Function at 0x6aa460
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x898]
cmp eax, dword [ecx + 8]
jbe 0x6adfc2
sub esp, 0x918
mov ecx, dword [esp + 0x91c]
mov edx, dword [ecx + 0x30]
mov dword [esp + 0x2bc], edx
mov ebx, dword [ecx + 0x34]
mov dword [esp + 0xb0], ebx
xor eax, eax
xor ebp, ebp
xor esi, esi
lea edi, [esp + 0x2c]
xor eax, eax
mov dword [esp + 0x4c], eax
xor eax, eax
mov dword [esp + 0x50], eax
lea eax, [esp + 0x2c]
mov dword [esp + 0x25c], eax
xor ebp, ebp
mov dword [esp + 0x8c], ebp
xor ebp, ebp
mov dword [esp + 0x90], ebp
lea ebp, [esp + 0x2c]
mov dword [esp + 0x280], ebp
xor eax, eax
xor ebp, ebp
jmp 0x6aa5ee
mov ecx, dword [esp + 0xa4]
inc ecx
mov edx, dword [esp + 0xa8]
mov ebp, dword [esp + 0x2b8]
mov esi, dword [esp + 0x50]
mov edx, ebp
mov esi, dword [esp + 0x88]
mov dword [esp + 0xa4], ecx
mov ebp, dword [esp + 0x50]
mov ecx, dword [esp + 0xa8]
mov esi, dword [esp + 0xa4]
cmp esi, ecx
jge 0x6aa5b3
mov edx, dword [edx + esi*4]
mov ecx, dword [esp + 0x4c]
lea esi, [ecx + 1]
cmp esi, ebp
ja 0x6aa564
mov dword [esp + 0x4c], esi
mov dword [esp + 0x50], ebp
mov ebp, dword [0xa8c6b0]
lea esi, [ebx + ecx*4]
test ebp, ebp
jne 0x6aa551
mov dword [ebx + ecx*4], edx
jmp 0x6aa4e5
mov ecx, edi
mov edi, esi
mov ebp, eax
mov eax, edx
call fcn.0045c330
mov eax, ebp
mov edi, ecx
jmp 0x6aa4e5
mov dword [esp + 0x260], edx
lea eax, [0x7d0ea0]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], esi
call fcn.004431f0
mov ebx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ebp, dword [esp + 0x1c]
lea esi, [eax + 1]
mov eax, dword [esp + 0xac]
mov ecx, dword [esp + 0x4c]
mov edx, dword [esp + 0x260]
mov edi, dword [esp + 0x27c]
jmp 0x6aa537
mov ecx, dword [esp + 0x88]
mov edx, dword [esp + 0x84]
mov esi, dword [esp + 0x4c]
inc eax
mov dword [esp + 0x4c], esi
mov dword [esp + 0x50], ebp
mov dword [esp + 0x25c], ebx
mov ebx, dword [esp + 0xb0]
mov ebp, edx
mov esi, ecx
mov ecx, dword [esp + 0x91c]
mov edx, dword [esp + 0x2bc]
mov dword [esp + 0x88], esi
mov dword [esp + 0x84], ebp
mov dword [esp + 0x27c], edi
cmp eax, ebx
jge 0x6aa7c3
mov dword [esp + 0xac], eax
mov ecx, dword [edx + eax*4]
mov dword [esp + 0x288], ecx
mov edx, dword [ecx + 0x34]
test edx, edx
jle 0x6aa6ef
lea edx, [ebp + 1]
cmp edx, esi
ja 0x6aa6a1
mov dword [esp + 0x84], edx
mov ebx, dword [0xa8c6b0]
lea edx, [edi + ebp*4]
test ebx, ebx
jne 0x6aa68e
mov dword [edi + ebp*4], ecx
mov dword [esp + 0x27c], edi
mov dword [esp + 0x88], esi
mov edx, dword [ecx + 0x30]
mov dword [esp + 0x2b8], edx
mov ecx, dword [ecx + 0x34]
mov dword [esp + 0xa8], ecx
mov ebx, dword [esp + 0x25c]
mov ebp, dword [esp + 0x50]
mov dword [esp + 0xbc], eax
xor eax, eax
mov dword [esp + 0xa4], eax
mov eax, dword [esp + 0xbc]
jmp 0x6aa51a
mov ebx, edi
mov edi, edx
mov ebp, eax
mov eax, ecx
call fcn.0045c330
mov eax, ebp
mov edi, ebx
jmp 0x6aa645
lea eax, [0x7d0ea0]
mov dword [esp], eax
mov dword [esp + 4], edi
mov dword [esp + 8], ebp
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], edx
call fcn.004431f0
mov edi, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
lea edx, [eax + 1]
mov eax, dword [esp + 0xac]
mov ecx, dword [esp + 0x288]
mov ebx, dword [esp + 0xb0]
mov ebp, dword [esp + 0x84]
jmp 0x6aa62e
mov edx, dword [esp + 0x8c]
lea ebx, [edx + 1]
mov ebp, dword [esp + 0x90]
cmp ebx, ebp
ja 0x6aa760
mov dword [esp + 0x8c], ebx
mov dword [esp + 0x90], ebp
mov ebx, dword [0xa8c6b0]
mov ebp, dword [esp + 0x280]
lea esi, [ebp + edx*4]
test ebx, ebx
jne 0x6aa74d
mov dword [ebp + edx*4], ecx
mov ecx, dword [esp + 0x88]
mov edx, dword [esp + 0x84]
mov ebp, dword [esp + 0x50]
mov esi, dword [esp + 0x4c]
mov ebx, dword [esp + 0x25c]
jmp 0x6aa5c5
mov edx, edi
mov edi, esi
mov ebx, eax
mov eax, ecx
call fcn.0045c330
mov eax, ebx
mov edi, edx
jmp 0x6aa72b
lea eax, [0x7d0ea0]
mov dword [esp], eax
mov ecx, dword [esp + 0x280]
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], ebx
call fcn.004431f0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov ebp, dword [esp + 0x1c]
lea ebx, [ecx + 1]
mov ecx, dword [esp + 0x288]
mov edx, dword [esp + 0x8c]
mov esi, dword [esp + 0x88]
mov edi, dword [esp + 0x27c]
mov dword [esp + 0x280], eax
mov eax, dword [esp + 0xac]
jmp 0x6aa704
mov eax, dword [esp + 0x280]
mov dword [esp], eax
mov eax, dword [esp + 0x8c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x90]
mov dword [esp + 8], eax
call fcn.006ae9e0
mov eax, dword [esp + 0x10]
mov dword [esp + 0x60], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x26c], ecx
mov edx, dword [esp + 0x27c]
mov dword [esp], edx
mov edx, dword [esp + 0x84]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x88]
mov dword [esp + 8], edx
call fcn.006ae9e0
mov eax, dword [esp + 0x10]
mov dword [esp + 0x5c], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x268], ecx
mov edx, dword [esp + 0x25c]
mov dword [esp], edx
mov edx, dword [esp + 0x4c]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x50]
mov dword [esp + 8], edx
call fcn.006ae9e0
mov eax, dword [esp + 0x10]
mov dword [esp + 0x54], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x264], ecx
mov edx, dword [esp + 0x91c]
mov dword [esp], edx
call fcn.006b07e0
mov eax, dword [esp + 8]
mov dword [esp + 0x7c], eax
mov ecx, dword [esp + 4]
mov dword [esp + 0x278], ecx
mov edx, dword [esp + 0x91c]
mov ebx, dword [edx + 0x2c]
mov dword [esp + 0x2b4], ebx
lea ebp, [0x7c4ca0]
mov dword [esp], ebp
lea esi, [esp + 0x2c]
mov dword [esp + 4], esi
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 1
call fcn.004431f0
mov edi, dword [esp + 0x14]
mov dword [esp + 0x258], edi
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0xb0], ecx
mov edx, dword [0xa8c6b0]
test edx, edx
jne 0x6adf79
lea esi, [0x872ec0]
call fcn.0045ca54
mov edx, dword [esp + 0xb0]
lea ebx, [edx + 1]
mov ebp, dword [esp + 0x7c]
test ebp, ebp
jg 0x6adea8
mov ecx, dword [esp + 0x258]
mov edx, dword [esp + 0x2b4]
test edx, edx
je 0x6ade9f
mov edx, dword [esp + 0x91c]
mov ebp, dword [edx + 0x2c]
jmp 0x6aa933
mov ebp, esi
mov esi, dword [ebp + 0x2c]
test esi, esi
jne 0x6aa931
mov dword [esp + 0x48], eax
mov dword [esp + 0x44], ebx
mov dword [esp + 0x2b0], ecx
mov dword [esp], ebp
call fcn.006b07e0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 4]
test eax, eax
jg 0x6add13
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x44]
mov edx, dword [esp + 0x2b0]
cmp ecx, 1
jg 0x6adcf6
xor eax, eax
lea ecx, [esp + 0x2c]
mov dword [esp + 0x270], ecx
mov edx, dword [esp + 0x60]
test edx, edx
jle 0x6adce4
mov ebx, dword [esp + 0x26c]
mov ebp, ebx
xor esi, esi
xor edi, edi
xor ebx, ebx
mov dword [esp + 0x68], ebx
mov ebx, ebp
jmp 0x6aa9c4
add ebx, 0x40
mov esi, eax
mov dword [esp + 0x68], ecx
mov eax, edi
mov ecx, dword [esp + 0x270]
mov edi, ebp
mov ebp, dword [esp + 0x26c]
mov dword [esp + 0xb0], esi
mov dword [esp + 0x64], edi
lea edi, [esp + 0x7d8]
mov esi, ebx
call fcn.0045ca40
lea edi, [esp + 0x598]
lea esi, [esp + 0x7d8]
call fcn.0045ca40
mov ecx, dword [esp + 0x59c]
mov esi, ebp
mov ebp, dword [esp + 0x5a4]
add ebp, ecx
mov edi, eax
mov eax, dword [esp + 0x64]
cmp ebp, eax
jle 0x6adcdd
mov eax, dword [esp + 0x68]
cmp ecx, eax
jle 0x6adcd6
mov eax, dword [esp + 0xb0]
inc eax
cmp eax, edx
jl 0x6aa9a9
mov dword [esp + 0xb0], edi
mov eax, dword [esp + 0x5c]
test eax, eax
jle 0x6adccd
mov ebx, dword [esp + 0x268]
mov dword [esp + 0xb4], eax
xor eax, eax
mov dword [esp + 0xac], eax
mov eax, dword [esp + 0xb4]
jmp 0x6aaa79
add ebx, 0x40
mov esi, dword [esp + 0x26c]
mov edi, dword [esp + 0xb0]
mov dword [esp + 0xac], ebp
mov ebp, edx
mov edx, dword [esp + 0x60]
mov dword [esp + 0x68], ecx
lea edi, [esp + 0x798]
mov esi, ebx
call fcn.0045ca40
lea edi, [esp + 0x558]
lea esi, [esp + 0x798]
call fcn.0045ca40
mov ecx, dword [esp + 0x55c]
mov esi, edx
mov edx, dword [esp + 0x564]
add edx, ecx
cmp edx, ebp
jle 0x6adcc6
mov ebp, dword [esp + 0x68]
cmp ecx, ebp
jle 0x6adcbf
mov ebp, dword [esp + 0xac]
inc ebp
cmp ebp, eax
jl 0x6aaa5b
mov ebx, dword [esp + 0x54]
test ebx, ebx
jle 0x6adcb6
mov ebp, dword [esp + 0x264]
xor edi, edi
jmp 0x6aaaf6
add ebp, 0x40
mov esi, dword [esp + 0x60]
mov edi, edx
mov edx, eax
mov eax, dword [esp + 0x5c]
mov dword [esp + 0xac], edi
mov dword [esp + 0x68], ecx
lea edi, [esp + 0x758]
mov esi, ebp
call fcn.0045ca40
lea edi, [esp + 0x5d8]
lea esi, [esp + 0x758]
call fcn.0045ca40
mov ecx, dword [esp + 0x5dc]
mov esi, eax
mov eax, dword [esp + 0x5e4]
add eax, ecx
cmp eax, edx
jle 0x6adcaf
mov edx, dword [esp + 0x68]
cmp ecx, edx
jle 0x6adca8
mov edx, dword [esp + 0xac]
inc edx
cmp edx, ebx
jl 0x6aaae7
mov edx, dword [esp + 0xb0]
test edx, edx
jle 0x6adca1
mov ebx, dword [esp + 0x270]
mov ebp, ebx
xor edi, edi
jmp 0x6aab82
add ebx, 0x38
mov esi, dword [esp + 0x5c]
mov edi, eax
mov eax, ebp
mov ebp, dword [esp + 0x270]
mov dword [esp + 0xac], edi
mov dword [esp + 0x68], ecx
lea edi, [esp + 0x4e0]
mov esi, ebx
call fcn.0045ca54
lea edi, [esp + 0x438]
lea esi, [esp + 0x4e0]
call fcn.0045ca54
mov ecx, dword [esp + 0x43c]
mov esi, ebp
mov ebp, dword [esp + 0x444]
add ebp, ecx
add ebp, dword [esp + 0x44c]
add ebp, dword [esp + 0x454]
add ebp, dword [esp + 0x460]
cmp ebp, eax
jle 0x6adc9a
mov eax, dword [esp + 0x68]
cmp ecx, eax
jle 0x6adc93
mov eax, dword [esp + 0xac]
inc eax
cmp eax, edx
jl 0x6aab70
mov dword [esp + 0x64], ebp
mov dword [esp + 0x68], ecx
mov dword [esp + 0x398], 0
mov dword [esp + 0x39c], 0
mov dword [esp + 0x3a0], 0
mov dword [esp + 0x3a4], 0
mov eax, dword [esp + 0x91c]
mov edx, dword [eax]
mov ebx, dword [eax + 4]
mov dword [esp], edx
mov dword [esp + 4], ebx
call fcn.00408cf0
mov eax, dword [esp + 8]
lea ecx, [0x7878a0]
mov dword [esp + 0x398], ecx
mov dword [esp + 0x39c], eax
mov eax, dword [0xa6c654]
mov edx, dword [0xa6c650]
test eax, eax
jbe 0x6adfa8
mov eax, dword [edx]
mov ecx, dword [edx + 4]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00408cf0
mov eax, dword [esp + 8]
lea ecx, [0x7878a0]
mov dword [esp + 0x3a0], ecx
mov dword [esp + 0x3a4], eax
lea eax, [0x7efdad]
mov dword [esp], eax
mov dword [esp + 4], 0x18
lea eax, [esp + 0x398]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004ce820
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x91c]
mov ebx, dword [edx + 0x2c]
jmp 0x6aad32
mov dword [esp + 0x28c], ebx
mov edx, dword [ebx]
mov ebp, dword [ebx + 4]
mov dword [esp], 0
lea esi, str.________._012456:_____BCFLMNOPSUZ___n_r_t
mov dword [esp + 4], esi
mov dword [esp + 8], 1
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ebp
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], ecx
call fcn.00446610
mov ecx, dword [esp + 0x20]
mov eax, dword [esp + 0x1c]
mov edx, dword [esp + 0x28c]
mov ebx, dword [edx + 0x2c]
mov edx, dword [esp + 0x91c]
test ebx, ebx
jne 0x6aacdf
mov dword [esp + 0x40], ecx
mov dword [esp + 0x254], eax
nop
mov eax, dword [0xa7502c]
lea ecx, [0x86cc80]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call fcn.004cea30
mov dword [esp + 0x390], 0
mov dword [esp + 0x394], 0
mov eax, dword [esp + 0x91c]
mov ecx, dword [eax + 8]
mov edx, dword [eax + 0xc]
mov dword [esp], ecx
mov dword [esp + 4], edx
call fcn.00408cf0
mov eax, dword [esp + 8]
lea ecx, [0x7878a0]
mov dword [esp + 0x390], ecx
mov dword [esp + 0x394], eax
lea eax, [0x7e0591]
mov dword [esp], eax
mov dword [esp + 4], 3
lea edx, [esp + 0x390]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004ce820
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00408cf0
mov eax, dword [esp + 8]
mov dword [esp + 0x388], 0
mov dword [esp + 0x38c], 0
lea ecx, [0x7878a0]
mov dword [esp + 0x388], ecx
mov dword [esp + 0x38c], eax
mov eax, dword [0xa7502c]
lea edx, [0x86cc80]
mov dword [esp], edx
mov dword [esp + 4], eax
lea eax, [esp + 0x388]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004cea30
lea eax, [0x7e0909]
mov dword [esp], eax
mov dword [esp + 4], 3
mov dword [esp + 8], 0xa
call fcn.004e2940
mov eax, dword [esp + 0xc]
mov dword [esp + 0x2ac], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0xac], ecx
lea edx, [0x7e0909]
mov dword [esp], edx
mov dword [esp + 4], 3
mov ebx, dword [esp + 0x64]
lea ebp, [ebx + 0x13]
mov dword [esp + 0xa8], ebp
mov dword [esp + 8], ebp
call fcn.004e2940
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp], 0
mov edx, dword [esp + 0x2ac]
mov dword [esp + 4], edx
mov edx, dword [esp + 0xac]
mov dword [esp + 8], edx
lea edx, [0x7e090f]
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], ecx
call fcn.00446610
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00408cf0
mov eax, dword [esp + 8]
mov dword [esp + 0x380], 0
mov dword [esp + 0x384], 0
lea ecx, [0x7878a0]
mov dword [esp + 0x380], ecx
mov dword [esp + 0x384], eax
mov eax, dword [0xa7502c]
lea edx, [0x86cc80]
mov dword [esp], edx
mov dword [esp + 4], eax
lea eax, [esp + 0x380]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004cea30
mov eax, dword [esp + 0x254]
mov dword [esp], eax
mov eax, dword [esp + 0x40]
mov dword [esp + 4], eax
call fcn.004e37e0
mov eax, dword [esp + 8]
mov dword [esp + 0x2ac], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0xac], ecx
mov dword [esp + 0x398], 0
mov dword [esp + 0x39c], 0
mov dword [esp + 0x3a0], 0
mov dword [esp + 0x3a4], 0
lea edx, [0x7e090c]
mov dword [esp], edx
mov dword [esp + 4], 3
call fcn.00408cf0
mov eax, dword [esp + 8]
lea ecx, [0x7878a0]
mov dword [esp + 0x398], ecx
mov dword [esp + 0x39c], eax
mov eax, dword [esp + 0x2ac]
mov dword [esp], eax
mov eax, dword [esp + 0xac]
mov dword [esp + 4], eax
call fcn.00408cf0
mov eax, dword [esp + 8]
lea ecx, [0x7878a0]
mov dword [esp + 0x3a0], ecx
mov dword [esp + 0x3a4], eax
lea eax, [0x7e9024]
mov dword [esp], eax
mov dword [esp + 4], 0xf
lea eax, [esp + 0x398]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004ce820
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00408cf0
mov eax, dword [esp + 8]
mov dword [esp + 0x378], 0
mov dword [esp + 0x37c], 0
lea ecx, [0x7878a0]
mov dword [esp + 0x378], ecx
mov dword [esp + 0x37c], eax
mov eax, dword [0xa7502c]
lea edx, [0x86cc80]
mov dword [esp], edx
mov dword [esp + 4], eax
lea eax, [esp + 0x378]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004cea30
lea eax, [0x7e0909]
mov dword [esp], eax
mov dword [esp + 4], 3
mov dword [esp + 8], 0xa
call fcn.004e2940
mov eax, dword [esp + 0xc]
mov dword [esp + 0x2ac], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0xac], ecx
lea edx, [0x7e0909]
mov dword [esp], edx
mov dword [esp + 4], 3
mov edx, dword [esp + 0xa8]
mov dword [esp + 8], edx
call fcn.004e2940
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp], 0
mov edx, dword [esp + 0x2ac]
mov dword [esp + 4], edx
mov edx, dword [esp + 0xac]
mov dword [esp + 8], edx
lea edx, [0x7e0915]
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], ecx
call fcn.00446610
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00408cf0
mov eax, dword [esp + 8]
mov dword [esp + 0x370], 0
mov dword [esp + 0x374], 0
lea ecx, [0x7878a0]
mov dword [esp + 0x370], ecx
mov dword [esp + 0x374], eax
mov eax, dword [0xa7502c]
lea edx, [0x86cc80]
mov dword [esp], edx
mov dword [esp + 4], eax
lea eax, [esp + 0x370]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004cea30
mov eax, dword [esp + 0x91c]
cmp dword [eax + 0x34], 1
jg 0x6acb1e
mov ecx, dword [esp + 0xb0]
test ecx, ecx
jle 0x6acb15
cmp dword [eax + 0x34], 1
jg 0x6aca02
lea eax, [esp + 0x164]
mov dword [esp], eax
lea eax, [0x7e5939]
mov dword [esp + 4], eax
mov dword [esp + 8], 0xa
lea eax, [0x7e090c]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 3
call fcn.004465b0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call fcn.004ce820
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00408cf0
mov eax, dword [esp + 8]
mov dword [esp + 0x310], 0
mov dword [esp + 0x314], 0
lea ecx, [0x7878a0]
mov dword [esp + 0x310], ecx
mov dword [esp + 0x314], eax
mov eax, dword [0xa7502c]
lea edx, [0x86cc80]
mov dword [esp], edx
mov dword [esp + 4], eax
lea eax, [esp + 0x310]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004ce8d0
mov eax, dword [esp + 0x64]
lea ecx, [eax + 0x1c]
mov dword [esp + 0x80], ecx
mov edx, dword [esp + 0xb0]
mov ebx, dword [esp + 0x270]
xor ebp, ebp
xor esi, esi
jmp 0x6ab30d
add ebx, 0x38
mov esi, ecx
mov ecx, dword [esp + 0x80]
mov dword [esp + 0x2a8], ebx
mov dword [esp + 0x70], ebp
xchg esi, eax
mov byte [esp + 0x2d], al
xchg esi, eax
lea edi, [esp + 0x4a8]
mov esi, ebx
call fcn.0045ca54
lea edi, [esp + 0x470]
lea esi, [esp + 0x4a8]
call fcn.0045ca54
mov ecx, dword [esp + 0x49c]
cmp dword [esp + 0x4a0], 4
jne 0x6ab917
cmp dword [ecx], 0x65757274
jne 0x6ab917
movzx ecx, byte [esp + 0x2d]
inc ebp
cmp edx, ebp
jg 0x6ab301
mov ecx, dword [esp + 0x91c]
mov edx, dword [ecx + 0x14]
test edx, edx
jle 0x6ab7d2
lea eax, [0x7e0906]
mov dword [esp], eax
mov dword [esp + 4], 3
mov dword [esp + 8], 0xa
call fcn.004e2940
mov eax, dword [esp + 0xc]
mov dword [esp + 0x2ac], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0xb0], ecx
lea edx, [0x7e0906]
mov dword [esp], edx
mov dword [esp + 4], 3
mov edx, dword [esp + 0x64]
lea ebx, [edx + 0x11]
mov dword [esp + 8], ebx
call fcn.004e2940
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp], 0
mov edx, dword [esp + 0x2ac]
mov dword [esp + 4], edx
mov edx, dword [esp + 0xb0]
mov dword [esp + 8], edx
lea edx, [0x7e0912]
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], ecx
call fcn.00446610
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00408cf0
mov eax, dword [esp + 8]
mov dword [esp + 0x2e0], 0
mov dword [esp + 0x2e4], 0
lea ecx, [0x7878a0]
mov dword [esp + 0x2e0], ecx
mov dword [esp + 0x2e4], eax
mov eax, dword [0xa7502c]
lea edx, [0x86cc80]
mov dword [esp], edx
mov dword [esp + 4], eax
lea eax, [esp + 0x2e0]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004cea30
lea eax, [esp + 0xc4]
mov dword [esp], eax
lea eax, [0x7e594d]
mov dword [esp + 4], eax
mov dword [esp + 8], 0xa
lea eax, [0x7e090c]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 3
call fcn.004465b0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call fcn.004ce820
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00408cf0
mov eax, dword [esp + 8]
mov dword [esp + 0x2d8], 0
mov dword [esp + 0x2dc], 0
lea ecx, [0x7878a0]
mov dword [esp + 0x2d8], ecx
mov dword [esp + 0x2dc], eax
mov eax, dword [0xa7502c]
lea edx, [0x86cc80]
mov dword [esp], edx
mov dword [esp + 4], eax
lea eax, [esp + 0x2d8]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004ce8d0
mov eax, dword [esp + 0x91c]
mov ecx, dword [eax + 0x10]
mov dword [esp + 0x2a4], ecx
mov eax, dword [eax + 0x14]
mov dword [esp + 0xb0], eax
xor edx, edx
jmp 0x6ab592
mov ebx, dword [esp + 0x74]
lea edx, [ebx + 1]
mov eax, dword [esp + 0xb0]
mov ecx, dword [esp + 0x2a4]
cmp eax, edx
jle 0x6ab7d2
mov dword [esp + 0x74], edx
lea ebx, [ecx + edx*8]
mov ebp, dword [ebx]
mov ebx, dword [ebx + 4]
test edx, edx
jne 0x6ab693
mov dword [esp + 0x390], 0
mov dword [esp + 0x394], 0
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.00408cf0
mov eax, dword [esp + 8]
lea ecx, [0x7878a0]
mov dword [esp + 0x390], ecx
mov dword [esp + 0x394], eax
lea eax, [0x7e0591]
mov dword [esp], eax
mov dword [esp + 4], 3
lea edx, [esp + 0x390]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004ce820
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00408cf0
mov eax, dword [esp + 8]
mov dword [esp + 0x2d0], 0
mov dword [esp + 0x2d4], 0
lea ecx, [0x7878a0]
mov dword [esp + 0x2d0], ecx
mov dword [esp + 0x2d4], eax
mov eax, dword [0xa7502c]
lea edx, [0x86cc80]
mov dword [esp], edx
mov dword [esp + 4], eax
lea eax, [esp + 0x2d0]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004cea30
jmp 0x6ab57d
mov dword [esp + 0x78], ebx
mov dword [esp + 0x274], ebp
mov dword [esp + 0x398], 0
mov dword [esp + 0x39c], 0
mov dword [esp + 0x3a0], 0
mov dword [esp + 0x3a4], 0
lea eax, [0x7e090c]
mov dword [esp], eax
mov dword [esp + 4], 3
call fcn.00408cf0
mov eax, dword [esp + 8]
lea ecx, [0x7878a0]
mov dword [esp + 0x398], ecx
mov dword [esp + 0x39c], eax
mov eax, dword [esp + 0x274]
mov dword [esp], eax
mov eax, dword [esp + 0x78]
mov dword [esp + 4], eax
call fcn.00408cf0
mov eax, dword [esp + 8]
lea ecx, [0x7878a0]
mov dword [esp + 0x3a0], ecx
mov dword [esp + 0x3a4], eax
lea eax, [0x7e9015]
mov dword [esp], eax
mov dword [esp + 4], 0xf
lea edx, [esp + 0x398]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004ce820
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00408cf0
mov eax, dword [esp + 8]
mov dword [esp + 0x2c8], 0
mov dword [esp + 0x2cc], 0
lea ecx, [0x7878a0]
mov dword [esp + 0x2c8], ecx
mov dword [esp + 0x2cc], eax
mov eax, dword [0xa7502c]
lea edx, [0x86cc80]
mov dword [esp], edx
mov dword [esp + 4], eax
lea eax, [esp + 0x2c8]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004cea30
jmp 0x6ab57d
lea eax, str.________._012456:_____BCFLMNOPSUZ___n_r_t
mov dword [esp], eax
mov dword [esp + 4], 1
mov dword [esp + 8], 0xa
call fcn.004e2940
mov eax, dword [esp + 0xc]
mov dword [esp + 0x2ac], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0xb0], ecx
lea edx, str.________._012456:_____BCFLMNOPSUZ___n_r_t
mov dword [esp], edx
mov dword [esp + 4], 1
mov edx, dword [esp + 0x64]
add edx, 0x11
mov dword [esp + 8], edx
call fcn.004e2940
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp], 0
mov edx, dword [esp + 0x2ac]
mov dword [esp + 4], edx
mov edx, dword [esp + 0xb0]
mov dword [esp + 8], edx
lea edx, [0x7e090c]
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], ecx
call fcn.00446610
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00408cf0
mov eax, dword [esp + 8]
mov dword [esp + 0x2c0], 0
mov dword [esp + 0x2c4], 0
lea ecx, [0x7878a0]
mov dword [esp + 0x2c0], ecx
mov dword [esp + 0x2c4], eax
mov eax, dword [0xa7502c]
lea ecx, [0x86cc80]
mov dword [esp], ecx
mov dword [esp + 4], eax
lea eax, [esp + 0x2c0]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004cea30
mov eax, dword [0xa7502c]
lea ecx, [0x86cc80]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call fcn.004cea30
add esp, 0x918
ret
mov eax, dword [esp + 0x68]
neg eax
mov dword [esp], eax
sar eax, 0x1f
mov dword [esp + 4], eax
mov dword [esp + 8], 0xa
call fcn.0046ebd0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x248], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x34], ecx
mov dword [esp + 0x390], 0
mov dword [esp + 0x394], 0
mov edx, dword [esp + 0x470]
mov ebx, dword [esp + 0x474]
mov dword [esp], edx
mov dword [esp + 4], ebx
call fcn.00408cf0
mov eax, dword [esp + 8]
lea ecx, [0x7878a0]
mov dword [esp + 0x390], ecx
mov dword [esp + 0x394], eax
lea eax, [esp + 0x144]
mov dword [esp], eax
lea eax, [0x7e03c8]
mov dword [esp + 4], eax
mov dword [esp + 8], 1
mov edx, dword [esp + 0x248]
mov dword [esp + 0xc], edx
mov edx, dword [esp + 0x34]
mov dword [esp + 0x10], edx
lea edx, [0x7e03f8]
mov dword [esp + 0x14], edx
mov dword [esp + 0x18], 1
call fcn.00446610
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
mov dword [esp], eax
mov dword [esp + 4], ecx
lea eax, [esp + 0x390]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004ce820
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x470], eax
mov dword [esp + 0x474], ecx
mov dword [esp], 0
lea eax, str.________._012456:_____BCFLMNOPSUZ___n_r_t
mov dword [esp + 4], eax
mov dword [esp + 8], 1
mov ecx, dword [esp + 0x470]
mov edx, dword [esp + 0x474]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], edx
call fcn.004465b0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x470], ecx
mov dword [esp + 0x474], eax
mov ecx, dword [esp + 0x47c]
add eax, ecx
add eax, dword [esp + 0x484]
add eax, dword [esp + 0x48c]
add eax, 0x17
mov dword [esp + 0x6c], eax
mov ecx, dword [esp + 0x70]
test ecx, ecx
jne 0x6ac03c
lea edi, [esp + 0x818]
xor eax, eax
call fcn.0045c5be
lea ecx, [0x7e091f]
mov dword [esp + 0x818], ecx
mov dword [esp + 0x81c], 4
lea edx, [0x7e090c]
mov dword [esp + 0x820], edx
mov dword [esp + 0x824], 3
mov dword [esp + 0x828], ecx
mov dword [esp + 0x82c], 4
mov dword [esp + 0x830], edx
mov dword [esp + 0x834], 3
mov dword [esp + 0x838], ecx
mov dword [esp + 0x83c], 4
mov dword [esp + 0x840], edx
mov dword [esp + 0x844], 3
mov dword [esp + 0x848], ecx
mov dword [esp + 0x84c], 4
mov dword [esp + 0x850], edx
mov dword [esp + 0x854], 3
lea ebx, [0x7e0591]
mov dword [esp + 0x858], ebx
mov dword [esp + 0x85c], 3
lea edi, [esp + 0x3e0]
call fcn.0045c5c6
mov ecx, dword [esp + 0x470]
mov ebp, dword [esp + 0x474]
mov dword [esp], ecx
mov dword [esp + 4], ebp
call fcn.00408cf0
mov ecx, dword [esp + 8]
lea edx, [0x7878a0]
mov dword [esp + 0x3e0], edx
mov dword [esp + 0x3e4], ecx
mov ecx, dword [esp + 0x478]
mov ebx, dword [esp + 0x47c]
mov dword [esp], ecx
mov dword [esp + 4], ebx
call fcn.00408cf0
mov ecx, dword [esp + 8]
lea edx, [0x7878a0]
mov dword [esp + 0x3e8], edx
mov dword [esp + 0x3ec], ecx
mov ecx, dword [esp + 0x480]
mov ebx, dword [esp + 0x484]
mov dword [esp], ecx
mov dword [esp + 4], ebx
call fcn.00408cf0
mov ecx, dword [esp + 8]
lea edx, [0x7878a0]
mov dword [esp + 0x3f0], edx
mov dword [esp + 0x3f4], ecx
mov ecx, dword [esp + 0x488]
mov ebx, dword [esp + 0x48c]
mov dword [esp], ecx
mov dword [esp + 4], ebx
call fcn.00408cf0
mov ecx, dword [esp + 8]
lea edx, [0x7878a0]
mov dword [esp + 0x3f8], edx
mov dword [esp + 0x3fc], ecx
mov ecx, dword [esp + 0x494]
mov ebx, dword [esp + 0x498]
mov dword [esp], ecx
mov dword [esp + 4], ebx
call fcn.00408cf0
mov ecx, dword [esp + 8]
lea edx, [0x7878a0]
mov dword [esp + 0x400], edx
mov dword [esp + 0x404], ecx
lea ecx, [esp + 0x124]
mov dword [esp], ecx
lea ecx, [esp + 0x818]
mov dword [esp + 4], ecx
mov dword [esp + 8], 9
mov dword [esp + 0xc], 9
call fcn.00446380
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov dword [esp], ecx
mov dword [esp + 4], edx
lea ecx, [esp + 0x3e0]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 5
mov dword [esp + 0x10], 5
call fcn.004ce820
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov dword [esp], ecx
mov dword [esp + 4], edx
call fcn.00408cf0
mov ecx, dword [esp + 8]
mov dword [esp + 0x308], 0
mov dword [esp + 0x30c], 0
lea edx, [0x7878a0]
mov dword [esp + 0x308], edx
mov dword [esp + 0x30c], ecx
mov ecx, dword [0xa7502c]
lea ebx, [0x86cc80]
mov dword [esp], ebx
mov dword [esp + 4], ecx
lea ecx, [esp + 0x308]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004cea30
mov ecx, dword [esp + 0x474]
lea edx, [0x7e0906]
mov dword [esp], edx
mov dword [esp + 4], 3
mov dword [esp + 8], ecx
call fcn.004e2940
mov ecx, dword [esp + 0x10]
mov dword [esp + 0xac], ecx
mov edx, dword [esp + 0xc]
mov dword [esp + 0x2ac], edx
mov ebx, dword [esp + 0x47c]
lea ebp, [0x7e0906]
mov dword [esp], ebp
mov dword [esp + 4], 3
add ebx, 2
mov dword [esp + 8], ebx
call fcn.004e2940
mov ecx, dword [esp + 0x10]
mov dword [esp + 0xa8], ecx
mov edx, dword [esp + 0xc]
mov dword [esp + 0x2a0], edx
mov ebx, dword [esp + 0x484]
lea ebp, [0x7e0906]
mov dword [esp], ebp
mov dword [esp + 4], 3
add ebx, 2
mov dword [esp + 8], ebx
call fcn.004e2940
mov ecx, dword [esp + 0x10]
mov dword [esp + 0xa4], ecx
mov edx, dword [esp + 0xc]
mov dword [esp + 0x29c], edx
mov ebx, dword [esp + 0x48c]
lea ebp, [0x7e0906]
mov dword [esp], ebp
mov dword [esp + 4], 3
add ebx, 2
mov dword [esp + 8], ebx
call fcn.004e2940
mov ecx, dword [esp + 0x10]
mov dword [esp + 0xa0], ecx
mov edx, dword [esp + 0xc]
mov dword [esp + 0x298], edx
lea ebx, [0x7e0906]
mov dword [esp], ebx
mov dword [esp + 4], 3
mov ebp, dword [esp + 0x80]
mov esi, dword [esp + 0x6c]
sub ebp, esi
mov dword [esp + 8], ebp
call fcn.004e2940
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x294], ecx
mov edx, dword [esp + 0x10]
lea edi, [esp + 0x8b0]
xor eax, eax
call fcn.0045c5b6
lea ecx, [0x7e592f]
mov dword [esp + 0x8b0], ecx
mov dword [esp + 0x8b4], 0xa
lea ebx, [0x7e090c]
mov dword [esp + 0x8b8], ebx
mov dword [esp + 0x8bc], 3
lea ebp, [0x7e03fb]
mov dword [esp + 0x8c0], ebp
mov dword [esp + 0x8c4], 2
mov esi, dword [esp + 0x2ac]
mov dword [esp + 0x8c8], esi
mov esi, dword [esp + 0xac]
mov dword [esp + 0x8cc], esi
lea esi, [0x7e0912]
mov dword [esp + 0x8d0], esi
mov dword [esp + 0x8d4], 3
mov ebp, dword [esp + 0x2a0]
mov dword [esp + 0x8d8], ebp
mov ebp, dword [esp + 0xa8]
mov dword [esp + 0x8dc], ebp
mov dword [esp + 0x8e0], esi
mov dword [esp + 0x8e4], 3
mov ebp, dword [esp + 0x29c]
mov dword [esp + 0x8e8], ebp
mov ebp, dword [esp + 0xa4]
mov dword [esp + 0x8ec], ebp
mov dword [esp + 0x8f0], esi
mov dword [esp + 0x8f4], 3
mov ebp, dword [esp + 0x298]
mov dword [esp + 0x8f8], ebp
mov ebp, dword [esp + 0xa0]
mov dword [esp + 0x8fc], ebp
mov dword [esp + 0x900], esi
mov dword [esp + 0x904], 3
mov ebp, dword [esp + 0x294]
mov dword [esp + 0x908], ebp
mov dword [esp + 0x90c], edx
mov dword [esp + 0x910], 0
mov dword [esp + 0x914], 0
mov dword [esp], 0
lea edx, [esp + 0x8b0]
mov dword [esp + 4], edx
mov dword [esp + 8], 0xd
mov dword [esp + 0xc], 0xd
call fcn.00446380
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov dword [esp], ecx
mov dword [esp + 4], edx
call fcn.00408cf0
mov ecx, dword [esp + 8]
mov dword [esp + 0x300], 0
mov dword [esp + 0x304], 0
lea edx, [0x7878a0]
mov dword [esp + 0x300], edx
mov dword [esp + 0x304], ecx
mov ecx, dword [0xa7502c]
lea ebx, [0x86cc80]
mov dword [esp], ebx
mov dword [esp + 4], ecx
lea ecx, [esp + 0x300]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004cea30
movzx eax, byte [esp + 0x2d]
mov edx, dword [esp + 0xb0]
mov ebx, dword [esp + 0x2a8]
mov ebp, dword [esp + 0x70]
mov ecx, eax
mov eax, dword [esp + 0x64]
jmp 0x6ab365
mov eax, dword [esp + 0x494]
mov ecx, dword [esp + 0x498]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.004e37e0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
cmp eax, 0xa
je 0x6ac60d
movzx ecx, byte [esp + 0x2d]
test cl, cl
je 0x6ac33f
lea edi, [esp + 0x818]
xor eax, eax
call fcn.0045c5be
lea ecx, [0x7e9bfb]
mov dword [esp + 0x818], ecx
mov dword [esp + 0x81c], 0x10
lea edx, [0x7e090c]
mov dword [esp + 0x820], edx
mov dword [esp + 0x824], 3
lea ebx, [0x7e091f]
mov dword [esp + 0x828], ebx
mov dword [esp + 0x82c], 4
mov dword [esp + 0x830], edx
mov dword [esp + 0x834], 3
mov dword [esp + 0x838], ebx
mov dword [esp + 0x83c], 4
mov dword [esp + 0x840], edx
mov dword [esp + 0x844], 3
mov dword [esp + 0x848], ebx
mov dword [esp + 0x84c], 4
mov dword [esp + 0x850], edx
mov dword [esp + 0x854], 3
lea ebp, [0x7e0591]
mov dword [esp + 0x858], ebp
mov dword [esp + 0x85c], 3
lea edi, [esp + 0x408]
call fcn.0045c5c4
mov dword [esp], edx
mov dword [esp + 4], 3
call fcn.00408cf0
mov ecx, dword [esp + 8]
lea edx, [0x7878a0]
mov dword [esp + 0x408], edx
mov dword [esp + 0x40c], ecx
mov ecx, dword [esp + 0x470]
mov ebx, dword [esp + 0x474]
mov dword [esp], ecx
mov dword [esp + 4], ebx
call fcn.00408cf0
mov ecx, dword [esp + 8]
lea edx, [0x7878a0]
mov dword [esp + 0x410], edx
mov dword [esp + 0x414], ecx
mov ecx, dword [esp + 0x478]
mov ebx, dword [esp + 0x47c]
mov dword [esp], ecx
mov dword [esp + 4], ebx
call fcn.00408cf0
mov ecx, dword [esp + 8]
lea edx, [0x7878a0]
mov dword [esp + 0x418], edx
mov dword [esp + 0x41c], ecx
mov ecx, dword [esp + 0x480]
mov ebx, dword [esp + 0x484]
mov dword [esp], ecx
mov dword [esp + 4], ebx
call fcn.00408cf0
mov ecx, dword [esp + 8]
lea edx, [0x7878a0]
mov dword [esp + 0x420], edx
mov dword [esp + 0x424], ecx
mov ecx, dword [esp + 0x488]
mov ebx, dword [esp + 0x48c]
mov dword [esp], ecx
mov dword [esp + 4], ebx
call fcn.00408cf0
mov ecx, dword [esp + 8]
lea edx, [0x7878a0]
mov dword [esp + 0x428], edx
mov dword [esp + 0x42c], ecx
mov ecx, dword [esp + 0x494]
mov ebx, dword [esp + 0x498]
mov dword [esp], ecx
mov dword [esp + 4], ebx
call fcn.00408cf0
mov ecx, dword [esp + 8]
lea edx, [0x7878a0]
mov dword [esp + 0x430], edx
mov dword [esp + 0x434], ecx
lea ecx, [esp + 0x104]
mov dword [esp], ecx
lea ecx, [esp + 0x818]
mov dword [esp + 4], ecx
mov dword [esp + 8], 9
mov dword [esp + 0xc], 9
call fcn.00446380
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov dword [esp], ecx
mov dword [esp + 4], edx
lea ecx, [esp + 0x408]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 6
mov dword [esp + 0x10], 6
call fcn.004ce820
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov dword [esp], ecx
mov dword [esp + 4], edx
call fcn.00408cf0
mov ecx, dword [esp + 8]
mov dword [esp + 0x2f0], 0
mov dword [esp + 0x2f4], 0
lea edx, [0x7878a0]
mov dword [esp + 0x2f0], edx
mov dword [esp + 0x2f4], ecx
mov ecx, dword [0xa7502c]
lea ebx, [0x86cc80]
mov dword [esp], ebx
mov dword [esp + 4], ecx
lea ecx, [esp + 0x2f0]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004cea30
xor eax, eax
jmp 0x6ac01f
lea edi, [esp + 0x818]
xor eax, eax
call fcn.0045c5be
lea ecx, [0x7e9beb]
mov dword [esp + 0x818], ecx
mov dword [esp + 0x81c], 0x10
lea edx, [0x7e090c]
mov dword [esp + 0x820], edx
mov dword [esp + 0x824], 3
lea ebx, [0x7e091f]
mov dword [esp + 0x828], ebx
mov dword [esp + 0x82c], 4
mov dword [esp + 0x830], edx
mov dword [esp + 0x834], 3
mov dword [esp + 0x838], ebx
mov dword [esp + 0x83c], 4
mov dword [esp + 0x840], edx
mov dword [esp + 0x844], 3
mov dword [esp + 0x848], ebx
mov dword [esp + 0x84c], 4
mov dword [esp + 0x850], edx
mov dword [esp + 0x854], 3
lea ebp, [0x7e0591]
mov dword [esp + 0x858], ebp
mov dword [esp + 0x85c], 3
lea edi, [esp + 0x408]
call fcn.0045c5c4
mov dword [esp], edx
mov dword [esp + 4], 3
call fcn.00408cf0
mov ecx, dword [esp + 8]
lea edx, [0x7878a0]
mov dword [esp + 0x408], edx
mov dword [esp + 0x40c], ecx
mov ecx, dword [esp + 0x470]
mov ebx, dword [esp + 0x474]
mov dword [esp], ecx
mov dword [esp + 4], ebx
call fcn.00408cf0
mov ecx, dword [esp + 8]
lea edx, [0x7878a0]
mov dword [esp + 0x410], edx
mov dword [esp + 0x414], ecx
mov ecx, dword [esp + 0x478]
mov ebx, dword [esp + 0x47c]
mov dword [esp], ecx
mov dword [esp + 4], ebx
call fcn.00408cf0
mov ecx, dword [esp + 8]
lea edx, [0x7878a0]
mov dword [esp + 0x418], edx
mov dword [esp + 0x41c], ecx
mov ecx, dword [esp + 0x480]
mov ebx, dword [esp + 0x484]
mov dword [esp], ecx
mov dword [esp + 4], ebx
call fcn.00408cf0
mov ecx, dword [esp + 8]
lea edx, [0x7878a0]
mov dword [esp + 0x420], edx
mov dword [esp + 0x424], ecx
mov ecx, dword [esp + 0x488]
mov ebx, dword [esp + 0x48c]
mov dword [esp], ecx
mov dword [esp + 4], ebx
call fcn.00408cf0
mov ecx, dword [esp + 8]
lea edx, [0x7878a0]
mov dword [esp + 0x428], edx
mov dword [esp + 0x42c], ecx
mov ecx, dword [esp + 0x494]
mov ebx, dword [esp + 0x498]
mov dword [esp], ecx
mov dword [esp + 4], ebx
call fcn.00408cf0
mov ecx, dword [esp + 8]
lea edx, [0x7878a0]
mov dword [esp + 0x430], edx
mov dword [esp + 0x434], ecx
lea ecx, [esp + 0xe4]
mov dword [esp], ecx
lea ecx, [esp + 0x818]
mov dword [esp + 4], ecx
mov dword [esp + 8], 9
mov dword [esp + 0xc], 9
call fcn.00446380
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov dword [esp], ecx
mov dword [esp + 4], edx
lea ecx, [esp + 0x408]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 6
mov dword [esp + 0x10], 6
call fcn.004ce820
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov dword [esp], ecx
mov dword [esp + 4], edx
call fcn.00408cf0
mov ecx, dword [esp + 8]
mov dword [esp + 0x2e8], 0
mov dword [esp + 0x2ec], 0
lea edx, [0x7878a0]
mov dword [esp + 0x2e8], edx
mov dword [esp + 0x2ec], ecx
mov ecx, dword [0xa7502c]
lea ebx, [0x86cc80]
mov dword [esp], ebx
mov dword [esp + 4], ecx
lea ecx, [esp + 0x2e8]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004cea30
movzx eax, byte [esp + 0x2d]
jmp 0x6ac01f
mov dword [esp], ecx
lea ecx, [0x7e5a5b]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.00402950
movzx eax, byte [esp + 0xc]
test al, al
je 0x6ac067
mov eax, dword [esp + 0x70]
cmp eax, 1
jg 0x6ac643
mov eax, 1
jmp 0x6ac01f
mov eax, dword [esp + 0x474]
lea ecx, [0x7e0906]
mov dword [esp], ecx
mov dword [esp + 4], 3
mov dword [esp + 8], eax
call fcn.004e2940
mov eax, dword [esp + 0x10]
mov dword [esp + 0xac], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x2ac], ecx
mov edx, dword [esp + 0x47c]
lea ebx, [0x7e0906]
mov dword [esp], ebx
mov dword [esp + 4], 3
add edx, 2
mov dword [esp + 8], edx
call fcn.004e2940
mov eax, dword [esp + 0x10]
mov dword [esp + 0xa8], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x2a0], ecx
mov edx, dword [esp + 0x484]
lea ebx, [0x7e0906]
mov dword [esp], ebx
mov dword [esp + 4], 3
add edx, 2
mov dword [esp + 8], edx
call fcn.004e2940
mov eax, dword [esp + 0x10]
mov dword [esp + 0xa4], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x29c], ecx
mov edx, dword [esp + 0x48c]
lea ebx, [0x7e0906]
mov dword [esp], ebx
mov dword [esp + 4], 3
add edx, 2
mov dword [esp + 8], edx
call fcn.004e2940
mov eax, dword [esp + 0x10]
mov dword [esp + 0xa0], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x298], ecx
lea edx, [0x7e0906]
mov dword [esp], edx
mov dword [esp + 4], 3
mov ebx, dword [esp + 0x80]
mov ebp, dword [esp + 0x6c]
sub ebx, ebp
mov dword [esp + 8], ebx
call fcn.004e2940
mov eax, dword [esp + 0xc]
mov dword [esp + 0x294], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x9c], ecx
lea edi, [esp + 0x860]
xor eax, eax
call fcn.0045c5bc
lea eax, [0x7e090c]
mov dword [esp], eax
mov dword [esp + 4], 3
call fcn.00408cf0
mov eax, dword [esp + 8]
lea ecx, [0x7878a0]
mov dword [esp + 0x860], ecx
mov dword [esp + 0x864], eax
mov eax, dword [esp + 0x2ac]
mov dword [esp], eax
mov eax, dword [esp + 0xac]
mov dword [esp + 4], eax
call fcn.00408cf0
mov eax, dword [esp + 8]
lea ecx, [0x7878a0]
mov dword [esp + 0x868], ecx
mov dword [esp + 0x86c], eax
lea eax, [0x7e0912]
mov dword [esp], eax
mov dword [esp + 4], 3
call fcn.00408cf0
mov eax, dword [esp + 8]
lea ecx, [0x7878a0]
mov dword [esp + 0x870], ecx
mov dword [esp + 0x874], eax
mov eax, dword [esp + 0x2a0]
mov dword [esp], eax
mov eax, dword [esp + 0xa8]
mov dword [esp + 4], eax
call fcn.00408cf0
mov eax, dword [esp + 8]
lea ecx, [0x7878a0]
mov dword [esp + 0x878], ecx
mov dword [esp + 0x87c], eax
lea eax, [0x7e0912]
mov dword [esp], eax
mov dword [esp + 4], 3
call fcn.00408cf0
mov eax, dword [esp + 8]
lea ecx, [0x7878a0]
mov dword [esp + 0x880], ecx
mov dword [esp + 0x884], eax
mov eax, dword [esp + 0x29c]
mov dword [esp], eax
mov eax, dword [esp + 0xa4]
mov dword [esp + 4], eax
call fcn.00408cf0
mov eax, dword [esp + 8]
lea ecx, [0x7878a0]
mov dword [esp + 0x888], ecx
mov dword [esp + 0x88c], eax
lea eax, [0x7e0912]
mov dword [esp], eax
mov dword [esp + 4], 3
call fcn.00408cf0
mov eax, dword [esp + 8]
lea ecx, [0x7878a0]
mov dword [esp + 0x890], ecx
mov dword [esp + 0x894], eax
mov eax, dword [esp + 0x298]
mov dword [esp], eax
mov eax, dword [esp + 0xa0]
mov dword [esp + 4], eax
call fcn.00408cf0
mov eax, dword [esp + 8]
lea ecx, [0x7878a0]
mov dword [esp + 0x898], ecx
mov dword [esp + 0x89c], eax
lea eax, [0x7e0912]
mov dword [esp], eax
mov dword [esp + 4], 3
call fcn.00408cf0
mov eax, dword [esp + 8]
lea ecx, [0x7878a0]
mov dword [esp + 0x8a0], ecx
mov dword [esp + 0x8a4], eax
mov eax, dword [esp + 0x294]
mov dword [esp], eax
mov eax, dword [esp + 0x9c]
mov dword [esp + 4], eax
call fcn.00408cf0
mov eax, dword [esp + 8]
lea ecx, [0x7878a0]
mov dword [esp + 0x8a8], ecx
mov dword [esp + 0x8ac], eax
lea eax, [0x7f5597]
mov dword [esp], eax
mov dword [esp + 4], 0x20
lea edx, [esp + 0x860]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 0xa
mov dword [esp + 0x10], 0xa
call fcn.004ce820
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00408cf0
mov eax, dword [esp + 8]
mov dword [esp + 0x2f8], 0
mov dword [esp + 0x2fc], 0
lea ecx, [0x7878a0]
mov dword [esp + 0x2f8], ecx
mov dword [esp + 0x2fc], eax
mov eax, dword [0xa7502c]
lea edx, [0x86cc80]
mov dword [esp], edx
mov dword [esp + 4], eax
lea eax, [esp + 0x2f8]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004cea30
mov eax, dword [esp + 0x70]
jmp 0x6ac639
lea eax, [0x7e0906]
mov dword [esp], eax
mov dword [esp + 4], 3
mov dword [esp + 8], 0xa
call fcn.004e2940
mov eax, dword [esp + 0xc]
mov dword [esp + 0x2ac], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0xac], ecx
lea edx, [0x7e0906]
mov dword [esp], edx
mov dword [esp + 4], 3
mov ebx, dword [esp + 0x64]
lea ebp, [ebx + 0x11]
mov dword [esp + 8], ebp
call fcn.004e2940
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp], 0
mov edx, dword [esp + 0x2ac]
mov dword [esp + 4], edx
mov edx, dword [esp + 0xac]
mov dword [esp + 8], edx
lea edx, [0x7e0912]
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], ecx
call fcn.00446610
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00408cf0
mov eax, dword [esp + 8]
mov dword [esp + 0x318], 0
mov dword [esp + 0x31c], 0
lea ecx, [0x7878a0]
mov dword [esp + 0x318], ecx
mov dword [esp + 0x31c], eax
mov eax, dword [0xa7502c]
lea edx, [0x86cc80]
mov dword [esp], edx
mov dword [esp + 4], eax
lea eax, [esp + 0x318]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004cea30
jmp 0x6ab20b
mov eax, dword [esp + 0x64]
jmp 0x6ab36a
lea eax, [esp + 0x224]
mov dword [esp], eax
lea eax, [0x7e5943]
mov dword [esp + 4], eax
mov dword [esp + 8], 0xa
lea eax, [0x7e090c]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 3
call fcn.004465b0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call fcn.004ce820
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00408cf0
mov eax, dword [esp + 8]
mov dword [esp + 0x368], 0
mov dword [esp + 0x36c], 0
lea ecx, [0x7878a0]
mov dword [esp + 0x368], ecx
mov dword [esp + 0x36c], eax
mov eax, dword [0xa7502c]
lea edx, [0x86cc80]
mov dword [esp], edx
mov dword [esp + 4], eax
lea eax, [esp + 0x368]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004ce8d0
mov eax, dword [esp + 0x60]
test eax, eax
jle 0x6adc83
mov ecx, dword [esp + 0x26c]
xor edx, edx
xor ebx, ebx
jmp 0x6acc19
mov ebp, dword [esp + 0x2b4]
add ebp, 0x40
mov edx, ecx
mov ecx, ebp
mov dword [esp + 0x2b4], ecx
lea edi, [esp + 0x718]
mov esi, ecx
call fcn.0045ca40
lea edi, [esp + 0x618]
lea esi, [esp + 0x718]
call fcn.0045ca40
movzx ecx, byte [esp + 0x640]
test cl, cl
je 0x6ad763
lea ecx, [edx + 1]
cmp ecx, eax
jl 0x6acc0b
mov eax, dword [esp + 0x5c]
test eax, eax
jle 0x6accb8
mov ecx, dword [esp + 0x268]
xor edx, edx
jmp 0x6acc79
mov ebp, dword [esp + 0x2b4]
add ebp, 0x40
mov edx, ecx
mov ecx, ebp
mov dword [esp + 0x2b4], ecx
lea edi, [esp + 0x6d8]
mov esi, ecx
call fcn.0045ca40
lea edi, [esp + 0x658]
lea esi, [esp + 0x6d8]
call fcn.0045ca40
movzx ecx, byte [esp + 0x680]
test cl, cl
je 0x6acddb
lea ecx, [edx + 1]
cmp ecx, eax
jl 0x6acc6b
lea eax, str.________._012456:_____BCFLMNOPSUZ___n_r_t
mov dword [esp], eax
mov dword [esp + 4], 1
mov dword [esp + 8], 0xa
call fcn.004e2940
mov eax, dword [esp + 0xc]
mov dword [esp + 0x2ac], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0xac], ecx
lea edx, str.________._012456:_____BCFLMNOPSUZ___n_r_t
mov dword [esp], edx
mov dword [esp + 4], 1
mov ebx, dword [esp + 0x64]
lea ebp, [ebx + 0x11]
mov dword [esp + 8], ebp
call fcn.004e2940
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp], 0
mov edx, dword [esp + 0x2ac]
mov dword [esp + 4], edx
mov edx, dword [esp + 0xac]
mov dword [esp + 8], edx
lea edx, [0x7e090c]
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], ecx
call fcn.00446610
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00408cf0
mov eax, dword [esp + 8]
mov dword [esp + 0x320], 0
mov dword [esp + 0x324], 0
lea ecx, [0x7878a0]
mov dword [esp + 0x320], ecx
mov dword [esp + 0x324], eax
mov eax, dword [0xa7502c]
lea edx, [0x86cc80]
mov dword [esp], edx
mov dword [esp + 4], eax
lea eax, [esp + 0x320]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004cea30
mov ecx, dword [esp + 0xb0]
test ecx, ecx
mov eax, dword [esp + 0x91c]
jmp 0x6ab1fb
mov dword [esp + 0xac], edx
mov byte [esp + 0x2e], bl
mov ecx, dword [esp + 0x660]
mov ebp, dword [esp + 0x664]
movzx esi, byte [esp + 0x681]
xchg esi, eax
test al, al
xchg esi, eax
je 0x6ad6d6
test bl, bl
je 0x6ad4a9
mov dword [esp + 0x94], ebp
mov dword [esp + 0x284], ecx
mov dword [esp + 0x390], 0
mov dword [esp + 0x394], 0
lea eax, [0x7e090c]
mov dword [esp], eax
mov dword [esp + 4], 3
call fcn.00408cf0
mov eax, dword [esp + 8]
lea ecx, [0x7878a0]
mov dword [esp + 0x390], ecx
mov dword [esp + 0x394], eax
lea eax, [0x7e7b0a]
mov dword [esp], eax
mov dword [esp + 4], 0xd
lea edx, [esp + 0x390]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004ce820
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00408cf0
mov eax, dword [esp + 8]
mov dword [esp + 0x340], 0
mov dword [esp + 0x344], 0
lea ecx, [0x7878a0]
mov dword [esp + 0x340], ecx
mov dword [esp + 0x344], eax
mov eax, dword [0xa7502c]
lea edx, [0x86cc80]
mov dword [esp], edx
mov dword [esp + 4], eax
lea eax, [esp + 0x340]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004cea30
mov dword [esp + 0x398], 0
mov dword [esp + 0x39c], 0
mov dword [esp + 0x3a0], 0
mov dword [esp + 0x3a4], 0
lea eax, [0x7e090c]
mov dword [esp], eax
mov dword [esp + 4], 3
call fcn.00408cf0
mov eax, dword [esp + 8]
lea ecx, [0x7878a0]
mov dword [esp + 0x398], ecx
mov dword [esp + 0x39c], eax
mov eax, dword [esp + 0x284]
mov dword [esp], eax
mov eax, dword [esp + 0x94]
mov dword [esp + 4], eax
call fcn.00408cf0
mov eax, dword [esp + 8]
lea ecx, [0x7878a0]
mov dword [esp + 0x3a0], ecx
mov dword [esp + 0x3a4], eax
lea eax, [0x7ea8fb]
mov dword [esp], eax
mov dword [esp + 4], 0x11
lea edx, [esp + 0x398]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004ce820
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00408cf0
mov eax, dword [esp + 8]
mov dword [esp + 0x338], 0
mov dword [esp + 0x33c], 0
lea ecx, [0x7878a0]
mov dword [esp + 0x338], ecx
mov dword [esp + 0x33c], eax
mov eax, dword [0xa7502c]
lea edx, [0x86cc80]
mov dword [esp], edx
mov dword [esp + 4], eax
lea eax, [esp + 0x338]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004cea30
mov dword [esp + 0x390], 0
mov dword [esp + 0x394], 0
lea eax, [0x7e090c]
mov dword [esp], eax
mov dword [esp + 4], 3
call fcn.00408cf0
mov eax, dword [esp + 8]
lea ecx, [0x7878a0]
mov dword [esp + 0x390], ecx
mov dword [esp + 0x394], eax
lea eax, [0x7e7b0a]
mov dword [esp], eax
mov dword [esp + 4], 0xd
lea edx, [esp + 0x390]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004ce820
mov eax, dword [esp + 0x14]
mov dword [esp + 0x2ac], eax
mov ecx, dword [esp + 0x18]
mov dword [esp + 0xa8], ecx
lea edx, [0x7e0906]
mov dword [esp], edx
mov dword [esp + 4], 3
mov ebx, dword [esp + 0x64]
lea ebp, [ebx + 0x10]
mov dword [esp + 8], ebp
call fcn.004e2940
mov dword [esp], 0
mov eax, dword [esp + 0x2ac]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xa8]
mov dword [esp + 8], eax
call fcn.004465b0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00408cf0
mov eax, dword [esp + 8]
mov dword [esp + 0x330], 0
mov dword [esp + 0x334], 0
lea ecx, [0x7878a0]
mov dword [esp + 0x330], ecx
mov dword [esp + 0x334], eax
mov eax, dword [0xa7502c]
lea edx, [0x86cc80]
mov dword [esp], edx
mov dword [esp + 4], eax
lea eax, [esp + 0x330]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004cea30
movzx eax, byte [esp + 0x2e]
mov byte [esp + 0x2f], al
mov ecx, dword [esp + 0x688]
mov edx, dword [esp + 0x68c]
mov ebx, dword [esp + 0x690]
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
call fcn.006ae9e0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
test eax, eax
jle 0x6ad206
mov dword [esp + 0x58], eax
xor edx, edx
jmp 0x6ad1cb
mov ebx, dword [esp + 0x290]
add ebx, 0x40
mov edx, ecx
mov ecx, ebx
mov dword [esp + 0x290], ecx
lea edi, [esp + 0x698]
mov esi, ecx
call fcn.0045ca40
lea edi, [esp + 0x518]
lea esi, [esp + 0x698]
call fcn.0045ca40
movzx ecx, byte [esp + 0x540]
test cl, cl
je 0x6ad21b
lea ecx, [edx + 1]
cmp eax, ecx
jg 0x6ad1bd
mov eax, dword [esp + 0x5c]
mov edx, dword [esp + 0xac]
movzx ebx, byte [esp + 0x2f]
jmp 0x6accb1
mov dword [esp + 0xa8], edx
mov eax, dword [esp + 0x68]
neg eax
mov dword [esp], eax
sar eax, 0x1f
mov dword [esp + 4], eax
mov dword [esp + 8], 0xa
call fcn.0046ebd0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x250], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x38], ecx
mov dword [esp + 0x390], 0
mov dword [esp + 0x394], 0
mov edx, dword [esp + 0x518]
mov ebx, dword [esp + 0x51c]
mov dword [esp], edx
mov dword [esp + 4], ebx
call fcn.00408cf0
mov eax, dword [esp + 8]
lea ecx, [0x7878a0]
mov dword [esp + 0x390], ecx
mov dword [esp + 0x394], eax
lea eax, [esp + 0x184]
mov dword [esp], eax
lea eax, [0x7e03c8]
mov dword [esp + 4], eax
mov dword [esp + 8], 1
mov edx, dword [esp + 0x250]
mov dword [esp + 0xc], edx
mov edx, dword [esp + 0x38]
mov dword [esp + 0x10], edx
lea edx, [0x7e03f8]
mov dword [esp + 0x14], edx
mov dword [esp + 0x18], 1
call fcn.00446610
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
mov dword [esp], eax
mov dword [esp + 4], ecx
lea eax, [esp + 0x390]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004ce820
mov eax, dword [esp + 0x14]
mov dword [esp + 0x2ac], eax
mov ecx, dword [esp + 0x18]
mov dword [esp + 0xa4], ecx
lea edi, [esp + 0x3c0]
xor eax, eax
call fcn.0045c5c8
lea eax, [0x7e090c]
mov dword [esp], eax
mov dword [esp + 4], 3
call fcn.00408cf0
mov eax, dword [esp + 8]
lea ecx, [0x7878a0]
mov dword [esp + 0x3c0], ecx
mov dword [esp + 0x3c4], eax
mov eax, dword [esp + 0x2ac]
mov dword [esp], eax
mov eax, dword [esp + 0xa4]
mov dword [esp + 4], eax
call fcn.00408cf0
mov eax, dword [esp + 8]
lea ecx, [0x7878a0]
mov dword [esp + 0x3c8], ecx
mov dword [esp + 0x3cc], eax
lea eax, [0x7e0906]
mov dword [esp], eax
mov dword [esp + 4], 3
call fcn.00408cf0
mov eax, dword [esp + 8]
lea ecx, [0x7878a0]
mov dword [esp + 0x3d0], ecx
mov dword [esp + 0x3d4], eax
mov eax, dword [esp + 0x520]
mov edx, dword [esp + 0x524]
mov dword [esp], eax
mov dword [esp + 4], edx
call fcn.00408cf0
mov eax, dword [esp + 8]
lea ecx, [0x7878a0]
mov dword [esp + 0x3d8], ecx
mov dword [esp + 0x3dc], eax
lea eax, [0x7ee472]
mov dword [esp], eax
mov dword [esp + 4], 0x16
lea edx, [esp + 0x3c0]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 4
mov dword [esp + 0x10], 4
call fcn.004ce820
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00408cf0
mov eax, dword [esp + 8]
mov dword [esp + 0x328], 0
mov dword [esp + 0x32c], 0
lea ecx, [0x7878a0]
mov dword [esp + 0x328], ecx
mov dword [esp + 0x32c], eax
mov eax, dword [0xa7502c]
lea edx, [0x86cc80]
mov dword [esp], edx
mov dword [esp + 4], eax
lea eax, [esp + 0x328]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004cea30
mov eax, dword [esp + 0x58]
mov edx, dword [esp + 0xa8]
jmp 0x6ad1ff
mov dword [esp + 0x390], 0
mov dword [esp + 0x394], 0
mov dword [esp], ecx
mov dword [esp + 4], ebp
call fcn.00408cf0
mov eax, dword [esp + 8]
lea ecx, [0x7878a0]
mov dword [esp + 0x390], ecx
mov dword [esp + 0x394], eax
lea eax, [0x7e091f]
mov dword [esp], eax
mov dword [esp + 4], 4
lea edx, [esp + 0x390]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004ce820
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00408cf0
mov eax, dword [esp + 8]
mov dword [esp + 0x350], 0
mov dword [esp + 0x354], 0
lea ecx, [0x7878a0]
mov dword [esp + 0x350], ecx
mov dword [esp + 0x354], eax
mov eax, dword [0xa7502c]
lea edx, [0x86cc80]
mov dword [esp], edx
mov dword [esp + 4], eax
lea eax, [esp + 0x350]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004cea30
mov dword [esp + 0x390], 0
mov dword [esp + 0x394], 0
lea eax, [0x7e090c]
mov dword [esp], eax
mov dword [esp + 4], 3
call fcn.00408cf0
mov eax, dword [esp + 8]
lea ecx, [0x7878a0]
mov dword [esp + 0x390], ecx
mov dword [esp + 0x394], eax
lea eax, [0x7e7b0a]
mov dword [esp], eax
mov dword [esp + 4], 0xd
lea edx, [esp + 0x390]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004ce820
mov eax, dword [esp + 0x14]
mov dword [esp + 0x2ac], eax
mov ecx, dword [esp + 0x18]
mov dword [esp + 0xa8], ecx
lea edx, [0x7e0906]
mov dword [esp], edx
mov dword [esp + 4], 3
mov ebx, dword [esp + 0x64]
lea ebp, [ebx + 0x10]
mov dword [esp + 8], ebp
call fcn.004e2940
mov dword [esp], 0
mov eax, dword [esp + 0x2ac]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xa8]
mov dword [esp + 8], eax
call fcn.004465b0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00408cf0
mov eax, dword [esp + 8]
mov dword [esp + 0x348], 0
mov dword [esp + 0x34c], 0
lea ecx, [0x7878a0]
mov dword [esp + 0x348], ecx
mov dword [esp + 0x34c], eax
mov eax, dword [0xa7502c]
lea edx, [0x86cc80]
mov dword [esp], edx
mov dword [esp + 4], eax
lea eax, [esp + 0x348]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004cea30
mov eax, 1
jmp 0x6ad180
mov eax, dword [esp + 0x658]
mov ecx, dword [esp + 0x65c]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.004e37e0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
mov dword [esp], 0
mov edx, dword [esp + 0x660]
mov ebx, dword [esp + 0x664]
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
lea edx, [0x7e03fd]
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], 2
mov dword [esp + 0x14], ecx
mov dword [esp + 0x18], eax
lea eax, [0x7e03cc]
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], 1
call fcn.00446670
mov ecx, dword [esp + 0x24]
mov ebp, dword [esp + 0x28]
mov eax, dword [esp + 0x5c]
mov edx, dword [esp + 0xac]
movzx ebx, byte [esp + 0x2e]
jmp 0x6ace06
mov dword [esp + 0xac], edx
test bl, bl
je 0x6ada19
mov byte [esp + 0x2f], bl
mov eax, dword [esp + 0x68]
neg eax
mov dword [esp], eax
sar eax, 0x1f
mov dword [esp + 4], eax
mov dword [esp + 8], 0xa
call fcn.0046ebd0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x244], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x30], ecx
mov dword [esp + 0x390], 0
mov dword [esp + 0x394], 0
mov edx, dword [esp + 0x618]
mov ebx, dword [esp + 0x61c]
mov dword [esp], edx
mov dword [esp + 4], ebx
call fcn.00408cf0
mov eax, dword [esp + 8]
lea ecx, [0x7878a0]
mov dword [esp + 0x390], ecx
mov dword [esp + 0x394], eax
lea eax, [esp + 0x1c4]
mov dword [esp], eax
lea eax, [0x7e03c8]
mov dword [esp + 4], eax
mov dword [esp + 8], 1
mov edx, dword [esp + 0x244]
mov dword [esp + 0xc], edx
mov edx, dword [esp + 0x30]
mov dword [esp + 0x10], edx
lea edx, [0x7e03f8]
mov dword [esp + 0x14], edx
mov dword [esp + 0x18], 1
call fcn.00446610
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
mov dword [esp], eax
mov dword [esp + 4], ecx
lea eax, [esp + 0x390]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004ce820
mov eax, dword [esp + 0x14]
mov dword [esp + 0x2ac], eax
mov ecx, dword [esp + 0x18]
mov dword [esp + 0xa8], ecx
lea edi, [esp + 0x3a8]
xor eax, eax
call fcn.0045c5ca
lea eax, [0x7e090c]
mov dword [esp], eax
mov dword [esp + 4], 3
call fcn.00408cf0
mov eax, dword [esp + 8]
lea ecx, [0x7878a0]
mov dword [esp + 0x3a8], ecx
mov dword [esp + 0x3ac], eax
mov eax, dword [esp + 0x2ac]
mov dword [esp], eax
mov eax, dword [esp + 0xa8]
mov dword [esp + 4], eax
call fcn.00408cf0
mov eax, dword [esp + 8]
lea ecx, [0x7878a0]
mov dword [esp + 0x3b0], ecx
mov dword [esp + 0x3b4], eax
mov eax, dword [esp + 0x620]
mov edx, dword [esp + 0x624]
mov dword [esp], eax
mov dword [esp + 4], edx
call fcn.00408cf0
mov eax, dword [esp + 8]
lea ecx, [0x7878a0]
mov dword [esp + 0x3b8], ecx
mov dword [esp + 0x3bc], eax
lea eax, [esp + 0x1a4]
mov dword [esp], eax
lea eax, [0x7ea8fb]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x11
lea edx, [0x7e0906]
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], 3
lea ebx, [0x7e0591]
mov dword [esp + 0x14], ebx
mov dword [esp + 0x18], 3
call fcn.00446610
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
mov dword [esp], eax
mov dword [esp + 4], ecx
lea eax, [esp + 0x3a8]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 3
mov dword [esp + 0x10], 3
call fcn.004ce820
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00408cf0
mov eax, dword [esp + 8]
mov dword [esp + 0x358], 0
mov dword [esp + 0x35c], 0
lea ecx, [0x7878a0]
mov dword [esp + 0x358], ecx
mov dword [esp + 0x35c], eax
mov eax, dword [0xa7502c]
lea edx, [0x86cc80]
mov dword [esp], edx
mov dword [esp + 4], eax
lea eax, [esp + 0x358]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004cea30
movzx eax, byte [esp + 0x2f]
mov edx, dword [esp + 0xac]
mov ebx, eax
mov eax, dword [esp + 0x60]
jmp 0x6acc51
mov eax, dword [esp + 0x68]
neg eax
mov dword [esp], eax
sar eax, 0x1f
mov dword [esp + 4], eax
mov dword [esp + 8], 0xa
call fcn.0046ebd0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x24c], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x3c], ecx
mov dword [esp + 0x390], 0
mov dword [esp + 0x394], 0
mov edx, dword [esp + 0x618]
mov ebx, dword [esp + 0x61c]
mov dword [esp], edx
mov dword [esp + 4], ebx
call fcn.00408cf0
mov eax, dword [esp + 8]
lea ecx, [0x7878a0]
mov dword [esp + 0x390], ecx
mov dword [esp + 0x394], eax
lea eax, [esp + 0x204]
mov dword [esp], eax
lea eax, [0x7e03c8]
mov dword [esp + 4], eax
mov dword [esp + 8], 1
mov edx, dword [esp + 0x24c]
mov dword [esp + 0xc], edx
mov edx, dword [esp + 0x3c]
mov dword [esp + 0x10], edx
lea edx, [0x7e03f8]
mov dword [esp + 0x14], edx
mov dword [esp + 0x18], 1
call fcn.00446610
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
mov dword [esp], eax
mov dword [esp + 4], ecx
lea eax, [esp + 0x390]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004ce820
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x398], 0
mov dword [esp + 0x39c], 0
mov dword [esp + 0x3a0], 0
mov dword [esp + 0x3a4], 0
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00408cf0
mov eax, dword [esp + 8]
lea ecx, [0x7878a0]
mov dword [esp + 0x398], ecx
mov dword [esp + 0x39c], eax
mov eax, dword [esp + 0x620]
mov edx, dword [esp + 0x624]
mov dword [esp], eax
mov dword [esp + 4], edx
call fcn.00408cf0
mov eax, dword [esp + 8]
lea ecx, [0x7878a0]
mov dword [esp + 0x3a0], ecx
mov dword [esp + 0x3a4], eax
lea eax, [esp + 0x1e4]
mov dword [esp], eax
lea eax, [0x7e10b7]
mov dword [esp + 4], eax
mov dword [esp + 8], 5
lea edx, [0x7e0906]
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], 3
lea ebx, [0x7e0591]
mov dword [esp + 0x14], ebx
mov dword [esp + 0x18], 3
call fcn.00446610
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
mov dword [esp], eax
mov dword [esp + 4], ecx
lea eax, [esp + 0x398]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004ce820
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00408cf0
mov eax, dword [esp + 8]
mov dword [esp + 0x360], 0
mov dword [esp + 0x364], 0
lea ecx, [0x7878a0]
mov dword [esp + 0x360], ecx
mov dword [esp + 0x364], eax
mov eax, dword [0xa7502c]
lea edx, [0x86cc80]
mov dword [esp], edx
mov dword [esp + 4], eax
lea eax, [esp + 0x360]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004cea30
mov eax, 1
jmp 0x6ada07
mov eax, dword [esp + 0x5c]
test eax, eax
mov ebx, 0
jmp 0x6acc5e
mov ecx, eax
jmp 0x6aabe9
mov ebp, eax
jmp 0x6aabdd
mov ebp, eax
jmp 0x6aabf9
mov ecx, edx
jmp 0x6aab48
mov eax, edx
jmp 0x6aab3c
mov esi, eax
mov eax, edx
jmp 0x6aab54
mov ecx, ebp
jmp 0x6aaac4
mov edx, ebp
jmp 0x6aaab8
mov esi, edx
mov edx, ebp
jmp 0x6aaad0
mov ecx, eax
jmp 0x6aaa1c
mov ebp, eax
jmp 0x6aaa10
mov esi, dword [esp + 0x26c]
mov edi, eax
xor ebp, ebp
xor ecx, ecx
jmp 0x6aaa28
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.006adfd0
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 0x10]
jmp 0x6aa97f
mov dword [esp + 0x7c], eax
mov dword [esp + 0x278], ecx
mov edx, dword [esp + 0x44]
lea ebx, [edx + 1]
mov ebp, dword [esp + 0x48]
cmp ebx, ebp
ja 0x6ade57
mov esi, dword [esp + 0x2b0]
mov dword [esp + 0x258], esi
mov dword [esp + 0x44], ebx
mov ecx, dword [0xa8c6b0]
imul edx, edx, 0x38
add edx, esi
add ebx, eax
mov dword [esp + 0xb0], ebx
test ecx, ecx
jne 0x6ade1d
mov edi, edx
lea esi, [0x872f00]
call fcn.0045ca54
cmp ebp, ebx
jb 0x6adddc
mov ecx, dword [esp + 0x258]
mov edx, dword [esp + 0x44]
cmp edx, ebx
ja 0x6adfb1
mov dword [esp + 0x48], ebp
mov dword [esp + 0x258], ecx
lea ebx, [0x7c4ca0]
mov dword [esp], ebx
sub ebp, edx
xchg ebp, ebx
neg ebx
xchg ebp, ebx
sar ebp, 0x1f
imul edx, edx, 0x38
and edx, ebp
add edx, ecx
mov dword [esp + 4], edx
mov dword [esp + 8], eax
mov edx, dword [esp + 0x278]
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], eax
call fcn.00410ee0
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0xb0]
mov edx, dword [esp + 0x258]
jmp 0x6aa970
lea eax, [0x7c4ca0]
mov dword [esp], eax
mov ecx, dword [esp + 0x258]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x44]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], ebx
call fcn.004431f0
mov ecx, dword [esp + 0x14]
mov ebp, dword [esp + 0x1c]
mov eax, dword [esp + 0x7c]
mov ebx, dword [esp + 0xb0]
jmp 0x6add77
mov dword [esp + 0xa0], ebp
lea eax, [0x7c4ca0]
mov dword [esp], eax
mov dword [esp + 4], edx
lea eax, [0x872f00]
mov dword [esp + 8], eax
call fcn.00410dc0
mov eax, dword [esp + 0x7c]
mov ebx, dword [esp + 0xb0]
mov ebp, dword [esp + 0xa0]
jmp 0x6add6c
lea eax, [0x7c4ca0]
mov dword [esp], eax
mov ecx, dword [esp + 0x2b0]
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], ebx
call fcn.004431f0
mov esi, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ebp, dword [esp + 0x1c]
lea ebx, [eax + 1]
mov eax, dword [esp + 0x7c]
mov ecx, dword [esp + 0x278]
mov edx, dword [esp + 0x44]
jmp 0x6add38
mov edx, ecx
mov ecx, ebx
jmp 0x6aa970
lea ecx, [edx + ebp + 1]
mov dword [esp + 0xac], ecx
cmp eax, ecx
jb 0x6adf27
mov esi, dword [esp + 0x258]
cmp ebx, ecx
ja 0x6adfba
mov dword [esp + 0xb0], eax
mov dword [esp + 0x258], esi
lea edi, [0x7c4ca0]
mov dword [esp], edi
sub eax, ebx
neg eax
sar eax, 0x1f
imul edx, edx, 0x38
add edx, 0x38
and edx, eax
lea eax, [esi + edx]
mov dword [esp + 4], eax
sub ecx, ebx
mov dword [esp + 8], ecx
mov ecx, dword [esp + 0x278]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebp
call fcn.00410ee0
mov eax, dword [esp + 0xb0]
mov ebx, dword [esp + 0xac]
mov ecx, dword [esp + 0x258]
jmp 0x6aa916
mov dword [esp + 0x9c], ebx
lea edx, [0x7c4ca0]
mov dword [esp], edx
mov ebp, dword [esp + 0x258]
mov dword [esp + 4], ebp
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
call fcn.004431f0
mov esi, dword [esp + 0x14]
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0xac]
mov edx, dword [esp + 0xb0]
mov ebx, dword [esp + 0x9c]
mov ebp, dword [esp + 0x7c]
jmp 0x6adebe
mov dword [esp + 0x98], eax
lea eax, [0x7c4ca0]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [0x872ec0]
mov dword [esp + 8], eax
call fcn.00410dc0
mov eax, dword [esp + 0x98]
jmp 0x6aa8f9
mov ecx, eax
xor eax, eax
call fcn.0045c3b0
mov eax, edx
mov ecx, ebx
call fcn.0045c410
mov eax, ebx
call fcn.0045c410
nop
call fcn.0045ade0
jmp fcn.006aa460