Function at 0xa1a7b5
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov eax, 0xc6422c
call fcn.00be12c8
sub esp, 0x24
mov eax, dword [ebp + 8]
push ebx
push esi
lea ebx, [eax + 0xc]
mov esi, ecx
push edi
mov edi, dword [0xd7c420]
mov ecx, ebx
mov dword [ebp - 0x14], esi
mov dword [ebp - 0x1c], ebx
call fcn.0042d5a8
push eax
mov ecx, edi
call fcn.00670865
test eax, eax
mov dword [ebp - 0x18], eax
je 0xa1b762
and dword [ebp - 0x10], 0
and dword [ebp - 4], 0
mov ecx, ebx
call fcn.0042d5a8
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.0066ea2a
pop ecx
pop ecx
mov ecx, ebx
mov byte [ebp - 4], 1
call fcn.0042d5a8
push eax
lea eax, [ebp - 0x24]
push eax
call fcn.0066eb28
pop ecx
pop ecx
mov ecx, ebx
mov byte [ebp - 4], 2
call fcn.0042d5a8
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.0066ee8f
pop ecx
pop ecx
cmp dword [ebp - 0x28], 0
mov byte [ebp - 4], 3
mov edi, 0x3e9
mov ebx, 0xd75428
je 0xa1a890
lea eax, [ebp - 0x2c]
push 0x249
push eax
call fcn.00877d11
mov ecx, eax
call fcn.00406bc6
push dword [ebp - 0x28]
mov eax, dword [eax]
push eax
lea eax, [ebp - 0x10]
push eax
mov byte [ebp - 4], 4
call fcn.0044e655
add esp, 0xc
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 3
call fcn.00406a50
push edi
push ecx
mov eax, esp
mov dword [ebp - 0x30], esp
jmp 0xa1a8d4
cmp dword [ebp - 0x20], 0
je 0xa1a8eb
lea eax, [ebp - 0x2c]
push 0x24b
push eax
call fcn.00877d11
mov ecx, eax
call fcn.00406bc6
push dword [ebp - 0x20]
mov eax, dword [eax]
push eax
lea eax, [ebp - 0x10]
push eax
mov byte [ebp - 4], 5
call fcn.0044e655
add esp, 0xc
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 3
call fcn.00406a50
push edi
push ecx
mov eax, esp
mov dword [ebp - 0x30], esp
lea ecx, [ebp - 0x10]
push ecx
push ebx
push eax
call fcn.004914de
add esp, 0xc
push 0xa
mov ecx, esi
call fcn.00a23361
cmp dword [ebp - 0x24], 0
je 0xa1a946
lea eax, [ebp - 0x2c]
push 0x24a
push eax
call fcn.00877d11
mov ecx, eax
call fcn.00406bc6
push dword [ebp - 0x24]
mov eax, dword [eax]
push eax
lea eax, [ebp - 0x10]
push eax
mov byte [ebp - 4], 6
call fcn.0044e655
add esp, 0xc
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 3
call fcn.00406a50
push edi
push ecx
mov eax, esp
mov dword [ebp - 0x30], esp
lea ecx, [ebp - 0x10]
push ecx
push ebx
push eax
call fcn.004914de
add esp, 0xc
push 0xa
mov ecx, esi
call fcn.00a23361
mov ecx, dword [ebp - 0x1c]
mov esi, dword [0xd7c420]
call fcn.0042d5a8
push eax
mov ecx, esi
call fcn.0067c0e5
test eax, eax
mov eax, dword [ebp + 8]
push dword [eax + 0x59]
lea esi, [eax + 0x49]
lea eax, [esi + 0xc]
push eax
je 0xa1ab5b
call fcn.004878ba
test ax, ax
pop ecx
pop ecx
jle 0xa1a9e6
push dword [esi + 0x10]
lea eax, [esi + 0xc]
push eax
call fcn.004878ba
pop ecx
pop ecx
push 0x75a
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 0x30]
push eax
call fcn.00877d11
mov ecx, eax
call fcn.00406bc6
movsx ecx, word [ebp - 0x2c]
mov eax, dword [eax]
push ecx
push eax
lea eax, [ebp - 0x10]
push eax
mov byte [ebp - 4], 7
call fcn.0044e655
add esp, 0xc
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 3
call fcn.00406a50
push edi
push ecx
mov eax, esp
mov dword [ebp - 0x30], esp
lea ecx, [ebp - 0x10]
push ecx
push ebx
push eax
call fcn.004914de
mov ecx, dword [ebp - 0x14]
add esp, 0xc
push 0x13
call fcn.00a23361
push dword [esi + 0x18]
lea eax, [esi + 0x14]
push eax
call fcn.004878ba
test ax, ax
pop ecx
pop ecx
jle 0xa1aa62
push dword [esi + 0x18]
lea eax, [esi + 0x14]
push eax
call fcn.004878ba
pop ecx
pop ecx
push 0x75b
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x2c]
push eax
call fcn.00877d11
mov ecx, eax
call fcn.00406bc6
movsx ecx, word [ebp - 0x30]
mov eax, dword [eax]
push ecx
push eax
lea eax, [ebp - 0x10]
push eax
mov byte [ebp - 4], 8
call fcn.0044e655
add esp, 0xc
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 3
call fcn.00406a50
push edi
push ecx
mov eax, esp
mov dword [ebp - 0x30], esp
lea ecx, [ebp - 0x10]
push ecx
push ebx
push eax
call fcn.004914de
mov ecx, dword [ebp - 0x14]
add esp, 0xc
push 0x13
call fcn.00a23361
push dword [esi + 0x20]
lea eax, [esi + 0x1c]
push eax
call fcn.004878ba
test ax, ax
pop ecx
pop ecx
jle 0xa1aade
push dword [esi + 0x20]
lea eax, [esi + 0x1c]
push eax
call fcn.004878ba
pop ecx
pop ecx
push 0x75c
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x2c]
push eax
call fcn.00877d11
mov ecx, eax
call fcn.00406bc6
movsx ecx, word [ebp - 0x30]
mov eax, dword [eax]
push ecx
push eax
lea eax, [ebp - 0x10]
push eax
mov byte [ebp - 4], 9
call fcn.0044e655
add esp, 0xc
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 3
call fcn.00406a50
push edi
push ecx
mov eax, esp
mov dword [ebp - 0x30], esp
lea ecx, [ebp - 0x10]
push ecx
push ebx
push eax
call fcn.004914de
mov ecx, dword [ebp - 0x14]
add esp, 0xc
push 0x13
call fcn.00a23361
push dword [esi + 0x28]
lea eax, [esi + 0x24]
push eax
call fcn.004878ba
test ax, ax
pop ecx
pop ecx
jle 0xa1ad44
push dword [esi + 0x28]
lea eax, [esi + 0x24]
push eax
call fcn.004878ba
pop ecx
pop ecx
push 0x75d
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x2c]
push eax
call fcn.00877d11
mov ecx, eax
call fcn.00406bc6
movsx ecx, word [ebp - 0x30]
mov eax, dword [eax]
push ecx
push eax
lea eax, [ebp - 0x10]
push eax
mov byte [ebp - 4], 0xa
call fcn.0044e655
add esp, 0xc
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 3
call fcn.00406a50
push edi
push ecx
mov eax, esp
mov dword [ebp - 0x30], esp
lea ecx, [ebp - 0x10]
push ecx
push ebx
push eax
call fcn.004914de
add esp, 0xc
push 0x13
jmp 0xa1ad3c
call fcn.004878ba
test ax, ax
pop ecx
pop ecx
jle 0xa1abd0
push dword [esi + 0x10]
lea eax, [esi + 0xc]
push eax
call fcn.004878ba
pop ecx
pop ecx
push 0x75a
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x2c]
push eax
call fcn.00877d11
mov ecx, eax
call fcn.00406bc6
movsx ecx, word [ebp - 0x30]
mov eax, dword [eax]
push ecx
push eax
lea eax, [ebp - 0x10]
push eax
mov byte [ebp - 4], 0xb
call fcn.0044e655
add esp, 0xc
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 3
call fcn.00406a50
push edi
push ecx
mov eax, esp
mov dword [ebp - 0x30], esp
lea ecx, [ebp - 0x10]
push ecx
push ebx
push eax
call fcn.004914de
mov ecx, dword [ebp - 0x14]
add esp, 0xc
push 0xa
call fcn.00a23361
push dword [esi + 0x18]
lea eax, [esi + 0x14]
push eax
call fcn.004878ba
test ax, ax
pop ecx
pop ecx
jle 0xa1ac4c
push dword [esi + 0x18]
lea eax, [esi + 0x14]
push eax
call fcn.004878ba
pop ecx
pop ecx
push 0x75b
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x2c]
push eax
call fcn.00877d11
mov ecx, eax
call fcn.00406bc6
movsx ecx, word [ebp - 0x30]
mov eax, dword [eax]
push ecx
push eax
lea eax, [ebp - 0x10]
push eax
mov byte [ebp - 4], 0xc
call fcn.0044e655
add esp, 0xc
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 3
call fcn.00406a50
push edi
push ecx
mov eax, esp
mov dword [ebp - 0x30], esp
lea ecx, [ebp - 0x10]
push ecx
push ebx
push eax
call fcn.004914de
mov ecx, dword [ebp - 0x14]
add esp, 0xc
push 0xa
call fcn.00a23361
push dword [esi + 0x20]
lea eax, [esi + 0x1c]
push eax
call fcn.004878ba
test ax, ax
pop ecx
pop ecx
jle 0xa1acc8
push dword [esi + 0x20]
lea eax, [esi + 0x1c]
push eax
call fcn.004878ba
pop ecx
pop ecx
push 0x75c
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x2c]
push eax
call fcn.00877d11
mov ecx, eax
call fcn.00406bc6
movsx ecx, word [ebp - 0x30]
mov eax, dword [eax]
push ecx
push eax
lea eax, [ebp - 0x10]
push eax
mov byte [ebp - 4], 0xd
call fcn.0044e655
add esp, 0xc
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 3
call fcn.00406a50
push edi
push ecx
mov eax, esp
mov dword [ebp - 0x30], esp
lea ecx, [ebp - 0x10]
push ecx
push ebx
push eax
call fcn.004914de
mov ecx, dword [ebp - 0x14]
add esp, 0xc
push 0xa
call fcn.00a23361
push dword [esi + 0x28]
lea eax, [esi + 0x24]
push eax
call fcn.004878ba
test ax, ax
pop ecx
pop ecx
jle 0xa1ad44
push dword [esi + 0x28]
lea eax, [esi + 0x24]
push eax
call fcn.004878ba
pop ecx
pop ecx
push 0x75d
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x2c]
push eax
call fcn.00877d11
mov ecx, eax
call fcn.00406bc6
movsx ecx, word [ebp - 0x30]
mov eax, dword [eax]
push ecx
push eax
lea eax, [ebp - 0x10]
push eax
mov byte [ebp - 4], 0xe
call fcn.0044e655
add esp, 0xc
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 3
call fcn.00406a50
push edi
push ecx
mov eax, esp
mov dword [ebp - 0x30], esp
lea ecx, [ebp - 0x10]
push ecx
push ebx
push eax
call fcn.004914de
add esp, 0xc
push 0xa
mov ecx, dword [ebp - 0x14]
call fcn.00a23361
push dword [esi + 0x30]
lea eax, [esi + 0x2c]
push eax
call fcn.004878ba
test ax, ax
pop ecx
pop ecx
jle 0xa1adc0
push dword [esi + 0x30]
lea eax, [esi + 0x2c]
push eax
call fcn.004878ba
pop ecx
pop ecx
push 0x75e
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x2c]
push eax
call fcn.00877d11
mov ecx, eax
call fcn.00406bc6
movsx ecx, word [ebp - 0x30]
mov eax, dword [eax]
push ecx
push eax
lea eax, [ebp - 0x10]
push eax
mov byte [ebp - 4], 0xf
call fcn.0044e655
add esp, 0xc
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 3
call fcn.00406a50
push edi
push ecx
mov eax, esp
mov dword [ebp - 0x30], esp
lea ecx, [ebp - 0x10]
push ecx
push ebx
push eax
call fcn.004914de
mov ecx, dword [ebp - 0x14]
add esp, 0xc
push 0xa
call fcn.00a23361
push dword [esi + 0x38]
lea eax, [esi + 0x34]
push eax
call fcn.004878ba
test ax, ax
pop ecx
pop ecx
jle 0xa1ae3c
push dword [esi + 0x38]
lea eax, [esi + 0x34]
push eax
call fcn.004878ba
pop ecx
pop ecx
push 0x75f
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x2c]
push eax
call fcn.00877d11
mov ecx, eax
call fcn.00406bc6
movsx ecx, word [ebp - 0x30]
mov eax, dword [eax]
push ecx
push eax
lea eax, [ebp - 0x10]
push eax
mov byte [ebp - 4], 0x10
call fcn.0044e655
add esp, 0xc
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 3
call fcn.00406a50
push edi
push ecx
mov eax, esp
mov dword [ebp - 0x30], esp
lea ecx, [ebp - 0x10]
push ecx
push ebx
push eax
call fcn.004914de
mov ecx, dword [ebp - 0x14]
add esp, 0xc
push 0xa
call fcn.00a23361
mov eax, dword [ebp - 0x18]
push dword [eax + 0xe8]
lea ecx, [eax + 0xe4]
push ecx
call fcn.004878ba
test ax, ax
pop ecx
pop ecx
jle 0xa1aec9
mov eax, dword [ebp - 0x18]
push dword [eax + 0xe8]
add eax, 0xe4
push eax
call fcn.004878ba
pop ecx
pop ecx
push 0x1640
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x2c]
push eax
call fcn.00877d11
mov ecx, eax
call fcn.00406bc6
movsx ecx, word [ebp - 0x30]
mov eax, dword [eax]
push ecx
push eax
lea eax, [ebp - 0x10]
push eax
mov byte [ebp - 4], 0x11
call fcn.0044e655
add esp, 0xc
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 3
call fcn.00406a50
push edi
push ecx
mov eax, esp
mov dword [ebp - 0x30], esp
lea ecx, [ebp - 0x10]
push ecx
push ebx
push eax
call fcn.004914de
mov ecx, dword [ebp - 0x14]
add esp, 0xc
push 0xa
call fcn.00a23361
mov eax, dword [ebp - 0x18]
push dword [eax + 0xf0]
lea ecx, [eax + 0xec]
push ecx
call fcn.004878ba
test ax, ax
pop ecx
pop ecx
jle 0xa1af56
mov eax, dword [ebp - 0x18]
push dword [eax + 0xf0]
add eax, 0xec
push eax
call fcn.004878ba
pop ecx
pop ecx
push 0x1641
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x2c]
push eax
call fcn.00877d11
mov ecx, eax
call fcn.00406bc6
movsx ecx, word [ebp - 0x30]
mov eax, dword [eax]
push ecx
push eax
lea eax, [ebp - 0x10]
push eax
mov byte [ebp - 4], 0x12
call fcn.0044e655
add esp, 0xc
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 3
call fcn.00406a50
push edi
push ecx
mov eax, esp
mov dword [ebp - 0x30], esp
lea ecx, [ebp - 0x10]
push ecx
push ebx
push eax
call fcn.004914de
mov ecx, dword [ebp - 0x14]
add esp, 0xc
push 0xa
call fcn.00a23361
mov eax, dword [0xd7c420]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x30], eax
call fcn.0042d5a8
mov ecx, dword [ebp - 0x30]
push eax
call fcn.0067c0e5
push dword [esi + 0x40]
test eax, eax
lea eax, [esi + 0x3c]
push eax
je 0xa1b070
call fcn.004878ba
test ax, ax
pop ecx
pop ecx
jle 0xa1aff3
push dword [esi + 0x40]
lea eax, [esi + 0x3c]
push eax
call fcn.004878ba
pop ecx
pop ecx
push 0x24c
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x2c]
push eax
call fcn.00877d11
mov ecx, eax
call fcn.00406bc6
movsx ecx, word [ebp - 0x30]
mov eax, dword [eax]
push ecx
push eax
lea eax, [ebp - 0x10]
push eax
mov byte [ebp - 4], 0x13
call fcn.0044e655
add esp, 0xc
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 3
call fcn.00406a50
push edi
push ecx
mov eax, esp
mov dword [ebp - 0x30], esp
lea ecx, [ebp - 0x10]
push ecx
push ebx
push eax
call fcn.004914de
mov ecx, dword [ebp - 0x14]
add esp, 0xc
push 0x13
call fcn.00a23361
push dword [esi + 0x48]
lea eax, [esi + 0x44]
push eax
call fcn.004878ba
test ax, ax
pop ecx
pop ecx
jle 0xa1b161
push dword [esi + 0x48]
lea eax, [esi + 0x44]
push eax
call fcn.004878ba
pop ecx
pop ecx
push 0x24d
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x2c]
push eax
call fcn.00877d11
mov ecx, eax
call fcn.00406bc6
movsx ecx, word [ebp - 0x30]
mov eax, dword [eax]
push ecx
push eax
lea eax, [ebp - 0x10]
push eax
mov byte [ebp - 4], 0x14
call fcn.0044e655
add esp, 0xc
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 3
call fcn.00406a50
push edi
push ecx
mov eax, esp
mov dword [ebp - 0x30], esp
lea ecx, [ebp - 0x10]
push ecx
push ebx
push eax
call fcn.004914de
add esp, 0xc
push 0x13
jmp 0xa1b159
call fcn.004878ba
test ax, ax
pop ecx
pop ecx
jle 0xa1b0e5
push dword [esi + 0x40]
lea eax, [esi + 0x3c]
push eax
call fcn.004878ba
pop ecx
pop ecx
push 0x24c
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x2c]
push eax
call fcn.00877d11
mov ecx, eax
call fcn.00406bc6
movsx ecx, word [ebp - 0x30]
mov eax, dword [eax]
push ecx
push eax
lea eax, [ebp - 0x10]
push eax
mov byte [ebp - 4], 0x15
call fcn.0044e655
add esp, 0xc
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 3
call fcn.00406a50
push edi
push ecx
mov eax, esp
mov dword [ebp - 0x30], esp
lea ecx, [ebp - 0x10]
push ecx
push ebx
push eax
call fcn.004914de
mov ecx, dword [ebp - 0x14]
add esp, 0xc
push 0xa
call fcn.00a23361
push dword [esi + 0x48]
lea eax, [esi + 0x44]
push eax
call fcn.004878ba
test ax, ax
pop ecx
pop ecx
jle 0xa1b161
push dword [esi + 0x48]
lea eax, [esi + 0x44]
push eax
call fcn.004878ba
pop ecx
pop ecx
push 0x24d
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x2c]
push eax
call fcn.00877d11
mov ecx, eax
call fcn.00406bc6
movsx ecx, word [ebp - 0x30]
mov eax, dword [eax]
push ecx
push eax
lea eax, [ebp - 0x10]
push eax
mov byte [ebp - 4], 0x16
call fcn.0044e655
add esp, 0xc
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 3
call fcn.00406a50
push edi
push ecx
mov eax, esp
mov dword [ebp - 0x30], esp
lea ecx, [ebp - 0x10]
push ecx
push ebx
push eax
call fcn.004914de
add esp, 0xc
push 0xa
mov ecx, dword [ebp - 0x14]
call fcn.00a23361
push dword [esi + 0x50]
lea eax, [esi + 0x4c]
push eax
call fcn.004878ba
test ax, ax
pop ecx
pop ecx
jle 0xa1b1dd
push dword [esi + 0x50]
lea eax, [esi + 0x4c]
push eax
call fcn.004878ba
pop ecx
pop ecx
push 0x24e
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x2c]
push eax
call fcn.00877d11
mov ecx, eax
call fcn.00406bc6
movsx ecx, word [ebp - 0x30]
mov eax, dword [eax]
push ecx
push eax
lea eax, [ebp - 0x10]
push eax
mov byte [ebp - 4], 0x17
call fcn.0044e655
add esp, 0xc
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 3
call fcn.00406a50
push edi
push ecx
mov eax, esp
mov dword [ebp - 0x30], esp
lea ecx, [ebp - 0x10]
push ecx
push ebx
push eax
call fcn.004914de
mov ecx, dword [ebp - 0x14]
add esp, 0xc
push 0xa
call fcn.00a23361
push dword [esi + 0x58]
lea eax, [esi + 0x54]
push eax
call fcn.004878ba
test ax, ax
pop ecx
pop ecx
jle 0xa1b259
push dword [esi + 0x58]
lea eax, [esi + 0x54]
push eax
call fcn.004878ba
pop ecx
pop ecx
push 0x24f
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x2c]
push eax
call fcn.00877d11
mov ecx, eax
call fcn.00406bc6
movsx ecx, word [ebp - 0x30]
mov eax, dword [eax]
push ecx
push eax
lea eax, [ebp - 0x10]
push eax
mov byte [ebp - 4], 0x18
call fcn.0044e655
add esp, 0xc
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 3
call fcn.00406a50
push edi
push ecx
mov eax, esp
mov dword [ebp - 0x30], esp
lea ecx, [ebp - 0x10]
push ecx
push ebx
push eax
call fcn.004914de
mov ecx, dword [ebp - 0x14]
add esp, 0xc
push 0xa
call fcn.00a23361
push dword [esi + 0x60]
lea eax, [esi + 0x5c]
push eax
call fcn.004878ba
test ax, ax
pop ecx
pop ecx
jle 0xa1b2d5
push dword [esi + 0x60]
lea eax, [esi + 0x5c]
push eax
call fcn.004878ba
pop ecx
pop ecx
push 0x250
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x2c]
push eax
call fcn.00877d11
mov ecx, eax
call fcn.00406bc6
movsx ecx, word [ebp - 0x30]
mov eax, dword [eax]
push ecx
push eax
lea eax, [ebp - 0x10]
push eax
mov byte [ebp - 4], 0x19
call fcn.0044e655
add esp, 0xc
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 3
call fcn.00406a50
push edi
push ecx
mov eax, esp
mov dword [ebp - 0x30], esp
lea ecx, [ebp - 0x10]
push ecx
push ebx
push eax
call fcn.004914de
mov ecx, dword [ebp - 0x14]
add esp, 0xc
push 0xa
call fcn.00a23361
push dword [esi + 0x68]
lea eax, [esi + 0x64]
push eax
call fcn.004878ba
test ax, ax
pop ecx
pop ecx
jle 0xa1b351
push dword [esi + 0x68]
lea eax, [esi + 0x64]
push eax
call fcn.004878ba
pop ecx
pop ecx
push 0x251
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x2c]
push eax
call fcn.00877d11
mov ecx, eax
call fcn.00406bc6
movsx ecx, word [ebp - 0x30]
mov eax, dword [eax]
push ecx
push eax
lea eax, [ebp - 0x10]
push eax
mov byte [ebp - 4], 0x1a
call fcn.0044e655
add esp, 0xc
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 3
call fcn.00406a50
push edi
push ecx
mov eax, esp
mov dword [ebp - 0x30], esp
lea ecx, [ebp - 0x10]
push ecx
push ebx
push eax
call fcn.004914de
mov ecx, dword [ebp - 0x14]
add esp, 0xc
push 0xa
call fcn.00a23361
push dword [esi + 0x70]
lea eax, [esi + 0x6c]
push eax
call fcn.004878ba
test ax, ax
pop ecx
pop ecx
jle 0xa1b3cd
push dword [esi + 0x70]
lea eax, [esi + 0x6c]
push eax
call fcn.004878ba
pop ecx
pop ecx
push 0x252
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x2c]
push eax
call fcn.00877d11
mov ecx, eax
call fcn.00406bc6
movsx ecx, word [ebp - 0x30]
mov eax, dword [eax]
push ecx
push eax
lea eax, [ebp - 0x10]
push eax
mov byte [ebp - 4], 0x1b
call fcn.0044e655
add esp, 0xc
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 3
call fcn.00406a50
push edi
push ecx
mov eax, esp
mov dword [ebp - 0x30], esp
lea ecx, [ebp - 0x10]
push ecx
push ebx
push eax
call fcn.004914de
mov ecx, dword [ebp - 0x14]
add esp, 0xc
push 0xa
call fcn.00a23361
push dword [esi + 0x78]
lea eax, [esi + 0x74]
push eax
call fcn.004878ba
test ax, ax
pop ecx
pop ecx
jle 0xa1b449
push dword [esi + 0x78]
lea eax, [esi + 0x74]
push eax
call fcn.004878ba
pop ecx
pop ecx
push 0x253
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x2c]
push eax
call fcn.00877d11
mov ecx, eax
call fcn.00406bc6
movsx ecx, word [ebp - 0x30]
mov eax, dword [eax]
push ecx
push eax
lea eax, [ebp - 0x10]
push eax
mov byte [ebp - 4], 0x1c
call fcn.0044e655
add esp, 0xc
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 3
call fcn.00406a50
push edi
push ecx
mov eax, esp
mov dword [ebp - 0x30], esp
lea ecx, [ebp - 0x10]
push ecx
push ebx
push eax
call fcn.004914de
mov ecx, dword [ebp - 0x14]
add esp, 0xc
push 0xa
call fcn.00a23361
push dword [esi + 0x80]
lea eax, [esi + 0x7c]
push eax
call fcn.004878ba
test ax, ax
pop ecx
pop ecx
jle 0xa1b4cb
push dword [esi + 0x80]
lea eax, [esi + 0x7c]
push eax
call fcn.004878ba
pop ecx
pop ecx
push 0x254
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x2c]
push eax
call fcn.00877d11
mov ecx, eax
call fcn.00406bc6
movsx ecx, word [ebp - 0x30]
mov eax, dword [eax]
push ecx
push eax
lea eax, [ebp - 0x10]
push eax
mov byte [ebp - 4], 0x1d
call fcn.0044e655
add esp, 0xc
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 3
call fcn.00406a50
push edi
push ecx
mov eax, esp
mov dword [ebp - 0x30], esp
lea ecx, [ebp - 0x10]
push ecx
push ebx
push eax
call fcn.004914de
mov ecx, dword [ebp - 0x14]
add esp, 0xc
push 0xa
call fcn.00a23361
mov eax, dword [0xd7c420]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x30], eax
call fcn.0042d5a8
mov ecx, dword [ebp - 0x30]
push eax
call fcn.00a1b773
test eax, eax
mov dword [ebp - 0x30], eax
jle 0xa1b541
lea eax, [ebp - 0x2c]
push 0x256
push eax
call fcn.00877d11
mov ecx, eax
call fcn.00406bc6
mov eax, dword [eax]
push dword [ebp - 0x30]
mov byte [ebp - 4], 0x1e
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.0044e655
add esp, 0xc
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 3
call fcn.00406a50
push edi
push ecx
mov eax, esp
mov dword [ebp - 0x30], esp
lea ecx, [ebp - 0x10]
push ecx
push ebx
push eax
call fcn.004914de
mov ecx, dword [ebp - 0x14]
add esp, 0xc
push 0xa
call fcn.00a23361
mov ecx, dword [ebp + 8]
mov eax, dword [ecx]
call dword [eax + 8]
test eax, eax
je 0xa1b59e
lea eax, [ebp - 0x30]
push 0x1164
push eax
call fcn.00877d11
mov ecx, eax
call fcn.00406bc6
push dword [eax]
lea eax, [ebp - 0x10]
push eax
mov byte [ebp - 4], 0x1f
call fcn.0044e655
pop ecx
pop ecx
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 3
call fcn.00406a50
push edi
push ecx
mov eax, esp
mov dword [ebp - 0x30], esp
lea ecx, [ebp - 0x10]
push ecx
push ebx
push eax
call fcn.004914de
mov ecx, dword [ebp - 0x14]
add esp, 0xc
push 0xa
call fcn.00a23361
mov ecx, dword [ebp + 8]
mov eax, dword [ecx]
call dword [eax + 0xc]
test eax, eax
je 0xa1b5fb
lea eax, [ebp + 8]
push 0x1165
push eax
call fcn.00877d11
mov ecx, eax
call fcn.00406bc6
push dword [eax]
lea eax, [ebp - 0x10]
push eax
mov byte [ebp - 4], 0x20
call fcn.0044e655
pop ecx
pop ecx
lea ecx, [ebp + 8]
mov byte [ebp - 4], 3
call fcn.00406a50
push edi
push ecx
mov eax, esp
mov dword [ebp + 8], esp
lea ecx, [ebp - 0x10]
push ecx
push ebx
push eax
call fcn.004914de
mov ecx, dword [ebp - 0x14]
add esp, 0xc
push 0xa
call fcn.00a23361
mov eax, dword [ebp - 0x18]
push dword [eax + 0xa8]
add eax, 0xa4
push eax
call fcn.00487874
test al, al
pop ecx
pop ecx
jbe 0xa1b67b
push dword [esi + 2]
push esi
call fcn.00487874
pop ecx
pop ecx
mov byte [ebp + 0xb], al
lea eax, [ebp - 0x30]
push 0x257
push eax
call fcn.00877d11
mov ecx, eax
call fcn.00406bc6
movzx ecx, byte [ebp + 0xb]
mov eax, dword [eax]
push ecx
push eax
lea eax, [ebp - 0x10]
push eax
mov byte [ebp - 4], 0x21
call fcn.0044e655
add esp, 0xc
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 3
call fcn.00406a50
push edi
push ecx
mov eax, esp
mov dword [ebp + 8], esp
lea ecx, [ebp - 0x10]
push ecx
push ebx
push eax
call fcn.004914de
mov ecx, dword [ebp - 0x14]
add esp, 0xc
push 0xa
call fcn.00a23361
mov ecx, dword [ebp - 0x1c]
call fcn.0042d5a8
mov ecx, dword [0xd7c420]
mov ebx, eax
push ebx
call fcn.00670865
push dword [eax + 0xb0]
add eax, 0xac
push eax
call fcn.00487874
movzx eax, al
test eax, eax
pop ecx
pop ecx
jle 0xa1b732
mov eax, ebx
cdq
mov ecx, 0x186a0
idiv ecx
cmp eax, 0x12
je 0xa1b732
mov ecx, dword [ebp - 0x1c]
call fcn.0042d5a8
cmp eax, 0x111ed0
je 0xa1b732
push dword [esi + 0xb8]
add esi, 0xb0
push esi
call fcn.00419768
cmp eax, 1
pop ecx
pop ecx
jl 0xa1b732
lea eax, [ebp + 8]
push 0x17e6
push eax
call fcn.00877d11
mov ecx, eax
call fcn.00406bc6
push dword [eax]
lea eax, [ebp - 0x10]
push eax
mov byte [ebp - 4], 0x22
call fcn.0044e655
pop ecx
pop ecx
lea ecx, [ebp + 8]
mov byte [ebp - 4], 3
call fcn.00406a50
push edi
push ecx
lea eax, [ebp - 0x10]
mov ecx, esp
mov dword [ebp - 0x30], esp
push eax
call fcn.0042d265
mov ecx, dword [ebp - 0x14]
push 0xa
call fcn.00a23361
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 2
call fcn.00406a50
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 1
call fcn.00406a50
and byte [ebp - 4], 0
lea ecx, [ebp - 0x28]
call fcn.00406a50
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x10]
call fcn.00406a50
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
leave
ret 4