Function at 0x6252b0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [0x85d3cc]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
lea eax, [esp - 0x114]
cmp eax, dword [ecx + 8]
jbe 0x627ad7
sub esp, 0x194
mov eax, dword [esp + 0x1a0]
test eax, eax
jne 0x62545c
mov ecx, dword [esp + 0x1b0]
test ecx, ecx
je 0x625302
test ecx, 0x200
jne 0x625302
lea eax, [0x6f34e4]
mov ecx, dword [esp + 0x1a8]
jmp 0x625328
mov eax, dword [esp + 0x1a8]
mov dword [esp], eax
mov eax, dword [esp + 0x1ac]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.0048ead0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x138], ecx
mov dword [esp + 0x7c], eax
mov dword [esp + 0x184], 0
mov dword [esp + 0x188], 0
mov dword [esp + 0x18c], 0
mov dword [esp + 0x190], 0
mov edx, dword [esp + 0x19c]
mov dword [esp], edx
mov edx, dword [esp + 0x1a0]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x1a4]
mov dword [esp + 8], edx
call fcn.00409b30
mov eax, dword [esp + 0xc]
lea ecx, [0x65b4e0]
mov dword [esp + 0x184], ecx
mov dword [esp + 0x188], eax
mov eax, dword [esp + 0x7c]
test eax, eax
je 0x6253a7
mov eax, dword [eax + 4]
mov dword [esp + 0x18c], eax
mov eax, dword [esp + 0x138]
mov dword [esp + 0x190], eax
lea eax, [0x6a4a00]
mov dword [esp], eax
mov dword [esp + 4], 0x47
lea eax, [esp + 0x184]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004c0e90
mov eax, dword [esp + 0x198]
mov ecx, dword [eax + 0x3c]
test ecx, ecx
jne 0x62543f
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.00622030
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x198]
mov dword [edx + 0x3c], eax
mov eax, dword [0x85d680]
test eax, eax
je 0x62543c
call fcn.00468040
mov dword [edi], ecx
mov eax, dword [edx + 0x40]
mov dword [edi + 4], eax
mov dword [edx + 0x40], ecx
mov dword [esp + 0x1b8], 0
mov dword [esp + 0x1bc], 0
add esp, 0x194
ret
mov eax, dword [esp + 0x19c]
cmp byte [eax], 0x6e
mov ecx, dword [esp + 0x1a8]
mov dword [esp], ecx
mov edx, dword [esp + 0x1ac]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0x1b0]
mov dword [esp + 8], ebx
xchg ebp, ebx
sete bl
xchg ebp, ebx
xchg ebp, eax
mov byte [esp + 0xc], al
xchg ebp, eax
call fcn.006226f0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x1c]
test eax, eax
jne 0x627a3f
mov eax, dword [esp + 0x18]
test eax, eax
je 0x6259a1
mov edx, dword [esp + 0x19c]
movzx ebx, byte [edx]
cmp bl, 0x22
je 0x6257e4
movzx eax, byte [esp + 0x1b4]
test al, al
je 0x625652
mov eax, dword [esp + 0x1b0]
test eax, eax
je 0x6254f8
test eax, 0x200
jne 0x6254f8
lea eax, [0x6f34e4]
mov ecx, dword [esp + 0x1a8]
jmp 0x62551e
mov ecx, dword [esp + 0x1a8]
mov dword [esp], ecx
mov ecx, dword [esp + 0x1ac]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.0048ead0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x134], ecx
mov dword [esp + 0x78], eax
mov dword [esp + 0x184], 0
mov dword [esp + 0x188], 0
mov dword [esp + 0x18c], 0
mov dword [esp + 0x190], 0
mov edx, dword [esp + 0x19c]
mov dword [esp], edx
mov edx, dword [esp + 0x1a0]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x1a4]
mov dword [esp + 8], edx
call fcn.00409b30
mov eax, dword [esp + 0xc]
lea ecx, [0x65b4e0]
mov dword [esp + 0x184], ecx
mov dword [esp + 0x188], eax
mov eax, dword [esp + 0x78]
test eax, eax
je 0x62559d
mov eax, dword [eax + 4]
mov dword [esp + 0x18c], eax
mov eax, dword [esp + 0x134]
mov dword [esp + 0x190], eax
lea eax, [0x6a4a00]
mov dword [esp], eax
mov dword [esp + 4], 0x47
lea eax, [esp + 0x184]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004c0e90
mov eax, dword [esp + 0x198]
mov ecx, dword [eax + 0x3c]
test ecx, ecx
jne 0x625635
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.00622030
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x198]
mov dword [edx + 0x3c], eax
mov eax, dword [0x85d680]
test eax, eax
je 0x625632
call fcn.00468040
mov dword [edi], ecx
mov eax, dword [edx + 0x40]
mov dword [edi + 4], eax
mov dword [edx + 0x40], ecx
mov dword [esp + 0x1b8], 0
mov dword [esp + 0x1bc], 0
add esp, 0x194
ret
cmp bl, 0x66
je 0x62566e
cmp bl, 0x6e
jne 0x625669
lea eax, [0x69108f]
mov ecx, 4
jmp 0x625686
cmp bl, 0x74
jne 0x62567b
lea eax, [0x691093]
mov ecx, 4
jmp 0x625686
lea eax, [0x691444]
mov ecx, 6
mov dword [esp + 0x13c], eax
mov dword [esp + 0x84], ecx
mov edx, dword [esp + 0x1b0]
test edx, edx
je 0x6256b6
test edx, 0x200
jne 0x6256b6
mov edx, dword [esp + 0x1a8]
lea ebx, [0x6f34e4]
jmp 0x6256e0
mov eax, dword [esp + 0x1a8]
mov dword [esp], eax
mov eax, dword [esp + 0x1ac]
mov dword [esp + 4], eax
mov dword [esp + 8], edx
call fcn.0048ead0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, ecx
mov ebx, eax
mov dword [esp + 0x130], edx
mov dword [esp + 0x74], ebx
mov eax, dword [esp + 0x198]
mov ecx, dword [eax + 0xc]
mov dword [esp + 0xc8], ecx
lea ebp, [0x67c680]
mov dword [esp], ebp
call fcn.0040c260
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x84]
mov dword [eax + 4], ecx
mov ecx, dword [0x85d680]
test ecx, ecx
jne 0x62572b
mov ecx, dword [esp + 0x13c]
jmp 0x625739
call fcn.00468030
mov ecx, dword [esp + 0x13c]
mov dword [edi], ecx
mov dword [eax], ecx
mov ecx, dword [esp + 0x74]
mov dword [eax + 8], ecx
mov ecx, dword [0x85d680]
test ecx, ecx
jne 0x625755
mov ecx, dword [esp + 0x130]
jmp 0x625763
call fcn.00468030
mov ecx, dword [esp + 0x130]
mov dword [edi], ecx
mov dword [eax + 0xc], ecx
mov ecx, dword [esp + 0xc8]
dec ecx
mov dword [eax + 0x10], ecx
sar ecx, 0x1f
mov dword [eax + 0x14], ecx
mov ecx, dword [esp + 0x198]
mov edx, dword [ecx + 0x3c]
test edx, edx
jne 0x6257c7
mov dword [esp], ecx
lea edx, [0x6f1f80]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.00622030
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x198]
mov dword [edx + 0x3c], eax
mov eax, dword [0x85d680]
test eax, eax
je 0x6257c4
call fcn.00468040
mov dword [edi], ecx
mov eax, dword [edx + 0x40]
mov dword [edi + 4], eax
mov dword [edx + 0x40], ecx
mov dword [esp + 0x1b8], 0
mov dword [esp + 0x1bc], 0
add esp, 0x194
ret
mov dword [esp + 0x88], eax
mov dword [esp + 0x140], ecx
mov dword [esp], edx
mov eax, dword [esp + 0x1a0]
mov dword [esp + 4], eax
mov ecx, dword [esp + 0x1a4]
mov dword [esp + 8], ecx
call fcn.00628280
movzx eax, byte [esp + 0x18]
test al, al
jne 0x625956
movzx eax, byte [esp + 0x1b4]
test al, al
je 0x627abe
mov eax, dword [esp + 0x1b0]
test eax, eax
je 0x62584e
test eax, 0x200
jne 0x62584e
lea eax, [0x6f34e4]
mov ecx, dword [esp + 0x1a8]
jmp 0x625874
mov ecx, dword [esp + 0x1a8]
mov dword [esp], ecx
mov ecx, dword [esp + 0x1ac]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.0048ead0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x12c], ecx
mov dword [esp + 0x70], eax
mov dword [esp + 0x184], 0
mov dword [esp + 0x188], 0
mov dword [esp + 0x18c], 0
mov dword [esp + 0x190], 0
mov edx, dword [esp + 0x19c]
mov dword [esp], edx
mov edx, dword [esp + 0x1a0]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x1a4]
mov dword [esp + 8], edx
call fcn.00409b30
mov eax, dword [esp + 0xc]
lea ecx, [0x65b4e0]
mov dword [esp + 0x184], ecx
mov dword [esp + 0x188], eax
mov eax, dword [esp + 0x70]
test eax, eax
je 0x6258f3
mov eax, dword [eax + 4]
mov dword [esp + 0x18c], eax
mov eax, dword [esp + 0x12c]
mov dword [esp + 0x190], eax
lea eax, [0x6a4a00]
mov dword [esp], eax
mov dword [esp + 4], 0x47
lea eax, [esp + 0x184]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004c0e90
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x1b8], eax
mov dword [esp + 0x1bc], ecx
add esp, 0x194
ret
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x88]
mov ecx, dword [ecx + 0x10]
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x14]
mov ebp, dword [esp + 0x140]
mov dword [esp], ebp
mov dword [esp + 4], eax
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebx
call ecx
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x1b8], eax
mov dword [esp + 0x1bc], ecx
add esp, 0x194
ret
mov eax, dword [esp + 0x19c]
movzx ecx, byte [eax]
mov edx, dword [esp + 0x28]
mov dword [esp + 0xac], edx
mov ebx, dword [esp + 0x20]
mov dword [esp + 0x160], ebx
mov ebp, dword [esp + 0x24]
mov dword [esp + 0x15c], ebp
cmp cl, 0x66
ja 0x626335
cmp cl, 0x22
je 0x6259e8
cmp cl, 0x66
je 0x6264e9
jmp 0x626aed
mov dword [esp], eax
mov ecx, dword [esp + 0x1a0]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x1a4]
mov dword [esp + 8], edx
call fcn.00628280
movzx eax, byte [esp + 0x18]
mov ecx, dword [esp + 0x14]
test al, al
je 0x6261fc
mov eax, dword [esp + 0xac]
mov edx, eax
and eax, 0x1f
nop
mov ebx, dword [esp + 0x10]
mov dword [esp + 0x90], ebx
mov ebp, dword [esp + 0xc]
mov dword [esp + 0x148], ebp
nop
cmp eax, 0x14
je 0x626011
cmp eax, 0x17
jne 0x625d21
mov dword [esp + 0x94], ecx
test edx, 0x200
jne 0x625a6b
lea eax, [0x6f34e4]
mov esi, dword [esp + 0x160]
jmp 0x625a93
mov eax, dword [esp + 0x160]
mov dword [esp], eax
mov ecx, dword [esp + 0x15c]
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.0048ead0
mov eax, dword [esp + 0xc]
mov ebx, dword [esp + 0x10]
mov esi, ebx
mov eax, dword [eax + 0x28]
mov dword [esp], esi
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov eax, dword [eax + 0x50]
mov dword [esp], ecx
call eax
cmp dword [esp + 4], 8
je 0x625bcb
mov eax, dword [esp + 0xac]
test eax, 0x200
jne 0x625ad3
lea eax, [0x6f34e4]
mov ebx, dword [esp + 0x160]
jmp 0x625af9
mov ecx, dword [esp + 0x160]
mov dword [esp], ecx
mov ecx, dword [esp + 0x15c]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.0048ead0
mov eax, dword [esp + 0xc]
mov ebx, dword [esp + 0x10]
mov dword [esp + 0x10c], ebx
mov dword [esp + 0x50], eax
mov ecx, dword [esp + 0x198]
mov edx, dword [ecx + 0xc]
mov dword [esp + 0xc8], edx
lea ebp, [0x67c680]
mov dword [esp], ebp
call fcn.0040c260
mov eax, dword [esp + 4]
mov dword [eax + 4], 6
lea ecx, [0x69136c]
mov dword [eax], ecx
mov ecx, dword [esp + 0x50]
mov dword [eax + 8], ecx
mov ecx, dword [0x85d680]
test ecx, ecx
jne 0x625b50
mov ecx, dword [esp + 0x10c]
jmp 0x625b5e
call fcn.00468030
mov ecx, dword [esp + 0x10c]
mov dword [edi], ecx
mov dword [eax + 0xc], ecx
mov ecx, dword [esp + 0xc8]
dec ecx
mov dword [eax + 0x10], ecx
sar ecx, 0x1f
mov dword [eax + 0x14], ecx
mov ecx, dword [esp + 0x198]
mov edx, dword [ecx + 0x3c]
test edx, edx
jne 0x627a22
mov dword [esp], ecx
lea edx, [0x6f1f80]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.00622030
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x198]
mov dword [edx + 0x3c], eax
mov eax, dword [0x85d680]
test eax, eax
je 0x625bc3
call fcn.00468040
mov dword [edi], ecx
mov eax, dword [edx + 0x40]
mov dword [edi + 4], eax
mov dword [edx + 0x40], ecx
jmp 0x627a22
mov eax, dword [0x837848]
cmp dword [eax + 0x140], 0xffffffff
jne 0x625bf6
mov eax, dword [esp + 0x90]
lea ecx, [eax + eax*2]
mov edx, ecx
shl ecx, 1
sar ecx, 0x1f
shr ecx, 0x1d
lea ecx, [ecx + edx*2]
sar ecx, 3
jmp 0x625c03
mov eax, dword [esp + 0x90]
shr eax, 2
lea ecx, [eax + eax*2]
mov dword [esp + 0x80], ecx
lea eax, [0x662020]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], ecx
call fcn.0044d740
mov eax, dword [esp + 0xc]
mov dword [esp + 0x158], eax
mov ecx, dword [0x837848]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov ecx, dword [esp + 0x80]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ecx
mov edx, dword [esp + 0x148]
mov dword [esp + 0x10], edx
mov edx, dword [esp + 0x90]
mov dword [esp + 0x14], edx
mov edx, dword [esp + 0x94]
mov dword [esp + 0x18], edx
call fcn.0050c2a0
mov eax, dword [esp + 0x20]
test eax, eax
je 0x625cd1
mov eax, dword [esp + 0x198]
mov ecx, dword [eax + 0x3c]
nop
test ecx, ecx
jne 0x627a22
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x24]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.00622030
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x198]
mov dword [edx + 0x3c], eax
mov eax, dword [0x85d680]
test eax, eax
je 0x625cc9
call fcn.00468040
mov dword [edi], ecx
mov eax, dword [edx + 0x40]
mov dword [edi + 4], eax
mov dword [edx + 0x40], ecx
jmp 0x627a22
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x80]
cmp edx, ecx
jb 0x627ab9
mov eax, dword [esp + 0x160]
mov dword [esp], eax
mov eax, dword [esp + 0x15c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xac]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x158]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
call fcn.0048db30
jmp 0x627a22
cmp eax, 0x18
jne 0x625efe
test edx, 0x200
jne 0x625d41
lea eax, [0x6f34e4]
mov ecx, dword [esp + 0x160]
jmp 0x625d7e
mov eax, dword [esp + 0x160]
mov dword [esp], eax
mov ecx, dword [esp + 0x15c]
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.0048ead0
mov eax, dword [esp + 0xc]
mov ebx, dword [esp + 0x10]
mov edx, dword [esp + 0xac]
mov ebp, dword [esp + 0x148]
mov ecx, ebx
mov ebx, dword [esp + 0x90]
cmp dword [0x837948], eax
je 0x625d8d
xor eax, eax
jmp 0x625e1b
mov edx, dword [0x83794c]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.00404260
movzx eax, byte [esp + 0xc]
test al, al
jne 0x625dc5
mov edx, dword [esp + 0xac]
mov ebx, dword [esp + 0x90]
mov ebp, dword [esp + 0x148]
xor eax, eax
jmp 0x625e1b
lea eax, [esp + 0xcc]
mov dword [esp], eax
mov eax, dword [esp + 0x148]
mov dword [esp + 4], eax
mov ecx, dword [esp + 0x90]
mov dword [esp + 8], ecx
call fcn.00451510
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.0062b6d0
movzx eax, byte [esp + 8]
xor eax, 1
mov edx, dword [esp + 0xac]
mov ebx, dword [esp + 0x90]
mov ebp, dword [esp + 0x148]
test al, al
jne 0x625e5d
mov dword [esp], 0
mov dword [esp + 4], ebp
mov dword [esp + 8], ebx
call fcn.00451510
mov eax, dword [esp + 0x160]
mov dword [esp], eax
mov eax, dword [esp + 0x15c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xac]
mov dword [esp + 8], eax
call fcn.0048e640
jmp 0x627a22
mov dword [esp + 0x17c], 0
mov dword [esp + 0x180], 0
mov eax, dword [esp + 0x19c]
mov dword [esp], eax
mov eax, dword [esp + 0x1a0]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x1a4]
mov dword [esp + 8], eax
call fcn.00409b30
mov eax, dword [esp + 0xc]
lea ecx, [0x65b4e0]
mov dword [esp + 0x17c], ecx
mov dword [esp + 0x180], eax
lea eax, [0x6a3d3b]
mov dword [esp], eax
mov dword [esp + 4], 0x40
lea eax, [esp + 0x17c]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004c0e90
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x1b8], eax
mov dword [esp + 0x1bc], ecx
add esp, 0x194
ret
test edx, edx
je 0x625f19
test edx, 0x200
jne 0x625f19
lea eax, [0x6f34e4]
mov ebx, dword [esp + 0x160]
jmp 0x625f3f
mov eax, dword [esp + 0x160]
mov dword [esp], eax
mov eax, dword [esp + 0x15c]
mov dword [esp + 4], eax
mov dword [esp + 8], edx
call fcn.0048ead0
mov eax, dword [esp + 0xc]
mov ebx, dword [esp + 0x10]
mov dword [esp + 0x110], ebx
mov dword [esp + 0x54], eax
mov ecx, dword [esp + 0x198]
mov edx, dword [ecx + 0xc]
mov dword [esp + 0xc8], edx
lea ebp, [0x67c680]
mov dword [esp], ebp
call fcn.0040c260
mov eax, dword [esp + 4]
mov dword [eax + 4], 6
lea ecx, [0x69136c]
mov dword [eax], ecx
mov ecx, dword [esp + 0x54]
mov dword [eax + 8], ecx
mov ecx, dword [0x85d680]
test ecx, ecx
jne 0x625f96
mov ecx, dword [esp + 0x110]
jmp 0x625fa4
call fcn.00468030
mov ecx, dword [esp + 0x110]
mov dword [edi], ecx
mov dword [eax + 0xc], ecx
mov ecx, dword [esp + 0xc8]
dec ecx
mov dword [eax + 0x10], ecx
sar ecx, 0x1f
mov dword [eax + 0x14], ecx
mov ecx, dword [esp + 0x198]
mov edx, dword [ecx + 0x3c]
test edx, edx
jne 0x627a22
mov dword [esp], ecx
lea edx, [0x6f1f80]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.00622030
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x198]
mov dword [edx + 0x3c], eax
mov eax, dword [0x85d680]
test eax, eax
je 0x626009
call fcn.00468040
mov dword [edi], ecx
mov eax, dword [edx + 0x40]
mov dword [edi + 4], eax
mov dword [edx + 0x40], ecx
jmp 0x627a22
mov eax, dword [esp + 0x160]
mov dword [esp], eax
mov ecx, dword [esp + 0x15c]
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.0048d630
mov eax, dword [esp + 0xc]
test eax, eax
je 0x626150
mov eax, dword [esp + 0xac]
test eax, 0x200
jne 0x626058
lea eax, [0x6f34e4]
mov ebx, dword [esp + 0x160]
jmp 0x62607e
mov ecx, dword [esp + 0x160]
mov dword [esp], ecx
mov ecx, dword [esp + 0x15c]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.0048ead0
mov eax, dword [esp + 0xc]
mov ebx, dword [esp + 0x10]
mov dword [esp + 0x108], ebx
mov dword [esp + 0x4c], eax
mov ecx, dword [esp + 0x198]
mov edx, dword [ecx + 0xc]
mov dword [esp + 0xc8], edx
lea ebp, [0x67c680]
mov dword [esp], ebp
call fcn.0040c260
mov eax, dword [esp + 4]
mov dword [eax + 4], 6
lea ecx, [0x69136c]
mov dword [eax], ecx
mov ecx, dword [esp + 0x4c]
mov dword [eax + 8], ecx
mov ecx, dword [0x85d680]
test ecx, ecx
jne 0x6260d5
mov ecx, dword [esp + 0x108]
jmp 0x6260e3
call fcn.00468030
mov ecx, dword [esp + 0x108]
mov dword [edi], ecx
mov dword [eax + 0xc], ecx
mov ecx, dword [esp + 0xc8]
dec ecx
mov dword [eax + 0x10], ecx
sar ecx, 0x1f
mov dword [eax + 0x14], ecx
mov ecx, dword [esp + 0x198]
mov edx, dword [ecx + 0x3c]
test edx, edx
jne 0x627a22
mov dword [esp], ecx
lea edx, [0x6f1f80]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.00622030
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x198]
mov dword [edx + 0x3c], eax
mov eax, dword [0x85d680]
test eax, eax
je 0x626148
call fcn.00468040
mov dword [edi], ecx
mov eax, dword [edx + 0x40]
mov dword [edi + 4], eax
mov dword [edx + 0x40], ecx
jmp 0x627a22
mov dword [esp], 0
mov eax, dword [esp + 0x148]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x90]
mov dword [esp + 8], eax
call fcn.00451510
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00409ab0
mov eax, dword [esp + 8]
lea ecx, [0x661ce0]
mov dword [esp + 0x16c], ecx
mov dword [esp + 0x170], eax
mov ecx, dword [esp + 0x16c]
test ecx, ecx
je 0x6261c0
movzx edx, byte [ecx + 0xf]
nop
mov ebx, edx
and edx, 0x1f
test bl, 0x20
jne 0x6261c6
or edx, 0x80
jmp 0x6261c6
xor edx, edx
xor ecx, ecx
xor eax, eax
mov ebx, dword [esp + 0x160]
mov dword [esp], ebx
mov ebx, dword [esp + 0x15c]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0xac]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], edx
call fcn.0048d950
jmp 0x627a22
movzx eax, byte [esp + 0x1b4]
test al, al
je 0x627aa1
mov eax, dword [esp + 0xac]
test eax, eax
je 0x62622d
test eax, 0x200
jne 0x62622d
lea eax, [0x6f34e4]
mov ebx, dword [esp + 0x160]
jmp 0x626253
mov ecx, dword [esp + 0x160]
mov dword [esp], ecx
mov ecx, dword [esp + 0x15c]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.0048ead0
mov eax, dword [esp + 0xc]
mov ebx, dword [esp + 0x10]
mov dword [esp + 0x114], ebx
mov dword [esp + 0x58], eax
mov dword [esp + 0x184], 0
mov dword [esp + 0x188], 0
mov dword [esp + 0x18c], 0
mov dword [esp + 0x190], 0
mov ecx, dword [esp + 0x19c]
mov dword [esp], ecx
mov ecx, dword [esp + 0x1a0]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x1a4]
mov dword [esp + 8], ecx
call fcn.00409b30
mov eax, dword [esp + 0xc]
lea ecx, [0x65b4e0]
mov dword [esp + 0x184], ecx
mov dword [esp + 0x188], eax
mov eax, dword [esp + 0x58]
test eax, eax
je 0x6262d2
mov eax, dword [eax + 4]
mov dword [esp + 0x18c], eax
mov eax, dword [esp + 0x114]
mov dword [esp + 0x190], eax
lea eax, [0x6a4a00]
mov dword [esp], eax
mov dword [esp + 4], 0x47
lea eax, [esp + 0x184]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004c0e90
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x1b8], eax
mov dword [esp + 0x1bc], ecx
add esp, 0x194
ret
cmp cl, 0x6e
jne 0x6264e0
movzx ecx, byte [esp + 0x1b4]
test cl, cl
je 0x6264b8
mov ecx, dword [esp + 0x1a0]
cmp ecx, 4
jne 0x626366
cmp dword [eax], 0x6c6c756e
je 0x6264b8
test edx, edx
je 0x62637a
test edx, 0x200
jne 0x62637a
lea edx, [0x6f34e4]
jmp 0x6263a2
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], edx
call fcn.0048ead0
mov eax, dword [esp + 0xc]
mov ebx, dword [esp + 0x10]
mov ecx, dword [esp + 0x1a0]
mov edx, eax
mov eax, dword [esp + 0x19c]
mov dword [esp + 0x128], ebx
mov dword [esp + 0x6c], edx
mov dword [esp + 0x184], 0
mov dword [esp + 0x188], 0
mov dword [esp + 0x18c], 0
mov dword [esp + 0x190], 0
mov dword [esp], eax
mov dword [esp + 4], ecx
mov eax, dword [esp + 0x1a4]
mov dword [esp + 8], eax
call fcn.00409b30
mov eax, dword [esp + 0xc]
lea ecx, [0x65b4e0]
mov dword [esp + 0x184], ecx
mov dword [esp + 0x188], eax
mov eax, dword [esp + 0x6c]
test eax, eax
je 0x626415
mov edx, dword [eax + 4]
jmp 0x626417
mov edx, eax
mov dword [esp + 0x18c], edx
mov eax, dword [esp + 0x128]
mov dword [esp + 0x190], eax
lea eax, [0x6a4a00]
mov dword [esp], eax
mov dword [esp + 4], 0x47
lea eax, [esp + 0x184]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004c0e90
mov eax, dword [esp + 0x198]
mov ecx, dword [eax + 0x3c]
test ecx, ecx
jne 0x627a22
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.00622030
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x198]
mov dword [edx + 0x3c], eax
mov eax, dword [0x85d680]
test eax, eax
je 0x6264b0
call fcn.00468040
mov dword [edi], ecx
mov eax, dword [edx + 0x40]
mov dword [edi + 4], eax
mov dword [edx + 0x40], ecx
jmp 0x627a22
mov eax, edx
and edx, 0x1f
lea ecx, [edx - 0x14]
nop
nop
cmp ecx, 3
ja 0x627a22
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], eax
call fcn.0048c820
jmp 0x627a22
cmp cl, 0x74
jne 0x626aed
movzx esi, byte [esp + 0x1b4]
xchg esi, eax
test al, al
xchg esi, eax
je 0x62667c
mov edi, dword [esp + 0x1a0]
cmp edi, 4
jne 0x626513
cmp dword [eax], 0x65757274
je 0x626683
cmp edi, 5
jne 0x62652a
cmp dword [eax], 0x736c6166
jne 0x62652a
cmp byte [eax + 4], 0x65
je 0x626683
test edx, edx
je 0x62653e
test edx, 0x200
jne 0x62653e
lea ecx, [0x6f34e4]
jmp 0x626566
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], edx
call fcn.0048ead0
mov eax, dword [esp + 0xc]
mov ebx, dword [esp + 0x10]
mov edi, dword [esp + 0x1a0]
mov ecx, eax
mov eax, dword [esp + 0x19c]
mov dword [esp + 0x124], ebx
mov dword [esp + 0x68], ecx
mov dword [esp + 0x184], 0
mov dword [esp + 0x188], 0
mov dword [esp + 0x18c], 0
mov dword [esp + 0x190], 0
mov dword [esp], eax
mov dword [esp + 4], edi
mov eax, dword [esp + 0x1a4]
mov dword [esp + 8], eax
call fcn.00409b30
mov eax, dword [esp + 0xc]
lea ecx, [0x65b4e0]
mov dword [esp + 0x184], ecx
mov dword [esp + 0x188], eax
mov eax, dword [esp + 0x68]
test eax, eax
je 0x6265d9
mov ecx, dword [eax + 4]
jmp 0x6265db
mov ecx, eax
mov dword [esp + 0x18c], ecx
mov eax, dword [esp + 0x124]
mov dword [esp + 0x190], eax
lea eax, [0x6a4a00]
mov dword [esp], eax
mov dword [esp + 4], 0x47
lea eax, [esp + 0x184]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004c0e90
mov eax, dword [esp + 0x198]
mov ecx, dword [eax + 0x3c]
test ecx, ecx
jne 0x627a22
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.00622030
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x198]
mov dword [edx + 0x3c], eax
mov eax, dword [0x85d680]
test eax, eax
je 0x626674
call fcn.00468040
mov dword [edi], ecx
mov eax, dword [edx + 0x40]
mov dword [edi + 4], eax
mov dword [edx + 0x40], ecx
jmp 0x627a22
mov edi, dword [esp + 0x1a0]
and edx, 0x1f
nop
nop
cmp cl, 0x74
sete cl
cmp edx, 1
je 0x626acd
cmp edx, 0x14
je 0x626907
xchg esi, eax
test al, al
xchg esi, eax
je 0x626803
mov ecx, dword [esp + 0xac]
test ecx, ecx
je 0x6266c5
test ecx, 0x200
jne 0x6266c5
lea ecx, [0x6f34e4]
jmp 0x6266ed
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
call fcn.0048ead0
mov eax, dword [esp + 0xc]
mov ebx, dword [esp + 0x10]
mov edi, dword [esp + 0x1a0]
mov ecx, eax
mov eax, dword [esp + 0x19c]
mov dword [esp + 0x120], ebx
mov dword [esp + 0x64], ecx
mov dword [esp + 0x184], 0
mov dword [esp + 0x188], 0
mov dword [esp + 0x18c], 0
mov dword [esp + 0x190], 0
mov dword [esp], eax
mov dword [esp + 4], edi
mov eax, dword [esp + 0x1a4]
mov dword [esp + 8], eax
call fcn.00409b30
mov eax, dword [esp + 0xc]
lea ecx, [0x65b4e0]
mov dword [esp + 0x184], ecx
mov dword [esp + 0x188], eax
mov eax, dword [esp + 0x64]
test eax, eax
je 0x626760
mov ecx, dword [eax + 4]
jmp 0x626762
mov ecx, eax
mov dword [esp + 0x18c], ecx
mov eax, dword [esp + 0x120]
mov dword [esp + 0x190], eax
lea eax, [0x6a4a00]
mov dword [esp], eax
mov dword [esp + 4], 0x47
lea eax, [esp + 0x184]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004c0e90
mov eax, dword [esp + 0x198]
mov ecx, dword [eax + 0x3c]
test ecx, ecx
jne 0x627a22
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.00622030
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x198]
mov dword [edx + 0x3c], eax
mov eax, dword [0x85d680]
test eax, eax
je 0x6267fb
call fcn.00468040
mov dword [edi], ecx
mov eax, dword [edx + 0x40]
mov dword [edi + 4], eax
mov dword [edx + 0x40], ecx
jmp 0x627a22
mov eax, dword [esp + 0xac]
test eax, eax
je 0x62681d
test eax, 0x200
jne 0x62681d
lea eax, [0x6f34e4]
jmp 0x626835
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], eax
call fcn.0048ead0
mov eax, dword [esp + 0xc]
mov ebx, dword [esp + 0x10]
mov dword [esp + 0x11c], ebx
mov dword [esp + 0x60], eax
mov ecx, dword [esp + 0x198]
mov edx, dword [ecx + 0xc]
mov dword [esp + 0xc8], edx
lea ebp, [0x67c680]
mov dword [esp], ebp
call fcn.0040c260
mov eax, dword [esp + 4]
mov dword [eax + 4], 4
lea ecx, [0x691093]
mov dword [eax], ecx
mov ecx, dword [esp + 0x60]
mov dword [eax + 8], ecx
mov ecx, dword [0x85d680]
test ecx, ecx
jne 0x62688c
mov ecx, dword [esp + 0x11c]
jmp 0x62689a
call fcn.00468030
mov ecx, dword [esp + 0x11c]
mov dword [edi], ecx
mov dword [eax + 0xc], ecx
mov ecx, dword [esp + 0xc8]
dec ecx
mov dword [eax + 0x10], ecx
sar ecx, 0x1f
mov dword [eax + 0x14], ecx
mov ecx, dword [esp + 0x198]
mov edx, dword [ecx + 0x3c]
test edx, edx
jne 0x627a22
mov dword [esp], ecx
lea edx, [0x6f1f80]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.00622030
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x198]
mov dword [edx + 0x3c], eax
mov eax, dword [0x85d680]
test eax, eax
je 0x6268ff
call fcn.00468040
mov dword [edi], ecx
mov eax, dword [edx + 0x40]
mov dword [edi + 4], eax
mov dword [edx + 0x40], ecx
jmp 0x627a22
mov byte [esp + 0x2f], cl
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov eax, dword [esp + 0xac]
mov dword [esp + 8], eax
call fcn.0048d630
mov eax, dword [esp + 0xc]
test eax, eax
jne 0x6269b8
movzx eax, byte [esp + 0x2f]
movzx eax, al
lea ecx, [0x82c240]
lea eax, [ecx + eax*8]
lea ecx, [0x661d20]
mov dword [esp + 0x174], ecx
mov dword [esp + 0x178], eax
mov eax, dword [esp + 0x174]
test eax, eax
je 0x62697c
movzx ecx, byte [eax + 0xf]
nop
mov edx, ecx
and ecx, 0x1f
test dl, 0x20
jne 0x626973
or ecx, 0x80
mov edx, dword [esp + 0x178]
jmp 0x626982
xor ecx, ecx
xor eax, eax
xor edx, edx
mov ebx, dword [esp + 0x160]
mov dword [esp], ebx
mov ebx, dword [esp + 0x15c]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0xac]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], edx
mov dword [esp + 0x14], ecx
call fcn.0048d950
jmp 0x627a22
mov eax, dword [esp + 0xac]
test eax, 0x200
jne 0x6269d5
lea eax, [0x6f34e4]
mov ebx, dword [esp + 0x160]
jmp 0x6269fb
mov ecx, dword [esp + 0x160]
mov dword [esp], ecx
mov ecx, dword [esp + 0x15c]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.0048ead0
mov eax, dword [esp + 0xc]
mov ebx, dword [esp + 0x10]
mov dword [esp + 0x5c], eax
mov dword [esp + 0x118], ebx
mov ecx, dword [esp + 0x198]
mov edx, dword [ecx + 0xc]
mov dword [esp + 0xc8], edx
lea ebp, [0x67c680]
mov dword [esp], ebp
call fcn.0040c260
mov eax, dword [esp + 4]
mov dword [eax + 4], 4
lea ecx, [0x691093]
mov dword [eax], ecx
mov ecx, dword [esp + 0x5c]
mov dword [eax + 8], ecx
mov ecx, dword [0x85d680]
test ecx, ecx
jne 0x626a52
mov ecx, dword [esp + 0x118]
jmp 0x626a60
call fcn.00468030
mov ecx, dword [esp + 0x118]
mov dword [edi], ecx
mov dword [eax + 0xc], ecx
mov ecx, dword [esp + 0xc8]
dec ecx
mov dword [eax + 0x10], ecx
sar ecx, 0x1f
mov dword [eax + 0x14], ecx
mov ecx, dword [esp + 0x198]
mov edx, dword [ecx + 0x3c]
test edx, edx
jne 0x627a22
mov dword [esp], ecx
lea edx, [0x6f1f80]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.00622030
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x198]
mov dword [edx + 0x3c], eax
mov eax, dword [0x85d680]
test eax, eax
je 0x626ac5
call fcn.00468040
mov dword [edi], ecx
mov eax, dword [edx + 0x40]
mov dword [edi + 4], eax
mov dword [edx + 0x40], ecx
jmp 0x627a22
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov eax, dword [esp + 0xac]
mov dword [esp + 8], eax
mov byte [esp + 0xc], cl
call fcn.0048da70
jmp 0x627a22
cmp cl, 0x2d
je 0x626c26
add ecx, 0xffffffd0
cmp cl, 9
jbe 0x626c26
movzx ecx, byte [esp + 0x1b4]
test cl, cl
je 0x627a89
test edx, edx
je 0x626b26
test edx, 0x200
jne 0x626b26
lea ecx, [0x6f34e4]
jmp 0x626b47
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], edx
call fcn.0048ead0
mov eax, dword [esp + 0xc]
mov ebx, dword [esp + 0x10]
mov ecx, eax
mov eax, dword [esp + 0x19c]
mov dword [esp + 0x48], ecx
mov dword [esp + 0x104], ebx
mov dword [esp + 0x184], 0
mov dword [esp + 0x188], 0
mov dword [esp + 0x18c], 0
mov dword [esp + 0x190], 0
mov dword [esp], eax
mov eax, dword [esp + 0x1a0]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x1a4]
mov dword [esp + 8], eax
call fcn.00409b30
mov eax, dword [esp + 0xc]
lea ecx, [0x65b4e0]
mov dword [esp + 0x184], ecx
mov dword [esp + 0x188], eax
mov eax, dword [esp + 0x48]
test eax, eax
je 0x626bc1
mov ecx, dword [eax + 4]
jmp 0x626bc3
mov ecx, eax
mov dword [esp + 0x18c], ecx
mov eax, dword [esp + 0x104]
mov dword [esp + 0x190], eax
lea eax, [0x6a4a00]
mov dword [esp], eax
mov dword [esp + 4], 0x47
lea eax, [esp + 0x184]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004c0e90
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x1b8], eax
mov dword [esp + 0x1bc], ecx
add esp, 0x194
ret
mov dword [esp], 0
mov dword [esp + 4], eax
mov ecx, dword [esp + 0x1a0]
mov dword [esp + 8], ecx
call fcn.00451510
mov eax, dword [esp + 0xac]
mov ecx, eax
and eax, 0x1f
mov edx, dword [esp + 0x10]
mov dword [esp + 0x8c], edx
mov ebx, dword [esp + 0xc]
mov dword [esp + 0x144], ebx
cmp eax, 0xc
ja 0x627216
lea ebp, [eax - 2]
cmp ebp, 4
jbe 0x626f35
cmp eax, 7
jb 0x62749b
mov dword [esp], ebx
mov dword [esp + 4], edx
mov dword [esp + 8], 0xa
mov dword [esp + 0xc], 0x40
call fcn.00477240
mov eax, dword [esp + 0x18]
test eax, eax
jne 0x626d92
mov eax, dword [esp + 0x14]
mov dword [esp + 0xa8], eax
mov edx, dword [esp + 0x10]
mov dword [esp + 0x9c], edx
mov ebx, dword [esp + 0x160]
mov ebp, dword [ebx]
shl ebp, 3
lea ecx, [ebp - 0x40]
neg ecx
mov dword [esp + 0xc4], ecx
mov ebp, edx
shl edx, cl
shl eax, cl
lea edi, [ecx - 0x20]
mov ecx, edi
shl ebp, cl
neg ecx
mov dword [esp + 0xc0], ecx
mov ebx, dword [esp + 0x9c]
shr ebx, cl
mov dword [esp + 0xbc], ebx
mov esi, dword [esp + 0xc4]
cmp esi, 0x20
sbb ebx, ebx
mov dword [esp + 0xb8], ebx
and edx, ebx
and eax, ebx
mov ecx, esi
shr edx, cl
and edx, ebx
cmp edi, 0x20
sbb ebx, ebx
mov dword [esp + 0xb4], ebx
and ebp, ebx
mov ebx, dword [esp + 0xc0]
cmp ebx, 0x20
sbb ecx, ecx
mov esi, dword [esp + 0xbc]
and esi, ecx
or esi, eax
or ebp, esi
mov eax, ecx
mov ecx, ebx
mov esi, ebp
shl ebp, cl
and ebp, eax
or edx, ebp
mov ecx, edi
mov eax, esi
shr esi, cl
mov ecx, dword [esp + 0xc4]
shr eax, cl
mov ebx, dword [esp + 0xb8]
and eax, ebx
mov ebx, dword [esp + 0xb4]
and esi, ebx
or edx, esi
mov ebx, dword [esp + 0xa8]
cmp ebx, eax
setne al
mov ebp, dword [esp + 0x9c]
cmp ebp, edx
setne dl
or edx, eax
test dl, dl
je 0x626f03
mov eax, dword [esp + 0xac]
test eax, 0x200
jne 0x626daf
mov ebx, dword [esp + 0x160]
lea eax, [0x6f34e4]
jmp 0x626dd5
mov ecx, dword [esp + 0x160]
mov dword [esp], ecx
mov ecx, dword [esp + 0x15c]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.0048ead0
mov eax, dword [esp + 0xc]
mov ebx, dword [esp + 0x10]
mov dword [esp + 0x34], eax
mov dword [esp + 0xf0], ebx
mov ecx, dword [esp + 0x198]
mov edx, dword [ecx + 0xc]
mov dword [esp + 0xc8], edx
lea ebp, [0x67c680]
mov dword [esp], ebp
call fcn.0040c260
mov eax, dword [esp + 4]
mov dword [esp + 0x154], eax
mov dword [esp], 0
lea ecx, [0x691644]
mov dword [esp + 4], ecx
mov dword [esp + 8], 7
mov ecx, dword [esp + 0x144]
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0x8c]
mov dword [esp + 0x10], ecx
call fcn.00451270
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x154]
mov dword [edx + 4], eax
mov eax, dword [0x85d680]
test eax, eax
je 0x626e66
call fcn.00468040
mov dword [edi], ecx
mov eax, dword [edx]
mov dword [edi + 4], eax
mov dword [edx], ecx
mov eax, dword [esp + 0x34]
mov dword [edx + 8], eax
mov eax, dword [0x85d680]
test eax, eax
jne 0x626e82
mov eax, dword [esp + 0xf0]
jmp 0x626e96
call fcn.00468040
mov eax, dword [esp + 0xf0]
mov dword [edi], eax
mov ecx, dword [edx + 0xc]
mov dword [edi + 4], ecx
mov dword [edx + 0xc], eax
mov eax, dword [esp + 0xc8]
dec eax
mov dword [edx + 0x10], eax
sar eax, 0x1f
mov dword [edx + 0x14], eax
mov eax, dword [esp + 0x198]
mov ecx, dword [eax + 0x3c]
test ecx, ecx
jne 0x627a22
mov dword [esp], eax
lea ecx, [0x6f1f80]
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.00622030
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x198]
mov dword [edx + 0x3c], eax
mov eax, dword [0x85d680]
test eax, eax
je 0x626efb
call fcn.00468040
mov dword [edi], ecx
mov eax, dword [edx + 0x40]
mov dword [edi + 4], eax
mov dword [edx + 0x40], ecx
jmp 0x627a22
mov eax, dword [esp + 0x160]
mov dword [esp], eax
mov eax, dword [esp + 0x15c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xac]
mov dword [esp + 8], eax
mov dword [esp + 0x10], ebx
mov dword [esp + 0xc], ebp
call fcn.0048e540
jmp 0x627a22
mov dword [esp], ebx
mov dword [esp + 4], edx
mov dword [esp + 8], 0xa
mov dword [esp + 0xc], 0x40
call fcn.00477c60
mov eax, dword [esp + 0x18]
test eax, eax
jne 0x62706f
mov eax, dword [esp + 0x10]
mov dword [esp + 0xa0], eax
mov edx, dword [esp + 0x14]
mov dword [esp + 0xa4], edx
mov ebx, dword [esp + 0x160]
mov ebp, dword [ebx]
shl ebp, 3
lea ecx, [ebp - 0x40]
neg ecx
mov dword [esp + 0xc4], ecx
mov ebp, eax
shl eax, cl
shl edx, cl
lea edi, [ecx - 0x20]
mov dword [esp + 0xc0], edi
mov ecx, edi
shl ebp, cl
mov dword [esp + 0xbc], ebp
neg ecx
mov dword [esp + 0xb8], ecx
mov ebx, dword [esp + 0xa0]
shr ebx, cl
mov esi, dword [esp + 0xc4]
shr esi, 5
cmp ecx, 0x20
sbb ecx, ecx
mov dword [esp + 0xb4], ecx
and ebx, ecx
mov ebp, dword [esp + 0xc4]
cmp ebp, 0x20
sbb ecx, ecx
sbb edi, edi
and edx, ecx
or edx, ebx
and eax, ecx
mov ebx, ecx
mov ecx, ebp
shr eax, cl
and eax, ebx
xchg edi, ebx
not ebx
xchg edi, ebx
or ecx, edi
cmp esi, 1
sbb ebx, ebx
xor ebx, 0xffffffff
mov ebp, dword [esp + 0xc0]
cmp ebp, 0x20
sbb esi, esi
mov edi, dword [esp + 0xbc]
and edi, esi
or edi, edx
mov dword [esp + 0xc0], edi
mov edx, edi
sar edi, cl
mov ecx, dword [esp + 0xb8]
shl edx, cl
mov ecx, edi
mov edi, dword [esp + 0xb4]
and edx, edi
or eax, edx
xchg esi, ebx
not ebx
xchg esi, ebx
or esi, ebp
mov edx, ecx
mov ecx, esi
mov ebp, dword [esp + 0xc0]
sar ebp, cl
and ebx, ebp
or ebx, eax
mov eax, dword [esp + 0xa0]
cmp eax, ebx
setne bl
mov ebp, dword [esp + 0xa4]
cmp ebp, edx
setne dl
or edx, ebx
test dl, dl
je 0x6271e0
mov eax, dword [esp + 0xac]
test eax, 0x200
jne 0x62708c
mov ebx, dword [esp + 0x160]
lea eax, [0x6f34e4]
jmp 0x6270b2
mov ecx, dword [esp + 0x160]
mov dword [esp], ecx
mov ecx, dword [esp + 0x15c]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.0048ead0
mov eax, dword [esp + 0xc]
mov ebx, dword [esp + 0x10]
mov dword [esp + 0xf4], ebx
mov dword [esp + 0x38], eax
mov ecx, dword [esp + 0x198]
mov edx, dword [ecx + 0xc]
mov dword [esp + 0xc8], edx
lea ebp, [0x67c680]
mov dword [esp], ebp
call fcn.0040c260
mov eax, dword [esp + 4]
mov dword [esp + 0x154], eax
mov dword [esp], 0
lea ecx, [0x691644]
mov dword [esp + 4], ecx
mov dword [esp + 8], 7
mov ecx, dword [esp + 0x144]
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0x8c]
mov dword [esp + 0x10], ecx
call fcn.00451270
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x154]
mov dword [edx + 4], eax
mov eax, dword [0x85d680]
test eax, eax
je 0x627143
call fcn.00468040
mov dword [edi], ecx
mov eax, dword [edx]
mov dword [edi + 4], eax
mov dword [edx], ecx
mov eax, dword [esp + 0x38]
mov dword [edx + 8], eax
mov eax, dword [0x85d680]
test eax, eax
jne 0x62715f
mov eax, dword [esp + 0xf4]
jmp 0x627173
call fcn.00468040
mov eax, dword [esp + 0xf4]
mov dword [edi], eax
mov ecx, dword [edx + 0xc]
mov dword [edi + 4], ecx
mov dword [edx + 0xc], eax
mov eax, dword [esp + 0xc8]
dec eax
mov dword [edx + 0x10], eax
sar eax, 0x1f
mov dword [edx + 0x14], eax
mov eax, dword [esp + 0x198]
mov ecx, dword [eax + 0x3c]
test ecx, ecx
jne 0x627a22
mov dword [esp], eax
lea ecx, [0x6f1f80]
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.00622030
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x198]
mov dword [edx + 0x3c], eax
mov eax, dword [0x85d680]
test eax, eax
je 0x6271d8
call fcn.00468040
mov dword [edi], ecx
mov eax, dword [edx + 0x40]
mov dword [edi + 4], eax
mov dword [edx + 0x40], ecx
jmp 0x627a22
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x160]
mov dword [esp], edx
mov edx, dword [esp + 0x15c]
mov dword [esp + 4], edx
mov edx, dword [esp + 0xac]
mov dword [esp + 8], edx
mov dword [esp + 0x10], ecx
mov dword [esp + 0xc], eax
call fcn.0048df60
jmp 0x627a22
cmp eax, 0xe
ja 0x627492
mov dword [esp + 0xb0], eax
test ecx, 0x200
jne 0x62723d
lea ebp, [0x6f34e4]
mov esi, dword [esp + 0x160]
jmp 0x627267
mov eax, dword [esp + 0x160]
mov dword [esp], eax
mov edx, dword [esp + 0x15c]
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.0048ead0
mov eax, dword [esp + 0xc]
mov ebx, dword [esp + 0x10]
mov ebp, eax
mov esi, ebx
mov eax, dword [ebp + 0x18]
mov dword [esp], esi
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x144]
mov dword [esp], ecx
mov edx, dword [esp + 0x8c]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.00476aa0
mov eax, dword [esp + 0x14]
test eax, eax
je 0x6272a7
mov eax, dword [esp + 0xac]
test eax, 0x200
jmp 0x627303
mov eax, dword [esp + 0xb0]
cmp eax, 0xd
jne 0x627468
movsd xmm0, qword [esp + 0xc]
nop
xorps xmm1, xmm1
ucomisd xmm1, xmm0
jbe 0x6272d3
movsd xmm1, qword [0x6f12b8]
pxor xmm0, xmm1
movsd xmm1, qword [0x6f12a8]
ucomisd xmm0, xmm1
jbe 0x627468
movsd xmm1, qword [0x6f12b0]
ucomisd xmm1, xmm0
jb 0x627468
mov eax, dword [esp + 0xac]
test eax, 0x200
jne 0x627314
mov ebx, dword [esp + 0x160]
lea eax, [0x6f34e4]
jmp 0x62733a
mov ecx, dword [esp + 0x160]
mov dword [esp], ecx
mov ecx, dword [esp + 0x15c]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.0048ead0
mov eax, dword [esp + 0xc]
mov ebx, dword [esp + 0x10]
mov dword [esp + 0xec], ebx
mov dword [esp + 0x30], eax
mov ecx, dword [esp + 0x198]
mov edx, dword [ecx + 0xc]
mov dword [esp + 0xc8], edx
lea ebp, [0x67c680]
mov dword [esp], ebp
call fcn.0040c260
mov eax, dword [esp + 4]
mov dword [esp + 0x154], eax
mov dword [esp], 0
lea ecx, [0x691644]
mov dword [esp + 4], ecx
mov dword [esp + 8], 7
mov ecx, dword [esp + 0x144]
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0x8c]
mov dword [esp + 0x10], ecx
call fcn.00451270
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x154]
mov dword [edx + 4], eax
mov eax, dword [0x85d680]
test eax, eax
je 0x6273cb
call fcn.00468040
mov dword [edi], ecx
mov eax, dword [edx]
mov dword [edi + 4], eax
mov dword [edx], ecx
mov eax, dword [esp + 0x30]
mov dword [edx + 8], eax
mov eax, dword [0x85d680]
test eax, eax
jne 0x6273e7
mov eax, dword [esp + 0xec]
jmp 0x6273fb
call fcn.00468040
mov eax, dword [esp + 0xec]
mov dword [edi], eax
mov ecx, dword [edx + 0xc]
mov dword [edi + 4], ecx
mov dword [edx + 0xc], eax
mov eax, dword [esp + 0xc8]
dec eax
mov dword [edx + 0x10], eax
sar eax, 0x1f
mov dword [edx + 0x14], eax
mov eax, dword [esp + 0x198]
mov ecx, dword [eax + 0x3c]
test ecx, ecx
jne 0x627a22
mov dword [esp], eax
lea ecx, [0x6f1f80]
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.00622030
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x198]
mov dword [edx + 0x3c], eax
mov eax, dword [0x85d680]
test eax, eax
je 0x627460
call fcn.00468040
mov dword [edi], ecx
mov eax, dword [edx + 0x40]
mov dword [edi + 4], eax
mov dword [edx + 0x40], ecx
jmp 0x627a22
mov eax, dword [esp + 0x160]
mov dword [esp], eax
mov eax, dword [esp + 0x15c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xac]
mov dword [esp + 8], eax
call fcn.0048dea0
jmp 0x627a22
cmp eax, 0x14
je 0x6277b1
cmp eax, 0x18
jne 0x627536
test ecx, 0x200
jne 0x6274bb
lea eax, [0x6f34e4]
mov ebp, dword [esp + 0x160]
jmp 0x6274f8
mov eax, dword [esp + 0x160]
mov dword [esp], eax
mov edx, dword [esp + 0x15c]
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.0048ead0
mov eax, dword [esp + 0xc]
mov ebx, dword [esp + 0x10]
mov ecx, dword [esp + 0xac]
mov edx, dword [esp + 0x8c]
mov ebp, ebx
mov ebx, dword [esp + 0x144]
cmp dword [0x837948], eax
je 0x627504
xor eax, eax
jmp 0x627538
mov ecx, dword [0x83794c]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
call fcn.00404260
movzx eax, byte [esp + 0xc]
mov ecx, dword [esp + 0xac]
mov edx, dword [esp + 0x8c]
mov ebx, dword [esp + 0x144]
jmp 0x627538
xor eax, eax
test al, al
jne 0x627786
movzx eax, byte [esp + 0x1b4]
test al, al
je 0x627673
test ecx, ecx
je 0x62756b
test ecx, 0x200
jne 0x62756b
lea eax, [0x6f34e4]
mov ebx, dword [esp + 0x160]
jmp 0x627591
mov eax, dword [esp + 0x160]
mov dword [esp], eax
mov eax, dword [esp + 0x15c]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.0048ead0
mov eax, dword [esp + 0xc]
mov ebx, dword [esp + 0x10]
mov dword [esp + 0x100], ebx
mov dword [esp + 0x44], eax
mov dword [esp + 0x184], 0
mov dword [esp + 0x188], 0
mov dword [esp + 0x18c], 0
mov dword [esp + 0x190], 0
mov ecx, dword [esp + 0x19c]
mov dword [esp], ecx
mov ecx, dword [esp + 0x1a0]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x1a4]
mov dword [esp + 8], ecx
call fcn.00409b30
mov eax, dword [esp + 0xc]
lea ecx, [0x65b4e0]
mov dword [esp + 0x184], ecx
mov dword [esp + 0x188], eax
mov eax, dword [esp + 0x44]
test eax, eax
je 0x627610
mov eax, dword [eax + 4]
mov dword [esp + 0x18c], eax
mov eax, dword [esp + 0x100]
mov dword [esp + 0x190], eax
lea eax, [0x6a4a00]
mov dword [esp], eax
mov dword [esp + 4], 0x47
lea eax, [esp + 0x184]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004c0e90
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x1b8], eax
mov dword [esp + 0x1bc], ecx
add esp, 0x194
ret
test ecx, ecx
je 0x62768e
test ecx, 0x200
jne 0x62768e
lea eax, [0x6f34e4]
mov ebx, dword [esp + 0x160]
jmp 0x6276b4
mov eax, dword [esp + 0x160]
mov dword [esp], eax
mov eax, dword [esp + 0x15c]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.0048ead0
mov eax, dword [esp + 0xc]
mov ebx, dword [esp + 0x10]
mov dword [esp + 0xfc], ebx
mov dword [esp + 0x40], eax
mov ecx, dword [esp + 0x198]
mov edx, dword [ecx + 0xc]
mov dword [esp + 0xc8], edx
lea ebp, [0x67c680]
mov dword [esp], ebp
call fcn.0040c260
mov eax, dword [esp + 4]
mov dword [eax + 4], 6
lea ecx, [0x691444]
mov dword [eax], ecx
mov ecx, dword [esp + 0x40]
mov dword [eax + 8], ecx
mov ecx, dword [0x85d680]
test ecx, ecx
jne 0x62770b
mov ecx, dword [esp + 0xfc]
jmp 0x627719
call fcn.00468030
mov ecx, dword [esp + 0xfc]
mov dword [edi], ecx
mov dword [eax + 0xc], ecx
mov ecx, dword [esp + 0xc8]
dec ecx
mov dword [eax + 0x10], ecx
sar ecx, 0x1f
mov dword [eax + 0x14], ecx
mov ecx, dword [esp + 0x198]
mov edx, dword [ecx + 0x3c]
test edx, edx
jne 0x627a22
mov dword [esp], ecx
lea edx, [0x6f1f80]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.00622030
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x198]
mov dword [edx + 0x3c], eax
mov eax, dword [0x85d680]
test eax, eax
je 0x62777e
call fcn.00468040
mov dword [edi], ecx
mov eax, dword [edx + 0x40]
mov dword [edi + 4], eax
mov dword [edx + 0x40], ecx
jmp 0x627a22
mov eax, dword [esp + 0x160]
mov dword [esp], eax
mov eax, dword [esp + 0x15c]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], edx
call fcn.0048e640
jmp 0x627a22
mov eax, dword [esp + 0x198]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], edx
call fcn.006250d0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0xc]
mov ebx, dword [esp + 0x10]
test eax, eax
je 0x627838
mov eax, dword [esp + 0x198]
mov ecx, dword [eax + 0x3c]
nop
test ecx, ecx
jne 0x627a22
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.00622030
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x198]
mov dword [edx + 0x3c], eax
mov eax, dword [0x85d680]
test eax, eax
je 0x627830
call fcn.00468040
mov dword [edi], ecx
mov eax, dword [edx + 0x40]
mov dword [edi + 4], eax
mov dword [edx + 0x40], ecx
jmp 0x627a22
mov dword [esp + 0x98], ecx
mov dword [esp + 0x14c], ebx
mov dword [esp + 0x150], edx
mov eax, dword [esp + 0x160]
mov dword [esp], eax
mov ecx, dword [esp + 0x15c]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0xac]
mov dword [esp + 8], edx
call fcn.0048d630
mov eax, dword [esp + 0xc]
test eax, eax
je 0x627993
mov eax, dword [esp + 0xac]
test eax, 0x200
jne 0x62789b
lea eax, [0x6f34e4]
mov ebx, dword [esp + 0x160]
jmp 0x6278c1
mov ecx, dword [esp + 0x160]
mov dword [esp], ecx
mov ecx, dword [esp + 0x15c]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.0048ead0
mov eax, dword [esp + 0xc]
mov ebx, dword [esp + 0x10]
mov dword [esp + 0xf8], ebx
mov dword [esp + 0x3c], eax
mov ecx, dword [esp + 0x198]
mov edx, dword [ecx + 0xc]
mov dword [esp + 0xc8], edx
lea ebp, [0x67c680]
mov dword [esp], ebp
call fcn.0040c260
mov eax, dword [esp + 4]
mov dword [eax + 4], 6
lea ecx, [0x691444]
mov dword [eax], ecx
mov ecx, dword [esp + 0x3c]
mov dword [eax + 8], ecx
mov ecx, dword [0x85d680]
test ecx, ecx
jne 0x627918
mov ecx, dword [esp + 0xf8]
jmp 0x627926
call fcn.00468030
mov ecx, dword [esp + 0xf8]
mov dword [edi], ecx
mov dword [eax + 0xc], ecx
mov ecx, dword [esp + 0xc8]
dec ecx
mov dword [eax + 0x10], ecx
sar ecx, 0x1f
mov dword [eax + 0x14], ecx
mov ecx, dword [esp + 0x198]
mov edx, dword [ecx + 0x3c]
test edx, edx
jne 0x627a22
mov dword [esp], ecx
lea edx, [0x6f1f80]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.00622030
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x198]
mov dword [edx + 0x3c], eax
mov eax, dword [0x85d680]
test eax, eax
je 0x62798b
call fcn.00468040
mov dword [edi], ecx
mov eax, dword [edx + 0x40]
mov dword [edi + 4], eax
mov dword [edx + 0x40], ecx
jmp 0x627a22
mov eax, dword [esp + 0x98]
test eax, eax
je 0x6279eb
mov eax, dword [esp + 0x150]
mov dword [esp + 0x164], eax
mov eax, dword [esp + 0x14c]
mov dword [esp + 0x168], eax
mov eax, dword [esp + 0x164]
test eax, eax
je 0x6279e3
movzx ecx, byte [eax + 0xf]
nop
mov edx, ecx
and ecx, 0x1f
test dl, 0x20
jne 0x6279da
or ecx, 0x80
mov edx, dword [esp + 0x168]
jmp 0x6279f1
xor ecx, ecx
xor eax, eax
xor edx, edx
jmp 0x6279f1
xor ecx, ecx
xor eax, eax
xor edx, edx
mov ebx, dword [esp + 0x160]
mov dword [esp], ebx
mov ebx, dword [esp + 0x15c]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0xac]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], edx
mov dword [esp + 0x14], ecx
call fcn.0048d950
mov dword [esp + 0x1b8], 0
mov dword [esp + 0x1bc], 0
add esp, 0x194
ret
mov eax, dword [eax + 0x10]
mov ecx, dword [esp + 0x14]
mov dword [esp], ecx
mov ecx, dword [esp + 0x19c]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x1a0]
mov dword [esp + 8], ecx
mov ecx, dword [esp + 0x1a4]
mov dword [esp + 0xc], ecx
call eax
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x1b8], eax
mov dword [esp + 0x1bc], ecx
add esp, 0x194
ret
lea eax, [0x661ce0]
mov dword [esp], eax
lea eax, [0x6f12c8]
mov dword [esp + 4], eax
call fcn.00437e60
lea eax, [0x661ce0]
mov dword [esp], eax
lea eax, [0x6f12c8]
mov dword [esp + 4], eax
call fcn.00437e60
call fcn.004680d0
lea eax, [0x661ce0]
mov dword [esp], eax
lea eax, [0x6f12c8]
mov dword [esp + 4], eax
call fcn.00437e60
nop
call fcn.00466c30
jmp fcn.006252b0