Function at 0x6ef6a0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x6c]
cmp eax, dword [ecx + 8]
jbe 0x6f1e26
sub esp, 0xec
mov eax, dword [esp + 0xf8]
test eax, eax
jne 0x6ef831
mov eax, dword [esp + 0x100]
mov dword [esp], eax
mov eax, dword [esp + 0x104]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x108]
mov dword [esp + 8], eax
call fcn.004831d0
mov eax, dword [esp + 0x10]
mov dword [esp + 0xb8], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x78], ecx
mov edx, dword [esp + 0xf4]
mov dword [esp], edx
mov edx, dword [esp + 0xf8]
mov dword [esp + 4], edx
mov edx, dword [esp + 0xfc]
mov dword [esp + 8], edx
call fcn.00408180
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x78]
test ecx, ecx
je 0x6ef73b
mov ecx, dword [ecx + 4]
mov dword [esp + 0xdc], 0
mov dword [esp + 0xe0], 0
mov dword [esp + 0xe4], 0
mov dword [esp + 0xe8], 0
lea edx, [0x8279e0]
mov dword [esp + 0xdc], edx
mov dword [esp + 0xe0], eax
mov dword [esp + 0xe4], ecx
mov eax, dword [esp + 0xb8]
mov dword [esp + 0xe8], eax
lea eax, [0x8dd05a]
mov dword [esp], eax
mov dword [esp + 4], 0x47
lea eax, [esp + 0xdc]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004c6360
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0xf0]
mov ebx, dword [edx + 0x4c]
test ebx, ebx
je 0x6ef7f4
mov dword [esp + 0x110], 0
mov dword [esp + 0x114], 0
add esp, 0xec
ret
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.006ebce0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xf0]
mov dword [edx + 0x4c], eax
mov eax, dword [0xc6be00]
test eax, eax
jne 0x6ef825
mov dword [edx + 0x50], ecx
jmp 0x6ef7d7
lea edi, [edx + 0x50]
mov eax, ecx
call fcn.00451ff0
jmp 0x6ef7d7
mov eax, dword [esp + 0xf4]
cmp byte [eax], 0x6e
mov ecx, dword [esp + 0x100]
mov dword [esp], ecx
mov edx, dword [esp + 0x104]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0x108]
mov dword [esp + 8], ebx
xchg ebp, ebx
sete bl
xchg ebp, ebx
xchg ebp, eax
mov byte [esp + 0xc], al
xchg ebp, eax
call fcn.006ec3d0
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
mov ebx, dword [esp + 0x10]
mov ebp, dword [esp + 0x28]
mov esi, dword [esp + 0x24]
mov edi, dword [esp + 0x20]
test ebx, ebx
jne 0x6f1d79
test ecx, ecx
je 0x6efd44
mov edx, dword [esp + 0xf4]
movzx ebx, byte [edx]
cmp bl, 0x22
je 0x6efba7
movzx eax, byte [esp + 0x10c]
test al, al
jne 0x6efa47
cmp bl, 0x66
jne 0x6efa19
mov eax, 4
lea ecx, [0x8c0081]
mov dword [esp + 0x44], eax
mov dword [esp + 0x98], ecx
mov edx, dword [esp + 0x100]
mov dword [esp], edx
mov edx, dword [esp + 0x104]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x108]
mov dword [esp + 8], edx
call fcn.004831d0
mov eax, dword [esp + 0x10]
mov dword [esp + 0xb8], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x78], ecx
mov edx, dword [esp + 0xf0]
mov ebx, dword [edx + 0xc]
mov dword [esp + 0x74], ebx
lea ebp, [0x887040]
mov dword [esp], ebp
call fcn.0040a800
mov edi, dword [esp + 4]
mov eax, dword [esp + 0x44]
mov dword [edi + 4], eax
mov eax, dword [0xc6be00]
test eax, eax
jne 0x6efa08
mov ecx, dword [esp + 0x98]
mov dword [edi], ecx
mov ecx, dword [esp + 0x78]
mov dword [edi + 8], ecx
mov ecx, dword [0xc6be00]
test ecx, ecx
jne 0x6ef9ec
mov eax, dword [esp + 0xb8]
mov dword [edi + 0xc], eax
mov eax, dword [esp + 0x74]
dec eax
mov dword [edi + 0x10], eax
sar eax, 0x1f
mov dword [edi + 0x14], eax
mov eax, dword [esp + 0xf0]
mov ecx, dword [eax + 0x4c]
test ecx, ecx
je 0x6ef9a9
mov dword [esp + 0x110], 0
mov dword [esp + 0x114], 0
add esp, 0xec
ret
mov dword [esp], eax
lea ecx, [0x96e830]
mov dword [esp + 4], ecx
mov dword [esp + 8], edi
call fcn.006ebce0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xf0]
mov dword [edx + 0x4c], eax
mov eax, dword [0xc6be00]
test eax, eax
jne 0x6ef9e0
mov dword [edx + 0x50], ecx
jmp 0x6ef98c
lea edi, [edx + 0x50]
mov eax, ecx
call fcn.00451ff0
jmp 0x6ef98c
lea ecx, [edi + 0xc]
mov eax, edi
mov edi, ecx
mov edx, eax
mov eax, dword [esp + 0xb8]
call fcn.00451ff0
mov edi, edx
jmp 0x6ef970
mov eax, dword [esp + 0x98]
call fcn.00451ff0
jmp 0x6ef951
cmp bl, 0x6e
jne 0x6efa2e
mov eax, 4
lea ecx, [0x8c0119]
jmp 0x6ef8d0
cmp bl, 0x74
je 0x6ef8c5
mov eax, 6
lea ecx, [0x8c0701]
jmp 0x6ef8d0
mov eax, dword [esp + 0x100]
mov dword [esp], eax
mov eax, dword [esp + 0x104]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x108]
mov dword [esp + 8], eax
call fcn.004831d0
mov eax, dword [esp + 0x10]
mov dword [esp + 0xb8], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x78], ecx
mov edx, dword [esp + 0xf4]
mov dword [esp], edx
mov edx, dword [esp + 0xf8]
mov dword [esp + 4], edx
mov edx, dword [esp + 0xfc]
mov dword [esp + 8], edx
call fcn.00408180
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x78]
test ecx, ecx
je 0x6efab3
mov ecx, dword [ecx + 4]
mov dword [esp + 0xdc], 0
mov dword [esp + 0xe0], 0
mov dword [esp + 0xe4], 0
mov dword [esp + 0xe8], 0
lea edx, [0x8279e0]
mov dword [esp + 0xdc], edx
mov dword [esp + 0xe0], eax
mov dword [esp + 0xe4], ecx
mov eax, dword [esp + 0xb8]
mov dword [esp + 0xe8], eax
lea eax, [0x8dd05a]
mov dword [esp], eax
mov dword [esp + 4], 0x47
lea eax, [esp + 0xdc]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004c6360
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0xf0]
mov ebx, dword [edx + 0x4c]
test ebx, ebx
je 0x6efb6c
mov dword [esp + 0x110], 0
mov dword [esp + 0x114], 0
add esp, 0xec
ret
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.006ebce0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0xf0]
mov dword [edx + 0x4c], ecx
mov ecx, dword [0xc6be00]
test ecx, ecx
jne 0x6efb9d
mov dword [edx + 0x50], eax
jmp 0x6efb4f
lea edi, [edx + 0x50]
call fcn.00451ff0
jmp 0x6efb4f
mov dword [esp + 0x9c], eax
mov dword [esp + 0x48], ecx
mov dword [esp], edx
mov eax, dword [esp + 0xf8]
mov dword [esp + 4], eax
mov ecx, dword [esp + 0xfc]
mov dword [esp + 8], ecx
call fcn.006f2620
movzx eax, byte [esp + 0x18]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xc]
mov ebx, dword [esp + 0x14]
test al, al
jne 0x6efd08
movzx eax, byte [esp + 0x10c]
test al, al
je 0x6f1e0d
mov eax, dword [esp + 0x100]
mov dword [esp], eax
mov eax, dword [esp + 0x104]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x108]
mov dword [esp + 8], eax
call fcn.004831d0
mov eax, dword [esp + 0x10]
mov dword [esp + 0xb8], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x78], ecx
mov edx, dword [esp + 0xf4]
mov dword [esp], edx
mov edx, dword [esp + 0xf8]
mov dword [esp + 4], edx
mov edx, dword [esp + 0xfc]
mov dword [esp + 8], edx
call fcn.00408180
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x78]
test ecx, ecx
je 0x6efc65
mov ecx, dword [ecx + 4]
mov dword [esp + 0xdc], 0
mov dword [esp + 0xe0], 0
mov dword [esp + 0xe4], 0
mov dword [esp + 0xe8], 0
lea edx, [0x8279e0]
mov dword [esp + 0xdc], edx
mov dword [esp + 0xe0], eax
mov dword [esp + 0xe4], ecx
mov eax, dword [esp + 0xb8]
mov dword [esp + 0xe8], eax
lea eax, [0x8dd05a]
mov dword [esp], eax
mov dword [esp + 4], 0x47
lea eax, [esp + 0xdc]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004c6360
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x110], eax
mov dword [esp + 0x114], ecx
add esp, 0xec
ret
mov eax, dword [esp + 0x48]
mov eax, dword [eax + 0x10]
mov ebp, dword [esp + 0x9c]
mov dword [esp], ebp
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebx
call eax
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x110], eax
mov dword [esp + 0x114], ecx
add esp, 0xec
ret
mov dword [esp + 0x70], ebp
mov dword [esp + 0xb4], esi
mov dword [esp + 0xb0], edi
mov eax, dword [esp + 0xf4]
movzx ecx, byte [eax]
cmp cl, 0x66
ja 0x6f1b80
cmp cl, 0x22
je 0x6f13b9
cmp cl, 0x66
jne 0x6f0412
movzx edx, byte [esp + 0x10c]
test dl, dl
je 0x6f0406
mov ebx, dword [esp + 0xf8]
cmp ebx, 4
je 0x6f03e7
mov dword [esp + 0x8c], eax
mov eax, 1
mov byte [esp + 0x2f], al
mov eax, dword [esp + 0x8c]
movzx esi, byte [esp + 0x2f]
xchg esi, eax
test al, al
xchg esi, eax
je 0x6efdd5
cmp ebx, 5
je 0x6f03cb
mov esi, 1
xchg esi, eax
test al, al
xchg esi, eax
jne 0x6f028a
cmp cl, 0x74
sete cl
nop
mov esi, ebp
and ebp, 0x1f
cmp ebp, 1
je 0x6f026a
cmp ebp, 0x14
je 0x6f0066
test dl, dl
je 0x6eff4f
mov dword [esp], edi
mov eax, dword [esp + 0xb4]
mov dword [esp + 4], eax
mov dword [esp + 8], esi
call fcn.004831d0
mov eax, dword [esp + 0x10]
mov dword [esp + 0xb8], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x78], ecx
mov edx, dword [esp + 0xf4]
mov dword [esp], edx
mov edx, dword [esp + 0xf8]
mov dword [esp + 4], edx
mov edx, dword [esp + 0xfc]
mov dword [esp + 8], edx
call fcn.00408180
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x78]
test ecx, ecx
je 0x6efe59
mov ecx, dword [ecx + 4]
mov dword [esp + 0xdc], 0
mov dword [esp + 0xe0], 0
mov dword [esp + 0xe4], 0
mov dword [esp + 0xe8], 0
lea edx, [0x8279e0]
mov dword [esp + 0xdc], edx
mov dword [esp + 0xe0], eax
mov dword [esp + 0xe4], ecx
mov eax, dword [esp + 0xb8]
mov dword [esp + 0xe8], eax
lea eax, [0x8dd05a]
mov dword [esp], eax
mov dword [esp + 4], 0x47
lea eax, [esp + 0xdc]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004c6360
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0xf0]
mov ebx, dword [edx + 0x4c]
test ebx, ebx
je 0x6eff12
mov dword [esp + 0x110], 0
mov dword [esp + 0x114], 0
add esp, 0xec
ret
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.006ebce0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xf0]
mov dword [edx + 0x4c], eax
mov eax, dword [0xc6be00]
test eax, eax
jne 0x6eff43
mov dword [edx + 0x50], ecx
jmp 0x6efef5
lea edi, [edx + 0x50]
mov eax, ecx
call fcn.00451ff0
jmp 0x6efef5
mov dword [esp], edi
mov eax, dword [esp + 0xb4]
mov dword [esp + 4], eax
mov dword [esp + 8], esi
call fcn.004831d0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x78], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0xb8], ecx
mov edx, dword [esp + 0xf0]
mov ebx, dword [edx + 0xc]
mov dword [esp + 0x74], ebx
lea ebp, [0x887040]
mov dword [esp], ebp
call fcn.0040a800
mov edi, dword [esp + 4]
mov dword [edi + 4], 4
mov eax, dword [0xc6be00]
test eax, eax
jne 0x6f0056
lea ecx, [0x8c0081]
mov dword [edi], ecx
mov ecx, dword [esp + 0x78]
mov dword [edi + 8], ecx
mov ecx, dword [0xc6be00]
test ecx, ecx
jne 0x6f003a
mov eax, dword [esp + 0xb8]
mov dword [edi + 0xc], eax
mov eax, dword [esp + 0x74]
dec eax
mov dword [edi + 0x10], eax
sar eax, 0x1f
mov dword [edi + 0x14], eax
mov eax, dword [esp + 0xf0]
mov ecx, dword [eax + 0x4c]
test ecx, ecx
jne 0x6efef5
mov dword [esp], eax
lea ecx, [0x96e830]
mov dword [esp + 4], ecx
mov dword [esp + 8], edi
call fcn.006ebce0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xf0]
mov dword [edx + 0x4c], eax
mov eax, dword [0xc6be00]
test eax, eax
jne 0x6f002b
mov dword [edx + 0x50], ecx
jmp 0x6efef5
lea edi, [edx + 0x50]
mov eax, ecx
call fcn.00451ff0
jmp 0x6efef5
lea ecx, [edi + 0xc]
mov eax, edi
mov edi, ecx
mov edx, eax
mov eax, dword [esp + 0xb8]
call fcn.00451ff0
mov edi, edx
jmp 0x6effd1
lea eax, [0x8c0081]
call fcn.00451ff0
jmp 0x6effb6
mov byte [esp + 0x2e], cl
mov dword [esp], edi
mov eax, dword [esp + 0xb4]
mov dword [esp + 4], eax
mov dword [esp + 8], esi
call fcn.00480d50
mov eax, dword [esp + 0xc]
test eax, eax
jne 0x6f0148
movzx ecx, byte [esp + 0x2e]
movzx ecx, cl
lea edx, [0xc1e420]
lea eax, [edx + ecx]
nop
movzx ecx, byte [0xc584b0]
test cl, cl
je 0x6f0140
lea ecx, [0x83f1c0]
mov dword [0xc584b4], ecx
mov edx, dword [0xc6be00]
test edx, edx
jne 0x6f0133
mov dword [0xc584b8], eax
mov dword [esp + 0xcc], ecx
mov dword [esp + 0xd0], eax
mov ecx, dword [esp + 0xcc]
test ecx, ecx
je 0x6f012b
nop
movzx edx, byte [ecx + 0xf]
mov ebx, edx
and edx, 0x1f
test bl, 0x20
jne 0x6f00f8
or edx, 0x80
mov ebx, dword [esp + 0xb0]
mov dword [esp], ebx
mov ebx, dword [esp + 0xb4]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x70]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], edx
call fcn.00481bd0
jmp 0x6efef5
xor eax, eax
xor ecx, ecx
xor edx, edx
jmp 0x6f00f8
lea edi, [0xc584b8]
call fcn.00451ff0
jmp 0x6f00ca
lea ecx, [0x83f1c0]
jmp 0x6f00ca
mov eax, dword [esp + 0xb0]
mov dword [esp], eax
mov eax, dword [esp + 0xb4]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x70]
mov dword [esp + 8], eax
call fcn.004831d0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x78], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0xb8], ecx
mov edx, dword [esp + 0xf0]
mov ebx, dword [edx + 0xc]
mov dword [esp + 0x74], ebx
lea ebp, [0x887040]
mov dword [esp], ebp
call fcn.0040a800
mov edi, dword [esp + 4]
mov dword [edi + 4], 4
mov eax, dword [0xc6be00]
test eax, eax
jne 0x6f025a
lea ecx, [0x8c0081]
mov dword [edi], ecx
mov ecx, dword [esp + 0x78]
mov dword [edi + 8], ecx
mov ecx, dword [0xc6be00]
test ecx, ecx
jne 0x6f023e
mov eax, dword [esp + 0xb8]
mov dword [edi + 0xc], eax
mov eax, dword [esp + 0x74]
dec eax
mov dword [edi + 0x10], eax
sar eax, 0x1f
mov dword [edi + 0x14], eax
mov eax, dword [esp + 0xf0]
mov ecx, dword [eax + 0x4c]
test ecx, ecx
jne 0x6efef5
mov dword [esp], eax
lea ecx, [0x96e830]
mov dword [esp + 4], ecx
mov dword [esp + 8], edi
call fcn.006ebce0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xf0]
mov dword [edx + 0x4c], eax
mov eax, dword [0xc6be00]
test eax, eax
jne 0x6f022f
mov dword [edx + 0x50], ecx
jmp 0x6efef5
lea edi, [edx + 0x50]
mov eax, ecx
call fcn.00451ff0
jmp 0x6efef5
lea ecx, [edi + 0xc]
mov eax, edi
mov edi, ecx
mov edx, eax
mov eax, dword [esp + 0xb8]
call fcn.00451ff0
mov edi, edx
jmp 0x6f01d5
lea eax, [0x8c0081]
call fcn.00451ff0
jmp 0x6f01ba
mov dword [esp], edi
mov eax, dword [esp + 0xb4]
mov dword [esp + 4], eax
mov dword [esp + 8], esi
mov byte [esp + 0xc], cl
call fcn.00481ce0
jmp 0x6efef5
mov dword [esp], edi
mov eax, dword [esp + 0xb4]
mov dword [esp + 4], eax
mov dword [esp + 8], ebp
call fcn.004831d0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x78], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0xb8], ecx
mov edx, dword [esp + 0xf4]
mov dword [esp], edx
mov edx, dword [esp + 0xf8]
mov dword [esp + 4], edx
mov edx, dword [esp + 0xfc]
mov dword [esp + 8], edx
call fcn.00408180
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x78]
test ecx, ecx
je 0x6f02e8
mov ecx, dword [ecx + 4]
mov dword [esp + 0xdc], 0
mov dword [esp + 0xe0], 0
mov dword [esp + 0xe4], 0
mov dword [esp + 0xe8], 0
lea edx, [0x8279e0]
mov dword [esp + 0xdc], edx
mov dword [esp + 0xe0], eax
mov dword [esp + 0xe4], ecx
mov eax, dword [esp + 0xb8]
mov dword [esp + 0xe8], eax
lea eax, [0x8dd05a]
mov dword [esp], eax
mov dword [esp + 4], 0x47
lea eax, [esp + 0xdc]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004c6360
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0xf0]
mov ebx, dword [edx + 0x4c]
test ebx, ebx
jne 0x6efef5
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.006ebce0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xf0]
mov dword [edx + 0x4c], eax
mov eax, dword [0xc6be00]
test eax, eax
jne 0x6f03bc
mov dword [edx + 0x50], ecx
jmp 0x6efef5
lea edi, [edx + 0x50]
mov eax, ecx
call fcn.00451ff0
jmp 0x6efef5
cmp dword [eax], 0x736c6166
jne 0x6efdc6
cmp byte [eax + 4], 0x65
xchg esi, ebx
setne bl
xchg esi, ebx
jmp 0x6efdcb
cmp dword [eax], 0x65757274
xchg esi, ebx
setne bl
xchg esi, ebx
xchg esi, eax
mov byte [esp + 0x2f], al
xchg esi, eax
mov esi, dword [esp + 0xb4]
jmp 0x6efdb2
mov ebx, dword [esp + 0xf8]
jmp 0x6efdd5
cmp cl, 0x2d
je 0x6f053b
cmp cl, 0x30
jae 0x6f13ae
mov ecx, 1
test cl, cl
je 0x6f053b
movzx ecx, byte [esp + 0x10c]
test cl, cl
je 0x6f1dd8
mov dword [esp], edi
mov dword [esp + 4], esi
mov dword [esp + 8], ebp
call fcn.004831d0
mov eax, dword [esp + 0x10]
mov dword [esp + 0xb8], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x78], ecx
mov edx, dword [esp + 0xf4]
mov dword [esp], edx
mov edx, dword [esp + 0xf8]
mov dword [esp + 4], edx
mov edx, dword [esp + 0xfc]
mov dword [esp + 8], edx
call fcn.00408180
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x78]
test ecx, ecx
je 0x6f0498
mov ecx, dword [ecx + 4]
mov dword [esp + 0xdc], 0
mov dword [esp + 0xe0], 0
mov dword [esp + 0xe4], 0
mov dword [esp + 0xe8], 0
lea edx, [0x8279e0]
mov dword [esp + 0xdc], edx
mov dword [esp + 0xe0], eax
mov dword [esp + 0xe4], ecx
mov eax, dword [esp + 0xb8]
mov dword [esp + 0xe8], eax
lea eax, [0x8dd05a]
mov dword [esp], eax
mov dword [esp + 4], 0x47
lea eax, [esp + 0xdc]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004c6360
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x110], ecx
mov dword [esp + 0x114], eax
add esp, 0xec
ret
mov dword [esp], 0
mov dword [esp + 4], eax
mov ecx, dword [esp + 0xf8]
mov dword [esp + 8], ecx
mov edx, dword [esp + 0xfc]
mov dword [esp + 0xc], edx
call fcn.004405f0
mov eax, dword [esp + 0x14]
mov dword [esp + 0x4c], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0xa0], ecx
nop
mov edx, dword [esp + 0x70]
mov ebx, edx
and edx, 0x1f
cmp edx, 0xc
ja 0x6f0e2e
lea ebp, [edx - 2]
cmp ebp, 4
jbe 0x6f0b9f
lea ebp, [edx - 7]
cmp ebp, 5
jbe 0x6f0931
cmp edx, 0x18
je 0x6f08ce
xor edx, edx
test dl, dl
jne 0x6f07e3
movzx eax, byte [esp + 0x10c]
test al, al
je 0x6f06ca
mov eax, dword [esp + 0xb0]
mov dword [esp], eax
mov eax, dword [esp + 0xb4]
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
call fcn.004831d0
mov eax, dword [esp + 0x10]
mov dword [esp + 0xb8], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x78], ecx
mov edx, dword [esp + 0xf4]
mov dword [esp], edx
mov edx, dword [esp + 0xf8]
mov dword [esp + 4], edx
mov edx, dword [esp + 0xfc]
mov dword [esp + 8], edx
call fcn.00408180
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x78]
test ecx, ecx
je 0x6f0627
mov ecx, dword [ecx + 4]
mov dword [esp + 0xdc], 0
mov dword [esp + 0xe0], 0
mov dword [esp + 0xe4], 0
mov dword [esp + 0xe8], 0
lea edx, [0x8279e0]
mov dword [esp + 0xdc], edx
mov dword [esp + 0xe0], eax
mov dword [esp + 0xe4], ecx
mov eax, dword [esp + 0xb8]
mov dword [esp + 0xe8], eax
lea eax, [0x8dd05a]
mov dword [esp], eax
mov dword [esp + 4], 0x47
lea eax, [esp + 0xdc]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004c6360
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x110], ecx
mov dword [esp + 0x114], eax
add esp, 0xec
ret
mov eax, dword [esp + 0xb0]
mov dword [esp], eax
mov eax, dword [esp + 0xb4]
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
call fcn.004831d0
mov eax, dword [esp + 0x10]
mov dword [esp + 0xb8], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x78], ecx
mov edx, dword [esp + 0xf0]
mov ebx, dword [edx + 0xc]
mov dword [esp + 0x74], ebx
lea ebp, [0x887040]
mov dword [esp], ebp
call fcn.0040a800
mov edi, dword [esp + 4]
mov dword [edi + 4], 6
mov eax, dword [0xc6be00]
test eax, eax
jne 0x6f07d3
lea ecx, [0x8c0701]
mov dword [edi], ecx
mov ecx, dword [esp + 0x78]
mov dword [edi + 8], ecx
mov ecx, dword [0xc6be00]
test ecx, ecx
jne 0x6f07ba
mov eax, dword [esp + 0xb8]
mov dword [edi + 0xc], eax
mov eax, dword [esp + 0x74]
dec eax
mov dword [edi + 0x10], eax
sar eax, 0x1f
mov dword [edi + 0x14], eax
mov eax, dword [esp + 0xf0]
mov ecx, dword [eax + 0x4c]
test ecx, ecx
jne 0x6efef5
mov dword [esp], eax
lea ecx, [0x96e830]
mov dword [esp + 4], ecx
mov dword [esp + 8], edi
call fcn.006ebce0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0xf0]
mov dword [edx + 0x4c], ecx
mov ecx, dword [0xc6be00]
test ecx, ecx
jne 0x6f07ad
mov dword [edx + 0x50], eax
jmp 0x6efef5
lea edi, [edx + 0x50]
call fcn.00451ff0
jmp 0x6efef5
lea ecx, [edi + 0xc]
mov eax, edi
mov edi, ecx
mov edx, eax
mov eax, dword [esp + 0xb8]
call fcn.00451ff0
mov edi, edx
jmp 0x6f0753
lea eax, [0x8c0701]
call fcn.00451ff0
jmp 0x6f0738
mov edx, dword [esp + 0xb0]
mov dword [esp], edx
mov edx, dword [esp + 0xb4]
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
call fcn.004829d0
mov eax, dword [esp + 0xa0]
mov dword [esp], eax
mov eax, dword [esp + 0x4c]
mov dword [esp + 4], eax
call fcn.006ebb00
movzx eax, byte [esp + 8]
test al, al
jne 0x6efef5
mov eax, dword [esp + 0xf4]
mov dword [esp], eax
mov eax, dword [esp + 0xf8]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xfc]
mov dword [esp + 8], eax
call fcn.00408180
mov eax, dword [esp + 0xc]
mov dword [esp + 0xd4], 0
mov dword [esp + 0xd8], 0
lea ecx, [0x8279e0]
mov dword [esp + 0xd4], ecx
mov dword [esp + 0xd8], eax
lea eax, [0x8dc212]
mov dword [esp], eax
mov dword [esp + 4], 0x40
lea eax, [esp + 0xd4]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004c6360
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x110], ecx
mov dword [esp + 0x114], eax
add esp, 0xec
ret
mov eax, dword [esp + 0xb0]
mov dword [esp], eax
mov ecx, dword [esp + 0xb4]
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
call fcn.004831d0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
cmp dword [0xc579e8], ecx
je 0x6f0914
xor eax, eax
mov ecx, dword [esp + 0xa0]
mov ebx, dword [esp + 0x70]
mov edx, eax
mov eax, dword [esp + 0x4c]
jmp 0x6f05aa
mov dword [esp], ecx
mov dword [esp + 4], eax
mov eax, dword [0xc579ec]
mov dword [esp + 8], eax
call fcn.00403030
movzx eax, byte [esp + 0xc]
jmp 0x6f08fe
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0xa
mov dword [esp + 0xc], 0x40
call fcn.00461370
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
test eax, eax
je 0x6f0ab5
mov eax, dword [esp + 0xb0]
mov dword [esp], eax
mov eax, dword [esp + 0xb4]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x70]
mov dword [esp + 8], eax
call fcn.004831d0
mov eax, dword [esp + 0x10]
mov dword [esp + 0xb8], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x78], ecx
mov edx, dword [esp + 0xf0]
mov ebx, dword [edx + 0xc]
mov dword [esp + 0x74], ebx
lea ebp, [0x887040]
mov dword [esp], ebp
call fcn.0040a800
mov eax, dword [esp + 4]
mov dword [esp + 0xac], eax
mov dword [esp], 0
lea ecx, [0x8c0b97]
mov dword [esp + 4], ecx
mov dword [esp + 8], 7
mov ecx, dword [esp + 0xa0]
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0x4c]
mov dword [esp + 0x10], ecx
call fcn.00440470
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edi, dword [esp + 0xac]
mov dword [edi + 4], ecx
mov ecx, dword [0xc6be00]
test ecx, ecx
jne 0x6f0aab
mov dword [edi], eax
mov ecx, dword [esp + 0x78]
mov dword [edi + 8], ecx
mov ecx, dword [0xc6be00]
test ecx, ecx
jne 0x6f0a92
mov eax, dword [esp + 0xb8]
mov dword [edi + 0xc], eax
mov eax, dword [esp + 0x74]
dec eax
mov dword [edi + 0x10], eax
sar eax, 0x1f
mov dword [edi + 0x14], eax
mov eax, dword [esp + 0xf0]
mov ecx, dword [eax + 0x4c]
test ecx, ecx
jne 0x6efef5
mov dword [esp], eax
lea ecx, [0x96e830]
mov dword [esp + 4], ecx
mov dword [esp + 8], edi
call fcn.006ebce0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0xf0]
mov dword [edx + 0x4c], ecx
mov ecx, dword [0xc6be00]
test ecx, ecx
jne 0x6f0a85
mov dword [edx + 0x50], eax
jmp 0x6efef5
lea edi, [edx + 0x50]
call fcn.00451ff0
jmp 0x6efef5
lea ecx, [edi + 0xc]
mov eax, edi
mov edi, ecx
mov edx, eax
mov eax, dword [esp + 0xb8]
call fcn.00451ff0
mov edi, edx
jmp 0x6f0a2b
call fcn.00451ff0
jmp 0x6f0a10
mov dword [esp + 0x38], ecx
mov dword [esp + 0x3c], edx
mov eax, dword [esp + 0xb0]
mov ebx, dword [eax]
shl ebx, 3
add ebx, 0xffffffc0
neg ebx
lea ebp, [ebx - 0x20]
mov dword [esp + 0x6c], ebp
mov esi, ebp
xchg ebp, ebx
neg ebx
xchg ebp, ebx
cmp ebp, 0x20
sbb edi, edi
mov dword [esp + 0x68], edi
cmp ebx, 0x20
sbb eax, eax
mov dword [esp + 0x64], eax
cmp esi, 0x20
sbb eax, eax
mov dword [esp + 0x60], eax
mov ecx, ebp
mov eax, dword [esp + 0x38]
shr eax, cl
mov ecx, ebx
shl edx, cl
and eax, edi
mov ecx, esi
mov edi, dword [esp + 0x38]
shl edi, cl
mov esi, dword [esp + 0x60]
and edi, esi
mov esi, dword [esp + 0x64]
and edx, esi
or edx, eax
or edx, edi
mov ecx, ebx
mov edi, edx
shr edx, cl
and edx, esi
mov eax, dword [esp + 0x3c]
cmp edx, eax
setne dl
mov ecx, ebp
mov ebp, edi
shl edi, cl
mov ecx, ebx
mov eax, dword [esp + 0x38]
shl eax, cl
and eax, esi
shr eax, cl
and eax, esi
mov ebx, dword [esp + 0x68]
and edi, ebx
or eax, edi
mov ecx, dword [esp + 0x6c]
shr ebp, cl
mov ebx, dword [esp + 0x60]
and ebp, ebx
or eax, ebp
mov ebx, dword [esp + 0x38]
cmp eax, ebx
setne al
or eax, edx
test al, al
jne 0x6f0961
mov eax, dword [esp + 0xb0]
mov dword [esp], eax
mov eax, dword [esp + 0xb4]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x70]
mov dword [esp + 8], eax
mov dword [esp + 0xc], ebx
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x10], eax
call fcn.004827b0
jmp 0x6efef5
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0xa
mov dword [esp + 0xc], 0x40
call fcn.00461b80
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
test eax, eax
je 0x6f0d23
mov eax, dword [esp + 0xb0]
mov dword [esp], eax
mov eax, dword [esp + 0xb4]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x70]
mov dword [esp + 8], eax
call fcn.004831d0
mov eax, dword [esp + 0x10]
mov dword [esp + 0xb8], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x78], ecx
mov edx, dword [esp + 0xf0]
mov ebx, dword [edx + 0xc]
mov dword [esp + 0x74], ebx
lea ebp, [0x887040]
mov dword [esp], ebp
call fcn.0040a800
mov eax, dword [esp + 4]
mov dword [esp + 0xac], eax
mov dword [esp], 0
lea ecx, [0x8c0b97]
mov dword [esp + 4], ecx
mov dword [esp + 8], 7
mov ecx, dword [esp + 0xa0]
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0x4c]
mov dword [esp + 0x10], ecx
call fcn.00440470
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edi, dword [esp + 0xac]
mov dword [edi + 4], ecx
mov ecx, dword [0xc6be00]
test ecx, ecx
jne 0x6f0d19
mov dword [edi], eax
mov ecx, dword [esp + 0x78]
mov dword [edi + 8], ecx
mov ecx, dword [0xc6be00]
test ecx, ecx
jne 0x6f0d00
mov eax, dword [esp + 0xb8]
mov dword [edi + 0xc], eax
mov eax, dword [esp + 0x74]
dec eax
mov dword [edi + 0x10], eax
sar eax, 0x1f
mov dword [edi + 0x14], eax
mov eax, dword [esp + 0xf0]
mov ecx, dword [eax + 0x4c]
test ecx, ecx
jne 0x6efef5
mov dword [esp], eax
lea ecx, [0x96e830]
mov dword [esp + 4], ecx
mov dword [esp + 8], edi
call fcn.006ebce0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0xf0]
mov dword [edx + 0x4c], ecx
mov ecx, dword [0xc6be00]
test ecx, ecx
jne 0x6f0cf3
mov dword [edx + 0x50], eax
jmp 0x6efef5
lea edi, [edx + 0x50]
call fcn.00451ff0
jmp 0x6efef5
lea ecx, [edi + 0xc]
mov eax, edi
mov edi, ecx
mov edx, eax
mov eax, dword [esp + 0xb8]
call fcn.00451ff0
mov edi, edx
jmp 0x6f0c99
call fcn.00451ff0
jmp 0x6f0c7e
mov dword [esp + 0x34], ecx
mov dword [esp + 0x40], edx
mov eax, dword [esp + 0xb0]
mov ebx, dword [eax]
shl ebx, 3
add ebx, 0xffffffc0
neg ebx
mov ebp, ebx
shr ebx, 5
cmp ebx, 1
sbb ebx, ebx
mov dword [esp + 0x6c], ebx
cmp ebp, 0x20
sbb esi, esi
mov dword [esp + 0x68], esi
sbb edi, edi
mov dword [esp + 0x78], edi
lea eax, [ebp - 0x20]
mov dword [esp + 0x64], eax
cmp eax, 0x20
sbb edi, edi
neg eax
cmp eax, 0x20
sbb ebx, ebx
mov dword [esp + 0x60], ebx
mov ecx, dword [esp + 0x64]
mov esi, dword [esp + 0x34]
shl esi, cl
mov ecx, eax
mov ebx, dword [esp + 0x34]
shr ebx, cl
mov ecx, ebp
shl edx, cl
and esi, edi
mov ebp, dword [esp + 0x60]
and ebx, ebp
mov ebp, dword [esp + 0x68]
and edx, ebp
or edx, ebx
or edx, esi
mov ebx, ecx
mov ecx, eax
mov esi, edx
shl edx, cl
xchg edi, ebx
not ebx
xchg edi, ebx
mov eax, dword [esp + 0x64]
or edi, eax
mov ecx, ebx
mov eax, dword [esp + 0x34]
shl eax, cl
and eax, ebp
shr eax, cl
mov ecx, edi
mov edi, esi
sar esi, cl
and eax, ebp
mov ebp, dword [esp + 0x60]
and edx, ebp
or eax, edx
mov edx, dword [esp + 0x6c]
xor edx, 0xffffffff
and edx, esi
or edx, eax
mov eax, dword [esp + 0x34]
cmp edx, eax
setne dl
mov ecx, dword [esp + 0x78]
not ecx
or ecx, ebx
sar edi, cl
mov ebx, dword [esp + 0x40]
cmp edi, ebx
xchg ebp, ebx
setne bl
xchg ebp, ebx
or ebp, edx
xchg ebp, eax
test al, al
xchg ebp, eax
jne 0x6f0bcf
mov ecx, dword [esp + 0xb0]
mov dword [esp], ecx
mov ecx, dword [esp + 0xb4]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x70]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ebx
call fcn.00482210
jmp 0x6efef5
lea ebp, [edx - 0xd]
cmp ebp, 1
jbe 0x6f10e7
cmp edx, 0x14
jne 0x6f059f
mov edx, dword [esp + 0xf0]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.006ef4c0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov ebx, dword [esp + 0xc]
test edx, edx
je 0x6f0ec2
nop
mov ecx, dword [esp + 0xf0]
mov ebx, dword [ecx + 0x4c]
test ebx, ebx
jne 0x6efef5
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.006ebce0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0xf0]
mov dword [edx + 0x4c], ecx
mov ecx, dword [0xc6be00]
test ecx, ecx
jne 0x6f0eb5
mov dword [edx + 0x50], eax
jmp 0x6efef5
lea edi, [edx + 0x50]
call fcn.00451ff0
jmp 0x6efef5
mov dword [esp + 0x94], ecx
mov dword [esp + 0x30], ebx
mov eax, dword [esp + 0xb0]
mov dword [esp], eax
mov ecx, dword [esp + 0xb4]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x70]
mov dword [esp + 8], edx
call fcn.00480d50
mov eax, dword [esp + 0xc]
test eax, eax
jne 0x6f0fc5
mov ecx, dword [esp + 0x30]
test ecx, ecx
je 0x6f0fbd
nop
movzx edx, byte [0xc584b0]
test dl, dl
je 0x6f0fb1
mov dword [0xc584b4], ecx
mov edx, dword [0xc6be00]
test edx, edx
jne 0x6f0f9d
mov eax, dword [esp + 0x94]
mov dword [0xc584b8], eax
mov dword [esp + 0xc4], ecx
mov dword [esp + 0xc8], eax
mov ecx, dword [esp + 0xc4]
test ecx, ecx
je 0x6f0f95
nop
movzx edx, byte [ecx + 0xf]
mov ebx, edx
and edx, 0x1f
test bl, 0x20
jne 0x6f0f62
or edx, 0x80
mov ebx, dword [esp + 0xb0]
mov dword [esp], ebx
mov ebx, dword [esp + 0xb4]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x70]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], edx
call fcn.00481bd0
jmp 0x6efef5
xor edx, edx
xor eax, eax
xor ecx, ecx
jmp 0x6f0f62
lea edi, [0xc584b8]
mov eax, dword [esp + 0x94]
call fcn.00451ff0
jmp 0x6f0f34
mov eax, dword [esp + 0x94]
jmp 0x6f0f34
xor edx, edx
xor eax, eax
xor ecx, ecx
jmp 0x6f0f62
mov eax, dword [esp + 0xb0]
mov dword [esp], eax
mov eax, dword [esp + 0xb4]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x70]
mov dword [esp + 8], eax
call fcn.004831d0
mov eax, dword [esp + 0x10]
mov dword [esp + 0xb8], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x78], ecx
mov edx, dword [esp + 0xf0]
mov ebx, dword [edx + 0xc]
mov dword [esp + 0x74], ebx
lea ebp, [0x887040]
mov dword [esp], ebp
call fcn.0040a800
mov edi, dword [esp + 4]
mov dword [edi + 4], 6
mov eax, dword [0xc6be00]
test eax, eax
jne 0x6f10d7
lea ecx, [0x8c0701]
mov dword [edi], ecx
mov ecx, dword [esp + 0x78]
mov dword [edi + 8], ecx
mov ecx, dword [0xc6be00]
test ecx, ecx
jne 0x6f10bb
mov eax, dword [esp + 0xb8]
mov dword [edi + 0xc], eax
mov eax, dword [esp + 0x74]
dec eax
mov dword [edi + 0x10], eax
sar eax, 0x1f
mov dword [edi + 0x14], eax
mov eax, dword [esp + 0xf0]
mov ecx, dword [eax + 0x4c]
test ecx, ecx
jne 0x6efef5
mov dword [esp], eax
lea ecx, [0x96e830]
mov dword [esp + 4], ecx
mov dword [esp + 8], edi
call fcn.006ebce0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xf0]
mov dword [edx + 0x4c], eax
mov eax, dword [0xc6be00]
test eax, eax
jne 0x6f10ac
mov dword [edx + 0x50], ecx
jmp 0x6efef5
lea edi, [edx + 0x50]
mov eax, ecx
call fcn.00451ff0
jmp 0x6efef5
lea ecx, [edi + 0xc]
mov eax, edi
mov edi, ecx
mov edx, eax
mov eax, dword [esp + 0xb8]
call fcn.00451ff0
mov edi, edx
jmp 0x6f1052
lea eax, [0x8c0701]
call fcn.00451ff0
jmp 0x6f1037
mov dword [esp + 0x5c], edx
mov eax, dword [esp + 0xb0]
mov dword [esp], eax
mov ecx, dword [esp + 0xb4]
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
call fcn.004831d0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov eax, dword [eax + 0x18]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0xa0]
mov dword [esp], ecx
mov edx, dword [esp + 0x4c]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.00460de0
fld qword [esp + 0xc]
fld st(0)
fstp qword [esp + 0x7c]
mov eax, dword [esp + 0x14]
test eax, eax
fstp st(0)
je 0x6f12a6
mov eax, dword [esp + 0xb0]
mov dword [esp], eax
mov eax, dword [esp + 0xb4]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x70]
mov dword [esp + 8], eax
call fcn.004831d0
mov eax, dword [esp + 0x10]
mov dword [esp + 0xb8], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x78], ecx
mov edx, dword [esp + 0xf0]
mov ebx, dword [edx + 0xc]
mov dword [esp + 0x74], ebx
lea ebp, [0x887040]
mov dword [esp], ebp
call fcn.0040a800
mov eax, dword [esp + 4]
mov dword [esp + 0xac], eax
mov dword [esp], 0
lea ecx, [0x8c0b97]
mov dword [esp + 4], ecx
mov dword [esp + 8], 7
mov ecx, dword [esp + 0xa0]
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0x4c]
mov dword [esp + 0x10], ecx
call fcn.00440470
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov edi, dword [esp + 0xac]
mov dword [edi + 4], eax
mov eax, dword [0xc6be00]
test eax, eax
jne 0x6f129a
mov dword [edi], ecx
mov ecx, dword [esp + 0x78]
mov dword [edi + 8], ecx
mov ecx, dword [0xc6be00]
test ecx, ecx
jne 0x6f1281
mov eax, dword [esp + 0xb8]
mov dword [edi + 0xc], eax
mov eax, dword [esp + 0x74]
dec eax
mov dword [edi + 0x10], eax
sar eax, 0x1f
mov dword [edi + 0x14], eax
mov eax, dword [esp + 0xf0]
mov ecx, dword [eax + 0x4c]
test ecx, ecx
jne 0x6efef5
mov dword [esp], eax
lea ecx, [0x96e830]
mov dword [esp + 4], ecx
mov dword [esp + 8], edi
call fcn.006ebce0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0xf0]
mov dword [edx + 0x4c], ecx
mov ecx, dword [0xc6be00]
test ecx, ecx
jne 0x6f1274
mov dword [edx + 0x50], eax
jmp 0x6efef5
lea edi, [edx + 0x50]
call fcn.00451ff0
jmp 0x6efef5
lea ecx, [edi + 0xc]
mov eax, edi
mov edi, ecx
mov edx, eax
mov eax, dword [esp + 0xb8]
call fcn.00451ff0
mov edi, edx
jmp 0x6f121a
mov eax, ecx
call fcn.00451ff0
jmp 0x6f11ff
mov eax, dword [esp + 0x5c]
cmp eax, 0xd
jne 0x6f1365
nop
fldz
fld qword [esp + 0x7c]
fld st(1)
fucomp st(1)
mov dword [esp + 0x84], eax
fnstsw ax
sahf
mov eax, dword [esp + 0x84]
fstp st(0)
fstp st(0)
jbe 0x6f12e7
fld qword [esp + 0x7c]
fld st(0)
fchs
fstp st(1)
fld st(0)
fstp qword [esp + 0x7c]
fstp st(0)
fld qword [esp + 0x7c]
fld qword [0x966ca0]
fld st(1)
fucomp st(1)
mov dword [esp + 0x84], eax
fnstsw ax
sahf
mov eax, dword [esp + 0x84]
fstp st(0)
fstp st(0)
jbe 0x6f1361
fld qword [0x966ca8]
fld qword [esp + 0x7c]
fld st(1)
fucomp st(1)
mov dword [esp + 0x84], eax
fnstsw ax
sahf
mov eax, dword [esp + 0x84]
setae al
fstp st(0)
fstp st(0)
test al, al
jne 0x6f1150
mov eax, dword [esp + 0xb0]
mov dword [esp], eax
mov eax, dword [esp + 0xb4]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x70]
mov dword [esp + 8], eax
call fcn.00482120
jmp 0x6efef5
xor eax, eax
jmp 0x6f1332
cmp eax, 0xe
jne 0x6f136e
xor eax, eax
jmp 0x6f1332
lea eax, [0x86aea0]
mov dword [esp], eax
call fcn.0040a800
mov edi, dword [esp + 4]
mov dword [edi + 4], 0x1b
mov eax, dword [0xc6be00]
test eax, eax
jne 0x6f139e
lea eax, [0x8cc9d9]
mov dword [edi], eax
jmp 0x6f1dbf
lea eax, [0x8cc9d9]
call fcn.00451ff0
jmp 0x6f1dbf
cmp cl, 0x39
seta cl
jmp 0x6f0429
mov dword [esp], eax
mov ecx, dword [esp + 0xf8]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0xfc]
mov dword [esp + 8], edx
call fcn.006f2620
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0xc]
movzx edx, byte [esp + 0x18]
mov ebx, dword [esp + 0x10]
test dl, dl
je 0x6f1a64
mov dword [esp + 0x54], eax
mov dword [esp + 0xa4], ecx
mov dword [esp + 0x50], ebx
nop
mov edx, dword [esp + 0x70]
mov ebp, edx
and edx, 0x1f
cmp edx, 0x14
je 0x6f1834
cmp edx, 0x17
je 0x6f1588
cmp edx, 0x18
jne 0x6f146f
mov dword [esp], 0
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
call fcn.004405f0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xb0]
mov dword [esp], edx
mov edx, dword [esp + 0xb4]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x70]
mov dword [esp + 8], edx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
call fcn.004829d0
jmp 0x6efef5
mov eax, dword [esp + 0xb0]
mov dword [esp], eax
mov eax, dword [esp + 0xb4]
mov dword [esp + 4], eax
mov dword [esp + 8], ebp
call fcn.004831d0
mov eax, dword [esp + 0x10]
mov dword [esp + 0xb8], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x78], ecx
mov edx, dword [esp + 0xf0]
mov ebx, dword [edx + 0xc]
mov dword [esp + 0x74], ebx
lea ebp, [0x887040]
mov dword [esp], ebp
call fcn.0040a800
mov edi, dword [esp + 4]
mov dword [edi + 4], 6
mov eax, dword [0xc6be00]
test eax, eax
jne 0x6f1578
lea ecx, [0x8c076d]
mov dword [edi], ecx
mov ecx, dword [esp + 0x78]
mov dword [edi + 8], ecx
mov ecx, dword [0xc6be00]
test ecx, ecx
jne 0x6f155f
mov eax, dword [esp + 0xb8]
mov dword [edi + 0xc], eax
mov eax, dword [esp + 0x74]
dec eax
mov dword [edi + 0x10], eax
sar eax, 0x1f
mov dword [edi + 0x14], eax
mov eax, dword [esp + 0xf0]
mov ecx, dword [eax + 0x4c]
test ecx, ecx
jne 0x6efef5
mov dword [esp], eax
lea ecx, [0x96e830]
mov dword [esp + 4], ecx
mov dword [esp + 8], edi
call fcn.006ebce0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0xf0]
mov dword [edx + 0x4c], ecx
mov ecx, dword [0xc6be00]
test ecx, ecx
jne 0x6f1552
mov dword [edx + 0x50], eax
jmp 0x6efef5
lea edi, [edx + 0x50]
call fcn.00451ff0
jmp 0x6efef5
lea ecx, [edi + 0xc]
mov eax, edi
mov edi, ecx
mov edx, eax
mov eax, dword [esp + 0xb8]
call fcn.00451ff0
mov edi, edx
jmp 0x6f14f8
lea eax, [0x8c076d]
call fcn.00451ff0
jmp 0x6f14dd
mov eax, dword [esp + 0xb0]
mov dword [esp], eax
mov ecx, dword [esp + 0xb4]
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
call fcn.004831d0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov eax, dword [eax + 0x28]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov eax, dword [eax + 0x50]
mov dword [esp], ecx
call eax
cmp dword [esp + 4], 8
jne 0x6f1712
mov eax, dword [0xc56af4]
cmp dword [eax + 0x140], 0xffffffff
jne 0x6f1703
mov eax, dword [esp + 0x50]
lea ecx, [eax + eax*2]
mov edx, ecx
shl ecx, 1
sar ecx, 0x1f
shr ecx, 0x1d
lea ecx, [ecx + edx*2]
sar ecx, 3
mov dword [esp + 0x58], ecx
lea eax, [0x843ec0]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], ecx
call fcn.0043d110
mov eax, dword [esp + 0xc]
mov dword [esp + 0xa8], eax
mov ecx, dword [0xc56af4]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov ecx, dword [esp + 0x58]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ecx
mov edx, dword [esp + 0xa4]
mov dword [esp + 0x10], edx
mov edx, dword [esp + 0x50]
mov dword [esp + 0x14], edx
mov edx, dword [esp + 0x54]
mov dword [esp + 0x18], edx
call fcn.005530d0
mov ecx, dword [esp + 0x1c]
mov eax, dword [esp + 0x24]
mov edx, dword [esp + 0x20]
test edx, edx
je 0x6f16bd
nop
mov ecx, dword [esp + 0xf0]
mov ebx, dword [ecx + 0x4c]
test ebx, ebx
jne 0x6efef5
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.006ebce0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0xf0]
mov dword [edx + 0x4c], ecx
mov ecx, dword [0xc6be00]
test ecx, ecx
jne 0x6f16b0
mov dword [edx + 0x50], eax
jmp 0x6efef5
lea edi, [edx + 0x50]
call fcn.00451ff0
jmp 0x6efef5
mov edx, dword [esp + 0x58]
cmp ecx, edx
ja 0x6f1df0
mov eax, dword [esp + 0xb0]
mov dword [esp], eax
mov eax, dword [esp + 0xb4]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x70]
mov dword [esp + 8], eax
mov eax, dword [esp + 0xa8]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
call fcn.00481db0
jmp 0x6efef5
mov eax, dword [esp + 0x50]
shr eax, 2
lea ecx, [eax + eax*2]
jmp 0x6f15fb
mov eax, dword [esp + 0xb0]
mov dword [esp], eax
mov eax, dword [esp + 0xb4]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x70]
mov dword [esp + 8], eax
call fcn.004831d0
mov eax, dword [esp + 0x10]
mov dword [esp + 0xb8], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x78], ecx
mov edx, dword [esp + 0xf0]
mov ebx, dword [edx + 0xc]
mov dword [esp + 0x74], ebx
lea ebp, [0x887040]
mov dword [esp], ebp
call fcn.0040a800
mov edi, dword [esp + 4]
mov dword [edi + 4], 6
mov eax, dword [0xc6be00]
test eax, eax
jne 0x6f1824
lea ecx, [0x8c076d]
mov dword [edi], ecx
mov ecx, dword [esp + 0x78]
mov dword [edi + 8], ecx
mov ecx, dword [0xc6be00]
test ecx, ecx
jne 0x6f1808
mov eax, dword [esp + 0xb8]
mov dword [edi + 0xc], eax
mov eax, dword [esp + 0x74]
dec eax
mov dword [edi + 0x10], eax
sar eax, 0x1f
mov dword [edi + 0x14], eax
mov eax, dword [esp + 0xf0]
mov ecx, dword [eax + 0x4c]
test ecx, ecx
jne 0x6efef5
mov dword [esp], eax
lea ecx, [0x96e830]
mov dword [esp + 4], ecx
mov dword [esp + 8], edi
call fcn.006ebce0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xf0]
mov dword [edx + 0x4c], eax
mov eax, dword [0xc6be00]
test eax, eax
jne 0x6f17f9
mov dword [edx + 0x50], ecx
jmp 0x6efef5
lea edi, [edx + 0x50]
mov eax, ecx
call fcn.00451ff0
jmp 0x6efef5
lea ecx, [edi + 0xc]
mov eax, edi
mov edi, ecx
mov edx, eax
mov eax, dword [esp + 0xb8]
call fcn.00451ff0
mov edi, edx
jmp 0x6f179f
lea eax, [0x8c076d]
call fcn.00451ff0
jmp 0x6f1784
mov eax, dword [esp + 0xb0]
mov dword [esp], eax
mov ecx, dword [esp + 0xb4]
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
call fcn.00480d50
mov eax, dword [esp + 0xc]
test eax, eax
jne 0x6f1947
mov dword [esp], 0
mov eax, dword [esp + 0xa4]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 0xc], eax
call fcn.004405f0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00408100
mov eax, dword [esp + 8]
nop
movzx ecx, byte [0xc584b0]
test cl, cl
je 0x6f193f
lea ecx, [0x843c00]
mov dword [0xc584b4], ecx
mov edx, dword [0xc6be00]
test edx, edx
jne 0x6f1932
mov dword [0xc584b8], eax
mov dword [esp + 0xbc], ecx
mov dword [esp + 0xc0], eax
mov ecx, dword [esp + 0xbc]
test ecx, ecx
je 0x6f192a
nop
movzx edx, byte [ecx + 0xf]
mov ebx, edx
and edx, 0x1f
test bl, 0x20
jne 0x6f18f7
or edx, 0x80
mov ebx, dword [esp + 0xb0]
mov dword [esp], ebx
mov ebx, dword [esp + 0xb4]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x70]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], edx
call fcn.00481bd0
jmp 0x6efef5
xor edx, edx
xor eax, eax
xor ecx, ecx
jmp 0x6f18f7
lea edi, [0xc584b8]
call fcn.00451ff0
jmp 0x6f18c9
lea ecx, [0x843c00]
jmp 0x6f18c9
mov eax, dword [esp + 0xb0]
mov dword [esp], eax
mov eax, dword [esp + 0xb4]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x70]
mov dword [esp + 8], eax
call fcn.004831d0
mov eax, dword [esp + 0x10]
mov dword [esp + 0xb8], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x78], ecx
mov edx, dword [esp + 0xf0]
mov ebx, dword [edx + 0xc]
mov dword [esp + 0x74], ebx
lea ebp, [0x887040]
mov dword [esp], ebp
call fcn.0040a800
mov edi, dword [esp + 4]
mov dword [edi + 4], 6
mov eax, dword [0xc6be00]
test eax, eax
jne 0x6f1a54
lea ecx, [0x8c076d]
mov dword [edi], ecx
mov ecx, dword [esp + 0x78]
mov dword [edi + 8], ecx
mov ecx, dword [0xc6be00]
test ecx, ecx
jne 0x6f1a3b
mov eax, dword [esp + 0xb8]
mov dword [edi + 0xc], eax
mov eax, dword [esp + 0x74]
dec eax
mov dword [edi + 0x10], eax
sar eax, 0x1f
mov dword [edi + 0x14], eax
mov eax, dword [esp + 0xf0]
mov ecx, dword [eax + 0x4c]
test ecx, ecx
jne 0x6efef5
mov dword [esp], eax
lea ecx, [0x96e830]
mov dword [esp + 4], ecx
mov dword [esp + 8], edi
call fcn.006ebce0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0xf0]
mov dword [edx + 0x4c], ecx
mov ecx, dword [0xc6be00]
test ecx, ecx
jne 0x6f1a2e
mov dword [edx + 0x50], eax
jmp 0x6efef5
lea edi, [edx + 0x50]
call fcn.00451ff0
jmp 0x6efef5
lea ecx, [edi + 0xc]
mov eax, edi
mov edi, ecx
mov edx, eax
mov eax, dword [esp + 0xb8]
call fcn.00451ff0
mov edi, edx
jmp 0x6f19d4
lea eax, [0x8c076d]
call fcn.00451ff0
jmp 0x6f19b9
movzx eax, byte [esp + 0x10c]
test al, al
je 0x6f1df5
mov eax, dword [esp + 0xb0]
mov dword [esp], eax
mov eax, dword [esp + 0xb4]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x70]
mov dword [esp + 8], eax
call fcn.004831d0
mov eax, dword [esp + 0x10]
mov dword [esp + 0xb8], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x78], ecx
mov edx, dword [esp + 0xf4]
mov dword [esp], edx
mov edx, dword [esp + 0xf8]
mov dword [esp + 4], edx
mov edx, dword [esp + 0xfc]
mov dword [esp + 8], edx
call fcn.00408180
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x78]
test ecx, ecx
je 0x6f1add
mov ecx, dword [ecx + 4]
mov dword [esp + 0xdc], 0
mov dword [esp + 0xe0], 0
mov dword [esp + 0xe4], 0
mov dword [esp + 0xe8], 0
lea edx, [0x8279e0]
mov dword [esp + 0xdc], edx
mov dword [esp + 0xe0], eax
mov dword [esp + 0xe4], ecx
mov eax, dword [esp + 0xb8]
mov dword [esp + 0xe8], eax
lea eax, [0x8dd05a]
mov dword [esp], eax
mov dword [esp + 4], 0x47
lea eax, [esp + 0xdc]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004c6360
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x110], ecx
mov dword [esp + 0x114], eax
add esp, 0xec
ret
cmp cl, 0x6e
jne 0x6f1d6b
movzx ecx, byte [esp + 0x10c]
test cl, cl
je 0x6f1bae
mov ecx, dword [esp + 0xf8]
cmp ecx, 4
je 0x6f1d5d
mov edx, 1
test dl, dl
jne 0x6f1c23
mov eax, ebp
and ebp, 0x1f
lea ecx, [ebp - 0x14]
nop
cmp ecx, 3
ja 0x6efef5
mov dword [esp], edi
mov dword [esp + 4], esi
mov dword [esp + 8], eax
call fcn.004831d0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00483cc0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 8]
mov ebx, dword [esp + 0xb0]
mov dword [esp], ebx
mov ebx, dword [esp + 0xb4]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x70]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], eax
call fcn.00481bd0
jmp 0x6efef5
mov dword [esp], edi
mov dword [esp + 4], esi
mov dword [esp + 8], ebp
call fcn.004831d0
mov eax, dword [esp + 0x10]
mov dword [esp + 0xb8], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x78], ecx
mov edx, dword [esp + 0xf4]
mov dword [esp], edx
mov edx, dword [esp + 0xf8]
mov dword [esp + 4], edx
mov edx, dword [esp + 0xfc]
mov dword [esp + 8], edx
call fcn.00408180
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x78]
test ecx, ecx
je 0x6f1c7a
mov ecx, dword [ecx + 4]
mov dword [esp + 0xdc], 0
mov dword [esp + 0xe0], 0
mov dword [esp + 0xe4], 0
mov dword [esp + 0xe8], 0
lea edx, [0x8279e0]
mov dword [esp + 0xdc], edx
mov dword [esp + 0xe0], eax
mov dword [esp + 0xe4], ecx
mov eax, dword [esp + 0xb8]
mov dword [esp + 0xe8], eax
lea eax, [0x8dd05a]
mov dword [esp], eax
mov dword [esp + 4], 0x47
lea eax, [esp + 0xdc]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004c6360
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0xf0]
mov ebx, dword [edx + 0x4c]
test ebx, ebx
jne 0x6efef5
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.006ebce0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xf0]
mov dword [edx + 0x4c], eax
mov eax, dword [0xc6be00]
test eax, eax
jne 0x6f1d4e
mov dword [edx + 0x50], ecx
jmp 0x6efef5
lea edi, [edx + 0x50]
mov eax, ecx
call fcn.00451ff0
jmp 0x6efef5
cmp dword [eax], 0x6c6c756e
setne dl
jmp 0x6f1baa
cmp cl, 0x74
je 0x6efd7b
jmp 0x6f0412
mov eax, dword [ebx + 0x10]
mov dword [esp], edx
mov ecx, dword [esp + 0xf4]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0xf8]
mov dword [esp + 8], ecx
mov ecx, dword [esp + 0xfc]
mov dword [esp + 0xc], ecx
call eax
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x110], ecx
mov dword [esp + 0x114], eax
add esp, 0xec
ret
mov eax, dword [esp + 0x5c]
mov dword [edi + 8], eax
lea eax, [0x852720]
mov dword [esp], eax
mov dword [esp + 4], edi
call fcn.0042b540
lea eax, [0x843c00]
mov dword [esp], eax
lea eax, [0x9674f8]
mov dword [esp + 4], eax
call fcn.0042b540
call fcn.004520b0
lea eax, [0x843c00]
mov dword [esp], eax
lea eax, [0x9674f0]
mov dword [esp + 4], eax
call fcn.0042b540
lea eax, [0x843c00]
mov dword [esp], eax
lea eax, [0x9674e8]
mov dword [esp + 4], eax
call fcn.0042b540
nop
call fcn.004507b0
jmp fcn.006ef6a0