Function at 0x6ab490
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x898]
cmp eax, dword [ecx + 8]
jbe 0x6aeff2
sub esp, 0x918
mov ecx, dword [esp + 0x91c]
mov edx, dword [ecx + 0x30]
mov dword [esp + 0x2bc], edx
mov ebx, dword [ecx + 0x34]
mov dword [esp + 0xb0], ebx
xor eax, eax
xor ebp, ebp
xor esi, esi
lea edi, [esp + 0x2c]
xor eax, eax
mov dword [esp + 0x4c], eax
xor eax, eax
mov dword [esp + 0x50], eax
lea eax, [esp + 0x2c]
mov dword [esp + 0x25c], eax
xor ebp, ebp
mov dword [esp + 0x8c], ebp
xor ebp, ebp
mov dword [esp + 0x90], ebp
lea ebp, [esp + 0x2c]
mov dword [esp + 0x280], ebp
xor eax, eax
xor ebp, ebp
jmp 0x6ab61e
mov ecx, dword [esp + 0xa4]
inc ecx
mov edx, dword [esp + 0xa8]
mov ebp, dword [esp + 0x2b8]
mov esi, dword [esp + 0x50]
mov edx, ebp
mov esi, dword [esp + 0x88]
mov dword [esp + 0xa4], ecx
mov ebp, dword [esp + 0x50]
mov ecx, dword [esp + 0xa8]
mov esi, dword [esp + 0xa4]
cmp esi, ecx
jge 0x6ab5e3
mov edx, dword [edx + esi*4]
mov ecx, dword [esp + 0x4c]
lea esi, [ecx + 1]
cmp esi, ebp
ja 0x6ab594
mov dword [esp + 0x4c], esi
mov dword [esp + 0x50], ebp
mov ebp, dword [0xa976a0]
lea esi, [ebx + ecx*4]
test ebp, ebp
jne 0x6ab581
mov dword [ebx + ecx*4], edx
jmp 0x6ab515
mov ecx, edi
mov edi, esi
mov ebp, eax
mov eax, edx
call fcn.0045c3e0
mov eax, ebp
mov edi, ecx
jmp 0x6ab515
mov dword [esp + 0x260], edx
lea eax, [0x7d3a60]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], esi
call fcn.00443250
mov ebx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ebp, dword [esp + 0x1c]
lea esi, [eax + 1]
mov eax, dword [esp + 0xac]
mov ecx, dword [esp + 0x4c]
mov edx, dword [esp + 0x260]
mov edi, dword [esp + 0x27c]
jmp 0x6ab567
mov ecx, dword [esp + 0x88]
mov edx, dword [esp + 0x84]
mov esi, dword [esp + 0x4c]
inc eax
mov dword [esp + 0x4c], esi
mov dword [esp + 0x50], ebp
mov dword [esp + 0x25c], ebx
mov ebx, dword [esp + 0xb0]
mov ebp, edx
mov esi, ecx
mov ecx, dword [esp + 0x91c]
mov edx, dword [esp + 0x2bc]
mov dword [esp + 0x88], esi
mov dword [esp + 0x84], ebp
mov dword [esp + 0x27c], edi
cmp eax, ebx
jge 0x6ab7f3
mov dword [esp + 0xac], eax
mov ecx, dword [edx + eax*4]
mov dword [esp + 0x288], ecx
mov edx, dword [ecx + 0x34]
test edx, edx
jle 0x6ab71f
lea edx, [ebp + 1]
cmp edx, esi
ja 0x6ab6d1
mov dword [esp + 0x84], edx
mov ebx, dword [0xa976a0]
lea edx, [edi + ebp*4]
test ebx, ebx
jne 0x6ab6be
mov dword [edi + ebp*4], ecx
mov dword [esp + 0x27c], edi
mov dword [esp + 0x88], esi
mov edx, dword [ecx + 0x30]
mov dword [esp + 0x2b8], edx
mov ecx, dword [ecx + 0x34]
mov dword [esp + 0xa8], ecx
mov ebx, dword [esp + 0x25c]
mov ebp, dword [esp + 0x50]
mov dword [esp + 0xbc], eax
xor eax, eax
mov dword [esp + 0xa4], eax
mov eax, dword [esp + 0xbc]
jmp 0x6ab54a
mov ebx, edi
mov edi, edx
mov ebp, eax
mov eax, ecx
call fcn.0045c3e0
mov eax, ebp
mov edi, ebx
jmp 0x6ab675
lea eax, [0x7d3a60]
mov dword [esp], eax
mov dword [esp + 4], edi
mov dword [esp + 8], ebp
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], edx
call fcn.00443250
mov edi, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
lea edx, [eax + 1]
mov eax, dword [esp + 0xac]
mov ecx, dword [esp + 0x288]
mov ebx, dword [esp + 0xb0]
mov ebp, dword [esp + 0x84]
jmp 0x6ab65e
mov edx, dword [esp + 0x8c]
lea ebx, [edx + 1]
mov ebp, dword [esp + 0x90]
cmp ebx, ebp
ja 0x6ab790
mov dword [esp + 0x8c], ebx
mov dword [esp + 0x90], ebp
mov ebx, dword [0xa976a0]
mov ebp, dword [esp + 0x280]
lea esi, [ebp + edx*4]
test ebx, ebx
jne 0x6ab77d
mov dword [ebp + edx*4], ecx
mov ecx, dword [esp + 0x88]
mov edx, dword [esp + 0x84]
mov ebp, dword [esp + 0x50]
mov esi, dword [esp + 0x4c]
mov ebx, dword [esp + 0x25c]
jmp 0x6ab5f5
mov edx, edi
mov edi, esi
mov ebx, eax
mov eax, ecx
call fcn.0045c3e0
mov eax, ebx
mov edi, edx
jmp 0x6ab75b
lea eax, [0x7d3a60]
mov dword [esp], eax
mov ecx, dword [esp + 0x280]
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], ebx
call fcn.00443250
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov ebp, dword [esp + 0x1c]
lea ebx, [ecx + 1]
mov ecx, dword [esp + 0x288]
mov edx, dword [esp + 0x8c]
mov esi, dword [esp + 0x88]
mov edi, dword [esp + 0x27c]
mov dword [esp + 0x280], eax
mov eax, dword [esp + 0xac]
jmp 0x6ab734
mov eax, dword [esp + 0x280]
mov dword [esp], eax
mov eax, dword [esp + 0x8c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x90]
mov dword [esp + 8], eax
call fcn.006afa10
mov eax, dword [esp + 0x10]
mov dword [esp + 0x60], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x26c], ecx
mov edx, dword [esp + 0x27c]
mov dword [esp], edx
mov edx, dword [esp + 0x84]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x88]
mov dword [esp + 8], edx
call fcn.006afa10
mov eax, dword [esp + 0x10]
mov dword [esp + 0x5c], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x268], ecx
mov edx, dword [esp + 0x25c]
mov dword [esp], edx
mov edx, dword [esp + 0x4c]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x50]
mov dword [esp + 8], edx
call fcn.006afa10
mov eax, dword [esp + 0x10]
mov dword [esp + 0x54], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x264], ecx
mov edx, dword [esp + 0x91c]
mov dword [esp], edx
call fcn.006b1810
mov eax, dword [esp + 8]
mov dword [esp + 0x7c], eax
mov ecx, dword [esp + 4]
mov dword [esp + 0x278], ecx
mov edx, dword [esp + 0x91c]
mov ebx, dword [edx + 0x2c]
mov dword [esp + 0x2b4], ebx
lea ebp, [0x7c7340]
mov dword [esp], ebp
lea esi, [esp + 0x2c]
mov dword [esp + 4], esi
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 1
call fcn.00443250
mov edi, dword [esp + 0x14]
mov dword [esp + 0x258], edi
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0xb0], ecx
mov edx, dword [0xa976a0]
test edx, edx
jne 0x6aefa9
lea esi, [0x877d60]
call fcn.0045cb04
mov edx, dword [esp + 0xb0]
lea ebx, [edx + 1]
mov ebp, dword [esp + 0x7c]
test ebp, ebp
jg 0x6aeed8
mov ecx, dword [esp + 0x258]
mov edx, dword [esp + 0x2b4]
test edx, edx
je 0x6aeecf
mov edx, dword [esp + 0x91c]
mov ebp, dword [edx + 0x2c]
jmp 0x6ab963
mov ebp, esi
mov esi, dword [ebp + 0x2c]
test esi, esi
jne 0x6ab961
mov dword [esp + 0x48], eax
mov dword [esp + 0x44], ebx
mov dword [esp + 0x2b0], ecx
mov dword [esp], ebp
call fcn.006b1810
mov eax, dword [esp + 8]
mov ecx, dword [esp + 4]
test eax, eax
jg 0x6aed43
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x44]
mov edx, dword [esp + 0x2b0]
cmp ecx, 1
jg 0x6aed26
xor eax, eax
lea ecx, [esp + 0x2c]
mov dword [esp + 0x270], ecx
mov edx, dword [esp + 0x60]
test edx, edx
jle 0x6aed14
mov ebx, dword [esp + 0x26c]
mov ebp, ebx
xor esi, esi
xor edi, edi
xor ebx, ebx
mov dword [esp + 0x68], ebx
mov ebx, ebp
jmp 0x6ab9f4
add ebx, 0x40
mov esi, eax
mov dword [esp + 0x68], ecx
mov eax, edi
mov ecx, dword [esp + 0x270]
mov edi, ebp
mov ebp, dword [esp + 0x26c]
mov dword [esp + 0xb0], esi
mov dword [esp + 0x64], edi
lea edi, [esp + 0x7d8]
mov esi, ebx
call fcn.0045caf0
lea edi, [esp + 0x598]
lea esi, [esp + 0x7d8]
call fcn.0045caf0
mov ecx, dword [esp + 0x59c]
mov esi, ebp
mov ebp, dword [esp + 0x5a4]
add ebp, ecx
mov edi, eax
mov eax, dword [esp + 0x64]
cmp ebp, eax
jle 0x6aed0d
mov eax, dword [esp + 0x68]
cmp ecx, eax
jle 0x6aed06
mov eax, dword [esp + 0xb0]
inc eax
cmp eax, edx
jl 0x6ab9d9
mov dword [esp + 0xb0], edi
mov eax, dword [esp + 0x5c]
test eax, eax
jle 0x6aecfd
mov ebx, dword [esp + 0x268]
mov dword [esp + 0xb4], eax
xor eax, eax
mov dword [esp + 0xac], eax
mov eax, dword [esp + 0xb4]
jmp 0x6abaa9
add ebx, 0x40
mov esi, dword [esp + 0x26c]
mov edi, dword [esp + 0xb0]
mov dword [esp + 0xac], ebp
mov ebp, edx
mov edx, dword [esp + 0x60]
mov dword [esp + 0x68], ecx
lea edi, [esp + 0x798]
mov esi, ebx
call fcn.0045caf0
lea edi, [esp + 0x558]
lea esi, [esp + 0x798]
call fcn.0045caf0
mov ecx, dword [esp + 0x55c]
mov esi, edx
mov edx, dword [esp + 0x564]
add edx, ecx
cmp edx, ebp
jle 0x6aecf6
mov ebp, dword [esp + 0x68]
cmp ecx, ebp
jle 0x6aecef
mov ebp, dword [esp + 0xac]
inc ebp
cmp ebp, eax
jl 0x6aba8b
mov ebx, dword [esp + 0x54]
test ebx, ebx
jle 0x6aece6
mov ebp, dword [esp + 0x264]
xor edi, edi
jmp 0x6abb26
add ebp, 0x40
mov esi, dword [esp + 0x60]
mov edi, edx
mov edx, eax
mov eax, dword [esp + 0x5c]
mov dword [esp + 0xac], edi
mov dword [esp + 0x68], ecx
lea edi, [esp + 0x758]
mov esi, ebp
call fcn.0045caf0
lea edi, [esp + 0x5d8]
lea esi, [esp + 0x758]
call fcn.0045caf0
mov ecx, dword [esp + 0x5dc]
mov esi, eax
mov eax, dword [esp + 0x5e4]
add eax, ecx
cmp eax, edx
jle 0x6aecdf
mov edx, dword [esp + 0x68]
cmp ecx, edx
jle 0x6aecd8
mov edx, dword [esp + 0xac]
inc edx
cmp edx, ebx
jl 0x6abb17
mov edx, dword [esp + 0xb0]
test edx, edx
jle 0x6aecd1
mov ebx, dword [esp + 0x270]
mov ebp, ebx
xor edi, edi
jmp 0x6abbb2
add ebx, 0x38
mov esi, dword [esp + 0x5c]
mov edi, eax
mov eax, ebp
mov ebp, dword [esp + 0x270]
mov dword [esp + 0xac], edi
mov dword [esp + 0x68], ecx
lea edi, [esp + 0x4e0]
mov esi, ebx
call fcn.0045cb04
lea edi, [esp + 0x438]
lea esi, [esp + 0x4e0]
call fcn.0045cb04
mov ecx, dword [esp + 0x43c]
mov esi, ebp
mov ebp, dword [esp + 0x444]
add ebp, ecx
add ebp, dword [esp + 0x44c]
add ebp, dword [esp + 0x454]
add ebp, dword [esp + 0x460]
cmp ebp, eax
jle 0x6aecca
mov eax, dword [esp + 0x68]
cmp ecx, eax
jle 0x6aecc3
mov eax, dword [esp + 0xac]
inc eax
cmp eax, edx
jl 0x6abba0
mov dword [esp + 0x64], ebp
mov dword [esp + 0x68], ecx
mov dword [esp + 0x398], 0
mov dword [esp + 0x39c], 0
mov dword [esp + 0x3a0], 0
mov dword [esp + 0x3a4], 0
mov eax, dword [esp + 0x91c]
mov edx, dword [eax]
mov ebx, dword [eax + 4]
mov dword [esp], edx
mov dword [esp + 4], ebx
call fcn.00408d50
mov eax, dword [esp + 8]
lea ecx, [0x78aa20]
mov dword [esp + 0x398], ecx
mov dword [esp + 0x39c], eax
mov eax, dword [0xa770bc]
mov edx, dword [0xa770b8]
test eax, eax
jbe 0x6aefd8
mov eax, dword [edx]
mov ecx, dword [edx + 4]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00408d50
mov eax, dword [esp + 8]
lea ecx, [0x78aa20]
mov dword [esp + 0x3a0], ecx
mov dword [esp + 0x3a4], eax
lea eax, [0x7f2400]
mov dword [esp], eax
mov dword [esp + 4], 0x18
lea eax, [esp + 0x398]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004ce120
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x91c]
mov ebx, dword [edx + 0x2c]
jmp 0x6abd62
mov dword [esp + 0x28c], ebx
mov edx, dword [ebx]
mov ebp, dword [ebx + 4]
mov dword [esp], 0
lea esi, str.________._012456:_____BCFLMNOPSUZ___n_r_t
mov dword [esp + 4], esi
mov dword [esp + 8], 1
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ebp
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], ecx
call fcn.00446670
mov ecx, dword [esp + 0x20]
mov eax, dword [esp + 0x1c]
mov edx, dword [esp + 0x28c]
mov ebx, dword [edx + 0x2c]
mov edx, dword [esp + 0x91c]
test ebx, ebx
jne 0x6abd0f
mov dword [esp + 0x40], ecx
mov dword [esp + 0x254], eax
nop
mov eax, dword [0xa7fb28]
lea ecx, [0x871980]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call fcn.004ce330
mov dword [esp + 0x390], 0
mov dword [esp + 0x394], 0
mov eax, dword [esp + 0x91c]
mov ecx, dword [eax + 8]
mov edx, dword [eax + 0xc]
mov dword [esp], ecx
mov dword [esp + 4], edx
call fcn.00408d50
mov eax, dword [esp + 8]
lea ecx, [0x78aa20]
mov dword [esp + 0x390], ecx
mov dword [esp + 0x394], eax
lea eax, [0x7e2d4d]
mov dword [esp], eax
mov dword [esp + 4], 3
lea edx, [esp + 0x390]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004ce120
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00408d50
mov eax, dword [esp + 8]
mov dword [esp + 0x388], 0
mov dword [esp + 0x38c], 0
lea ecx, [0x78aa20]
mov dword [esp + 0x388], ecx
mov dword [esp + 0x38c], eax
mov eax, dword [0xa7fb28]
lea edx, [0x871980]
mov dword [esp], edx
mov dword [esp + 4], eax
lea eax, [esp + 0x388]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004ce330
lea eax, [0x7e30bc]
mov dword [esp], eax
mov dword [esp + 4], 3
mov dword [esp + 8], 0xa
call fcn.004e2310
mov eax, dword [esp + 0xc]
mov dword [esp + 0x2ac], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0xac], ecx
lea edx, [0x7e30bc]
mov dword [esp], edx
mov dword [esp + 4], 3
mov ebx, dword [esp + 0x64]
lea ebp, [ebx + 0x13]
mov dword [esp + 0xa8], ebp
mov dword [esp + 8], ebp
call fcn.004e2310
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp], 0
mov edx, dword [esp + 0x2ac]
mov dword [esp + 4], edx
mov edx, dword [esp + 0xac]
mov dword [esp + 8], edx
lea edx, [0x7e30c2]
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], ecx
call fcn.00446670
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00408d50
mov eax, dword [esp + 8]
mov dword [esp + 0x380], 0
mov dword [esp + 0x384], 0
lea ecx, [0x78aa20]
mov dword [esp + 0x380], ecx
mov dword [esp + 0x384], eax
mov eax, dword [0xa7fb28]
lea edx, [0x871980]
mov dword [esp], edx
mov dword [esp + 4], eax
lea eax, [esp + 0x380]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004ce330
mov eax, dword [esp + 0x254]
mov dword [esp], eax
mov eax, dword [esp + 0x40]
mov dword [esp + 4], eax
call fcn.004e31b0
mov eax, dword [esp + 8]
mov dword [esp + 0x2ac], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0xac], ecx
mov dword [esp + 0x398], 0
mov dword [esp + 0x39c], 0
mov dword [esp + 0x3a0], 0
mov dword [esp + 0x3a4], 0
lea edx, [0x7e30bf]
mov dword [esp], edx
mov dword [esp + 4], 3
call fcn.00408d50
mov eax, dword [esp + 8]
lea ecx, [0x78aa20]
mov dword [esp + 0x398], ecx
mov dword [esp + 0x39c], eax
mov eax, dword [esp + 0x2ac]
mov dword [esp], eax
mov eax, dword [esp + 0xac]
mov dword [esp + 4], eax
call fcn.00408d50
mov eax, dword [esp + 8]
lea ecx, [0x78aa20]
mov dword [esp + 0x3a0], ecx
mov dword [esp + 0x3a4], eax
lea eax, [0x7eb672]
mov dword [esp], eax
mov dword [esp + 4], 0xf
lea eax, [esp + 0x398]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004ce120
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00408d50
mov eax, dword [esp + 8]
mov dword [esp + 0x378], 0
mov dword [esp + 0x37c], 0
lea ecx, [0x78aa20]
mov dword [esp + 0x378], ecx
mov dword [esp + 0x37c], eax
mov eax, dword [0xa7fb28]
lea edx, [0x871980]
mov dword [esp], edx
mov dword [esp + 4], eax
lea eax, [esp + 0x378]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004ce330
lea eax, [0x7e30bc]
mov dword [esp], eax
mov dword [esp + 4], 3
mov dword [esp + 8], 0xa
call fcn.004e2310
mov eax, dword [esp + 0xc]
mov dword [esp + 0x2ac], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0xac], ecx
lea edx, [0x7e30bc]
mov dword [esp], edx
mov dword [esp + 4], 3
mov edx, dword [esp + 0xa8]
mov dword [esp + 8], edx
call fcn.004e2310
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp], 0
mov edx, dword [esp + 0x2ac]
mov dword [esp + 4], edx
mov edx, dword [esp + 0xac]
mov dword [esp + 8], edx
lea edx, [0x7e30c8]
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], ecx
call fcn.00446670
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00408d50
mov eax, dword [esp + 8]
mov dword [esp + 0x370], 0
mov dword [esp + 0x374], 0
lea ecx, [0x78aa20]
mov dword [esp + 0x370], ecx
mov dword [esp + 0x374], eax
mov eax, dword [0xa7fb28]
lea edx, [0x871980]
mov dword [esp], edx
mov dword [esp + 4], eax
lea eax, [esp + 0x370]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004ce330
mov eax, dword [esp + 0x91c]
cmp dword [eax + 0x34], 1
jg 0x6adb4e
mov ecx, dword [esp + 0xb0]
test ecx, ecx
jle 0x6adb45
cmp dword [eax + 0x34], 1
jg 0x6ada32
lea eax, [esp + 0x164]
mov dword [esp], eax
lea eax, [0x7e8106]
mov dword [esp + 4], eax
mov dword [esp + 8], 0xa
lea eax, [0x7e30bf]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 3
call fcn.00446610
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call fcn.004ce120
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00408d50
mov eax, dword [esp + 8]
mov dword [esp + 0x310], 0
mov dword [esp + 0x314], 0
lea ecx, [0x78aa20]
mov dword [esp + 0x310], ecx
mov dword [esp + 0x314], eax
mov eax, dword [0xa7fb28]
lea edx, [0x871980]
mov dword [esp], edx
mov dword [esp + 4], eax
lea eax, [esp + 0x310]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004ce1d0
mov eax, dword [esp + 0x64]
lea ecx, [eax + 0x1c]
mov dword [esp + 0x80], ecx
mov edx, dword [esp + 0xb0]
mov ebx, dword [esp + 0x270]
xor ebp, ebp
xor esi, esi
jmp 0x6ac33d
add ebx, 0x38
mov esi, ecx
mov ecx, dword [esp + 0x80]
mov dword [esp + 0x2a8], ebx
mov dword [esp + 0x70], ebp
xchg esi, eax
mov byte [esp + 0x2d], al
xchg esi, eax
lea edi, [esp + 0x4a8]
mov esi, ebx
call fcn.0045cb04
lea edi, [esp + 0x470]
lea esi, [esp + 0x4a8]
call fcn.0045cb04
mov ecx, dword [esp + 0x49c]
cmp dword [esp + 0x4a0], 4
jne 0x6ac947
cmp dword [ecx], 0x65757274
jne 0x6ac947
movzx ecx, byte [esp + 0x2d]
inc ebp
cmp edx, ebp
jg 0x6ac331
mov ecx, dword [esp + 0x91c]
mov edx, dword [ecx + 0x14]
test edx, edx
jle 0x6ac802
lea eax, [0x7e30b9]
mov dword [esp], eax
mov dword [esp + 4], 3
mov dword [esp + 8], 0xa
call fcn.004e2310
mov eax, dword [esp + 0xc]
mov dword [esp + 0x2ac], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0xb0], ecx
lea edx, [0x7e30b9]
mov dword [esp], edx
mov dword [esp + 4], 3
mov edx, dword [esp + 0x64]
lea ebx, [edx + 0x11]
mov dword [esp + 8], ebx
call fcn.004e2310
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp], 0
mov edx, dword [esp + 0x2ac]
mov dword [esp + 4], edx
mov edx, dword [esp + 0xb0]
mov dword [esp + 8], edx
lea edx, [0x7e30c5]
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], ecx
call fcn.00446670
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00408d50
mov eax, dword [esp + 8]
mov dword [esp + 0x2e0], 0
mov dword [esp + 0x2e4], 0
lea ecx, [0x78aa20]
mov dword [esp + 0x2e0], ecx
mov dword [esp + 0x2e4], eax
mov eax, dword [0xa7fb28]
lea edx, [0x871980]
mov dword [esp], edx
mov dword [esp + 4], eax
lea eax, [esp + 0x2e0]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004ce330
lea eax, [esp + 0xc4]
mov dword [esp], eax
lea eax, [0x7e811a]
mov dword [esp + 4], eax
mov dword [esp + 8], 0xa
lea eax, [0x7e30bf]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 3
call fcn.00446610
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call fcn.004ce120
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00408d50
mov eax, dword [esp + 8]
mov dword [esp + 0x2d8], 0
mov dword [esp + 0x2dc], 0
lea ecx, [0x78aa20]
mov dword [esp + 0x2d8], ecx
mov dword [esp + 0x2dc], eax
mov eax, dword [0xa7fb28]
lea edx, [0x871980]
mov dword [esp], edx
mov dword [esp + 4], eax
lea eax, [esp + 0x2d8]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004ce1d0
mov eax, dword [esp + 0x91c]
mov ecx, dword [eax + 0x10]
mov dword [esp + 0x2a4], ecx
mov eax, dword [eax + 0x14]
mov dword [esp + 0xb0], eax
xor edx, edx
jmp 0x6ac5c2
mov ebx, dword [esp + 0x74]
lea edx, [ebx + 1]
mov eax, dword [esp + 0xb0]
mov ecx, dword [esp + 0x2a4]
cmp eax, edx
jle 0x6ac802
mov dword [esp + 0x74], edx
lea ebx, [ecx + edx*8]
mov ebp, dword [ebx]
mov ebx, dword [ebx + 4]
test edx, edx
jne 0x6ac6c3
mov dword [esp + 0x390], 0
mov dword [esp + 0x394], 0
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.00408d50
mov eax, dword [esp + 8]
lea ecx, [0x78aa20]
mov dword [esp + 0x390], ecx
mov dword [esp + 0x394], eax
lea eax, [0x7e2d4d]
mov dword [esp], eax
mov dword [esp + 4], 3
lea edx, [esp + 0x390]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004ce120
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00408d50
mov eax, dword [esp + 8]
mov dword [esp + 0x2d0], 0
mov dword [esp + 0x2d4], 0
lea ecx, [0x78aa20]
mov dword [esp + 0x2d0], ecx
mov dword [esp + 0x2d4], eax
mov eax, dword [0xa7fb28]
lea edx, [0x871980]
mov dword [esp], edx
mov dword [esp + 4], eax
lea eax, [esp + 0x2d0]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004ce330
jmp 0x6ac5ad
mov dword [esp + 0x78], ebx
mov dword [esp + 0x274], ebp
mov dword [esp + 0x398], 0
mov dword [esp + 0x39c], 0
mov dword [esp + 0x3a0], 0
mov dword [esp + 0x3a4], 0
lea eax, [0x7e30bf]
mov dword [esp], eax
mov dword [esp + 4], 3
call fcn.00408d50
mov eax, dword [esp + 8]
lea ecx, [0x78aa20]
mov dword [esp + 0x398], ecx
mov dword [esp + 0x39c], eax
mov eax, dword [esp + 0x274]
mov dword [esp], eax
mov eax, dword [esp + 0x78]
mov dword [esp + 4], eax
call fcn.00408d50
mov eax, dword [esp + 8]
lea ecx, [0x78aa20]
mov dword [esp + 0x3a0], ecx
mov dword [esp + 0x3a4], eax
lea eax, [0x7eb663]
mov dword [esp], eax
mov dword [esp + 4], 0xf
lea edx, [esp + 0x398]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004ce120
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00408d50
mov eax, dword [esp + 8]
mov dword [esp + 0x2c8], 0
mov dword [esp + 0x2cc], 0
lea ecx, [0x78aa20]
mov dword [esp + 0x2c8], ecx
mov dword [esp + 0x2cc], eax
mov eax, dword [0xa7fb28]
lea edx, [0x871980]
mov dword [esp], edx
mov dword [esp + 4], eax
lea eax, [esp + 0x2c8]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004ce330
jmp 0x6ac5ad
lea eax, str.________._012456:_____BCFLMNOPSUZ___n_r_t
mov dword [esp], eax
mov dword [esp + 4], 1
mov dword [esp + 8], 0xa
call fcn.004e2310
mov eax, dword [esp + 0xc]
mov dword [esp + 0x2ac], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0xb0], ecx
lea edx, str.________._012456:_____BCFLMNOPSUZ___n_r_t
mov dword [esp], edx
mov dword [esp + 4], 1
mov edx, dword [esp + 0x64]
add edx, 0x11
mov dword [esp + 8], edx
call fcn.004e2310
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp], 0
mov edx, dword [esp + 0x2ac]
mov dword [esp + 4], edx
mov edx, dword [esp + 0xb0]
mov dword [esp + 8], edx
lea edx, [0x7e30bf]
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], ecx
call fcn.00446670
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00408d50
mov eax, dword [esp + 8]
mov dword [esp + 0x2c0], 0
mov dword [esp + 0x2c4], 0
lea ecx, [0x78aa20]
mov dword [esp + 0x2c0], ecx
mov dword [esp + 0x2c4], eax
mov eax, dword [0xa7fb28]
lea ecx, [0x871980]
mov dword [esp], ecx
mov dword [esp + 4], eax
lea eax, [esp + 0x2c0]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004ce330
mov eax, dword [0xa7fb28]
lea ecx, [0x871980]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call fcn.004ce330
add esp, 0x918
ret
mov eax, dword [esp + 0x68]
neg eax
mov dword [esp], eax
sar eax, 0x1f
mov dword [esp + 4], eax
mov dword [esp + 8], 0xa
call fcn.0046ec80
mov eax, dword [esp + 0xc]
mov dword [esp + 0x248], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x34], ecx
mov dword [esp + 0x390], 0
mov dword [esp + 0x394], 0
mov edx, dword [esp + 0x470]
mov ebx, dword [esp + 0x474]
mov dword [esp], edx
mov dword [esp + 4], ebx
call fcn.00408d50
mov eax, dword [esp + 8]
lea ecx, [0x78aa20]
mov dword [esp + 0x390], ecx
mov dword [esp + 0x394], eax
lea eax, [esp + 0x144]
mov dword [esp], eax
lea eax, [0x7e2b88]
mov dword [esp + 4], eax
mov dword [esp + 8], 1
mov edx, dword [esp + 0x248]
mov dword [esp + 0xc], edx
mov edx, dword [esp + 0x34]
mov dword [esp + 0x10], edx
lea edx, [0x7e2bb8]
mov dword [esp + 0x14], edx
mov dword [esp + 0x18], 1
call fcn.00446670
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
mov dword [esp], eax
mov dword [esp + 4], ecx
lea eax, [esp + 0x390]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004ce120
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x470], eax
mov dword [esp + 0x474], ecx
mov dword [esp], 0
lea eax, str.________._012456:_____BCFLMNOPSUZ___n_r_t
mov dword [esp + 4], eax
mov dword [esp + 8], 1
mov ecx, dword [esp + 0x470]
mov edx, dword [esp + 0x474]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], edx
call fcn.00446610
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x470], ecx
mov dword [esp + 0x474], eax
mov ecx, dword [esp + 0x47c]
add eax, ecx
add eax, dword [esp + 0x484]
add eax, dword [esp + 0x48c]
add eax, 0x17
mov dword [esp + 0x6c], eax
mov ecx, dword [esp + 0x70]
test ecx, ecx
jne 0x6ad06c
lea edi, [esp + 0x818]
xor eax, eax
call fcn.0045c66e
lea ecx, [0x7e30d2]
mov dword [esp + 0x818], ecx
mov dword [esp + 0x81c], 4
lea edx, [0x7e30bf]
mov dword [esp + 0x820], edx
mov dword [esp + 0x824], 3
mov dword [esp + 0x828], ecx
mov dword [esp + 0x82c], 4
mov dword [esp + 0x830], edx
mov dword [esp + 0x834], 3
mov dword [esp + 0x838], ecx
mov dword [esp + 0x83c], 4
mov dword [esp + 0x840], edx
mov dword [esp + 0x844], 3
mov dword [esp + 0x848], ecx
mov dword [esp + 0x84c], 4
mov dword [esp + 0x850], edx
mov dword [esp + 0x854], 3
lea ebx, [0x7e2d4d]
mov dword [esp + 0x858], ebx
mov dword [esp + 0x85c], 3
lea edi, [esp + 0x3e0]
call fcn.0045c676
mov ecx, dword [esp + 0x470]
mov ebp, dword [esp + 0x474]
mov dword [esp], ecx
mov dword [esp + 4], ebp
call fcn.00408d50
mov ecx, dword [esp + 8]
lea edx, [0x78aa20]
mov dword [esp + 0x3e0], edx
mov dword [esp + 0x3e4], ecx
mov ecx, dword [esp + 0x478]
mov ebx, dword [esp + 0x47c]
mov dword [esp], ecx
mov dword [esp + 4], ebx
call fcn.00408d50
mov ecx, dword [esp + 8]
lea edx, [0x78aa20]
mov dword [esp + 0x3e8], edx
mov dword [esp + 0x3ec], ecx
mov ecx, dword [esp + 0x480]
mov ebx, dword [esp + 0x484]
mov dword [esp], ecx
mov dword [esp + 4], ebx
call fcn.00408d50
mov ecx, dword [esp + 8]
lea edx, [0x78aa20]
mov dword [esp + 0x3f0], edx
mov dword [esp + 0x3f4], ecx
mov ecx, dword [esp + 0x488]
mov ebx, dword [esp + 0x48c]
mov dword [esp], ecx
mov dword [esp + 4], ebx
call fcn.00408d50
mov ecx, dword [esp + 8]
lea edx, [0x78aa20]
mov dword [esp + 0x3f8], edx
mov dword [esp + 0x3fc], ecx
mov ecx, dword [esp + 0x494]
mov ebx, dword [esp + 0x498]
mov dword [esp], ecx
mov dword [esp + 4], ebx
call fcn.00408d50
mov ecx, dword [esp + 8]
lea edx, [0x78aa20]
mov dword [esp + 0x400], edx
mov dword [esp + 0x404], ecx
lea ecx, [esp + 0x124]
mov dword [esp], ecx
lea ecx, [esp + 0x818]
mov dword [esp + 4], ecx
mov dword [esp + 8], 9
mov dword [esp + 0xc], 9
call fcn.004463e0
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov dword [esp], ecx
mov dword [esp + 4], edx
lea ecx, [esp + 0x3e0]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 5
mov dword [esp + 0x10], 5
call fcn.004ce120
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov dword [esp], ecx
mov dword [esp + 4], edx
call fcn.00408d50
mov ecx, dword [esp + 8]
mov dword [esp + 0x308], 0
mov dword [esp + 0x30c], 0
lea edx, [0x78aa20]
mov dword [esp + 0x308], edx
mov dword [esp + 0x30c], ecx
mov ecx, dword [0xa7fb28]
lea ebx, [0x871980]
mov dword [esp], ebx
mov dword [esp + 4], ecx
lea ecx, [esp + 0x308]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004ce330
mov ecx, dword [esp + 0x474]
lea edx, [0x7e30b9]
mov dword [esp], edx
mov dword [esp + 4], 3
mov dword [esp + 8], ecx
call fcn.004e2310
mov ecx, dword [esp + 0x10]
mov dword [esp + 0xac], ecx
mov edx, dword [esp + 0xc]
mov dword [esp + 0x2ac], edx
mov ebx, dword [esp + 0x47c]
lea ebp, [0x7e30b9]
mov dword [esp], ebp
mov dword [esp + 4], 3
add ebx, 2
mov dword [esp + 8], ebx
call fcn.004e2310
mov ecx, dword [esp + 0x10]
mov dword [esp + 0xa8], ecx
mov edx, dword [esp + 0xc]
mov dword [esp + 0x2a0], edx
mov ebx, dword [esp + 0x484]
lea ebp, [0x7e30b9]
mov dword [esp], ebp
mov dword [esp + 4], 3
add ebx, 2
mov dword [esp + 8], ebx
call fcn.004e2310
mov ecx, dword [esp + 0x10]
mov dword [esp + 0xa4], ecx
mov edx, dword [esp + 0xc]
mov dword [esp + 0x29c], edx
mov ebx, dword [esp + 0x48c]
lea ebp, [0x7e30b9]
mov dword [esp], ebp
mov dword [esp + 4], 3
add ebx, 2
mov dword [esp + 8], ebx
call fcn.004e2310
mov ecx, dword [esp + 0x10]
mov dword [esp + 0xa0], ecx
mov edx, dword [esp + 0xc]
mov dword [esp + 0x298], edx
lea ebx, [0x7e30b9]
mov dword [esp], ebx
mov dword [esp + 4], 3
mov ebp, dword [esp + 0x80]
mov esi, dword [esp + 0x6c]
sub ebp, esi
mov dword [esp + 8], ebp
call fcn.004e2310
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x294], ecx
mov edx, dword [esp + 0x10]
lea edi, [esp + 0x8b0]
xor eax, eax
call fcn.0045c666
lea ecx, [0x7e80fc]
mov dword [esp + 0x8b0], ecx
mov dword [esp + 0x8b4], 0xa
lea ebx, [0x7e30bf]
mov dword [esp + 0x8b8], ebx
mov dword [esp + 0x8bc], 3
lea ebp, [0x7e2bbb]
mov dword [esp + 0x8c0], ebp
mov dword [esp + 0x8c4], 2
mov esi, dword [esp + 0x2ac]
mov dword [esp + 0x8c8], esi
mov esi, dword [esp + 0xac]
mov dword [esp + 0x8cc], esi
lea esi, [0x7e30c5]
mov dword [esp + 0x8d0], esi
mov dword [esp + 0x8d4], 3
mov ebp, dword [esp + 0x2a0]
mov dword [esp + 0x8d8], ebp
mov ebp, dword [esp + 0xa8]
mov dword [esp + 0x8dc], ebp
mov dword [esp + 0x8e0], esi
mov dword [esp + 0x8e4], 3
mov ebp, dword [esp + 0x29c]
mov dword [esp + 0x8e8], ebp
mov ebp, dword [esp + 0xa4]
mov dword [esp + 0x8ec], ebp
mov dword [esp + 0x8f0], esi
mov dword [esp + 0x8f4], 3
mov ebp, dword [esp + 0x298]
mov dword [esp + 0x8f8], ebp
mov ebp, dword [esp + 0xa0]
mov dword [esp + 0x8fc], ebp
mov dword [esp + 0x900], esi
mov dword [esp + 0x904], 3
mov ebp, dword [esp + 0x294]
mov dword [esp + 0x908], ebp
mov dword [esp + 0x90c], edx
mov dword [esp + 0x910], 0
mov dword [esp + 0x914], 0
mov dword [esp], 0
lea edx, [esp + 0x8b0]
mov dword [esp + 4], edx
mov dword [esp + 8], 0xd
mov dword [esp + 0xc], 0xd
call fcn.004463e0
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov dword [esp], ecx
mov dword [esp + 4], edx
call fcn.00408d50
mov ecx, dword [esp + 8]
mov dword [esp + 0x300], 0
mov dword [esp + 0x304], 0
lea edx, [0x78aa20]
mov dword [esp + 0x300], edx
mov dword [esp + 0x304], ecx
mov ecx, dword [0xa7fb28]
lea ebx, [0x871980]
mov dword [esp], ebx
mov dword [esp + 4], ecx
lea ecx, [esp + 0x300]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004ce330
movzx eax, byte [esp + 0x2d]
mov edx, dword [esp + 0xb0]
mov ebx, dword [esp + 0x2a8]
mov ebp, dword [esp + 0x70]
mov ecx, eax
mov eax, dword [esp + 0x64]
jmp 0x6ac395
mov eax, dword [esp + 0x494]
mov ecx, dword [esp + 0x498]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.004e31b0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
cmp eax, 0xa
je 0x6ad63d
movzx ecx, byte [esp + 0x2d]
test cl, cl
je 0x6ad36f
lea edi, [esp + 0x818]
xor eax, eax
call fcn.0045c66e
lea ecx, [0x7ec258]
mov dword [esp + 0x818], ecx
mov dword [esp + 0x81c], 0x10
lea edx, [0x7e30bf]
mov dword [esp + 0x820], edx
mov dword [esp + 0x824], 3
lea ebx, [0x7e30d2]
mov dword [esp + 0x828], ebx
mov dword [esp + 0x82c], 4
mov dword [esp + 0x830], edx
mov dword [esp + 0x834], 3
mov dword [esp + 0x838], ebx
mov dword [esp + 0x83c], 4
mov dword [esp + 0x840], edx
mov dword [esp + 0x844], 3
mov dword [esp + 0x848], ebx
mov dword [esp + 0x84c], 4
mov dword [esp + 0x850], edx
mov dword [esp + 0x854], 3
lea ebp, [0x7e2d4d]
mov dword [esp + 0x858], ebp
mov dword [esp + 0x85c], 3
lea edi, [esp + 0x408]
call fcn.0045c674
mov dword [esp], edx
mov dword [esp + 4], 3
call fcn.00408d50
mov ecx, dword [esp + 8]
lea edx, [0x78aa20]
mov dword [esp + 0x408], edx
mov dword [esp + 0x40c], ecx
mov ecx, dword [esp + 0x470]
mov ebx, dword [esp + 0x474]
mov dword [esp], ecx
mov dword [esp + 4], ebx
call fcn.00408d50
mov ecx, dword [esp + 8]
lea edx, [0x78aa20]
mov dword [esp + 0x410], edx
mov dword [esp + 0x414], ecx
mov ecx, dword [esp + 0x478]
mov ebx, dword [esp + 0x47c]
mov dword [esp], ecx
mov dword [esp + 4], ebx
call fcn.00408d50
mov ecx, dword [esp + 8]
lea edx, [0x78aa20]
mov dword [esp + 0x418], edx
mov dword [esp + 0x41c], ecx
mov ecx, dword [esp + 0x480]
mov ebx, dword [esp + 0x484]
mov dword [esp], ecx
mov dword [esp + 4], ebx
call fcn.00408d50
mov ecx, dword [esp + 8]
lea edx, [0x78aa20]
mov dword [esp + 0x420], edx
mov dword [esp + 0x424], ecx
mov ecx, dword [esp + 0x488]
mov ebx, dword [esp + 0x48c]
mov dword [esp], ecx
mov dword [esp + 4], ebx
call fcn.00408d50
mov ecx, dword [esp + 8]
lea edx, [0x78aa20]
mov dword [esp + 0x428], edx
mov dword [esp + 0x42c], ecx
mov ecx, dword [esp + 0x494]
mov ebx, dword [esp + 0x498]
mov dword [esp], ecx
mov dword [esp + 4], ebx
call fcn.00408d50
mov ecx, dword [esp + 8]
lea edx, [0x78aa20]
mov dword [esp + 0x430], edx
mov dword [esp + 0x434], ecx
lea ecx, [esp + 0x104]
mov dword [esp], ecx
lea ecx, [esp + 0x818]
mov dword [esp + 4], ecx
mov dword [esp + 8], 9
mov dword [esp + 0xc], 9
call fcn.004463e0
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov dword [esp], ecx
mov dword [esp + 4], edx
lea ecx, [esp + 0x408]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 6
mov dword [esp + 0x10], 6
call fcn.004ce120
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov dword [esp], ecx
mov dword [esp + 4], edx
call fcn.00408d50
mov ecx, dword [esp + 8]
mov dword [esp + 0x2f0], 0
mov dword [esp + 0x2f4], 0
lea edx, [0x78aa20]
mov dword [esp + 0x2f0], edx
mov dword [esp + 0x2f4], ecx
mov ecx, dword [0xa7fb28]
lea ebx, [0x871980]
mov dword [esp], ebx
mov dword [esp + 4], ecx
lea ecx, [esp + 0x2f0]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004ce330
xor eax, eax
jmp 0x6ad04f
lea edi, [esp + 0x818]
xor eax, eax
call fcn.0045c66e
lea ecx, [0x7ec248]
mov dword [esp + 0x818], ecx
mov dword [esp + 0x81c], 0x10
lea edx, [0x7e30bf]
mov dword [esp + 0x820], edx
mov dword [esp + 0x824], 3
lea ebx, [0x7e30d2]
mov dword [esp + 0x828], ebx
mov dword [esp + 0x82c], 4
mov dword [esp + 0x830], edx
mov dword [esp + 0x834], 3
mov dword [esp + 0x838], ebx
mov dword [esp + 0x83c], 4
mov dword [esp + 0x840], edx
mov dword [esp + 0x844], 3
mov dword [esp + 0x848], ebx
mov dword [esp + 0x84c], 4
mov dword [esp + 0x850], edx
mov dword [esp + 0x854], 3
lea ebp, [0x7e2d4d]
mov dword [esp + 0x858], ebp
mov dword [esp + 0x85c], 3
lea edi, [esp + 0x408]
call fcn.0045c674
mov dword [esp], edx
mov dword [esp + 4], 3
call fcn.00408d50
mov ecx, dword [esp + 8]
lea edx, [0x78aa20]
mov dword [esp + 0x408], edx
mov dword [esp + 0x40c], ecx
mov ecx, dword [esp + 0x470]
mov ebx, dword [esp + 0x474]
mov dword [esp], ecx
mov dword [esp + 4], ebx
call fcn.00408d50
mov ecx, dword [esp + 8]
lea edx, [0x78aa20]
mov dword [esp + 0x410], edx
mov dword [esp + 0x414], ecx
mov ecx, dword [esp + 0x478]
mov ebx, dword [esp + 0x47c]
mov dword [esp], ecx
mov dword [esp + 4], ebx
call fcn.00408d50
mov ecx, dword [esp + 8]
lea edx, [0x78aa20]
mov dword [esp + 0x418], edx
mov dword [esp + 0x41c], ecx
mov ecx, dword [esp + 0x480]
mov ebx, dword [esp + 0x484]
mov dword [esp], ecx
mov dword [esp + 4], ebx
call fcn.00408d50
mov ecx, dword [esp + 8]
lea edx, [0x78aa20]
mov dword [esp + 0x420], edx
mov dword [esp + 0x424], ecx
mov ecx, dword [esp + 0x488]
mov ebx, dword [esp + 0x48c]
mov dword [esp], ecx
mov dword [esp + 4], ebx
call fcn.00408d50
mov ecx, dword [esp + 8]
lea edx, [0x78aa20]
mov dword [esp + 0x428], edx
mov dword [esp + 0x42c], ecx
mov ecx, dword [esp + 0x494]
mov ebx, dword [esp + 0x498]
mov dword [esp], ecx
mov dword [esp + 4], ebx
call fcn.00408d50
mov ecx, dword [esp + 8]
lea edx, [0x78aa20]
mov dword [esp + 0x430], edx
mov dword [esp + 0x434], ecx
lea ecx, [esp + 0xe4]
mov dword [esp], ecx
lea ecx, [esp + 0x818]
mov dword [esp + 4], ecx
mov dword [esp + 8], 9
mov dword [esp + 0xc], 9
call fcn.004463e0
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov dword [esp], ecx
mov dword [esp + 4], edx
lea ecx, [esp + 0x408]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 6
mov dword [esp + 0x10], 6
call fcn.004ce120
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov dword [esp], ecx
mov dword [esp + 4], edx
call fcn.00408d50
mov ecx, dword [esp + 8]
mov dword [esp + 0x2e8], 0
mov dword [esp + 0x2ec], 0
lea edx, [0x78aa20]
mov dword [esp + 0x2e8], edx
mov dword [esp + 0x2ec], ecx
mov ecx, dword [0xa7fb28]
lea ebx, [0x871980]
mov dword [esp], ebx
mov dword [esp + 4], ecx
lea ecx, [esp + 0x2e8]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004ce330
movzx eax, byte [esp + 0x2d]
jmp 0x6ad04f
mov dword [esp], ecx
lea ecx, [0x7e8228]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.00402950
movzx eax, byte [esp + 0xc]
test al, al
je 0x6ad097
mov eax, dword [esp + 0x70]
cmp eax, 1
jg 0x6ad673
mov eax, 1
jmp 0x6ad04f
mov eax, dword [esp + 0x474]
lea ecx, [0x7e30b9]
mov dword [esp], ecx
mov dword [esp + 4], 3
mov dword [esp + 8], eax
call fcn.004e2310
mov eax, dword [esp + 0x10]
mov dword [esp + 0xac], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x2ac], ecx
mov edx, dword [esp + 0x47c]
lea ebx, [0x7e30b9]
mov dword [esp], ebx
mov dword [esp + 4], 3
add edx, 2
mov dword [esp + 8], edx
call fcn.004e2310
mov eax, dword [esp + 0x10]
mov dword [esp + 0xa8], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x2a0], ecx
mov edx, dword [esp + 0x484]
lea ebx, [0x7e30b9]
mov dword [esp], ebx
mov dword [esp + 4], 3
add edx, 2
mov dword [esp + 8], edx
call fcn.004e2310
mov eax, dword [esp + 0x10]
mov dword [esp + 0xa4], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x29c], ecx
mov edx, dword [esp + 0x48c]
lea ebx, [0x7e30b9]
mov dword [esp], ebx
mov dword [esp + 4], 3
add edx, 2
mov dword [esp + 8], edx
call fcn.004e2310
mov eax, dword [esp + 0x10]
mov dword [esp + 0xa0], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x298], ecx
lea edx, [0x7e30b9]
mov dword [esp], edx
mov dword [esp + 4], 3
mov ebx, dword [esp + 0x80]
mov ebp, dword [esp + 0x6c]
sub ebx, ebp
mov dword [esp + 8], ebx
call fcn.004e2310
mov eax, dword [esp + 0xc]
mov dword [esp + 0x294], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x9c], ecx
lea edi, [esp + 0x860]
xor eax, eax
call fcn.0045c66c
lea eax, [0x7e30bf]
mov dword [esp], eax
mov dword [esp + 4], 3
call fcn.00408d50
mov eax, dword [esp + 8]
lea ecx, [0x78aa20]
mov dword [esp + 0x860], ecx
mov dword [esp + 0x864], eax
mov eax, dword [esp + 0x2ac]
mov dword [esp], eax
mov eax, dword [esp + 0xac]
mov dword [esp + 4], eax
call fcn.00408d50
mov eax, dword [esp + 8]
lea ecx, [0x78aa20]
mov dword [esp + 0x868], ecx
mov dword [esp + 0x86c], eax
lea eax, [0x7e30c5]
mov dword [esp], eax
mov dword [esp + 4], 3
call fcn.00408d50
mov eax, dword [esp + 8]
lea ecx, [0x78aa20]
mov dword [esp + 0x870], ecx
mov dword [esp + 0x874], eax
mov eax, dword [esp + 0x2a0]
mov dword [esp], eax
mov eax, dword [esp + 0xa8]
mov dword [esp + 4], eax
call fcn.00408d50
mov eax, dword [esp + 8]
lea ecx, [0x78aa20]
mov dword [esp + 0x878], ecx
mov dword [esp + 0x87c], eax
lea eax, [0x7e30c5]
mov dword [esp], eax
mov dword [esp + 4], 3
call fcn.00408d50
mov eax, dword [esp + 8]
lea ecx, [0x78aa20]
mov dword [esp + 0x880], ecx
mov dword [esp + 0x884], eax
mov eax, dword [esp + 0x29c]
mov dword [esp], eax
mov eax, dword [esp + 0xa4]
mov dword [esp + 4], eax
call fcn.00408d50
mov eax, dword [esp + 8]
lea ecx, [0x78aa20]
mov dword [esp + 0x888], ecx
mov dword [esp + 0x88c], eax
lea eax, [0x7e30c5]
mov dword [esp], eax
mov dword [esp + 4], 3
call fcn.00408d50
mov eax, dword [esp + 8]
lea ecx, [0x78aa20]
mov dword [esp + 0x890], ecx
mov dword [esp + 0x894], eax
mov eax, dword [esp + 0x298]
mov dword [esp], eax
mov eax, dword [esp + 0xa0]
mov dword [esp + 4], eax
call fcn.00408d50
mov eax, dword [esp + 8]
lea ecx, [0x78aa20]
mov dword [esp + 0x898], ecx
mov dword [esp + 0x89c], eax
lea eax, [0x7e30c5]
mov dword [esp], eax
mov dword [esp + 4], 3
call fcn.00408d50
mov eax, dword [esp + 8]
lea ecx, [0x78aa20]
mov dword [esp + 0x8a0], ecx
mov dword [esp + 0x8a4], eax
mov eax, dword [esp + 0x294]
mov dword [esp], eax
mov eax, dword [esp + 0x9c]
mov dword [esp + 4], eax
call fcn.00408d50
mov eax, dword [esp + 8]
lea ecx, [0x78aa20]
mov dword [esp + 0x8a8], ecx
mov dword [esp + 0x8ac], eax
lea eax, [0x7f7e9c]
mov dword [esp], eax
mov dword [esp + 4], 0x20
lea edx, [esp + 0x860]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 0xa
mov dword [esp + 0x10], 0xa
call fcn.004ce120
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00408d50
mov eax, dword [esp + 8]
mov dword [esp + 0x2f8], 0
mov dword [esp + 0x2fc], 0
lea ecx, [0x78aa20]
mov dword [esp + 0x2f8], ecx
mov dword [esp + 0x2fc], eax
mov eax, dword [0xa7fb28]
lea edx, [0x871980]
mov dword [esp], edx
mov dword [esp + 4], eax
lea eax, [esp + 0x2f8]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004ce330
mov eax, dword [esp + 0x70]
jmp 0x6ad669
lea eax, [0x7e30b9]
mov dword [esp], eax
mov dword [esp + 4], 3
mov dword [esp + 8], 0xa
call fcn.004e2310
mov eax, dword [esp + 0xc]
mov dword [esp + 0x2ac], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0xac], ecx
lea edx, [0x7e30b9]
mov dword [esp], edx
mov dword [esp + 4], 3
mov ebx, dword [esp + 0x64]
lea ebp, [ebx + 0x11]
mov dword [esp + 8], ebp
call fcn.004e2310
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp], 0
mov edx, dword [esp + 0x2ac]
mov dword [esp + 4], edx
mov edx, dword [esp + 0xac]
mov dword [esp + 8], edx
lea edx, [0x7e30c5]
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], ecx
call fcn.00446670
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00408d50
mov eax, dword [esp + 8]
mov dword [esp + 0x318], 0
mov dword [esp + 0x31c], 0
lea ecx, [0x78aa20]
mov dword [esp + 0x318], ecx
mov dword [esp + 0x31c], eax
mov eax, dword [0xa7fb28]
lea edx, [0x871980]
mov dword [esp], edx
mov dword [esp + 4], eax
lea eax, [esp + 0x318]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004ce330
jmp 0x6ac23b
mov eax, dword [esp + 0x64]
jmp 0x6ac39a
lea eax, [esp + 0x224]
mov dword [esp], eax
lea eax, [0x7e8110]
mov dword [esp + 4], eax
mov dword [esp + 8], 0xa
lea eax, [0x7e30bf]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 3
call fcn.00446610
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call fcn.004ce120
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00408d50
mov eax, dword [esp + 8]
mov dword [esp + 0x368], 0
mov dword [esp + 0x36c], 0
lea ecx, [0x78aa20]
mov dword [esp + 0x368], ecx
mov dword [esp + 0x36c], eax
mov eax, dword [0xa7fb28]
lea edx, [0x871980]
mov dword [esp], edx
mov dword [esp + 4], eax
lea eax, [esp + 0x368]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004ce1d0
mov eax, dword [esp + 0x60]
test eax, eax
jle 0x6aecb3
mov ecx, dword [esp + 0x26c]
xor edx, edx
xor ebx, ebx
jmp 0x6adc49
mov ebp, dword [esp + 0x2b4]
add ebp, 0x40
mov edx, ecx
mov ecx, ebp
mov dword [esp + 0x2b4], ecx
lea edi, [esp + 0x718]
mov esi, ecx
call fcn.0045caf0
lea edi, [esp + 0x618]
lea esi, [esp + 0x718]
call fcn.0045caf0
movzx ecx, byte [esp + 0x640]
test cl, cl
je 0x6ae793
lea ecx, [edx + 1]
cmp ecx, eax
jl 0x6adc3b
mov eax, dword [esp + 0x5c]
test eax, eax
jle 0x6adce8
mov ecx, dword [esp + 0x268]
xor edx, edx
jmp 0x6adca9
mov ebp, dword [esp + 0x2b4]
add ebp, 0x40
mov edx, ecx
mov ecx, ebp
mov dword [esp + 0x2b4], ecx
lea edi, [esp + 0x6d8]
mov esi, ecx
call fcn.0045caf0
lea edi, [esp + 0x658]
lea esi, [esp + 0x6d8]
call fcn.0045caf0
movzx ecx, byte [esp + 0x680]
test cl, cl
je 0x6ade0b
lea ecx, [edx + 1]
cmp ecx, eax
jl 0x6adc9b
lea eax, str.________._012456:_____BCFLMNOPSUZ___n_r_t
mov dword [esp], eax
mov dword [esp + 4], 1
mov dword [esp + 8], 0xa
call fcn.004e2310
mov eax, dword [esp + 0xc]
mov dword [esp + 0x2ac], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0xac], ecx
lea edx, str.________._012456:_____BCFLMNOPSUZ___n_r_t
mov dword [esp], edx
mov dword [esp + 4], 1
mov ebx, dword [esp + 0x64]
lea ebp, [ebx + 0x11]
mov dword [esp + 8], ebp
call fcn.004e2310
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp], 0
mov edx, dword [esp + 0x2ac]
mov dword [esp + 4], edx
mov edx, dword [esp + 0xac]
mov dword [esp + 8], edx
lea edx, [0x7e30bf]
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], ecx
call fcn.00446670
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00408d50
mov eax, dword [esp + 8]
mov dword [esp + 0x320], 0
mov dword [esp + 0x324], 0
lea ecx, [0x78aa20]
mov dword [esp + 0x320], ecx
mov dword [esp + 0x324], eax
mov eax, dword [0xa7fb28]
lea edx, [0x871980]
mov dword [esp], edx
mov dword [esp + 4], eax
lea eax, [esp + 0x320]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004ce330
mov ecx, dword [esp + 0xb0]
test ecx, ecx
mov eax, dword [esp + 0x91c]
jmp 0x6ac22b
mov dword [esp + 0xac], edx
mov byte [esp + 0x2e], bl
mov ecx, dword [esp + 0x660]
mov ebp, dword [esp + 0x664]
movzx esi, byte [esp + 0x681]
xchg esi, eax
test al, al
xchg esi, eax
je 0x6ae706
test bl, bl
je 0x6ae4d9
mov dword [esp + 0x94], ebp
mov dword [esp + 0x284], ecx
mov dword [esp + 0x390], 0
mov dword [esp + 0x394], 0
lea eax, [0x7e30bf]
mov dword [esp], eax
mov dword [esp + 4], 3
call fcn.00408d50
mov eax, dword [esp + 8]
lea ecx, [0x78aa20]
mov dword [esp + 0x390], ecx
mov dword [esp + 0x394], eax
lea eax, [0x7ea23b]
mov dword [esp], eax
mov dword [esp + 4], 0xd
lea edx, [esp + 0x390]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004ce120
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00408d50
mov eax, dword [esp + 8]
mov dword [esp + 0x340], 0
mov dword [esp + 0x344], 0
lea ecx, [0x78aa20]
mov dword [esp + 0x340], ecx
mov dword [esp + 0x344], eax
mov eax, dword [0xa7fb28]
lea edx, [0x871980]
mov dword [esp], edx
mov dword [esp + 4], eax
lea eax, [esp + 0x340]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004ce330
mov dword [esp + 0x398], 0
mov dword [esp + 0x39c], 0
mov dword [esp + 0x3a0], 0
mov dword [esp + 0x3a4], 0
lea eax, [0x7e30bf]
mov dword [esp], eax
mov dword [esp + 4], 3
call fcn.00408d50
mov eax, dword [esp + 8]
lea ecx, [0x78aa20]
mov dword [esp + 0x398], ecx
mov dword [esp + 0x39c], eax
mov eax, dword [esp + 0x284]
mov dword [esp], eax
mov eax, dword [esp + 0x94]
mov dword [esp + 4], eax
call fcn.00408d50
mov eax, dword [esp + 8]
lea ecx, [0x78aa20]
mov dword [esp + 0x3a0], ecx
mov dword [esp + 0x3a4], eax
lea eax, [0x7ecf88]
mov dword [esp], eax
mov dword [esp + 4], 0x11
lea edx, [esp + 0x398]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004ce120
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00408d50
mov eax, dword [esp + 8]
mov dword [esp + 0x338], 0
mov dword [esp + 0x33c], 0
lea ecx, [0x78aa20]
mov dword [esp + 0x338], ecx
mov dword [esp + 0x33c], eax
mov eax, dword [0xa7fb28]
lea edx, [0x871980]
mov dword [esp], edx
mov dword [esp + 4], eax
lea eax, [esp + 0x338]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004ce330
mov dword [esp + 0x390], 0
mov dword [esp + 0x394], 0
lea eax, [0x7e30bf]
mov dword [esp], eax
mov dword [esp + 4], 3
call fcn.00408d50
mov eax, dword [esp + 8]
lea ecx, [0x78aa20]
mov dword [esp + 0x390], ecx
mov dword [esp + 0x394], eax
lea eax, [0x7ea23b]
mov dword [esp], eax
mov dword [esp + 4], 0xd
lea edx, [esp + 0x390]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004ce120
mov eax, dword [esp + 0x14]
mov dword [esp + 0x2ac], eax
mov ecx, dword [esp + 0x18]
mov dword [esp + 0xa8], ecx
lea edx, [0x7e30b9]
mov dword [esp], edx
mov dword [esp + 4], 3
mov ebx, dword [esp + 0x64]
lea ebp, [ebx + 0x10]
mov dword [esp + 8], ebp
call fcn.004e2310
mov dword [esp], 0
mov eax, dword [esp + 0x2ac]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xa8]
mov dword [esp + 8], eax
call fcn.00446610
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00408d50
mov eax, dword [esp + 8]
mov dword [esp + 0x330], 0
mov dword [esp + 0x334], 0
lea ecx, [0x78aa20]
mov dword [esp + 0x330], ecx
mov dword [esp + 0x334], eax
mov eax, dword [0xa7fb28]
lea edx, [0x871980]
mov dword [esp], edx
mov dword [esp + 4], eax
lea eax, [esp + 0x330]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004ce330
movzx eax, byte [esp + 0x2e]
mov byte [esp + 0x2f], al
mov ecx, dword [esp + 0x688]
mov edx, dword [esp + 0x68c]
mov ebx, dword [esp + 0x690]
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
call fcn.006afa10
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
test eax, eax
jle 0x6ae236
mov dword [esp + 0x58], eax
xor edx, edx
jmp 0x6ae1fb
mov ebx, dword [esp + 0x290]
add ebx, 0x40
mov edx, ecx
mov ecx, ebx
mov dword [esp + 0x290], ecx
lea edi, [esp + 0x698]
mov esi, ecx
call fcn.0045caf0
lea edi, [esp + 0x518]
lea esi, [esp + 0x698]
call fcn.0045caf0
movzx ecx, byte [esp + 0x540]
test cl, cl
je 0x6ae24b
lea ecx, [edx + 1]
cmp eax, ecx
jg 0x6ae1ed
mov eax, dword [esp + 0x5c]
mov edx, dword [esp + 0xac]
movzx ebx, byte [esp + 0x2f]
jmp 0x6adce1
mov dword [esp + 0xa8], edx
mov eax, dword [esp + 0x68]
neg eax
mov dword [esp], eax
sar eax, 0x1f
mov dword [esp + 4], eax
mov dword [esp + 8], 0xa
call fcn.0046ec80
mov eax, dword [esp + 0xc]
mov dword [esp + 0x250], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x38], ecx
mov dword [esp + 0x390], 0
mov dword [esp + 0x394], 0
mov edx, dword [esp + 0x518]
mov ebx, dword [esp + 0x51c]
mov dword [esp], edx
mov dword [esp + 4], ebx
call fcn.00408d50
mov eax, dword [esp + 8]
lea ecx, [0x78aa20]
mov dword [esp + 0x390], ecx
mov dword [esp + 0x394], eax
lea eax, [esp + 0x184]
mov dword [esp], eax
lea eax, [0x7e2b88]
mov dword [esp + 4], eax
mov dword [esp + 8], 1
mov edx, dword [esp + 0x250]
mov dword [esp + 0xc], edx
mov edx, dword [esp + 0x38]
mov dword [esp + 0x10], edx
lea edx, [0x7e2bb8]
mov dword [esp + 0x14], edx
mov dword [esp + 0x18], 1
call fcn.00446670
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
mov dword [esp], eax
mov dword [esp + 4], ecx
lea eax, [esp + 0x390]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004ce120
mov eax, dword [esp + 0x14]
mov dword [esp + 0x2ac], eax
mov ecx, dword [esp + 0x18]
mov dword [esp + 0xa4], ecx
lea edi, [esp + 0x3c0]
xor eax, eax
call fcn.0045c678
lea eax, [0x7e30bf]
mov dword [esp], eax
mov dword [esp + 4], 3
call fcn.00408d50
mov eax, dword [esp + 8]
lea ecx, [0x78aa20]
mov dword [esp + 0x3c0], ecx
mov dword [esp + 0x3c4], eax
mov eax, dword [esp + 0x2ac]
mov dword [esp], eax
mov eax, dword [esp + 0xa4]
mov dword [esp + 4], eax
call fcn.00408d50
mov eax, dword [esp + 8]
lea ecx, [0x78aa20]
mov dword [esp + 0x3c8], ecx
mov dword [esp + 0x3cc], eax
lea eax, [0x7e30b9]
mov dword [esp], eax
mov dword [esp + 4], 3
call fcn.00408d50
mov eax, dword [esp + 8]
lea ecx, [0x78aa20]
mov dword [esp + 0x3d0], ecx
mov dword [esp + 0x3d4], eax
mov eax, dword [esp + 0x520]
mov edx, dword [esp + 0x524]
mov dword [esp], eax
mov dword [esp + 4], edx
call fcn.00408d50
mov eax, dword [esp + 8]
lea ecx, [0x78aa20]
mov dword [esp + 0x3d8], ecx
mov dword [esp + 0x3dc], eax
lea eax, [0x7f0a3b]
mov dword [esp], eax
mov dword [esp + 4], 0x16
lea edx, [esp + 0x3c0]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 4
mov dword [esp + 0x10], 4
call fcn.004ce120
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00408d50
mov eax, dword [esp + 8]
mov dword [esp + 0x328], 0
mov dword [esp + 0x32c], 0
lea ecx, [0x78aa20]
mov dword [esp + 0x328], ecx
mov dword [esp + 0x32c], eax
mov eax, dword [0xa7fb28]
lea edx, [0x871980]
mov dword [esp], edx
mov dword [esp + 4], eax
lea eax, [esp + 0x328]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004ce330
mov eax, dword [esp + 0x58]
mov edx, dword [esp + 0xa8]
jmp 0x6ae22f
mov dword [esp + 0x390], 0
mov dword [esp + 0x394], 0
mov dword [esp], ecx
mov dword [esp + 4], ebp
call fcn.00408d50
mov eax, dword [esp + 8]
lea ecx, [0x78aa20]
mov dword [esp + 0x390], ecx
mov dword [esp + 0x394], eax
lea eax, [0x7e30d2]
mov dword [esp], eax
mov dword [esp + 4], 4
lea edx, [esp + 0x390]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004ce120
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00408d50
mov eax, dword [esp + 8]
mov dword [esp + 0x350], 0
mov dword [esp + 0x354], 0
lea ecx, [0x78aa20]
mov dword [esp + 0x350], ecx
mov dword [esp + 0x354], eax
mov eax, dword [0xa7fb28]
lea edx, [0x871980]
mov dword [esp], edx
mov dword [esp + 4], eax
lea eax, [esp + 0x350]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004ce330
mov dword [esp + 0x390], 0
mov dword [esp + 0x394], 0
lea eax, [0x7e30bf]
mov dword [esp], eax
mov dword [esp + 4], 3
call fcn.00408d50
mov eax, dword [esp + 8]
lea ecx, [0x78aa20]
mov dword [esp + 0x390], ecx
mov dword [esp + 0x394], eax
lea eax, [0x7ea23b]
mov dword [esp], eax
mov dword [esp + 4], 0xd
lea edx, [esp + 0x390]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004ce120
mov eax, dword [esp + 0x14]
mov dword [esp + 0x2ac], eax
mov ecx, dword [esp + 0x18]
mov dword [esp + 0xa8], ecx
lea edx, [0x7e30b9]
mov dword [esp], edx
mov dword [esp + 4], 3
mov ebx, dword [esp + 0x64]
lea ebp, [ebx + 0x10]
mov dword [esp + 8], ebp
call fcn.004e2310
mov dword [esp], 0
mov eax, dword [esp + 0x2ac]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xa8]
mov dword [esp + 8], eax
call fcn.00446610
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00408d50
mov eax, dword [esp + 8]
mov dword [esp + 0x348], 0
mov dword [esp + 0x34c], 0
lea ecx, [0x78aa20]
mov dword [esp + 0x348], ecx
mov dword [esp + 0x34c], eax
mov eax, dword [0xa7fb28]
lea edx, [0x871980]
mov dword [esp], edx
mov dword [esp + 4], eax
lea eax, [esp + 0x348]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004ce330
mov eax, 1
jmp 0x6ae1b0
mov eax, dword [esp + 0x658]
mov ecx, dword [esp + 0x65c]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.004e31b0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
mov dword [esp], 0
mov edx, dword [esp + 0x660]
mov ebx, dword [esp + 0x664]
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
lea edx, [0x7e2bbd]
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], 2
mov dword [esp + 0x14], ecx
mov dword [esp + 0x18], eax
lea eax, [0x7e2b8c]
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], 1
call fcn.004466d0
mov ecx, dword [esp + 0x24]
mov ebp, dword [esp + 0x28]
mov eax, dword [esp + 0x5c]
mov edx, dword [esp + 0xac]
movzx ebx, byte [esp + 0x2e]
jmp 0x6ade36
mov dword [esp + 0xac], edx
test bl, bl
je 0x6aea49
mov byte [esp + 0x2f], bl
mov eax, dword [esp + 0x68]
neg eax
mov dword [esp], eax
sar eax, 0x1f
mov dword [esp + 4], eax
mov dword [esp + 8], 0xa
call fcn.0046ec80
mov eax, dword [esp + 0xc]
mov dword [esp + 0x244], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x30], ecx
mov dword [esp + 0x390], 0
mov dword [esp + 0x394], 0
mov edx, dword [esp + 0x618]
mov ebx, dword [esp + 0x61c]
mov dword [esp], edx
mov dword [esp + 4], ebx
call fcn.00408d50
mov eax, dword [esp + 8]
lea ecx, [0x78aa20]
mov dword [esp + 0x390], ecx
mov dword [esp + 0x394], eax
lea eax, [esp + 0x1c4]
mov dword [esp], eax
lea eax, [0x7e2b88]
mov dword [esp + 4], eax
mov dword [esp + 8], 1
mov edx, dword [esp + 0x244]
mov dword [esp + 0xc], edx
mov edx, dword [esp + 0x30]
mov dword [esp + 0x10], edx
lea edx, [0x7e2bb8]
mov dword [esp + 0x14], edx
mov dword [esp + 0x18], 1
call fcn.00446670
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
mov dword [esp], eax
mov dword [esp + 4], ecx
lea eax, [esp + 0x390]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004ce120
mov eax, dword [esp + 0x14]
mov dword [esp + 0x2ac], eax
mov ecx, dword [esp + 0x18]
mov dword [esp + 0xa8], ecx
lea edi, [esp + 0x3a8]
xor eax, eax
call fcn.0045c67a
lea eax, [0x7e30bf]
mov dword [esp], eax
mov dword [esp + 4], 3
call fcn.00408d50
mov eax, dword [esp + 8]
lea ecx, [0x78aa20]
mov dword [esp + 0x3a8], ecx
mov dword [esp + 0x3ac], eax
mov eax, dword [esp + 0x2ac]
mov dword [esp], eax
mov eax, dword [esp + 0xa8]
mov dword [esp + 4], eax
call fcn.00408d50
mov eax, dword [esp + 8]
lea ecx, [0x78aa20]
mov dword [esp + 0x3b0], ecx
mov dword [esp + 0x3b4], eax
mov eax, dword [esp + 0x620]
mov edx, dword [esp + 0x624]
mov dword [esp], eax
mov dword [esp + 4], edx
call fcn.00408d50
mov eax, dword [esp + 8]
lea ecx, [0x78aa20]
mov dword [esp + 0x3b8], ecx
mov dword [esp + 0x3bc], eax
lea eax, [esp + 0x1a4]
mov dword [esp], eax
lea eax, [0x7ecf88]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x11
lea edx, [0x7e30b9]
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], 3
lea ebx, [0x7e2d4d]
mov dword [esp + 0x14], ebx
mov dword [esp + 0x18], 3
call fcn.00446670
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
mov dword [esp], eax
mov dword [esp + 4], ecx
lea eax, [esp + 0x3a8]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 3
mov dword [esp + 0x10], 3
call fcn.004ce120
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00408d50
mov eax, dword [esp + 8]
mov dword [esp + 0x358], 0
mov dword [esp + 0x35c], 0
lea ecx, [0x78aa20]
mov dword [esp + 0x358], ecx
mov dword [esp + 0x35c], eax
mov eax, dword [0xa7fb28]
lea edx, [0x871980]
mov dword [esp], edx
mov dword [esp + 4], eax
lea eax, [esp + 0x358]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004ce330
movzx eax, byte [esp + 0x2f]
mov edx, dword [esp + 0xac]
mov ebx, eax
mov eax, dword [esp + 0x60]
jmp 0x6adc81
mov eax, dword [esp + 0x68]
neg eax
mov dword [esp], eax
sar eax, 0x1f
mov dword [esp + 4], eax
mov dword [esp + 8], 0xa
call fcn.0046ec80
mov eax, dword [esp + 0xc]
mov dword [esp + 0x24c], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x3c], ecx
mov dword [esp + 0x390], 0
mov dword [esp + 0x394], 0
mov edx, dword [esp + 0x618]
mov ebx, dword [esp + 0x61c]
mov dword [esp], edx
mov dword [esp + 4], ebx
call fcn.00408d50
mov eax, dword [esp + 8]
lea ecx, [0x78aa20]
mov dword [esp + 0x390], ecx
mov dword [esp + 0x394], eax
lea eax, [esp + 0x204]
mov dword [esp], eax
lea eax, [0x7e2b88]
mov dword [esp + 4], eax
mov dword [esp + 8], 1
mov edx, dword [esp + 0x24c]
mov dword [esp + 0xc], edx
mov edx, dword [esp + 0x3c]
mov dword [esp + 0x10], edx
lea edx, [0x7e2bb8]
mov dword [esp + 0x14], edx
mov dword [esp + 0x18], 1
call fcn.00446670
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
mov dword [esp], eax
mov dword [esp + 4], ecx
lea eax, [esp + 0x390]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004ce120
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x398], 0
mov dword [esp + 0x39c], 0
mov dword [esp + 0x3a0], 0
mov dword [esp + 0x3a4], 0
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00408d50
mov eax, dword [esp + 8]
lea ecx, [0x78aa20]
mov dword [esp + 0x398], ecx
mov dword [esp + 0x39c], eax
mov eax, dword [esp + 0x620]
mov edx, dword [esp + 0x624]
mov dword [esp], eax
mov dword [esp + 4], edx
call fcn.00408d50
mov eax, dword [esp + 8]
lea ecx, [0x78aa20]
mov dword [esp + 0x3a0], ecx
mov dword [esp + 0x3a4], eax
lea eax, [esp + 0x1e4]
mov dword [esp], eax
lea eax, [0x7e3862]
mov dword [esp + 4], eax
mov dword [esp + 8], 5
lea edx, [0x7e30b9]
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], 3
lea ebx, [0x7e2d4d]
mov dword [esp + 0x14], ebx
mov dword [esp + 0x18], 3
call fcn.00446670
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
mov dword [esp], eax
mov dword [esp + 4], ecx
lea eax, [esp + 0x398]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004ce120
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00408d50
mov eax, dword [esp + 8]
mov dword [esp + 0x360], 0
mov dword [esp + 0x364], 0
lea ecx, [0x78aa20]
mov dword [esp + 0x360], ecx
mov dword [esp + 0x364], eax
mov eax, dword [0xa7fb28]
lea edx, [0x871980]
mov dword [esp], edx
mov dword [esp + 4], eax
lea eax, [esp + 0x360]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004ce330
mov eax, 1
jmp 0x6aea37
mov eax, dword [esp + 0x5c]
test eax, eax
mov ebx, 0
jmp 0x6adc8e
mov ecx, eax
jmp 0x6abc19
mov ebp, eax
jmp 0x6abc0d
mov ebp, eax
jmp 0x6abc29
mov ecx, edx
jmp 0x6abb78
mov eax, edx
jmp 0x6abb6c
mov esi, eax
mov eax, edx
jmp 0x6abb84
mov ecx, ebp
jmp 0x6abaf4
mov edx, ebp
jmp 0x6abae8
mov esi, edx
mov edx, ebp
jmp 0x6abb00
mov ecx, eax
jmp 0x6aba4c
mov ebp, eax
jmp 0x6aba40
mov esi, dword [esp + 0x26c]
mov edi, eax
xor ebp, ebp
xor ecx, ecx
jmp 0x6aba58
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.006af000
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 0x10]
jmp 0x6ab9af
mov dword [esp + 0x7c], eax
mov dword [esp + 0x278], ecx
mov edx, dword [esp + 0x44]
lea ebx, [edx + 1]
mov ebp, dword [esp + 0x48]
cmp ebx, ebp
ja 0x6aee87
mov esi, dword [esp + 0x2b0]
mov dword [esp + 0x258], esi
mov dword [esp + 0x44], ebx
mov ecx, dword [0xa976a0]
imul edx, edx, 0x38
add edx, esi
add ebx, eax
mov dword [esp + 0xb0], ebx
test ecx, ecx
jne 0x6aee4d
mov edi, edx
lea esi, [0x877da0]
call fcn.0045cb04
cmp ebp, ebx
jb 0x6aee0c
mov ecx, dword [esp + 0x258]
mov edx, dword [esp + 0x44]
cmp edx, ebx
ja 0x6aefe1
mov dword [esp + 0x48], ebp
mov dword [esp + 0x258], ecx
lea ebx, [0x7c7340]
mov dword [esp], ebx
sub ebp, edx
xchg ebp, ebx
neg ebx
xchg ebp, ebx
sar ebp, 0x1f
imul edx, edx, 0x38
and edx, ebp
add edx, ecx
mov dword [esp + 4], edx
mov dword [esp + 8], eax
mov edx, dword [esp + 0x278]
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], eax
call fcn.00410f40
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0xb0]
mov edx, dword [esp + 0x258]
jmp 0x6ab9a0
lea eax, [0x7c7340]
mov dword [esp], eax
mov ecx, dword [esp + 0x258]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x44]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], ebx
call fcn.00443250
mov ecx, dword [esp + 0x14]
mov ebp, dword [esp + 0x1c]
mov eax, dword [esp + 0x7c]
mov ebx, dword [esp + 0xb0]
jmp 0x6aeda7
mov dword [esp + 0xa0], ebp
lea eax, [0x7c7340]
mov dword [esp], eax
mov dword [esp + 4], edx
lea eax, [0x877da0]
mov dword [esp + 8], eax
call fcn.00410e20
mov eax, dword [esp + 0x7c]
mov ebx, dword [esp + 0xb0]
mov ebp, dword [esp + 0xa0]
jmp 0x6aed9c
lea eax, [0x7c7340]
mov dword [esp], eax
mov ecx, dword [esp + 0x2b0]
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], ebx
call fcn.00443250
mov esi, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ebp, dword [esp + 0x1c]
lea ebx, [eax + 1]
mov eax, dword [esp + 0x7c]
mov ecx, dword [esp + 0x278]
mov edx, dword [esp + 0x44]
jmp 0x6aed68
mov edx, ecx
mov ecx, ebx
jmp 0x6ab9a0
lea ecx, [edx + ebp + 1]
mov dword [esp + 0xac], ecx
cmp eax, ecx
jb 0x6aef57
mov esi, dword [esp + 0x258]
cmp ebx, ecx
ja 0x6aefea
mov dword [esp + 0xb0], eax
mov dword [esp + 0x258], esi
lea edi, [0x7c7340]
mov dword [esp], edi
sub eax, ebx
neg eax
sar eax, 0x1f
imul edx, edx, 0x38
add edx, 0x38
and edx, eax
lea eax, [esi + edx]
mov dword [esp + 4], eax
sub ecx, ebx
mov dword [esp + 8], ecx
mov ecx, dword [esp + 0x278]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebp
call fcn.00410f40
mov eax, dword [esp + 0xb0]
mov ebx, dword [esp + 0xac]
mov ecx, dword [esp + 0x258]
jmp 0x6ab946
mov dword [esp + 0x9c], ebx
lea edx, [0x7c7340]
mov dword [esp], edx
mov ebp, dword [esp + 0x258]
mov dword [esp + 4], ebp
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
call fcn.00443250
mov esi, dword [esp + 0x14]
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0xac]
mov edx, dword [esp + 0xb0]
mov ebx, dword [esp + 0x9c]
mov ebp, dword [esp + 0x7c]
jmp 0x6aeeee
mov dword [esp + 0x98], eax
lea eax, [0x7c7340]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [0x877d60]
mov dword [esp + 8], eax
call fcn.00410e20
mov eax, dword [esp + 0x98]
jmp 0x6ab929
mov ecx, eax
xor eax, eax
call fcn.0045c460
mov eax, edx
mov ecx, ebx
call fcn.0045c4c0
mov eax, ebx
call fcn.0045c4c0
nop
call fcn.0045ae90
jmp fcn.006ab490