Function at 0x654600
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x120]
cmp eax, dword [ecx + 8]
jbe 0x656fa5
sub esp, 0x1a0
mov eax, dword [esp + 0x1ac]
test eax, eax
jne 0x6547ab
mov ecx, dword [esp + 0x1bc]
test ecx, ecx
je 0x654654
test ecx, 0x200
jne 0x654654
lea eax, [0x732984]
mov ecx, dword [esp + 0x1b4]
jmp 0x65467a
mov eax, dword [esp + 0x1b4]
mov dword [esp], eax
mov eax, dword [esp + 0x1b8]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00498f50
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x144], ecx
mov dword [esp + 0x7c], eax
mov dword [esp + 0x190], 0
mov dword [esp + 0x194], 0
mov dword [esp + 0x198], 0
mov dword [esp + 0x19c], 0
mov edx, dword [esp + 0x1a8]
mov dword [esp], edx
mov edx, dword [esp + 0x1ac]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x1b0]
mov dword [esp + 8], edx
call fcn.004096c0
mov eax, dword [esp + 0xc]
lea ecx, [0x685ec0]
mov dword [esp + 0x190], ecx
mov dword [esp + 0x194], eax
mov eax, dword [esp + 0x7c]
test eax, eax
je 0x6546f9
mov eax, dword [eax + 4]
mov dword [esp + 0x198], eax
mov eax, dword [esp + 0x144]
mov dword [esp + 0x19c], eax
lea eax, [0x6dcee4]
mov dword [esp], eax
mov dword [esp + 4], 0x47
lea eax, [esp + 0x190]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004cbfe0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1a4]
mov ebx, dword [edx + 0x3c]
test ebx, ebx
jne 0x65478e
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00650ed0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x1a4]
mov dword [edx + 0x3c], ecx
mov ecx, dword [0x8e7a50]
test ecx, ecx
jne 0x654786
mov dword [edx + 0x40], eax
jmp 0x65478e
lea edi, [edx + 0x40]
call fcn.00464190
mov dword [esp + 0x1c4], 0
mov dword [esp + 0x1c8], 0
add esp, 0x1a0
ret
mov eax, dword [esp + 0x1a8]
cmp byte [eax], 0x6e
sete cl
mov edx, dword [esp + 0x1b4]
mov dword [esp], edx
mov ebx, dword [esp + 0x1b8]
mov dword [esp + 4], ebx
mov ebp, dword [esp + 0x1bc]
mov dword [esp + 8], ebp
mov byte [esp + 0xc], cl
call fcn.006515a0
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x14]
mov ebp, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
mov edi, dword [esp + 0x28]
test edx, edx
jne 0x656f11
test ebp, ebp
je 0x654cfa
mov eax, dword [esp + 0x1a8]
movzx ecx, byte [eax]
cmp cl, 0x22
je 0x654b3d
movzx edx, byte [esp + 0x1c0]
test dl, dl
je 0x6549a9
mov ecx, dword [esp + 0x1bc]
test ecx, ecx
je 0x654852
test ecx, 0x200
jne 0x654852
lea eax, [0x732984]
mov ecx, dword [esp + 0x1b4]
jmp 0x654878
mov eax, dword [esp + 0x1b4]
mov dword [esp], eax
mov eax, dword [esp + 0x1b8]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00498f50
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x140], ecx
mov dword [esp + 0x78], eax
mov dword [esp + 0x190], 0
mov dword [esp + 0x194], 0
mov dword [esp + 0x198], 0
mov dword [esp + 0x19c], 0
mov edx, dword [esp + 0x1a8]
mov dword [esp], edx
mov edx, dword [esp + 0x1ac]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x1b0]
mov dword [esp + 8], edx
call fcn.004096c0
mov eax, dword [esp + 0xc]
lea ecx, [0x685ec0]
mov dword [esp + 0x190], ecx
mov dword [esp + 0x194], eax
mov eax, dword [esp + 0x78]
test eax, eax
je 0x6548f7
mov eax, dword [eax + 4]
mov dword [esp + 0x198], eax
mov eax, dword [esp + 0x140]
mov dword [esp + 0x19c], eax
lea eax, [0x6dcee4]
mov dword [esp], eax
mov dword [esp + 4], 0x47
lea eax, [esp + 0x190]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004cbfe0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1a4]
mov ebx, dword [edx + 0x3c]
test ebx, ebx
jne 0x65498c
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00650ed0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x1a4]
mov dword [edx + 0x3c], ecx
mov ecx, dword [0x8e7a50]
test ecx, ecx
jne 0x654984
mov dword [edx + 0x40], eax
jmp 0x65498c
lea edi, [edx + 0x40]
call fcn.00464190
mov dword [esp + 0x1c4], 0
mov dword [esp + 0x1c8], 0
add esp, 0x1a0
ret
cmp cl, 0x66
je 0x6549c5
cmp cl, 0x6e
jne 0x6549c0
lea eax, [0x6c845a]
mov ecx, 4
jmp 0x6549dd
cmp cl, 0x74
jne 0x6549d2
lea eax, [0x6c83d2]
mov ecx, 4
jmp 0x6549dd
lea eax, [0x6c89c2]
mov ecx, 6
mov dword [esp + 0x148], eax
mov dword [esp + 0x84], ecx
mov edx, dword [esp + 0x1bc]
test edx, edx
je 0x654a0d
test edx, 0x200
jne 0x654a0d
mov edx, dword [esp + 0x1b4]
lea ebx, [0x732984]
jmp 0x654a37
mov eax, dword [esp + 0x1b4]
mov dword [esp], eax
mov eax, dword [esp + 0x1b8]
mov dword [esp + 4], eax
mov dword [esp + 8], edx
call fcn.00498f50
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, ecx
mov ebx, eax
mov dword [esp + 0x13c], edx
mov dword [esp + 0x74], ebx
mov eax, dword [esp + 0x1a4]
mov ecx, dword [eax + 0xc]
mov dword [esp + 0xd4], ecx
lea ebp, [0x6ae060]
mov dword [esp], ebp
call fcn.0040bd00
mov edi, dword [esp + 4]
mov eax, dword [esp + 0x84]
mov dword [edi + 4], eax
mov eax, dword [0x8e7a50]
test eax, eax
jne 0x654a84
mov ecx, dword [esp + 0x148]
mov dword [edi], ecx
jmp 0x654a90
mov eax, dword [esp + 0x148]
call fcn.00464190
mov ecx, dword [esp + 0x74]
mov dword [edi + 8], ecx
mov ecx, dword [0x8e7a50]
test ecx, ecx
jne 0x654aad
mov eax, dword [esp + 0x13c]
mov dword [edi + 0xc], eax
jmp 0x654ac2
lea ecx, [edi + 0xc]
mov eax, dword [esp + 0x13c]
mov edx, edi
mov edi, ecx
call fcn.00464190
mov edi, edx
mov eax, dword [esp + 0xd4]
dec eax
mov dword [edi + 0x10], eax
sar eax, 0x1f
mov dword [edi + 0x14], eax
mov eax, dword [esp + 0x1a4]
mov ecx, dword [eax + 0x3c]
test ecx, ecx
jne 0x654b20
mov dword [esp], eax
lea ecx, [0x7308f0]
mov dword [esp + 4], ecx
mov dword [esp + 8], edi
call fcn.00650ed0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x1a4]
mov dword [edx + 0x3c], ecx
mov ecx, dword [0x8e7a50]
test ecx, ecx
jne 0x654b18
mov dword [edx + 0x40], eax
jmp 0x654b20
lea edi, [edx + 0x40]
call fcn.00464190
mov dword [esp + 0x1c4], 0
mov dword [esp + 0x1c8], 0
add esp, 0x1a0
ret
mov dword [esp + 0x14c], esi
mov dword [esp + 0x88], ebp
mov dword [esp], eax
mov ecx, dword [esp + 0x1ac]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x1b0]
mov dword [esp + 8], edx
call fcn.00657760
movzx eax, byte [esp + 0x18]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x14]
test al, al
jne 0x654cbb
movzx eax, byte [esp + 0x1c0]
test al, al
je 0x656f8c
mov eax, dword [esp + 0x1bc]
test eax, eax
je 0x654bb3
test eax, 0x200
jne 0x654bb3
lea eax, [0x732984]
mov ecx, dword [esp + 0x1b4]
jmp 0x654bd9
mov ecx, dword [esp + 0x1b4]
mov dword [esp], ecx
mov ecx, dword [esp + 0x1b8]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.00498f50
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x138], ecx
mov dword [esp + 0x70], eax
mov dword [esp + 0x190], 0
mov dword [esp + 0x194], 0
mov dword [esp + 0x198], 0
mov dword [esp + 0x19c], 0
mov edx, dword [esp + 0x1a8]
mov dword [esp], edx
mov edx, dword [esp + 0x1ac]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x1b0]
mov dword [esp + 8], edx
call fcn.004096c0
mov eax, dword [esp + 0xc]
lea ecx, [0x685ec0]
mov dword [esp + 0x190], ecx
mov dword [esp + 0x194], eax
mov eax, dword [esp + 0x70]
test eax, eax
je 0x654c58
mov eax, dword [eax + 4]
mov dword [esp + 0x198], eax
mov eax, dword [esp + 0x138]
mov dword [esp + 0x19c], eax
lea eax, [0x6dcee4]
mov dword [esp], eax
mov dword [esp + 4], 0x47
lea eax, [esp + 0x190]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004cbfe0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x1c4], eax
mov dword [esp + 0x1c8], ecx
add esp, 0x1a0
ret
mov eax, dword [esp + 0x88]
mov eax, dword [eax + 0x10]
mov ebp, dword [esp + 0x14c]
mov dword [esp], ebp
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebx
call eax
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x1c4], eax
mov dword [esp + 0x1c8], ecx
add esp, 0x1a0
ret
mov dword [esp + 0x16c], ecx
mov dword [esp + 0x168], eax
mov dword [esp + 0xb0], edi
mov edx, dword [esp + 0x1a8]
movzx ebx, byte [edx]
cmp bl, 0x66
ja 0x6556c6
cmp bl, 0x22
je 0x654d35
cmp bl, 0x66
je 0x6558e2
jmp 0x655f2b
mov dword [esp], edx
mov eax, dword [esp + 0x1ac]
mov dword [esp + 4], eax
mov ecx, dword [esp + 0x1b0]
mov dword [esp + 8], ecx
call fcn.00657760
movzx eax, byte [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0xc]
test al, al
je 0x65558d
mov dword [esp + 0x90], edx
mov dword [esp + 0x154], ebx
nop
nop
mov eax, dword [esp + 0xb0]
mov ebp, eax
and eax, 0x1f
cmp eax, 0x14
je 0x655366
cmp eax, 0x17
jne 0x655073
mov dword [esp + 0x94], ecx
test ebp, 0x200
jne 0x654db8
lea eax, [0x732984]
mov esi, dword [esp + 0x168]
jmp 0x654de0
mov eax, dword [esp + 0x168]
mov dword [esp], eax
mov ecx, dword [esp + 0x16c]
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
call fcn.00498f50
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov esi, ecx
mov eax, dword [eax + 0x28]
mov dword [esp], esi
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov eax, dword [eax + 0x50]
mov dword [esp], ecx
call eax
cmp dword [esp + 4], 8
je 0x654f1d
mov eax, dword [esp + 0xb0]
test eax, 0x200
jne 0x654e20
mov ecx, dword [esp + 0x168]
lea eax, [0x732984]
jmp 0x654e46
mov ecx, dword [esp + 0x168]
mov dword [esp], ecx
mov ecx, dword [esp + 0x16c]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.00498f50
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x50], eax
mov dword [esp + 0x118], ecx
mov edx, dword [esp + 0x1a4]
mov ebx, dword [edx + 0xc]
mov dword [esp + 0xd4], ebx
lea ebp, [0x6ae060]
mov dword [esp], ebp
call fcn.0040bd00
mov eax, dword [esp + 4]
mov dword [eax + 4], 6
lea ecx, [0x6c8a1c]
mov dword [eax], ecx
mov ecx, dword [esp + 0x50]
mov dword [eax + 8], ecx
mov ecx, dword [0x8e7a50]
test ecx, ecx
jne 0x654ea0
mov ecx, dword [esp + 0x118]
mov dword [eax + 0xc], ecx
jmp 0x654eb3
lea edi, [eax + 0xc]
mov ecx, eax
mov eax, dword [esp + 0x118]
call fcn.00464190
mov eax, ecx
mov ecx, dword [esp + 0xd4]
dec ecx
mov dword [eax + 0x10], ecx
sar ecx, 0x1f
mov dword [eax + 0x14], ecx
mov ecx, dword [esp + 0x1a4]
mov edx, dword [ecx + 0x3c]
test edx, edx
jne 0x656ef4
mov dword [esp], ecx
lea edx, [0x7308f0]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.00650ed0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x1a4]
mov dword [edx + 0x3c], ecx
mov ecx, dword [0x8e7a50]
test ecx, ecx
jne 0x654f10
mov dword [edx + 0x40], eax
jmp 0x656ef4
lea edi, [edx + 0x40]
call fcn.00464190
jmp 0x656ef4
mov eax, dword [0x8c0768]
cmp dword [eax + 0x140], 0xffffffff
jne 0x654f48
mov eax, dword [esp + 0x90]
lea ecx, [eax + eax*2]
mov edx, ecx
shl ecx, 1
sar ecx, 0x1f
shr ecx, 0x1d
lea ecx, [ecx + edx*2]
sar ecx, 3
jmp 0x654f55
mov eax, dword [esp + 0x90]
shr eax, 2
lea ecx, [eax + eax*2]
mov dword [esp + 0x80], ecx
lea eax, [0x68e040]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], ecx
call fcn.0044aea0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x164], eax
mov ecx, dword [0x8c0768]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov ecx, dword [esp + 0x80]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ecx
mov edx, dword [esp + 0x154]
mov dword [esp + 0x10], edx
mov edx, dword [esp + 0x90]
mov dword [esp + 0x14], edx
mov edx, dword [esp + 0x94]
mov dword [esp + 0x18], edx
call fcn.0059b060
mov ecx, dword [esp + 0x1c]
mov eax, dword [esp + 0x20]
mov edx, dword [esp + 0x24]
mov ebx, dword [esp + 0x20]
test ebx, ebx
je 0x655027
nop
mov ecx, dword [esp + 0x1a4]
mov ebx, dword [ecx + 0x3c]
test ebx, ebx
jne 0x656ef4
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], edx
call fcn.00650ed0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x1a4]
mov dword [edx + 0x3c], ecx
mov ecx, dword [0x8e7a50]
test ecx, ecx
jne 0x65501a
mov dword [edx + 0x40], eax
jmp 0x656ef4
lea edi, [edx + 0x40]
call fcn.00464190
jmp 0x656ef4
mov edx, dword [esp + 0x80]
cmp edx, ecx
jb 0x656f87
mov eax, dword [esp + 0x168]
mov dword [esp], eax
mov eax, dword [esp + 0x16c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x164]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
call fcn.00498100
jmp 0x656ef4
cmp eax, 0x18
jne 0x65524e
test ebp, 0x200
jne 0x655093
lea eax, [0x732984]
mov ecx, dword [esp + 0x168]
jmp 0x6550ce
mov eax, dword [esp + 0x168]
mov dword [esp], eax
mov ecx, dword [esp + 0x16c]
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
call fcn.00498f50
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x90]
mov ebx, dword [esp + 0x154]
mov ebp, dword [esp + 0xb0]
mov esi, dword [0x8c0e84]
cmp dword [0x8c0e80], eax
je 0x6550e3
xor eax, eax
jmp 0x65516b
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], esi
call fcn.004038b0
movzx eax, byte [esp + 0xc]
test al, al
jne 0x655115
mov edx, dword [esp + 0x90]
mov ebx, dword [esp + 0x154]
mov ebp, dword [esp + 0xb0]
xor eax, eax
jmp 0x65516b
lea eax, [esp + 0xd8]
mov dword [esp], eax
mov eax, dword [esp + 0x154]
mov dword [esp + 4], eax
mov ecx, dword [esp + 0x90]
mov dword [esp + 8], ecx
call fcn.0044ec30
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.0065a370
movzx eax, byte [esp + 8]
xor eax, 1
mov edx, dword [esp + 0x90]
mov ebx, dword [esp + 0x154]
mov ebp, dword [esp + 0xb0]
test al, al
jne 0x6551ad
mov dword [esp], 0
mov dword [esp + 4], ebx
mov dword [esp + 8], edx
call fcn.0044ec30
mov eax, dword [esp + 0x168]
mov dword [esp], eax
mov eax, dword [esp + 0x16c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 8], eax
call fcn.00498ae0
jmp 0x656ef4
mov dword [esp + 0x188], 0
mov dword [esp + 0x18c], 0
mov eax, dword [esp + 0x1a8]
mov dword [esp], eax
mov eax, dword [esp + 0x1ac]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x1b0]
mov dword [esp + 8], eax
call fcn.004096c0
mov eax, dword [esp + 0xc]
lea ecx, [0x685ec0]
mov dword [esp + 0x188], ecx
mov dword [esp + 0x18c], eax
lea eax, [0x6dc52f]
mov dword [esp], eax
mov dword [esp + 4], 0x40
lea eax, [esp + 0x188]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004cbfe0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x1c4], eax
mov dword [esp + 0x1c8], ecx
add esp, 0x1a0
ret
test ebp, ebp
je 0x655269
test ebp, 0x200
jne 0x655269
mov ecx, dword [esp + 0x168]
lea eax, [0x732984]
jmp 0x65528f
mov eax, dword [esp + 0x168]
mov dword [esp], eax
mov eax, dword [esp + 0x16c]
mov dword [esp + 4], eax
mov dword [esp + 8], ebp
call fcn.00498f50
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x11c], ecx
mov dword [esp + 0x54], eax
mov edx, dword [esp + 0x1a4]
mov ebx, dword [edx + 0xc]
mov dword [esp + 0xd4], ebx
lea ebp, [0x6ae060]
mov dword [esp], ebp
call fcn.0040bd00
mov eax, dword [esp + 4]
mov dword [eax + 4], 6
lea ecx, [0x6c8a1c]
mov dword [eax], ecx
mov ecx, dword [esp + 0x54]
mov dword [eax + 8], ecx
mov ecx, dword [0x8e7a50]
test ecx, ecx
jne 0x6552e9
mov ecx, dword [esp + 0x11c]
mov dword [eax + 0xc], ecx
jmp 0x6552fc
lea edi, [eax + 0xc]
mov ecx, eax
mov eax, dword [esp + 0x11c]
call fcn.00464190
mov eax, ecx
mov ecx, dword [esp + 0xd4]
dec ecx
mov dword [eax + 0x10], ecx
sar ecx, 0x1f
mov dword [eax + 0x14], ecx
mov ecx, dword [esp + 0x1a4]
mov edx, dword [ecx + 0x3c]
test edx, edx
jne 0x656ef4
mov dword [esp], ecx
lea edx, [0x7308f0]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.00650ed0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x1a4]
mov dword [edx + 0x3c], ecx
mov ecx, dword [0x8e7a50]
test ecx, ecx
jne 0x655359
mov dword [edx + 0x40], eax
jmp 0x656ef4
lea edi, [edx + 0x40]
call fcn.00464190
jmp 0x656ef4
mov eax, dword [esp + 0x168]
mov dword [esp], eax
mov ecx, dword [esp + 0x16c]
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
call fcn.00497c40
mov eax, dword [esp + 0xc]
test eax, eax
je 0x6554aa
mov eax, dword [esp + 0xb0]
test eax, 0x200
jne 0x6553ad
mov ecx, dword [esp + 0x168]
lea eax, [0x732984]
jmp 0x6553d3
mov ecx, dword [esp + 0x168]
mov dword [esp], ecx
mov ecx, dword [esp + 0x16c]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.00498f50
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x4c], eax
mov dword [esp + 0x114], ecx
mov edx, dword [esp + 0x1a4]
mov ebx, dword [edx + 0xc]
mov dword [esp + 0xd4], ebx
lea ebp, [0x6ae060]
mov dword [esp], ebp
call fcn.0040bd00
mov eax, dword [esp + 4]
mov dword [eax + 4], 6
lea ecx, [0x6c8a1c]
mov dword [eax], ecx
mov ecx, dword [esp + 0x4c]
mov dword [eax + 8], ecx
mov ecx, dword [0x8e7a50]
test ecx, ecx
jne 0x65542d
mov ecx, dword [esp + 0x114]
mov dword [eax + 0xc], ecx
jmp 0x655440
lea edi, [eax + 0xc]
mov ecx, eax
mov eax, dword [esp + 0x114]
call fcn.00464190
mov eax, ecx
mov ecx, dword [esp + 0xd4]
dec ecx
mov dword [eax + 0x10], ecx
sar ecx, 0x1f
mov dword [eax + 0x14], ecx
mov ecx, dword [esp + 0x1a4]
mov edx, dword [ecx + 0x3c]
test edx, edx
jne 0x656ef4
mov dword [esp], ecx
lea edx, [0x7308f0]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.00650ed0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x1a4]
mov dword [edx + 0x3c], ecx
mov ecx, dword [0x8e7a50]
test ecx, ecx
jne 0x65549d
mov dword [edx + 0x40], eax
jmp 0x656ef4
lea edi, [edx + 0x40]
call fcn.00464190
jmp 0x656ef4
mov dword [esp], 0
mov eax, dword [esp + 0x154]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x90]
mov dword [esp + 8], eax
call fcn.0044ec30
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00409640
mov eax, dword [esp + 8]
nop
movzx ecx, byte [0x8c1598]
test cl, cl
je 0x65551b
lea ecx, [0x68de40]
mov dword [0x8c159c], ecx
mov edx, dword [0x8e7a50]
test edx, edx
jne 0x65550e
mov dword [0x8c15a0], eax
jmp 0x655521
lea edi, [0x8c15a0]
call fcn.00464190
jmp 0x655521
lea ecx, [0x68de40]
mov dword [esp + 0x178], ecx
mov dword [esp + 0x17c], eax
mov ecx, dword [esp + 0x178]
test ecx, ecx
je 0x655551
nop
movzx edx, byte [ecx + 0xf]
mov ebx, edx
and edx, 0x1f
test bl, 0x20
jne 0x655557
or edx, 0x80
jmp 0x655557
xor edx, edx
xor ecx, ecx
xor eax, eax
mov ebx, dword [esp + 0x168]
mov dword [esp], ebx
mov ebx, dword [esp + 0x16c]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0xb0]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], edx
call fcn.00497f30
jmp 0x656ef4
movzx eax, byte [esp + 0x1c0]
test al, al
je 0x656f6f
mov eax, dword [esp + 0xb0]
test eax, eax
je 0x6555be
test eax, 0x200
jne 0x6555be
lea eax, [0x732984]
mov ecx, dword [esp + 0x168]
jmp 0x6555e4
mov ecx, dword [esp + 0x168]
mov dword [esp], ecx
mov ecx, dword [esp + 0x16c]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.00498f50
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x120], ecx
mov dword [esp + 0x58], eax
mov dword [esp + 0x190], 0
mov dword [esp + 0x194], 0
mov dword [esp + 0x198], 0
mov dword [esp + 0x19c], 0
mov edx, dword [esp + 0x1a8]
mov dword [esp], edx
mov edx, dword [esp + 0x1ac]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x1b0]
mov dword [esp + 8], edx
call fcn.004096c0
mov eax, dword [esp + 0xc]
lea ecx, [0x685ec0]
mov dword [esp + 0x190], ecx
mov dword [esp + 0x194], eax
mov eax, dword [esp + 0x58]
test eax, eax
je 0x655663
mov eax, dword [eax + 4]
mov dword [esp + 0x198], eax
mov eax, dword [esp + 0x120]
mov dword [esp + 0x19c], eax
lea eax, [0x6dcee4]
mov dword [esp], eax
mov dword [esp + 4], 0x47
lea eax, [esp + 0x190]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004cbfe0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x1c4], eax
mov dword [esp + 0x1c8], ecx
add esp, 0x1a0
ret
cmp bl, 0x6e
jne 0x6558d9
movzx ebx, byte [esp + 0x1c0]
test bl, bl
je 0x65584d
mov ebx, dword [esp + 0x1ac]
cmp ebx, 4
jne 0x6556f7
cmp dword [edx], 0x6c6c756e
je 0x65584d
test edi, edi
je 0x65570b
test edi, 0x200
jne 0x65570b
lea ecx, [0x732984]
jmp 0x655737
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edi
call fcn.00498f50
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x1a8]
mov ebx, dword [esp + 0x1ac]
mov ebp, ecx
mov ecx, eax
mov eax, ebp
mov dword [esp + 0x134], eax
mov dword [esp + 0x6c], ecx
mov dword [esp + 0x190], 0
mov dword [esp + 0x194], 0
mov dword [esp + 0x198], 0
mov dword [esp + 0x19c], 0
mov dword [esp], edx
mov dword [esp + 4], ebx
mov edx, dword [esp + 0x1b0]
mov dword [esp + 8], edx
call fcn.004096c0
mov eax, dword [esp + 0xc]
lea ecx, [0x685ec0]
mov dword [esp + 0x190], ecx
mov dword [esp + 0x194], eax
mov eax, dword [esp + 0x6c]
test eax, eax
je 0x6557aa
mov ecx, dword [eax + 4]
jmp 0x6557ac
mov ecx, eax
mov dword [esp + 0x198], ecx
mov eax, dword [esp + 0x134]
mov dword [esp + 0x19c], eax
lea eax, [0x6dcee4]
mov dword [esp], eax
mov dword [esp + 4], 0x47
lea eax, [esp + 0x190]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004cbfe0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1a4]
mov ebx, dword [edx + 0x3c]
test ebx, ebx
jne 0x656ef4
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00650ed0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x1a4]
mov dword [edx + 0x3c], ecx
mov ecx, dword [0x8e7a50]
test ecx, ecx
jne 0x655840
mov dword [edx + 0x40], eax
jmp 0x656ef4
lea edi, [edx + 0x40]
call fcn.00464190
jmp 0x656ef4
nop
mov edx, edi
and edi, 0x1f
lea ebx, [edi - 0x14]
cmp ebx, 3
ja 0x656ef4
test edx, 0x200
jne 0x65586f
lea ebx, [0x732984]
jmp 0x65588b
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.00498f50
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov ebx, eax
mov eax, ecx
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.004998e0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x168]
mov dword [esp], ebx
mov ebx, dword [esp + 0x16c]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0xb0]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
call fcn.00497f30
jmp 0x656ef4
cmp bl, 0x74
jne 0x655f2b
movzx ebp, byte [esp + 0x1c0]
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x655a79
mov esi, dword [esp + 0x1ac]
cmp esi, 4
jne 0x65590c
cmp dword [edx], 0x65757274
je 0x655a80
cmp esi, 5
jne 0x655923
cmp dword [edx], 0x736c6166
jne 0x655923
cmp byte [edx + 4], 0x65
je 0x655a80
test edi, edi
je 0x655937
test edi, 0x200
jne 0x655937
lea ecx, [0x732984]
jmp 0x655963
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edi
call fcn.00498f50
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x1a8]
mov esi, dword [esp + 0x1ac]
mov ebx, ecx
mov ecx, eax
mov eax, ebx
mov dword [esp + 0x130], eax
mov dword [esp + 0x68], ecx
mov dword [esp + 0x190], 0
mov dword [esp + 0x194], 0
mov dword [esp + 0x198], 0
mov dword [esp + 0x19c], 0
mov dword [esp], edx
mov dword [esp + 4], esi
mov edx, dword [esp + 0x1b0]
mov dword [esp + 8], edx
call fcn.004096c0
mov eax, dword [esp + 0xc]
lea ecx, [0x685ec0]
mov dword [esp + 0x190], ecx
mov dword [esp + 0x194], eax
mov eax, dword [esp + 0x68]
test eax, eax
je 0x6559d6
mov ecx, dword [eax + 4]
jmp 0x6559d8
mov ecx, eax
mov dword [esp + 0x198], ecx
mov eax, dword [esp + 0x130]
mov dword [esp + 0x19c], eax
lea eax, [0x6dcee4]
mov dword [esp], eax
mov dword [esp + 4], 0x47
lea eax, [esp + 0x190]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004cbfe0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1a4]
mov ebx, dword [edx + 0x3c]
test ebx, ebx
jne 0x656ef4
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00650ed0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x1a4]
mov dword [edx + 0x3c], ecx
mov ecx, dword [0x8e7a50]
test ecx, ecx
jne 0x655a6c
mov dword [edx + 0x40], eax
jmp 0x656ef4
lea edi, [edx + 0x40]
call fcn.00464190
jmp 0x656ef4
mov esi, dword [esp + 0x1ac]
cmp bl, 0x74
sete bl
nop
nop
and edi, 0x1f
cmp edi, 1
je 0x655f0b
cmp edi, 0x14
je 0x655d10
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x655c04
mov ebx, dword [esp + 0xb0]
test ebx, ebx
je 0x655ac2
test ebx, 0x200
jne 0x655ac2
lea ecx, [0x732984]
jmp 0x655aee
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
call fcn.00498f50
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x1a8]
mov esi, dword [esp + 0x1ac]
mov ebx, ecx
mov ecx, eax
mov eax, ebx
mov dword [esp + 0x12c], eax
mov dword [esp + 0x64], ecx
mov dword [esp + 0x190], 0
mov dword [esp + 0x194], 0
mov dword [esp + 0x198], 0
mov dword [esp + 0x19c], 0
mov dword [esp], edx
mov dword [esp + 4], esi
mov edx, dword [esp + 0x1b0]
mov dword [esp + 8], edx
call fcn.004096c0
mov eax, dword [esp + 0xc]
lea ecx, [0x685ec0]
mov dword [esp + 0x190], ecx
mov dword [esp + 0x194], eax
mov eax, dword [esp + 0x64]
test eax, eax
je 0x655b61
mov ecx, dword [eax + 4]
jmp 0x655b63
mov ecx, eax
mov dword [esp + 0x198], ecx
mov eax, dword [esp + 0x12c]
mov dword [esp + 0x19c], eax
lea eax, [0x6dcee4]
mov dword [esp], eax
mov dword [esp + 4], 0x47
lea eax, [esp + 0x190]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004cbfe0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1a4]
mov ebx, dword [edx + 0x3c]
test ebx, ebx
jne 0x656ef4
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00650ed0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x1a4]
mov dword [edx + 0x3c], ecx
mov ecx, dword [0x8e7a50]
test ecx, ecx
jne 0x655bf7
mov dword [edx + 0x40], eax
jmp 0x656ef4
lea edi, [edx + 0x40]
call fcn.00464190
jmp 0x656ef4
mov edx, dword [esp + 0xb0]
test edx, edx
je 0x655c21
test edx, 0x200
jne 0x655c21
mov ecx, eax
lea eax, [0x732984]
jmp 0x655c39
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.00498f50
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x60], eax
mov dword [esp + 0x128], ecx
mov edx, dword [esp + 0x1a4]
mov ebx, dword [edx + 0xc]
mov dword [esp + 0xd4], ebx
lea ebp, [0x6ae060]
mov dword [esp], ebp
call fcn.0040bd00
mov eax, dword [esp + 4]
mov dword [eax + 4], 4
lea ecx, [0x6c83d2]
mov dword [eax], ecx
mov ecx, dword [esp + 0x60]
mov dword [eax + 8], ecx
mov ecx, dword [0x8e7a50]
test ecx, ecx
jne 0x655c93
mov ecx, dword [esp + 0x128]
mov dword [eax + 0xc], ecx
jmp 0x655ca6
lea edi, [eax + 0xc]
mov ecx, eax
mov eax, dword [esp + 0x128]
call fcn.00464190
mov eax, ecx
mov ecx, dword [esp + 0xd4]
dec ecx
mov dword [eax + 0x10], ecx
sar ecx, 0x1f
mov dword [eax + 0x14], ecx
mov ecx, dword [esp + 0x1a4]
mov edx, dword [ecx + 0x3c]
test edx, edx
jne 0x656ef4
mov dword [esp], ecx
lea edx, [0x7308f0]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.00650ed0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x1a4]
mov dword [edx + 0x3c], ecx
mov ecx, dword [0x8e7a50]
test ecx, ecx
jne 0x655d03
mov dword [edx + 0x40], eax
jmp 0x656ef4
lea edi, [edx + 0x40]
call fcn.00464190
jmp 0x656ef4
mov byte [esp + 0x2e], bl
mov dword [esp], eax
mov dword [esp + 4], ecx
mov edx, dword [esp + 0xb0]
mov dword [esp + 8], edx
call fcn.00497c40
mov eax, dword [esp + 0xc]
test eax, eax
jne 0x655df1
movzx ecx, byte [esp + 0x2e]
movzx ecx, cl
lea edx, [0x89ce80]
lea eax, [edx + ecx*8]
nop
movzx ecx, byte [0x8c1598]
test cl, cl
je 0x655d7f
lea ecx, [0x68c780]
mov dword [0x8c159c], ecx
mov edx, dword [0x8e7a50]
test edx, edx
jne 0x655d72
mov dword [0x8c15a0], eax
jmp 0x655d85
lea edi, [0x8c15a0]
call fcn.00464190
jmp 0x655d85
lea ecx, [0x68c780]
mov dword [esp + 0x180], ecx
mov dword [esp + 0x184], eax
mov ecx, dword [esp + 0x180]
test ecx, ecx
je 0x655db5
nop
movzx edx, byte [ecx + 0xf]
mov ebx, edx
and edx, 0x1f
test bl, 0x20
jne 0x655dbb
or edx, 0x80
jmp 0x655dbb
xor edx, edx
xor ecx, ecx
xor eax, eax
mov ebx, dword [esp + 0x168]
mov dword [esp], ebx
mov ebx, dword [esp + 0x16c]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0xb0]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], edx
call fcn.00497f30
jmp 0x656ef4
mov eax, dword [esp + 0xb0]
test eax, 0x200
jne 0x655e0e
mov ecx, dword [esp + 0x168]
lea eax, [0x732984]
jmp 0x655e34
mov ecx, dword [esp + 0x168]
mov dword [esp], ecx
mov ecx, dword [esp + 0x16c]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.00498f50
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x124], ecx
mov dword [esp + 0x5c], eax
mov edx, dword [esp + 0x1a4]
mov ebx, dword [edx + 0xc]
mov dword [esp + 0xd4], ebx
lea ebp, [0x6ae060]
mov dword [esp], ebp
call fcn.0040bd00
mov eax, dword [esp + 4]
mov dword [eax + 4], 4
lea ecx, [0x6c83d2]
mov dword [eax], ecx
mov ecx, dword [esp + 0x5c]
mov dword [eax + 8], ecx
mov ecx, dword [0x8e7a50]
test ecx, ecx
jne 0x655e8e
mov ecx, dword [esp + 0x124]
mov dword [eax + 0xc], ecx
jmp 0x655ea1
lea edi, [eax + 0xc]
mov ecx, eax
mov eax, dword [esp + 0x124]
call fcn.00464190
mov eax, ecx
mov ecx, dword [esp + 0xd4]
dec ecx
mov dword [eax + 0x10], ecx
sar ecx, 0x1f
mov dword [eax + 0x14], ecx
mov ecx, dword [esp + 0x1a4]
mov edx, dword [ecx + 0x3c]
test edx, edx
jne 0x656ef4
mov dword [esp], ecx
lea edx, [0x7308f0]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.00650ed0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x1a4]
mov dword [edx + 0x3c], ecx
mov ecx, dword [0x8e7a50]
test ecx, ecx
jne 0x655efe
mov dword [edx + 0x40], eax
jmp 0x656ef4
lea edi, [edx + 0x40]
call fcn.00464190
jmp 0x656ef4
mov dword [esp], eax
mov dword [esp + 4], ecx
mov eax, dword [esp + 0xb0]
mov dword [esp + 8], eax
mov byte [esp + 0xc], bl
call fcn.00498040
jmp 0x656ef4
cmp bl, 0x2d
je 0x656068
add ebx, 0xffffffd0
cmp bl, 9
jbe 0x656068
movzx ebx, byte [esp + 0x1c0]
test bl, bl
je 0x656f57
test edi, edi
je 0x655f64
test edi, 0x200
jne 0x655f64
lea ecx, [0x732984]
jmp 0x655f89
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edi
call fcn.00498f50
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x1a8]
mov ebx, ecx
mov ecx, eax
mov eax, ebx
mov dword [esp + 0x110], eax
mov dword [esp + 0x48], ecx
mov dword [esp + 0x190], 0
mov dword [esp + 0x194], 0
mov dword [esp + 0x198], 0
mov dword [esp + 0x19c], 0
mov dword [esp], edx
mov edx, dword [esp + 0x1ac]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x1b0]
mov dword [esp + 8], edx
call fcn.004096c0
mov eax, dword [esp + 0xc]
lea ecx, [0x685ec0]
mov dword [esp + 0x190], ecx
mov dword [esp + 0x194], eax
mov eax, dword [esp + 0x48]
test eax, eax
je 0x656003
mov ecx, dword [eax + 4]
jmp 0x656005
mov ecx, eax
mov dword [esp + 0x198], ecx
mov eax, dword [esp + 0x110]
mov dword [esp + 0x19c], eax
lea eax, [0x6dcee4]
mov dword [esp], eax
mov dword [esp + 4], 0x47
lea eax, [esp + 0x190]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004cbfe0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x1c4], eax
mov dword [esp + 0x1c8], ecx
add esp, 0x1a0
ret
mov dword [esp], 0
mov dword [esp + 4], edx
mov eax, dword [esp + 0x1ac]
mov dword [esp + 8], eax
call fcn.0044ec30
mov eax, dword [esp + 0xc]
mov dword [esp + 0x150], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x8c], ecx
nop
mov edx, dword [esp + 0xb0]
mov ebx, edx
and edx, 0x1f
cmp edx, 0xc
ja 0x65669b
lea ebp, [edx - 2]
cmp ebp, 4
jbe 0x656385
cmp edx, 7
jb 0x65691c
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], 0xa
mov dword [esp + 0xc], 0x40
call fcn.004842c0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x10]
test eax, eax
jne 0x6561e6
mov dword [esp + 0xa8], ecx
mov dword [esp + 0x9c], edx
mov eax, dword [esp + 0x168]
mov ebx, dword [eax]
shl ebx, 3
add ebx, 0xffffffc0
neg ebx
cmp ebx, 0x20
sbb ebp, ebp
lea esi, [ebx - 0x20]
mov dword [esp + 0xd0], esi
mov edi, esi
xchg esi, ebx
neg ebx
xchg esi, ebx
cmp esi, 0x20
sbb eax, eax
mov dword [esp + 0xcc], eax
cmp edi, 0x20
sbb eax, eax
mov dword [esp + 0xc8], eax
mov ecx, edi
shl edx, cl
and edx, eax
mov ecx, ebx
mov eax, dword [esp + 0xa8]
shl eax, cl
and eax, ebp
mov ecx, esi
mov edi, dword [esp + 0x9c]
shr edi, cl
mov esi, dword [esp + 0xcc]
and edi, esi
or edi, eax
or edi, edx
mov dword [esp + 0xcc], edi
mov eax, ecx
mov ecx, ebx
mov edx, dword [esp + 0x9c]
shl edx, cl
and edx, ebp
mov ecx, dword [esp + 0xd0]
shr edi, cl
mov ecx, ebp
mov ebp, dword [esp + 0xc8]
and edi, ebp
mov dword [esp + 0xd0], edi
mov ebp, ecx
mov ecx, eax
mov edi, dword [esp + 0xcc]
mov eax, edi
shl edi, cl
and edi, esi
mov ecx, ebx
shr edx, cl
and edx, ebp
or edx, edi
mov esi, dword [esp + 0xd0]
or edx, esi
mov esi, dword [esp + 0x9c]
cmp esi, edx
setne dl
shr eax, cl
and eax, ebp
mov ebx, dword [esp + 0xa8]
cmp ebx, eax
setne al
or eax, edx
test al, al
je 0x656353
mov eax, dword [esp + 0xb0]
test eax, 0x200
jne 0x656203
mov ecx, dword [esp + 0x168]
lea eax, [0x732984]
jmp 0x656229
mov ecx, dword [esp + 0x168]
mov dword [esp], ecx
mov ecx, dword [esp + 0x16c]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.00498f50
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0xfc], ecx
mov dword [esp + 0x34], eax
mov edx, dword [esp + 0x1a4]
mov ebx, dword [edx + 0xc]
mov dword [esp + 0xd4], ebx
lea ebp, [0x6ae060]
mov dword [esp], ebp
call fcn.0040bd00
mov eax, dword [esp + 4]
mov dword [esp + 0x160], eax
mov dword [esp], 0
lea ecx, [0x6c8dd0]
mov dword [esp + 4], ecx
mov dword [esp + 8], 7
mov ecx, dword [esp + 0x150]
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0x8c]
mov dword [esp + 0x10], ecx
call fcn.0044e980
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edi, dword [esp + 0x160]
mov dword [edi + 4], ecx
mov ecx, dword [0x8e7a50]
test ecx, ecx
jne 0x6562b2
mov dword [edi], eax
jmp 0x6562b7
call fcn.00464190
mov ecx, dword [esp + 0x34]
mov dword [edi + 8], ecx
mov ecx, dword [0x8e7a50]
test ecx, ecx
jne 0x6562d4
mov eax, dword [esp + 0xfc]
mov dword [edi + 0xc], eax
jmp 0x6562e9
lea ecx, [edi + 0xc]
mov eax, dword [esp + 0xfc]
mov edx, edi
mov edi, ecx
call fcn.00464190
mov edi, edx
mov eax, dword [esp + 0xd4]
dec eax
mov dword [edi + 0x10], eax
sar eax, 0x1f
mov dword [edi + 0x14], eax
mov eax, dword [esp + 0x1a4]
mov ecx, dword [eax + 0x3c]
test ecx, ecx
jne 0x656ef4
mov dword [esp], eax
lea ecx, [0x7308f0]
mov dword [esp + 4], ecx
mov dword [esp + 8], edi
call fcn.00650ed0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x1a4]
mov dword [edx + 0x3c], ecx
mov ecx, dword [0x8e7a50]
test ecx, ecx
jne 0x656346
mov dword [edx + 0x40], eax
jmp 0x656ef4
lea edi, [edx + 0x40]
call fcn.00464190
jmp 0x656ef4
mov eax, dword [esp + 0x168]
mov dword [esp], eax
mov eax, dword [esp + 0x16c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 8], eax
mov dword [esp + 0x10], ebx
mov dword [esp + 0xc], esi
call fcn.004989e0
jmp 0x656ef4
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], 0xa
mov dword [esp + 0xc], 0x40
call fcn.00484d60
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x14]
test ecx, ecx
jne 0x6564f5
mov dword [esp + 0xac], eax
mov dword [esp + 0xa0], edx
mov dword [esp + 0xa4], ebx
mov ebp, dword [esp + 0x168]
mov esi, dword [ebp]
shl esi, 3
lea ecx, [esi - 0x40]
neg ecx
mov dword [esp + 0xc4], ecx
cmp ecx, 0x20
sbb esi, esi
mov dword [esp + 0xd0], esi
lea edi, [ecx - 0x20]
mov dword [esp + 0xcc], edi
xchg edi, ebx
neg ebx
xchg edi, ebx
mov dword [esp + 0xc8], edi
cmp edi, 0x20
sbb eax, eax
mov dword [esp + 0xc0], eax
mov ebp, dword [esp + 0xcc]
cmp ebp, 0x20
sbb ebp, ebp
mov dword [esp + 0xbc], ebp
shr ecx, 5
cmp ecx, 1
sbb ebp, ebp
mov dword [esp + 0xb8], ebp
mov ebp, dword [esp + 0xc4]
cmp ebp, 0x20
sbb eax, eax
mov ecx, ebp
shl ebx, cl
and ebx, esi
mov ecx, edi
shr edx, cl
mov edi, dword [esp + 0xc0]
and edx, edi
mov ecx, dword [esp + 0xcc]
mov edi, dword [esp + 0xa0]
shl edi, cl
mov esi, dword [esp + 0xbc]
and edi, esi
or edx, ebx
or edx, edi
not eax
or eax, ebp
mov ebx, ecx
mov ecx, eax
mov edi, edx
sar edx, cl
mov eax, dword [esp + 0xa4]
cmp eax, edx
setne al
mov byte [esp + 0x2f], al
mov ecx, ebp
mov edx, dword [esp + 0xa0]
shl edx, cl
mov eax, dword [esp + 0xd0]
and edx, eax
xchg esi, ebx
not ebx
xchg esi, ebx
or esi, ebx
mov ecx, esi
mov ebx, edi
sar edi, cl
mov ecx, ebp
shr edx, cl
and edx, eax
mov ecx, dword [esp + 0xc8]
shl ebx, cl
mov eax, dword [esp + 0xc0]
and ebx, eax
or edx, ebx
mov eax, dword [esp + 0xb8]
xor eax, 0xffffffff
and eax, edi
or eax, edx
mov edx, dword [esp + 0xa0]
cmp edx, eax
setne al
movzx ebx, byte [esp + 0x2f]
or eax, ebx
test al, al
je 0x656662
mov eax, dword [esp + 0xb0]
test eax, 0x200
jne 0x656512
mov ecx, dword [esp + 0x168]
lea eax, [0x732984]
jmp 0x656538
mov ecx, dword [esp + 0x168]
mov dword [esp], ecx
mov ecx, dword [esp + 0x16c]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.00498f50
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x38], eax
mov dword [esp + 0x100], ecx
mov edx, dword [esp + 0x1a4]
mov ebx, dword [edx + 0xc]
mov dword [esp + 0xd4], ebx
lea ebp, [0x6ae060]
mov dword [esp], ebp
call fcn.0040bd00
mov eax, dword [esp + 4]
mov dword [esp + 0x160], eax
mov dword [esp], 0
lea ecx, [0x6c8dd0]
mov dword [esp + 4], ecx
mov dword [esp + 8], 7
mov ecx, dword [esp + 0x150]
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0x8c]
mov dword [esp + 0x10], ecx
call fcn.0044e980
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edi, dword [esp + 0x160]
mov dword [edi + 4], ecx
mov ecx, dword [0x8e7a50]
test ecx, ecx
jne 0x6565c1
mov dword [edi], eax
jmp 0x6565c6
call fcn.00464190
mov ecx, dword [esp + 0x38]
mov dword [edi + 8], ecx
mov ecx, dword [0x8e7a50]
test ecx, ecx
jne 0x6565e3
mov eax, dword [esp + 0x100]
mov dword [edi + 0xc], eax
jmp 0x6565f8
lea ecx, [edi + 0xc]
mov eax, dword [esp + 0x100]
mov edx, edi
mov edi, ecx
call fcn.00464190
mov edi, edx
mov eax, dword [esp + 0xd4]
dec eax
mov dword [edi + 0x10], eax
sar eax, 0x1f
mov dword [edi + 0x14], eax
mov eax, dword [esp + 0x1a4]
mov ecx, dword [eax + 0x3c]
test ecx, ecx
jne 0x656ef4
mov dword [esp], eax
lea ecx, [0x7308f0]
mov dword [esp + 4], ecx
mov dword [esp + 8], edi
call fcn.00650ed0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x1a4]
mov dword [edx + 0x3c], ecx
mov ecx, dword [0x8e7a50]
test ecx, ecx
jne 0x656655
mov dword [edx + 0x40], eax
jmp 0x656ef4
lea edi, [edx + 0x40]
call fcn.00464190
jmp 0x656ef4
mov eax, dword [esp + 0x168]
mov dword [esp], eax
mov eax, dword [esp + 0x16c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 8], eax
mov eax, dword [esp + 0xac]
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], edx
call fcn.00498400
jmp 0x656ef4
cmp edx, 0xe
ja 0x656913
mov dword [esp + 0xb4], edx
test ebx, 0x200
jne 0x6566c2
lea ebp, [0x732984]
mov esi, dword [esp + 0x168]
jmp 0x6566ec
mov eax, dword [esp + 0x168]
mov dword [esp], eax
mov ecx, dword [esp + 0x16c]
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
call fcn.00498f50
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov ebp, eax
mov esi, ecx
mov eax, dword [ebp + 0x18]
mov dword [esp], esi
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x150]
mov dword [esp], ecx
mov edx, dword [esp + 0x8c]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.00483b20
movsd xmm0, qword [esp + 0xc]
mov eax, dword [esp + 0x14]
test eax, eax
je 0x656732
mov eax, dword [esp + 0xb0]
test eax, 0x200
jmp 0x656788
mov eax, dword [esp + 0xb4]
cmp eax, 0xd
jne 0x6568e9
nop
xorps xmm1, xmm1
ucomisd xmm1, xmm0
jbe 0x656758
movsd xmm1, qword [0x72ff18]
pxor xmm0, xmm1
movsd xmm1, qword [0x72ff00]
ucomisd xmm0, xmm1
jbe 0x6568e9
movsd xmm1, qword [0x72ff08]
ucomisd xmm1, xmm0
jb 0x6568e9
mov eax, dword [esp + 0xb0]
test eax, 0x200
jne 0x656799
mov ecx, dword [esp + 0x168]
lea eax, [0x732984]
jmp 0x6567bf
mov ecx, dword [esp + 0x168]
mov dword [esp], ecx
mov ecx, dword [esp + 0x16c]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.00498f50
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0xf8], ecx
mov dword [esp + 0x30], eax
mov edx, dword [esp + 0x1a4]
mov ebx, dword [edx + 0xc]
mov dword [esp + 0xd4], ebx
lea ebp, [0x6ae060]
mov dword [esp], ebp
call fcn.0040bd00
mov eax, dword [esp + 4]
mov dword [esp + 0x160], eax
mov dword [esp], 0
lea ecx, [0x6c8dd0]
mov dword [esp + 4], ecx
mov dword [esp + 8], 7
mov ecx, dword [esp + 0x150]
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0x8c]
mov dword [esp + 0x10], ecx
call fcn.0044e980
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edi, dword [esp + 0x160]
mov dword [edi + 4], ecx
mov ecx, dword [0x8e7a50]
test ecx, ecx
jne 0x656848
mov dword [edi], eax
jmp 0x65684d
call fcn.00464190
mov ecx, dword [esp + 0x30]
mov dword [edi + 8], ecx
mov ecx, dword [0x8e7a50]
test ecx, ecx
jne 0x65686a
mov eax, dword [esp + 0xf8]
mov dword [edi + 0xc], eax
jmp 0x65687f
lea ecx, [edi + 0xc]
mov eax, dword [esp + 0xf8]
mov edx, edi
mov edi, ecx
call fcn.00464190
mov edi, edx
mov eax, dword [esp + 0xd4]
dec eax
mov dword [edi + 0x10], eax
sar eax, 0x1f
mov dword [edi + 0x14], eax
mov eax, dword [esp + 0x1a4]
mov ecx, dword [eax + 0x3c]
test ecx, ecx
jne 0x656ef4
mov dword [esp], eax
lea ecx, [0x7308f0]
mov dword [esp + 4], ecx
mov dword [esp + 8], edi
call fcn.00650ed0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x1a4]
mov dword [edx + 0x3c], ecx
mov ecx, dword [0x8e7a50]
test ecx, ecx
jne 0x6568dc
mov dword [edx + 0x40], eax
jmp 0x656ef4
lea edi, [edx + 0x40]
call fcn.00464190
jmp 0x656ef4
mov eax, dword [esp + 0x168]
mov dword [esp], eax
mov eax, dword [esp + 0x16c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 8], eax
call fcn.00498340
jmp 0x656ef4
cmp edx, 0x14
je 0x656c3b
cmp edx, 0x18
jne 0x6569bb
test ebx, 0x200
jne 0x65693c
lea edx, [0x732984]
mov ebp, dword [esp + 0x168]
jmp 0x65697b
mov eax, dword [esp + 0x168]
mov dword [esp], eax
mov ecx, dword [esp + 0x16c]
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
call fcn.00498f50
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov ebx, dword [esp + 0xb0]
mov edx, eax
mov ebp, ecx
mov eax, dword [esp + 0x150]
mov ecx, dword [esp + 0x8c]
mov esi, dword [0x8c0e84]
cmp dword [0x8c0e80], edx
je 0x65698d
xor edx, edx
jmp 0x6569bd
mov dword [esp], edx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
call fcn.004038b0
movzx eax, byte [esp + 0xc]
mov ecx, dword [esp + 0x8c]
mov ebx, dword [esp + 0xb0]
mov edx, eax
mov eax, dword [esp + 0x150]
jmp 0x6569bd
xor edx, edx
test dl, dl
jne 0x656c10
movzx eax, byte [esp + 0x1c0]
test al, al
je 0x656af8
test ebx, ebx
je 0x6569f0
test ebx, 0x200
jne 0x6569f0
lea eax, [0x732984]
mov ecx, dword [esp + 0x168]
jmp 0x656a16
mov eax, dword [esp + 0x168]
mov dword [esp], eax
mov eax, dword [esp + 0x16c]
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
call fcn.00498f50
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x10c], ecx
mov dword [esp + 0x44], eax
mov dword [esp + 0x190], 0
mov dword [esp + 0x194], 0
mov dword [esp + 0x198], 0
mov dword [esp + 0x19c], 0
mov edx, dword [esp + 0x1a8]
mov dword [esp], edx
mov edx, dword [esp + 0x1ac]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x1b0]
mov dword [esp + 8], edx
call fcn.004096c0
mov eax, dword [esp + 0xc]
lea ecx, [0x685ec0]
mov dword [esp + 0x190], ecx
mov dword [esp + 0x194], eax
mov eax, dword [esp + 0x44]
test eax, eax
je 0x656a95
mov eax, dword [eax + 4]
mov dword [esp + 0x198], eax
mov eax, dword [esp + 0x10c]
mov dword [esp + 0x19c], eax
lea eax, [0x6dcee4]
mov dword [esp], eax
mov dword [esp + 4], 0x47
lea eax, [esp + 0x190]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004cbfe0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x1c4], eax
mov dword [esp + 0x1c8], ecx
add esp, 0x1a0
ret
test ebx, ebx
je 0x656b13
test ebx, 0x200
jne 0x656b13
mov ecx, dword [esp + 0x168]
lea eax, [0x732984]
jmp 0x656b39
mov eax, dword [esp + 0x168]
mov dword [esp], eax
mov eax, dword [esp + 0x16c]
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
call fcn.00498f50
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x108], ecx
mov dword [esp + 0x40], eax
mov edx, dword [esp + 0x1a4]
mov ebx, dword [edx + 0xc]
mov dword [esp + 0xd4], ebx
lea ebp, [0x6ae060]
mov dword [esp], ebp
call fcn.0040bd00
mov eax, dword [esp + 4]
mov dword [eax + 4], 6
lea ecx, [0x6c89c2]
mov dword [eax], ecx
mov ecx, dword [esp + 0x40]
mov dword [eax + 8], ecx
mov ecx, dword [0x8e7a50]
test ecx, ecx
jne 0x656b93
mov ecx, dword [esp + 0x108]
mov dword [eax + 0xc], ecx
jmp 0x656ba6
lea edi, [eax + 0xc]
mov ecx, eax
mov eax, dword [esp + 0x108]
call fcn.00464190
mov eax, ecx
mov ecx, dword [esp + 0xd4]
dec ecx
mov dword [eax + 0x10], ecx
sar ecx, 0x1f
mov dword [eax + 0x14], ecx
mov ecx, dword [esp + 0x1a4]
mov edx, dword [ecx + 0x3c]
test edx, edx
jne 0x656ef4
mov dword [esp], ecx
lea edx, [0x7308f0]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.00650ed0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x1a4]
mov dword [edx + 0x3c], ecx
mov ecx, dword [0x8e7a50]
test ecx, ecx
jne 0x656c03
mov dword [edx + 0x40], eax
jmp 0x656ef4
lea edi, [edx + 0x40]
call fcn.00464190
jmp 0x656ef4
mov edx, dword [esp + 0x168]
mov dword [esp], edx
mov edx, dword [esp + 0x16c]
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
call fcn.00498ae0
jmp 0x656ef4
mov edx, dword [esp + 0x1a4]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00654430
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
mov ebx, dword [esp + 0xc]
mov ebp, dword [esp + 0xc]
mov esi, dword [esp + 0x10]
test edx, edx
je 0x656cc2
nop
mov edx, dword [esp + 0x1a4]
mov ebx, dword [edx + 0x3c]
test ebx, ebx
jne 0x656ef4
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00650ed0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x1a4]
mov dword [edx + 0x3c], ecx
mov ecx, dword [0x8e7a50]
test ecx, ecx
jne 0x656cb5
mov dword [edx + 0x40], eax
jmp 0x656ef4
lea edi, [edx + 0x40]
call fcn.00464190
jmp 0x656ef4
mov dword [esp + 0x158], esi
mov dword [esp + 0x15c], ebp
mov dword [esp + 0x98], ebx
mov eax, dword [esp + 0x168]
mov dword [esp], eax
mov ecx, dword [esp + 0x16c]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0xb0]
mov dword [esp + 8], edx
call fcn.00497c40
mov eax, dword [esp + 0xc]
test eax, eax
je 0x656e22
mov eax, dword [esp + 0xb0]
test eax, 0x200
jne 0x656d25
mov ecx, dword [esp + 0x168]
lea eax, [0x732984]
jmp 0x656d4b
mov ecx, dword [esp + 0x168]
mov dword [esp], ecx
mov ecx, dword [esp + 0x16c]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.00498f50
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x104], ecx
mov dword [esp + 0x3c], eax
mov edx, dword [esp + 0x1a4]
mov ebx, dword [edx + 0xc]
mov dword [esp + 0xd4], ebx
lea ebp, [0x6ae060]
mov dword [esp], ebp
call fcn.0040bd00
mov eax, dword [esp + 4]
mov dword [eax + 4], 6
lea ecx, [0x6c89c2]
mov dword [eax], ecx
mov ecx, dword [esp + 0x3c]
mov dword [eax + 8], ecx
mov ecx, dword [0x8e7a50]
test ecx, ecx
jne 0x656da5
mov ecx, dword [esp + 0x104]
mov dword [eax + 0xc], ecx
jmp 0x656db8
lea edi, [eax + 0xc]
mov ecx, eax
mov eax, dword [esp + 0x104]
call fcn.00464190
mov eax, ecx
mov ecx, dword [esp + 0xd4]
dec ecx
mov dword [eax + 0x10], ecx
sar ecx, 0x1f
mov dword [eax + 0x14], ecx
mov ecx, dword [esp + 0x1a4]
mov edx, dword [ecx + 0x3c]
test edx, edx
jne 0x656ef4
mov dword [esp], ecx
lea edx, [0x7308f0]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.00650ed0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x1a4]
mov dword [edx + 0x3c], ecx
mov ecx, dword [0x8e7a50]
test ecx, ecx
jne 0x656e15
mov dword [edx + 0x40], eax
jmp 0x656ef4
lea edi, [edx + 0x40]
call fcn.00464190
jmp 0x656ef4
mov ecx, dword [esp + 0x98]
test ecx, ecx
je 0x656ebd
nop
movzx ecx, byte [0x8c1598]
test cl, cl
je 0x656e77
mov ecx, dword [esp + 0x15c]
mov dword [0x8c159c], ecx
mov edx, dword [0x8e7a50]
test edx, edx
jne 0x656e63
mov eax, dword [esp + 0x158]
mov dword [0x8c15a0], eax
jmp 0x656e85
lea edi, [0x8c15a0]
mov eax, dword [esp + 0x158]
call fcn.00464190
jmp 0x656e85
mov eax, dword [esp + 0x158]
mov ecx, dword [esp + 0x15c]
mov dword [esp + 0x170], ecx
mov dword [esp + 0x174], eax
mov ecx, dword [esp + 0x170]
test ecx, ecx
je 0x656eb5
nop
movzx edx, byte [ecx + 0xf]
mov ebx, edx
and edx, 0x1f
test bl, 0x20
jne 0x656ec3
or edx, 0x80
jmp 0x656ec3
xor edx, edx
xor ecx, ecx
xor eax, eax
jmp 0x656ec3
xor edx, edx
xor ecx, ecx
xor eax, eax
mov ebx, dword [esp + 0x168]
mov dword [esp], ebx
mov ebx, dword [esp + 0x16c]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0xb0]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], edx
call fcn.00497f30
mov dword [esp + 0x1c4], 0
mov dword [esp + 0x1c8], 0
add esp, 0x1a0
ret
mov eax, dword [edx + 0x10]
mov dword [esp], ebx
mov ecx, dword [esp + 0x1a8]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x1ac]
mov dword [esp + 8], ecx
mov ecx, dword [esp + 0x1b0]
mov dword [esp + 0xc], ecx
call eax
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x1c4], eax
mov dword [esp + 0x1c8], ecx
add esp, 0x1a0
ret
lea eax, [0x68de40]
mov dword [esp], eax
lea eax, [0x730170]
mov dword [esp + 4], eax
call fcn.00436170
lea eax, [0x68de40]
mov dword [esp], eax
lea eax, [0x730170]
mov dword [esp + 4], eax
call fcn.00436170
call fcn.00464250
lea eax, [0x68de40]
mov dword [esp], eax
lea eax, [0x730170]
mov dword [esp + 4], eax
call fcn.00436170
nop
call fcn.00462d80
jmp fcn.00654600