Function at 0x706e80
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x75a928
push eax
mov dword fs:[0], esp
sub esp, 0x6c
push ebx
push ebp
push esi
mov esi, dword [esp + 0x88]
push edi
mov ecx, esi
call fcn.0055a0b0
test eax, eax
je 0x706ee0
mov ecx, esi
call fcn.0055a440
test eax, eax
je 0x706ee0
mov ecx, dword [eax + 0x3c]
test ecx, ecx
je 0x706ee0
call fcn.0062d380
test eax, eax
je 0x706ee0
mov ax, word [eax + 0x1c]
push eax
call fcn.00659140
mov ebp, eax
add esp, 4
test ebp, ebp
mov dword [esp + 0x18], ebp
jne 0x706ef0
mov edx, dword [esi]
mov ecx, esi
call dword [edx + 0xd0]
mov ebp, eax
mov dword [esp + 0x18], ebp
mov ecx, esi
call fcn.0055a440
mov cx, word [esi + 0xfc]
mov eax, dword [eax + 0x3c]
push 1
mov dword [esp + 0x3c], eax
push ecx
call fcn.00659110
mov bx, word [esi + 0x13c]
mov edi, eax
mov eax, dword [esi + 0x138]
add eax, 0xffffffff
add esp, 8
cmp eax, 4
mov dword [esp + 0x1c], edi
mov dword [esp + 0x14], 0
mov dword [esp + 0x24], ebx
ja case.default.0x706f3b
jmp dword [eax*4 + 0x707af8]
mov bp, word [ebp + 0x20]
cmp bp, word [edi + 0x2a]
je 0x706fb9
push 0
push esi
push ebp
call fcn.00703500
add esp, 0xc
test eax, eax
je 0x706fa4
mov ecx, dword [0x912e94]
push eax
call fcn.004668b0
test eax, eax
je 0x706f7a
lea ecx, [eax - 0x18]
test ecx, ecx
je 0x706f7a
mov edx, dword [ecx]
call dword [edx + 0x50]
jmp 0x706f7c
xor eax, eax
mov edx, dword [eax]
push 0
mov ecx, eax
call dword [edx + 0xd4]
push eax
call fcn.00659110
add esp, 8
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x6c]
mov dword fs:[0], ecx
add esp, 0x78
ret
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
mov ecx, dword [esp + 0x6c]
mov dword fs:[0], ecx
add esp, 0x78
ret
mov ecx, edi
call fcn.00664af0
mov ebp, eax
mov eax, dword [ebp]
mov ecx, ebp
mov dword [esp + 0x30], ebp
xor ebx, ebx
call dword [eax + 0x48]
lea ecx, [eax*4 + 4]
push ecx
call fcn.0040fa60
mov edx, dword [ebp]
add esp, 4
mov ecx, ebp
mov dword [esp + 0x28], eax
call dword [edx + 0x48]
lea eax, [eax*4 + 4]
push eax
call fcn.0040fa60
add esp, 4
mov dword [esp + 0x2c], eax
mov dword [esp + 0x24], ebx
jmp 0x707010
mov ebp, dword [esp + 0x30]
lea ebx, [ebx]
cmp dword [esp + 0x24], 1
jg 0x7070f6
mov edx, dword [ebp]
mov ecx, ebp
call dword [edx + 0x2c]
test eax, eax
mov dword [esp + 0x34], eax
je 0x7070de
mov ecx, dword [esp + 0x28]
mov eax, dword [esp + 0x2c]
sub eax, ecx
lea edi, [ecx + ebx*4]
mov dword [esp + 0x3c], eax
mov ecx, dword [esp + 0x30]
mov eax, dword [ecx]
lea edx, [esp + 0x34]
push edx
call dword [eax + 0x34]
mov bp, word [eax]
push 0
push ebp
call fcn.00659110
mov esi, eax
add esp, 8
test esi, esi
je 0x7070d3
mov eax, dword [esi + 0x64]
mov ecx, dword [0x912e94]
push eax
call fcn.004668b0
test eax, eax
je 0x7070d3
lea ecx, [eax - 0x18]
test ecx, ecx
je 0x7070d3
mov edx, dword [ecx]
call dword [edx + 0x50]
test eax, eax
je 0x7070d3
mov cx, word [esi + 0x2a]
mov edx, dword [esp + 0x18]
cmp cx, word [edx + 0x20]
jne 0x7070d3
cmp dword [eax + 0xe4], 0
jne 0x7070d3
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x8c]
push eax
push ebp
push ecx
call fcn.00706d60
add esp, 0xc
test eax, eax
je 0x7070d3
mov edx, dword [esp + 0x38]
push edx
push ebp
call fcn.00702700
mov ecx, dword [esp + 0x44]
mov dword [ecx + edi], eax
add esp, 8
mov dword [edi], esi
add ebx, 1
add edi, 4
cmp dword [esp + 0x34], 0
jne 0x707040
add dword [esp + 0x24], 1
test ebx, ebx
mov edi, dword [esp + 0x1c]
mov esi, dword [esp + 0x8c]
je 0x707006
mov edx, dword [esi]
mov ebp, dword [esp + 0x28]
mov ecx, esi
call dword [edx + 0xdc]
cmp word [edi + 0x2a], ax
jne 0x70712c
mov cx, word [edi + 0x20]
mov eax, dword [esp + 0x38]
push eax
push ecx
call fcn.00702700
mov esi, dword [esp + 0x34]
mov dword [esi + ebx*4], eax
add esp, 8
mov dword [ebp + ebx*4], edi
add ebx, 1
jmp 0x707130
mov esi, dword [esp + 0x2c]
test ebx, ebx
je 0x707157
push ebx
push esi
call fcn.00701e80
add esp, 8
cmp eax, 0xffffffff
jle 0x707157
mov eax, dword [ebp + eax*4]
cmp eax, edi
mov dword [esp + 0x14], eax
jne 0x707157
mov dword [esp + 0x14], 0
push ebp
call fcn.0040fa80
push esi
call fcn.0040fa80
add esp, 8
jmp case.default.0x706f3b
push ebx
call fcn.00659140
mov ecx, dword [0x912e94]
xor edx, edx
add esp, 4
cmp bx, word [ecx + 0x1ac]
lea ebp, [eax + 0x24]
sete dl
mov ecx, ebp
mov dword [esp + 0x2c], ebp
mov dword [esp + 0x3c], edx
mov edx, dword [ebp]
call dword [edx + 0x48]
cmp eax, 1
jne 0x7071a8
cmp word [edi + 0x2a], bx
je case.default.0x706f3b
xor esi, esi
xor bl, bl
mov eax, 1
mov byte [esp + 0x13], bl
mov dword [esp + 0x68], vtable.CBArray_class_CRealm__.0
mov dword [esp + 0x6c], esi
mov dword [esp + 0x70], esi
mov dword [esp + 0x74], eax
mov dword [esp + 0x78], esi
mov dword [esp + 0x84], esi
mov dword [esp + 0x54], vtable.CBArray_long_int_.0
mov dword [esp + 0x58], esi
mov dword [esp + 0x5c], esi
mov dword [esp + 0x60], eax
mov dword [esp + 0x64], esi
mov byte [esp + 0x84], al
mov eax, dword [ebp]
mov ecx, ebp
call dword [eax + 0x2c]
cmp eax, esi
mov dword [esp + 0x38], eax
je 0x70722d
mov esi, dword [esp + 0x18]
mov edx, dword [ebp]
lea eax, [esp + 0x38]
push eax
mov ecx, ebp
call dword [edx + 0x34]
mov ax, word [eax]
mov edx, dword [esi]
mov ecx, esi
push eax
call dword [edx + 0x5c]
or bl, byte [eax + 0x30]
cmp dword [esp + 0x38], 0
jne 0x707207
mov byte [esp + 0x13], bl
mov cx, word [esp + 0x24]
cmp word [edi + 0x2a], cx
jne 0x707386
mov edi, dword [esp + 0x1c]
mov ecx, edi
call fcn.00664af0
mov ecx, edi
mov esi, eax
call fcn.006694b0
mov edi, eax
mov edx, dword [edi]
mov ecx, edi
call dword [edx + 0x48]
mov ebx, eax
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x48]
add ebx, eax
push ebx
lea ecx, [esp + 0x6c]
call fcn.00417450
push ebx
lea ecx, [esp + 0x58]
call fcn.00417450
mov edx, dword [esi]
mov ecx, esi
call dword [edx + 0x2c]
test eax, eax
mov ebx, dword [esp + 0x24]
mov dword [esp + 0x34], eax
je 0x7072c5
jmp 0x707290
mov eax, dword [esi]
lea ecx, [esp + 0x34]
push ecx
mov ecx, esi
call dword [eax + 0x34]
mov ax, word [eax]
push 0
push eax
call fcn.00659110
add esp, 8
test eax, eax
je 0x7072be
cmp word [eax + 0x2a], bx
jne 0x7072be
push eax
lea ecx, [esp + 0x6c]
call fcn.004100e0
cmp dword [esp + 0x34], 0
jne 0x707290
mov edx, dword [edi]
mov ecx, edi
call dword [edx + 0x2c]
test eax, eax
mov dword [esp + 0x30], eax
je 0x707309
mov eax, dword [edi]
lea ecx, [esp + 0x30]
push ecx
mov ecx, edi
call dword [eax + 0x34]
mov ax, word [eax]
push 0
push eax
call fcn.00659110
add esp, 8
test eax, eax
je 0x707302
cmp word [eax + 0x2a], bx
jne 0x707302
push eax
lea ecx, [esp + 0x6c]
call fcn.004100e0
cmp dword [esp + 0x30], 0
jne 0x7072d4
xor edx, edx
cmp dword [esp + 0x78], edx
setne dl
mov edi, edx
test edi, edi
je 0x707386
mov ebx, dword [esp + 0x18]
lea esp, [esp]
mov eax, dword [esp + 0x6c]
lea eax, [eax + edi*4 - 4]
add edi, 1
cmp edi, dword [esp + 0x78]
jbe 0x707333
xor edi, edi
mov ecx, dword [eax]
mov ax, word [ecx + 0x20]
mov edx, dword [ebx]
mov ecx, ebx
push eax
call dword [edx + 0x5c]
mov cl, byte [esp + 0x13]
mov edx, eax
mov al, byte [edx + 0x30]
call fcn.007048c0
mov esi, eax
mov eax, dword [esp + 0x64]
imul esi, dword [edx + 4]
cmp eax, dword [esp + 0x5c]
jb 0x707372
add eax, 1
push eax
mov eax, dword [esp + 0x58]
lea ecx, [esp + 0x58]
call dword [eax + 4]
mov eax, dword [esp + 0x64]
mov ecx, dword [esp + 0x58]
mov dword [ecx + eax*4], esi
add dword [esp + 0x64], 1
test edi, edi
jne 0x707320
mov ebp, dword [esp + 0x2c]
mov dx, word [esp + 0x24]
mov eax, dword [esp + 0x1c]
cmp word [eax + 0x2a], dx
jne 0x7073a0
cmp dword [esp + 0x78], 0
jne 0x7075fb
cmp dword [esp + 0x3c], 0
je 0x7073c3
mov ecx, dword [0x912e94]
mov edx, dword [ecx]
push 0x39e
push 0x8028c4
push 0x3e8
push 0
call dword [edx + 0x40]
mov eax, dword [ebp]
mov ecx, ebp
call dword [eax + 0x48]
mov edi, eax
push edi
lea ecx, [esp + 0x6c]
xor esi, esi
call fcn.00417450
push edi
lea ecx, [esp + 0x58]
call fcn.00417450
mov edx, dword [ebp]
mov ecx, ebp
call dword [edx + 0x2c]
test eax, eax
mov dword [esp + 0x34], eax
je 0x7075fb
mov eax, dword [ebp]
lea ecx, [esp + 0x34]
push ecx
mov ecx, ebp
call dword [eax + 0x34]
mov bx, word [eax]
push 0
push ebx
call fcn.00659110
mov ecx, dword [esp + 0x20]
mov edx, dword [ecx]
add esp, 8
push ebx
mov dword [esp + 0x28], eax
call dword [edx + 0x5c]
mov edi, eax
mov eax, dword [esp + 0x24]
cmp dword [esp + 0x1c], eax
je 0x7075f0
mov ecx, dword [esp + 0x8c]
push 0
push ebx
push ecx
call fcn.00706d60
add esp, 0xc
test eax, eax
je 0x7075f0
mov edx, dword [esp + 0x68]
push esi
lea ecx, [esp + 0x6c]
call dword [edx + 0x14]
mov ecx, dword [esp + 0x24]
mov dword [eax], ecx
mov edx, dword [esp + 0x54]
push esi
lea ecx, [esp + 0x58]
call dword [edx + 0x14]
mov cl, byte [esp + 0x13]
mov ebp, eax
mov al, byte [edi + 0x30]
call fcn.007048c0
mov ecx, eax
imul ecx, dword [edi + 4]
mov eax, 0x51eb851f
imul ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [ebp], eax
mov edx, dword [esp + 0x54]
push esi
lea ecx, [esp + 0x58]
call dword [edx + 0x14]
mov ebp, eax
mov eax, dword [esp + 0x54]
push esi
lea ecx, [esp + 0x58]
call dword [eax + 0x14]
mov ecx, dword [esp + 0x18]
mov bx, word [ecx + 0x20]
mov ecx, dword [esp + 0x24]
mov dword [esp + 0x3c], eax
call fcn.007056a0
mov edx, dword [esp + 0x3c]
mov ecx, eax
imul ecx, dword [edx]
mov eax, 0x66666667
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
add dword [ebp], eax
mov ecx, dword [edi + 0x18]
test ecx, ecx
je 0x70750c
mov edi, dword [edi + 0x10]
lea edx, [edi + edi*2]
lea eax, [edi + edx*8]
add eax, eax
add eax, eax
cdq
idiv ecx
mov edi, eax
cmp edi, 0xfffffed4
jge 0x707504
mov edi, 0xfffffed4
jmp 0x707511
cmp edi, 0x12c
jle 0x707511
mov edi, 0x12c
mov eax, dword [esp + 0x54]
push esi
lea ecx, [esp + 0x58]
call dword [eax + 0x14]
mov eax, dword [eax]
test eax, eax
jge 0x707528
or ebx, 0xffffffff
jmp 0x70752f
xor ebx, ebx
test eax, eax
setne bl
mov edx, dword [esp + 0x54]
push esi
lea ecx, [esp + 0x58]
call dword [edx + 0x14]
mov ecx, dword [eax]
imul ecx, edi
mov eax, 0x51eb851f
imul ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp eax, ebx
jle 0x707557
mov ebx, eax
mov eax, dword [esp + 0x54]
push esi
lea ecx, [esp + 0x58]
call dword [eax + 0x14]
mov ecx, dword [esp + 0x24]
mov dword [eax], ebx
mov edx, dword [ecx + 0x64]
mov ecx, dword [0x912e94]
push edx
call fcn.004668b0
test eax, eax
je 0x70758a
lea ecx, [eax - 0x18]
test ecx, ecx
je 0x70758a
mov eax, dword [ecx]
call dword [eax + 0x50]
jmp 0x70758c
xor eax, eax
mov ecx, dword [eax + 0xe4]
push ecx
mov ecx, dword [0x912e94]
call fcn.004668b0
test eax, eax
je 0x7075e9
lea ecx, [eax - 0x18]
test ecx, ecx
je 0x7075e9
mov edx, dword [ecx]
call dword [edx + 0x28]
test eax, eax
je 0x7075e9
cmp dword [eax + 0x40], 1
jne 0x7075e9
mov ecx, dword [esp + 0x18]
mov cx, word [ecx + 0x20]
cmp word [eax + 0x80], cx
je 0x7075e9
cmp word [eax + 0x82], cx
je 0x7075e9
mov edx, dword [esp + 0x54]
push esi
lea ecx, [esp + 0x58]
call dword [edx + 0x14]
mov ecx, eax
mov eax, dword [ecx]
cdq
sub eax, edx
sar eax, 1
mov dword [ecx], eax
mov ebp, dword [esp + 0x2c]
add esi, 1
cmp dword [esp + 0x34], 0
jne 0x7073f7
mov esi, dword [esp + 0x8c]
movzx eax, word [esi + 0xfc]
mov ecx, dword [esi + 0x1c]
push eax
push ecx
lea edx, [esp + 0x5c]
push edx
call fcn.007022e0
add esp, 0xc
cmp eax, 0xffffffff
jle 0x707636
push eax
mov eax, dword [esp + 0x6c]
lea ecx, [esp + 0x6c]
call dword [eax + 0x14]
mov eax, dword [eax]
test eax, eax
mov dword [esp + 0x14], eax
jne 0x707697
mov ecx, esi
call fcn.0055a0a0
test eax, eax
je 0x707697
mov ax, word [esi + 0x174]
mov ecx, dword [esp + 0x1c]
cmp word [ecx + 0x2a], ax
je 0x707697
push 0
push esi
push eax
call fcn.00703500
mov ecx, dword [0x912e94]
add esp, 0xc
push eax
call fcn.004668b0
test eax, eax
je 0x707697
lea ecx, [eax - 0x18]
test ecx, ecx
je 0x707697
mov edx, dword [ecx]
call dword [edx + 0x50]
test eax, eax
je 0x707697
mov edx, dword [eax]
push 0
mov ecx, eax
call dword [edx + 0xd4]
push eax
call fcn.00659110
add esp, 8
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x58]
test eax, eax
mov byte [esp + 0x84], 0
mov dword [esp + 0x54], vtable.CBArray_long_int_.0
je 0x7076b8
push eax
call fcn.0040fa80
add esp, 4
mov eax, dword [esp + 0x6c]
test eax, eax
mov dword [esp + 0x84], 0xffffffff
mov dword [esp + 0x68], vtable.CBArray_class_CRealm__.0
je case.default.0x706f3b
push eax
call fcn.0040fa80
add esp, 4
jmp case.default.0x706f3b
cmp bx, word [esi + 0xfc]
je 0x707712
push 0
push ebx
push esi
call fcn.00706d60
add esp, 0xc
test eax, eax
je 0x707712
push 0
push ebx
call fcn.00659110
add esp, 8
mov dword [esp + 0x14], eax
jmp case.default.0x706f3b
mov dword [esp + 0x14], 0
jmp case.default.0x706f3b
push 1
push ebx
mov ecx, edi
call fcn.00669720
test eax, eax
jne 0x707807
mov eax, dword [esi]
lea ecx, [esp + 0x3c]
push ecx
mov ecx, esi
call dword [eax + 0x148]
mov edx, dword [ebp + 0x24]
add ebp, 0x24
mov ecx, ebp
mov dword [esp + 0x38], 0
call dword [edx + 0x2c]
test eax, eax
mov dword [esp + 0x34], eax
je case.default.0x706f3b
nop
mov eax, dword [ebp]
lea ecx, [esp + 0x34]
push ecx
mov ecx, ebp
call dword [eax + 0x34]
mov si, word [eax]
push 0
push esi
call fcn.00659110
add esp, 8
mov edi, eax
push 1
push ebx
mov ecx, edi
call fcn.00669720
test eax, eax
je 0x7077f7
mov edx, dword [esp + 0x8c]
push 1
push esi
push edx
call fcn.00706d60
add esp, 0xc
test eax, eax
je 0x7077f7
mov eax, dword [edi + 0x64]
mov ecx, dword [0x912e94]
push eax
call fcn.004668b0
test eax, eax
je 0x7077c3
lea ecx, [eax - 0x18]
test ecx, ecx
je 0x7077c3
mov edx, dword [ecx]
call dword [edx + 0x50]
jmp 0x7077c5
xor eax, eax
mov edx, dword [eax]
lea ecx, [esp + 0x3c]
push ecx
lea ecx, [esp + 0x48]
push ecx
mov ecx, eax
call dword [edx + 0x148]
push eax
call fcn.005451e0
add esp, 8
cmp dword [esp + 0x14], 0
je 0x7077ef
cmp eax, dword [esp + 0x38]
jae 0x7077f7
mov dword [esp + 0x14], edi
mov dword [esp + 0x38], eax
cmp dword [esp + 0x34], 0
jne 0x707760
jmp case.default.0x706f3b
mov ecx, edi
call fcn.00664af0
xor ebx, ebx
mov edi, eax
mov dword [esp + 0x6c], ebx
mov dword [esp + 0x68], vtable.CBSList_class_CRealm__.0
mov dword [esp + 0x74], ebx
mov dword [esp + 0x70], ebx
mov dword [esp + 0x78], ebx
mov ecx, dword [0x912e94]
mov edx, dword [ecx]
mov dword [esp + 0x84], 2
call dword [edx + 0x10]
sub eax, dword [esi + 0x104]
mov ecx, edi
mov dword [esp + 0x3c], eax
mov eax, dword [edi]
call dword [eax + 0x2c]
cmp eax, ebx
mov dword [esp + 0x8c], eax
je 0x7078da
lea esp, [esp]
mov edx, dword [edi]
lea eax, [esp + 0x8c]
push eax
mov ecx, edi
call dword [edx + 0x34]
mov bx, word [eax]
push 0
push ebx
call fcn.00659110
mov ebp, eax
add esp, 8
test ebp, ebp
je 0x7078d0
mov cx, word [ebp + 0x2a]
mov edx, dword [esp + 0x18]
cmp cx, word [edx + 0x20]
jne 0x7078d0
cmp bx, word [esi + 0x102]
jne 0x7078a4
cmp dword [esp + 0x3c], 0xea60
jbe 0x7078d0
mov eax, dword [esp + 0x24]
push 1
push eax
mov ecx, ebp
call fcn.00669720
test eax, eax
je 0x7078d0
push 1
push ebx
push esi
call fcn.00706d60
add esp, 0xc
test eax, eax
je 0x7078d0
push ebp
lea ecx, [esp + 0x6c]
call fcn.005e1ab0
cmp dword [esp + 0x8c], 0
jne 0x707860
cmp dword [esp + 0x6c], 0
je 0x707934
movzx ecx, word [esi + 0x102]
movzx edx, word [esi + 0xfc]
push ecx
push edx
call fcn.00412a00
xor edx, edx
div dword [esp + 0x74]
add esp, 8
lea ecx, [esp + 0x68]
push edx
call fcn.005d3e10
mov esi, dword [eax]
lea ecx, [esp + 0x68]
mov dword [esp + 0x84], 0xffffffff
call fcn.005b5bd0
pop edi
mov eax, esi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x6c]
mov dword fs:[0], ecx
add esp, 0x78
ret
lea ecx, [esp + 0x68]
mov dword [esp + 0x84], 0xffffffff
call fcn.005b5bd0
jmp case.default.0x706f3b
mov eax, dword [esi]
lea ecx, [esp + 0x1c]
push ecx
mov ecx, esi
mov dword [esp + 0x90], 0
call dword [eax + 0x148]
mov ax, word [ebp + 0x20]
cmp ax, word [edi + 0x2a]
je 0x7079c7
push 0
push esi
push eax
call fcn.00703500
mov ecx, dword [0x912e94]
add esp, 0xc
push eax
call fcn.004668b0
test eax, eax
je case.default.0x706f3b
add eax, 0xffffffe8
je case.default.0x706f3b
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x50]
test eax, eax
je case.default.0x706f3b
mov edx, dword [eax]
push 0
mov ecx, eax
call dword [edx + 0xd4]
push eax
call fcn.00659110
add esp, 8
mov dword [esp + 0x14], eax
jmp case.default.0x706f3b
mov ecx, dword [ebp + 0x370]
mov eax, dword [ecx + 8]
add ecx, 8
call dword [eax + 0x2c]
test eax, eax
mov dword [esp + 0x24], eax
je case.default.0x706f3b
mov ecx, dword [ebp + 0x370]
mov edx, dword [ecx + 8]
add ecx, 8
lea eax, [esp + 0x24]
push eax
call dword [edx + 0x34]
mov ecx, dword [eax]
push ecx
mov ecx, dword [0x912e94]
call fcn.004668b0
test eax, eax
je 0x707ad4
add eax, 0xffffffe8
je 0x707ad4
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x24]
mov edi, eax
test edi, edi
je 0x707ad4
mov ax, word [edi + 0xfc]
push 0
push eax
call fcn.00659110
mov ebx, eax
add esp, 8
test ebx, ebx
je 0x707ad4
mov cx, word [ebx + 0x2a]
cmp cx, word [ebp + 0x20]
je 0x707a62
mov ax, word [edi + 0xfc]
mov edx, dword [ebp]
mov ecx, ebp
push eax
call dword [edx + 0x5c]
test byte [eax + 0x30], 1
je 0x707ad4
mov cx, word [edi + 0xfc]
push 1
push ecx
push esi
call fcn.00706d60
add esp, 0xc
test eax, eax
je 0x707ad4
mov edx, dword [ebx + 0x64]
mov ecx, dword [0x912e94]
push edx
call fcn.004668b0
test eax, eax
je 0x707a9a
lea ecx, [eax - 0x18]
test ecx, ecx
je 0x707a9a
mov eax, dword [ecx]
call dword [eax + 0x50]
jmp 0x707a9c
xor eax, eax
mov edx, dword [eax]
lea ecx, [esp + 0x4c]
push ecx
mov ecx, eax
call dword [edx + 0x148]
push eax
lea edx, [esp + 0x20]
push edx
call fcn.005451e0
add esp, 8
cmp dword [esp + 0x14], 0
je 0x707ac9
cmp eax, dword [esp + 0x8c]
jge 0x707ad4
mov dword [esp + 0x14], ebx
mov dword [esp + 0x8c], eax
cmp dword [esp + 0x24], 0
jne 0x7079e2
mov ecx, dword [esp + 0x7c]
mov eax, dword [esp + 0x14]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x78
ret