Function at 0x665371
Capabilities:
Parse pe header
Resolve function by parsing pe exports

Disassembly:
mov eax, 0x8bc4f8
call fcn.00879bb8
sub esp, 0x74
push ebx
push esi
mov esi, ecx
push edi
lea ecx, [ebp - 0x40]
call fcn.006f54f2
mov edi, dword [ebp + 0xc]
push 0x10
lea eax, [ebp - 0x40]
push eax
mov ecx, edi
call fcn.004245d2
and dword [ebp - 0x10], 0
call dword [sym.imp.winmm.dll_timeGetTime]
mov ebx, eax
push 0x97b050
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x40]
call fcn.006f5b1a
mov ecx, eax
call fcn.006f5bb6
test al, al
je 0x66548b
mov ecx, edi
call fcn.00424561
movsx ecx, ax
lea edx, [esi + 0xc]
call fcn.004133b5
mov ecx, edi
mov dword [esi + 0x14], eax
call fcn.0042459a
lea edx, [esi + 0x18]
mov ecx, eax
mov dword [ebp - 0x10], eax
call fcn.004133b5
mov ecx, edi
mov dword [esi + 0x20], eax
call fcn.0042459a
lea ecx, [ebx + eax]
lea edx, [esi + 0x24]
mov dword [ebp + 0xc], eax
call fcn.004133b5
and dword [ebp - 0x1c], 0
mov dword [esi + 0x2c], eax
mov ecx, dword [ebp + 0x10]
and dword [ebp - 4], 0
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.00671996
test eax, eax
jne 0x665466
push 0x20
mov ecx, 0x97bac0
call fcn.004029b9
mov ecx, eax
mov dword [ebp - 0x18], ecx
test ecx, ecx
mov byte [ebp - 4], 1
je 0x665447
call fcn.006698f9
jmp 0x665449
xor eax, eax
and byte [ebp - 4], 0
push eax
lea ecx, [ebp - 0x20]
call fcn.00670bd2
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.006719ea
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp + 0xc]
mov dword [eax + 0x1c], ecx
mov eax, dword [ebp - 0x1c]
push 0x97b050
lea ecx, [eax + 0xc]
call fcn.006f59d1
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x20]
call fcn.0067179c
push 0x97b040
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x40]
call fcn.006f5b1a
mov ecx, eax
call fcn.006f5bb6
test al, al
je 0x665572
mov ecx, edi
call fcn.00424561
movsx ecx, ax
lea edx, [esi + 0x3c]
call fcn.004133b5
mov ecx, edi
mov dword [esi + 0x44], eax
call fcn.0042459a
lea edx, [esi + 0x48]
mov ecx, eax
mov dword [ebp - 0x10], eax
call fcn.004133b5
mov ecx, edi
mov dword [esi + 0x50], eax
call fcn.0042459a
lea ecx, [ebx + eax]
lea edx, [esi + 0x54]
mov dword [ebp + 0xc], eax
call fcn.004133b5
and dword [ebp - 0x1c], 0
mov dword [esi + 0x5c], eax
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x10]
push eax
mov dword [ebp - 4], 2
call fcn.00671996
test eax, eax
jne 0x66554d
push 0x20
mov ecx, 0x97bac0
call fcn.004029b9
mov ecx, eax
mov dword [ebp - 0x18], ecx
test ecx, ecx
mov byte [ebp - 4], 3
je 0x66552e
call fcn.006698f9
jmp 0x665530
xor eax, eax
push eax
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 2
call fcn.00670bd2
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.006719ea
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp + 0xc]
mov dword [eax + 0x1c], ecx
mov eax, dword [ebp - 0x1c]
push 0x97b040
lea ecx, [eax + 0xc]
call fcn.006f59d1
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x20]
call fcn.0067179c
push 0x97b030
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x40]
call fcn.006f5b1a
mov ecx, eax
call fcn.006f5bb6
test al, al
je 0x665662
mov ecx, edi
call fcn.00424561
movsx ecx, ax
lea edx, [esi + 0x6c]
call fcn.004133b5
mov ecx, edi
mov dword [esi + 0x74], eax
call fcn.0042459a
lea edx, [esi + 0x78]
mov ecx, eax
mov dword [ebp - 0x10], eax
call fcn.004133b5
mov ecx, edi
mov dword [esi + 0x80], eax
call fcn.0042459a
lea ecx, [ebx + eax]
lea edx, [esi + 0x84]
mov dword [ebp + 0xc], eax
call fcn.004133b5
and dword [ebp - 0x1c], 0
mov dword [esi + 0x8c], eax
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x10]
push eax
mov dword [ebp - 4], 4
call fcn.00671996
test eax, eax
jne 0x66563d
push 0x20
mov ecx, 0x97bac0
call fcn.004029b9
mov ecx, eax
mov dword [ebp - 0x18], ecx
test ecx, ecx
mov byte [ebp - 4], 5
je 0x66561e
call fcn.006698f9
jmp 0x665620
xor eax, eax
push eax
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 4
call fcn.00670bd2
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.006719ea
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp + 0xc]
mov dword [eax + 0x1c], ecx
mov eax, dword [ebp - 0x1c]
push 0x97b030
lea ecx, [eax + 0xc]
call fcn.006f59d1
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x20]
call fcn.0067179c
push 0x97b020
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x40]
call fcn.006f5b1a
mov ecx, eax
call fcn.006f5bb6
test al, al
je 0x66575b
mov ecx, edi
call fcn.00424561
movsx ecx, ax
lea edx, [esi + 0x9c]
call fcn.004133b5
mov ecx, edi
mov dword [esi + 0xa4], eax
call fcn.0042459a
lea edx, [esi + 0xa8]
mov ecx, eax
mov dword [ebp - 0x10], eax
call fcn.004133b5
mov ecx, edi
mov dword [esi + 0xb0], eax
call fcn.0042459a
lea ecx, [ebx + eax]
lea edx, [esi + 0xb4]
mov dword [ebp + 0xc], eax
call fcn.004133b5
and dword [ebp - 0x1c], 0
mov dword [esi + 0xbc], eax
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x10]
push eax
mov dword [ebp - 4], 6
call fcn.00671996
test eax, eax
jne 0x665736
push 0x20
mov ecx, 0x97bac0
call fcn.004029b9
mov ecx, eax
mov dword [ebp - 0x18], ecx
test ecx, ecx
mov byte [ebp - 4], 7
je 0x665717
call fcn.006698f9
jmp 0x665719
xor eax, eax
push eax
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 6
call fcn.00670bd2
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.006719ea
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp + 0xc]
mov dword [eax + 0x1c], ecx
mov eax, dword [ebp - 0x1c]
push 0x97b020
lea ecx, [eax + 0xc]
call fcn.006f59d1
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x20]
call fcn.0067179c
push 0x97b010
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x40]
call fcn.006f5b1a
mov ecx, eax
call fcn.006f5bb6
test al, al
je 0x665854
mov ecx, edi
call fcn.00424561
movsx ecx, ax
lea edx, [esi + 0xcc]
call fcn.004133b5
mov ecx, edi
mov dword [esi + 0xd4], eax
call fcn.0042459a
lea edx, [esi + 0xd8]
mov ecx, eax
mov dword [ebp - 0x10], eax
call fcn.004133b5
mov ecx, edi
mov dword [esi + 0xe0], eax
call fcn.0042459a
lea ecx, [ebx + eax]
lea edx, [esi + 0xe4]
mov dword [ebp + 0xc], eax
call fcn.004133b5
and dword [ebp - 0x1c], 0
mov dword [esi + 0xec], eax
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x10]
push eax
mov dword [ebp - 4], 8
call fcn.00671996
test eax, eax
jne 0x66582f
push 0x20
mov ecx, 0x97bac0
call fcn.004029b9
mov ecx, eax
mov dword [ebp - 0x18], ecx
test ecx, ecx
mov byte [ebp - 4], 9
je 0x665810
call fcn.006698f9
jmp 0x665812
xor eax, eax
push eax
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 8
call fcn.00670bd2
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.006719ea
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp + 0xc]
mov dword [eax + 0x1c], ecx
mov eax, dword [ebp - 0x1c]
push 0x97b010
lea ecx, [eax + 0xc]
call fcn.006f59d1
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x20]
call fcn.0067179c
push 0x97b000
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x40]
call fcn.006f5b1a
mov ecx, eax
call fcn.006f5bb6
test al, al
je 0x66594d
mov ecx, edi
call fcn.00424561
movsx ecx, ax
lea edx, [esi + 0xfc]
call fcn.004133b5
mov ecx, edi
mov dword [esi + 0x104], eax
call fcn.0042459a
lea edx, [esi + 0x108]
mov ecx, eax
mov dword [ebp - 0x10], eax
call fcn.004133b5
mov ecx, edi
mov dword [esi + 0x110], eax
call fcn.0042459a
lea ecx, [ebx + eax]
lea edx, [esi + 0x114]
mov dword [ebp + 0xc], eax
call fcn.004133b5
and dword [ebp - 0x1c], 0
mov dword [esi + 0x11c], eax
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x10]
push eax
mov dword [ebp - 4], 0xa
call fcn.00671996
test eax, eax
jne 0x665928
push 0x20
mov ecx, 0x97bac0
call fcn.004029b9
mov ecx, eax
mov dword [ebp - 0x18], ecx
test ecx, ecx
mov byte [ebp - 4], 0xb
je 0x665909
call fcn.006698f9
jmp 0x66590b
xor eax, eax
push eax
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0xa
call fcn.00670bd2
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.006719ea
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp + 0xc]
mov dword [eax + 0x1c], ecx
mov eax, dword [ebp - 0x1c]
push 0x97b000
lea ecx, [eax + 0xc]
call fcn.006f59d1
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x20]
call fcn.0067179c
push 0x97aff0
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x40]
call fcn.006f5b1a
mov ecx, eax
call fcn.006f5bb6
test al, al
je 0x665a46
mov ecx, edi
call fcn.00424561
movsx ecx, ax
lea edx, [esi + 0x12c]
call fcn.004133b5
mov ecx, edi
mov dword [esi + 0x134], eax
call fcn.0042459a
lea edx, [esi + 0x138]
mov ecx, eax
mov dword [ebp - 0x10], eax
call fcn.004133b5
mov ecx, edi
mov dword [esi + 0x140], eax
call fcn.0042459a
lea ecx, [ebx + eax]
lea edx, [esi + 0x144]
mov dword [ebp + 0xc], eax
call fcn.004133b5
and dword [ebp - 0x1c], 0
mov dword [esi + 0x14c], eax
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x10]
push eax
mov dword [ebp - 4], 0xc
call fcn.00671996
test eax, eax
jne 0x665a21
push 0x20
mov ecx, 0x97bac0
call fcn.004029b9
mov ecx, eax
mov dword [ebp - 0x18], ecx
test ecx, ecx
mov byte [ebp - 4], 0xd
je 0x665a02
call fcn.006698f9
jmp 0x665a04
xor eax, eax
push eax
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0xc
call fcn.00670bd2
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.006719ea
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp + 0xc]
mov dword [eax + 0x1c], ecx
mov eax, dword [ebp - 0x1c]
push 0x97aff0
lea ecx, [eax + 0xc]
call fcn.006f59d1
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x20]
call fcn.0067179c
push 0x97b110
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x40]
call fcn.006f5b1a
mov ecx, eax
call fcn.006f5bb6
test al, al
je 0x665b3f
mov ecx, edi
call fcn.00424561
movsx ecx, ax
lea edx, [esi + 0x15c]
call fcn.004133b5
mov ecx, edi
mov dword [esi + 0x164], eax
call fcn.0042459a
lea edx, [esi + 0x168]
mov ecx, eax
mov dword [ebp - 0x10], eax
call fcn.004133b5
mov ecx, edi
mov dword [esi + 0x170], eax
call fcn.0042459a
lea ecx, [ebx + eax]
lea edx, [esi + 0x174]
mov dword [ebp + 0xc], eax
call fcn.004133b5
and dword [ebp - 0x1c], 0
mov dword [esi + 0x17c], eax
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x10]
push eax
mov dword [ebp - 4], 0xe
call fcn.00671996
test eax, eax
jne 0x665b1a
push 0x20
mov ecx, 0x97bac0
call fcn.004029b9
mov ecx, eax
mov dword [ebp - 0x18], ecx
test ecx, ecx
mov byte [ebp - 4], 0xf
je 0x665afb
call fcn.006698f9
jmp 0x665afd
xor eax, eax
push eax
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0xe
call fcn.00670bd2
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.006719ea
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp + 0xc]
mov dword [eax + 0x1c], ecx
mov eax, dword [ebp - 0x1c]
push 0x97b110
lea ecx, [eax + 0xc]
call fcn.006f59d1
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x20]
call fcn.0067179c
push 0x97b100
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x40]
call fcn.006f5b1a
mov ecx, eax
call fcn.006f5bb6
test al, al
je 0x665c38
mov ecx, edi
call fcn.00424561
movsx ecx, ax
lea edx, [esi + 0x18c]
call fcn.004133b5
mov ecx, edi
mov dword [esi + 0x194], eax
call fcn.0042459a
lea edx, [esi + 0x198]
mov ecx, eax
mov dword [ebp - 0x10], eax
call fcn.004133b5
mov ecx, edi
mov dword [esi + 0x1a0], eax
call fcn.0042459a
lea ecx, [ebx + eax]
lea edx, [esi + 0x1a4]
mov dword [ebp + 0xc], eax
call fcn.004133b5
and dword [ebp - 0x1c], 0
mov dword [esi + 0x1ac], eax
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x10]
push eax
mov dword [ebp - 4], 0x10
call fcn.00671996
test eax, eax
jne 0x665c13
push 0x20
mov ecx, 0x97bac0
call fcn.004029b9
mov ecx, eax
mov dword [ebp - 0x18], ecx
test ecx, ecx
mov byte [ebp - 4], 0x11
je 0x665bf4
call fcn.006698f9
jmp 0x665bf6
xor eax, eax
push eax
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x10
call fcn.00670bd2
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.006719ea
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp + 0xc]
mov dword [eax + 0x1c], ecx
mov eax, dword [ebp - 0x1c]
push 0x97b100
lea ecx, [eax + 0xc]
call fcn.006f59d1
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x20]
call fcn.0067179c
push 0x97afe0
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x40]
call fcn.006f5b1a
mov ecx, eax
call fcn.006f5bb6
test al, al
je 0x665d31
mov ecx, edi
call fcn.00424561
movsx ecx, ax
lea edx, [esi + 0x1b0]
call fcn.004133b5
mov ecx, edi
mov dword [esi + 0x1b8], eax
call fcn.0042459a
lea edx, [esi + 0x1bc]
mov ecx, eax
mov dword [ebp - 0x10], eax
call fcn.004133b5
mov ecx, edi
mov dword [esi + 0x1c4], eax
call fcn.0042459a
lea ecx, [ebx + eax]
lea edx, [esi + 0x1c8]
mov dword [ebp + 0xc], eax
call fcn.004133b5
and dword [ebp - 0x1c], 0
mov dword [esi + 0x1d0], eax
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x10]
push eax
mov dword [ebp - 4], 0x12
call fcn.00671996
test eax, eax
jne 0x665d0c
push 0x20
mov ecx, 0x97bac0
call fcn.004029b9
mov ecx, eax
mov dword [ebp - 0x18], ecx
test ecx, ecx
mov byte [ebp - 4], 0x13
je 0x665ced
call fcn.006698f9
jmp 0x665cef
xor eax, eax
push eax
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x12
call fcn.00670bd2
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.006719ea
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp + 0xc]
mov dword [eax + 0x1c], ecx
mov eax, dword [ebp - 0x1c]
push 0x97afe0
lea ecx, [eax + 0xc]
call fcn.006f59d1
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x20]
call fcn.0067179c
push 0x97afd0
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x40]
call fcn.006f5b1a
mov ecx, eax
call fcn.006f5bb6
test al, al
je 0x665e2a
mov ecx, edi
call fcn.00424561
movsx ecx, ax
lea edx, [esi + 0x1d4]
call fcn.004133b5
mov ecx, edi
mov dword [esi + 0x1dc], eax
call fcn.0042459a
lea edx, [esi + 0x1e0]
mov ecx, eax
mov dword [ebp - 0x10], eax
call fcn.004133b5
mov ecx, edi
mov dword [esi + 0x1e8], eax
call fcn.0042459a
lea ecx, [ebx + eax]
lea edx, [esi + 0x1ec]
mov dword [ebp + 0xc], eax
call fcn.004133b5
and dword [ebp - 0x1c], 0
mov dword [esi + 0x1f4], eax
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x10]
push eax
mov dword [ebp - 4], 0x14
call fcn.00671996
test eax, eax
jne 0x665e05
push 0x20
mov ecx, 0x97bac0
call fcn.004029b9
mov ecx, eax
mov dword [ebp - 0x18], ecx
test ecx, ecx
mov byte [ebp - 4], 0x15
je 0x665de6
call fcn.006698f9
jmp 0x665de8
xor eax, eax
push eax
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x14
call fcn.00670bd2
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.006719ea
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp + 0xc]
mov dword [eax + 0x1c], ecx
mov eax, dword [ebp - 0x1c]
push 0x97afd0
lea ecx, [eax + 0xc]
call fcn.006f59d1
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x20]
call fcn.0067179c
push 0x97afc0
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x40]
call fcn.006f5b1a
mov ecx, eax
call fcn.006f5bb6
test al, al
je 0x665f23
mov ecx, edi
call fcn.00424561
movsx ecx, ax
lea edx, [esi + 0x204]
call fcn.004133b5
mov ecx, edi
mov dword [esi + 0x20c], eax
call fcn.0042459a
lea edx, [esi + 0x210]
mov ecx, eax
mov dword [ebp - 0x10], eax
call fcn.004133b5
mov ecx, edi
mov dword [esi + 0x218], eax
call fcn.0042459a
lea ecx, [ebx + eax]
lea edx, [esi + 0x21c]
mov dword [ebp + 0xc], eax
call fcn.004133b5
and dword [ebp - 0x1c], 0
mov dword [esi + 0x224], eax
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x10]
push eax
mov dword [ebp - 4], 0x16
call fcn.00671996
test eax, eax
jne 0x665efe
push 0x20
mov ecx, 0x97bac0
call fcn.004029b9
mov ecx, eax
mov dword [ebp - 0x18], ecx
test ecx, ecx
mov byte [ebp - 4], 0x17
je 0x665edf
call fcn.006698f9
jmp 0x665ee1
xor eax, eax
push eax
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x16
call fcn.00670bd2
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.006719ea
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp + 0xc]
mov dword [eax + 0x1c], ecx
mov eax, dword [ebp - 0x1c]
push 0x97afc0
lea ecx, [eax + 0xc]
call fcn.006f59d1
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x20]
call fcn.0067179c
push 0x97afb0
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x40]
call fcn.006f5b1a
mov ecx, eax
call fcn.006f5bb6
test al, al
je 0x66601c
mov ecx, edi
call fcn.00424561
movsx ecx, ax
lea edx, [esi + 0x228]
call fcn.004133b5
mov ecx, edi
mov dword [esi + 0x230], eax
call fcn.0042459a
lea edx, [esi + 0x234]
mov ecx, eax
mov dword [ebp - 0x10], eax
call fcn.004133b5
mov ecx, edi
mov dword [esi + 0x23c], eax
call fcn.0042459a
lea ecx, [ebx + eax]
lea edx, [esi + 0x240]
mov dword [ebp + 0xc], eax
call fcn.004133b5
and dword [ebp - 0x1c], 0
mov dword [esi + 0x248], eax
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x10]
push eax
mov dword [ebp - 4], 0x18
call fcn.00671996
test eax, eax
jne 0x665ff7
push 0x20
mov ecx, 0x97bac0
call fcn.004029b9
mov ecx, eax
mov dword [ebp - 0x18], ecx
test ecx, ecx
mov byte [ebp - 4], 0x19
je 0x665fd8
call fcn.006698f9
jmp 0x665fda
xor eax, eax
push eax
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x18
call fcn.00670bd2
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.006719ea
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp + 0xc]
mov dword [eax + 0x1c], ecx
mov eax, dword [ebp - 0x1c]
push 0x97afb0
lea ecx, [eax + 0xc]
call fcn.006f59d1
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x20]
call fcn.0067179c
push 0x97afa0
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x40]
call fcn.006f5b1a
mov ecx, eax
call fcn.006f5bb6
test al, al
je 0x666115
mov ecx, edi
call fcn.00424561
movsx ecx, ax
lea edx, [esi + 0x24c]
call fcn.004133b5
mov ecx, edi
mov dword [esi + 0x254], eax
call fcn.0042459a
lea edx, [esi + 0x258]
mov ecx, eax
mov dword [ebp - 0x10], eax
call fcn.004133b5
mov ecx, edi
mov dword [esi + 0x260], eax
call fcn.0042459a
lea ecx, [ebx + eax]
lea edx, [esi + 0x264]
mov dword [ebp + 0xc], eax
call fcn.004133b5
and dword [ebp - 0x1c], 0
mov dword [esi + 0x26c], eax
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x10]
push eax
mov dword [ebp - 4], 0x1a
call fcn.00671996
test eax, eax
jne 0x6660f0
push 0x20
mov ecx, 0x97bac0
call fcn.004029b9
mov ecx, eax
mov dword [ebp - 0x18], ecx
test ecx, ecx
mov byte [ebp - 4], 0x1b
je 0x6660d1
call fcn.006698f9
jmp 0x6660d3
xor eax, eax
push eax
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x1a
call fcn.00670bd2
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.006719ea
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp + 0xc]
mov dword [eax + 0x1c], ecx
mov eax, dword [ebp - 0x1c]
push 0x97afa0
lea ecx, [eax + 0xc]
call fcn.006f59d1
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x20]
call fcn.0067179c
push 0x97af90
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x40]
call fcn.006f5b1a
mov ecx, eax
call fcn.006f5bb6
test al, al
je 0x66620e
mov ecx, edi
call fcn.00424561
movsx ecx, ax
lea edx, [esi + 0x270]
call fcn.004133b5
mov ecx, edi
mov dword [esi + 0x278], eax
call fcn.0042459a
lea edx, [esi + 0x27c]
mov ecx, eax
mov dword [ebp - 0x10], eax
call fcn.004133b5
mov ecx, edi
mov dword [esi + 0x284], eax
call fcn.0042459a
lea ecx, [ebx + eax]
lea edx, [esi + 0x288]
mov dword [ebp + 0xc], eax
call fcn.004133b5
and dword [ebp - 0x1c], 0
mov dword [esi + 0x290], eax
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x10]
push eax
mov dword [ebp - 4], 0x1c
call fcn.00671996
test eax, eax
jne 0x6661e9
push 0x20
mov ecx, 0x97bac0
call fcn.004029b9
mov ecx, eax
mov dword [ebp - 0x18], ecx
test ecx, ecx
mov byte [ebp - 4], 0x1d
je 0x6661ca
call fcn.006698f9
jmp 0x6661cc
xor eax, eax
push eax
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x1c
call fcn.00670bd2
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.006719ea
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp + 0xc]
mov dword [eax + 0x1c], ecx
mov eax, dword [ebp - 0x1c]
push 0x97af90
lea ecx, [eax + 0xc]
call fcn.006f59d1
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x20]
call fcn.0067179c
push 0x97af80
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x40]
call fcn.006f5b1a
mov ecx, eax
call fcn.006f5bb6
test al, al
je 0x666307
mov ecx, edi
call fcn.00424561
movsx ecx, ax
lea edx, [esi + 0x294]
call fcn.004133b5
mov ecx, edi
mov dword [esi + 0x29c], eax
call fcn.0042459a
lea edx, [esi + 0x2a0]
mov ecx, eax
mov dword [ebp - 0x10], eax
call fcn.004133b5
mov ecx, edi
mov dword [esi + 0x2a8], eax
call fcn.0042459a
lea ecx, [ebx + eax]
lea edx, [esi + 0x2ac]
mov dword [ebp + 0xc], eax
call fcn.004133b5
and dword [ebp - 0x1c], 0
mov dword [esi + 0x2b4], eax
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x10]
push eax
mov dword [ebp - 4], 0x1e
call fcn.00671996
test eax, eax
jne 0x6662e2
push 0x20
mov ecx, 0x97bac0
call fcn.004029b9
mov ecx, eax
mov dword [ebp - 0x18], ecx
test ecx, ecx
mov byte [ebp - 4], 0x1f
je 0x6662c3
call fcn.006698f9
jmp 0x6662c5
xor eax, eax
push eax
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x1e
call fcn.00670bd2
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.006719ea
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp + 0xc]
mov dword [eax + 0x1c], ecx
mov eax, dword [ebp - 0x1c]
push 0x97af80
lea ecx, [eax + 0xc]
call fcn.006f59d1
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x20]
call fcn.0067179c
push 0x97af70
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x40]
call fcn.006f5b1a
mov ecx, eax
call fcn.006f5bb6
test al, al
je 0x666400
mov ecx, edi
call fcn.00424561
movsx ecx, ax
lea edx, [esi + 0x2b8]
call fcn.004133b5
mov ecx, edi
mov dword [esi + 0x2c0], eax
call fcn.0042459a
lea edx, [esi + 0x2c4]
mov ecx, eax
mov dword [ebp - 0x10], eax
call fcn.004133b5
mov ecx, edi
mov dword [esi + 0x2cc], eax
call fcn.0042459a
lea ecx, [ebx + eax]
lea edx, [esi + 0x2d0]
mov dword [ebp + 0xc], eax
call fcn.004133b5
and dword [ebp - 0x1c], 0
mov dword [esi + 0x2d8], eax
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x10]
push eax
mov dword [ebp - 4], 0x20
call fcn.00671996
test eax, eax
jne 0x6663db
push 0x20
mov ecx, 0x97bac0
call fcn.004029b9
mov ecx, eax
mov dword [ebp - 0x18], ecx
test ecx, ecx
mov byte [ebp - 4], 0x21
je 0x6663bc
call fcn.006698f9
jmp 0x6663be
xor eax, eax
push eax
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x20
call fcn.00670bd2
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.006719ea
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp + 0xc]
mov dword [eax + 0x1c], ecx
mov eax, dword [ebp - 0x1c]
push 0x97af70
lea ecx, [eax + 0xc]
call fcn.006f59d1
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x20]
call fcn.0067179c
push 0x97b0f0
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x40]
call fcn.006f5b1a
mov ecx, eax
call fcn.006f5bb6
test al, al
je 0x6664f9
mov ecx, edi
call fcn.00424561
movsx ecx, ax
lea edx, [esi + 0x2dc]
call fcn.004133b5
mov ecx, edi
mov dword [esi + 0x2e4], eax
call fcn.0042459a
lea edx, [esi + 0x2e8]
mov ecx, eax
mov dword [ebp - 0x10], eax
call fcn.004133b5
mov ecx, edi
mov dword [esi + 0x2f0], eax
call fcn.0042459a
lea ecx, [ebx + eax]
lea edx, [esi + 0x2f4]
mov dword [ebp + 0xc], eax
call fcn.004133b5
and dword [ebp - 0x1c], 0
mov dword [esi + 0x2fc], eax
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x10]
push eax
mov dword [ebp - 4], 0x22
call fcn.00671996
test eax, eax
jne 0x6664d4
push 0x20
mov ecx, 0x97bac0
call fcn.004029b9
mov ecx, eax
mov dword [ebp - 0x18], ecx
test ecx, ecx
mov byte [ebp - 4], 0x23
je 0x6664b5
call fcn.006698f9
jmp 0x6664b7
xor eax, eax
push eax
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x22
call fcn.00670bd2
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.006719ea
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp + 0xc]
mov dword [eax + 0x1c], ecx
mov eax, dword [ebp - 0x1c]
push 0x97b0f0
lea ecx, [eax + 0xc]
call fcn.006f59d1
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x20]
call fcn.0067179c
push 0x97af60
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x40]
call fcn.006f5b1a
mov ecx, eax
call fcn.006f5bb6
test al, al
je 0x6665f2
mov ecx, edi
call fcn.00424561
movsx ecx, ax
lea edx, [esi + 0x300]
call fcn.004133b5
mov ecx, edi
mov dword [esi + 0x308], eax
call fcn.0042459a
lea edx, [esi + 0x30c]
mov ecx, eax
mov dword [ebp - 0x10], eax
call fcn.004133b5
mov ecx, edi
mov dword [esi + 0x314], eax
call fcn.0042459a
lea ecx, [ebx + eax]
lea edx, [esi + 0x318]
mov dword [ebp + 0xc], eax
call fcn.004133b5
and dword [ebp - 0x1c], 0
mov dword [esi + 0x320], eax
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x10]
push eax
mov dword [ebp - 4], 0x24
call fcn.00671996
test eax, eax
jne 0x6665cd
push 0x20
mov ecx, 0x97bac0
call fcn.004029b9
mov ecx, eax
mov dword [ebp - 0x18], ecx
test ecx, ecx
mov byte [ebp - 4], 0x25
je 0x6665ae
call fcn.006698f9
jmp 0x6665b0
xor eax, eax
push eax
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x24
call fcn.00670bd2
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.006719ea
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp + 0xc]
mov dword [eax + 0x1c], ecx
mov eax, dword [ebp - 0x1c]
push 0x97af60
lea ecx, [eax + 0xc]
call fcn.006f59d1
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x20]
call fcn.0067179c
push 0x97af50
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x40]
call fcn.006f5b1a
mov ecx, eax
call fcn.006f5bb6
test al, al
je 0x6666eb
mov ecx, edi
call fcn.00424561
movsx ecx, ax
lea edx, [esi + 0x324]
call fcn.004133b5
mov ecx, edi
mov dword [esi + 0x32c], eax
call fcn.0042459a
lea edx, [esi + 0x330]
mov ecx, eax
mov dword [ebp - 0x10], eax
call fcn.004133b5
mov ecx, edi
mov dword [esi + 0x338], eax
call fcn.0042459a
lea ecx, [ebx + eax]
lea edx, [esi + 0x33c]
mov dword [ebp + 0xc], eax
call fcn.004133b5
and dword [ebp - 0x1c], 0
mov dword [esi + 0x344], eax
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x10]
push eax
mov dword [ebp - 4], 0x26
call fcn.00671996
test eax, eax
jne 0x6666c6
push 0x20
mov ecx, 0x97bac0
call fcn.004029b9
mov ecx, eax
mov dword [ebp - 0x18], ecx
test ecx, ecx
mov byte [ebp - 4], 0x27
je 0x6666a7
call fcn.006698f9
jmp 0x6666a9
xor eax, eax
push eax
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x26
call fcn.00670bd2
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.006719ea
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp + 0xc]
mov dword [eax + 0x1c], ecx
mov eax, dword [ebp - 0x1c]
push 0x97af50
lea ecx, [eax + 0xc]
call fcn.006f59d1
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x20]
call fcn.0067179c
push 0x97af40
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x40]
call fcn.006f5b1a
mov ecx, eax
call fcn.006f5bb6
test al, al
je 0x6667e4
mov ecx, edi
call fcn.00424561
movsx ecx, ax
lea edx, [esi + 0x348]
call fcn.004133b5
mov ecx, edi
mov dword [esi + 0x350], eax
call fcn.0042459a
lea edx, [esi + 0x354]
mov ecx, eax
mov dword [ebp - 0x10], eax
call fcn.004133b5
mov ecx, edi
mov dword [esi + 0x35c], eax
call fcn.0042459a
lea ecx, [ebx + eax]
lea edx, [esi + 0x360]
mov dword [ebp + 0xc], eax
call fcn.004133b5
and dword [ebp - 0x1c], 0
mov dword [esi + 0x368], eax
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x10]
push eax
mov dword [ebp - 4], 0x28
call fcn.00671996
test eax, eax
jne 0x6667bf
push 0x20
mov ecx, 0x97bac0
call fcn.004029b9
mov ecx, eax
mov dword [ebp - 0x18], ecx
test ecx, ecx
mov byte [ebp - 4], 0x29
je 0x6667a0
call fcn.006698f9
jmp 0x6667a2
xor eax, eax
push eax
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x28
call fcn.00670bd2
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.006719ea
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp + 0xc]
mov dword [eax + 0x1c], ecx
mov eax, dword [ebp - 0x1c]
push 0x97af40
lea ecx, [eax + 0xc]
call fcn.006f59d1
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x20]
call fcn.0067179c
push 0x97af30
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x40]
call fcn.006f5b1a
mov ecx, eax
call fcn.006f5bb6
test al, al
je 0x6668dd
mov ecx, edi
call fcn.00424561
movsx ecx, ax
lea edx, [esi + 0x36c]
call fcn.004133b5
mov ecx, edi
mov dword [esi + 0x374], eax
call fcn.0042459a
lea edx, [esi + 0x378]
mov ecx, eax
mov dword [ebp - 0x10], eax
call fcn.004133b5
mov ecx, edi
mov dword [esi + 0x380], eax
call fcn.0042459a
lea ecx, [ebx + eax]
lea edx, [esi + 0x384]
mov dword [ebp + 0xc], eax
call fcn.004133b5
and dword [ebp - 0x1c], 0
mov dword [esi + 0x38c], eax
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x10]
push eax
mov dword [ebp - 4], 0x2a
call fcn.00671996
test eax, eax
jne 0x6668b8
push 0x20
mov ecx, 0x97bac0
call fcn.004029b9
mov ecx, eax
mov dword [ebp - 0x18], ecx
test ecx, ecx
mov byte [ebp - 4], 0x2b
je 0x666899
call fcn.006698f9
jmp 0x66689b
xor eax, eax
push eax
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x2a
call fcn.00670bd2
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.006719ea
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp + 0xc]
mov dword [eax + 0x1c], ecx
mov eax, dword [ebp - 0x1c]
push 0x97af30
lea ecx, [eax + 0xc]
call fcn.006f59d1
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x20]
call fcn.0067179c
push 0x97af20
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x40]
call fcn.006f5b1a
mov ecx, eax
call fcn.006f5bb6
test al, al
je 0x6669d6
mov ecx, edi
call fcn.00424561
movsx ecx, ax
lea edx, [esi + 0x39c]
call fcn.004133b5
mov ecx, edi
mov dword [esi + 0x3a4], eax
call fcn.0042459a
lea edx, [esi + 0x3a8]
mov ecx, eax
mov dword [ebp - 0x10], eax
call fcn.004133b5
mov ecx, edi
mov dword [esi + 0x3b0], eax
call fcn.0042459a
lea ecx, [ebx + eax]
lea edx, [esi + 0x3b4]
mov dword [ebp + 0xc], eax
call fcn.004133b5
and dword [ebp - 0x1c], 0
mov dword [esi + 0x3bc], eax
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x10]
push eax
mov dword [ebp - 4], 0x2c
call fcn.00671996
test eax, eax
jne 0x6669b1
push 0x20
mov ecx, 0x97bac0
call fcn.004029b9
mov ecx, eax
mov dword [ebp - 0x18], ecx
test ecx, ecx
mov byte [ebp - 4], 0x2d
je 0x666992
call fcn.006698f9
jmp 0x666994
xor eax, eax
push eax
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x2c
call fcn.00670bd2
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.006719ea
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp + 0xc]
mov dword [eax + 0x1c], ecx
mov eax, dword [ebp - 0x1c]
push 0x97af20
lea ecx, [eax + 0xc]
call fcn.006f59d1
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x20]
call fcn.0067179c
push 0x97af10
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x40]
call fcn.006f5b1a
mov ecx, eax
call fcn.006f5bb6
test al, al
je 0x666abd
mov ecx, edi
call fcn.00424561
movsx edx, ax
mov ecx, esi
call fcn.00668c15
mov ecx, edi
call fcn.0042459a
mov edx, eax
mov ecx, esi
mov dword [ebp - 0x10], eax
call fcn.00668c33
mov ecx, edi
call fcn.0042459a
lea edx, [ebx + eax]
mov ecx, esi
mov dword [ebp + 0xc], eax
call fcn.00668c51
lea ecx, [ebp - 0x20]
call fcn.00670b97
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x10]
push eax
mov dword [ebp - 4], 0x2e
call fcn.00671996
test eax, eax
jne 0x666a8c
push 0x20
call fcn.00402605
pop ecx
mov ecx, eax
mov dword [ebp - 0x18], ecx
test ecx, ecx
mov byte [ebp - 4], 0x2f
je 0x666a6d
call fcn.006698f9
jmp 0x666a6f
xor eax, eax
push eax
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x2e
call fcn.00670bd2
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.00670c6f
lea ecx, [ebp - 0x20]
call fcn.00670b9e
mov ecx, dword [ebp + 0xc]
mov dword [eax + 0x1c], ecx
push 0x97af10
lea ecx, [ebp - 0x20]
call fcn.00670b9e
mov ecx, eax
add ecx, 0xc
call fcn.006f59d1
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x20]
call fcn.00670b51
push 0x97af00
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x40]
call fcn.006f5b1a
mov ecx, eax
call fcn.006f5bb6
test al, al
je 0x666ba4
mov ecx, edi
call fcn.00424561
movsx edx, ax
mov ecx, esi
call fcn.00668c6f
mov ecx, edi
call fcn.0042459a
mov edx, eax
mov ecx, esi
mov dword [ebp - 0x10], eax
call fcn.00668c8d
mov ecx, edi
call fcn.0042459a
lea edx, [ebx + eax]
mov ecx, esi
mov dword [ebp + 0xc], eax
call fcn.00668cab
lea ecx, [ebp - 0x20]
call fcn.00670b97
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x10]
push eax
mov dword [ebp - 4], 0x30
call fcn.00671996
test eax, eax
jne 0x666b73
push 0x20
call fcn.00402605
pop ecx
mov ecx, eax
mov dword [ebp - 0x18], ecx
test ecx, ecx
mov byte [ebp - 4], 0x31
je 0x666b54
call fcn.006698f9
jmp 0x666b56
xor eax, eax
push eax
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x30
call fcn.00670bd2
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.00670c6f
lea ecx, [ebp - 0x20]
call fcn.00670b9e
mov ecx, dword [ebp + 0xc]
mov dword [eax + 0x1c], ecx
push 0x97af00
lea ecx, [ebp - 0x20]
call fcn.00670b9e
mov ecx, eax
add ecx, 0xc
call fcn.006f59d1
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x20]
call fcn.00670b51
push 0x97aef0
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x40]
call fcn.006f5b1a
mov ecx, eax
call fcn.006f5bb6
test al, al
je 0x666c8b
mov ecx, edi
call fcn.00424561
movsx edx, ax
mov ecx, esi
call fcn.00668cc9
mov ecx, edi
call fcn.0042459a
mov edx, eax
mov ecx, esi
mov dword [ebp - 0x10], eax
call fcn.00668ce7
mov ecx, edi
call fcn.0042459a
lea edx, [ebx + eax]
mov ecx, esi
mov dword [ebp + 0xc], eax
call fcn.00668d05
lea ecx, [ebp - 0x20]
call fcn.00670b97
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x10]
push eax
mov dword [ebp - 4], 0x32
call fcn.00671996
test eax, eax
jne 0x666c5a
push 0x20
call fcn.00402605
pop ecx
mov ecx, eax
mov dword [ebp - 0x18], ecx
test ecx, ecx
mov byte [ebp - 4], 0x33
je 0x666c3b
call fcn.006698f9
jmp 0x666c3d
xor eax, eax
push eax
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x32
call fcn.00670bd2
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.00670c6f
lea ecx, [ebp - 0x20]
call fcn.00670b9e
mov ecx, dword [ebp + 0xc]
mov dword [eax + 0x1c], ecx
push 0x97aef0
lea ecx, [ebp - 0x20]
call fcn.00670b9e
mov ecx, eax
add ecx, 0xc
call fcn.006f59d1
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x20]
call fcn.00670b51
push 0x97aee0
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x40]
call fcn.006f5b1a
mov ecx, eax
call fcn.006f5bb6
test al, al
je 0x666d72
mov ecx, edi
call fcn.00424561
movsx edx, ax
mov ecx, esi
call fcn.00668d23
mov ecx, edi
call fcn.0042459a
mov edx, eax
mov ecx, esi
mov dword [ebp - 0x10], eax
call fcn.00668d41
mov ecx, edi
call fcn.0042459a
lea edx, [ebx + eax]
mov ecx, esi
mov dword [ebp + 0xc], eax
call fcn.00668d5f
lea ecx, [ebp - 0x20]
call fcn.00670b97
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x10]
push eax
mov dword [ebp - 4], 0x34
call fcn.00671996
test eax, eax
jne 0x666d41
push 0x20
call fcn.00402605
pop ecx
mov ecx, eax
mov dword [ebp - 0x18], ecx
test ecx, ecx
mov byte [ebp - 4], 0x35
je 0x666d22
call fcn.006698f9
jmp 0x666d24
xor eax, eax
push eax
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x34
call fcn.00670bd2
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.00670c6f
lea ecx, [ebp - 0x20]
call fcn.00670b9e
mov ecx, dword [ebp + 0xc]
mov dword [eax + 0x1c], ecx
push 0x97aee0
lea ecx, [ebp - 0x20]
call fcn.00670b9e
mov ecx, eax
add ecx, 0xc
call fcn.006f59d1
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x20]
call fcn.00670b51
push 0x97aed0
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x40]
call fcn.006f5b1a
mov ecx, eax
call fcn.006f5bb6
test al, al
je 0x666e59
mov ecx, edi
call fcn.00424561
movsx edx, ax
mov ecx, esi
call fcn.00668d7d
mov ecx, edi
call fcn.0042459a
mov edx, eax
mov ecx, esi
mov dword [ebp - 0x10], eax
call fcn.00668d9b
mov ecx, edi
call fcn.0042459a
lea edx, [ebx + eax]
mov ecx, esi
mov dword [ebp + 0xc], eax
call fcn.00668db9
lea ecx, [ebp - 0x20]
call fcn.00670b97
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x10]
push eax
mov dword [ebp - 4], 0x36
call fcn.00671996
test eax, eax
jne 0x666e28
push 0x20
call fcn.00402605
pop ecx
mov ecx, eax
mov dword [ebp - 0x18], ecx
test ecx, ecx
mov byte [ebp - 4], 0x37
je 0x666e09
call fcn.006698f9
jmp 0x666e0b
xor eax, eax
push eax
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x36
call fcn.00670bd2
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.00670c6f
lea ecx, [ebp - 0x20]
call fcn.00670b9e
mov ecx, dword [ebp + 0xc]
mov dword [eax + 0x1c], ecx
push 0x97aed0
lea ecx, [ebp - 0x20]
call fcn.00670b9e
mov ecx, eax
add ecx, 0xc
call fcn.006f59d1
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x20]
call fcn.00670b51
push 0x97aec0
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x40]
call fcn.006f5b1a
mov ecx, eax
call fcn.006f5bb6
test al, al
je 0x666f40
mov ecx, edi
call fcn.00424561
movsx edx, ax
mov ecx, esi
call fcn.00668dd7
mov ecx, edi
call fcn.0042459a
mov edx, eax
mov ecx, esi
mov dword [ebp - 0x10], eax
call fcn.00668df5
mov ecx, edi
call fcn.0042459a
lea edx, [ebx + eax]
mov ecx, esi
mov dword [ebp + 0xc], eax
call fcn.00668e13
lea ecx, [ebp - 0x20]
call fcn.00670b97
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x10]
push eax
mov dword [ebp - 4], 0x38
call fcn.00671996
test eax, eax
jne 0x666f0f
push 0x20
call fcn.00402605
pop ecx
mov ecx, eax
mov dword [ebp - 0x18], ecx
test ecx, ecx
mov byte [ebp - 4], 0x39
je 0x666ef0
call fcn.006698f9
jmp 0x666ef2
xor eax, eax
push eax
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x38
call fcn.00670bd2
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.00670c6f
lea ecx, [ebp - 0x20]
call fcn.00670b9e
mov ecx, dword [ebp + 0xc]
mov dword [eax + 0x1c], ecx
push 0x97aec0
lea ecx, [ebp - 0x20]
call fcn.00670b9e
mov ecx, eax
add ecx, 0xc
call fcn.006f59d1
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x20]
call fcn.00670b51
push 0x97aeb0
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x40]
call fcn.006f5b1a
mov ecx, eax
call fcn.006f5bb6
test al, al
je 0x667027
mov ecx, edi
call fcn.00424561
movsx edx, ax
mov ecx, esi
call fcn.00668e31
mov ecx, edi
call fcn.0042459a
mov edx, eax
mov ecx, esi
mov dword [ebp - 0x10], eax
call fcn.00668e4f
mov ecx, edi
call fcn.0042459a
lea edx, [ebx + eax]
mov ecx, esi
mov dword [ebp + 0xc], eax
call fcn.00668e6d
lea ecx, [ebp - 0x20]
call fcn.00670b97
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x10]
push eax
mov dword [ebp - 4], 0x3a
call fcn.00671996
test eax, eax
jne 0x666ff6
push 0x20
call fcn.00402605
pop ecx
mov ecx, eax
mov dword [ebp - 0x18], ecx
test ecx, ecx
mov byte [ebp - 4], 0x3b
je 0x666fd7
call fcn.006698f9
jmp 0x666fd9
xor eax, eax
push eax
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x3a
call fcn.00670bd2
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.00670c6f
lea ecx, [ebp - 0x20]
call fcn.00670b9e
mov ecx, dword [ebp + 0xc]
mov dword [eax + 0x1c], ecx
push 0x97aeb0
lea ecx, [ebp - 0x20]
call fcn.00670b9e
mov ecx, eax
add ecx, 0xc
call fcn.006f59d1
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x20]
call fcn.00670b51
push 0x97b0e0
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x40]
call fcn.006f5b1a
mov ecx, eax
call fcn.006f5bb6
test al, al
je 0x66710e
mov ecx, edi
call fcn.00424561
movsx edx, ax
mov ecx, esi
call fcn.00668e8b
mov ecx, edi
call fcn.0042459a
mov edx, eax
mov ecx, esi
mov dword [ebp - 0x10], eax
call fcn.00668ea9
mov ecx, edi
call fcn.0042459a
lea edx, [ebx + eax]
mov ecx, esi
mov dword [ebp + 0xc], eax
call fcn.00668ec7
lea ecx, [ebp - 0x20]
call fcn.00670b97
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x10]
push eax
mov dword [ebp - 4], 0x3c
call fcn.00671996
test eax, eax
jne 0x6670dd
push 0x20
call fcn.00402605
pop ecx
mov ecx, eax
mov dword [ebp - 0x18], ecx
test ecx, ecx
mov byte [ebp - 4], 0x3d
je 0x6670be
call fcn.006698f9
jmp 0x6670c0
xor eax, eax
push eax
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x3c
call fcn.00670bd2
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.00670c6f
lea ecx, [ebp - 0x20]
call fcn.00670b9e
mov ecx, dword [ebp + 0xc]
mov dword [eax + 0x1c], ecx
push 0x97b0e0
lea ecx, [ebp - 0x20]
call fcn.00670b9e
mov ecx, eax
add ecx, 0xc
call fcn.006f59d1
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x20]
call fcn.00670b51
push 0x97aea0
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x40]
call fcn.006f5b1a
mov ecx, eax
call fcn.006f5bb6
test al, al
je 0x6671f5
mov ecx, edi
call fcn.00424561
movsx edx, ax
mov ecx, esi
call fcn.00668ee5
mov ecx, edi
call fcn.0042459a
mov edx, eax
mov ecx, esi
mov dword [ebp - 0x10], eax
call fcn.00668f03
mov ecx, edi
call fcn.0042459a
lea edx, [ebx + eax]
mov ecx, esi
mov dword [ebp + 0xc], eax
call fcn.00668f21
lea ecx, [ebp - 0x20]
call fcn.00670b97
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x10]
push eax
mov dword [ebp - 4], 0x3e
call fcn.00671996
test eax, eax
jne 0x6671c4
push 0x20
call fcn.00402605
pop ecx
mov ecx, eax
mov dword [ebp - 0x18], ecx
test ecx, ecx
mov byte [ebp - 4], 0x3f
je 0x6671a5
call fcn.006698f9
jmp 0x6671a7
xor eax, eax
push eax
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x3e
call fcn.00670bd2
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.00670c6f
lea ecx, [ebp - 0x20]
call fcn.00670b9e
mov ecx, dword [ebp + 0xc]
mov dword [eax + 0x1c], ecx
push 0x97aea0
lea ecx, [ebp - 0x20]
call fcn.00670b9e
mov ecx, eax
add ecx, 0xc
call fcn.006f59d1
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x20]
call fcn.00670b51
push 0x97b0d0
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x40]
call fcn.006f5b1a
mov ecx, eax
call fcn.006f5bb6
test al, al
je 0x6672dc
mov ecx, edi
call fcn.00424561
movsx edx, ax
mov ecx, esi
call fcn.00668f3f
mov ecx, edi
call fcn.0042459a
mov edx, eax
mov ecx, esi
mov dword [ebp - 0x10], eax
call fcn.00668f5d
mov ecx, edi
call fcn.0042459a
lea edx, [ebx + eax]
mov ecx, esi
mov dword [ebp + 0xc], eax
call fcn.00668f7b
lea ecx, [ebp - 0x20]
call fcn.00670b97
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x10]
push eax
mov dword [ebp - 4], pe_nt_image_headers32
call fcn.00671996
test eax, eax
jne 0x6672ab
push 0x20
call fcn.00402605
pop ecx
mov ecx, eax
mov dword [ebp - 0x18], ecx
test ecx, ecx
mov byte [ebp - 4], 0x41
je 0x66728c
call fcn.006698f9
jmp 0x66728e
xor eax, eax
push eax
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], pe_nt_image_headers32
call fcn.00670bd2
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.00670c6f
lea ecx, [ebp - 0x20]
call fcn.00670b9e
mov ecx, dword [ebp + 0xc]
mov dword [eax + 0x1c], ecx
push 0x97b0d0
lea ecx, [ebp - 0x20]
call fcn.00670b9e
mov ecx, eax
add ecx, 0xc
call fcn.006f59d1
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x20]
call fcn.00670b51
push 0x97b0c0
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x40]
call fcn.006f5b1a
mov ecx, eax
call fcn.006f5bb6
test al, al
je 0x6673c3
mov ecx, edi
call fcn.00424561
movsx edx, ax
mov ecx, esi
call fcn.00668f99
mov ecx, edi
call fcn.0042459a
mov edx, eax
mov ecx, esi
mov dword [ebp - 0x10], eax
call fcn.00668fb7
mov ecx, edi
call fcn.0042459a
lea edx, [ebx + eax]
mov ecx, esi
mov dword [ebp + 0xc], eax
call fcn.00668fd5
lea ecx, [ebp - 0x20]
call fcn.00670b97
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x10]
push eax
mov dword [ebp - 4], 0x42
call fcn.00671996
test eax, eax
jne 0x667392
push 0x20
call fcn.00402605
pop ecx
mov ecx, eax
mov dword [ebp - 0x18], ecx
test ecx, ecx
mov byte [ebp - 4], 0x43
je 0x667373
call fcn.006698f9
jmp 0x667375
xor eax, eax
push eax
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x42
call fcn.00670bd2
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.00670c6f
lea ecx, [ebp - 0x20]
call fcn.00670b9e
mov ecx, dword [ebp + 0xc]
mov dword [eax + 0x1c], ecx
push 0x97b0c0
lea ecx, [ebp - 0x20]
call fcn.00670b9e
mov ecx, eax
add ecx, 0xc
call fcn.006f59d1
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x20]
call fcn.00670b51
push 0x97b0b0
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x40]
call fcn.006f5b1a
mov ecx, eax
call fcn.006f5bb6
test al, al
je 0x6674aa
mov ecx, edi
call fcn.00424561
movsx edx, ax
mov ecx, esi
call fcn.00668ff3
mov ecx, edi
call fcn.0042459a
mov edx, eax
mov ecx, esi
mov dword [ebp - 0x10], eax
call fcn.00669011
mov ecx, edi
call fcn.0042459a
lea edx, [ebx + eax]
mov ecx, esi
mov dword [ebp + 0xc], eax
call fcn.0066902f
lea ecx, [ebp - 0x20]
call fcn.00670b97
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x10]
push eax
mov dword [ebp - 4], 0x44
call fcn.00671996
test eax, eax
jne 0x667479
push 0x20
call fcn.00402605
pop ecx
mov ecx, eax
mov dword [ebp - 0x18], ecx
test ecx, ecx
mov byte [ebp - 4], 0x45
je 0x66745a
call fcn.006698f9
jmp 0x66745c
xor eax, eax
push eax
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x44
call fcn.00670bd2
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.00670c6f
lea ecx, [ebp - 0x20]
call fcn.00670b9e
mov ecx, dword [ebp + 0xc]
mov dword [eax + 0x1c], ecx
push 0x97b0b0
lea ecx, [ebp - 0x20]
call fcn.00670b9e
mov ecx, eax
add ecx, 0xc
call fcn.006f59d1
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x20]
call fcn.00670b51
push 0x97ae90
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x40]
call fcn.006f5b1a
mov ecx, eax
call fcn.006f5bb6
test al, al
je 0x667591
mov ecx, edi
call fcn.00424561
movsx edx, ax
mov ecx, esi
call fcn.0066904d
mov ecx, edi
call fcn.0042459a
mov edx, eax
mov ecx, esi
mov dword [ebp - 0x10], eax
call fcn.0066906b
mov ecx, edi
call fcn.0042459a
lea edx, [ebx + eax]
mov ecx, esi
mov dword [ebp + 0xc], eax
call fcn.00669089
lea ecx, [ebp - 0x20]
call fcn.00670b97
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x10]
push eax
mov dword [ebp - 4], 0x46
call fcn.00671996
test eax, eax
jne 0x667560
push 0x20
call fcn.00402605
pop ecx
mov ecx, eax
mov dword [ebp - 0x18], ecx
test ecx, ecx
mov byte [ebp - 4], 0x47
je 0x667541
call fcn.006698f9
jmp 0x667543
xor eax, eax
push eax
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x46
call fcn.00670bd2
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.00670c6f
lea ecx, [ebp - 0x20]
call fcn.00670b9e
mov ecx, dword [ebp + 0xc]
mov dword [eax + 0x1c], ecx
push 0x97ae90
lea ecx, [ebp - 0x20]
call fcn.00670b9e
mov ecx, eax
add ecx, 0xc
call fcn.006f59d1
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x20]
call fcn.00670b51
push 0x97b0a0
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x40]
call fcn.006f5b1a
mov ecx, eax
call fcn.006f5bb6
test al, al
je 0x667678
mov ecx, edi
call fcn.00424561
movsx edx, ax
mov ecx, esi
call fcn.006690a7
mov ecx, edi
call fcn.0042459a
mov edx, eax
mov ecx, esi
mov dword [ebp - 0x10], eax
call fcn.006690c5
mov ecx, edi
call fcn.0042459a
lea edx, [ebx + eax]
mov ecx, esi
mov dword [ebp + 0xc], eax
call fcn.006690e3
lea ecx, [ebp - 0x20]
call fcn.00670b97
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x10]
push eax
mov dword [ebp - 4], 0x48
call fcn.00671996
test eax, eax
jne 0x667647
push 0x20
call fcn.00402605
pop ecx
mov ecx, eax
mov dword [ebp - 0x18], ecx
test ecx, ecx
mov byte [ebp - 4], 0x49
je 0x667628
call fcn.006698f9
jmp 0x66762a
xor eax, eax
push eax
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x48
call fcn.00670bd2
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.00670c6f
lea ecx, [ebp - 0x20]
call fcn.00670b9e
mov ecx, dword [ebp + 0xc]
mov dword [eax + 0x1c], ecx
push 0x97b0a0
lea ecx, [ebp - 0x20]
call fcn.00670b9e
mov ecx, eax
add ecx, 0xc
call fcn.006f59d1
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x20]
call fcn.00670b51
push 0x97ae80
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x40]
call fcn.006f5b1a
mov ecx, eax
call fcn.006f5bb6
test al, al
je 0x66775f
mov ecx, edi
call fcn.00424561
movsx edx, ax
mov ecx, esi
call fcn.00669101
mov ecx, edi
call fcn.0042459a
mov edx, eax
mov ecx, esi
mov dword [ebp - 0x10], eax
call fcn.0066911f
mov ecx, edi
call fcn.0042459a
lea edx, [ebx + eax]
mov ecx, esi
mov dword [ebp + 0xc], eax
call fcn.0066913d
lea ecx, [ebp - 0x20]
call fcn.00670b97
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x10]
push eax
mov dword [ebp - 4], 0x4a
call fcn.00671996
test eax, eax
jne 0x66772e
push 0x20
call fcn.00402605
pop ecx
mov ecx, eax
mov dword [ebp - 0x18], ecx
test ecx, ecx
mov byte [ebp - 4], 0x4b
je 0x66770f
call fcn.006698f9
jmp 0x667711
xor eax, eax
push eax
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x4a
call fcn.00670bd2
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.00670c6f
lea ecx, [ebp - 0x20]
call fcn.00670b9e
mov ecx, dword [ebp + 0xc]
mov dword [eax + 0x1c], ecx
push 0x97ae80
lea ecx, [ebp - 0x20]
call fcn.00670b9e
mov ecx, eax
add ecx, 0xc
call fcn.006f59d1
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x20]
call fcn.00670b51
push 0x97ae70
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x40]
call fcn.006f5b1a
mov ecx, eax
call fcn.006f5bb6
test al, al
je 0x667846
mov ecx, edi
call fcn.00424561
movsx edx, ax
mov ecx, esi
call fcn.0066915b
mov ecx, edi
call fcn.0042459a
mov edx, eax
mov ecx, esi
mov dword [ebp - 0x10], eax
call fcn.00669179
mov ecx, edi
call fcn.0042459a
lea edx, [ebx + eax]
mov ecx, esi
mov dword [ebp + 0xc], eax
call fcn.00669197
lea ecx, [ebp - 0x20]
call fcn.00670b97
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x10]
push eax
mov dword [ebp - 4], 0x4c
call fcn.00671996
test eax, eax
jne 0x667815
push 0x20
call fcn.00402605
pop ecx
mov ecx, eax
mov dword [ebp - 0x18], ecx
test ecx, ecx
mov byte [ebp - 4], 0x4d
je 0x6677f6
call fcn.006698f9
jmp 0x6677f8
xor eax, eax
push eax
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x4c
call fcn.00670bd2
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.00670c6f
lea ecx, [ebp - 0x20]
call fcn.00670b9e
mov ecx, dword [ebp + 0xc]
mov dword [eax + 0x1c], ecx
push 0x97ae70
lea ecx, [ebp - 0x20]
call fcn.00670b9e
mov ecx, eax
add ecx, 0xc
call fcn.006f59d1
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x20]
call fcn.00670b51
push 0x97ae60
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x40]
call fcn.006f5b1a
mov ecx, eax
call fcn.006f5bb6
test al, al
je 0x66792d
mov ecx, edi
call fcn.00424561
movsx edx, ax
mov ecx, esi
call fcn.006691b5
mov ecx, edi
call fcn.0042459a
mov edx, eax
mov ecx, esi
mov dword [ebp - 0x10], eax
call fcn.006691d3
mov ecx, edi
call fcn.0042459a
lea edx, [ebx + eax]
mov ecx, esi
mov dword [ebp + 0xc], eax
call fcn.006691f1
lea ecx, [ebp - 0x20]
call fcn.00670b97
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x10]
push eax
mov dword [ebp - 4], 0x4e
call fcn.00671996
test eax, eax
jne 0x6678fc
push 0x20
call fcn.00402605
pop ecx
mov ecx, eax
mov dword [ebp - 0x18], ecx
test ecx, ecx
mov byte [ebp - 4], 0x4f
je 0x6678dd
call fcn.006698f9
jmp 0x6678df
xor eax, eax
push eax
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x4e
call fcn.00670bd2
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.00670c6f
lea ecx, [ebp - 0x20]
call fcn.00670b9e
mov ecx, dword [ebp + 0xc]
mov dword [eax + 0x1c], ecx
push 0x97ae60
lea ecx, [ebp - 0x20]
call fcn.00670b9e
mov ecx, eax
add ecx, 0xc
call fcn.006f59d1
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x20]
call fcn.00670b51
push 0x97b090
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x40]
call fcn.006f5b1a
mov ecx, eax
call fcn.006f5bb6
test al, al
je 0x667a14
mov ecx, edi
call fcn.00424561
movsx edx, ax
mov ecx, esi
call fcn.0066920f
mov ecx, edi
call fcn.0042459a
mov edx, eax
mov ecx, esi
mov dword [ebp - 0x10], eax
call fcn.0066922d
mov ecx, edi
call fcn.0042459a
lea edx, [ebx + eax]
mov ecx, esi
mov dword [ebp + 0xc], eax
call fcn.0066924b
lea ecx, [ebp - 0x20]
call fcn.00670b97
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x10]
push eax
mov dword [ebp - 4], 0x50
call fcn.00671996
test eax, eax
jne 0x6679e3
push 0x20
call fcn.00402605
pop ecx
mov ecx, eax
mov dword [ebp - 0x18], ecx
test ecx, ecx
mov byte [ebp - 4], 0x51
je 0x6679c4
call fcn.006698f9
jmp 0x6679c6
xor eax, eax
push eax
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x50
call fcn.00670bd2
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.00670c6f
lea ecx, [ebp - 0x20]
call fcn.00670b9e
mov ecx, dword [ebp + 0xc]
mov dword [eax + 0x1c], ecx
push 0x97b090
lea ecx, [ebp - 0x20]
call fcn.00670b9e
mov ecx, eax
add ecx, 0xc
call fcn.006f59d1
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x20]
call fcn.00670b51
push 0x97ae50
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x40]
call fcn.006f5b1a
mov ecx, eax
call fcn.006f5bb6
test al, al
je 0x667afb
mov ecx, edi
call fcn.00424561
movsx edx, ax
mov ecx, esi
call fcn.00669269
mov ecx, edi
call fcn.0042459a
mov edx, eax
mov ecx, esi
mov dword [ebp - 0x10], eax
call fcn.00669287
mov ecx, edi
call fcn.0042459a
lea edx, [ebx + eax]
mov ecx, esi
mov dword [ebp + 0xc], eax
call fcn.006692a5
lea ecx, [ebp - 0x20]
call fcn.00670b97
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x10]
push eax
mov dword [ebp - 4], 0x52
call fcn.00671996
test eax, eax
jne 0x667aca
push 0x20
call fcn.00402605
pop ecx
mov ecx, eax
mov dword [ebp - 0x18], ecx
test ecx, ecx
mov byte [ebp - 4], 0x53
je 0x667aab
call fcn.006698f9
jmp 0x667aad
xor eax, eax
push eax
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x52
call fcn.00670bd2
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.00670c6f
lea ecx, [ebp - 0x20]
call fcn.00670b9e
mov ecx, dword [ebp + 0xc]
mov dword [eax + 0x1c], ecx
push 0x97ae50
lea ecx, [ebp - 0x20]
call fcn.00670b9e
mov ecx, eax
add ecx, 0xc
call fcn.006f59d1
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x20]
call fcn.00670b51
push 0x97ae40
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x40]
call fcn.006f5b1a
mov ecx, eax
call fcn.006f5bb6
test al, al
je 0x667be2
mov ecx, edi
call fcn.00424561
movsx edx, ax
mov ecx, esi
call fcn.006692c3
mov ecx, edi
call fcn.0042459a
mov edx, eax
mov ecx, esi
mov dword [ebp - 0x10], eax
call fcn.006692e1
mov ecx, edi
call fcn.0042459a
lea edx, [ebx + eax]
mov ecx, esi
mov dword [ebp + 0xc], eax
call fcn.006692ff
lea ecx, [ebp - 0x20]
call fcn.00670b97
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x10]
push eax
mov dword [ebp - 4], 0x54
call fcn.00671996
test eax, eax
jne 0x667bb1
push 0x20
call fcn.00402605
pop ecx
mov ecx, eax
mov dword [ebp - 0x18], ecx
test ecx, ecx
mov byte [ebp - 4], 0x55
je 0x667b92
call fcn.006698f9
jmp 0x667b94
xor eax, eax
push eax
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x54
call fcn.00670bd2
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.00670c6f
lea ecx, [ebp - 0x20]
call fcn.00670b9e
mov ecx, dword [ebp + 0xc]
mov dword [eax + 0x1c], ecx
push 0x97ae40
lea ecx, [ebp - 0x20]
call fcn.00670b9e
mov ecx, eax
add ecx, 0xc
call fcn.006f59d1
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x20]
call fcn.00670b51
push 0x97ae30
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x40]
call fcn.006f5b1a
mov ecx, eax
call fcn.006f5bb6
test al, al
je 0x667cc9
mov ecx, edi
call fcn.00424561
movsx edx, ax
mov ecx, esi
call fcn.0066931d
mov ecx, edi
call fcn.0042459a
mov edx, eax
mov ecx, esi
mov dword [ebp - 0x10], eax
call fcn.0066933b
mov ecx, edi
call fcn.0042459a
lea edx, [ebx + eax]
mov ecx, esi
mov dword [ebp + 0xc], eax
call fcn.00669359
lea ecx, [ebp - 0x20]
call fcn.00670b97
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x10]
push eax
mov dword [ebp - 4], 0x56
call fcn.00671996
test eax, eax
jne 0x667c98
push 0x20
call fcn.00402605
pop ecx
mov ecx, eax
mov dword [ebp - 0x18], ecx
test ecx, ecx
mov byte [ebp - 4], 0x57
je 0x667c79
call fcn.006698f9
jmp 0x667c7b
xor eax, eax
push eax
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x56
call fcn.00670bd2
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.00670c6f
lea ecx, [ebp - 0x20]
call fcn.00670b9e
mov ecx, dword [ebp + 0xc]
mov dword [eax + 0x1c], ecx
push 0x97ae30
lea ecx, [ebp - 0x20]
call fcn.00670b9e
mov ecx, eax
add ecx, 0xc
call fcn.006f59d1
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x20]
call fcn.00670b51
push 0x97ae20
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x40]
call fcn.006f5b1a
mov ecx, eax
call fcn.006f5bb6
test al, al
je 0x667db0
mov ecx, edi
call fcn.00424561
movsx edx, ax
mov ecx, esi
call fcn.00669377
mov ecx, edi
call fcn.0042459a
mov edx, eax
mov ecx, esi
mov dword [ebp - 0x10], eax
call fcn.00669395
mov ecx, edi
call fcn.0042459a
lea edx, [ebx + eax]
mov ecx, esi
mov dword [ebp + 0xc], eax
call fcn.006693b3
lea ecx, [ebp - 0x20]
call fcn.00670b97
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x10]
push eax
mov dword [ebp - 4], 0x58
call fcn.00671996
test eax, eax
jne 0x667d7f
push 0x20
call fcn.00402605
pop ecx
mov ecx, eax
mov dword [ebp - 0x18], ecx
test ecx, ecx
mov byte [ebp - 4], 0x59
je 0x667d60
call fcn.006698f9
jmp 0x667d62
xor eax, eax
push eax
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x58
call fcn.00670bd2
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.00670c6f
lea ecx, [ebp - 0x20]
call fcn.00670b9e
mov ecx, dword [ebp + 0xc]
mov dword [eax + 0x1c], ecx
push 0x97ae20
lea ecx, [ebp - 0x20]
call fcn.00670b9e
mov ecx, eax
add ecx, 0xc
call fcn.006f59d1
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x20]
call fcn.00670b51
push 0x97ae10
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x40]
call fcn.006f5b1a
mov ecx, eax
call fcn.006f5bb6
test al, al
je 0x667e97
mov ecx, edi
call fcn.00424561
movsx edx, ax
mov ecx, esi
call fcn.006693d1
mov ecx, edi
call fcn.0042459a
mov edx, eax
mov ecx, esi
mov dword [ebp - 0x10], eax
call fcn.006693ef
mov ecx, edi
call fcn.0042459a
lea edx, [ebx + eax]
mov ecx, esi
mov dword [ebp + 0xc], eax
call fcn.0066940d
lea ecx, [ebp - 0x20]
call fcn.00670b97
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x10]
push eax
mov dword [ebp - 4], 0x5a
call fcn.00671996
test eax, eax
jne 0x667e66
push 0x20
call fcn.00402605
pop ecx
mov ecx, eax
mov dword [ebp - 0x18], ecx
test ecx, ecx
mov byte [ebp - 4], 0x5b
je 0x667e47
call fcn.006698f9
jmp 0x667e49
xor eax, eax
push eax
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x5a
call fcn.00670bd2
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.00670c6f
lea ecx, [ebp - 0x20]
call fcn.00670b9e
mov ecx, dword [ebp + 0xc]
mov dword [eax + 0x1c], ecx
push 0x97ae10
lea ecx, [ebp - 0x20]
call fcn.00670b9e
mov ecx, eax
add ecx, 0xc
call fcn.006f59d1
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x20]
call fcn.00670b51
push 0x97ae00
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x40]
call fcn.006f5b1a
mov ecx, eax
call fcn.006f5bb6
test al, al
je 0x667f7e
mov ecx, edi
call fcn.00424561
movsx edx, ax
mov ecx, esi
call fcn.0066942b
mov ecx, edi
call fcn.0042459a
mov edx, eax
mov ecx, esi
mov dword [ebp - 0x10], eax
call fcn.00669449
mov ecx, edi
call fcn.0042459a
lea edx, [ebx + eax]
mov ecx, esi
mov dword [ebp + 0xc], eax
call fcn.00669467
lea ecx, [ebp - 0x20]
call fcn.00670b97
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x10]
push eax
mov dword [ebp - 4], 0x5c
call fcn.00671996
test eax, eax
jne 0x667f4d
push 0x20
call fcn.00402605
pop ecx
mov ecx, eax
mov dword [ebp - 0x18], ecx
test ecx, ecx
mov byte [ebp - 4], 0x5d
je 0x667f2e
call fcn.006698f9
jmp 0x667f30
xor eax, eax
push eax
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x5c
call fcn.00670bd2
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.00670c6f
lea ecx, [ebp - 0x20]
call fcn.00670b9e
mov ecx, dword [ebp + 0xc]
mov dword [eax + 0x1c], ecx
push 0x97ae00
lea ecx, [ebp - 0x20]
call fcn.00670b9e
mov ecx, eax
add ecx, 0xc
call fcn.006f59d1
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x20]
call fcn.00670b51
push 0x97adf0
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x40]
call fcn.006f5b1a
mov ecx, eax
call fcn.006f5bb6
test al, al
je 0x668065
mov ecx, edi
call fcn.00424561
movsx edx, ax
mov ecx, esi
call fcn.00669485
mov ecx, edi
call fcn.0042459a
mov edx, eax
mov ecx, esi
mov dword [ebp - 0x10], eax
call fcn.006694a3
mov ecx, edi
call fcn.0042459a
lea edx, [ebx + eax]
mov ecx, esi
mov dword [ebp + 0xc], eax
call fcn.006694c1
lea ecx, [ebp - 0x20]
call fcn.00670b97
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x10]
push eax
mov dword [ebp - 4], 0x5e
call fcn.00671996
test eax, eax
jne 0x668034
push 0x20
call fcn.00402605
pop ecx
mov ecx, eax
mov dword [ebp - 0x18], ecx
test ecx, ecx
mov byte [ebp - 4], 0x5f
je 0x668015
call fcn.006698f9
jmp 0x668017
xor eax, eax
push eax
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x5e
call fcn.00670bd2
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.00670c6f
lea ecx, [ebp - 0x20]
call fcn.00670b9e
mov ecx, dword [ebp + 0xc]
mov dword [eax + 0x1c], ecx
push 0x97adf0
lea ecx, [ebp - 0x20]
call fcn.00670b9e
mov ecx, eax
add ecx, 0xc
call fcn.006f59d1
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x20]
call fcn.00670b51
push 0x97ade0
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x40]
call fcn.006f5b1a
mov ecx, eax
call fcn.006f5bb6
test al, al
je 0x66814c
mov ecx, edi
call fcn.00424561
movsx edx, ax
mov ecx, esi
call fcn.006694df
mov ecx, edi
call fcn.0042459a
mov edx, eax
mov ecx, esi
mov dword [ebp - 0x10], eax
call fcn.006694fd
mov ecx, edi
call fcn.0042459a
lea edx, [ebx + eax]
mov ecx, esi
mov dword [ebp + 0xc], eax
call fcn.0066951b
lea ecx, [ebp - 0x20]
call fcn.00670b97
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x10]
push eax
mov dword [ebp - 4], 0x60
call fcn.00671996
test eax, eax
jne 0x66811b
push 0x20
call fcn.00402605
pop ecx
mov ecx, eax
mov dword [ebp - 0x18], ecx
test ecx, ecx
mov byte [ebp - 4], 0x61
je 0x6680fc
call fcn.006698f9
jmp 0x6680fe
xor eax, eax
push eax
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x60
call fcn.00670bd2
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.00670c6f
lea ecx, [ebp - 0x20]
call fcn.00670b9e
mov ecx, dword [ebp + 0xc]
mov dword [eax + 0x1c], ecx
push 0x97ade0
lea ecx, [ebp - 0x20]
call fcn.00670b9e
mov ecx, eax
add ecx, 0xc
call fcn.006f59d1
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x20]
call fcn.00670b51
push 0x97add0
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x40]
call fcn.006f5b1a
mov ecx, eax
call fcn.006f5bb6
test al, al
je 0x668233
mov ecx, edi
call fcn.00424561
movsx edx, ax
mov ecx, esi
call fcn.00669539
mov ecx, edi
call fcn.0042459a
mov edx, eax
mov ecx, esi
mov dword [ebp - 0x10], eax
call fcn.00669575
mov ecx, edi
call fcn.0042459a
lea edx, [ebx + eax]
mov ecx, esi
mov dword [ebp + 0xc], eax
call fcn.00669557
lea ecx, [ebp - 0x20]
call fcn.00670b97
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x10]
push eax
mov dword [ebp - 4], 0x62
call fcn.00671996
test eax, eax
jne 0x668202
push 0x20
call fcn.00402605
pop ecx
mov ecx, eax
mov dword [ebp - 0x18], ecx
test ecx, ecx
mov byte [ebp - 4], 0x63
je 0x6681e3
call fcn.006698f9
jmp 0x6681e5
xor eax, eax
push eax
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x62
call fcn.00670bd2
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.00670c6f
lea ecx, [ebp - 0x20]
call fcn.00670b9e
mov ecx, dword [ebp + 0xc]
mov dword [eax + 0x1c], ecx
push 0x97add0
lea ecx, [ebp - 0x20]
call fcn.00670b9e
mov ecx, eax
add ecx, 0xc
call fcn.006f59d1
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x20]
call fcn.00670b51
push 0x97adc0
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x40]
call fcn.006f5b1a
mov ecx, eax
call fcn.006f5bb6
test al, al
je 0x66831a
mov ecx, edi
call fcn.00424561
movsx edx, ax
mov ecx, esi
call fcn.00669593
mov ecx, edi
call fcn.0042459a
mov edx, eax
mov ecx, esi
mov dword [ebp - 0x10], eax
call fcn.006695b1
mov ecx, edi
call fcn.0042459a
lea edx, [ebx + eax]
mov ecx, esi
mov dword [ebp + 0xc], eax
call fcn.006695cf
lea ecx, [ebp - 0x20]
call fcn.00670b97
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x10]
push eax
mov dword [ebp - 4], 0x64
call fcn.00671996
test eax, eax
jne 0x6682e9
push 0x20
call fcn.00402605
pop ecx
mov ecx, eax
mov dword [ebp - 0x18], ecx
test ecx, ecx
mov byte [ebp - 4], 0x65
je 0x6682ca
call fcn.006698f9
jmp 0x6682cc
xor eax, eax
push eax
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x64
call fcn.00670bd2
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.00670c6f
lea ecx, [ebp - 0x20]
call fcn.00670b9e
mov ecx, dword [ebp + 0xc]
mov dword [eax + 0x1c], ecx
push 0x97adc0
lea ecx, [ebp - 0x20]
call fcn.00670b9e
mov ecx, eax
add ecx, 0xc
call fcn.006f59d1
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x20]
call fcn.00670b51
push 0x97adb0
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x40]
call fcn.006f5b1a
mov ecx, eax
call fcn.006f5bb6
test al, al
je 0x668401
mov ecx, edi
call fcn.00424561
movsx edx, ax
mov ecx, esi
call fcn.006695ed
mov ecx, edi
call fcn.0042459a
mov edx, eax
mov ecx, esi
mov dword [ebp - 0x10], eax
call fcn.0066960b
mov ecx, edi
call fcn.0042459a
lea edx, [ebx + eax]
mov ecx, esi
mov dword [ebp + 0xc], eax
call fcn.00669629
lea ecx, [ebp - 0x20]
call fcn.00670b97
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x10]
push eax
mov dword [ebp - 4], 0x66
call fcn.00671996
test eax, eax
jne 0x6683d0
push 0x20
call fcn.00402605
pop ecx
mov ecx, eax
mov dword [ebp - 0x18], ecx
test ecx, ecx
mov byte [ebp - 4], 0x67
je 0x6683b1
call fcn.006698f9
jmp 0x6683b3
xor eax, eax
push eax
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x66
call fcn.00670bd2
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.00670c6f
lea ecx, [ebp - 0x20]
call fcn.00670b9e
mov ecx, dword [ebp + 0xc]
mov dword [eax + 0x1c], ecx
push 0x97adb0
lea ecx, [ebp - 0x20]
call fcn.00670b9e
mov ecx, eax
add ecx, 0xc
call fcn.006f59d1
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x20]
call fcn.00670b51
push 0x97ada0
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x40]
call fcn.006f5b1a
mov ecx, eax
call fcn.006f5bb6
test al, al
je 0x6684e8
mov ecx, edi
call fcn.00424561
movsx edx, ax
mov ecx, esi
call fcn.00669647
mov ecx, edi
call fcn.0042459a
mov edx, eax
mov ecx, esi
mov dword [ebp - 0x10], eax
call fcn.00669665
mov ecx, edi
call fcn.0042459a
lea edx, [ebx + eax]
mov ecx, esi
mov dword [ebp + 0xc], eax
call fcn.00669683
lea ecx, [ebp - 0x20]
call fcn.00670b97
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x10]
push eax
mov dword [ebp - 4], 0x68
call fcn.00671996
test eax, eax
jne 0x6684b7
push 0x20
call fcn.00402605
pop ecx
mov ecx, eax
mov dword [ebp - 0x18], ecx
test ecx, ecx
mov byte [ebp - 4], 0x69
je 0x668498
call fcn.006698f9
jmp 0x66849a
xor eax, eax
push eax
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x68
call fcn.00670bd2
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.00670c6f
lea ecx, [ebp - 0x20]
call fcn.00670b9e
mov ecx, dword [ebp + 0xc]
mov dword [eax + 0x1c], ecx
push 0x97ada0
lea ecx, [ebp - 0x20]
call fcn.00670b9e
mov ecx, eax
add ecx, 0xc
call fcn.006f59d1
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x20]
call fcn.00670b51
push 0x97ad90
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x40]
call fcn.006f5b1a
mov ecx, eax
call fcn.006f5bb6
test al, al
je 0x6685cf
mov ecx, edi
call fcn.00424561
movsx edx, ax
mov ecx, esi
call fcn.006696a1
mov ecx, edi
call fcn.0042459a
mov edx, eax
mov ecx, esi
mov dword [ebp - 0x10], eax
call fcn.006696bf
mov ecx, edi
call fcn.0042459a
lea edx, [ebx + eax]
mov ecx, esi
mov dword [ebp + 0xc], eax
call fcn.006696dd
lea ecx, [ebp - 0x20]
call fcn.00670b97
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x10]
push eax
mov dword [ebp - 4], 0x6a
call fcn.00671996
test eax, eax
jne 0x66859e
push 0x20
call fcn.00402605
pop ecx
mov ecx, eax
mov dword [ebp - 0x18], ecx
test ecx, ecx
mov byte [ebp - 4], 0x6b
je 0x66857f
call fcn.006698f9
jmp 0x668581
xor eax, eax
push eax
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x6a
call fcn.00670bd2
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.00670c6f
lea ecx, [ebp - 0x20]
call fcn.00670b9e
mov ecx, dword [ebp + 0xc]
mov dword [eax + 0x1c], ecx
push 0x97ad90
lea ecx, [ebp - 0x20]
call fcn.00670b9e
mov ecx, eax
add ecx, 0xc
call fcn.006f59d1
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x20]
call fcn.00670b51
push 0x97ad80
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x40]
call fcn.006f5b1a
mov ecx, eax
call fcn.006f5bb6
test al, al
je 0x6686b6
mov ecx, edi
call fcn.00424561
movsx edx, ax
mov ecx, esi
call fcn.006696fb
mov ecx, edi
call fcn.0042459a
mov edx, eax
mov ecx, esi
mov dword [ebp - 0x10], eax
call fcn.00669719
mov ecx, edi
call fcn.0042459a
lea edx, [ebx + eax]
mov ecx, esi
mov dword [ebp + 0xc], eax
call fcn.00669737
lea ecx, [ebp - 0x20]
call fcn.00670b97
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x10]
push eax
mov dword [ebp - 4], 0x6c
call fcn.00671996
test eax, eax
jne 0x668685
push 0x20
call fcn.00402605
pop ecx
mov ecx, eax
mov dword [ebp - 0x18], ecx
test ecx, ecx
mov byte [ebp - 4], 0x6d
je 0x668666
call fcn.006698f9
jmp 0x668668
xor eax, eax
push eax
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x6c
call fcn.00670bd2
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.00670c6f
lea ecx, [ebp - 0x20]
call fcn.00670b9e
mov ecx, dword [ebp + 0xc]
mov dword [eax + 0x1c], ecx
push 0x97ad80
lea ecx, [ebp - 0x20]
call fcn.00670b9e
mov ecx, eax
add ecx, 0xc
call fcn.006f59d1
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x20]
call fcn.00670b51
push 0x97ad70
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x40]
call fcn.006f5b1a
mov ecx, eax
call fcn.006f5bb6
test al, al
je 0x66879d
mov ecx, edi
call fcn.00424561
movsx edx, ax
mov ecx, esi
call fcn.00669773
mov ecx, edi
call fcn.0042459a
mov edx, eax
mov ecx, esi
mov dword [ebp - 0x10], eax
call fcn.00669791
mov ecx, edi
call fcn.0042459a
lea edx, [ebx + eax]
mov ecx, esi
mov dword [ebp + 0xc], eax
call fcn.006697af
lea ecx, [ebp - 0x20]
call fcn.00670b97
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x10]
push eax
mov dword [ebp - 4], 0x6e
call fcn.00671996
test eax, eax
jne 0x66876c
push 0x20
call fcn.00402605
pop ecx
mov ecx, eax
mov dword [ebp - 0x18], ecx
test ecx, ecx
mov byte [ebp - 4], 0x6f
je 0x66874d
call fcn.006698f9
jmp 0x66874f
xor eax, eax
push eax
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x6e
call fcn.00670bd2
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.00670c6f
lea ecx, [ebp - 0x20]
call fcn.00670b9e
mov ecx, dword [ebp + 0xc]
mov dword [eax + 0x1c], ecx
push 0x97ad70
lea ecx, [ebp - 0x20]
call fcn.00670b9e
mov ecx, eax
add ecx, 0xc
call fcn.006f59d1
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x20]
call fcn.00670b51
push 0x97ad60
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x40]
call fcn.006f5b1a
mov ecx, eax
call fcn.006f5bb6
test al, al
je 0x668884
mov ecx, edi
call fcn.00424561
movsx edx, ax
mov ecx, esi
call fcn.006697eb
mov ecx, edi
call fcn.0042459a
mov edx, eax
mov ecx, esi
mov dword [ebp - 0x10], eax
call fcn.00669809
mov ecx, edi
call fcn.0042459a
lea edx, [ebx + eax]
mov ecx, esi
mov dword [ebp + 0xc], eax
call fcn.00669827
lea ecx, [ebp - 0x20]
call fcn.00670b97
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x10]
push eax
mov dword [ebp - 4], 0x70
call fcn.00671996
test eax, eax
jne 0x668853
push 0x20
call fcn.00402605
pop ecx
mov ecx, eax
mov dword [ebp - 0x18], ecx
test ecx, ecx
mov byte [ebp - 4], 0x71
je 0x668834
call fcn.006698f9
jmp 0x668836
xor eax, eax
push eax
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x70
call fcn.00670bd2
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.00670c6f
lea ecx, [ebp - 0x20]
call fcn.00670b9e
mov ecx, dword [ebp + 0xc]
mov dword [eax + 0x1c], ecx
push 0x97ad60
lea ecx, [ebp - 0x20]
call fcn.00670b9e
mov ecx, eax
add ecx, 0xc
call fcn.006f59d1
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x20]
call fcn.00670b51
push 0x97ad50
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x40]
call fcn.006f5b1a
mov ecx, eax
call fcn.006f5bb6
test al, al
je 0x66896b
mov ecx, edi
call fcn.00424561
movsx edx, ax
mov ecx, esi
call fcn.00669845
mov ecx, edi
call fcn.0042459a
mov edx, eax
mov ecx, esi
mov dword [ebp - 0x10], eax
call fcn.00669863
mov ecx, edi
call fcn.0042459a
lea edx, [ebx + eax]
mov ecx, esi
mov dword [ebp + 0xc], eax
call fcn.00669881
lea ecx, [ebp - 0x20]
call fcn.00670b97
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x10]
push eax
mov dword [ebp - 4], 0x72
call fcn.00671996
test eax, eax
jne 0x66893a
push 0x20
call fcn.00402605
pop ecx
mov ecx, eax
mov dword [ebp - 0x18], ecx
test ecx, ecx
mov byte [ebp - 4], 0x73
je 0x66891b
call fcn.006698f9
jmp 0x66891d
xor eax, eax
push eax
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x72
call fcn.00670bd2
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.00670c6f
lea ecx, [ebp - 0x20]
call fcn.00670b9e
mov ecx, dword [ebp + 0xc]
mov dword [eax + 0x1c], ecx
push 0x97ad50
lea ecx, [ebp - 0x20]
call fcn.00670b9e
mov ecx, eax
add ecx, 0xc
call fcn.006f59d1
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x20]
call fcn.00670b51
push 0x97ad40
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x40]
call fcn.006f5b1a
mov ecx, eax
call fcn.006f5bb6
test al, al
je 0x668a52
mov ecx, edi
call fcn.00424561
movsx edx, ax
mov ecx, esi
call fcn.0066989f
mov ecx, edi
call fcn.0042459a
mov edx, eax
mov ecx, esi
mov dword [ebp - 0x10], eax
call fcn.006698bd
mov ecx, edi
call fcn.0042459a
lea edx, [ebx + eax]
mov ecx, esi
mov dword [ebp + 0xc], eax
call fcn.006698db
lea ecx, [ebp - 0x20]
call fcn.00670b97
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x10]
push eax
mov dword [ebp - 4], 0x74
call fcn.00671996
test eax, eax
jne 0x668a21
push 0x20
call fcn.00402605
pop ecx
mov ecx, eax
mov dword [ebp - 0x18], ecx
test ecx, ecx
mov byte [ebp - 4], 0x75
je 0x668a02
call fcn.006698f9
jmp 0x668a04
xor eax, eax
push eax
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x74
call fcn.00670bd2
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.00670c6f
lea ecx, [ebp - 0x20]
call fcn.00670b9e
mov ecx, dword [ebp + 0xc]
mov dword [eax + 0x1c], ecx
push 0x97ad40
lea ecx, [ebp - 0x20]
call fcn.00670b9e
mov ecx, eax
add ecx, 0xc
call fcn.006f59d1
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x20]
call fcn.00670b51
mov ecx, edi
call fcn.0042452b
mov dl, al
mov ecx, esi
call fcn.00669755
mov ecx, edi
call fcn.0042452b
mov dl, al
mov ecx, esi
call fcn.006697cd
and dword [ebp - 0x14], 0
lea eax, [esi + 0x958]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [eax]
push dword [ebp - 0x14]
mov dword [ebp + 0xc], eax
lea eax, [ebp - 0x50]
push eax
call fcn.00670af0
pop ecx
pop ecx
push eax
lea eax, [ebp - 0x60]
push eax
lea ecx, [ebp - 0x40]
call fcn.006f5b1a
mov ecx, eax
call fcn.006f5bb6
test al, al
je 0x668b6b
mov ecx, dword [ebp + 0xc]
mov eax, dword [ecx]
push edi
call dword [eax + 0x18]
mov ecx, dword [ebp + 0xc]
call fcn.005d0ba9
mov eax, dword [eax]
mov ecx, dword [ebp + 0xc]
mov dword [ebp - 0x10], eax
mov eax, dword [ecx]
call dword [eax + 0x10]
lea ecx, [ebp - 0x28]
mov dword [ebp + 0xc], eax
call fcn.00670b97
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x10]
push eax
mov dword [ebp - 4], 0x76
call fcn.00671996
test eax, eax
jne 0x668b30
push 0x20
call fcn.00402605
pop ecx
mov ecx, eax
mov dword [ebp - 0x1c], ecx
test ecx, ecx
mov byte [ebp - 4], 0x77
je 0x668b11
call fcn.006698f9
jmp 0x668b13
xor eax, eax
push eax
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x76
call fcn.00670bd2
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.00670c6f
lea ecx, [ebp - 0x28]
call fcn.00670b9e
mov ecx, dword [ebp + 0xc]
push dword [ebp - 0x14]
mov dword [eax + 0x1c], ecx
lea eax, [ebp - 0x70]
push eax
call fcn.00670af0
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x28]
call fcn.00670b9e
mov ecx, eax
add ecx, 0xc
call fcn.006f59d1
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x28]
call fcn.00670b51
inc dword [ebp - 0x14]
add dword [ebp - 0x18], 4
cmp dword [ebp - 0x14], 6
jl 0x668a7f
push 0x97afd0
lea eax, [ebp - 0x80]
push eax
lea ecx, [ebp - 0x40]
call fcn.006f5b1a
mov ecx, eax
call fcn.006f5bb6
test al, al
je 0x668bbd
mov edx, ebx
mov ecx, esi
call fcn.00668bf7
mov ecx, esi
call fcn.00668be2
test eax, eax
jne 0x668bbd
mov ecx, esi
call fcn.00668be2
mov edx, eax
inc edx
mov ecx, esi
call fcn.00668bf7
mov ecx, dword [ebp + 8]
push 0x80
lea eax, [ebp - 0x40]
push eax
call fcn.006f5512
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp + 8]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret 0xc