Function at 0x6f7e70
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x494]
cmp eax, dword [ecx + 8]
jbe 0x6f91ee
sub esp, 0x514
lea edi, [esp + 0x430]
xor eax, eax
call fcn.0045228e
mov ecx, dword [esp + 0x518]
mov dword [esp + 0x468], ecx
mov edx, dword [esp + 0x51c]
mov dword [esp + 0x46c], edx
lea edi, [esp + 0x110]
call fcn.00452299
lea edi, [esp + 0x4c0]
call fcn.0045228b
lea ecx, [esp + 0x4c0]
mov dword [esp + 0x11c], ecx
call fcn.00441530
mov ecx, dword [esp]
mov dword [esp + 0x118], ecx
mov dword [esp + 0xf0], 0
mov dword [esp + 0xf4], 0
mov dword [esp + 0xf8], 0
lea edi, [esp + 0xfc]
xor eax, eax
call fcn.0045229b
lea ecx, [esp + 8]
mov dword [esp + 0xdc], ecx
mov edx, 1
mov ebx, 1
lea ebp, [esp + 0x430]
xor esi, esi
lea edi, [esp + 0x3c]
xor edx, edx
mov dword [esp + 0xa8], edx
mov edx, 1
jmp 0x6f8032
mov esi, eax
mov eax, dword [esp + 0xcc]
add eax, 0x48
mov ebp, esi
mov esi, edx
mov edx, ebx
mov ebx, ecx
mov ecx, eax
mov dword [esp + 0xcc], ecx
mov dword [esp + 0x98], edx
mov dword [esp + 0x94], ebx
mov dword [esp + 0xd8], ebp
mov dword [esp + 0x90], esi
lea edi, [esp + 0x3e8]
mov esi, ecx
call fcn.004526fc
lea edi, [esp + 0x2c8]
lea esi, [esp + 0x3e8]
call fcn.004526fc
lea ecx, [0x847b40]
mov dword [esp], ecx
lea ecx, [esp + 0x110]
mov dword [esp + 4], ecx
lea ecx, [esp + 0x300]
mov dword [esp + 8], ecx
call fcn.0040b7a0
mov eax, dword [esp + 0xc]
movzx eax, byte [eax]
test al, al
je 0x6f8084
mov eax, dword [esp + 0xd8]
mov ecx, dword [esp + 0x94]
mov edx, dword [esp + 0x90]
mov ebx, dword [esp + 0x98]
inc ebx
mov ebp, dword [esp + 0x50]
cmp ebx, ebp
jl 0x6f7f56
mov ebx, ecx
mov ebp, eax
mov esi, dword [esp + 0x54]
mov edi, dword [esp + 0xd4]
mov eax, dword [esp + 0xd0]
mov dword [esp + 0xa8], eax
xor eax, eax
mov ecx, dword [esp + 0xdc]
test ebx, ebx
jle 0x6f8b19
mov dword [esp + 0x54], edx
mov dword [esp + 0x98], esi
mov dword [esp + 0xd8], edi
mov dword [esp + 0x50], ebx
mov dword [esp + 0xd4], ebp
call fcn.0040b390
mov eax, dword [esp]
mov dword [esp + 0xd0], eax
mov ecx, dword [esp + 0xd4]
xor edx, edx
xor ebx, ebx
mov ebp, dword [esp + 0xd8]
mov esi, dword [esp + 0x98]
jmp 0x6f7f6c
lea eax, [0x847b40]
mov dword [esp], eax
lea ecx, [esp + 0x110]
mov dword [esp + 4], ecx
lea edx, [esp + 0x300]
mov dword [esp + 8], edx
call fcn.0040bdc0
mov eax, dword [esp + 0xc]
mov byte [eax], 1
xor eax, eax
mov ecx, dword [esp + 0x90]
mov edx, dword [esp + 0x94]
mov ebx, dword [esp + 0xd8]
jmp 0x6f80d3
mov ebp, dword [esp + 0x68]
inc ebp
mov ebx, edx
mov edx, eax
mov eax, ebp
mov dword [esp + 0x68], eax
mov dword [esp + 0x94], ecx
mov dword [esp + 0x90], edx
mov dword [esp + 0xd8], ebx
mov ebp, dword [esp + 0x300]
mov esi, dword [esp + 0x304]
mov ebp, dword [ebp + 0x64]
mov dword [esp], esi
call ebp
mov eax, dword [esp + 0x68]
cmp dword [esp + 4], eax
jle 0x6f8aff
mov ecx, dword [esp + 0x300]
mov edx, dword [esp + 0x304]
mov ecx, dword [ecx + 0x2c]
mov dword [esp], edx
mov dword [esp + 4], eax
call ecx
lea edi, [esp + 0x12c]
mov esi, dword [esp + 0xdc]
call fcn.0045272e
mov eax, dword [esp + 0x138]
movzx ecx, byte [esp + 0x15c]
test eax, eax
test cl, cl
jne 0x6f8a5e
test eax, eax
je 0x6f8174
mov eax, dword [esp + 0x90]
mov ecx, dword [esp + 0x94]
mov edx, dword [esp + 0xd8]
jmp 0x6f80c8
mov eax, dword [esp + 0x148]
mov ecx, dword [esp + 0x144]
mov dword [esp], ecx
mov dword [esp + 4], eax
lea eax, [0x8c0105]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 4
call fcn.004779a0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
cmp eax, 1
jne 0x6f81cc
cmp byte [ecx], 0x2d
jne 0x6f81cc
mov eax, dword [esp + 0x90]
mov ecx, dword [esp + 0x94]
mov edx, dword [esp + 0xd8]
jmp 0x6f80c8
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.006fedf0
mov eax, dword [esp + 0x14]
mov dword [esp + 0x4c], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0xa4], ecx
mov edx, dword [esp + 8]
mov dword [esp + 0xb8], edx
mov ebx, dword [esp + 0xc]
mov dword [esp + 0x58], ebx
mov dword [esp], edx
mov dword [esp + 4], ebx
call fcn.006f6e70
movzx eax, byte [esp + 8]
test al, al
je 0x6f8a55
mov eax, dword [esp + 0x58]
mov ecx, dword [esp + 0xb8]
mov dword [esp + 0x58], eax
mov dword [esp + 0xb8], ecx
mov edx, dword [esp + 0x2f8]
lea ebx, [0x843000]
mov dword [esp], ebx
inc edx
mov dword [esp + 0x60], edx
mov dword [esp + 4], edx
mov dword [esp + 8], edx
call fcn.0043d110
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x2f4]
mov edx, dword [esp + 0x2f8]
mov ebx, dword [esp + 0x60]
cmp ebx, edx
jle 0x6f8a4e
mov dword [esp + 0xc8], eax
cmp eax, ecx
je 0x6f828b
mov dword [esp], eax
mov dword [esp + 4], ecx
shl edx, 2
mov dword [esp + 8], edx
call fcn.004529a0
mov eax, dword [esp + 0x2f8]
mov ecx, dword [esp + 0x60]
cmp eax, ecx
jae 0x6f91e8
mov ecx, dword [esp + 0x68]
mov edx, dword [esp + 0xc8]
mov dword [edx + eax*4], ecx
mov eax, dword [esp + 0x13c]
mov dword [esp + 0x74], eax
mov ebx, dword [esp + 0x140]
mov dword [esp + 0xbc], ebx
mov ebp, dword [eax + 0x60]
mov dword [esp], ebx
call ebp
mov eax, dword [esp + 8]
test eax, eax
je 0x6f8a2e
xor eax, eax
test al, al
jne 0x6f8a0e
mov eax, dword [esp + 0xbc]
mov ecx, dword [esp + 0x74]
mov dword [esp + 0xbc], eax
mov dword [esp + 0x74], ecx
mov edx, dword [esp + 0xa4]
mov dword [esp], edx
mov ebx, dword [esp + 0x4c]
mov dword [esp + 4], ebx
lea ebp, [0x8c076d]
mov dword [esp + 8], ebp
mov dword [esp + 0xc], 6
call fcn.006feeb0
movzx eax, byte [esp + 0x10]
test al, al
jne 0x6f89d9
xor eax, eax
mov byte [esp + 0x3e], al
mov ecx, dword [esp + 0x58]
test ecx, ecx
je 0x6f899a
mov edx, 1
test dl, dl
je 0x6f879e
test ecx, ecx
jne 0x6f8790
mov edx, dword [esp + 0x12c]
mov ebx, dword [esp + 0x130]
mov dword [esp + 0xb8], edx
mov dword [esp + 0x8c], ebx
mov eax, dword [esp + 0xa4]
mov dword [esp], eax
mov eax, dword [esp + 0x4c]
mov dword [esp + 4], eax
lea eax, [0x8c1799]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 9
call fcn.006feeb0
movzx eax, byte [esp + 0x10]
lea edi, [esp + 0x238]
lea esi, [0x978320]
call fcn.004526fc
mov ecx, dword [esp + 0xb8]
mov dword [esp + 0x238], ecx
mov ecx, dword [esp + 0x8c]
mov dword [esp + 0x23c], ecx
mov ecx, dword [esp + 0x58]
test ecx, ecx
setne cl
mov byte [esp + 0x260], cl
mov ecx, dword [esp + 0xc8]
mov dword [esp + 0x264], ecx
mov ecx, dword [esp + 0x60]
mov dword [esp + 0x268], ecx
mov dword [esp + 0x26c], ecx
mov ecx, dword [esp + 0x74]
mov dword [esp + 0x270], ecx
mov ecx, dword [esp + 0xbc]
mov dword [esp + 0x274], ecx
mov byte [esp + 0x278], al
movzx eax, byte [esp + 0x3e]
mov byte [esp + 0x279], al
mov dword [esp], 0
mov eax, dword [esp + 0x23c]
mov ecx, dword [esp + 0x238]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.00440740
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x14]
mov dword [esp + 0x240], ecx
mov dword [esp + 0x244], eax
mov dword [esp + 0x248], edx
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], edx
call fcn.006f93e0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x24c], eax
nop
mov dword [esp + 0x100], 0
mov dword [esp + 0x108], 0
mov byte [esp + 0x10c], 0
lea eax, [esp + 0xfc]
mov dword [esp], eax
lea ecx, [0x8bfb2e]
mov dword [esp + 4], ecx
mov dword [esp + 8], 1
call fcn.004e0490
lea eax, [esp + 0xfc]
mov dword [esp], eax
mov ecx, dword [esp + 0x248]
mov edx, dword [esp + 0x244]
mov ebx, dword [esp + 0x240]
mov dword [esp + 4], ebx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ecx
call fcn.006f2ec0
lea eax, [esp + 0xfc]
mov dword [esp], eax
lea ecx, [0x8bfc1c]
mov dword [esp + 4], ecx
mov dword [esp + 8], 2
call fcn.004e0490
mov eax, dword [esp + 0xfc]
mov ecx, dword [esp + 0x108]
mov edx, dword [esp + 0x100]
mov ebx, dword [esp + 0x104]
cmp ecx, edx
ja 0x6f91df
mov dword [esp], 0
sub ebx, ecx
mov ebp, ebx
neg ebx
sar ebx, 0x1f
and ebx, ecx
add eax, ebx
mov dword [esp + 4], eax
sub edx, ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebp
call fcn.004405f0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x258], ecx
mov dword [esp + 0x25c], eax
mov dword [esp], 0
lea eax, [0x8bfb2e]
mov dword [esp + 4], eax
mov dword [esp + 8], 1
mov ecx, dword [esp + 0x23c]
mov edx, dword [esp + 0x238]
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ecx
lea ecx, [0x8bfc1c]
mov dword [esp + 0x14], ecx
mov dword [esp + 0x18], 2
call fcn.004404d0
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x250], ecx
mov dword [esp + 0x254], eax
mov eax, dword [esp + 0xf4]
lea ecx, [eax + 1]
mov edx, dword [esp + 0xf8]
mov ebx, dword [esp + 0xf0]
cmp ecx, edx
ja 0x6f8753
lea ecx, [eax + 1]
mov dword [esp + 0xf4], ecx
lea eax, [eax + eax*8]
mov ecx, dword [0xc6be00]
lea edi, [ebx + eax*8]
test ecx, ecx
jne 0x6f8731
lea esi, [esp + 0x238]
call fcn.004526fc
lea eax, [0x847c00]
mov dword [esp], eax
mov ecx, dword [esp + 0xa8]
mov dword [esp + 4], ecx
lea edx, [esp + 0x300]
mov dword [esp + 8], edx
call fcn.0040b7a0
mov eax, dword [esp + 0xc]
cmp dword [eax], 1
jle 0x6f86bb
mov ecx, dword [esp + 0xf4]
mov edx, dword [esp + 0xf0]
lea eax, [ecx - 1]
cmp eax, ecx
jae 0x6f91da
lea eax, [ecx + ecx*8]
lea esi, [edx + eax*8 - 0x48]
lea edi, [esp + 0x3a0]
call fcn.004526fc
mov eax, dword [esp + 0xf4]
mov ecx, dword [esp + 0xf0]
mov edx, dword [esp + 0xf8]
lea ebx, [eax + 1]
cmp ebx, edx
ja 0x6f86f4
lea edx, [eax + 1]
mov dword [esp + 0xf4], edx
lea eax, [eax + eax*8]
lea edi, [ecx + eax*8]
mov eax, dword [0xc6be00]
test eax, eax
jne 0x6f86d5
lea esi, [esp + 0x3a0]
call fcn.004526fc
mov eax, dword [esp + 0x90]
mov ecx, dword [esp + 0x94]
mov edx, dword [esp + 0xd8]
jmp 0x6f80c8
lea eax, [0x8a1140]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x3a0]
mov dword [esp + 8], eax
call fcn.00410a60
jmp 0x6f86bb
lea ebp, [0x8a1140]
mov dword [esp], ebp
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ebx
call fcn.0043d1d0
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov dword [esp + 0xf8], edx
mov dword [esp + 0xf0], ecx
jmp 0x6f8695
lea eax, [0x8a1140]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x238]
mov dword [esp + 8], eax
call fcn.00410a60
jmp 0x6f8620
lea ebp, [0x8a1140]
mov dword [esp], ebp
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ecx
call fcn.0043d1d0
mov ebx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0xf8], ecx
mov dword [esp + 0xf0], ebx
jmp 0x6f85f6
mov edx, dword [esp + 0xb8]
mov ebx, ecx
jmp 0x6f8364
mov eax, dword [esp + 0x74]
mov dword [esp + 0xe8], eax
mov ecx, dword [esp + 0xbc]
mov dword [esp + 0xec], ecx
lea edx, [0x847c00]
mov dword [esp], edx
mov ebx, dword [esp + 0xd0]
mov dword [esp + 4], ebx
lea ebp, [esp + 0xe8]
mov dword [esp + 8], ebp
call fcn.0040bdc0
mov eax, dword [esp + 0xc]
inc dword [eax]
mov eax, dword [esp + 0x74]
mov dword [esp + 0xe8], eax
mov ecx, dword [esp + 0xbc]
mov dword [esp + 0xec], ecx
lea edx, [0x847c00]
mov dword [esp], edx
mov ebx, dword [esp + 0xd0]
mov dword [esp + 4], ebx
lea ebp, [esp + 0xe8]
mov dword [esp + 8], ebp
call fcn.0040b7a0
mov eax, dword [esp + 0xc]
cmp dword [eax], 1
je 0x6f8849
mov eax, dword [esp + 0xd8]
mov ecx, dword [esp + 0x90]
mov edx, dword [esp + 0x94]
mov ebx, eax
mov eax, ecx
mov ecx, edx
mov edx, ebx
jmp 0x6f80c8
mov eax, dword [esp + 0x74]
mov ecx, dword [eax + 0x60]
mov edx, dword [esp + 0xbc]
mov dword [esp], edx
call ecx
mov eax, dword [esp + 8]
mov ecx, dword [esp + 4]
mov dword [esp + 0xc4], ecx
lea edi, [esp + 0x358]
mov edx, eax
xor eax, eax
call fcn.0045228e
mov ecx, dword [esp + 0xc4]
mov dword [esp + 0x358], ecx
mov dword [esp + 0x35c], edx
mov ecx, dword [esp + 0xc8]
mov dword [esp + 0x384], ecx
mov ecx, dword [esp + 0x60]
mov dword [esp + 0x388], ecx
mov dword [esp + 0x38c], ecx
mov ecx, dword [esp + 0x74]
mov dword [esp + 0x390], ecx
mov ecx, dword [esp + 0xbc]
mov dword [esp + 0x394], ecx
mov ecx, dword [esp + 0x90]
lea edx, [ecx + 1]
mov ebx, dword [esp + 0x94]
cmp edx, ebx
ja 0x6f8958
mov ebp, dword [esp + 0xd8]
lea ecx, [ecx + ecx*8]
lea edi, [ebp + ecx*8]
mov ecx, dword [0xc6be00]
test ecx, ecx
jne 0x6f890d
lea esi, [esp + 0x358]
call fcn.004526fc
mov eax, ebp
mov ecx, edx
mov edx, ebx
jmp 0x6f883c
mov dword [esp + 0xac], ebp
mov dword [esp + 0x88], edx
mov dword [esp + 0x84], ebx
lea eax, [0x8a1140]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x358]
mov dword [esp + 8], eax
call fcn.00410a60
xor eax, eax
mov edx, dword [esp + 0x88]
mov ebx, dword [esp + 0x84]
mov ebp, dword [esp + 0xac]
jmp 0x6f8902
lea eax, [0x8a1140]
mov dword [esp], eax
mov ebp, dword [esp + 0xd8]
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], edx
call fcn.0043d1d0
mov ebp, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
lea edx, [eax + 1]
xor eax, eax
mov ecx, dword [esp + 0x90]
jmp 0x6f88e5
movzx edx, byte [esp + 0x15c]
test dl, dl
jne 0x6f89b0
mov edx, 1
jmp 0x6f8346
mov eax, dword [esp + 0x74]
mov ecx, dword [eax + 0x50]
mov edx, dword [esp + 0xbc]
mov dword [esp], edx
call ecx
cmp dword [esp + 4], 0x19
setne dl
movzx eax, byte [esp + 0x3e]
mov ecx, dword [esp + 0x58]
jmp 0x6f8346
mov eax, dword [esp + 0x74]
mov ecx, dword [eax + 0x50]
mov edx, dword [esp + 0xbc]
mov dword [esp], edx
call ecx
mov eax, dword [esp + 4]
lea ecx, [eax - 1]
cmp ecx, 0xd
ja 0x6f8a02
mov eax, 1
jmp 0x6f8331
cmp eax, 0x18
je 0x6f89f8
xor eax, eax
jmp 0x6f8331
mov eax, dword [esp + 0x74]
mov eax, dword [eax + 0x28]
mov ecx, dword [esp + 0xbc]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 8]
mov ecx, dword [esp + 4]
jmp 0x6f82ee
mov eax, dword [esp + 0x74]
mov ecx, dword [eax + 0x50]
mov edx, dword [esp + 0xbc]
mov dword [esp], edx
call ecx
cmp dword [esp + 4], 0x16
sete al
jmp 0x6f82db
mov edx, ebx
jmp 0x6f826d
xor eax, eax
xor ecx, ecx
jmp 0x6f8222
mov dword [esp + 0x8c], eax
mov eax, dword [esp + 0x13c]
mov dword [esp + 0x40], eax
mov ecx, dword [esp + 0x140]
mov dword [esp + 0x9c], ecx
mov edx, dword [eax + 0x50]
mov dword [esp], ecx
call edx
cmp dword [esp + 4], 0x16
je 0x6f8ad9
mov eax, dword [esp + 0x8c]
test eax, eax
mov eax, dword [esp + 0x9c]
mov ecx, dword [esp + 0x40]
jne 0x6f8ac7
xor eax, eax
test al, al
je 0x6f8174
mov eax, dword [esp + 0x90]
mov ecx, dword [esp + 0x94]
mov edx, dword [esp + 0xd8]
jmp 0x6f80c8
mov ecx, dword [ecx + 0x50]
mov dword [esp], eax
call ecx
cmp dword [esp + 4], 0x19
setne al
jmp 0x6f8aa5
mov eax, dword [esp + 0x40]
mov eax, dword [eax + 0x28]
mov ecx, dword [esp + 0x9c]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 8]
mov ecx, dword [esp + 4]
mov edx, dword [esp + 0x8c]
test edx, edx
jmp 0x6f8aa1
mov eax, dword [esp + 0xd8]
mov ecx, dword [esp + 0x90]
mov edx, dword [esp + 0x94]
jmp 0x6f7ff8
mov eax, dword [esp + 0xf4]
mov ecx, dword [esp + 0xf0]
mov edx, dword [esp + 0xf8]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], edx
call fcn.00408180
mov eax, dword [esp + 0xc]
mov dword [esp + 0xe0], 0
mov dword [esp + 0xe4], 0
lea ecx, [0x6ff140]
mov dword [esp + 0xe0], ecx
lea ecx, [esp + 0xf0]
mov dword [esp + 0xe4], ecx
lea ecx, [0x825160]
mov dword [esp], ecx
mov dword [esp + 4], eax
lea eax, [esp + 0xe0]
mov dword [esp + 8], eax
call fcn.0048d940
mov eax, dword [esp + 0xf8]
mov ecx, dword [esp + 0xf0]
xor edx, edx
xor ebx, ebx
jmp 0x6f8cbb
mov eax, dword [esp + 0x78]
lea esi, [eax + 1]
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x64]
mov edx, dword [esp + 0xb4]
mov eax, dword [esp + 0x48]
mov ecx, edx
mov edx, dword [esp + 0x64]
mov ebx, dword [esp + 0x5c]
mov ebp, dword [esp + 0x94]
mov dword [esp + 0x78], esi
lea ebp, [esi + edx]
mov dword [esp + 0x90], ebp
mov ebx, dword [esp + 0xf4]
mov dword [esp + 0x8c], ebx
mov ebx, dword [esp + 0xf0]
mov dword [esp + 0xcc], ebx
mov ebx, dword [esp + 0x8c]
cmp ebp, ebx
jge 0x6f8c64
jae 0x6f91c8
lea ebx, [ebp + ebp*8]
mov ebp, dword [esp + 0xcc]
lea ebx, [ebp + ebx*8]
lea edi, [esp + 0x1a8]
mov esi, ebx
call fcn.004526fc
mov ecx, dword [esp + 0x1ac]
mov ebx, dword [esp + 0x1a8]
mov ebp, dword [esp + 0x5c]
cmp ecx, ebp
jne 0x6f8c64
mov dword [esp], ebx
mov eax, dword [esp + 0xb4]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00402370
movzx eax, byte [esp + 0xc]
test al, al
jne 0x6f8ba7
mov ebx, dword [esp + 0x78]
cmp ebx, 1
jne 0x6f8db3
mov ecx, dword [esp + 0x98]
lea ebx, [ecx + 1]
mov ebp, dword [esp + 0x48]
cmp ebx, ebp
ja 0x6f8d73
mov eax, dword [esp + 0xd8]
lea ecx, [ecx + ecx*8]
lea edi, [eax + ecx*8]
mov ecx, dword [0xc6be00]
test ecx, ecx
jne 0x6f8d2d
lea esi, [esp + 0x280]
call fcn.004526fc
mov ecx, dword [esp + 0x90]
mov edx, ecx
mov ecx, eax
mov eax, ebp
mov ebp, dword [esp + 0xf4]
mov esi, ebx
mov ebx, dword [esp + 0xf0]
cmp edx, ebp
jge 0x6f8f65
jae 0x6f91d1
mov dword [esp + 0x48], eax
mov dword [esp + 0xd8], ecx
mov dword [esp + 0x98], esi
mov dword [esp + 0x64], edx
lea ebp, [edx + edx*8]
mov dword [esp + 0x94], ebp
lea ebx, [ebx + ebp*8]
lea edi, [esp + 0x280]
mov esi, ebx
call fcn.004526fc
mov ecx, dword [esp + 0x280]
mov dword [esp + 0xb4], ecx
mov ebx, dword [esp + 0x284]
mov dword [esp + 0x5c], ebx
mov esi, 1
jmp 0x6f8bd2
mov dword [esp + 0xa0], eax
mov dword [esp + 0x44], ebx
mov dword [esp + 0x80], ebp
lea eax, [0x8a1140]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x280]
mov dword [esp + 8], eax
call fcn.00410a60
mov eax, dword [esp + 0xa0]
mov ebx, dword [esp + 0x44]
mov ebp, dword [esp + 0x80]
jmp 0x6f8cae
lea eax, [0x8a1140]
mov dword [esp], eax
mov edx, dword [esp + 0xd8]
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], ebx
call fcn.0043d1d0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov ebp, dword [esp + 0x1c]
lea ebx, [ecx + 1]
mov ecx, dword [esp + 0x98]
jmp 0x6f8c8e
mov ebp, dword [esp + 0xf0]
mov edx, dword [esp + 0xf8]
mov ecx, dword [esp + 0x90]
cmp ecx, edx
ja 0x6f91c3
mov eax, dword [esp + 0x64]
cmp eax, ecx
ja 0x6f91be
lea edi, [esp + 0x160]
mov esi, eax
xor eax, eax
call fcn.0045228e
mov ecx, dword [esp + 0x94]
shl ecx, 3
sub edx, esi
neg edx
sar edx, 0x1f
and ecx, edx
lea esi, [ebp + ecx]
cmp ebx, 1
jle 0x6f8f61
mov edx, ebx
mov ebx, dword [ebp + ecx + 0x78]
cmp dword [esi + 0x30], ebx
jne 0x6f8f43
movzx ebx, byte [ebp + ecx + 0x28]
movzx ebp, byte [ebp + ecx + 0x70]
xchg ebp, eax
cmp bl, al
xchg ebp, eax
jne 0x6f8f43
lea edi, [esp + 0x160]
lea esi, [0x978380]
call fcn.004526fc
xor ecx, ecx
mov byte [esp + 0x3f], cl
lea edi, [esp + 0x310]
lea esi, [esp + 0x160]
call fcn.004526fc
movzx ecx, byte [esp + 0x3f]
test cl, cl
je 0x6f8f2c
mov ecx, dword [esp + 0x98]
lea ebx, [ecx + 1]
mov ebp, dword [esp + 0x48]
cmp ebx, ebp
ja 0x6f8eea
mov edx, dword [esp + 0xd8]
mov dword [esp + 0x98], ebx
lea ecx, [ecx + ecx*8]
mov ebx, dword [0xc6be00]
lea edi, [edx + ecx*8]
test ebx, ebx
jne 0x6f8eb3
lea esi, [esp + 0x310]
call fcn.004526fc
mov ecx, dword [esp + 0x98]
mov eax, edx
mov ebx, ecx
jmp 0x6f8cae
mov dword [esp + 0xc0], edx
mov dword [esp + 0x7c], ebp
lea eax, [0x8a1140]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x310]
mov dword [esp + 8], eax
call fcn.00410a60
xor eax, eax
mov edx, dword [esp + 0xc0]
mov ebp, dword [esp + 0x7c]
jmp 0x6f8ea3
lea eax, [0x8a1140]
mov dword [esp], eax
mov edx, dword [esp + 0xd8]
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], ebx
call fcn.0043d1d0
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ebp, dword [esp + 0x1c]
lea ebx, [eax + 1]
xor eax, eax
mov ecx, dword [esp + 0x98]
jmp 0x6f8e80
mov edx, dword [esp + 0xd8]
mov ebp, dword [esp + 0x48]
mov ecx, dword [esp + 0x98]
jmp 0x6f8eaa
test edx, edx
jbe 0x6f91b5
lea edi, [esp + 0x160]
call fcn.004526fc
mov ecx, 1
jmp 0x6f8e43
mov edx, ebx
jmp 0x6f8f43
mov dword [esp + 0xf0], ecx
mov dword [esp + 0xf4], esi
mov dword [esp + 0xf8], eax
mov dword [esp], ecx
mov dword [esp + 4], esi
mov dword [esp + 8], eax
call fcn.00408180
mov eax, dword [esp + 0xc]
lea ecx, [0x9732f0]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0048e4a0
mov eax, dword [esp + 0xf4]
mov dword [esp + 0x98], eax
mov ecx, dword [esp + 0x518]
mov edx, dword [esp + 0x51c]
xor ebx, ebx
jmp 0x6f8fe2
mov ebp, dword [esp + 0x70]
lea ebx, [ebp + 1]
mov ebp, dword [esp + 0x98]
mov esi, dword [esp + 0x518]
mov edi, dword [esp + 0x51c]
mov eax, ebp
mov ecx, esi
mov edx, edi
cmp ebx, eax
jge 0x6f90a1
mov ebp, dword [esp + 0xf4]
mov esi, dword [esp + 0xf0]
cmp ebx, ebp
jae 0x6f91ac
mov dword [esp + 0x70], ebx
mov dword [esp + 0xcc], esi
lea eax, [ebx + ebx*8]
mov dword [esp + 0x94], eax
shl eax, 3
mov dword [esp + 0x90], eax
mov edi, dword [esi + eax + 0x34]
mov ebx, dword [esi + eax + 0x30]
mov eax, dword [esi + eax + 0x2c]
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], eax
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], edi
call fcn.006f6fb0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0xe8], ecx
mov dword [esp + 0xec], eax
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.006f3a20
mov eax, dword [esp + 0x94]
mov ecx, dword [esp + 0xcc]
lea edi, [ecx + eax*8 + 0x44]
mov eax, dword [0xc6be00]
mov edx, dword [esp + 8]
test eax, eax
jne 0x6f9095
mov ebx, dword [esp + 0x90]
mov dword [ecx + ebx + 0x44], edx
jmp 0x6f8fc0
mov eax, edx
call fcn.00451ff0
jmp 0x6f8fc0
mov eax, dword [esp + 0xf4]
lea ecx, [0x848440]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0
call fcn.0040b410
mov eax, dword [esp + 0xc]
mov dword [esp + 0xb0], eax
mov ecx, dword [esp + 0xf4]
mov edx, dword [esp + 0xf0]
test ecx, ecx
jle 0x6f916d
mov dword [esp + 0x98], ecx
xor ebx, ebx
jmp 0x6f9101
mov ebp, dword [esp + 0xcc]
lea edx, [ebp + 0x48]
mov ebx, eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 0xcc], edx
mov dword [esp + 0x6c], ebx
lea edi, [esp + 0x478]
mov esi, edx
call fcn.004526fc
lea edi, [esp + 0x1f0]
lea esi, [esp + 0x478]
call fcn.004526fc
lea ecx, [0x848440]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov ebp, dword [esp + 0x1f4]
mov eax, dword [esp + 0x1f0]
mov dword [esp + 8], eax
mov dword [esp + 0xc], ebp
call fcn.0040ff70
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x6c]
mov dword [eax], ecx
lea eax, [ecx + 1]
mov ecx, dword [esp + 0x98]
cmp eax, ecx
jl 0x6f90ee
mov eax, dword [esp + 0xf4]
mov ecx, dword [esp + 0xf0]
mov edx, dword [esp + 0xf8]
mov dword [esp + 0x520], ecx
mov dword [esp + 0x524], eax
mov dword [esp + 0x528], edx
mov eax, dword [esp + 0xb0]
mov dword [esp + 0x52c], eax
add esp, 0x514
ret
mov eax, ebx
mov ecx, ebp
call fcn.00452070
xor eax, eax
mov ecx, edx
call fcn.00452070
call fcn.004520d0
call fcn.004520b0
mov eax, ebp
mov ecx, ebx
call fcn.00452070
mov eax, edx
mov ecx, ebp
call fcn.00452070
call fcn.00452070
mov eax, ecx
mov ecx, edx
call fcn.004520d0
call fcn.00452070
nop
call fcn.004507b0
jmp fcn.006f7e70