Function at 0x676850
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [0x98d270]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
lea eax, [esp - 0x2a8]
cmp eax, dword [ecx + 8]
jbe 0x678152
sub esp, 0x328
mov dword [esp + 0x338], 0
mov dword [esp + 0x33c], 0
lea edi, [esp + 0x2ec]
xor eax, eax
call fcn.00468c21
lea edi, [esp + 0xc0]
call fcn.00468c26
mov dword [esp + 0x1e8], 0
mov dword [esp + 0x1ec], 0
mov ecx, dword [esp + 0x330]
mov dword [esp], ecx
call fcn.00409c20
mov ecx, dword [esp + 4]
lea edx, [0x6bd460]
mov dword [esp + 0x1e8], edx
mov dword [esp + 0x1ec], ecx
lea ecx, [0x71d1b8]
mov dword [esp], ecx
mov dword [esp + 4], 0x2b
lea ecx, [esp + 0x1e8]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004c5a30
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x1b0], ecx
mov edx, dword [esp + 0x18]
mov dword [esp + 0x70], edx
mov ebx, dword [esp + 0x32c]
mov dword [esp], ebx
mov ebp, dword [esp + 0x330]
mov dword [esp + 4], ebp
call fcn.0067ac90
mov ecx, dword [esp + 8]
mov dword [esp + 0x6c], ecx
lea edi, [esp + 0xe8]
lea esi, [esp + 0xc0]
call fcn.004690dc
lea ecx, [0x6f1ec0]
mov dword [esp], ecx
lea ecx, [esp + 0xe8]
mov dword [esp + 4], ecx
call fcn.004cf4a0
mov ecx, dword [esp + 8]
mov dword [esp + 0xb4], ecx
lea edx, [0x6c9fa0]
mov dword [esp], edx
call fcn.0040c4f0
mov ecx, dword [esp + 4]
mov dword [esp + 0x1dc], ecx
mov edx, dword [esp + 0x32c]
mov dword [esp], edx
lea ebx, [0x6a97e0]
mov dword [esp + 4], ebx
lea ebx, [esp + 0xc0]
mov dword [esp + 8], ebx
mov ebp, dword [esp + 0x6c]
mov dword [esp + 0xc], ebp
mov ebp, dword [esp + 0xb4]
mov dword [esp + 0x10], ebp
call fcn.0067b980
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x1dc]
mov dword [ebx], ecx
mov ecx, dword [0x98d4e0]
test ecx, ecx
je 0x6769f3
call fcn.004689a0
mov dword [edi], edx
mov eax, dword [ebx + 4]
mov dword [edi + 4], eax
mov dword [ebx + 4], edx
mov eax, dword [ebx]
test eax, eax
jne 0x676f4b
lea edi, [esp + 0x2f8]
lea esi, [esp + 0xc0]
call fcn.004690dc
mov eax, dword [esp + 0xd4]
test eax, eax
jne 0x676adc
mov eax, dword [esp + 0x32c]
mov ecx, dword [eax + 0x278]
mov edx, dword [eax + 0x274]
inc edx
mov ebp, dword [eax + 0x270]
cmp ecx, edx
jae 0x676aa6
mov dword [esp], ebp
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 1
lea eax, [0x6bd160]
mov dword [esp + 0x10], eax
call fcn.0044e1d0
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x32c]
mov dword [ebx + 0x278], eax
mov eax, dword [0x98d4e0]
test eax, eax
je 0x676a95
call fcn.004689a0
mov dword [edi], ecx
mov eax, dword [ebx + 0x270]
mov dword [edi + 4], eax
mov dword [ebx + 0x270], ecx
mov eax, ebx
mov ebx, dword [esp + 0x1dc]
mov ebp, ecx
mov dword [eax + 0x274], edx
lea ecx, [ebp + edx*8 - 4]
mov esi, dword [0x95da14]
lea edx, [ebp + edx*8 - 8]
mov ebp, dword [0x95da10]
mov dword [ecx], esi
mov ecx, dword [0x98d4e0]
test ecx, ecx
je 0x676ad8
call fcn.004689a0
mov dword [edi], ebp
mov ecx, dword [edx]
mov dword [edi + 4], ecx
mov dword [edx], ebp
jmp 0x676ae3
mov eax, dword [esp + 0x32c]
mov ecx, dword [esp + 0xdc]
test ecx, ecx
jne 0x676ba3
mov ecx, dword [eax + 0x278]
mov edx, dword [eax + 0x274]
inc edx
mov ebp, dword [eax + 0x270]
cmp ecx, edx
jae 0x676b6f
mov dword [esp], ebp
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 1
lea eax, [0x6bd160]
mov dword [esp + 0x10], eax
call fcn.0044e1d0
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x32c]
mov dword [ebx + 0x278], eax
mov eax, dword [0x98d4e0]
test eax, eax
je 0x676b5e
call fcn.004689a0
mov dword [edi], ecx
mov eax, dword [ebx + 0x270]
mov dword [edi + 4], eax
mov dword [ebx + 0x270], ecx
mov eax, ebx
mov ebx, dword [esp + 0x1dc]
mov ebp, ecx
mov dword [eax + 0x274], edx
lea ecx, [ebp + edx*8 - 4]
mov esi, dword [0x95da1c]
lea edx, [ebp + edx*8 - 8]
mov ebp, dword [0x95da18]
mov dword [ecx], esi
mov ecx, dword [0x98d4e0]
test ecx, ecx
je 0x676ba1
call fcn.004689a0
mov dword [edi], ebp
mov ecx, dword [edx]
mov dword [edi + 4], ecx
mov dword [edx], ebp
mov ecx, dword [esp + 0xe0]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.0067ac90
mov eax, dword [esp + 0xd8]
shl eax, 2
mov ecx, dword [esp + 0x32c]
mov edx, dword [ecx + 0x2ac]
sub edx, dword [esp + 8]
cmp edx, eax
jb 0x676bd7
mov edx, eax
mov eax, dword [esp + 0xe0]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], edx
call fcn.0067b4d0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x14]
mov ebp, dword [esp + 0xc]
mov esi, dword [esp + 0x1dc]
mov dword [esi], eax
mov eax, dword [0x98d4e0]
test eax, eax
je 0x676c22
call fcn.004689a0
mov dword [edi], ecx
mov eax, dword [esi + 4]
mov dword [edi + 4], eax
mov dword [esi + 4], ecx
mov eax, dword [esi]
test eax, eax
jne 0x676eef
mov dword [esp + 0x78], ebx
mov dword [esp + 0x74], edx
mov dword [esp + 0x1b4], ebp
mov eax, dword [esp + 0xe4]
mov ecx, dword [esp + 0x32c]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0067ac90
mov eax, dword [esp + 0xd8]
shl eax, 2
mov ecx, dword [esp + 0x32c]
mov edx, dword [ecx + 0x2ac]
sub edx, dword [esp + 8]
cmp edx, eax
jb 0x676c79
mov edx, eax
mov eax, dword [esp + 0xe4]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], edx
call fcn.0067b4d0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0xc]
mov ebp, dword [esp + 0x14]
mov esi, dword [esp + 0x1dc]
mov dword [esi], eax
mov eax, dword [0x98d4e0]
test eax, eax
je 0x676cc4
call fcn.004689a0
mov dword [edi], ecx
mov eax, dword [esi + 4]
mov dword [edi + 4], eax
mov dword [esi + 4], ecx
mov eax, dword [esi]
test eax, eax
jne 0x676e93
mov dword [esp + 0x80], ebp
mov dword [esp + 0x7c], edx
mov dword [esp + 0x1b8], ebx
mov eax, dword [esp + 0xdc]
mov ecx, dword [esp + 0x32c]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0067ac90
mov eax, dword [esp + 0xd4]
shl eax, 2
mov ecx, dword [esp + 0x32c]
mov edx, dword [ecx + 0x2ac]
sub edx, dword [esp + 8]
cmp edx, eax
jb 0x676d1e
mov edx, eax
mov eax, dword [esp + 0xdc]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], edx
call fcn.0067b4d0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x14]
mov ebp, dword [esp + 0xc]
mov esi, dword [esp + 0x1dc]
mov dword [esi], eax
mov eax, dword [0x98d4e0]
test eax, eax
je 0x676d69
call fcn.004689a0
mov dword [edi], ecx
mov eax, dword [esi + 4]
mov dword [edi + 4], eax
mov dword [esi + 4], ecx
mov eax, dword [esi]
test eax, eax
jne 0x676e37
mov dword [esp + 0x88], ebx
mov dword [esp + 0x84], edx
mov dword [esp + 0x1bc], ebp
mov eax, dword [esp + 0xcc]
mov ecx, dword [esp + 0x32c]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0x100000
call fcn.0067b0e0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x320], eax
mov dword [esp + 0x324], ecx
mov eax, dword [esp + 0x32c]
mov ecx, dword [eax + 0x2ac]
mov dword [esp + 0x38], ecx
lea edi, [esp + 0x20c]
xor eax, eax
call fcn.00468c29
lea edi, [esp + 0x144]
call fcn.00468c1d
lea ecx, [esp + 0x144]
mov dword [esp + 0x218], ecx
call fcn.00452ef0
mov eax, dword [esp]
mov dword [esp + 0x214], eax
mov eax, dword [esp + 0x32c]
mov ecx, dword [eax + 0xa0]
mov edx, dword [esp + 0xe0]
mov dword [esp + 0x40], edx
mov ebx, dword [eax + 0xa4]
mov dword [esp + 0xb4], ebx
xor ebp, ebp
jmp 0x676fcd
lea eax, [0x6cc1c0]
mov dword [esp], eax
call fcn.0040c4f0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x70]
mov dword [eax + 4], ecx
mov ecx, dword [0x98d4e0]
test ecx, ecx
jne 0x676e63
mov ecx, dword [esp + 0x1b0]
jmp 0x676e71
call fcn.00468990
mov ecx, dword [esp + 0x1b0]
mov dword [edi], ecx
mov dword [eax], ecx
lea ecx, [0x773c30]
mov dword [esp + 0x338], ecx
mov dword [esp + 0x33c], eax
call fcn.00437b50
add esp, 0x328
ret
lea eax, [0x6cc1c0]
mov dword [esp], eax
call fcn.0040c4f0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x70]
mov dword [eax + 4], ecx
mov ecx, dword [0x98d4e0]
test ecx, ecx
jne 0x676ebf
mov ecx, dword [esp + 0x1b0]
jmp 0x676ecd
call fcn.00468990
mov ecx, dword [esp + 0x1b0]
mov dword [edi], ecx
mov dword [eax], ecx
lea ecx, [0x773c30]
mov dword [esp + 0x338], ecx
mov dword [esp + 0x33c], eax
call fcn.00437b50
add esp, 0x328
ret
lea eax, [0x6cc1c0]
mov dword [esp], eax
call fcn.0040c4f0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x70]
mov dword [eax + 4], ecx
mov ecx, dword [0x98d4e0]
test ecx, ecx
jne 0x676f1b
mov ecx, dword [esp + 0x1b0]
jmp 0x676f29
call fcn.00468990
mov ecx, dword [esp + 0x1b0]
mov dword [edi], ecx
mov dword [eax], ecx
lea ecx, [0x773c30]
mov dword [esp + 0x338], ecx
mov dword [esp + 0x33c], eax
call fcn.00437b50
add esp, 0x328
ret
lea eax, [0x6cc1c0]
mov dword [esp], eax
call fcn.0040c4f0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x70]
mov dword [eax + 4], ecx
mov ecx, dword [0x98d4e0]
test ecx, ecx
jne 0x676f77
mov ecx, dword [esp + 0x1b0]
jmp 0x676f85
call fcn.00468990
mov ecx, dword [esp + 0x1b0]
mov dword [edi], ecx
mov dword [eax], ecx
lea ecx, [0x773c30]
mov dword [esp + 0x338], ecx
mov dword [esp + 0x33c], eax
call fcn.00437b50
add esp, 0x328
ret
mov eax, dword [esp + 0x1d8]
lea ecx, [eax + 0x2c]
mov eax, dword [esp + 0xb0]
lea ebp, [eax + 1]
mov eax, dword [esp + 0x32c]
mov edx, dword [esp + 0x40]
mov ebx, dword [esp + 0xb4]
cmp ebp, ebx
jge 0x67701d
mov dword [esp + 0xb0], ebp
mov dword [esp + 0x1d8], ecx
lea edi, [esp + 0x2c0]
mov esi, ecx
call fcn.004690d2
lea ecx, [esp + 0x2c0]
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.00688150
movzx eax, byte [esp + 0xc]
test al, al
je 0x676fa7
mov eax, dword [esp + 0x32c]
lea ecx, [esp + 0x2c0]
jmp 0x67701f
xor ecx, ecx
test ecx, ecx
jne 0x677029
mov ecx, dword [esp + 0x38]
jmp 0x677068
mov dword [esp + 0x190], ecx
mov dword [esp], ecx
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], eax
call fcn.00688730
mov eax, dword [esp + 0x190]
mov ecx, dword [eax + 0xc]
add ecx, dword [esp + 0x14]
sub ecx, dword [esp + 0xe0]
mov eax, dword [esp + 0x32c]
mov edx, dword [esp + 0xd8]
shr ecx, 2
cmp edx, ecx
jb 0x677078
mov edx, ecx
mov dword [esp + 0x2c], edx
xor ecx, ecx
mov ebx, 0xa
xor ebp, ebp
xor esi, esi
jmp 0x67709d
inc eax
mov ecx, eax
mov ebx, ebp
mov ebp, edx
mov esi, edi
mov eax, dword [esp + 0x32c]
mov edx, dword [esp + 0x2c]
cmp ecx, edx
jae 0x677607
mov dword [esp + 0x60], ecx
mov dword [esp + 0x68], esi
mov dword [esp + 0x48], ebx
lea eax, [0x6caea0]
mov dword [esp], eax
call fcn.0040c4f0
mov eax, dword [esp + 4]
lea ecx, [0x678160]
mov dword [eax], ecx
mov edx, dword [0x98d4e0]
test edx, edx
jne 0x6770de
mov edx, dword [esp + 0x1dc]
jmp 0x6770ec
call fcn.00468990
mov edx, dword [esp + 0x1dc]
mov dword [edi], edx
mov dword [eax + 4], edx
mov dword [esp], eax
call fcn.004374e0
test eax, eax
jne 0x6775fb
mov eax, dword [esp + 0x60]
mov edx, eax
shl edx, 1
mov ecx, dword [esp + 0x7c]
cmp ecx, edx
jb 0x67814a
mov ebx, ecx
sub ebx, edx
mov ebp, dword [esp + 0x80]
mov esi, ebp
sub ebp, edx
xchg ebp, ebx
neg ebx
xchg ebp, ebx
sar ebp, 0x1f
and edx, ebp
cmp ebx, 1
jbe 0x67813e
mov ebx, dword [esp + 0x1b8]
movzx edx, word [ebx + edx]
mov ebp, edx
shl edx, 2
movzx edx, dx
mov edi, ebp
mov ebp, dword [esp + 0x84]
cmp ebp, edx
jb 0x678135
sub ebp, edx
mov ebx, dword [esp + 0x88]
sub ebx, edx
neg ebx
sar ebx, 0x1f
and edx, ebx
cmp ebp, 3
jbe 0x678129
mov ebx, dword [esp + 0x1bc]
mov edx, dword [edx + ebx]
test edx, edx
jne 0x677190
mov ebp, dword [esp + 0x48]
mov edi, dword [esp + 0x68]
jmp 0x677089
mov dword [esp + 0xac], edx
mov word [esp + 0x2a], di
mov ebp, dword [esp + 0x330]
cmp ebp, edx
ja 0x677247
mov ebx, dword [esp + 0x334]
lea esi, [ebx + ebp]
cmp edx, esi
jb 0x6771c9
mov ebx, dword [esp + 0x1bc]
mov esi, dword [esp + 0x80]
jmp 0x677247
mov eax, dword [esp + 0x32c]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], 0x100000
call fcn.0067b0e0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x1ac], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x64], ecx
mov edx, dword [esp + 0x32c]
mov dword [esp], edx
mov ebx, dword [esp + 0xac]
mov dword [esp + 4], ebx
call fcn.0067ac90
mov esi, dword [esp + 8]
mov eax, dword [esp + 0x60]
mov ecx, dword [esp + 0x7c]
mov edx, dword [esp + 0xac]
mov ebx, dword [esp + 0x1bc]
mov ebp, dword [esp + 0x330]
movzx edi, word [esp + 0x2a]
mov dword [esp + 0xa8], esi
mov esi, dword [esp + 0x80]
jmp 0x67726f
mov dword [esp + 0xb8], eax
xor eax, eax
mov dword [esp + 0x64], eax
xor eax, eax
mov dword [esp + 0x1ac], eax
mov eax, dword [esp + 0x68]
mov dword [esp + 0xa8], eax
mov eax, dword [esp + 0xb8]
shl eax, 2
mov ebp, dword [esp + 0x74]
cmp ebp, eax
jb 0x678122
sub ebp, eax
mov ebx, dword [esp + 0x78]
sub ebx, eax
neg ebx
sar ebx, 0x1f
and eax, ebx
cmp ebp, 3
jbe 0x678116
mov ebx, dword [esp + 0x1b4]
mov ebp, dword [ebx + eax]
test ebp, ebp
jne 0x6772b2
mov ebx, dword [esp + 0x48]
dec ebx
test ebx, ebx
jg 0x6772b6
jmp 0x6775ac
mov ebx, dword [esp + 0x48]
mov dword [esp + 0xa4], ebp
mov dword [esp + 0x48], ebx
mov eax, dword [esp + 0x32c]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], 0x100000
call fcn.0067b0e0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x194], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x30], ecx
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.0067a760
movzx eax, byte [esp + 8]
test al, al
je 0x6775df
mov eax, dword [esp + 0x32c]
mov dword [esp], eax
mov ecx, dword [esp + 0xa4]
mov dword [esp + 4], ecx
call fcn.0067ac90
mov eax, dword [esp + 8]
test eax, eax
jne 0x677338
mov ecx, dword [esp + 0x48]
dec ecx
test ecx, ecx
jg 0x67733c
jmp 0x6775c3
mov ecx, dword [esp + 0x48]
mov dword [esp + 0x48], ecx
lea eax, [0x6c1360]
mov dword [esp], eax
lea edx, [esp + 0x20c]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0xac]
mov dword [esp + 8], ebx
call fcn.0040f150
mov eax, dword [esp + 0xc]
inc dword [eax]
lea eax, [0x6c1360]
mov dword [esp], eax
lea ecx, [esp + 0x20c]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0xac]
mov dword [esp + 8], edx
call fcn.0040eeb0
mov eax, dword [esp + 0xc]
cmp dword [eax], 0xa
jle 0x6773d6
mov ecx, dword [0x95da08]
mov dword [esp + 0x1cc], ecx
mov edx, dword [0x95da0c]
mov dword [esp + 0x98], edx
mov ebx, dword [esp + 0x32c]
mov ebp, dword [ebx + 0x274]
mov dword [esp + 0x58], ebp
mov eax, dword [ebx + 0x270]
mov dword [esp + 0x1a8], eax
xor esi, esi
jmp 0x677ffd
cmp dword [esp + 0x20c], 0x2000
jle 0x677422
mov ecx, dword [0x95da00]
mov dword [esp + 0x1c8], ecx
mov edx, dword [0x95da04]
mov dword [esp + 0x94], edx
mov ebx, dword [esp + 0x32c]
mov ebp, dword [ebx + 0x274]
mov dword [esp + 0x54], ebp
mov eax, dword [ebx + 0x270]
mov dword [esp + 0x1a4], eax
xor esi, esi
jmp 0x677edc
movzx ecx, word [esp + 0x2a]
movzx ecx, cx
mov dword [esp + 0x9c], ecx
lea edi, [esp + 0x24c]
xor eax, eax
call fcn.00468c27
mov ecx, dword [esp + 0x194]
mov dword [esp + 0x25c], ecx
mov ecx, dword [esp + 0x30]
mov dword [esp + 0x260], ecx
mov ecx, dword [esp + 0xa4]
mov dword [esp + 0x258], ecx
mov ecx, dword [esp + 0x9c]
mov dword [esp + 0x254], ecx
mov edx, dword [esp + 0xd0]
add ecx, edx
mov dword [esp + 0x24c], ecx
mov ecx, dword [esp + 0xac]
mov dword [esp + 0x250], ecx
mov edx, dword [esp + 0x1ac]
mov dword [esp + 0x264], edx
mov edx, dword [esp + 0x64]
mov dword [esp + 0x268], edx
mov edx, dword [esp + 0xa8]
mov dword [esp + 0x26c], edx
mov ebx, dword [esp + 0x2f4]
mov ebp, dword [esp + 0x2f0]
inc ebp
mov esi, dword [esp + 0x2ec]
cmp ebx, ebp
jae 0x67751f
mov dword [esp], esi
mov dword [esp + 4], ebp
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 1
lea eax, [0x6ec260]
mov dword [esp + 0x10], eax
call fcn.0044e1d0
mov esi, dword [esp + 0x14]
mov eax, dword [esp + 0x1c]
mov ebp, dword [esp + 0x18]
mov dword [esp + 0x2f4], eax
mov dword [esp + 0x2ec], esi
xor eax, eax
mov ecx, dword [esp + 0xac]
mov edx, dword [esp + 0xa8]
mov dword [esp + 0x2f0], ebp
mov ebx, dword [0x98d4e0]
lea ebp, [ebp + ebp*8]
lea edi, [esi + ebp*4 - 0x24]
test ebx, ebx
je 0x677573
mov dword [esp + 0x1d0], edi
lea eax, [0x6ec260]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x24c]
mov dword [esp + 8], eax
call fcn.00411600
xor eax, eax
mov ecx, dword [esp + 0xac]
mov edx, dword [esp + 0xa8]
mov edi, dword [esp + 0x1d0]
lea esi, [esp + 0x24c]
call fcn.004690e6
mov eax, dword [esp + 0x60]
mov ecx, dword [esp + 0x7c]
mov edx, dword [esp + 0xac]
mov ebx, dword [esp + 0x1bc]
mov esi, dword [esp + 0x80]
mov ebp, dword [esp + 0x48]
mov edi, dword [esp + 0xa8]
jmp 0x677089
mov eax, dword [esp + 0x32c]
mov ecx, 1
mov ebp, edx
mov esi, dword [esp + 0xa8]
jmp 0x677609
mov eax, dword [esp + 0x32c]
mov ecx, 1
mov ebp, dword [esp + 0xac]
mov esi, dword [esp + 0xa8]
jmp 0x677609
mov eax, dword [esp + 0x32c]
mov ecx, 1
mov ebp, dword [esp + 0xac]
mov esi, dword [esp + 0xa8]
jmp 0x677609
call fcn.00437b50
add esp, 0x328
ret
xor ecx, ecx
mov dword [esp + 0x68], esi
mov dword [esp + 0x34], ebp
test cl, cl
je 0x6776aa
mov dword [esp + 0x1e0], 0
mov dword [esp + 0x1e4], 0
mov eax, dword [esp + 0xe0]
mov dword [esp], eax
call fcn.00409c20
mov eax, dword [esp + 4]
lea ecx, [0x6bd460]
mov dword [esp + 0x1e0], ecx
mov dword [esp + 0x1e4], eax
mov eax, dword [0x9670b0]
lea ecx, [0x773d24]
mov dword [esp], ecx
mov dword [esp + 4], eax
lea eax, [0x72196f]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0x4e
lea eax, [esp + 0x1e0]
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], 1
mov dword [esp + 0x18], 1
call fcn.004c5960
mov eax, dword [esp + 0x32c]
mov ebp, dword [esp + 0x34]
mov esi, dword [esp + 0x68]
mov ecx, dword [eax + 0xa0]
mov edx, dword [esp + 0xdc]
mov dword [esp + 0x3c], edx
mov ebx, dword [eax + 0xa4]
mov dword [esp + 0xb4], ebx
xor edi, edi
jmp 0x6776fa
mov eax, dword [esp + 0x1d8]
lea ecx, [eax + 0x2c]
mov eax, dword [esp + 0xb0]
lea edi, [eax + 1]
mov eax, dword [esp + 0x32c]
mov edx, dword [esp + 0x3c]
mov ebx, dword [esp + 0xb4]
mov ebp, dword [esp + 0x34]
mov esi, dword [esp + 0x68]
cmp edi, ebx
jge 0x677752
mov dword [esp + 0xb0], edi
mov dword [esp + 0x1d8], ecx
lea edi, [esp + 0x294]
mov esi, ecx
call fcn.004690d2
lea ecx, [esp + 0x294]
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.00688150
movzx eax, byte [esp + 0xc]
test al, al
je 0x6776cc
mov eax, dword [esp + 0x32c]
mov ebp, dword [esp + 0x34]
mov esi, dword [esp + 0x68]
lea ecx, [esp + 0x294]
jmp 0x677754
xor ecx, ecx
mov edx, dword [eax + 0x2ac]
test ecx, ecx
je 0x677796
mov dword [esp + 0x198], ecx
mov dword [esp], ecx
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], eax
call fcn.00688730
mov eax, dword [esp + 0x198]
mov edx, dword [eax + 0xc]
add edx, dword [esp + 0x14]
sub edx, dword [esp + 0xe0]
mov dword [esp + 0x38], edx
lea edi, [esp + 0x1f0]
xor eax, eax
call fcn.00468c29
lea edi, [esp + 0x110]
call fcn.00468c23
lea ecx, [esp + 0x110]
mov dword [esp + 0x1fc], ecx
call fcn.00452ef0
mov ecx, dword [esp]
mov dword [esp + 0x1f8], ecx
mov ecx, dword [esp + 0x2ec]
mov edx, dword [esp + 0x2f0]
mov dword [esp + 0xb4], edx
xor eax, eax
jmp 0x67784a
mov dword [esp + 0xb0], eax
mov dword [esp + 0x1d8], ecx
lea edi, [esp + 0x270]
mov esi, ecx
call fcn.004690e6
mov eax, dword [esp + 0x270]
lea ecx, [0x6c1320]
mov dword [esp], ecx
lea edx, [esp + 0x1f0]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.0040f150
mov eax, dword [esp + 0xc]
mov byte [eax], 1
mov eax, dword [esp + 0x1d8]
lea ecx, [eax + 0x24]
mov eax, dword [esp + 0xb0]
inc eax
mov edx, dword [esp + 0xb4]
cmp eax, edx
jl 0x6777ea
mov eax, dword [esp + 0xd4]
mov ecx, dword [esp + 0x38]
shr ecx, 2
cmp eax, ecx
jb 0x677862
mov eax, ecx
mov dword [esp + 0x44], eax
xor ecx, ecx
mov edx, dword [esp + 0x34]
mov ebx, dword [esp + 0x68]
jmp 0x67787b
inc eax
mov ecx, eax
mov ebx, ebp
mov eax, dword [esp + 0x44]
cmp ecx, eax
jae 0x677bfa
mov dword [esp + 0x5c], ecx
mov dword [esp + 0x68], ebx
mov dword [esp + 0x34], edx
mov eax, dword [esp + 0xd0]
lea edx, [0x6c1320]
mov dword [esp], edx
lea ebx, [esp + 0x1f0]
mov dword [esp + 4], ebx
add eax, ecx
mov dword [esp + 8], eax
call fcn.0040eeb0
mov eax, dword [esp + 0xc]
movzx eax, byte [eax]
test al, al
je 0x6778e3
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x84]
mov ebx, dword [esp + 0x1bc]
mov esi, dword [esp + 0x88]
mov edx, dword [esp + 0x34]
mov ebp, dword [esp + 0x68]
jmp 0x677872
mov eax, dword [esp + 0x5c]
mov edx, eax
shl edx, 2
lea ebx, [edx + 4]
mov ecx, dword [esp + 0x84]
cmp ecx, ebx
jl 0x677931
cmp ecx, edx
jb 0x677ecd
mov ebx, ecx
sub ebx, edx
mov ebp, dword [esp + 0x88]
mov esi, ebp
sub ebp, edx
xchg ebp, ebx
neg ebx
xchg ebp, ebx
sar ebp, 0x1f
and edx, ebp
cmp ebx, 3
jbe 0x677ec1
mov ebx, dword [esp + 0x1bc]
mov edx, dword [ebx + edx]
jmp 0x677943
mov ebx, dword [esp + 0x1bc]
mov esi, dword [esp + 0x88]
mov edx, dword [esp + 0x34]
test edx, edx
jne 0x677950
mov ebp, dword [esp + 0x68]
jmp 0x677872
mov dword [esp + 0xa0], edx
mov ebp, dword [esp + 0x330]
cmp ebp, edx
ja 0x6779cc
mov edi, dword [esp + 0x334]
add edi, ebp
cmp edx, edi
jae 0x6779cc
mov eax, dword [esp + 0x32c]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], 0x100000
call fcn.0067b0e0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x1ac], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x64], ecx
mov edx, dword [esp + 0x32c]
mov dword [esp], edx
mov ebx, dword [esp + 0xa0]
mov dword [esp + 4], ebx
call fcn.0067ac90
mov ebx, dword [esp + 8]
mov edx, dword [esp + 0xa0]
mov edi, dword [esp + 0x64]
mov dword [esp + 0x68], ebx
jmp 0x6779d9
xor edi, edi
xor edi, edi
mov dword [esp + 0x1ac], edi
xor edi, edi
mov dword [esp + 0x64], edi
lea eax, [0x6c1360]
mov dword [esp], eax
lea ecx, [esp + 0x20c]
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.0040f150
mov eax, dword [esp + 0xc]
inc dword [eax]
lea eax, [0x6c1360]
mov dword [esp], eax
lea ecx, [esp + 0x20c]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0xa0]
mov dword [esp + 8], edx
call fcn.0040eeb0
mov eax, dword [esp + 0xc]
cmp dword [eax], 0xa
jle 0x677a6c
mov ecx, dword [0x95da08]
mov dword [esp + 0x1c4], ecx
mov edx, dword [0x95da0c]
mov dword [esp + 0x90], edx
mov ebx, dword [esp + 0x32c]
mov ebp, dword [ebx + 0x274]
mov dword [esp + 0x50], ebp
mov eax, dword [ebx + 0x270]
mov dword [esp + 0x1a0], eax
xor esi, esi
jmp 0x677da8
cmp dword [esp + 0x20c], 0x2000
jle 0x677ab8
mov ecx, dword [0x95da00]
mov dword [esp + 0x1c0], ecx
mov edx, dword [0x95da04]
mov dword [esp + 0x8c], edx
mov ebx, dword [esp + 0x32c]
mov ebp, dword [ebx + 0x274]
mov dword [esp + 0x4c], ebp
mov eax, dword [ebx + 0x270]
mov dword [esp + 0x19c], eax
xor esi, esi
jmp 0x677c87
lea edi, [esp + 0x228]
xor eax, eax
call fcn.00468c27
mov ecx, dword [esp + 0xd0]
mov edx, dword [esp + 0x5c]
add ecx, edx
mov dword [esp + 0x228], ecx
mov ecx, dword [esp + 0xa0]
mov dword [esp + 0x22c], ecx
mov ebx, dword [esp + 0x1ac]
mov dword [esp + 0x240], ebx
mov ebx, dword [esp + 0x64]
mov dword [esp + 0x244], ebx
mov ebx, dword [esp + 0x68]
mov dword [esp + 0x248], ebx
mov ebp, dword [esp + 0x2f4]
mov esi, dword [esp + 0x2f0]
inc esi
mov edi, dword [esp + 0x2ec]
cmp ebp, esi
jae 0x677b73
mov dword [esp], edi
mov dword [esp + 4], esi
mov dword [esp + 8], ebp
mov dword [esp + 0xc], 1
lea eax, [0x6ec260]
mov dword [esp + 0x10], eax
call fcn.0044e1d0
mov edi, dword [esp + 0x14]
mov eax, dword [esp + 0x1c]
mov esi, dword [esp + 0x18]
mov dword [esp + 0x2f4], eax
mov dword [esp + 0x2ec], edi
xor eax, eax
mov ecx, dword [esp + 0xa0]
mov edx, dword [esp + 0x5c]
mov ebx, dword [esp + 0x68]
mov dword [esp + 0x2f0], esi
mov ebp, dword [0x98d4e0]
lea esi, [esi + esi*8]
lea edi, [edi + esi*4 - 0x24]
test ebp, ebp
je 0x677bc7
mov dword [esp + 0x1d0], edi
lea eax, [0x6ec260]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x228]
mov dword [esp + 8], eax
call fcn.00411600
xor eax, eax
mov ecx, dword [esp + 0xa0]
mov edx, dword [esp + 0x5c]
mov ebx, dword [esp + 0x68]
mov edi, dword [esp + 0x1d0]
lea esi, [esp + 0x228]
call fcn.004690e6
mov eax, edx
mov ecx, dword [esp + 0x84]
mov ebx, dword [esp + 0x1bc]
mov esi, dword [esp + 0x88]
mov edx, dword [esp + 0xa0]
mov ebp, dword [esp + 0x68]
jmp 0x677872
mov eax, dword [0x98d4e0]
mov ecx, dword [esp + 0x32c]
lea edi, [ecx + 0xb8]
test eax, eax
je 0x677c43
mov dword [esp + 0x1d4], edi
lea eax, [0x6db220]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x2ec]
mov dword [esp + 8], eax
call fcn.00411600
mov ecx, dword [esp + 0x32c]
mov edi, dword [esp + 0x1d4]
lea esi, [esp + 0x2ec]
call fcn.004690aa
mov eax, dword [esp + 0x32c]
mov byte [eax + 0x29b], 1
mov dword [esp + 0x338], 0
mov dword [esp + 0x33c], 0
call fcn.00437b50
add esp, 0x328
ret
inc esi
mov ebx, dword [esp + 0x32c]
cmp esi, ebp
jge 0x677ced
lea edi, [eax + esi*8]
mov ebx, dword [edi + 4]
cmp ebx, edx
jne 0x677c7f
mov dword [esp + 0xb4], esi
mov eax, dword [edi]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
call fcn.00403500
movzx eax, byte [esp + 0xc]
test al, al
jne 0x677cd9
mov eax, dword [esp + 0x19c]
mov ecx, dword [esp + 0x1c0]
mov edx, dword [esp + 0x8c]
mov ebp, dword [esp + 0x4c]
mov esi, dword [esp + 0xb4]
jmp 0x677c7f
mov ecx, dword [esp + 0xb4]
mov edx, dword [esp + 0x4c]
cmp ecx, edx
mov ebx, dword [esp + 0x32c]
jl 0x677ab8
mov ecx, dword [ebx + 0x278]
mov edx, dword [ebx + 0x274]
inc edx
mov ebp, dword [ebx + 0x270]
cmp ecx, edx
jae 0x677d67
mov dword [esp], ebp
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 1
lea eax, [0x6bd160]
mov dword [esp + 0x10], eax
call fcn.0044e1d0
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x32c]
mov dword [ebx + 0x278], eax
mov eax, dword [0x98d4e0]
test eax, eax
je 0x677d5f
call fcn.004689a0
mov dword [edi], ecx
mov ebp, dword [ebx + 0x270]
mov dword [edi + 4], ebp
mov dword [ebx + 0x270], ecx
mov ebp, ecx
mov dword [ebx + 0x274], edx
lea ecx, [ebp + edx*8 - 4]
mov eax, dword [0x95da04]
lea edx, [ebp + edx*8 - 8]
mov ebp, dword [0x95da00]
mov dword [ecx], eax
mov ecx, dword [0x98d4e0]
test ecx, ecx
je 0x677d99
call fcn.004689a0
mov dword [edi], ebp
mov ecx, dword [edx]
mov dword [edi + 4], ecx
mov dword [edx], ebp
jmp 0x677ab8
inc esi
mov ebx, dword [esp + 0x32c]
cmp esi, ebp
jge 0x677e0e
lea edi, [eax + esi*8]
mov ebx, dword [edi + 4]
cmp ebx, edx
jne 0x677da0
mov dword [esp + 0xb4], esi
mov eax, dword [edi]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
call fcn.00403500
movzx eax, byte [esp + 0xc]
test al, al
jne 0x677dfa
mov eax, dword [esp + 0x1a0]
mov ecx, dword [esp + 0x1c4]
mov edx, dword [esp + 0x90]
mov ebp, dword [esp + 0x50]
mov esi, dword [esp + 0xb4]
jmp 0x677da0
mov ecx, dword [esp + 0xb4]
mov edx, dword [esp + 0x50]
cmp ecx, edx
mov ebx, dword [esp + 0x32c]
jl 0x677a6c
mov ecx, dword [ebx + 0x278]
mov edx, dword [ebx + 0x274]
inc edx
mov ebp, dword [ebx + 0x270]
cmp ecx, edx
jae 0x677e88
mov dword [esp], ebp
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 1
lea eax, [0x6bd160]
mov dword [esp + 0x10], eax
call fcn.0044e1d0
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x32c]
mov dword [ebx + 0x278], eax
mov eax, dword [0x98d4e0]
test eax, eax
je 0x677e80
call fcn.004689a0
mov dword [edi], ecx
mov ebp, dword [ebx + 0x270]
mov dword [edi + 4], ebp
mov dword [ebx + 0x270], ecx
mov ebp, ecx
mov dword [ebx + 0x274], edx
lea ecx, [ebp + edx*8 - 4]
mov eax, dword [0x95da0c]
lea edx, [ebp + edx*8 - 8]
mov ebp, dword [0x95da08]
mov dword [ecx], eax
mov ecx, dword [0x98d4e0]
test ecx, ecx
je 0x677eba
call fcn.004689a0
mov dword [edi], ebp
mov ecx, dword [edx]
mov dword [edi + 4], ecx
mov dword [edx], ebp
jmp 0x677a6c
mov eax, 3
mov ecx, ebx
call fcn.00468a00
mov eax, edx
call fcn.00468a70
inc esi
mov ebx, dword [esp + 0x32c]
cmp esi, ebp
jge 0x677f42
lea edi, [eax + esi*8]
mov ebx, dword [edi + 4]
cmp ebx, edx
jne 0x677ed4
mov dword [esp + 0xb4], esi
mov eax, dword [edi]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
call fcn.00403500
movzx eax, byte [esp + 0xc]
test al, al
jne 0x677f2e
mov eax, dword [esp + 0x1a4]
mov ecx, dword [esp + 0x1c8]
mov edx, dword [esp + 0x94]
mov ebp, dword [esp + 0x54]
mov esi, dword [esp + 0xb4]
jmp 0x677ed4
mov ecx, dword [esp + 0xb4]
mov edx, dword [esp + 0x54]
cmp ecx, edx
mov ebx, dword [esp + 0x32c]
jl 0x677422
mov ecx, dword [ebx + 0x278]
mov edx, dword [ebx + 0x274]
inc edx
mov ebp, dword [ebx + 0x270]
cmp ecx, edx
jae 0x677fbc
mov dword [esp], ebp
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 1
lea eax, [0x6bd160]
mov dword [esp + 0x10], eax
call fcn.0044e1d0
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x32c]
mov dword [ebx + 0x278], eax
mov eax, dword [0x98d4e0]
test eax, eax
je 0x677fb4
call fcn.004689a0
mov dword [edi], ecx
mov ebp, dword [ebx + 0x270]
mov dword [edi + 4], ebp
mov dword [ebx + 0x270], ecx
mov ebp, ecx
mov dword [ebx + 0x274], edx
lea ecx, [ebp + edx*8 - 4]
mov eax, dword [0x95da04]
lea edx, [ebp + edx*8 - 8]
mov ebp, dword [0x95da00]
mov dword [ecx], eax
mov ecx, dword [0x98d4e0]
test ecx, ecx
je 0x677fee
call fcn.004689a0
mov dword [edi], ebp
mov ecx, dword [edx]
mov dword [edi + 4], ecx
mov dword [edx], ebp
jmp 0x677422
inc esi
mov ebx, dword [esp + 0x32c]
cmp esi, ebp
jge 0x678063
lea edi, [eax + esi*8]
mov ebx, dword [edi + 4]
cmp ebx, edx
jne 0x677ff5
mov dword [esp + 0xb4], esi
mov eax, dword [edi]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
call fcn.00403500
movzx eax, byte [esp + 0xc]
test al, al
jne 0x67804f
mov eax, dword [esp + 0x1a8]
mov ecx, dword [esp + 0x1cc]
mov edx, dword [esp + 0x98]
mov ebp, dword [esp + 0x58]
mov esi, dword [esp + 0xb4]
jmp 0x677ff5
mov ecx, dword [esp + 0xb4]
mov edx, dword [esp + 0x58]
cmp ecx, edx
mov ebx, dword [esp + 0x32c]
jl 0x6773d6
mov ecx, dword [ebx + 0x278]
mov edx, dword [ebx + 0x274]
inc edx
mov ebp, dword [ebx + 0x270]
cmp ecx, edx
jae 0x6780dd
mov dword [esp], ebp
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 1
lea eax, [0x6bd160]
mov dword [esp + 0x10], eax
call fcn.0044e1d0
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x32c]
mov dword [ebx + 0x278], eax
mov eax, dword [0x98d4e0]
test eax, eax
je 0x6780d5
call fcn.004689a0
mov dword [edi], ecx
mov ebp, dword [ebx + 0x270]
mov dword [edi + 4], ebp
mov dword [ebx + 0x270], ecx
mov ebp, ecx
mov dword [ebx + 0x274], edx
lea ecx, [ebp + edx*8 - 4]
mov eax, dword [0x95da0c]
lea edx, [ebp + edx*8 - 8]
mov ebp, dword [0x95da08]
mov dword [ecx], eax
mov ecx, dword [0x98d4e0]
test ecx, ecx
je 0x67810f
call fcn.004689a0
mov dword [edi], ebp
mov ecx, dword [edx]
mov dword [edi + 4], ecx
mov dword [edx], ebp
jmp 0x6773d6
mov eax, 3
mov ecx, ebp
call fcn.00468a00
mov ecx, ebp
call fcn.00468a70
mov eax, 3
mov ecx, ebp
call fcn.00468a00
mov eax, edx
mov ecx, ebp
call fcn.00468a60
mov eax, 1
mov ecx, ebx
call fcn.00468a00
mov eax, edx
call fcn.00468a70
nop
call fcn.00467590
jmp fcn.00676850