x34]
cmp dword [eax + 0x748], 0
jle 0x66397b
lea ecx, [ebp - 4]
mov eax, dword [ebp - 0x34]
movzx edx, word [eax + 0x74c]
mov eax, dword [0x707bc4]
mov eax, dword [eax]
call fcn.0062e5c8
jmp 0x663988
lea eax, [ebp - 4]
mov edx, 0x6667b0
call fcn.00405568
mov eax, dword [ebp - 4]
push eax
lea eax, [ebp - 0x2fc]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x300]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x300]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x2fc]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
mov eax, dword [ebp - 0x34]
cmp dword [eax + 0x94c], 0
jle 0x6639fc
lea ecx, [ebp - 4]
mov eax, dword [ebp - 0x34]
movzx edx, word [eax + 0x950]
mov eax, dword [0x707bc4]
mov eax, dword [eax]
call fcn.0062e5c8
jmp 0x663a09
lea eax, [ebp - 4]
mov edx, 0x6667b0
call fcn.00405568
mov eax, dword [ebp - 4]
push eax
lea eax, [ebp - 0x304]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x308]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x308]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x304]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
mov eax, dword [ebp - 0x34]
cmp dword [eax + 0x9cd], 0
jle 0x663a7d
lea ecx, [ebp - 4]
mov eax, dword [ebp - 0x34]
movzx edx, word [eax + 0x9d1]
mov eax, dword [0x707bc4]
mov eax, dword [eax]
call fcn.0062e5c8
jmp 0x663a8a
lea eax, [ebp - 4]
mov edx, 0x6667b0
call fcn.00405568
mov eax, dword [ebp - 4]
push eax
lea eax, [ebp - 0x30c]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x310]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x310]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x30c]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
mov eax, dword [ebp - 0x34]
cmp dword [eax + 0xa4e], 0
jle 0x663afe
lea ecx, [ebp - 4]
mov eax, dword [ebp - 0x34]
movzx edx, word [eax + 0xa52]
mov eax, dword [0x707bc4]
mov eax, dword [eax]
call fcn.0062e5c8
jmp 0x663b0b
lea eax, [ebp - 4]
mov edx, 0x6667b0
call fcn.00405568
mov eax, dword [ebp - 4]
push eax
lea eax, [ebp - 0x314]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x318]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x318]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x314]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
mov eax, dword [ebp - 0x34]
cmp dword [eax + 0xacf], 0
jle 0x663b7f
lea ecx, [ebp - 4]
mov eax, dword [ebp - 0x34]
movzx edx, word [eax + 0xad3]
mov eax, dword [0x707bc4]
mov eax, dword [eax]
call fcn.0062e5c8
jmp 0x663b8c
lea eax, [ebp - 4]
mov edx, 0x6667b0
call fcn.00405568
mov eax, dword [ebp - 4]
push eax
lea eax, [ebp - 0x31c]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x320]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x320]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x31c]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
mov eax, dword [ebp - 0x34]
cmp dword [eax + 0xb50], 0
jle 0x663c00
lea ecx, [ebp - 4]
mov eax, dword [ebp - 0x34]
movzx edx, word [eax + 0xb54]
mov eax, dword [0x707bc4]
mov eax, dword [eax]
call fcn.0062e5c8
jmp 0x663c0d
lea eax, [ebp - 4]
mov edx, 0x6667b0
call fcn.00405568
mov eax, dword [ebp - 4]
push eax
lea eax, [ebp - 0x324]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x328]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x328]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x324]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
mov eax, dword [ebp - 0x34]
cmp dword [eax + 0xbd1], 0
jle 0x663c81
lea ecx, [ebp - 4]
mov eax, dword [ebp - 0x34]
movzx edx, word [eax + 0xbd5]
mov eax, dword [0x707bc4]
mov eax, dword [eax]
call fcn.0062e5c8
jmp 0x663c8e
lea eax, [ebp - 4]
mov edx, 0x6667b0
call fcn.00405568
mov eax, dword [ebp - 4]
push eax
lea eax, [ebp - 0x32c]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x330]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x330]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x32c]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
lea eax, [ebp - 4]
mov edx, dword [ebp - 0x34]
add edx, 0xdbe
call fcn.00405744
mov eax, dword [ebp - 4]
push eax
lea eax, [ebp - 0x334]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x338]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x338]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x334]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
lea eax, [ebp - 4]
mov edx, dword [ebp - 0x34]
mov edx, dword [edx + 0xdd0]
call fcn.00405568
mov eax, dword [ebp - 4]
push eax
lea eax, [ebp - 0x33c]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x340]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x340]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x33c]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
mov eax, dword [ebp - 0x34]
mov esi, dword [eax + 0x388]
test esi, esi
jne 0x663db3
lea eax, [ebp - 4]
mov edx, 0x6667b0
call fcn.00405568
jmp 0x663dbe
lea edx, [ebp - 4]
mov eax, dword [esi + 0x74]
call fcn.0040ab6c
mov eax, dword [ebp - 4]
push eax
lea eax, [ebp - 0x344]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x348]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x348]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x344]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
mov eax, dword [ebp - 0x34]
mov esi, dword [eax + 0x388]
test esi, esi
jne 0x663e27
lea eax, [ebp - 4]
mov edx, 0x6667b0
call fcn.00405568
jmp 0x663e32
lea edx, [ebp - 4]
mov eax, dword [esi + 0x78]
call fcn.0040ab6c
mov eax, dword [ebp - 4]
push eax
lea eax, [ebp - 0x34c]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x350]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x350]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x34c]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
mov eax, dword [ebp - 0x34]
mov esi, dword [eax + 0x388]
test esi, esi
jne 0x663e9b
lea eax, [ebp - 4]
mov edx, 0x6667b0
call fcn.00405568
jmp 0x663ea6
lea edx, [ebp - 4]
mov eax, dword [esi + 0x7c]
call fcn.0040ab6c
mov eax, dword [ebp - 4]
push eax
lea eax, [ebp - 0x354]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x358]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x358]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x354]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
mov eax, dword [ebp - 0x34]
mov esi, dword [eax + 0x388]
test esi, esi
jne 0x663f0f
lea eax, [ebp - 4]
mov edx, 0x6667b0
call fcn.00405568
jmp 0x663f1d
lea edx, [ebp - 4]
mov eax, dword [esi + 0x80]
call fcn.0040ab6c
mov eax, dword [ebp - 4]
push eax
lea eax, [ebp - 0x35c]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x360]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x360]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x35c]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
mov eax, dword [ebp - 0x34]
mov esi, dword [eax + 0x388]
test esi, esi
jne 0x663f86
lea eax, [ebp - 4]
mov edx, 0x6667b0
call fcn.00405568
jmp 0x663f91
lea edx, [ebp - 4]
mov eax, dword [esi + 0x70]
call fcn.0040ab6c
mov eax, dword [ebp - 4]
push eax
lea eax, [ebp - 0x364]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x368]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x368]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x364]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
lea eax, [ebp - 4]
mov edx, dword [0x7070f8]
mov edx, dword [edx + 0x210]
call fcn.00405568
mov eax, dword [ebp - 4]
push eax
lea eax, [ebp - 0x36c]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x370]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x370]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x36c]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
lea eax, [ebp - 4]
mov edx, dword [0x7070f8]
mov edx, dword [edx + 0x210]
call fcn.00405568
mov eax, dword [ebp - 4]
push eax
lea eax, [ebp - 0x374]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x378]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x378]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x374]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
lea eax, [ebp - 4]
mov edx, dword [0x7070f8]
mov edx, dword [edx + 0x20c]
call fcn.00405568
mov eax, dword [ebp - 4]
push eax
lea eax, [ebp - 0x37c]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x380]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x380]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x37c]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
test esi, esi
je 0x664125
lea eax, [ebp - 4]
mov edx, dword [esi + 0x1c]
call fcn.00405568
cmp dword [ebp - 4], 0
jne 0x664132
lea eax, [ebp - 4]
mov edx, 0x6667e8
call fcn.00405568
jmp 0x664132
lea eax, [ebp - 4]
mov edx, 0x666744
call fcn.00405568
mov eax, dword [ebp - 4]
push eax
lea eax, [ebp - 0x384]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x388]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x388]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x384]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
test esi, esi
je 0x664190
lea eax, [ebp - 4]
mov edx, dword [esi + 0x18]
call fcn.00405568
jmp 0x66419d
lea eax, [ebp - 4]
mov edx, 0x666744
call fcn.00405568
mov eax, dword [ebp - 4]
push eax
lea eax, [ebp - 0x38c]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x390]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x390]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x38c]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
test esi, esi
je 0x664210
mov edi, dword [esi + 0x20]
test edi, edi
je 0x664201
lea edx, [ebp - 4]
mov eax, edi
call fcn.005169a8
jmp 0x66421d
lea eax, [ebp - 4]
mov edx, 0x6667fc
call fcn.00405568
jmp 0x66421d
lea eax, [ebp - 4]
mov edx, 0x666744
call fcn.00405568
mov eax, dword [ebp - 4]
push eax
lea eax, [ebp - 0x394]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x398]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x398]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x394]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
lea edx, [ebp - 0x3a0]
mov eax, dword [0x7070f8]
mov eax, dword [eax + 0x1a40]
call fcn.0040ab6c
mov eax, dword [ebp - 0x3a0]
push eax
lea eax, [ebp - 0x39c]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x3a4]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x3a4]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x39c]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
lea edx, [ebp - 0x3ac]
mov eax, dword [0x7070f8]
mov eax, dword [eax + 0x1a3c]
call fcn.0040ab6c
mov eax, dword [ebp - 0x3ac]
push eax
lea eax, [ebp - 0x3a8]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x3b0]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x3b0]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x3a8]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
test esi, esi
je 0x6643c5
cmp byte [esi + 0x41], 0
jne 0x6643b3
lea edx, [ebp - 4]
mov eax, esi
call fcn.0051124c
cmp dword [ebp - 4], 0
je 0x6643a1
mov eax, dword [ebp - 4]
push eax
lea eax, [ebp - 0x3b4]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x3b8]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x3b8]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x3b4]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
mov eax, dword [ebp - 0x38]
mov edx, 0x666810
call fcn.00405524
jmp 0x66668e
mov eax, dword [ebp - 0x38]
mov edx, 0x666840
call fcn.00405524
jmp 0x66668e
lea eax, [ebp - 4]
mov edx, 0x666744
call fcn.00405568
jmp 0x66668e
test esi, esi
je 0x664466
cmp byte [esi + 0x41], 0
jne 0x664454
lea edx, [ebp - 4]
mov eax, esi
call fcn.005112f8
cmp dword [ebp - 4], 0
je 0x664442
mov eax, dword [ebp - 4]
push eax
lea eax, [ebp - 0x3bc]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x3c0]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x3c0]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x3bc]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
mov eax, dword [ebp - 0x38]
mov edx, 0x666864
call fcn.00405524
jmp 0x66668e
mov eax, dword [ebp - 0x38]
mov edx, 0x666898
call fcn.00405524
jmp 0x66668e
push 0x666744
lea eax, [ebp - 0x3c4]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x3c8]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x3c8]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x3c4]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
test esi, esi
je 0x6644d5
push dword [esi + 0x34]
push dword [esi + 0x30]
lea eax, [ebp - 0x1c]
xor edx, edx
call fcn.0040e970
lea eax, [ebp - 4]
mov edx, dword [ebp - 0x1c]
call fcn.00405568
jmp 0x6644e2
lea eax, [ebp - 4]
mov edx, 0x666744
call fcn.00405568
mov eax, dword [ebp - 4]
push eax
lea eax, [ebp - 0x3cc]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x3d0]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x3d0]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x3cc]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
test esi, esi
je 0x664550
push dword [esi + 0x3c]
push dword [esi + 0x38]
lea eax, [ebp - 0x20]
xor edx, edx
call fcn.0040e970
lea eax, [ebp - 4]
mov edx, dword [ebp - 0x20]
call fcn.00405568
jmp 0x66455d
lea eax, [ebp - 4]
mov edx, 0x666744
call fcn.00405568
mov eax, dword [ebp - 4]
push eax
lea eax, [ebp - 0x3d4]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x3d8]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x3d8]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x3d4]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
test esi, esi
je 0x6645cf
call fcn.0040dc20
add esp, 0xfffffff8
fstp qword [esp]
wait
push dword [esi + 0x34]
push dword [esi + 0x30]
call fcn.0048cec4
lea edx, [ebp - 4]
call fcn.0040ab6c
jmp 0x6645dc
lea eax, [ebp - 4]
mov edx, 0x666744
call fcn.00405568
mov eax, dword [ebp - 4]
push eax
lea eax, [ebp - 0x3dc]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x3e0]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x3e0]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x3dc]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
lea eax, [ebp - 0x3e8]
mov edx, dword [0x7076f4]
call fcn.00405744
mov eax, dword [ebp - 0x3e8]
push eax
lea eax, [ebp - 0x3e4]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x3ec]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x3ec]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x3e4]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
lea eax, [ebp - 0x3f4]
mov edx, dword [0x7076f4]
add edx, 0x22
call fcn.00405744
mov eax, dword [ebp - 0x3f4]
push eax
lea eax, [ebp - 0x3f0]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x3f8]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x3f8]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x3f0]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
lea eax, [ebp - 0x400]
mov edx, dword [0x7076f4]
add edx, 0x44
call fcn.00405744
mov eax, dword [ebp - 0x400]
push eax
lea eax, [ebp - 0x3fc]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x404]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x404]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x3fc]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
lea eax, [ebp - 0x40c]
mov edx, dword [0x7076f4]
add edx, 0x66
call fcn.00405744
mov eax, dword [ebp - 0x40c]
push eax
lea eax, [ebp - 0x408]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x410]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x410]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x408]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
lea eax, [ebp - 0x418]
mov edx, dword [0x7076f4]
add edx, 0x88
call fcn.00405744
mov eax, dword [ebp - 0x418]
push eax
lea eax, [ebp - 0x414]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x41c]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x41c]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x414]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
lea eax, [ebp - 0x424]
mov edx, dword [0x7076f4]
add edx, 0xaa
call fcn.00405744
mov eax, dword [ebp - 0x424]
push eax
lea eax, [ebp - 0x420]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x428]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x428]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x420]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
lea eax, [ebp - 0x430]
mov edx, dword [0x7076f4]
add edx, 0xcc
call fcn.00405744
mov eax, dword [ebp - 0x430]
push eax
lea eax, [ebp - 0x42c]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x434]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x434]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x42c]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
lea eax, [ebp - 0x43c]
mov edx, dword [0x7076f4]
add edx, 0xee
call fcn.00405744
mov eax, dword [ebp - 0x43c]
push eax
lea eax, [ebp - 0x438]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x440]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x440]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x438]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
lea eax, [ebp - 0x448]
mov edx, dword [0x7076f4]
add edx, 0x110
call fcn.00405744
mov eax, dword [ebp - 0x448]
push eax
lea eax, [ebp - 0x444]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x44c]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x44c]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x444]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
lea eax, [ebp - 0x454]
mov edx, dword [0x7076f4]
add edx, 0x110
call fcn.00405744
mov eax, dword [ebp - 0x454]
push eax
lea eax, [ebp - 0x450]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x458]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x458]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x450]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
lea eax, [ebp - 0x460]
mov edx, dword [0x7076f4]
add edx, 0x154
call fcn.00405744
mov eax, dword [ebp - 0x460]
push eax
lea eax, [ebp - 0x45c]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x464]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x464]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x45c]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
lea eax, [ebp - 0x46c]
mov edx, dword [0x7076f4]
add edx, 0x198
call fcn.00405744
mov eax, dword [ebp - 0x46c]
push eax
lea eax, [ebp - 0x468]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x470]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x470]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x468]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
lea eax, [ebp - 0x478]
mov edx, dword [0x7076f4]
add edx, 0x1ba
call fcn.00405744
mov eax, dword [ebp - 0x478]
push eax
lea eax, [ebp - 0x474]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x47c]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x47c]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x474]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
lea eax, [ebp - 0x484]
mov edx, dword [0x7076f4]
add edx, 0x1dc
call fcn.00405744
mov eax, dword [ebp - 0x484]
push eax
lea eax, [ebp - 0x480]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x488]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x488]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x480]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
lea eax, [ebp - 0x490]
mov edx, dword [0x7076f4]
add edx, 0x1fe
call fcn.00405744
mov eax, dword [ebp - 0x490]
push eax
lea eax, [ebp - 0x48c]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x494]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x494]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x48c]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
lea eax, [ebp - 0x49c]
mov edx, dword [0x7076f4]
add edx, 0x220
call fcn.00405744
mov eax, dword [ebp - 0x49c]
push eax
lea eax, [ebp - 0x498]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x4a0]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x4a0]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x498]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
lea eax, [ebp - 0x4a8]
mov edx, dword [0x7076f4]
add edx, 0x242
call fcn.00405744
mov eax, dword [ebp - 0x4a8]
push eax
lea eax, [ebp - 0x4a4]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x4ac]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x4ac]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x4a4]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
lea eax, [ebp - 0x4b4]
mov edx, dword [0x7076f4]
add edx, 0x3b8
call fcn.00405744
mov eax, dword [ebp - 0x4b4]
push eax
lea eax, [ebp - 0x4b0]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x4b8]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x4b8]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x4b0]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
lea eax, [ebp - 0x4c0]
mov edx, dword [0x7076f4]
add edx, 0x3da
call fcn.00405744
mov eax, dword [ebp - 0x4c0]
push eax
lea eax, [ebp - 0x4bc]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x4c4]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x4c4]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x4bc]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
lea eax, [ebp - 0x4cc]
mov edx, dword [0x7076f4]
add edx, 0x3fc
call fcn.00405744
mov eax, dword [ebp - 0x4cc]
push eax
lea eax, [ebp - 0x4c8]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x4d0]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x4d0]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x4c8]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
lea eax, [ebp - 0x4d8]
mov edx, dword [0x7076f4]
add edx, 0x41e
call fcn.00405744
mov eax, dword [ebp - 0x4d8]
push eax
lea eax, [ebp - 0x4d4]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x4dc]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x4dc]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x4d4]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
lea eax, [ebp - 0x4e4]
mov edx, dword [0x7076f4]
add edx, 0x440
call fcn.00405744
mov eax, dword [ebp - 0x4e4]
push eax
lea eax, [ebp - 0x4e0]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x4e8]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x4e8]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x4e0]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
lea eax, [ebp - 0x4f0]
mov edx, dword [0x7076f4]
add edx, 0x462
call fcn.00405744
mov eax, dword [ebp - 0x4f0]
push eax
lea eax, [ebp - 0x4ec]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x4f4]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x4f4]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x4ec]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
lea eax, [ebp - 0x4fc]
mov edx, dword [0x7076f4]
add edx, 0x4ea
call fcn.00405744
mov eax, dword [ebp - 0x4fc]
push eax
lea eax, [ebp - 0x4f8]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x500]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x500]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x4f8]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
lea eax, [ebp - 0x508]
mov edx, dword [0x7076f4]
add edx, 0x50c
call fcn.00405744
mov eax, dword [ebp - 0x508]
push eax
lea eax, [ebp - 0x504]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x50c]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x50c]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x504]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
lea eax, [ebp - 0x514]
mov edx, dword [0x7076f4]
add edx, 0x1a90
call fcn.00405744
mov eax, dword [ebp - 0x514]
push eax
lea eax, [ebp - 0x510]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x518]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x518]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x510]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
lea eax, [ebp - 0x520]
mov edx, dword [0x7076f4]
add edx, 0x374
call fcn.00405744
mov eax, dword [ebp - 0x520]
push eax
lea eax, [ebp - 0x51c]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x524]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x524]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x51c]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
lea eax, [ebp - 0x52c]
mov edx, dword [0x7076f4]
add edx, 0x396
call fcn.00405744
mov eax, dword [ebp - 0x52c]
push eax
lea eax, [ebp - 0x528]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x530]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x530]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x528]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
lea eax, [ebp - 0x538]
mov edx, dword [0x7076f4]
add edx, 0x484
call fcn.00405744
mov eax, dword [ebp - 0x538]
push eax
lea eax, [ebp - 0x534]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x53c]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x53c]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x534]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
lea eax, [ebp - 0x544]
mov edx, dword [0x7076f4]
add edx, 0x160c
call fcn.00405744
mov eax, dword [ebp - 0x544]
push eax
lea eax, [ebp - 0x540]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x548]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x548]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x540]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
mov edx, ebx
mov eax, dword [ebp - 0x34]
call fcn.006a59e0
mov edx, dword [ebp - 0x34]
movzx edx, byte [edx + 0xf7]
or eax, edx
lea edx, [ebp - 0x550]
call fcn.0040ab6c
mov eax, dword [ebp - 0x550]
push eax
lea eax, [ebp - 0x54c]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x554]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x554]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x54c]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
lea edx, [ebp - 0x55c]
mov eax, dword [ebx + 0xdc8]
call fcn.0040ab6c
mov eax, dword [ebp - 0x55c]
push eax
lea eax, [ebp - 0x558]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x560]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x560]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x558]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
call fcn.0040dc20
add esp, 0xfffffff8
fstp qword [esp]
wait
lea ecx, [ebp - 0x4a]
lea edx, [ebp - 0x48]
lea eax, [ebp - 0x46]
call fcn.0040db78
lea edx, [ebp - 0x568]
movzx eax, word [ebp - 0x46]
call fcn.0040ab6c
mov eax, dword [ebp - 0x568]
push eax
lea eax, [ebp - 0x564]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x56c]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x56c]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x564]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
call fcn.0040dc20
add esp, 0xfffffff8
fstp qword [esp]
wait
lea ecx, [ebp - 0x4a]
lea edx, [ebp - 0x48]
lea eax, [ebp - 0x46]
call fcn.0040db78
lea edx, [ebp - 0x574]
movzx eax, word [ebp - 0x48]
call fcn.0040ab6c
mov eax, dword [ebp - 0x574]
push eax
lea eax, [ebp - 0x570]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x578]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x578]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x570]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
call fcn.0040dc20
add esp, 0xfffffff8
fstp qword [esp]
wait
lea ecx, [ebp - 0x4a]
lea edx, [ebp - 0x48]
lea eax, [ebp - 0x46]
call fcn.0040db78
lea edx, [ebp - 0x580]
movzx eax, word [ebp - 0x4a]
call fcn.0040ab6c
mov eax, dword [ebp - 0x580]
push eax
lea eax, [ebp - 0x57c]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x584]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x584]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x57c]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
call fcn.0040dbec
add esp, 0xfffffff8
fstp qword [esp]
wait
lea eax, [ebp - 0x52]
push eax
lea ecx, [ebp - 0x50]
lea edx, [ebp - 0x4e]
lea eax, [ebp - 0x4c]
call fcn.0040d898
lea edx, [ebp - 0x58c]
movzx eax, word [ebp - 0x4c]
call fcn.0040ab6c
mov eax, dword [ebp - 0x58c]
push eax
lea eax, [ebp - 0x588]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x590]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x590]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x588]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
call fcn.0040dbec
add esp, 0xfffffff8
fstp qword [esp]
wait
lea eax, [ebp - 0x52]
push eax
lea ecx, [ebp - 0x50]
lea edx, [ebp - 0x4e]
lea eax, [ebp - 0x4c]
call fcn.0040d898
lea edx, [ebp - 0x598]
movzx eax, word [ebp - 0x4e]
call fcn.0040ab6c
mov eax, dword [ebp - 0x598]
push eax
lea eax, [ebp - 0x594]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x59c]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x59c]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x594]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
call fcn.0040dbec
add esp, 0xfffffff8
fstp qword [esp]
wait
lea eax, [ebp - 0x52]
push eax
lea ecx, [ebp - 0x50]
lea edx, [ebp - 0x4e]
lea eax, [ebp - 0x4c]
call fcn.0040d898
lea edx, [ebp - 0x5a4]
movzx eax, word [ebp - 0x50]
call fcn.0040ab6c
mov eax, dword [ebp - 0x5a4]
push eax
lea eax, [ebp - 0x5a0]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x5a8]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x5a8]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x5a0]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
test esi, esi
jne 0x6655f6
mov eax, dword [ebp - 0x38]
mov edx, 0x666744
call fcn.00405524
jmp 0x66668e
lea edx, [ebp - 4]
mov eax, dword [esi + 0x240]
call fcn.0040ab6c
mov eax, dword [ebp - 4]
push eax
lea eax, [ebp - 0x5ac]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x5b0]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x5b0]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x5ac]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
test esi, esi
jne 0x665667
mov eax, dword [ebp - 0x38]
mov edx, 0x666744
call fcn.00405524
jmp 0x66668e
lea edx, [ebp - 4]
mov eax, dword [esi + 0x244]
call fcn.0040ab6c
mov eax, dword [ebp - 4]
push eax
lea eax, [ebp - 0x5b4]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x5b8]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x5b8]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x5b4]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
test esi, esi
jne 0x6656d8
mov eax, dword [ebp - 0x38]
mov edx, 0x666744
call fcn.00405524
jmp 0x66668e
mov eax, dword [esi + 0x6c]
cmp byte [eax + 0x378], 0
je 0x6656f3
lea eax, [ebp - 4]
mov edx, 0x6668c4
call fcn.00405568
jmp 0x665718
cmp byte [eax + 0xd98], 0
je 0x66570b
lea eax, [ebp - 4]
mov edx, 0x6668d4
call fcn.00405568
jmp 0x665718
lea eax, [ebp - 4]
mov edx, 0x6668e4
call fcn.00405568
mov eax, dword [ebp - 4]
push eax
lea eax, [ebp - 0x5bc]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x5c0]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x5c0]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x5bc]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
lea edx, [ebp - 4]
mov eax, dword [0x7070f8]
mov eax, dword [eax + 0x6598]
call fcn.0040ab6c
mov eax, dword [ebp - 4]
push eax
lea eax, [ebp - 0x5c4]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x5c8]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x5c8]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x5c4]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
lea edx, [ebp - 4]
mov eax, dword [0x7070f8]
mov eax, dword [eax + 0x659c]
call fcn.0040ab6c
mov eax, dword [ebp - 4]
push eax
lea eax, [ebp - 0x5cc]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x5d0]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x5d0]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x5cc]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
lea edx, [ebp - 4]
mov eax, dword [0x7070f8]
mov eax, dword [eax + 0x6588]
call fcn.0040ab6c
mov eax, dword [ebp - 4]
push eax
lea eax, [ebp - 0x5d4]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x5d8]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x5d8]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x5d4]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
lea edx, [ebp - 4]
mov eax, dword [0x7070f8]
mov eax, dword [eax + 0x658c]
call fcn.0040ab6c
mov eax, dword [ebp - 4]
push eax
lea eax, [ebp - 0x5dc]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x5e0]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x5e0]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x5dc]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
test esi, esi
jne 0x6658fb
mov eax, dword [ebp - 0x38]
mov edx, 0x666744
call fcn.00405524
jmp 0x66668e
cmp byte [esi + 0x54], 0
je 0x665910
lea eax, [ebp - 4]
mov edx, 0x6668f4
call fcn.00405568
jmp 0x66591d
lea eax, [ebp - 4]
mov edx, 0x666908
call fcn.00405568
mov eax, dword [ebp - 4]
push eax
lea eax, [ebp - 0x5e4]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x5e8]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x5e8]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x5e4]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
mov eax, dword [ebp - 0x34]
cmp byte [eax + 0x3a9d], 0
je 0x66599f
mov eax, dword [ebp - 0x34]
push dword [eax + 0x3ab4]
push dword [eax + 0x3ab0]
lea eax, [ebp - 0x24]
mov edx, 0x66691c
call fcn.0040e970
lea eax, [ebp - 4]
mov edx, dword [ebp - 0x24]
call fcn.00405568
jmp 0x6659ac
lea eax, [ebp - 4]
mov edx, 0x666938
call fcn.00405568
mov eax, dword [ebp - 4]
push eax
lea eax, [ebp - 0x5ec]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x5f0]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x5f0]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x5ec]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
mov eax, dword [ebp - 0x34]
cmp byte [eax + 0x3a9e], 0
je 0x665a2e
mov eax, dword [ebp - 0x34]
push dword [eax + 0x3abc]
push dword [eax + 0x3ab8]
lea eax, [ebp - 0x28]
mov edx, 0x66691c
call fcn.0040e970
lea eax, [ebp - 4]
mov edx, dword [ebp - 0x28]
call fcn.00405568
jmp 0x665a3b
lea eax, [ebp - 4]
mov edx, 0x666938
call fcn.00405568
mov eax, dword [ebp - 4]
push eax
lea eax, [ebp - 0x5f4]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x5f8]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x5f8]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x5f4]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
mov eax, dword [ebp - 0x34]
cmp byte [eax + 0x3a9f], 0
je 0x665abd
mov eax, dword [ebp - 0x34]
push dword [eax + 0x3ac4]
push dword [eax + 0x3ac0]
lea eax, [ebp - 0x2c]
mov edx, 0x66691c
call fcn.0040e970
lea eax, [ebp - 4]
mov edx, dword [ebp - 0x2c]
call fcn.00405568
jmp 0x665aca
lea eax, [ebp - 4]
mov edx, 0x666938
call fcn.00405568
mov eax, dword [ebp - 4]
push eax
lea eax, [ebp - 0x5fc]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x600]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x600]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x5fc]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
mov eax, dword [ebp - 0x34]
cmp byte [eax + 0x3aa0], 0
je 0x665b4c
mov eax, dword [ebp - 0x34]
push dword [eax + 0x3acc]
push dword [eax + 0x3ac8]
lea eax, [ebp - 0x30]
mov edx, 0x66691c
call fcn.0040e970
lea eax, [ebp - 4]
mov edx, dword [ebp - 0x30]
call fcn.00405568
jmp 0x665b59
lea eax, [ebp - 4]
mov edx, 0x666938
call fcn.00405568
mov eax, dword [ebp - 4]
push eax
lea eax, [ebp - 0x604]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x608]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x608]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x604]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
lea eax, [ebp - 8]
mov edx, dword [ebp - 0x10]
call fcn.00405568
mov byte [ebp - 0x3d], 0
mov eax, dword [ebp - 0x34]
mov eax, dword [eax + 0x1764]
mov esi, dword [eax + 8]
dec esi
test esi, esi
jl 0x665cbf
inc esi
mov dword [ebp - 0x3c], 0
mov eax, dword [ebp - 0x34]
mov eax, dword [eax + 0x1764]
mov edx, dword [ebp - 0x3c]
call fcn.00420a68
mov edi, eax
mov eax, dword [edi]
mov edx, dword [ebp - 8]
call fcn.0040a1a8
test eax, eax
jne 0x665cb5
movzx eax, byte [edi + 4]
dec al
je 0x665c08
dec al
je 0x665c67
jmp 0x665cbf
lea edx, [ebp - 0x610]
mov eax, dword [edi + 8]
call fcn.0040ab6c
mov eax, dword [ebp - 0x610]
push eax
lea eax, [ebp - 0x60c]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x614]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x614]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x60c]
mov eax, dword [ebp - 0x38]
call fcn.00405524
mov byte [ebp - 0x3d], 1
jmp 0x665cbf
mov eax, dword [edi + 0xc]
push eax
lea eax, [ebp - 0x618]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x61c]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x61c]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x618]
mov eax, dword [ebp - 0x38]
call fcn.00405524
mov byte [ebp - 0x3d], 1
jmp 0x665cbf
inc dword [ebp - 0x3c]
dec esi
jne 0x665bd2
cmp byte [ebp - 0x3d], 0
jne 0x66668e
push 0x666744
lea eax, [ebp - 0x620]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x624]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x624]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x620]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
mov eax, dword [ebp - 0x34]
mov esi, dword [eax + 0x388]
test esi, esi
je 0x66668e
lea eax, [ebp - 8]
mov edx, dword [ebp - 0x10]
call fcn.00405568
mov byte [ebp - 0x3d], 0
mov eax, dword [esi + 0x44]
mov eax, dword [eax + 8]
dec eax
test eax, eax
jl 0x665e40
inc eax
mov esi, eax
mov dword [ebp - 0x3c], 0
mov eax, dword [ebp - 0x34]
mov eax, dword [eax + 0x388]
mov eax, dword [eax + 0x44]
mov edx, dword [ebp - 0x3c]
call fcn.00420a68
mov edi, eax
mov eax, dword [edi]
mov edx, dword [ebp - 8]
call fcn.0040a1a8
test eax, eax
jne 0x665e36
movzx eax, byte [edi + 4]
dec al
je 0x665d89
dec al
je 0x665de8
jmp 0x665e40
lea edx, [ebp - 0x62c]
mov eax, dword [edi + 8]
call fcn.0040ab6c
mov eax, dword [ebp - 0x62c]
push eax
lea eax, [ebp - 0x628]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x630]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x630]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x628]
mov eax, dword [ebp - 0x38]
call fcn.00405524
mov byte [ebp - 0x3d], 1
jmp 0x665e40
mov eax, dword [edi + 0xc]
push eax
lea eax, [ebp - 0x634]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x638]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x638]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x634]
mov eax, dword [ebp - 0x38]
call fcn.00405524
mov byte [ebp - 0x3d], 1
jmp 0x665e40
inc dword [ebp - 0x3c]
dec esi
jne 0x665d50
cmp byte [ebp - 0x3d], 0
jne 0x66668e
push 0x666744
lea eax, [ebp - 0x63c]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x640]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x640]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x63c]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
lea eax, [ebp - 8]
mov edx, dword [ebp - 0x10]
call fcn.00405568
mov byte [ebp - 0x3d], 0
mov eax, dword [0x707204]
mov eax, dword [eax]
mov esi, dword [eax + 8]
dec esi
test esi, esi
jl 0x665fad
inc esi
mov dword [ebp - 0x3c], 0
mov eax, dword [0x707204]
mov eax, dword [eax]
mov edx, dword [ebp - 0x3c]
call fcn.00420a68
mov edi, eax
mov eax, dword [edi]
mov edx, dword [ebp - 8]
call fcn.0040a1a8
test eax, eax
jne 0x665fa3
movzx eax, byte [edi + 4]
dec al
je 0x665ef6
dec al
je 0x665f55
jmp 0x665fad
lea edx, [ebp - 0x648]
mov eax, dword [edi + 8]
call fcn.0040ab6c
mov eax, dword [ebp - 0x648]
push eax
lea eax, [ebp - 0x644]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x64c]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x64c]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x644]
mov eax, dword [ebp - 0x38]
call fcn.00405524
mov byte [ebp - 0x3d], 1
jmp 0x665fad
mov eax, dword [edi + 0xc]
push eax
lea eax, [ebp - 0x650]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x654]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x654]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x650]
mov eax, dword [ebp - 0x38]
call fcn.00405524
mov byte [ebp - 0x3d], 1
jmp 0x665fad
inc dword [ebp - 0x3c]
dec esi
jne 0x665ec2
cmp byte [ebp - 0x3d], 0
jne 0x66668e
push 0x666744
lea eax, [ebp - 0x658]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x65c]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x65c]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x658]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
mov eax, dword [ebp - 0x10]
call fcn.004e11d8
mov esi, eax
test esi, esi
jl 0x66652d
mov eax, esi
cmp eax, 0x384
jge 0x66606b
cmp eax, 0x12c
jge 0x666041
sub eax, 0x64
jb 0x6660cc
add eax, 0xffffff9c
sub eax, 0xa
jb 0x666198
jmp 0x6664e4
add eax, 0xfffffed4
sub eax, 0x64
jb 0x6661fd
sub eax, 0x64
jb 0x666262
add eax, 0xfffffed4
sub eax, 0x64
jb 0x6663d8
jmp 0x6664e4
cmp eax, 0x1388
jge 0x6660a1
add eax, 0xfffffc7c
sub eax, 0xa
jb 0x66642e
add eax, 0xffffffa6
sub eax, 0x14
jb 0x66647f
add eax, 0xfffffc2c
sub eax, 0x3e8
jb 0x666131
jmp 0x6664e4
add eax, 0xffffec78
sub eax, 0x3e8
jb 0x6662c9
sub eax, 0x3e8
jb 0x66632e
sub eax, 0x3e8
jb 0x666382
jmp 0x6664e4
mov eax, dword [ebp - 0x34]
mov eax, dword [eax + esi*4 + 0xea0]
lea edx, [ebp - 0x664]
call fcn.0040ab6c
mov eax, dword [ebp - 0x664]
push eax
lea eax, [ebp - 0x660]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x668]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x668]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x660]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
mov eax, dword [0x7070f8]
mov eax, dword [eax + esi*4 + 0x17c]
lea edx, [ebp - 0x670]
call fcn.0040ab6c
mov eax, dword [ebp - 0x670]
push eax
lea eax, [ebp - 0x66c]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x674]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x674]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x66c]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
mov eax, dword [ebp - 0x34]
mov eax, dword [eax + esi*4 + 0xea0]
lea edx, [ebp - 0x67c]
call fcn.0040ab6c
mov eax, dword [ebp - 0x67c]
push eax
lea eax, [ebp - 0x678]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x680]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x680]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x678]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
mov eax, dword [ebp - 0x34]
mov eax, dword [eax + esi*4 + 0xb80]
lea edx, [ebp - 0x688]
call fcn.0040ab6c
mov eax, dword [ebp - 0x688]
push eax
lea eax, [ebp - 0x684]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x68c]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x68c]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x684]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
mov eax, dword [0x7070f8]
mov eax, dword [eax + esi*4 + 0x2a1c]
lea edx, [ebp - 0x694]
call fcn.0040ab6c
mov eax, dword [ebp - 0x694]
push eax
lea eax, [ebp - 0x690]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x698]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x698]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x690]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
mov eax, dword [ebp - 0x34]
mov eax, dword [eax + esi*4 - 0x3678]
lea edx, [ebp - 0x6a0]
call fcn.0040ab6c
mov eax, dword [ebp - 0x6a0]
push eax
lea eax, [ebp - 0x69c]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x6a4]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x6a4]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x69c]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
mov eax, dword [ebp - 0x34]
mov eax, dword [eax + esi*4 - 0x3678]
push eax
lea eax, [ebp - 0x6a8]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x6ac]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x6ac]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x6a8]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
mov eax, dword [0x7070f8]
mov eax, dword [eax + esi*4 - 0x2d64]
push eax
lea eax, [ebp - 0x6b0]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x6b4]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x6b4]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x6b0]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
mov eax, dword [0x7070f8]
mov eax, dword [eax + esi*4 + 0x431c]
push eax
lea eax, [ebp - 0x6b8]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x6bc]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x6bc]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x6b8]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
mov eax, dword [ebx + esi*4 + 0x10c]
push eax
lea eax, [ebp - 0x6c0]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x6c4]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x6c4]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x6c0]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
mov eax, dword [ebp - 0x34]
mov eax, dword [eax + esi*4 + 0x2c0]
lea edx, [ebp - 0x6cc]
call fcn.0040ab6c
mov eax, dword [ebp - 0x6cc]
push eax
lea eax, [ebp - 0x6c8]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x6d0]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x6d0]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x6c8]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
push 0x666744
lea eax, [ebp - 0x6d4]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x6d8]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x6d8]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x6d4]
mov eax, dword [ebp - 0x38]
call fcn.00405524
push 0x666744
lea eax, [ebp - 0x6dc]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x6e0]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x6e0]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x6dc]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
or edx, 0xffffffff
mov eax, dword [ebp - 0x10]
call fcn.0040adf8
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
sub eax, 0x14
jae 0x6665fa
mov eax, dword [ebp - 0x34]
mov edx, dword [ebp - 0x44]
movzx eax, byte [eax + edx + 0x16f0]
lea edx, [ebp - 0x6e8]
call fcn.0040ab6c
mov eax, dword [ebp - 0x6e8]
push eax
lea eax, [ebp - 0x6e4]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x6ec]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x6ec]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x6e4]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
push 0x666744
lea eax, [ebp - 0x6f0]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x6f4]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x6f4]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x6f0]
mov eax, dword [ebp - 0x38]
call fcn.00405524
jmp 0x66668e
push 0x666744
lea eax, [ebp - 0x6f8]
push eax
push 0x666754
push dword [ebp + 8]
push 0x666760
lea eax, [ebp - 0x6fc]
mov edx, 3
call fcn.00405874
mov ecx, dword [ebp - 0x6fc]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov eax, ebx
call fcn.00668104
mov edx, dword [ebp - 0x6f8]
mov eax, dword [ebp - 0x38]
call fcn.00405524
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x666731
lea eax, [ebp - 0x6fc]
mov edx, 0x64
call fcn.004054f4
lea eax, [ebp - 0x56c]
mov edx, 0x63
call fcn.004054f4
lea eax, [ebp - 0x3dc]
call fcn.004054d0
lea eax, [ebp - 0x3e0]
call fcn.004054d0
lea eax, [ebp - 0x3d8]
mov edx, 0x63
call fcn.004054f4
lea eax, [ebp - 0x24c]
mov edx, 0x2d
call fcn.004054f4
lea eax, [ebp - 0x188]
mov edx, 0x37
call fcn.004054f4
lea eax, [ebp - 0xac]
mov edx, 0x12
call fcn.004054f4
lea eax, [ebp - 0x30]
mov edx, 0xc
call fcn.004054f4
lea eax, [ebp + 8]
call fcn.004054d0
ret