Function at 0x6866a0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x781153
mov eax, dword fs:[0]
push eax
sub esp, 0x80
push ebx
push ebp
push esi
push edi
mov eax, dword [0x867e6c]
xor eax, esp
push eax
lea eax, [esp + 0x94]
mov dword fs:[0], eax
mov ebx, ecx
mov ebp, dword [esp + 0xa4]
fldz
fcomp qword [ebp + 0x668]
fnstsw ax
test ah, 1
je 0x6873fe
lea esi, [ebp + 0x388]
mov ecx, esi
call fcn.00436230
fcomp qword [0x82dc20]
fnstsw ax
test ah, 0x41
jne 0x686772
push ebx
call fcn.00430aa0
fld dword [ebx + 0xc]
fldz
fld st(0)
fsubrp st(2)
fxch st(1)
call fcn.0076f850
fsub dword [ebx + 8]
push eax
call fcn.0076f850
push eax
mov eax, ebx
call fcn.004329c0
mov ecx, esi
call fcn.00436230
fmul qword [0x82dc80]
call fcn.0076f850
push eax
xor ecx, ecx
lea eax, [esp + 0x4c]
call fcn.00434860
mov ecx, ebx
call fcn.00430c20
mov eax, dword [0x88b12c]
mov ecx, dword [eax + 0x718]
mov edx, dword [eax + 0x714]
push ecx
push edx
push 0
push 0
mov esi, ebx
call fcn.00430d10
call fcn.00430bb0
push ebx
call fcn.00430aa0
mov eax, dword [esp + 0xac]
mov ecx, dword [esp + 0xa8]
push eax
push ecx
mov eax, ebx
call fcn.004329c0
fldz
fcomp qword [ebp + 0x668]
fnstsw ax
test ah, 5
jp 0x686a13
push ebx
call fcn.00430aa0
mov eax, ebx
call fcn.00430930
mov esi, eax
mov dword [esp + 0x1c], esi
test esi, esi
je 0x68689f
fld dword [0x7b1248]
sub esp, 8
fstp dword [esp + 4]
mov eax, 1
fld dword [0x82e0c0]
fstp dword [esp]
call fcn.00434130
mov edx, dword [ebp + 0x654]
mov eax, dword [ebp + 0x650]
push edx
push eax
mov eax, ebx
call fcn.004329c0
fld1
mov ecx, dword [0x88b12c]
mov edi, dword [ecx + 0x9e0]
mov ecx, dword [ebp + 0x6b4]
imul ecx, edi
mov eax, 0x1b4e81b5
imul ecx
mov ecx, dword [ebp + 0x6b0]
imul ecx, edi
sar edx, 7
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [esp + 0x18], eax
mov edi, dword [ebp + 0x68c]
mov eax, 0x1b4e81b5
imul ecx
sub esp, 0x10
sar edx, 7
mov ecx, edx
fst dword [esp + 0xc]
shr ecx, 0x1f
fstp dword [esp + 8]
add ecx, edx
fild dword [esp + 0x28]
mov dword [esp + 0x28], ecx
mov eax, ebx
fstp dword [esp + 4]
fild dword [esp + 0x28]
fstp dword [esp]
call fcn.006f1400
mov edx, dword [ebp + 0x654]
mov eax, dword [ebp + 0x650]
add esp, 0x10
neg edx
push edx
neg eax
push eax
mov eax, ebx
call fcn.004329c0
fld dword [0x7b1248]
sub esp, 8
fstp dword [esp + 4]
mov eax, 4
fld dword [0x82e0c0]
fstp dword [esp]
call fcn.00434130
mov ecx, dword [0x88b12c]
mov esi, dword [ecx + 0x9e0]
mov ecx, dword [ebp + 0x6bc]
imul ecx, esi
mov eax, 0x1b4e81b5
imul ecx
mov ecx, dword [ebp + 0x6b8]
sar edx, 7
imul ecx, esi
mov eax, edx
shr eax, 0x1f
add eax, edx
push eax
mov eax, 0x1b4e81b5
imul ecx
sar edx, 7
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
push ecx
mov eax, ebx
call fcn.004329c0
fld qword [0x7a8008]
fcomp qword [ebp + 0x668]
fnstsw ax
test ah, 0x41
jne 0x686927
fld qword [ebp + 0x668]
push ecx
fstp dword [esp + 0x1c]
lea esi, [esp + 0x4c]
fld dword [esp + 0x1c]
fstp dword [esp]
call fcn.00434940
add esp, 4
mov ecx, ebx
call fcn.00430c20
mov eax, ebx
call fcn.00430c60
mov edx, dword [ebp + 0x748]
sub edx, dword [ebp + 0x744]
xor esi, esi
sar edx, 2
test edx, edx
jbe 0x68697a
lea esp, [esp]
mov eax, dword [ebp + 0x748]
sub eax, dword [ebp + 0x744]
sar eax, 2
cmp esi, eax
jb 0x686958
call fcn.006441b7
mov ecx, dword [ebp + 0x744]
mov eax, dword [ecx + esi*4]
call fcn.00681db0
mov edx, dword [ebp + 0x748]
sub edx, dword [ebp + 0x744]
inc esi
sar edx, 2
cmp esi, edx
jb 0x686940
mov eax, dword [ebp + 0x730]
sub eax, dword [ebp + 0x72c]
xor esi, esi
sar eax, 2
test eax, eax
jbe 0x6869ca
nop
mov ecx, dword [ebp + 0x730]
sub ecx, dword [ebp + 0x72c]
sar ecx, 2
cmp esi, ecx
jb 0x6869a8
call fcn.006441b7
mov edx, dword [ebp + 0x72c]
mov eax, dword [edx + esi*4]
call fcn.00681db0
mov eax, dword [ebp + 0x730]
sub eax, dword [ebp + 0x72c]
inc esi
sar eax, 2
cmp esi, eax
jb 0x686990
fld qword [0x7a8008]
fcomp qword [ebp + 0x668]
fnstsw ax
test ah, 0x41
jne 0x6869e4
mov eax, ebx
call fcn.00430c80
mov esi, dword [esp + 0x1c]
test esi, esi
je 0x686a0e
fld dword [0x7b1248]
sub esp, 8
fstp dword [esp + 4]
xor eax, eax
fld dword [0x82e0c0]
fstp dword [esp]
call fcn.00434130
call fcn.00433fb0
call fcn.00430bb0
mov ecx, dword [ebp + 0x654]
mov edx, dword [ebp + 0x650]
push ecx
push edx
mov eax, ebx
call fcn.004329c0
cmp dword [ebp + 0x68c], 0
je 0x686c8b
lea ecx, [ebp + 0x5b8]
call fcn.00436230
fst qword [esp + 0x1c]
cmp dword [ebp], 1
jne 0x686a77
lea esi, [ebp + 0xe8]
fstp st(0)
mov ecx, esi
call fcn.00436230
fsubr qword [esp + 0x1c]
fldz
fcom st(1)
fnstsw ax
fstp st(1)
test ah, 0x41
je 0x686a77
mov ecx, esi
fstp st(0)
call fcn.00436230
fsubr qword [esp + 0x1c]
mov cl, 1
mov eax, ebx
call fcn.00430cc0
fmul qword [0x82dc80]
call fcn.0076f850
push eax
xor ecx, ecx
lea eax, [esp + 0x4c]
call fcn.00434860
mov ecx, ebx
call fcn.00430c20
fld1
mov eax, dword [0x88b12c]
mov esi, dword [eax + 0x9e0]
mov ecx, dword [ebp + 0x6b4]
imul ecx, esi
mov eax, 0x1b4e81b5
imul ecx
sar edx, 7
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov dword [esp + 0x1c], ecx
mov ecx, dword [ebp + 0x6b0]
imul ecx, esi
mov edi, dword [ebp + 0x68c]
mov eax, 0x1b4e81b5
imul ecx
sub esp, 0x10
sar edx, 7
mov eax, edx
fst dword [esp + 0xc]
shr eax, 0x1f
fstp dword [esp + 8]
add eax, edx
fild dword [esp + 0x2c]
mov dword [esp + 0x2c], eax
mov eax, ebx
fstp dword [esp + 4]
fild dword [esp + 0x2c]
fstp dword [esp]
call fcn.006f1400
add esp, 0x10
push 0x19
xor edx, edx
push 0xbe
lea ecx, [edx + 0x5a]
lea eax, [esp + 0x50]
call fcn.004348b0
mov ecx, ebx
call fcn.00430c20
mov eax, dword [ebp + 0x688]
cmp eax, 0xffffffff
jne 0x686b3c
xor edi, edi
jmp 0x686b45
mov ecx, dword [eax*4 + 0x879598]
mov edi, dword [ecx]
mov edx, dword [0x88b12c]
fld1
mov esi, dword [edx + 0x9e0]
mov ecx, dword [ebp + 0x6ac]
imul ecx, esi
mov eax, 0x1b4e81b5
imul ecx
mov ecx, dword [ebp + 0x6a8]
sar edx, 7
imul ecx, esi
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [esp + 0x1c], eax
mov eax, 0x1b4e81b5
imul ecx
sub esp, 0x10
sar edx, 7
mov ecx, edx
fst dword [esp + 0xc]
shr ecx, 0x1f
fstp dword [esp + 8]
add ecx, edx
fild dword [esp + 0x2c]
mov dword [esp + 0x2c], ecx
mov eax, ebx
fstp dword [esp + 4]
fild dword [esp + 0x2c]
fstp dword [esp]
call fcn.006f1400
add esp, 0x10
or ecx, 0xffffffff
lea eax, [esp + 0x24]
call fcn.00434820
mov ecx, ebx
call fcn.00430c20
xor cl, cl
mov eax, ebx
call fcn.00430cc0
mov cl, 1
call fcn.00430cc0
push 0x64
xor ecx, ecx
lea eax, [esp + 0x4c]
call fcn.00434860
mov ecx, ebx
call fcn.00430c20
mov eax, dword [ebp + 0x688]
cmp eax, 0xffffffff
jne 0x686bf9
xor edi, edi
jmp 0x686c02
mov edx, dword [eax*4 + 0x879598]
mov edi, dword [edx]
mov eax, dword [0x88b12c]
fld1
mov esi, dword [eax + 0x9e0]
mov ecx, dword [ebp + 0x6ac]
imul ecx, esi
mov eax, 0x1b4e81b5
imul ecx
sar edx, 7
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov dword [esp + 0x1c], ecx
mov ecx, dword [ebp + 0x6a8]
imul ecx, esi
mov eax, 0x1b4e81b5
imul ecx
sub esp, 0x10
sar edx, 7
mov eax, edx
fst dword [esp + 0xc]
shr eax, 0x1f
fstp dword [esp + 8]
add eax, edx
fild dword [esp + 0x2c]
mov dword [esp + 0x2c], eax
mov eax, ebx
fstp dword [esp + 4]
fild dword [esp + 0x2c]
fstp dword [esp]
call fcn.006f1400
add esp, 0x10
or ecx, 0xffffffff
lea eax, [esp + 0x24]
call fcn.00434820
mov ecx, ebx
call fcn.00430c20
xor cl, cl
mov eax, ebx
call fcn.00430cc0
lea edx, [esp + 0x78]
lea ecx, [ebp + 0x6f0]
push edx
call fcn.0042c5d0
mov dword [esp + 0x9c], 0
mov esi, dword [ebp + 0x718]
cmp dword [ebp + 0x714], esi
jbe 0x686cb9
call fcn.006441b7
mov edi, dword [ebp + 0x714]
cmp edi, dword [ebp + 0x718]
jbe 0x686ccc
call fcn.006441b7
mov byte [esp + 0x1c], 0
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x1c]
push eax
push ecx
push edx
lea eax, [esp + 0x84]
push eax
lea ecx, [esp + 0x2c]
push esi
push ecx
mov eax, edi
call fcn.0042f910
mov eax, dword [esp + 0xa0]
mov ecx, dword [esp + 0x9c]
add esp, 0x18
mov dword [esp + 0x1c], eax
cmp ecx, eax
jbe 0x686d21
call fcn.006441b7
mov eax, dword [esp + 0x88]
mov ecx, dword [esp + 0x84]
mov edi, dword [esp + 0x78]
mov esi, ecx
cmp ecx, eax
jbe 0x686d30
call fcn.006441b7
test edi, edi
je 0x686d3a
cmp edi, dword [esp + 0x78]
je 0x686d3f
call fcn.006441b7
mov eax, dword [esp + 0x1c]
mov edx, eax
sub edx, esi
push 0x665e50
sar edx, 2
push edx
push eax
push esi
call fcn.0041abd0
mov edi, dword [esp + 0x94]
add esp, 0x10
xor eax, eax
mov dword [esp + 0x18], eax
jmp 0x686d70
mov ecx, dword [esp + 0x88]
sub ecx, edi
sar ecx, 2
cmp eax, ecx
jne 0x687054
lea edi, [ebp + 0x1c8]
mov ecx, edi
call fcn.00436230
fcomp qword [0x82dc20]
fnstsw ax
test ah, 0x41
jne 0x686f62
mov ecx, edi
call fcn.00436230
fstp dword [esp + 0x1c]
fld dword [esp + 0x1c]
push ecx
lea esi, [esp + 0x5c]
fstp dword [esp]
call fcn.00434940
add esp, 4
mov ecx, ebx
call fcn.00430c20
mov cl, 1
mov eax, ebx
call fcn.00430cc0
mov eax, dword [ebp + 0x688]
cmp eax, 0xffffffff
jne 0x686de0
xor edi, edi
jmp 0x686de9
mov edx, dword [eax*4 + 0x879598]
mov edi, dword [edx]
mov eax, dword [0x88b12c]
fld1
mov esi, dword [eax + 0x9e0]
mov ecx, dword [ebp + 0x6ac]
imul ecx, esi
mov eax, 0x1b4e81b5
imul ecx
sar edx, 7
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov dword [esp + 0x1c], ecx
mov ecx, dword [ebp + 0x6a8]
imul ecx, esi
mov eax, 0x1b4e81b5
imul ecx
sub esp, 0x10
sar edx, 7
mov eax, edx
fst dword [esp + 0xc]
shr eax, 0x1f
fstp dword [esp + 8]
add eax, edx
fild dword [esp + 0x2c]
mov dword [esp + 0x2c], eax
mov eax, ebx
fstp dword [esp + 4]
fild dword [esp + 0x2c]
fstp dword [esp]
call fcn.006f1400
lea esi, [ebp + 0x238]
add esp, 0x10
mov ecx, esi
call fcn.00436230
fcomp qword [0x82dc20]
fnstsw ax
test ah, 0x41
jne 0x686f4f
mov ecx, esi
call fcn.00436230
fstp dword [esp + 0x1c]
fld dword [esp + 0x1c]
push ecx
lea esi, [esp + 0x6c]
fstp dword [esp]
call fcn.00434940
add esp, 4
mov ecx, ebx
call fcn.00430c20
mov cl, 1
mov eax, ebx
call fcn.00430cc0
mov ecx, 1
call fcn.00430ca0
mov eax, dword [ebp + 0x688]
cmp eax, 0xffffffff
jne 0x686ebc
xor edi, edi
jmp 0x686ec5
mov ecx, dword [eax*4 + 0x879598]
mov edi, dword [ecx]
mov edx, dword [0x88b12c]
fld1
mov esi, dword [edx + 0x9e0]
mov ecx, dword [ebp + 0x6ac]
imul ecx, esi
mov eax, 0x1b4e81b5
imul ecx
mov ecx, dword [ebp + 0x6a8]
sar edx, 7
imul ecx, esi
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [esp + 0x1c], eax
mov eax, 0x1b4e81b5
imul ecx
sub esp, 0x10
sar edx, 7
mov ecx, edx
fst dword [esp + 0xc]
shr ecx, 0x1f
fstp dword [esp + 8]
add ecx, edx
fild dword [esp + 0x2c]
mov dword [esp + 0x2c], ecx
mov eax, ebx
fstp dword [esp + 4]
fild dword [esp + 0x2c]
fstp dword [esp]
call fcn.006f1400
add esp, 0x10
xor ecx, ecx
mov eax, ebx
call fcn.00430ca0
or ecx, 0xffffffff
lea eax, [esp + 0x38]
call fcn.00434820
mov ecx, ebx
call fcn.00430c20
or ecx, 0xffffffff
lea eax, [esp + 0x48]
call fcn.00434820
mov ecx, ebx
call fcn.00430c20
lea edi, [ebp + 0xe8]
mov ecx, edi
call fcn.00436230
fcomp qword [0x82dc20]
fnstsw ax
test ah, 0x41
jne 0x68704d
mov ecx, edi
call fcn.00436230
fmul qword [ebp + 0x630]
fld qword [0x7a8008]
fcom st(1)
fnstsw ax
fstp st(1)
test ah, 5
jnp 0x686fad
mov ecx, edi
fstp st(0)
call fcn.00436230
fmul qword [ebp + 0x630]
mov ecx, edi
fstp qword [esp + 0x1c]
call fcn.00436230
fstp qword [esp + 0x24]
lea esi, [ebp + 0x158]
mov ecx, esi
call fcn.00436230
fmul qword [0x82e090]
fld qword [esp + 0x24]
fmul qword [0x82e220]
faddp st(1)
fmul qword [ebp + 0x630]
fld qword [0x7a8008]
fcom st(1)
fnstsw ax
fstp st(1)
test ah, 5
jnp 0x68701e
mov ecx, edi
fstp st(0)
call fcn.00436230
fstp qword [esp + 0x24]
mov ecx, esi
call fcn.00436230
fmul qword [0x82e090]
fld qword [esp + 0x24]
fmul qword [0x82e220]
faddp st(1)
fmul qword [ebp + 0x630]
mov ecx, edi
fstp qword [esp + 0x24]
call fcn.00436230
fmul qword [ebp + 0x630]
sub esp, 0x18
mov ecx, ebp
fstp qword [esp + 0x10]
fld qword [esp + 0x34]
fstp qword [esp + 8]
fld qword [esp + 0x3c]
fstp qword [esp]
push ebx
call fcn.0066f8b0
mov edi, dword [esp + 0x84]
mov edx, dword [esp + 0x88]
sub edx, edi
sar edx, 2
cmp dword [esp + 0x18], edx
jae 0x68710f
mov eax, dword [0x88b12c]
mov esi, dword [eax + 0x9e0]
mov ecx, dword [ebp + 0x6b4]
imul ecx, esi
mov eax, 0x1b4e81b5
imul ecx
sar edx, 7
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
push ecx
mov ecx, dword [ebp + 0x6b0]
imul ecx, esi
mov eax, 0x1b4e81b5
imul ecx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add eax, edx
push eax
mov eax, ebx
call fcn.004329c0
mov ecx, dword [esp + 0x18]
mov edx, dword [edi + ecx*4]
push ebx
push edx
call fcn.00681f50
mov eax, dword [0x88b12c]
mov esi, dword [eax + 0x9e0]
mov ecx, dword [ebp + 0x6b4]
imul ecx, esi
mov eax, 0xe4b17e4b
imul ecx
sar edx, 7
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
push ecx
mov ecx, dword [ebp + 0x6b0]
imul ecx, esi
mov eax, 0xe4b17e4b
imul ecx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add eax, edx
push eax
mov eax, ebx
call fcn.004329c0
mov edi, dword [esp + 0x84]
mov ecx, dword [esp + 0x88]
mov eax, dword [esp + 0x18]
sub ecx, edi
inc eax
sar ecx, 2
mov dword [esp + 0x18], eax
cmp eax, ecx
jbe 0x686d70
mov al, byte [ebp + 0x6c0]
test al, al
jne 0x68714a
cmp byte [ebp + 0x6c1], al
je 0x6873c1
test al, al
je 0x687280
push ebx
call fcn.00430aa0
mov edx, dword [0x88b12c]
mov esi, dword [edx + 0x9e0]
mov ecx, dword [ebp + 0x6bc]
imul ecx, esi
mov eax, 0x1b4e81b5
imul ecx
mov ecx, dword [ebp + 0x6b8]
sar edx, 7
imul ecx, esi
mov eax, edx
shr eax, 0x1f
add eax, edx
push eax
mov eax, 0x1b4e81b5
imul ecx
sar edx, 7
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
push ecx
mov eax, ebx
call fcn.004329c0
mov ecx, 0xff00
lea eax, [esp + 0x48]
call fcn.00434820
mov ecx, ebx
call fcn.00430c20
mov edx, dword [ebp + 0x748]
sub edx, dword [ebp + 0x744]
xor esi, esi
sar edx, 2
test edx, edx
jbe 0x68720b
jmp 0x6871d0
mov eax, dword [ebp + 0x748]
sub eax, dword [ebp + 0x744]
sar eax, 2
cmp esi, eax
jb 0x6871e8
call fcn.006441b7
mov ecx, dword [ebp + 0x744]
mov eax, dword [ecx + esi*4]
push ebx
call fcn.00681c60
mov edx, dword [ebp + 0x748]
sub edx, dword [ebp + 0x744]
inc esi
sar edx, 2
cmp esi, edx
jb 0x6871d0
mov ecx, 0xffff00
lea eax, [esp + 0x48]
call fcn.00434820
mov ecx, ebx
call fcn.00430c20
mov eax, dword [ebp + 0x730]
sub eax, dword [ebp + 0x72c]
xor esi, esi
sar eax, 2
test eax, eax
jbe 0x68727b
jmp 0x687240
mov ecx, dword [ebp + 0x730]
sub ecx, dword [ebp + 0x72c]
sar ecx, 2
cmp esi, ecx
jb 0x687258
call fcn.006441b7
mov edx, dword [ebp + 0x72c]
mov eax, dword [edx + esi*4]
push ebx
call fcn.00681c60
mov eax, dword [ebp + 0x730]
sub eax, dword [ebp + 0x72c]
inc esi
sar eax, 2
cmp esi, eax
jb 0x687240
call fcn.00430bb0
cmp byte [ebp + 0x6c1], 0
je 0x6873c1
push ebx
call fcn.00430aa0
mov ecx, dword [0x88b12c]
mov esi, dword [ecx + 0x9e0]
mov ecx, dword [ebp + 0x6b4]
imul ecx, esi
mov eax, 0x1b4e81b5
imul ecx
mov ecx, dword [ebp + 0x6b0]
sar edx, 7
imul ecx, esi
mov eax, edx
shr eax, 0x1f
add eax, edx
push eax
mov eax, 0x1b4e81b5
imul ecx
sar edx, 7
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
push ecx
mov eax, ebx
call fcn.004329c0
mov ecx, 0xff0000
lea eax, [esp + 0x48]
call fcn.00434820
mov ecx, ebx
call fcn.00430c20
mov edx, dword [ebp + 0x700]
sub edx, dword [ebp + 0x6fc]
xor esi, esi
sar edx, 2
test edx, edx
jbe 0x68734c
jmp 0x687310
mov eax, dword [ebp + 0x700]
sub eax, dword [ebp + 0x6fc]
sar eax, 2
cmp esi, eax
jb 0x687328
call fcn.006441b7
mov ecx, dword [ebp + 0x6fc]
mov edx, dword [ecx + esi*4]
push ebx
push edx
call fcn.006680a0
mov eax, dword [ebp + 0x700]
sub eax, dword [ebp + 0x6fc]
inc esi
sar eax, 2
cmp esi, eax
jb 0x687310
mov ecx, 0xff00ff
lea eax, [esp + 0x48]
call fcn.00434820
mov ecx, ebx
call fcn.00430c20
mov ecx, dword [ebp + 0x718]
sub ecx, dword [ebp + 0x714]
xor esi, esi
sar ecx, 2
test ecx, ecx
jbe 0x6873bc
jmp 0x687380
mov edx, dword [ebp + 0x718]
sub edx, dword [ebp + 0x714]
sar edx, 2
cmp esi, edx
jb 0x687398
call fcn.006441b7
mov eax, dword [ebp + 0x714]
mov ecx, dword [eax + esi*4]
push ebx
push ecx
call fcn.006680a0
mov edx, dword [ebp + 0x718]
sub edx, dword [ebp + 0x714]
inc esi
sar edx, 2
cmp esi, edx
jb 0x687380
call fcn.00430bb0
call fcn.00430bb0
mov eax, dword [esp + 0x84]
xor esi, esi
cmp eax, esi
je 0x6873dc
push eax
call fcn.006441c7
add esp, 4
mov eax, dword [esp + 0x78]
push eax
mov dword [esp + 0x88], esi
mov dword [esp + 0x8c], esi
mov dword [esp + 0x90], esi
call fcn.006441c7
add esp, 4
mov ecx, dword [esp + 0x94]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x8c
ret 0xc