Function at 0x68fd50
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
and esp, 0xffffffc0
push 0xffffffffffffffff
push 0x77915f
mov eax, dword fs:[0]
push eax
sub esp, 0x3a8
mov eax, dword [0x867e6c]
xor eax, esp
mov dword [esp + 0x370], eax
push ebx
push esi
push edi
mov eax, dword [0x867e6c]
xor eax, esp
push eax
lea eax, [esp + 0x3b8]
mov dword fs:[0], eax
mov ecx, dword [0x88b12c]
mov ecx, dword [ecx + 0x9e0]
mov eax, dword [ebp + 8]
mov dword [esp + 0x40], eax
mov edx, ecx
imul edx, edx, 0x334
mov eax, 0x1b4e81b5
imul edx
sar edx, 7
mov esi, edx
shr esi, 0x1f
add esi, edx
mov edx, ecx
imul edx, edx, 0x42e
mov eax, 0x1b4e81b5
imul edx
sar edx, 7
mov edi, edx
shr edi, 0x1f
add edi, edx
mov edx, ecx
imul ecx, ecx, 0x1a4
imul edx, edx, 0xdc
mov eax, 0x1b4e81b5
imul edx
sar edx, 7
mov ebx, edx
shr ebx, 0x1f
add ebx, edx
mov eax, 0x1b4e81b5
imul ecx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [esp + 0xa8], esi
mov esi, dword [esp + 0x40]
mov dword [esp + 0x9c], eax
mov eax, dword [0x88205c]
mov dword [esp + 0xa4], edi
push esi
lea edi, [esp + 0xa0]
mov dword [esp + 0xa4], ebx
call fcn.00432a40
mov ecx, dword [0x88224c]
mov eax, esi
call fcn.00430c10
mov edx, 0x18
push 8
lea ecx, [edx + 0x28]
lea eax, [esp + 0x110]
call fcn.00434890
mov edx, dword [eax]
sub esp, 0x10
mov ecx, esp
mov dword [ecx], edx
mov edx, dword [eax + 4]
mov dword [ecx + 4], edx
mov edx, dword [eax + 8]
mov eax, dword [eax + 0xc]
sub esp, 0x1c
mov dword [ecx + 8], edx
mov dword [ecx + 0xc], eax
mov ecx, esp
mov dword [esp + 0x68], esp
xor ebx, ebx
push 7
mov esi, 0xf
mov dword [ecx + 0x18], esi
mov dword [ecx + 0x14], ebx
push 0x7ae824
mov byte [ecx + 4], bl
call fcn.004016e0
mov ecx, dword [0x88224c]
call fcn.006f1280
add esp, 0x2c
push ebx
xor edx, edx
push ebx
xor ecx, ecx
lea eax, [esp + 0x114]
call fcn.004348b0
mov edx, dword [eax]
sub esp, 0x10
mov ecx, esp
mov dword [ecx], edx
mov edx, dword [eax + 4]
mov dword [ecx + 4], edx
mov edx, dword [eax + 8]
mov eax, dword [eax + 0xc]
sub esp, 0x1c
mov dword [ecx + 8], edx
mov dword [ecx + 0xc], eax
mov ecx, esp
mov dword [esp + 0x68], esp
push 4
mov dword [ecx + 0x18], esi
mov dword [ecx + 0x14], ebx
push 0x7ae82c
mov byte [ecx + 4], bl
call fcn.004016e0
mov ecx, dword [0x88224c]
call fcn.006f1280
mov edi, dword [0x8815c0]
add esp, 0x1c
mov eax, esp
lea esi, [esp + 0x11c]
mov dword [esp + 0x4c], esp
mov dword [eax], 0x1b8
mov dword [eax + 4], 0x15e
mov dword [eax + 8], 0x406
mov dword [eax + 0xc], 0x14a
call fcn.00404400
mov esi, dword [esp + 0x50]
mov ecx, eax
add esp, 0x10
mov eax, edi
push esi
mov edi, ecx
call fcn.00432a40
mov ecx, 0xffcb58
lea eax, [esp + 0x9c]
call fcn.00434820
mov ecx, esi
call fcn.00430c20
xor ecx, ecx
push 0x13
mov word [esp + 0x124], cx
mov esi, 7
push str.Favorite_Gem_Color:
lea ecx, [esp + 0x124]
mov dword [esp + 0x13c], esi
mov dword [esp + 0x138], ebx
call fcn.00403a80
mov dword [esp + 0x3c0], ebx
push 0xc
xor edx, edx
push str.Hypercubes:_n
lea ecx, [esp + 0x140]
mov dword [esp + 0x158], esi
mov dword [esp + 0x154], ebx
mov word [esp + 0x144], dx
call fcn.00403a80
mov byte [esp + 0x3c0], 1
push 0xb
xor eax, eax
push str.Star_Gems:_n
lea ecx, [esp + 0x4c]
mov dword [esp + 0x64], esi
mov dword [esp + 0x60], ebx
mov word [esp + 0x50], ax
call fcn.00403a80
mov byte [esp + 0x3c0], 2
xor ecx, ecx
push 0xc
mov dword [esp + 0xd4], esi
mov dword [esp + 0xd0], ebx
mov word [esp + 0xc0], cx
push str.Flame_Gems:_n
lea ecx, [esp + 0xc0]
call fcn.00403a80
mov byte [esp + 0x3c0], 3
push 0xe
xor edx, edx
push str.Gems_Matched:_n
lea ecx, [esp + 0xa4]
mov dword [esp + 0xbc], esi
mov dword [esp + 0xb8], ebx
mov word [esp + 0xa8], dx
call fcn.00403a80
lea eax, [esp + 0x11c]
push eax
mov byte [esp + 0x3c4], 4
mov eax, dword [0x88b148]
push 0x1c5
add eax, 0x7ec
lea esi, [esp + 0x68]
call fcn.004711e0
mov edi, eax
lea ecx, [esp + 0x138]
mov byte [esp + 0x3c0], 5
mov eax, dword [0x88b148]
push ecx
push 0x1c4
add eax, 0x7ec
lea esi, [esp + 0x84]
call fcn.004711e0
mov ebx, eax
lea edx, [esp + 0x44]
mov byte [esp + 0x3c0], 6
mov eax, dword [0x88b148]
push edx
push 0x1c3
add eax, 0x7ec
lea esi, [esp + 0xf8]
call fcn.004711e0
mov dword [esp + 0x98], eax
lea eax, [esp + 0xb8]
push eax
mov byte [esp + 0x3c4], 7
mov eax, dword [0x88b148]
push 0x1c2
add eax, 0x7ec
lea esi, [esp + 0x178]
call fcn.004711e0
mov dword [esp + 0x3c], eax
lea ecx, [esp + 0x9c]
mov byte [esp + 0x3c0], 8
mov eax, dword [0x88b148]
push ecx
push 0x1c1
add eax, 0x7ec
lea esi, [esp + 0x1b0]
call fcn.004711e0
mov edx, dword [esp + 0x3c]
push edx
mov ecx, eax
lea esi, [esp + 0x190]
mov byte [esp + 0x3c4], 9
call fcn.00404070
add esp, 4
mov ecx, dword [esp + 0x98]
push ecx
mov ecx, eax
lea esi, [esp + 0x158]
mov byte [esp + 0x3c4], 0xa
call fcn.00404070
add esp, 4
mov byte [esp + 0x3c0], 0xb
push ebx
mov ecx, eax
lea esi, [esp + 0x1e4]
call fcn.00404070
add esp, 4
push edi
mov ecx, eax
lea esi, [esp + 0x1c8]
mov byte [esp + 0x3c4], 0xc
call fcn.00404070
add esp, 4
mov ebx, eax
push 0xffffffffffffffff
push 0xffffffffffffffff
sub esp, 0x10
mov eax, esp
mov byte [esp + 0x3d8], 0xd
lea esi, [esp + 0x124]
mov dword [esp + 0x54], esp
mov dword [eax], 0x1e0
mov dword [eax + 4], 0x177
mov dword [eax + 8], 0x3b6
mov dword [eax + 0xc], 0x118
call fcn.00404400
mov esi, dword [esp + 0x58]
add esp, 0x10
push eax
mov edx, esi
call fcn.00433a00
mov edi, 8
cmp dword [esp + 0x1dc], edi
jb 0x69020c
mov edx, dword [esp + 0x1c8]
push edx
call fcn.006441c7
add esp, 4
xor eax, eax
mov ebx, 7
mov dword [esp + 0x1dc], ebx
mov dword [esp + 0x1d8], 0
mov word [esp + 0x1c8], ax
cmp dword [esp + 0x1f8], edi
jb 0x690246
mov ecx, dword [esp + 0x1e4]
push ecx
call fcn.006441c7
add esp, 4
xor edx, edx
mov dword [esp + 0x1f8], ebx
mov dword [esp + 0x1f4], 0
mov word [esp + 0x1e4], dx
cmp dword [esp + 0x16c], edi
jb 0x69027b
mov eax, dword [esp + 0x158]
push eax
call fcn.006441c7
add esp, 4
xor ecx, ecx
mov dword [esp + 0x16c], ebx
mov dword [esp + 0x168], 0
mov word [esp + 0x158], cx
cmp dword [esp + 0x1a4], edi
jb 0x6902b0
mov edx, dword [esp + 0x190]
push edx
call fcn.006441c7
add esp, 4
xor eax, eax
mov dword [esp + 0x1a4], ebx
mov dword [esp + 0x1a0], 0
mov word [esp + 0x190], ax
cmp dword [esp + 0x1c0], edi
jb 0x6902e5
mov ecx, dword [esp + 0x1ac]
push ecx
call fcn.006441c7
add esp, 4
xor edx, edx
mov dword [esp + 0x1c0], ebx
mov dword [esp + 0x1bc], 0
mov word [esp + 0x1ac], dx
cmp dword [esp + 0x188], edi
jb 0x69031a
mov eax, dword [esp + 0x174]
push eax
call fcn.006441c7
add esp, 4
xor ecx, ecx
mov dword [esp + 0x188], ebx
mov dword [esp + 0x184], 0
mov word [esp + 0x174], cx
cmp dword [esp + 0x108], edi
jb 0x69034f
mov edx, dword [esp + 0xf4]
push edx
call fcn.006441c7
add esp, 4
xor eax, eax
mov dword [esp + 0x108], ebx
mov dword [esp + 0x104], 0
mov word [esp + 0xf4], ax
cmp dword [esp + 0x94], edi
jb 0x690384
mov ecx, dword [esp + 0x80]
push ecx
call fcn.006441c7
add esp, 4
xor edx, edx
mov dword [esp + 0x94], ebx
mov dword [esp + 0x90], 0
mov word [esp + 0x80], dx
cmp dword [esp + 0x78], edi
jb 0x6903b3
mov eax, dword [esp + 0x64]
push eax
call fcn.006441c7
add esp, 4
xor ecx, ecx
mov dword [esp + 0x78], ebx
mov dword [esp + 0x74], 0
mov word [esp + 0x64], cx
cmp dword [esp + 0xb4], edi
jb 0x6903df
mov edx, dword [esp + 0xa0]
push edx
call fcn.006441c7
add esp, 4
xor eax, eax
mov dword [esp + 0xb4], ebx
mov dword [esp + 0xb0], 0
mov word [esp + 0xa0], ax
cmp dword [esp + 0xd0], edi
jb 0x690414
mov ecx, dword [esp + 0xbc]
push ecx
call fcn.006441c7
add esp, 4
xor edx, edx
mov dword [esp + 0xd0], ebx
mov dword [esp + 0xcc], 0
mov word [esp + 0xbc], dx
cmp dword [esp + 0x5c], edi
jb 0x690443
mov eax, dword [esp + 0x48]
push eax
call fcn.006441c7
add esp, 4
xor ecx, ecx
mov dword [esp + 0x5c], ebx
mov dword [esp + 0x58], 0
mov word [esp + 0x48], cx
cmp dword [esp + 0x150], edi
jb 0x69046f
mov edx, dword [esp + 0x13c]
push edx
call fcn.006441c7
add esp, 4
xor eax, eax
mov dword [esp + 0x3c0], 0xffffffff
mov dword [esp + 0x150], ebx
mov dword [esp + 0x14c], 0
mov word [esp + 0x13c], ax
cmp dword [esp + 0x134], edi
jb 0x6904af
mov ecx, dword [esp + 0x120]
push ecx
call fcn.006441c7
add esp, 4
mov edx, 0xe0
push pe_nt_image_headers32
lea ecx, [edx + 0x1f]
lea eax, [esp + 0x110]
call fcn.00434890
mov ecx, esi
call fcn.00430c20
push 3
xor edx, edx
push 0x7ae8cc
lea ecx, [esp + 0x140]
mov dword [esp + 0x158], ebx
mov dword [esp + 0x154], 0
mov word [esp + 0x144], dx
call fcn.00403a80
lea eax, [esp + 0x138]
push eax
mov dword [esp + 0x3c4], 0xe
mov eax, dword [0x88b148]
push 0x1c6
add eax, 0x7ec
lea esi, [esp + 0x2a0]
call fcn.004711e0
mov byte [esp + 0x3c0], 0x10
cmp dword [esp + 0x150], edi
jb 0x69054a
mov ecx, dword [esp + 0x13c]
push ecx
call fcn.006441c7
add esp, 4
xor eax, eax
push 0xb
xor edx, edx
push str.FF0000Red
lea ecx, [esp + 0x4c]
mov dword [esp + 0x158], ebx
mov dword [esp + 0x154], eax
mov word [esp + 0x144], dx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x60], eax
mov word [esp + 0x50], ax
call fcn.00403a80
lea ecx, [esp + 0x44]
mov byte [esp + 0x3c0], 0x11
mov eax, dword [0x88b148]
push ecx
push 0x1c7
add eax, 0x7ec
lea esi, [esp + 0x2bc]
call fcn.004711e0
mov byte [esp + 0x3c0], 0x13
cmp dword [esp + 0x5c], edi
jb 0x6905c4
mov edx, dword [esp + 0x48]
push edx
call fcn.006441c7
add esp, 4
xor ecx, ecx
xor eax, eax
push 0xd
mov word [esp + 0x4c], cx
xor edx, edx
push str.FFFFFFWhite
lea ecx, [esp + 0xc0]
mov dword [esp + 0x64], ebx
mov dword [esp + 0x60], eax
mov dword [esp + 0xd8], ebx
mov dword [esp + 0xd4], eax
mov word [esp + 0xc4], dx
call fcn.00403a80
lea eax, [esp + 0xb8]
push eax
mov byte [esp + 0x3c4], 0x14
mov eax, dword [0x88b148]
push 0x1c8
add eax, 0x7ec
lea esi, [esp + 0x2d8]
call fcn.004711e0
mov byte [esp + 0x3c0], 0x16
cmp dword [esp + 0xd0], edi
jb 0x69064c
mov ecx, dword [esp + 0xbc]
push ecx
call fcn.006441c7
add esp, 4
xor eax, eax
push 0xd
xor edx, edx
push str.00FF00Green
lea ecx, [esp + 0x4c]
mov dword [esp + 0xd8], ebx
mov dword [esp + 0xd4], eax
mov word [esp + 0xc4], dx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x60], eax
mov word [esp + 0x50], ax
call fcn.00403a80
lea ecx, [esp + 0x44]
mov byte [esp + 0x3c0], 0x17
mov eax, dword [0x88b148]
push ecx
push 0x1c9
add eax, 0x7ec
lea esi, [esp + 0x2f4]
call fcn.004711e0
mov byte [esp + 0x3c0], 0x19
cmp dword [esp + 0x5c], edi
jb 0x6906c6
mov edx, dword [esp + 0x48]
push edx
call fcn.006441c7
add esp, 4
xor ecx, ecx
xor eax, eax
push 0xe
mov word [esp + 0x4c], cx
xor edx, edx
push str.FFFF00Yellow
lea ecx, [esp + 0xc0]
mov dword [esp + 0x64], ebx
mov dword [esp + 0x60], eax
mov dword [esp + 0xd8], ebx
mov dword [esp + 0xd4], eax
mov word [esp + 0xc4], dx
call fcn.00403a80
lea eax, [esp + 0xb8]
push eax
mov byte [esp + 0x3c4], 0x1a
mov eax, dword [0x88b148]
push 0x1ca
add eax, 0x7ec
lea esi, [esp + 0x310]
call fcn.004711e0
mov byte [esp + 0x3c0], 0x1c
cmp dword [esp + 0xd0], edi
jb 0x69074e
mov ecx, dword [esp + 0xbc]
push ecx
call fcn.006441c7
add esp, 4
xor eax, eax
push 0xe
xor edx, edx
push str.FF00FFPurple
lea ecx, [esp + 0x4c]
mov dword [esp + 0xd8], ebx
mov dword [esp + 0xd4], eax
mov word [esp + 0xc4], dx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x60], eax
mov word [esp + 0x50], ax
call fcn.00403a80
lea ecx, [esp + 0x44]
mov byte [esp + 0x3c0], 0x1d
mov eax, dword [0x88b148]
push ecx
push 0x1cb
add eax, 0x7ec
lea esi, [esp + 0x32c]
call fcn.004711e0
mov byte [esp + 0x3c0], 0x1f
cmp dword [esp + 0x5c], edi
jb 0x6907c8
mov edx, dword [esp + 0x48]
push edx
call fcn.006441c7
add esp, 4
xor ecx, ecx
xor eax, eax
push 0xe
mov word [esp + 0x4c], cx
xor edx, edx
push str.FF9900Orange
lea ecx, [esp + 0xc0]
mov dword [esp + 0x64], ebx
mov dword [esp + 0x60], eax
mov dword [esp + 0xd8], ebx
mov dword [esp + 0xd4], eax
mov word [esp + 0xc4], dx
call fcn.00403a80
lea eax, [esp + 0xb8]
push eax
mov byte [esp + 0x3c4], 0x20
mov eax, dword [0x88b148]
push 0x1cc
add eax, 0x7ec
lea esi, [esp + 0x348]
call fcn.004711e0
mov byte [esp + 0x3c0], 0x22
cmp dword [esp + 0xd0], edi
jb 0x690850
mov ecx, dword [esp + 0xbc]
push ecx
call fcn.006441c7
add esp, 4
xor eax, eax
push 0xc
xor edx, edx
push str.0099FFBlue
lea ecx, [esp + 0x4c]
mov dword [esp + 0xd8], ebx
mov dword [esp + 0xd4], eax
mov word [esp + 0xc4], dx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x60], eax
mov word [esp + 0x50], ax
call fcn.00403a80
lea ecx, [esp + 0x44]
mov byte [esp + 0x3c0], 0x23
mov eax, dword [0x88b148]
push ecx
push 0x1cd
add eax, 0x7ec
lea esi, [esp + 0x364]
call fcn.004711e0
cmp dword [esp + 0x5c], edi
jb 0x6908c2
mov edx, dword [esp + 0x48]
push edx
call fcn.006441c7
add esp, 4
xor edi, edi
xor eax, eax
mov dword [esp + 0x5c], ebx
mov dword [esp + 0x58], edi
mov word [esp + 0x48], ax
mov byte [esp + 0x3c0], 0x24
mov edx, dword [0x88b12c]
mov eax, dword [edx + 0xb78]
or esi, 0xffffffff
xor ecx, ecx
add eax, 0xd4
mov edx, dword [eax]
cmp edx, edi
jle 0x6908fb
mov edi, edx
mov esi, ecx
inc ecx
add eax, 4
cmp ecx, ebx
jl 0x6908f1
cmp esi, 0xffffffff
jle 0x690929
push 0xffffffffffffffff
lea eax, [esi*8]
sub eax, esi
lea ecx, [esp + eax*4 + 0x2b8]
push 0
push ecx
lea ecx, [esp + 0x2a4]
call fcn.00401880
mov edx, dword [0x88b12c]
mov eax, dword [edx + 0xb78]
mov ecx, dword [eax + 0xf8]
lea esi, [esp + 0x1fc]
call fcn.00439440
mov ebx, eax
mov byte [esp + 0x3c0], 0x25
mov ecx, dword [0x88b12c]
mov edx, dword [ecx + 0xb78]
mov ecx, dword [edx + 0xf4]
lea esi, [esp + 0x44]
call fcn.00439440
mov dword [esp + 0x98], eax
mov byte [esp + 0x3c0], 0x26
mov eax, dword [0x88b12c]
mov ecx, dword [eax + 0xb78]
mov ecx, dword [ecx + 0xf0]
lea esi, [esp + 0x11c]
call fcn.00439440
mov dword [esp + 0x3c], eax
mov byte [esp + 0x3c0], 0x27
mov edx, dword [0x88b12c]
mov eax, dword [edx + 0xb78]
mov ecx, dword [eax + 0xd0]
lea esi, [esp + 0x1c4]
call fcn.00439440
mov edx, 0x7ae9ac
mov ecx, eax
lea edi, [esp + 0x1e0]
mov byte [esp + 0x3c0], 0x28
call fcn.00410080
mov ecx, dword [esp + 0x3c]
push ecx
mov ecx, eax
lea esi, [esp + 0x158]
mov byte [esp + 0x3c4], 0x29
call fcn.00404070
add esp, 4
mov edx, 0x7ae9a8
mov ecx, eax
lea edi, [esp + 0x18c]
mov byte [esp + 0x3c0], 0x2a
call fcn.00410080
mov edx, dword [esp + 0x98]
push edx
mov ecx, eax
lea esi, [esp + 0x1ac]
mov byte [esp + 0x3c4], 0x2b
call fcn.00404070
add esp, 4
mov edx, 0x7ae9a4
mov ecx, eax
lea edi, [esp + 0x170]
mov byte [esp + 0x3c0], 0x2c
call fcn.00410080
push ebx
mov ecx, eax
lea esi, [esp + 0xf4]
mov byte [esp + 0x3c4], 0x2d
call fcn.00404070
add esp, 4
mov edx, str._n_n_n_n
mov ecx, eax
lea edi, [esp + 0x7c]
mov byte [esp + 0x3c0], 0x2e
call fcn.00410080
lea ecx, [esp + 0x298]
push ecx
mov byte [esp + 0x3c4], 0x2f
mov ecx, eax
lea esi, [esp + 0x64]
call fcn.00404070
add esp, 4
mov ebx, eax
push 1
push 0xffffffffffffffff
sub esp, 0x10
mov eax, esp
mov byte [esp + 0x3d8], 0x30
lea esi, [esp + 0x124]
mov dword [esp + 0x54], esp
mov dword [eax], 0x1e0
mov dword [eax + 4], 0x177
mov dword [eax + 8], 0x3b6
mov dword [eax + 0xc], 0x118
call fcn.00404400
mov edx, dword [esp + 0x58]
add esp, 0x10
push eax
call fcn.00433a00
mov esi, 8
cmp dword [esp + 0x78], esi
jb 0x690b05
mov edx, dword [esp + 0x64]
push edx
call fcn.006441c7
add esp, 4
xor edi, edi
xor eax, eax
mov ebx, 7
mov dword [esp + 0x78], ebx
mov dword [esp + 0x74], edi
mov word [esp + 0x64], ax
cmp dword [esp + 0x94], esi
jb 0x690b34
mov ecx, dword [esp + 0x80]
push ecx
call fcn.006441c7
add esp, 4
xor edx, edx
mov dword [esp + 0x94], ebx
mov dword [esp + 0x90], edi
mov word [esp + 0x80], dx
cmp dword [esp + 0x108], esi
jb 0x690b65
mov eax, dword [esp + 0xf4]
push eax
call fcn.006441c7
add esp, 4
xor ecx, ecx
mov dword [esp + 0x108], ebx
mov dword [esp + 0x104], edi
mov word [esp + 0xf4], cx
cmp dword [esp + 0x188], esi
jb 0x690b96
mov edx, dword [esp + 0x174]
push edx
call fcn.006441c7
add esp, 4
xor eax, eax
mov dword [esp + 0x188], ebx
mov dword [esp + 0x184], edi
mov word [esp + 0x174], ax
cmp dword [esp + 0x1c0], esi
jb 0x690bc7
mov ecx, dword [esp + 0x1ac]
push ecx
call fcn.006441c7
add esp, 4
xor edx, edx
mov dword [esp + 0x1c0], ebx
mov dword [esp + 0x1bc], edi
mov word [esp + 0x1ac], dx
cmp dword [esp + 0x1a4], esi
jb 0x690bf8
mov eax, dword [esp + 0x190]
push eax
call fcn.006441c7
add esp, 4
xor ecx, ecx
mov dword [esp + 0x1a4], ebx
mov dword [esp + 0x1a0], edi
mov word [esp + 0x190], cx
cmp dword [esp + 0x16c], esi
jb 0x690c29
mov edx, dword [esp + 0x158]
push edx
call fcn.006441c7
add esp, 4
xor eax, eax
mov dword [esp + 0x16c], ebx
mov dword [esp + 0x168], edi
mov word [esp + 0x158], ax
cmp dword [esp + 0x1f8], esi
jb 0x690c5a
mov ecx, dword [esp + 0x1e4]
push ecx
call fcn.006441c7
add esp, 4
xor edx, edx
mov dword [esp + 0x1f8], ebx
mov dword [esp + 0x1f4], edi
mov word [esp + 0x1e4], dx
cmp dword [esp + 0x1dc], esi
jb 0x690c8b
mov eax, dword [esp + 0x1c8]
push eax
call fcn.006441c7
add esp, 4
xor ecx, ecx
mov dword [esp + 0x1dc], ebx
mov dword [esp + 0x1d8], edi
mov word [esp + 0x1c8], cx
cmp dword [esp + 0x134], esi
jb 0x690cbc
mov edx, dword [esp + 0x120]
push edx
call fcn.006441c7
add esp, 4
xor eax, eax
mov dword [esp + 0x134], ebx
mov dword [esp + 0x130], edi
mov word [esp + 0x120], ax
cmp dword [esp + 0x5c], esi
jb 0x690ce7
mov ecx, dword [esp + 0x48]
push ecx
call fcn.006441c7
add esp, 4
xor edx, edx
mov byte [esp + 0x3c0], 0x24
mov dword [esp + 0x5c], ebx
mov dword [esp + 0x58], edi
mov word [esp + 0x48], dx
cmp dword [esp + 0x214], esi
jb 0x690d17
mov eax, dword [esp + 0x200]
push eax
call fcn.006441c7
add esp, 4
mov edi, dword [0x8815c0]
mov eax, 0x1b8
sub esp, 0x10
mov ecx, 0x406
mov edx, 0xa0
mov dword [esp + 0xac], eax
mov eax, esp
mov ebx, 0x2b2
lea esi, [esp + 0x11c]
mov dword [esp + 0xb4], ecx
mov dword [esp + 0xb8], edx
mov dword [esp + 0x4c], esp
mov dword [eax], 0x1b8
mov dword [eax + 4], ebx
mov dword [eax + 8], ecx
mov dword [eax + 0xc], edx
call fcn.00404400
mov edx, dword [esp + 0x50]
mov ecx, eax
add esp, 0x10
mov eax, edi
push edx
mov edi, ecx
call fcn.00432a40
sub dword [esp + 0xa4], 0x50
sub dword [esp + 0xa8], 0x28
add ebx, 0x14
mov ecx, 0xffcb58
lea eax, [esp + 0x10c]
mov dword [esp + 0xa0], ebx
call fcn.00434820
mov ecx, dword [esp + 0x40]
call fcn.00430c20
push 0x7ae9b0
lea ecx, [esp + 0x48]
call fcn.00403550
push str.Zen_Mode_High_Score:_n
lea ecx, [esp + 0x120]
mov byte [esp + 0x3c4], 0x31
call fcn.00403550
lea eax, [esp + 0x44]
push eax
mov byte [esp + 0x3c4], 0x32
mov eax, dword [0x88b148]
push 0x1cf
add eax, 0x7ec
lea esi, [esp + 0xf8]
call fcn.004711e0
mov edi, eax
lea ecx, [esp + 0x11c]
mov byte [esp + 0x3c0], 0x33
mov eax, dword [0x88b148]
push ecx
push 0x1ce
add eax, 0x7ec
lea esi, [esp + 0x84]
call fcn.004711e0
push edi
mov ecx, eax
lea esi, [esp + 0x64]
mov byte [esp + 0x3c4], 0x34
call fcn.00404070
add esp, 4
mov edi, eax
push 0xffffffffffffffff
mov byte [esp + 0x3c4], 0x35
mov edx, dword [esp + 0xa8]
mov ecx, dword [esp + 0xac]
push 0xffffffffffffffff
sub esp, 0x10
mov eax, esp
mov dword [esp + 0x54], esp
mov dword [eax], 0x1e0
mov dword [eax + 4], ebx
mov dword [eax + 8], edx
mov dword [eax + 0xc], ecx
lea esi, [esp + 0x124]
call fcn.00404400
mov edx, dword [esp + 0x58]
add esp, 0x10
push eax
mov ebx, edi
call fcn.00433a00
mov ebx, 8
cmp dword [esp + 0x78], ebx
jb 0x690eab
mov edx, dword [esp + 0x64]
push edx
call fcn.006441c7
add esp, 4
xor edi, edi
xor eax, eax
mov esi, 7
mov dword [esp + 0x78], esi
mov dword [esp + 0x74], edi
mov word [esp + 0x64], ax
cmp dword [esp + 0x94], ebx
jb 0x690eda
mov ecx, dword [esp + 0x80]
push ecx
call fcn.006441c7
add esp, 4
xor edx, edx
mov dword [esp + 0x94], esi
mov dword [esp + 0x90], edi
mov word [esp + 0x80], dx
cmp dword [esp + 0x108], ebx
jb 0x690f0b
mov eax, dword [esp + 0xf4]
push eax
call fcn.006441c7
add esp, 4
xor ecx, ecx
mov dword [esp + 0x108], esi
mov dword [esp + 0x104], edi
mov word [esp + 0xf4], cx
cmp dword [esp + 0x134], ebx
jb 0x690f3c
mov edx, dword [esp + 0x120]
push edx
call fcn.006441c7
add esp, 4
xor eax, eax
mov byte [esp + 0x3c0], 0x24
mov dword [esp + 0x134], esi
mov dword [esp + 0x130], edi
mov word [esp + 0x120], ax
cmp dword [esp + 0x5c], ebx
jb 0x690f6f
mov ecx, dword [esp + 0x48]
push ecx
call fcn.006441c7
add esp, 4
mov eax, dword [0x88b12c]
xor edx, edx
mov dword [esp + 0x5c], esi
mov dword [esp + 0x58], edi
mov word [esp + 0x48], dx
mov ecx, dword [eax + 0xb78]
add ecx, 0x158
lea esi, [edx + 5]
xor eax, eax
cmp byte [eax + ecx], 0
je 0x690f9b
inc edx
inc eax
cmp eax, ebx
jl 0x690f94
add ecx, ebx
sub esi, 1
jne 0x690f92
cmp edx, edi
fldz
fstp dword [esp + 0x3c]
mov dword [esp + 0x98], edx
jle 0x690fc9
fild dword [esp + 0x98]
fdiv qword [0x82dcf0]
fstp dword [esp + 0x3c]
mov edx, 0xe0
push pe_nt_image_headers32
lea ecx, [edx + 0x1f]
lea eax, [esp + 0x110]
call fcn.00434890
mov ecx, dword [esp + 0x40]
call fcn.00430c20
push 0x7aea10
lea ecx, [esp + 0xd8]
call fcn.00403550
fld dword [esp + 0x3c]
mov byte [esp + 0x3c0], 0x36
fmul qword [0x82dc58]
call fcn.0076f850
mov ecx, eax
lea esi, [esp + 0x154]
call fcn.00439440
mov edi, eax
lea ecx, [esp + 0xd4]
mov byte [esp + 0x3c0], 0x37
mov eax, dword [0x88b148]
push ecx
push 0x1d0
add eax, 0x7ec
lea esi, [esp + 0x194]
call fcn.004711e0
mov byte [esp + 0x3c0], 0x38
cmp dword [edi + 0x18], ebx
jb 0x69105d
mov edi, dword [edi + 4]
jmp 0x691060
add edi, 4
cmp dword [eax + 0x18], ebx
jb 0x69106a
mov eax, dword [eax + 4]
jmp 0x69106d
add eax, 4
push edi
push eax
lea esi, [esp + 0x1b0]
call fcn.00439a90
mov ebx, eax
mov byte [esp + 0x3c8], 0x39
mov edx, dword [0x88b12c]
mov eax, dword [edx + 0xb78]
mov ecx, dword [eax + 0xc8]
lea esi, [esp + 0x178]
call fcn.00439440
mov edx, 0x7aea1c
mov ecx, eax
lea edi, [esp + 0xf8]
mov byte [esp + 0x3c8], 0x3a
call fcn.00410080
push ebx
mov ecx, eax
lea esi, [esp + 0x88]
mov byte [esp + 0x3cc], 0x3b
call fcn.00404070
add esp, 0xc
mov edx, 0x7aea0c
mov ecx, eax
lea edi, [esp + 0x60]
mov byte [esp + 0x3c0], 0x3c
call fcn.00410080
mov ebx, eax
mov byte [esp + 0x3c0], 0x3d
mov ecx, dword [esp + 0xa0]
mov edx, dword [esp + 0xa4]
push 1
push 0xffffffffffffffff
sub esp, 0x10
mov eax, esp
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0xc0]
lea esi, [esp + 0x124]
mov dword [esp + 0x54], esp
mov dword [eax], 0x1e0
mov dword [eax + 8], edx
mov dword [eax + 0xc], ecx
call fcn.00404400
mov edx, dword [esp + 0x58]
add esp, 0x10
push eax
call fcn.00433a00
mov esi, 8
cmp dword [esp + 0x78], esi
jb 0x69115c
mov edx, dword [esp + 0x64]
push edx
call fcn.006441c7
add esp, 4
xor edi, edi
xor eax, eax
mov ebx, 7
mov dword [esp + 0x78], ebx
mov dword [esp + 0x74], edi
mov word [esp + 0x64], ax
cmp dword [esp + 0x94], esi
jb 0x69118b
mov ecx, dword [esp + 0x80]
push ecx
call fcn.006441c7
add esp, 4
xor edx, edx
mov dword [esp + 0x94], ebx
mov dword [esp + 0x90], edi
mov word [esp + 0x80], dx
cmp dword [esp + 0x108], esi
jb 0x6911bc
mov eax, dword [esp + 0xf4]
push eax
call fcn.006441c7
add esp, 4
xor ecx, ecx
mov dword [esp + 0x108], ebx
mov dword [esp + 0x104], edi
mov word [esp + 0xf4], cx
cmp dword [esp + 0x188], esi
jb 0x6911ed
mov edx, dword [esp + 0x174]
push edx
call fcn.006441c7
add esp, 4
xor eax, eax
mov dword [esp + 0x188], ebx
mov dword [esp + 0x184], edi
mov word [esp + 0x174], ax
cmp dword [esp + 0x1c0], esi
jb 0x69121e
mov ecx, dword [esp + 0x1ac]
push ecx
call fcn.006441c7
add esp, 4
xor edx, edx
mov dword [esp + 0x1c0], ebx
mov dword [esp + 0x1bc], edi
mov word [esp + 0x1ac], dx
cmp dword [esp + 0x1a4], esi
jb 0x69124f
mov eax, dword [esp + 0x190]
push eax
call fcn.006441c7
add esp, 4
xor ecx, ecx
mov dword [esp + 0x1a4], ebx
mov dword [esp + 0x1a0], edi
mov word [esp + 0x190], cx
cmp dword [esp + 0x16c], esi
jb 0x691280
mov edx, dword [esp + 0x158]
push edx
call fcn.006441c7
add esp, 4
xor eax, eax
mov byte [esp + 0x3c0], 0x24
mov dword [esp + 0x16c], ebx
mov dword [esp + 0x168], edi
mov word [esp + 0x158], ax
cmp dword [esp + 0xec], esi
jb 0x6912b9
mov ecx, dword [esp + 0xd8]
push ecx
call fcn.006441c7
add esp, 4
mov edi, dword [0x8815c0]
mov eax, 0x1b8
sub esp, 0x10
mov ecx, 0x406
mov edx, 0xa0
mov dword [esp + 0xac], eax
mov eax, esp
mov ebx, 0x35c
lea esi, [esp + 0x11c]
mov dword [esp + 0xb4], ecx
mov dword [esp + 0xb8], edx
mov dword [esp + 0x4c], esp
mov dword [eax], 0x1b8
mov dword [eax + 4], ebx
mov dword [eax + 8], ecx
mov dword [eax + 0xc], edx
call fcn.00404400
mov edx, dword [esp + 0x50]
mov ecx, eax
add esp, 0x10
mov eax, edi
push edx
mov edi, ecx
call fcn.00432a40
sub dword [esp + 0xa4], 0x50
sub dword [esp + 0xa8], 0x28
add ebx, 0x14
mov ecx, 0xffcb58
lea eax, [esp + 0x10c]
mov dword [esp + 0xa0], ebx
call fcn.00434820
mov ecx, dword [esp + 0x40]
call fcn.00430c20
push 0x7aea20
lea ecx, [esp + 0x48]
call fcn.00403550
push str.All_Time_Best_Move:_n
lea ecx, [esp + 0x120]
mov byte [esp + 0x3c4], 0x3e
call fcn.00403550
lea eax, [esp + 0x44]
push eax
mov byte [esp + 0x3c4], 0x3f
mov eax, dword [0x88b148]
push 0x1d2
add eax, 0x7ec
lea esi, [esp + 0xf8]
call fcn.004711e0
mov edi, eax
lea ecx, [esp + 0x11c]
mov byte [esp + 0x3c0], pe_nt_image_headers32
mov eax, dword [0x88b148]
push ecx
push 0x1d1
add eax, 0x7ec
lea esi, [esp + 0x84]
call fcn.004711e0
push edi
mov ecx, eax
lea esi, [esp + 0x64]
mov byte [esp + 0x3c4], 0x41
call fcn.00404070
add esp, 4
mov edi, eax
push 0xffffffffffffffff
mov byte [esp + 0x3c4], 0x42
mov edx, dword [esp + 0xa8]
mov ecx, dword [esp + 0xac]
push 0xffffffffffffffff
sub esp, 0x10
mov eax, esp
mov dword [esp + 0x54], esp
mov dword [eax], 0x1e0
mov dword [eax + 4], ebx
mov dword [eax + 8], edx
mov dword [eax + 0xc], ecx
lea esi, [esp + 0x124]
call fcn.00404400
mov edx, dword [esp + 0x58]
add esp, 0x10
push eax
mov ebx, edi
call fcn.00433a00
mov edi, 8
cmp dword [esp + 0x78], edi
jb 0x69144d
mov edx, dword [esp + 0x64]
push edx
call fcn.006441c7
add esp, 4
xor ebx, ebx
xor eax, eax
mov esi, 7
mov dword [esp + 0x78], esi
mov dword [esp + 0x74], ebx
mov word [esp + 0x64], ax
cmp dword [esp + 0x94], edi
jb 0x69147c
mov ecx, dword [esp + 0x80]
push ecx
call fcn.006441c7
add esp, 4
xor edx, edx
mov dword [esp + 0x94], esi
mov dword [esp + 0x90], ebx
mov word [esp + 0x80], dx
cmp dword [esp + 0x108], edi
jb 0x6914ad
mov eax, dword [esp + 0xf4]
push eax
call fcn.006441c7
add esp, 4
xor ecx, ecx
mov dword [esp + 0x108], esi
mov dword [esp + 0x104], ebx
mov word [esp + 0xf4], cx
cmp dword [esp + 0x134], edi
jb 0x6914de
mov edx, dword [esp + 0x120]
push edx
call fcn.006441c7
add esp, 4
xor eax, eax
mov dword [esp + 0x134], esi
mov dword [esp + 0x130], ebx
mov word [esp + 0x120], ax
cmp dword [esp + 0x5c], edi
jb 0x691509
mov ecx, dword [esp + 0x48]
push ecx
call fcn.006441c7
add esp, 4
mov eax, dword [0x88b12c]
xor edx, edx
mov dword [esp + 0x58], ebx
mov dword [esp + 0x5c], esi
mov word [esp + 0x48], dx
mov ecx, dword [eax + 0xb78]
mov ebx, dword [ecx + 0xc0]
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x294], esi
mov dword [esp + 0x290], edx
mov word [esp + 0x280], dx
cmp ebx, 0x3c
mov byte [esp + 0x3c0], 0x43
lea ecx, [esp + 0xd4]
jge 0x6916b5
cmp ebx, 1
jne 0x69162a
push str._i_second
call fcn.00403550
lea eax, [esp + 0xd4]
push eax
mov byte [esp + 0x3c4], 0x44
mov eax, dword [0x88b148]
push 0x23c
add eax, 0x7ec
lea esi, [esp + 0x84]
call fcn.004711e0
mov byte [esp + 0x3c0], 0x45
cmp dword [eax + 0x18], edi
jb 0x6915ab
mov eax, dword [eax + 4]
jmp 0x6915ae
add eax, 4
push 1
push eax
lea esi, [esp + 0x68]
call fcn.00439a90
add esp, 8
mov byte [esp + 0x3c0], 0x46
push 0xffffffffffffffff
xor ebx, ebx
push ebx
push eax
lea ecx, [esp + 0x288]
call fcn.00401880
cmp dword [esp + 0x78], edi
jb 0x6915ea
mov ecx, dword [esp + 0x64]
push ecx
call fcn.006441c7
add esp, 4
xor edx, edx
mov esi, 7
mov dword [esp + 0x78], esi
mov dword [esp + 0x74], ebx
mov word [esp + 0x64], dx
cmp dword [esp + 0x94], edi
jb 0x691617
mov eax, dword [esp + 0x80]
push eax
call fcn.006441c7
add esp, 4
mov dword [esp + 0x94], esi
mov dword [esp + 0x90], ebx
jmp 0x691870
push str._i_seconds
call fcn.00403550
lea eax, [esp + 0xd4]
push eax
mov byte [esp + 0x3c4], 0x47
mov eax, dword [0x88b148]
push 0x253
add eax, 0x7ec
lea esi, [esp + 0x84]
call fcn.004711e0
mov byte [esp + 0x3c0], 0x48
cmp dword [eax + 0x18], edi
jb 0x691671
mov eax, dword [eax + 4]
jmp 0x691674
add eax, 4
push ebx
push eax
lea esi, [esp + 0x68]
call fcn.00439a90
add esp, 8
push 0xffffffffffffffff
push 0
push eax
lea ecx, [esp + 0x288]
mov byte [esp + 0x3cc], 0x49
call fcn.00401880
cmp dword [esp + 0x78], edi
jb 0x6916ae
mov ecx, dword [esp + 0x64]
push ecx
call fcn.006441c7
add esp, 4
xor esi, esi
jmp 0x691835
cmp ebx, 0xe10
jge 0x6917a1
mov eax, 0x88888889
imul ebx
add edx, ebx
sar edx, 5
mov ebx, edx
shr ebx, 0x1f
add ebx, edx
cmp ebx, 1
jne 0x69173f
push str._i_minute
call fcn.00403550
lea eax, [esp + 0xd4]
push eax
mov byte [esp + 0x3c4], 0x4a
mov eax, dword [0x88b148]
push 0x23d
add eax, 0x7ec
lea esi, [esp + 0x84]
call fcn.004711e0
mov byte [esp + 0x3c0], 0x4b
cmp dword [eax + 0x18], edi
jb 0x691720
mov eax, dword [eax + 4]
jmp 0x691723
add eax, 4
push 1
push eax
lea esi, [esp + 0x68]
call fcn.00439a90
add esp, 8
mov byte [esp + 0x3c0], 0x4c
jmp 0x6915c5
push str._i_minutes
call fcn.00403550
lea eax, [esp + 0xd4]
push eax
mov byte [esp + 0x3c4], 0x4d
mov eax, dword [0x88b148]
push 0x254
add eax, 0x7ec
lea esi, [esp + 0x84]
call fcn.004711e0
mov byte [esp + 0x3c0], 0x4e
cmp dword [eax + 0x18], edi
jb 0x691786
mov eax, dword [eax + 4]
jmp 0x691789
add eax, 4
push ebx
push eax
lea esi, [esp + 0x68]
call fcn.00439a90
add esp, 8
mov byte [esp + 0x3c0], 0x4f
jmp 0x691810
push str._.1f_hours
call fcn.00403550
lea eax, [esp + 0xd4]
push eax
mov byte [esp + 0x3c4], 0x50
mov eax, dword [0x88b148]
push 0x23e
add eax, 0x7ec
lea esi, [esp + 0x84]
call fcn.004711e0
mov byte [esp + 0x3c0], 0x51
cmp dword [eax + 0x18], edi
jb 0x6917e8
mov eax, dword [eax + 4]
jmp 0x6917eb
add eax, 4
fild dword [esp + 0x3c]
sub esp, 8
lea esi, [esp + 0x68]
fdiv qword [0x82e428]
fstp qword [esp]
push eax
call fcn.00439a90
add esp, 0xc
mov byte [esp + 0x3c0], 0x52
push 0xffffffffffffffff
xor esi, esi
push esi
push eax
lea ecx, [esp + 0x288]
call fcn.00401880
cmp dword [esp + 0x78], edi
jb 0x691835
mov ecx, dword [esp + 0x64]
push ecx
call fcn.006441c7
add esp, 4
xor edx, edx
mov ebx, 7
mov dword [esp + 0x78], ebx
mov dword [esp + 0x74], esi
mov word [esp + 0x64], dx
cmp dword [esp + 0x94], edi
jb 0x691862
mov eax, dword [esp + 0x80]
push eax
call fcn.006441c7
add esp, 4
mov dword [esp + 0x94], ebx
mov dword [esp + 0x90], esi
mov byte [esp + 0x3c0], 0x43
xor ecx, ecx
mov word [esp + 0x80], cx
cmp dword [esp + 0xec], edi
jb 0x69189b
mov edx, dword [esp + 0xd8]
push edx
call fcn.006441c7
add esp, 4
mov edx, 0xe0
push pe_nt_image_headers32
lea ecx, [edx + 0x1f]
lea eax, [esp + 0x110]
call fcn.00434890
mov edi, dword [esp + 0x40]
mov ecx, edi
call fcn.00430c20
push str._pts_n
lea ecx, [esp + 0x200]
call fcn.00403550
lea eax, [esp + 0x1fc]
push eax
mov byte [esp + 0x3c4], 0x53
mov eax, dword [0x88b148]
push 0x1d7
add eax, 0x7ec
lea esi, [esp + 0xdc]
call fcn.004711e0
mov ebx, eax
mov byte [esp + 0x3c0], 0x54
mov ecx, dword [0x88b12c]
mov edx, dword [ecx + 0xb78]
mov ecx, dword [edx + 0x124]
lea esi, [esp + 0x250]
call fcn.00439440
push ebx
mov ecx, eax
lea esi, [esp + 0x238]
mov byte [esp + 0x3c4], 0x55
call fcn.00404070
add esp, 4
lea ecx, [esp + 0x27c]
push ecx
mov ecx, eax
lea esi, [esp + 0x21c]
mov byte [esp + 0x3c4], 0x56
call fcn.00404070
add esp, 4
mov ebx, eax
mov byte [esp + 0x3c0], 0x57
mov edx, dword [esp + 0xa0]
mov ecx, dword [esp + 0xa4]
push 1
push 0xffffffffffffffff
sub esp, 0x10
mov eax, esp
mov dword [eax + 4], edx
mov edx, dword [esp + 0xc0]
lea esi, [esp + 0x284]
mov dword [esp + 0x54], esp
mov dword [eax], 0x1e0
mov dword [eax + 8], ecx
mov dword [eax + 0xc], edx
call fcn.00404400
add esp, 0x10
push eax
mov edx, edi
call fcn.00433a00
mov esi, 8
cmp dword [esp + 0x230], esi
jb 0x6919cb
mov eax, dword [esp + 0x21c]
push eax
call fcn.006441c7
add esp, 4
xor edi, edi
xor ecx, ecx
mov ebx, 7
mov dword [esp + 0x230], ebx
mov dword [esp + 0x22c], edi
mov word [esp + 0x21c], cx
cmp dword [esp + 0x24c], esi
jb 0x691a03
mov edx, dword [esp + 0x238]
push edx
call fcn.006441c7
add esp, 4
xor eax, eax
mov dword [esp + 0x24c], ebx
mov dword [esp + 0x248], edi
mov word [esp + 0x238], ax
cmp dword [esp + 0x268], esi
jb 0x691a34
mov ecx, dword [esp + 0x254]
push ecx
call fcn.006441c7
add esp, 4
xor edx, edx
mov dword [esp + 0x268], ebx
mov dword [esp + 0x264], edi
mov word [esp + 0x254], dx
cmp dword [esp + 0xec], esi
jb 0x691a65
mov eax, dword [esp + 0xd8]
push eax
call fcn.006441c7
add esp, 4
xor ecx, ecx
mov dword [esp + 0xec], ebx
mov dword [esp + 0xe8], edi
mov word [esp + 0xd8], cx
cmp dword [esp + 0x214], esi
jb 0x691a96
mov edx, dword [esp + 0x200]
push edx
call fcn.006441c7
add esp, 4
cmp dword [esp + 0x294], esi
jb 0x691aaf
mov eax, dword [esp + 0x280]
push eax
call fcn.006441c7
add esp, 4
push fcn.00406fb0
push ebx
push 0x1c
lea edx, [esp + 0x2c0]
xor ecx, ecx
push edx
mov dword [esp + 0x2a4], ebx
mov dword [esp + 0x2a0], edi
mov word [esp + 0x290], cx
mov byte [esp + 0x3d0], 0x10
call fcn.0064441b
cmp dword [esp + 0x2b0], esi
jb 0x691afd
mov eax, dword [esp + 0x29c]
push eax
call fcn.006441c7
add esp, 4
mov ecx, dword [esp + 0x3b8]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x370]
xor ecx, esp
call fcn.00643db8
mov esp, ebp
pop ebp
ret 4