Function at 0x693dd0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x1d4]
cmp eax, dword [ecx + 8]
jbe 0x695b31
sub esp, 0x254
lea eax, [0x8b43e0]
mov dword [esp], eax
call fcn.0040a800
mov edi, dword [esp + 4]
mov eax, dword [esp + 0x258]
mov ecx, dword [eax + 8]
mov edx, dword [eax + 4]
mov ebx, dword [eax]
mov dword [edi + 4], edx
mov dword [edi + 8], ecx
mov ecx, dword [0xc6be00]
test ecx, ecx
jne 0x695b10
mov dword [edi], ebx
mov ecx, dword [eax + 0x14]
mov edx, dword [eax + 0x10]
mov ebx, dword [eax + 0xc]
mov dword [edi + 0x10], edx
mov dword [edi + 0x14], ecx
mov ecx, dword [0xc6be00]
test ecx, ecx
jne 0x695af7
mov dword [edi + 0xc], ebx
mov ecx, dword [eax + 0xc8]
mov edx, dword [eax + 0xc4]
mov ebx, dword [eax + 0xc0]
mov dword [edi + 0x1c], edx
mov dword [edi + 0x20], ecx
mov ecx, dword [0xc6be00]
test ecx, ecx
jne 0x695ade
mov dword [edi + 0x18], ebx
mov ecx, dword [eax + 0xbc]
mov edx, dword [eax + 0xb8]
mov ebx, dword [eax + 0xb4]
mov dword [edi + 0x28], edx
mov dword [edi + 0x2c], ecx
mov ecx, dword [0xc6be00]
test ecx, ecx
jne 0x695ac5
mov dword [edi + 0x24], ebx
mov dword [esp + 0x64], edi
mov ecx, dword [eax + 0x68]
mov edx, dword [eax + 0x6c]
mov ebx, dword [eax + 0x70]
mov dword [edi + 0x34], edx
mov dword [edi + 0x38], ebx
mov edx, dword [0xc6be00]
test edx, edx
jne 0x695ab0
mov dword [edi + 0x30], ecx
mov ecx, dword [eax + 0x174]
mov edx, dword [eax + 0x170]
mov ebx, dword [eax + 0x168]
mov ebp, dword [eax + 0x16c]
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], edx
mov dword [esp + 0xc], ecx
call fcn.005231e0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x64]
mov dword [ebx + 0x40], eax
mov dword [ebx + 0x44], ecx
mov eax, dword [0xc6be00]
test eax, eax
jne 0x695aa1
mov dword [ebx + 0x3c], edx
mov eax, dword [esp + 0x258]
lea esi, [eax + 0x20]
lea edi, [esp + 0x15c]
call fcn.00452738
mov edi, esp
lea esi, [esp + 0x15c]
call fcn.00452738
call fcn.00691520
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x64]
mov dword [ecx + 0x48], eax
mov eax, dword [esp + 0x258]
mov edx, dword [eax + 0xd0]
mov ebx, dword [eax + 0xcc]
mov ebp, dword [eax + 0xd4]
mov dword [esp], ebx
mov dword [esp + 4], edx
mov dword [esp + 8], ebp
call fcn.006919a0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x64]
mov dword [ecx + 0x4c], eax
mov dword [esp], eax
mov eax, dword [esp + 0x258]
lea edx, [eax + 0xc0]
mov dword [esp + 4], edx
call fcn.00692b50
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov ebx, dword [esp + 8]
mov ebp, dword [esp + 0x64]
mov dword [ebp + 0x50], ebx
mov ebx, dword [0xc6be00]
test ebx, ebx
jne 0x695a94
mov dword [ebp + 0x54], eax
test ecx, ecx
jne 0x695a74
mov ecx, dword [esp + 0x258]
mov edx, dword [ecx + 0x18]
inc edx
mov dword [ebp + 0x58], edx
mov edx, dword [0xc6be00]
mov eax, dword [ecx + 0x1c]
test edx, edx
jne 0x695a67
mov dword [ebp + 0x5c], eax
lea eax, [0x854000]
mov dword [esp], eax
call fcn.0040a800
mov eax, dword [esp + 4]
mov dword [esp + 0xc0], eax
lea ecx, [0x854000]
mov dword [esp], ecx
call fcn.0040a800
mov eax, dword [esp + 4]
mov dword [esp + 0xbc], eax
mov ecx, dword [esp + 0x258]
mov edx, dword [ecx + 0xb8]
mov ebx, dword [ecx + 0xbc]
mov ebp, dword [ecx + 0xb4]
mov dword [esp], ebp
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
lea edx, [0x84f4e0]
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call fcn.00527860
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x20]
test ecx, ecx
jne 0x695a47
test edx, edx
jne 0x695a00
mov eax, dword [esp + 0x258]
mov ecx, dword [eax + 0x6c]
mov edx, dword [eax + 0x70]
mov ebx, dword [eax + 0x68]
mov dword [esp], ebx
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
lea ecx, [0x84f4e0]
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0xc0]
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call fcn.00527860
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x28]
test edx, edx
jne 0x6959e0
test eax, eax
jne 0x695999
mov eax, dword [esp + 0x64]
lea ecx, [eax + 0x60]
mov dword [esp], ecx
mov ecx, dword [esp + 0xc0]
mov dword [esp + 4], ecx
call fcn.00557390
mov eax, dword [esp + 0x64]
lea ecx, [eax + 0xdc]
mov dword [esp], ecx
mov ecx, dword [esp + 0xbc]
mov dword [esp + 4], ecx
call fcn.00557390
mov eax, dword [esp + 0x64]
lea edi, [eax + 0x158]
mov ecx, dword [0xc6be00]
mov edx, dword [esp + 0x258]
lea esi, [edx + 0x74]
lea ebx, [eax + 0x16c]
lea ebp, [edx + 0x88]
test ecx, ecx
jne 0x69594d
call fcn.0045277e
mov edi, ebx
mov esi, ebp
call fcn.0045277e
mov ecx, dword [edx + 0x130]
mov edx, dword [edx + 0x12c]
test ecx, ecx
jle 0x6942f3
mov dword [esp + 0x5c], ecx
xor ebx, ebx
jmp 0x694176
lea ebp, [esi + 0x1c]
mov edx, ebp
mov ebx, ecx
mov ecx, dword [esp + 0x5c]
mov dword [esp + 0xb8], edx
mov dword [esp + 0x58], ebx
lea edi, [esp + 0xe0]
mov esi, edx
call fcn.0045276a
lea edi, [esp + 0xc4]
lea esi, [esp + 0xe0]
call fcn.0045276a
mov ecx, dword [eax + 0x184]
mov ebp, dword [eax + 0x18c]
mov esi, edx
mov edx, dword [eax + 0x188]
mov edi, ebx
lea ebx, [edx + 1]
cmp ebx, ebp
ja 0x6958e6
lea ebx, [edx + 1]
mov dword [eax + 0x188], ebx
imul edx, edx, 0x1c
add ecx, edx
mov edx, dword [0xc6be00]
test edx, edx
jne 0x6958b5
mov edx, edi
mov edi, ecx
mov ebx, esi
lea esi, [esp + 0xc4]
call fcn.0045276a
mov ecx, dword [esp + 0xc4]
mov ebp, dword [esp + 0xc8]
mov esi, ebx
mov ebx, dword [esp + 0xcc]
cmp ebp, 4
jne 0x695489
cmp dword [ecx], 2
jne 0x695489
cmp dword [ecx + 4], 5
jne 0x695489
cmp dword [ecx + 8], 0x1d
jne 0x695489
mov ecx, dword [ecx + 0xc]
cmp ecx, 0x13
jg 0x694919
cmp ecx, 0xf
jg 0x69466d
cmp ecx, 0xe
je 0x694542
cmp ecx, 0xf
je 0x6943ab
mov ecx, 1
movzx ebx, byte [esp + 0xd0]
test bl, bl
je 0x6943a4
test cl, cl
je 0x6943a4
mov ecx, dword [eax + 0x1a0]
mov dword [esp + 0x54], ecx
mov ebx, dword [eax + 0x19c]
lea ebp, [ecx + 1]
mov edi, edx
mov edx, dword [eax + 0x1a4]
mov ecx, dword [esp + 0xc4]
mov dword [esp + 0xb4], ecx
mov ecx, dword [esp + 0xcc]
mov dword [esp + 0x50], ecx
mov ecx, dword [esp + 0xc8]
cmp ebp, edx
ja 0x69432f
mov edx, dword [esp + 0x54]
lea ebp, [edx + 1]
mov dword [eax + 0x1a0], ebp
lea edx, [edx + edx*2]
mov dword [ebx + edx*4 + 4], ecx
mov ecx, dword [esp + 0x50]
mov dword [ebx + edx*4 + 8], ecx
mov ecx, dword [0xc6be00]
lea ebp, [ebx + edx*4]
test ecx, ecx
jne 0x694317
mov ecx, dword [esp + 0xb4]
mov dword [ebx + edx*4], ecx
lea ecx, [edi + 1]
mov edx, dword [esp + 0x5c]
cmp ecx, edx
jl 0x69416b
mov dword [esp + 0x25c], eax
mov dword [esp + 0x260], 0
mov dword [esp + 0x264], 0
add esp, 0x254
ret
mov ecx, edi
mov edi, ebp
mov edx, eax
mov eax, dword [esp + 0xb4]
call fcn.00451ff0
mov eax, edx
mov edi, ecx
jmp 0x6942e4
mov dword [esp + 0x4c], ecx
lea eax, [0x8641a0]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov ecx, dword [esp + 0x54]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ebp
call fcn.0043d1d0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x64]
mov dword [ebx + 0x1a4], edx
mov edx, dword [0xc6be00]
test edx, edx
jne 0x694397
mov dword [ebx + 0x19c], eax
mov esi, dword [esp + 0xb8]
mov edi, dword [esp + 0x58]
mov edx, ecx
mov ebx, eax
mov eax, dword [esp + 0x64]
mov ecx, dword [esp + 0x4c]
jmp 0x6942b5
lea edi, [ebx + 0x19c]
call fcn.00451ff0
jmp 0x69437b
mov edi, edx
jmp 0x6942e4
lea eax, [0x885860]
mov dword [esp], eax
call fcn.0040a800
mov eax, dword [esp + 4]
mov dword [esp + 0xb0], eax
mov ecx, dword [esp + 0xdc]
mov edx, dword [esp + 0xd8]
mov ebx, dword [esp + 0xd4]
mov dword [esp], ebx
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
lea ecx, [0x860980]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call fcn.00527860
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x20]
test ecx, ecx
jne 0x694522
test edx, edx
jne 0x6944db
mov edx, dword [esp + 0xb0]
xor eax, eax
xor ecx, ecx
jmp 0x694435
inc eax
mov edx, esi
mov ecx, ebx
cmp eax, 9
jge 0x6944bf
mov ebx, dword [edx + 4]
mov ebp, dword [edx]
mov esi, edx
mov edx, dword [edx + 0xc]
test eax, eax
jge 0x69446e
xor edx, edx
test edx, edx
je 0x694468
cmp eax, 0x20
sbb edx, edx
mov ebx, ecx
mov ecx, eax
mov ebp, 1
shl ebp, cl
and ebp, edx
or ebx, ebp
jmp 0x694430
mov ebx, ecx
mov ecx, eax
jmp 0x694430
cmp eax, edx
jge 0x69444c
mov dword [esp + 0x40], eax
mov edx, eax
sar eax, 0x1f
shr eax, 0x1d
add eax, edx
sar eax, 3
mov edi, eax
shl eax, 3
sub edx, eax
cmp edi, ebx
jae 0x695b27
lea ebx, [edx - 7]
neg ebx
cmp ebx, 8
mov eax, ebx
sbb ebx, ebx
movzx ebp, byte [ebp + edi]
mov edx, ecx
mov ecx, eax
xchg ebp, eax
shr al, cl
xchg ebp, eax
and ebp, ebx
xchg ebp, eax
movzx ebx, al
xchg ebp, eax
and ebx, 1
mov eax, dword [esp + 0x40]
mov ecx, edx
mov edx, ebx
jmp 0x69444e
mov eax, dword [esp + 0x64]
mov dword [eax + 0x180], ecx
mov edx, dword [esp + 0x58]
mov esi, dword [esp + 0xb8]
xor ecx, ecx
jmp 0x69425a
lea eax, [0x85b840]
mov dword [esp], eax
call fcn.0040a800
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x28
lea ecx, [0x8d4568]
mov dword [eax], ecx
mov dword [esp + 0x25c], 0
lea ecx, [0x96e8d0]
mov dword [esp + 0x260], ecx
mov dword [esp + 0x264], eax
add esp, 0x254
ret
mov dword [esp + 0x25c], 0
mov dword [esp + 0x260], ecx
mov dword [esp + 0x264], eax
add esp, 0x254
ret
lea eax, [0x8279e0]
mov dword [esp], eax
call fcn.0040a800
mov eax, dword [esp + 4]
mov dword [esp + 0xac], eax
mov ecx, dword [esp + 0xdc]
mov edx, dword [esp + 0xd8]
mov ebx, dword [esp + 0xd4]
mov dword [esp], ebx
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
lea ecx, [0x812b00]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call fcn.00527860
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x28]
test edx, edx
jne 0x69464d
test eax, eax
jne 0x694606
mov ecx, dword [esp + 0xac]
mov edx, dword [ecx + 8]
mov ebx, dword [ecx + 4]
mov eax, dword [ecx]
mov ecx, dword [esp + 0x64]
mov dword [ecx + 0x1d0], ebx
mov dword [ecx + 0x1d4], edx
mov edx, dword [0xc6be00]
test edx, edx
jne 0x6945f9
mov dword [ecx + 0x1cc], eax
mov eax, ecx
mov edx, dword [esp + 0x58]
mov esi, dword [esp + 0xb8]
xor ecx, ecx
jmp 0x69425a
lea edi, [ecx + 0x1cc]
call fcn.00451ff0
jmp 0x6945e5
lea eax, [0x85b840]
mov dword [esp], eax
call fcn.0040a800
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x26
lea ecx, [0x8d35d3]
mov dword [eax], ecx
mov dword [esp + 0x25c], 0
lea ecx, [0x96e8d0]
mov dword [esp + 0x260], ecx
mov dword [esp + 0x264], eax
add esp, 0x254
ret
mov dword [esp + 0x25c], 0
mov dword [esp + 0x260], edx
mov dword [esp + 0x264], ecx
add esp, 0x254
ret
cmp ecx, 0x11
je 0x69479f
cmp ecx, 0x13
jne 0x694255
lea eax, [0x868aa0]
mov dword [esp], eax
call fcn.0040a800
mov eax, dword [esp + 4]
mov dword [esp + 0xa8], eax
mov ecx, dword [esp + 0xdc]
mov edx, dword [esp + 0xd8]
mov ebx, dword [esp + 0xd4]
mov dword [esp], ebx
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
lea ecx, [0x8170c0]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call fcn.00527860
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x20]
test eax, eax
jne 0x69477f
test edx, edx
jne 0x694738
mov eax, dword [esp + 0x64]
mov byte [eax + 0x1c0], 1
mov ebx, dword [esp + 0xa8]
movzx ebp, byte [ebx]
xchg ebp, ebx
mov byte [eax + 0x1c1], bl
xchg ebp, ebx
mov ebx, dword [ebx + 4]
mov dword [eax + 0x1c4], ebx
test ebx, ebx
sete bl
mov byte [eax + 0x1c8], bl
mov edx, dword [esp + 0x58]
mov esi, dword [esp + 0xb8]
xor ecx, ecx
jmp 0x69425a
lea eax, [0x85b840]
mov dword [esp], eax
call fcn.0040a800
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x30
lea ecx, [0x8d7c94]
mov dword [eax], ecx
mov dword [esp + 0x25c], 0
lea ecx, [0x96e8d0]
mov dword [esp + 0x260], ecx
mov dword [esp + 0x264], eax
add esp, 0x254
ret
mov dword [esp + 0x25c], 0
mov dword [esp + 0x260], eax
mov dword [esp + 0x264], ecx
add esp, 0x254
ret
mov eax, dword [esp + 0xd4]
mov ecx, dword [esp + 0xd8]
mov edx, dword [esp + 0xdc]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.00693520
mov eax, dword [esp + 0x34]
mov dword [esp + 0x68], eax
mov ecx, dword [esp + 0x30]
mov dword [esp + 0x48], ecx
mov edx, dword [esp + 0x2c]
mov dword [esp + 0x54], edx
mov ebx, dword [esp + 0x10]
mov ebp, dword [esp + 0x28]
mov dword [esp + 0x50], ebp
mov esi, dword [esp + 0x1c]
mov edi, dword [esp + 0x20]
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x18]
mov ebp, dword [esp + 0x24]
mov dword [esp + 0xa4], ebp
mov ebp, dword [esp + 0x64]
mov dword [ebp + 0x200], ebx
mov dword [ebp + 0x204], eax
mov eax, dword [0xc6be00]
test eax, eax
jne 0x6948fd
mov dword [ebp + 0x1fc], ecx
mov dword [ebp + 0x20c], esi
mov dword [ebp + 0x210], edi
mov ecx, dword [0xc6be00]
test ecx, ecx
jne 0x6948eb
mov dword [ebp + 0x208], edx
mov ecx, dword [esp + 0x50]
mov dword [ebp + 0x218], ecx
mov edx, dword [esp + 0x54]
mov dword [ebp + 0x21c], edx
mov edx, dword [0xc6be00]
test edx, edx
jne 0x6948d7
mov edx, dword [esp + 0xa4]
mov dword [ebp + 0x214], edx
mov edx, dword [esp + 0x48]
test edx, edx
jne 0x6948b3
mov edx, dword [ebp + 0x200]
test edx, edx
jne 0x6948af
mov edx, dword [ebp + 0x20c]
test edx, edx
jne 0x6948af
test ecx, ecx
jne 0x6948af
mov eax, 1
mov edx, dword [esp + 0x58]
mov esi, dword [esp + 0xb8]
mov ecx, eax
mov eax, ebp
jmp 0x69425a
xor eax, eax
jmp 0x69489b
mov dword [esp + 0x25c], 0
mov dword [esp + 0x260], edx
mov eax, dword [esp + 0x68]
mov dword [esp + 0x264], eax
add esp, 0x254
ret
lea edi, [ebp + 0x214]
mov eax, dword [esp + 0xa4]
call fcn.00451ff0
jmp 0x694876
lea edi, [ebp + 0x208]
mov eax, edx
call fcn.00451ff0
jmp 0x69484b
mov dword [esp + 0x4c], edi
lea ebx, [ebp + 0x1fc]
mov edi, ebx
mov eax, ecx
call fcn.00451ff0
mov edi, dword [esp + 0x4c]
jmp 0x69482b
cmp ecx, 0x1f
jg 0x694ea8
cmp ecx, 0x1e
je 0x694c21
cmp ecx, 0x1f
jne 0x694255
lea eax, [0x825860]
mov dword [esp], eax
call fcn.0040a800
mov eax, dword [esp + 4]
mov dword [esp + 0xa0], eax
mov ecx, dword [esp + 0xdc]
mov edx, dword [esp + 0xd8]
mov ebx, dword [esp + 0xd4]
mov dword [esp], ebx
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
lea ecx, [0x812780]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call fcn.00527860
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x20]
test ecx, ecx
jne 0x694c01
test edx, edx
jne 0x694bba
mov ecx, dword [esp + 0xa0]
mov edx, dword [ecx + 4]
mov ecx, dword [ecx]
test edx, edx
jle 0x694a0c
mov dword [esp + 0x54], edx
xor eax, eax
jmp 0x6949d2
mov ebx, dword [esp + 0x9c]
add ebx, 0x64
mov eax, ecx
mov ecx, ebx
mov dword [esp + 0x9c], ecx
lea edi, [esp + 0x1f0]
mov esi, ecx
call fcn.004526b6
lea edi, [esp + 0x18c]
lea esi, [esp + 0x1f0]
call fcn.004526b6
mov ecx, dword [esp + 0x19c]
test ecx, ecx
jne 0x694a22
lea ecx, [eax + 1]
cmp ecx, edx
jl 0x6949c4
mov eax, dword [esp + 0x64]
mov edx, dword [esp + 0x58]
mov esi, dword [esp + 0xb8]
xor ecx, ecx
jmp 0x69425a
mov dword [esp + 0x50], eax
lea eax, [0x886fc0]
mov dword [esp], eax
call fcn.0040a800
mov eax, dword [esp + 4]
mov dword [esp + 0x98], eax
mov ecx, dword [esp + 0x19c]
mov edx, dword [esp + 0x1a0]
mov ebx, dword [esp + 0x198]
mov dword [esp], ebx
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
lea ecx, [0x815380]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call fcn.00527860
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x28]
test ecx, ecx
jne 0x694b9a
mov ecx, dword [esp + 0x98]
cmp dword [ecx + 4], 6
je 0x694aac
mov eax, dword [esp + 0x50]
mov edx, dword [esp + 0x54]
jmp 0x694a05
mov eax, dword [ecx + 0x10]
mov edx, dword [ecx + 0xc]
mov ecx, dword [ecx + 0x14]
mov dword [esp], 0
mov dword [esp + 4], edx
mov dword [esp + 8], eax
mov dword [esp + 0xc], ecx
call fcn.004405f0
mov eax, dword [esp + 0x64]
mov ecx, dword [eax + 0x238]
mov edx, dword [eax + 0x230]
mov ebx, dword [eax + 0x234]
lea ebp, [ebx + 1]
mov esi, dword [esp + 0x14]
mov edi, dword [esp + 0x10]
cmp ebp, ecx
ja 0x694b26
lea ecx, [ebx + 1]
mov dword [eax + 0x234], ecx
lea ecx, [edx + ebx*8 + 4]
mov dword [ecx], esi
mov ecx, dword [0xc6be00]
lea edx, [edx + ebx*8]
test ecx, ecx
jne 0x694b12
mov dword [edx], edi
jmp 0x694a9f
mov ecx, edi
mov edi, edx
mov ebx, eax
mov eax, ecx
call fcn.00451ff0
mov eax, ebx
jmp 0x694a9f
mov dword [esp + 0x4c], esi
mov dword [esp + 0x94], edi
lea eax, [0x843c00]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebp
call fcn.0043d1d0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x64]
mov dword [ebx + 0x238], edx
mov edx, dword [0xc6be00]
test edx, edx
jne 0x694b8d
mov dword [ebx + 0x230], eax
mov esi, dword [esp + 0x4c]
mov edi, dword [esp + 0x94]
mov ebx, ecx
mov edx, eax
mov eax, dword [esp + 0x64]
jmp 0x694af2
lea edi, [ebx + 0x230]
call fcn.00451ff0
jmp 0x694b75
mov dword [esp + 0x25c], 0
mov dword [esp + 0x260], ecx
mov dword [esp + 0x264], eax
add esp, 0x254
ret
lea eax, [0x85b840]
mov dword [esp], eax
call fcn.0040a800
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x36
lea ecx, [0x8d9fbd]
mov dword [eax], ecx
mov dword [esp + 0x25c], 0
lea ecx, [0x96e8d0]
mov dword [esp + 0x260], ecx
mov dword [esp + 0x264], eax
add esp, 0x254
ret
mov dword [esp + 0x25c], 0
mov dword [esp + 0x260], ecx
mov dword [esp + 0x264], eax
add esp, 0x254
ret
lea eax, [0x868c20]
mov dword [esp], eax
call fcn.0040a800
mov eax, dword [esp + 4]
mov dword [esp + 0x90], eax
mov ecx, dword [esp + 0xdc]
mov edx, dword [esp + 0xd8]
mov ebx, dword [esp + 0xd4]
mov dword [esp], ebx
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
lea ecx, [0x8172c0]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call fcn.00527860
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x20]
test ecx, ecx
jne 0x694e88
test edx, edx
jne 0x694e41
mov ecx, dword [esp + 0x90]
mov edx, dword [ecx + 0x10]
test edx, edx
jle 0x694cb7
movzx edx, byte [esp + 0xd0]
test dl, dl
jne 0x694e15
mov edx, dword [ecx + 4]
mov dword [esp + 0x54], edx
mov ecx, dword [ecx]
mov dword [esp + 0x8c], ecx
mov ebx, dword [esp + 0x64]
xor eax, eax
jmp 0x694cd2
inc eax
mov ecx, esi
cmp eax, edx
jge 0x694e01
lea ebp, [ecx + eax*8]
mov ebp, dword [ebp + 4]
mov esi, ecx
lea ecx, [ecx + eax*8]
mov ecx, dword [ecx]
test ebp, ebp
jne 0x694d1f
movzx ecx, byte [esp + 0xd0]
test cl, cl
je 0x694ccf
mov dword [esp + 0x25c], ebx
lea eax, [0x96f630]
mov dword [esp + 0x260], eax
lea eax, [0xc6bb8c]
mov dword [esp + 0x264], eax
add esp, 0x254
ret
mov dword [esp + 0x50], ebp
mov dword [esp + 0x94], ecx
mov edi, edx
mov edx, dword [ebx + 0x22c]
mov ecx, dword [ebx + 0x228]
mov ebp, dword [ebx + 0x224]
lea ebx, [ecx + 1]
cmp ebx, edx
ja 0x694d96
lea edx, [ecx + 1]
mov ebx, dword [esp + 0x64]
mov dword [ebx + 0x228], edx
lea edx, [ebp + ecx*8 + 4]
mov ebx, dword [esp + 0x50]
mov dword [edx], ebx
lea ecx, [ebp + ecx*8]
mov edx, dword [0xc6be00]
test edx, edx
jne 0x694d7e
mov edx, dword [esp + 0x94]
mov dword [ecx], edx
mov edx, edi
mov ebx, dword [esp + 0x64]
jmp 0x694ccf
mov edx, edi
mov edi, ecx
mov ebx, eax
mov eax, dword [esp + 0x94]
call fcn.00451ff0
mov eax, ebx
mov edi, edx
jmp 0x694d73
mov dword [esp + 0x4c], eax
lea eax, [0x843c00]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ebx
call fcn.0043d1d0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x64]
mov dword [ebx + 0x22c], edx
mov edx, dword [0xc6be00]
test edx, edx
jne 0x694df4
mov dword [ebx + 0x224], eax
mov esi, dword [esp + 0x8c]
mov edi, dword [esp + 0x54]
mov ebp, eax
mov eax, dword [esp + 0x4c]
jmp 0x694d45
lea edi, [ebx + 0x224]
call fcn.00451ff0
jmp 0x694dde
mov eax, ebx
mov edx, dword [esp + 0x58]
mov esi, dword [esp + 0xb8]
xor ecx, ecx
jmp 0x69425a
mov eax, dword [esp + 0x64]
mov dword [esp + 0x25c], eax
lea eax, [0x96f630]
mov dword [esp + 0x260], eax
lea eax, [0xc6bb8c]
mov dword [esp + 0x264], eax
add esp, 0x254
ret
lea eax, [0x85b840]
mov dword [esp], eax
call fcn.0040a800
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x2f
lea ecx, [0x8d7665]
mov dword [eax], ecx
mov dword [esp + 0x25c], 0
lea ecx, [0x96e8d0]
mov dword [esp + 0x260], ecx
mov dword [esp + 0x264], eax
add esp, 0x254
ret
mov dword [esp + 0x25c], 0
mov dword [esp + 0x260], ecx
mov dword [esp + 0x264], eax
add esp, 0x254
ret
cmp ecx, 0x20
je 0x6952af
cmp ecx, 0x23
je 0x695184
cmp ecx, 0x25
jne 0x694255
lea eax, [0x824ea0]
mov dword [esp], eax
call fcn.0040a800
mov eax, dword [esp + 4]
mov dword [esp + 0x88], eax
mov ecx, dword [esp + 0xdc]
mov edx, dword [esp + 0xd8]
mov ebx, dword [esp + 0xd4]
mov dword [esp], ebx
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
lea ecx, [0x812640]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call fcn.00527860
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x20]
test ecx, ecx
jne 0x695164
test edx, edx
jne 0x69511d
mov ecx, dword [esp + 0x88]
mov edx, dword [ecx + 4]
mov ecx, dword [ecx]
test edx, edx
jg 0x694f61
mov eax, dword [esp + 0x64]
mov edx, dword [esp + 0x58]
mov esi, dword [esp + 0xb8]
xor ecx, ecx
jmp 0x69425a
mov dword [esp + 0x54], edx
xor eax, eax
jmp 0x694f77
mov ebx, dword [esp + 0x84]
add ebx, 0xc
mov eax, ecx
mov ecx, ebx
mov dword [esp + 0x84], ecx
mov dword [esp + 0x50], eax
mov edx, dword [ecx + 8]
mov dword [esp + 0x3c], edx
mov ebx, dword [ecx + 4]
mov dword [esp + 0x38], ebx
mov ebp, dword [ecx]
mov dword [esp + 0x60], ebp
mov dword [esp], ebp
mov dword [esp + 4], ebx
mov dword [esp + 8], edx
call fcn.00691d70
mov eax, dword [esp + 0xc]
movzx ecx, byte [esp + 0x10]
test cl, cl
je 0x69505a
mov ecx, dword [esp + 0x64]
mov edx, dword [ecx + 0x1b0]
mov ebx, dword [ecx + 0x1ac]
mov ebp, dword [ecx + 0x1a8]
mov esi, ecx
lea ecx, [ebx + 1]
cmp ecx, edx
ja 0x694ff9
lea ecx, [ebx + 1]
mov dword [esi + 0x1ac], ecx
mov dword [ebp + ebx*4], eax
mov ecx, dword [esp + 0x50]
inc ecx
mov edx, dword [esp + 0x54]
cmp ecx, edx
jl 0x694f69
jmp 0x694f4b
mov dword [esp + 0x44], eax
lea eax, [0x842d80]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], ebx
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ecx
call fcn.0043d1d0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x64]
mov dword [ebx + 0x1b0], edx
mov edx, dword [0xc6be00]
test edx, edx
jne 0x69504d
mov dword [ebx + 0x1a8], eax
mov esi, ebx
mov ebx, ecx
mov ebp, eax
mov eax, dword [esp + 0x44]
jmp 0x694fd6
lea edi, [ebx + 0x1a8]
call fcn.00451ff0
jmp 0x695041
mov ecx, dword [esp + 0x64]
mov edx, dword [ecx + 0x1b8]
mov ebx, dword [ecx + 0x1b4]
mov ebp, dword [ecx + 0x1bc]
mov eax, ecx
lea ecx, [edx + 1]
cmp ecx, ebp
ja 0x6950bf
lea ecx, [edx + 1]
mov dword [eax + 0x1b8], ecx
lea ecx, [edx + edx*2]
mov edx, dword [esp + 0x38]
mov dword [ebx + ecx*4 + 4], edx
mov edx, dword [esp + 0x3c]
mov dword [ebx + ecx*4 + 8], edx
mov edx, dword [0xc6be00]
lea edi, [ebx + ecx*4]
test edx, edx
jne 0x6950b0
mov edx, dword [esp + 0x60]
mov dword [ebx + ecx*4], edx
mov esi, eax
jmp 0x694fe3
mov ecx, eax
mov eax, dword [esp + 0x60]
call fcn.00451ff0
mov eax, ecx
jmp 0x6950a9
lea eax, [0x8641a0]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], ecx
call fcn.0043d1d0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x64]
mov dword [ebx + 0x1bc], edx
mov edx, dword [0xc6be00]
test edx, edx
jne 0x695110
mov dword [ebx + 0x1b4], eax
mov edx, ecx
mov ebx, eax
mov eax, dword [esp + 0x64]
jmp 0x695079
lea edi, [ebx + 0x1b4]
call fcn.00451ff0
jmp 0x695103
lea eax, [0x85b840]
mov dword [esp], eax
call fcn.0040a800
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x30
lea ecx, [0x8d7cc4]
mov dword [eax], ecx
mov dword [esp + 0x25c], 0
lea ecx, [0x96e8d0]
mov dword [esp + 0x260], ecx
mov dword [esp + 0x264], eax
add esp, 0x254
ret
mov dword [esp + 0x25c], 0
mov dword [esp + 0x260], ecx
mov dword [esp + 0x264], eax
add esp, 0x254
ret
lea eax, [0x85bba0]
mov dword [esp], eax
call fcn.0040a800
mov eax, dword [esp + 4]
mov dword [esp + 0x80], eax
mov ecx, dword [esp + 0xd8]
mov edx, dword [esp + 0xdc]
mov ebx, dword [esp + 0xd4]
mov dword [esp], ebx
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
lea ecx, [0x817040]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call fcn.00527860
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x2c]
test eax, eax
jne 0x69528f
test ecx, ecx
jne 0x695248
mov ecx, dword [esp + 0x80]
mov edx, dword [ecx + 8]
mov ebx, dword [ecx + 4]
mov eax, dword [ecx]
mov ecx, dword [esp + 0x64]
mov dword [ecx + 0x1dc], ebx
mov dword [ecx + 0x1e0], edx
mov edx, dword [0xc6be00]
test edx, edx
jne 0x69523b
mov dword [ecx + 0x1d8], eax
mov eax, ecx
mov edx, dword [esp + 0x58]
mov esi, dword [esp + 0xb8]
xor ecx, ecx
jmp 0x69425a
lea edi, [ecx + 0x1d8]
call fcn.00451ff0
jmp 0x695227
lea eax, [0x85b840]
mov dword [esp], eax
call fcn.0040a800
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x30
lea ecx, [0x8d7cf4]
mov dword [eax], ecx
mov dword [esp + 0x25c], 0
lea ecx, [0x96e8d0]
mov dword [esp + 0x260], ecx
mov dword [esp + 0x264], eax
add esp, 0x254
ret
mov dword [esp + 0x25c], 0
mov dword [esp + 0x260], eax
mov dword [esp + 0x264], edx
add esp, 0x254
ret
lea eax, [0x8258e0]
mov dword [esp], eax
call fcn.0040a800
mov eax, dword [esp + 4]
mov dword [esp + 0x7c], eax
mov ecx, dword [esp + 0xdc]
mov edx, dword [esp + 0xd8]
mov ebx, dword [esp + 0xd4]
mov dword [esp], ebx
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
lea ecx, [0x8127c0]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call fcn.00527860
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x20]
test ecx, ecx
jne 0x695469
test edx, edx
jne 0x695422
mov eax, dword [esp + 0x7c]
mov ecx, dword [eax + 4]
mov dword [esp + 0x54], ecx
lea edx, [0x8641a0]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], ecx
call fcn.0043d110
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x54]
mov edx, dword [esp + 0x64]
mov dword [edx + 0x240], ecx
mov dword [edx + 0x244], ecx
mov ecx, dword [0xc6be00]
test ecx, ecx
jne 0x695412
mov dword [edx + 0x23c], eax
mov ebx, dword [esp + 0x7c]
mov ebp, dword [ebx + 4]
mov ebx, dword [ebx]
test ebp, ebp
jle 0x6953e4
xor eax, eax
jmp 0x695391
lea ebx, [edi + 0xc]
mov eax, dword [esp + 0x64]
mov ebp, ecx
mov eax, edx
mov edx, dword [esp + 0x64]
mov ecx, ebp
mov ebp, dword [ebx]
mov esi, ebp
mov ebp, dword [ebx + 8]
mov dword [esp + 0x54], ebp
mov edi, ebx
mov ebx, dword [ebx + 4]
mov ebp, dword [edx + 0x240]
mov edx, dword [edx + 0x23c]
cmp eax, ebp
jae 0x695b20
lea ebp, [eax + eax*2]
mov dword [edx + ebp*4 + 4], ebx
mov ebx, dword [esp + 0x54]
mov dword [edx + ebp*4 + 8], ebx
lea ebx, [edx + ebp*4]
mov dword [esp + 0x84], ebx
mov ebx, dword [0xc6be00]
test ebx, ebx
jne 0x6953fa
mov dword [edx + ebp*4], esi
lea edx, [eax + 1]
cmp edx, ecx
jl 0x695382
mov eax, dword [esp + 0x64]
mov edx, dword [esp + 0x58]
mov esi, dword [esp + 0xb8]
xor ecx, ecx
jmp 0x69425a
mov edx, edi
mov edi, dword [esp + 0x84]
mov ebx, eax
mov eax, esi
call fcn.00451ff0
mov eax, ebx
mov edi, edx
jmp 0x6953dd
lea edi, [edx + 0x23c]
call fcn.00451ff0
jmp 0x695371
lea eax, [0x85b840]
mov dword [esp], eax
call fcn.0040a800
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x34
lea ecx, [0x8d9365]
mov dword [eax], ecx
mov dword [esp + 0x25c], 0
lea ecx, [0x96e8d0]
mov dword [esp + 0x260], ecx
mov dword [esp + 0x264], eax
add esp, 0x254
ret
mov dword [esp + 0x25c], 0
mov dword [esp + 0x260], ecx
mov dword [esp + 0x264], eax
add esp, 0x254
ret
mov dword [esp], ecx
mov dword [esp + 4], ebp
mov dword [esp + 8], ebx
mov eax, dword [0xc50618]
mov ecx, dword [0xc5061c]
mov edx, dword [0xc50620]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
call fcn.00523310
movzx eax, byte [esp + 0x18]
test al, al
jne 0x6954db
mov eax, 1
mov edx, dword [esp + 0x58]
mov esi, dword [esp + 0xb8]
mov ecx, eax
mov eax, dword [esp + 0x64]
jmp 0x69425a
lea eax, [0x825820]
mov dword [esp], eax
call fcn.0040a800
mov eax, dword [esp + 4]
mov dword [esp + 0x78], eax
mov ecx, dword [esp + 0xdc]
mov edx, dword [esp + 0xd8]
mov ebx, dword [esp + 0xd4]
mov dword [esp], ebx
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
lea ecx, [0x812740]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call fcn.00527860
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x20]
test ecx, ecx
jne 0x695895
test edx, edx
jne 0x69584e
mov ecx, dword [esp + 0x78]
mov edx, dword [ecx + 4]
mov ecx, dword [ecx]
test edx, edx
jle 0x6955a6
mov dword [esp + 0x54], edx
xor eax, eax
jmp 0x695570
mov ebx, dword [esp + 0x74]
add ebx, 0x30
mov eax, ecx
mov ecx, ebx
mov dword [esp + 0x74], ecx
lea edi, [esp + 0x12c]
mov esi, ecx
call fcn.00452738
lea edi, [esp + 0xfc]
lea esi, [esp + 0x12c]
call fcn.00452738
cmp dword [esp + 0x10c], 6
je 0x6955ad
lea ecx, [eax + 1]
cmp ecx, edx
jl 0x695565
xor eax, eax
jmp 0x6954c5
mov dword [esp + 0x50], eax
mov eax, dword [esp + 0xfc]
mov ecx, dword [esp + 0x104]
mov edx, dword [esp + 0x100]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov eax, dword [0xc50610]
mov ecx, dword [0xc5060c]
mov edx, dword [0xc50608]
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], eax
call fcn.00523310
movzx eax, byte [esp + 0x18]
test al, al
je 0x6956ff
mov dword [esp], 0
mov eax, dword [esp + 0x118]
mov ecx, dword [esp + 0x11c]
mov edx, dword [esp + 0x114]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
mov dword [esp + 0xc], ecx
call fcn.004405f0
mov eax, dword [esp + 0x64]
mov ecx, dword [eax + 0x1ec]
mov edx, dword [eax + 0x1e8]
mov ebx, dword [eax + 0x1e4]
lea ebp, [edx + 1]
mov esi, dword [esp + 0x10]
mov edi, dword [esp + 0x14]
cmp ebp, ecx
ja 0x69568b
lea ecx, [edx + 1]
mov dword [eax + 0x1e8], ecx
lea ecx, [ebx + edx*8 + 4]
mov dword [ecx], edi
mov ecx, dword [0xc6be00]
lea edi, [ebx + edx*8]
test ecx, ecx
jne 0x69567e
mov dword [edi], esi
mov eax, dword [esp + 0x50]
mov edx, dword [esp + 0x54]
jmp 0x69559f
mov ecx, eax
mov eax, esi
call fcn.00451ff0
mov eax, ecx
jmp 0x695671
mov dword [esp + 0x94], esi
mov dword [esp + 0x4c], edi
lea eax, [0x843c00]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebp
call fcn.0043d1d0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x64]
mov dword [ebx + 0x1ec], edx
mov edx, dword [0xc6be00]
test edx, edx
jne 0x6956f2
mov dword [ebx + 0x1e4], eax
mov esi, dword [esp + 0x94]
mov edi, dword [esp + 0x4c]
mov edx, ecx
mov ebx, eax
mov eax, dword [esp + 0x64]
jmp 0x695653
lea edi, [ebx + 0x1e4]
call fcn.00451ff0
jmp 0x6956da
mov eax, dword [esp + 0x100]
mov ecx, dword [esp + 0xfc]
mov edx, dword [esp + 0x104]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], edx
mov eax, dword [0xc50600]
mov ecx, dword [0xc505fc]
mov edx, dword [0xc505f8]
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], eax
call fcn.00523310
movzx eax, byte [esp + 0x18]
test al, al
jne 0x695754
mov eax, dword [esp + 0x64]
jmp 0x695671
mov dword [esp], 0
mov eax, dword [esp + 0x118]
mov ecx, dword [esp + 0x11c]
mov edx, dword [esp + 0x114]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
mov dword [esp + 0xc], ecx
call fcn.004405f0
mov eax, dword [esp + 0x64]
mov ecx, dword [eax + 0x1f8]
mov edx, dword [eax + 0x1f4]
mov ebx, dword [eax + 0x1f0]
lea ebp, [edx + 1]
mov esi, dword [esp + 0x14]
mov edi, dword [esp + 0x10]
cmp ebp, ecx
ja 0x6957da
lea ecx, [edx + 1]
mov dword [eax + 0x1f4], ecx
lea ecx, [ebx + edx*8 + 4]
mov dword [ecx], esi
mov ecx, dword [0xc6be00]
lea edx, [ebx + edx*8]
test ecx, ecx
jne 0x6957c6
mov dword [edx], edi
jmp 0x69574b
mov ecx, edi
mov edi, edx
mov ebx, eax
mov eax, ecx
call fcn.00451ff0
mov eax, ebx
jmp 0x69574b
mov dword [esp + 0x4c], esi
mov dword [esp + 0x94], edi
lea eax, [0x843c00]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebp
call fcn.0043d1d0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x64]
mov dword [ebx + 0x1f8], edx
mov edx, dword [0xc6be00]
test edx, edx
jne 0x695841
mov dword [ebx + 0x1f0], eax
mov esi, dword [esp + 0x4c]
mov edi, dword [esp + 0x94]
mov edx, ecx
mov ebx, eax
mov eax, dword [esp + 0x64]
jmp 0x6957a6
lea edi, [ebx + 0x1f0]
call fcn.00451ff0
jmp 0x695829
lea eax, [0x85b840]
mov dword [esp], eax
call fcn.0040a800
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x35
lea ecx, [0x8d985c]
mov dword [eax], ecx
mov dword [esp + 0x25c], 0
lea ecx, [0x96e8d0]
mov dword [esp + 0x260], ecx
mov dword [esp + 0x264], eax
add esp, 0x254
ret
mov dword [esp + 0x25c], 0
mov dword [esp + 0x260], ecx
mov dword [esp + 0x264], eax
add esp, 0x254
ret
lea eax, [0x877800]
mov dword [esp], eax
mov dword [esp + 4], ecx
lea eax, [esp + 0xc4]
mov dword [esp + 8], eax
call fcn.00410a60
mov eax, dword [esp + 0x64]
mov edx, dword [esp + 0x58]
mov ebx, dword [esp + 0xb8]
jmp 0x6941f1
lea eax, [0x877800]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], ebx
call fcn.0043d1d0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x64]
mov dword [ebx + 0x18c], edx
mov edx, dword [0xc6be00]
test edx, edx
jne 0x695940
mov dword [ebx + 0x184], eax
mov esi, dword [esp + 0xb8]
mov edi, dword [esp + 0x58]
mov edx, ecx
mov ecx, eax
mov eax, ebx
jmp 0x6941c3
lea edi, [ebx + 0x184]
call fcn.00451ff0
jmp 0x69592a
mov dword [esp + 0x70], ebp
mov dword [esp + 0x6c], ebx
lea eax, [0x8bad60]
mov dword [esp], eax
mov dword [esp + 4], edi
mov dword [esp + 8], esi
call fcn.00410a60
lea eax, [0x8bad60]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x70]
mov dword [esp + 8], eax
call fcn.00410a60
mov eax, dword [esp + 0x64]
mov edx, dword [esp + 0x258]
jmp 0x69414f
lea eax, [0x85b840]
mov dword [esp], eax
call fcn.0040a800
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x27
lea ecx, [0x8d3cfb]
mov dword [eax], ecx
mov dword [esp + 0x25c], 0
lea ecx, [0x96e8d0]
mov dword [esp + 0x260], ecx
mov dword [esp + 0x264], eax
add esp, 0x254
ret
mov dword [esp + 0x25c], 0
mov dword [esp + 0x260], edx
mov dword [esp + 0x264], ecx
add esp, 0x254
ret
lea eax, [0x85b840]
mov dword [esp], eax
call fcn.0040a800
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x27
lea ecx, [0x8d3cfb]
mov dword [eax], ecx
mov dword [esp + 0x25c], 0
lea ecx, [0x96e8d0]
mov dword [esp + 0x260], ecx
mov dword [esp + 0x264], eax
add esp, 0x254
ret
mov dword [esp + 0x25c], 0
mov dword [esp + 0x260], ecx
mov dword [esp + 0x264], eax
add esp, 0x254
ret
lea edi, [ebp + 0x5c]
call fcn.00451ff0
jmp 0x693fe6
mov dword [esp + 0x25c], 0
mov dword [esp + 0x260], ecx
mov dword [esp + 0x264], edx
add esp, 0x254
ret
lea edi, [ebp + 0x54]
call fcn.00451ff0
jmp 0x693fbc
lea edi, [ebx + 0x3c]
mov eax, edx
call fcn.00451ff0
jmp 0x693f13
lea edx, [edi + 0x30]
mov edi, edx
mov ebp, eax
mov eax, ecx
call fcn.00451ff0
mov eax, ebp
jmp 0x693ec0
lea ecx, [edi + 0x24]
mov edx, edi
mov edi, ecx
mov ebp, eax
mov eax, ebx
call fcn.00451ff0
mov eax, ebp
mov edi, edx
jmp 0x693e9c
lea ecx, [edi + 0x18]
mov edx, edi
mov edi, ecx
mov ebp, eax
mov eax, ebx
call fcn.00451ff0
mov eax, ebp
mov edi, edx
jmp 0x693e73
lea ecx, [edi + 0xc]
mov edx, edi
mov edi, ecx
mov ebp, eax
mov eax, ebx
call fcn.00451ff0
mov eax, ebp
mov edi, edx
jmp 0x693e4a
mov ecx, eax
mov eax, ebx
call fcn.00451ff0
mov eax, ecx
jmp 0x693e2a
mov ecx, ebp
call fcn.00452070
mov eax, edi
mov ecx, ebx
call fcn.00452070
nop
call fcn.004507b0
jmp fcn.00693dd0