Function at 0x6e6c00
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x5c]
cmp eax, dword [ecx + 8]
jbe 0x6e932a
sub esp, 0xdc
mov eax, dword [esp + 0xe8]
test eax, eax
jne 0x6e6d91
mov eax, dword [esp + 0xf0]
mov dword [esp], eax
mov eax, dword [esp + 0xf4]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xf8]
mov dword [esp + 8], eax
call fcn.00490af0
mov eax, dword [esp + 0x10]
mov dword [esp + 0xa8], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x78], ecx
mov edx, dword [esp + 0xe4]
mov dword [esp], edx
mov edx, dword [esp + 0xe8]
mov dword [esp + 4], edx
mov edx, dword [esp + 0xec]
mov dword [esp + 8], edx
call fcn.00408810
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x78]
test ecx, ecx
je 0x6e6c9b
mov ecx, dword [ecx + 4]
mov dword [esp + 0xcc], 0
mov dword [esp + 0xd0], 0
mov dword [esp + 0xd4], 0
mov dword [esp + 0xd8], 0
lea edx, [0x909bc0]
mov dword [esp + 0xcc], edx
mov dword [esp + 0xd0], eax
mov dword [esp + 0xd4], ecx
mov eax, dword [esp + 0xa8]
mov dword [esp + 0xd8], eax
lea eax, [0x9f33f8]
mov dword [esp], eax
mov dword [esp + 4], 0x47
lea eax, [esp + 0xcc]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004d7200
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0xe0]
mov ebx, dword [edx + 0x4c]
test ebx, ebx
je 0x6e6d54
mov dword [esp + 0x100], 0
mov dword [esp + 0x104], 0
add esp, 0xdc
ret
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.006e3250
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xe0]
mov dword [edx + 0x4c], eax
mov eax, dword [0xe8ff30]
test eax, eax
jne 0x6e6d85
mov dword [edx + 0x50], ecx
jmp 0x6e6d37
lea edi, [edx + 0x50]
mov eax, ecx
call fcn.00456ab0
jmp 0x6e6d37
mov eax, dword [esp + 0xe4]
cmp byte [eax], 0x6e
mov ecx, dword [esp + 0xf0]
mov dword [esp], ecx
mov edx, dword [esp + 0xf4]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0xf8]
mov dword [esp + 8], ebx
xchg ebp, ebx
sete bl
xchg ebp, ebx
xchg ebp, eax
mov byte [esp + 0xc], al
xchg ebp, eax
call fcn.006e3940
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
mov ebx, dword [esp + 0x10]
mov ebp, dword [esp + 0x28]
mov esi, dword [esp + 0x24]
mov edi, dword [esp + 0x20]
test ebx, ebx
jne 0x6e927d
test ecx, ecx
je 0x6e72a4
mov edx, dword [esp + 0xe4]
movzx ebx, byte [edx]
cmp bl, 0x22
je 0x6e7107
movzx eax, byte [esp + 0xfc]
test al, al
jne 0x6e6fa7
cmp bl, 0x66
jne 0x6e6f79
mov eax, 4
lea ecx, [0x9cba00]
mov dword [esp + 0x44], eax
mov dword [esp + 0x88], ecx
mov edx, dword [esp + 0xf0]
mov dword [esp], edx
mov edx, dword [esp + 0xf4]
mov dword [esp + 4], edx
mov edx, dword [esp + 0xf8]
mov dword [esp + 8], edx
call fcn.00490af0
mov eax, dword [esp + 0x10]
mov dword [esp + 0xa8], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x78], ecx
mov edx, dword [esp + 0xe0]
mov ebx, dword [edx + 0xc]
mov dword [esp + 0x74], ebx
lea ebp, [0x97f540]
mov dword [esp], ebp
call fcn.0040af00
mov edi, dword [esp + 4]
mov eax, dword [esp + 0x44]
mov dword [edi + 4], eax
mov eax, dword [0xe8ff30]
test eax, eax
jne 0x6e6f68
mov ecx, dword [esp + 0x88]
mov dword [edi], ecx
mov ecx, dword [esp + 0x78]
mov dword [edi + 8], ecx
mov ecx, dword [0xe8ff30]
test ecx, ecx
jne 0x6e6f4c
mov eax, dword [esp + 0xa8]
mov dword [edi + 0xc], eax
mov eax, dword [esp + 0x74]
dec eax
mov dword [edi + 0x10], eax
sar eax, 0x1f
mov dword [edi + 0x14], eax
mov eax, dword [esp + 0xe0]
mov ecx, dword [eax + 0x4c]
test ecx, ecx
je 0x6e6f09
mov dword [esp + 0x100], 0
mov dword [esp + 0x104], 0
add esp, 0xdc
ret
mov dword [esp], eax
lea ecx, [0xaa4bd0]
mov dword [esp + 4], ecx
mov dword [esp + 8], edi
call fcn.006e3250
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xe0]
mov dword [edx + 0x4c], eax
mov eax, dword [0xe8ff30]
test eax, eax
jne 0x6e6f40
mov dword [edx + 0x50], ecx
jmp 0x6e6eec
lea edi, [edx + 0x50]
mov eax, ecx
call fcn.00456ab0
jmp 0x6e6eec
lea ecx, [edi + 0xc]
mov eax, edi
mov edi, ecx
mov edx, eax
mov eax, dword [esp + 0xa8]
call fcn.00456ab0
mov edi, edx
jmp 0x6e6ed0
mov eax, dword [esp + 0x88]
call fcn.00456ab0
jmp 0x6e6eb1
cmp bl, 0x6e
jne 0x6e6f8e
mov eax, 4
lea ecx, [0x9cbca0]
jmp 0x6e6e30
cmp bl, 0x74
je 0x6e6e25
mov eax, 6
lea ecx, [0x9cdaa8]
jmp 0x6e6e30
mov eax, dword [esp + 0xf0]
mov dword [esp], eax
mov eax, dword [esp + 0xf4]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xf8]
mov dword [esp + 8], eax
call fcn.00490af0
mov eax, dword [esp + 0x10]
mov dword [esp + 0xa8], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x78], ecx
mov edx, dword [esp + 0xe4]
mov dword [esp], edx
mov edx, dword [esp + 0xe8]
mov dword [esp + 4], edx
mov edx, dword [esp + 0xec]
mov dword [esp + 8], edx
call fcn.00408810
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x78]
test ecx, ecx
je 0x6e7013
mov ecx, dword [ecx + 4]
mov dword [esp + 0xcc], 0
mov dword [esp + 0xd0], 0
mov dword [esp + 0xd4], 0
mov dword [esp + 0xd8], 0
lea edx, [0x909bc0]
mov dword [esp + 0xcc], edx
mov dword [esp + 0xd0], eax
mov dword [esp + 0xd4], ecx
mov eax, dword [esp + 0xa8]
mov dword [esp + 0xd8], eax
lea eax, [0x9f33f8]
mov dword [esp], eax
mov dword [esp + 4], 0x47
lea eax, [esp + 0xcc]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004d7200
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0xe0]
mov ebx, dword [edx + 0x4c]
test ebx, ebx
je 0x6e70cc
mov dword [esp + 0x100], 0
mov dword [esp + 0x104], 0
add esp, 0xdc
ret
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.006e3250
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0xe0]
mov dword [edx + 0x4c], ecx
mov ecx, dword [0xe8ff30]
test ecx, ecx
jne 0x6e70fd
mov dword [edx + 0x50], eax
jmp 0x6e70af
lea edi, [edx + 0x50]
call fcn.00456ab0
jmp 0x6e70af
mov dword [esp + 0x8c], eax
mov dword [esp + 0x48], ecx
mov dword [esp], edx
mov eax, dword [esp + 0xe8]
mov dword [esp + 4], eax
mov ecx, dword [esp + 0xec]
mov dword [esp + 8], ecx
call fcn.006e9b30
movzx eax, byte [esp + 0x18]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xc]
mov ebx, dword [esp + 0x14]
test al, al
jne 0x6e7268
movzx eax, byte [esp + 0xfc]
test al, al
je 0x6e9311
mov eax, dword [esp + 0xf0]
mov dword [esp], eax
mov eax, dword [esp + 0xf4]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xf8]
mov dword [esp + 8], eax
call fcn.00490af0
mov eax, dword [esp + 0x10]
mov dword [esp + 0xa8], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x78], ecx
mov edx, dword [esp + 0xe4]
mov dword [esp], edx
mov edx, dword [esp + 0xe8]
mov dword [esp + 4], edx
mov edx, dword [esp + 0xec]
mov dword [esp + 8], edx
call fcn.00408810
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x78]
test ecx, ecx
je 0x6e71c5
mov ecx, dword [ecx + 4]
mov dword [esp + 0xcc], 0
mov dword [esp + 0xd0], 0
mov dword [esp + 0xd4], 0
mov dword [esp + 0xd8], 0
lea edx, [0x909bc0]
mov dword [esp + 0xcc], edx
mov dword [esp + 0xd0], eax
mov dword [esp + 0xd4], ecx
mov eax, dword [esp + 0xa8]
mov dword [esp + 0xd8], eax
lea eax, [0x9f33f8]
mov dword [esp], eax
mov dword [esp + 4], 0x47
lea eax, [esp + 0xcc]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004d7200
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x100], eax
mov dword [esp + 0x104], ecx
add esp, 0xdc
ret
mov eax, dword [esp + 0x48]
mov eax, dword [eax + 0x10]
mov ebp, dword [esp + 0x8c]
mov dword [esp], ebp
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebx
call eax
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x100], eax
mov dword [esp + 0x104], ecx
add esp, 0xdc
ret
mov dword [esp + 0x70], ebp
mov dword [esp + 0xa4], esi
mov dword [esp + 0xa0], edi
mov eax, dword [esp + 0xe4]
movzx ecx, byte [eax]
cmp cl, 0x66
ja 0x6e9084
cmp cl, 0x22
je 0x6e88bd
cmp cl, 0x66
jne 0x6e796c
movzx edx, byte [esp + 0xfc]
test dl, dl
je 0x6e7960
mov ebx, dword [esp + 0xe8]
cmp ebx, 4
je 0x6e7941
mov dword [esp + 0x7c], eax
mov eax, 1
mov byte [esp + 0x2f], al
mov eax, dword [esp + 0x7c]
movzx esi, byte [esp + 0x2f]
xchg esi, eax
test al, al
xchg esi, eax
je 0x6e732f
cmp ebx, 5
je 0x6e7925
mov esi, 1
xchg esi, eax
test al, al
xchg esi, eax
jne 0x6e77e4
cmp cl, 0x74
sete cl
nop
mov esi, ebp
and ebp, 0x1f
cmp ebp, 1
je 0x6e77c4
cmp ebp, 0x14
je 0x6e75c0
test dl, dl
je 0x6e74a9
mov dword [esp], edi
mov eax, dword [esp + 0xa4]
mov dword [esp + 4], eax
mov dword [esp + 8], esi
call fcn.00490af0
mov eax, dword [esp + 0x10]
mov dword [esp + 0xa8], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x78], ecx
mov edx, dword [esp + 0xe4]
mov dword [esp], edx
mov edx, dword [esp + 0xe8]
mov dword [esp + 4], edx
mov edx, dword [esp + 0xec]
mov dword [esp + 8], edx
call fcn.00408810
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x78]
test ecx, ecx
je 0x6e73b3
mov ecx, dword [ecx + 4]
mov dword [esp + 0xcc], 0
mov dword [esp + 0xd0], 0
mov dword [esp + 0xd4], 0
mov dword [esp + 0xd8], 0
lea edx, [0x909bc0]
mov dword [esp + 0xcc], edx
mov dword [esp + 0xd0], eax
mov dword [esp + 0xd4], ecx
mov eax, dword [esp + 0xa8]
mov dword [esp + 0xd8], eax
lea eax, [0x9f33f8]
mov dword [esp], eax
mov dword [esp + 4], 0x47
lea eax, [esp + 0xcc]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004d7200
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0xe0]
mov ebx, dword [edx + 0x4c]
test ebx, ebx
je 0x6e746c
mov dword [esp + 0x100], 0
mov dword [esp + 0x104], 0
add esp, 0xdc
ret
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.006e3250
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xe0]
mov dword [edx + 0x4c], eax
mov eax, dword [0xe8ff30]
test eax, eax
jne 0x6e749d
mov dword [edx + 0x50], ecx
jmp 0x6e744f
lea edi, [edx + 0x50]
mov eax, ecx
call fcn.00456ab0
jmp 0x6e744f
mov dword [esp], edi
mov eax, dword [esp + 0xa4]
mov dword [esp + 4], eax
mov dword [esp + 8], esi
call fcn.00490af0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x78], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0xa8], ecx
mov edx, dword [esp + 0xe0]
mov ebx, dword [edx + 0xc]
mov dword [esp + 0x74], ebx
lea ebp, [0x97f540]
mov dword [esp], ebp
call fcn.0040af00
mov edi, dword [esp + 4]
mov dword [edi + 4], 4
mov eax, dword [0xe8ff30]
test eax, eax
jne 0x6e75b0
lea ecx, [0x9cba00]
mov dword [edi], ecx
mov ecx, dword [esp + 0x78]
mov dword [edi + 8], ecx
mov ecx, dword [0xe8ff30]
test ecx, ecx
jne 0x6e7594
mov eax, dword [esp + 0xa8]
mov dword [edi + 0xc], eax
mov eax, dword [esp + 0x74]
dec eax
mov dword [edi + 0x10], eax
sar eax, 0x1f
mov dword [edi + 0x14], eax
mov eax, dword [esp + 0xe0]
mov ecx, dword [eax + 0x4c]
test ecx, ecx
jne 0x6e744f
mov dword [esp], eax
lea ecx, [0xaa4bd0]
mov dword [esp + 4], ecx
mov dword [esp + 8], edi
call fcn.006e3250
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xe0]
mov dword [edx + 0x4c], eax
mov eax, dword [0xe8ff30]
test eax, eax
jne 0x6e7585
mov dword [edx + 0x50], ecx
jmp 0x6e744f
lea edi, [edx + 0x50]
mov eax, ecx
call fcn.00456ab0
jmp 0x6e744f
lea ecx, [edi + 0xc]
mov eax, edi
mov edi, ecx
mov edx, eax
mov eax, dword [esp + 0xa8]
call fcn.00456ab0
mov edi, edx
jmp 0x6e752b
lea eax, [0x9cba00]
call fcn.00456ab0
jmp 0x6e7510
mov byte [esp + 0x2e], cl
mov dword [esp], edi
mov eax, dword [esp + 0xa4]
mov dword [esp + 4], eax
mov dword [esp + 8], esi
call fcn.0048e770
mov eax, dword [esp + 0xc]
test eax, eax
jne 0x6e76a2
movzx ecx, byte [esp + 0x2e]
movzx ecx, cl
lea edx, [0xe19fc0]
lea eax, [edx + ecx]
nop
movzx ecx, byte [0xe7b378]
test cl, cl
je 0x6e769a
lea ecx, [0x926640]
mov dword [0xe7b37c], ecx
mov edx, dword [0xe8ff30]
test edx, edx
jne 0x6e768d
mov dword [0xe7b380], eax
mov dword [esp + 0xac], ecx
mov dword [esp + 0xb0], eax
mov ecx, dword [esp + 0xac]
test ecx, ecx
je 0x6e7685
nop
movzx edx, byte [ecx + 0xf]
mov ebx, edx
and edx, 0x1f
test bl, 0x20
jne 0x6e7652
or edx, 0x80
mov ebx, dword [esp + 0xa0]
mov dword [esp], ebx
mov ebx, dword [esp + 0xa4]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x70]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], edx
call fcn.0048f510
jmp 0x6e744f
xor eax, eax
xor ecx, ecx
xor edx, edx
jmp 0x6e7652
lea edi, [0xe7b380]
call fcn.00456ab0
jmp 0x6e7624
lea ecx, [0x926640]
jmp 0x6e7624
mov eax, dword [esp + 0xa0]
mov dword [esp], eax
mov eax, dword [esp + 0xa4]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x70]
mov dword [esp + 8], eax
call fcn.00490af0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x78], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0xa8], ecx
mov edx, dword [esp + 0xe0]
mov ebx, dword [edx + 0xc]
mov dword [esp + 0x74], ebx
lea ebp, [0x97f540]
mov dword [esp], ebp
call fcn.0040af00
mov edi, dword [esp + 4]
mov dword [edi + 4], 4
mov eax, dword [0xe8ff30]
test eax, eax
jne 0x6e77b4
lea ecx, [0x9cba00]
mov dword [edi], ecx
mov ecx, dword [esp + 0x78]
mov dword [edi + 8], ecx
mov ecx, dword [0xe8ff30]
test ecx, ecx
jne 0x6e7798
mov eax, dword [esp + 0xa8]
mov dword [edi + 0xc], eax
mov eax, dword [esp + 0x74]
dec eax
mov dword [edi + 0x10], eax
sar eax, 0x1f
mov dword [edi + 0x14], eax
mov eax, dword [esp + 0xe0]
mov ecx, dword [eax + 0x4c]
test ecx, ecx
jne 0x6e744f
mov dword [esp], eax
lea ecx, [0xaa4bd0]
mov dword [esp + 4], ecx
mov dword [esp + 8], edi
call fcn.006e3250
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xe0]
mov dword [edx + 0x4c], eax
mov eax, dword [0xe8ff30]
test eax, eax
jne 0x6e7789
mov dword [edx + 0x50], ecx
jmp 0x6e744f
lea edi, [edx + 0x50]
mov eax, ecx
call fcn.00456ab0
jmp 0x6e744f
lea ecx, [edi + 0xc]
mov eax, edi
mov edi, ecx
mov edx, eax
mov eax, dword [esp + 0xa8]
call fcn.00456ab0
mov edi, edx
jmp 0x6e772f
lea eax, [0x9cba00]
call fcn.00456ab0
jmp 0x6e7714
mov dword [esp], edi
mov eax, dword [esp + 0xa4]
mov dword [esp + 4], eax
mov dword [esp + 8], esi
mov byte [esp + 0xc], cl
call fcn.0048f620
jmp 0x6e744f
mov dword [esp], edi
mov eax, dword [esp + 0xa4]
mov dword [esp + 4], eax
mov dword [esp + 8], ebp
call fcn.00490af0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x78], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0xa8], ecx
mov edx, dword [esp + 0xe4]
mov dword [esp], edx
mov edx, dword [esp + 0xe8]
mov dword [esp + 4], edx
mov edx, dword [esp + 0xec]
mov dword [esp + 8], edx
call fcn.00408810
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x78]
test ecx, ecx
je 0x6e7842
mov ecx, dword [ecx + 4]
mov dword [esp + 0xcc], 0
mov dword [esp + 0xd0], 0
mov dword [esp + 0xd4], 0
mov dword [esp + 0xd8], 0
lea edx, [0x909bc0]
mov dword [esp + 0xcc], edx
mov dword [esp + 0xd0], eax
mov dword [esp + 0xd4], ecx
mov eax, dword [esp + 0xa8]
mov dword [esp + 0xd8], eax
lea eax, [0x9f33f8]
mov dword [esp], eax
mov dword [esp + 4], 0x47
lea eax, [esp + 0xcc]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004d7200
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0xe0]
mov ebx, dword [edx + 0x4c]
test ebx, ebx
jne 0x6e744f
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.006e3250
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xe0]
mov dword [edx + 0x4c], eax
mov eax, dword [0xe8ff30]
test eax, eax
jne 0x6e7916
mov dword [edx + 0x50], ecx
jmp 0x6e744f
lea edi, [edx + 0x50]
mov eax, ecx
call fcn.00456ab0
jmp 0x6e744f
cmp dword [eax], 0x736c6166
jne 0x6e7320
cmp byte [eax + 4], 0x65
xchg esi, ebx
setne bl
xchg esi, ebx
jmp 0x6e7325
cmp dword [eax], 0x65757274
xchg esi, ebx
setne bl
xchg esi, ebx
xchg esi, eax
mov byte [esp + 0x2f], al
xchg esi, eax
mov esi, dword [esp + 0xa4]
jmp 0x6e730c
mov ebx, dword [esp + 0xe8]
jmp 0x6e732f
cmp cl, 0x2d
je 0x6e7a95
cmp cl, 0x30
jae 0x6e88b2
mov ecx, 1
test cl, cl
je 0x6e7a95
movzx ecx, byte [esp + 0xfc]
test cl, cl
je 0x6e92dc
mov dword [esp], edi
mov dword [esp + 4], esi
mov dword [esp + 8], ebp
call fcn.00490af0
mov eax, dword [esp + 0x10]
mov dword [esp + 0xa8], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x78], ecx
mov edx, dword [esp + 0xe4]
mov dword [esp], edx
mov edx, dword [esp + 0xe8]
mov dword [esp + 4], edx
mov edx, dword [esp + 0xec]
mov dword [esp + 8], edx
call fcn.00408810
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x78]
test ecx, ecx
je 0x6e79f2
mov ecx, dword [ecx + 4]
mov dword [esp + 0xcc], 0
mov dword [esp + 0xd0], 0
mov dword [esp + 0xd4], 0
mov dword [esp + 0xd8], 0
lea edx, [0x909bc0]
mov dword [esp + 0xcc], edx
mov dword [esp + 0xd0], eax
mov dword [esp + 0xd4], ecx
mov eax, dword [esp + 0xa8]
mov dword [esp + 0xd8], eax
lea eax, [0x9f33f8]
mov dword [esp], eax
mov dword [esp + 4], 0x47
lea eax, [esp + 0xcc]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004d7200
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x100], ecx
mov dword [esp + 0x104], eax
add esp, 0xdc
ret
mov dword [esp], 0
mov dword [esp + 4], eax
mov ecx, dword [esp + 0xe8]
mov dword [esp + 8], ecx
mov edx, dword [esp + 0xec]
mov dword [esp + 0xc], edx
call fcn.004436f0
mov eax, dword [esp + 0x14]
mov dword [esp + 0x4c], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x94], ecx
nop
mov edx, dword [esp + 0x70]
mov ebx, edx
and edx, 0x1f
cmp edx, 0xc
ja 0x6e8388
lea ebp, [edx - 2]
cmp ebp, 4
jbe 0x6e80f9
lea ebp, [edx - 7]
cmp ebp, 5
jbe 0x6e7e8b
cmp edx, 0x18
je 0x6e7e28
xor edx, edx
test dl, dl
jne 0x6e7d3d
movzx eax, byte [esp + 0xfc]
test al, al
je 0x6e7c24
mov eax, dword [esp + 0xa0]
mov dword [esp], eax
mov eax, dword [esp + 0xa4]
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
call fcn.00490af0
mov eax, dword [esp + 0x10]
mov dword [esp + 0xa8], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x78], ecx
mov edx, dword [esp + 0xe4]
mov dword [esp], edx
mov edx, dword [esp + 0xe8]
mov dword [esp + 4], edx
mov edx, dword [esp + 0xec]
mov dword [esp + 8], edx
call fcn.00408810
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x78]
test ecx, ecx
je 0x6e7b81
mov ecx, dword [ecx + 4]
mov dword [esp + 0xcc], 0
mov dword [esp + 0xd0], 0
mov dword [esp + 0xd4], 0
mov dword [esp + 0xd8], 0
lea edx, [0x909bc0]
mov dword [esp + 0xcc], edx
mov dword [esp + 0xd0], eax
mov dword [esp + 0xd4], ecx
mov eax, dword [esp + 0xa8]
mov dword [esp + 0xd8], eax
lea eax, [0x9f33f8]
mov dword [esp], eax
mov dword [esp + 4], 0x47
lea eax, [esp + 0xcc]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004d7200
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x100], ecx
mov dword [esp + 0x104], eax
add esp, 0xdc
ret
mov eax, dword [esp + 0xa0]
mov dword [esp], eax
mov eax, dword [esp + 0xa4]
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
call fcn.00490af0
mov eax, dword [esp + 0x10]
mov dword [esp + 0xa8], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x78], ecx
mov edx, dword [esp + 0xe0]
mov ebx, dword [edx + 0xc]
mov dword [esp + 0x74], ebx
lea ebp, [0x97f540]
mov dword [esp], ebp
call fcn.0040af00
mov edi, dword [esp + 4]
mov dword [edi + 4], 6
mov eax, dword [0xe8ff30]
test eax, eax
jne 0x6e7d2d
lea ecx, [0x9cdaa8]
mov dword [edi], ecx
mov ecx, dword [esp + 0x78]
mov dword [edi + 8], ecx
mov ecx, dword [0xe8ff30]
test ecx, ecx
jne 0x6e7d14
mov eax, dword [esp + 0xa8]
mov dword [edi + 0xc], eax
mov eax, dword [esp + 0x74]
dec eax
mov dword [edi + 0x10], eax
sar eax, 0x1f
mov dword [edi + 0x14], eax
mov eax, dword [esp + 0xe0]
mov ecx, dword [eax + 0x4c]
test ecx, ecx
jne 0x6e744f
mov dword [esp], eax
lea ecx, [0xaa4bd0]
mov dword [esp + 4], ecx
mov dword [esp + 8], edi
call fcn.006e3250
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0xe0]
mov dword [edx + 0x4c], ecx
mov ecx, dword [0xe8ff30]
test ecx, ecx
jne 0x6e7d07
mov dword [edx + 0x50], eax
jmp 0x6e744f
lea edi, [edx + 0x50]
call fcn.00456ab0
jmp 0x6e744f
lea ecx, [edi + 0xc]
mov eax, edi
mov edi, ecx
mov edx, eax
mov eax, dword [esp + 0xa8]
call fcn.00456ab0
mov edi, edx
jmp 0x6e7cad
lea eax, [0x9cdaa8]
call fcn.00456ab0
jmp 0x6e7c92
mov edx, dword [esp + 0xa0]
mov dword [esp], edx
mov edx, dword [esp + 0xa4]
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
call fcn.004902f0
mov eax, dword [esp + 0x94]
mov dword [esp], eax
mov eax, dword [esp + 0x4c]
mov dword [esp + 4], eax
call fcn.006e3070
movzx eax, byte [esp + 8]
test al, al
jne 0x6e744f
mov eax, dword [esp + 0xe4]
mov dword [esp], eax
mov eax, dword [esp + 0xe8]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xec]
mov dword [esp + 8], eax
call fcn.00408810
mov eax, dword [esp + 0xc]
mov dword [esp + 0xc4], 0
mov dword [esp + 0xc8], 0
lea ecx, [0x909bc0]
mov dword [esp + 0xc4], ecx
mov dword [esp + 0xc8], eax
lea eax, [0x9f2498]
mov dword [esp], eax
mov dword [esp + 4], 0x40
lea eax, [esp + 0xc4]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004d7200
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x100], ecx
mov dword [esp + 0x104], eax
add esp, 0xdc
ret
mov eax, dword [esp + 0xa0]
mov dword [esp], eax
mov ecx, dword [esp + 0xa4]
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
call fcn.00490af0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
cmp dword [0xe7a7c8], ecx
je 0x6e7e6e
xor eax, eax
mov ecx, dword [esp + 0x94]
mov ebx, dword [esp + 0x70]
mov edx, eax
mov eax, dword [esp + 0x4c]
jmp 0x6e7b04
mov dword [esp], ecx
mov dword [esp + 4], eax
mov eax, dword [0xe7a7cc]
mov dword [esp + 8], eax
call fcn.00402f80
movzx eax, byte [esp + 0xc]
jmp 0x6e7e58
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0xa
mov dword [esp + 0xc], 0x40
call fcn.004770d0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
test eax, eax
je 0x6e800f
mov eax, dword [esp + 0xa0]
mov dword [esp], eax
mov eax, dword [esp + 0xa4]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x70]
mov dword [esp + 8], eax
call fcn.00490af0
mov eax, dword [esp + 0x10]
mov dword [esp + 0xa8], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x78], ecx
mov edx, dword [esp + 0xe0]
mov ebx, dword [edx + 0xc]
mov dword [esp + 0x74], ebx
lea ebp, [0x97f540]
mov dword [esp], ebp
call fcn.0040af00
mov eax, dword [esp + 4]
mov dword [esp + 0x9c], eax
mov dword [esp], 0
lea ecx, [0x9ced36]
mov dword [esp + 4], ecx
mov dword [esp + 8], 7
mov ecx, dword [esp + 0x94]
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0x4c]
mov dword [esp + 0x10], ecx
call fcn.00443570
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edi, dword [esp + 0x9c]
mov dword [edi + 4], ecx
mov ecx, dword [0xe8ff30]
test ecx, ecx
jne 0x6e8005
mov dword [edi], eax
mov ecx, dword [esp + 0x78]
mov dword [edi + 8], ecx
mov ecx, dword [0xe8ff30]
test ecx, ecx
jne 0x6e7fec
mov eax, dword [esp + 0xa8]
mov dword [edi + 0xc], eax
mov eax, dword [esp + 0x74]
dec eax
mov dword [edi + 0x10], eax
sar eax, 0x1f
mov dword [edi + 0x14], eax
mov eax, dword [esp + 0xe0]
mov ecx, dword [eax + 0x4c]
test ecx, ecx
jne 0x6e744f
mov dword [esp], eax
lea ecx, [0xaa4bd0]
mov dword [esp + 4], ecx
mov dword [esp + 8], edi
call fcn.006e3250
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0xe0]
mov dword [edx + 0x4c], ecx
mov ecx, dword [0xe8ff30]
test ecx, ecx
jne 0x6e7fdf
mov dword [edx + 0x50], eax
jmp 0x6e744f
lea edi, [edx + 0x50]
call fcn.00456ab0
jmp 0x6e744f
lea ecx, [edi + 0xc]
mov eax, edi
mov edi, ecx
mov edx, eax
mov eax, dword [esp + 0xa8]
call fcn.00456ab0
mov edi, edx
jmp 0x6e7f85
call fcn.00456ab0
jmp 0x6e7f6a
mov dword [esp + 0x38], ecx
mov dword [esp + 0x3c], edx
mov eax, dword [esp + 0xa0]
mov ebx, dword [eax]
shl ebx, 3
add ebx, 0xffffffc0
neg ebx
lea ebp, [ebx - 0x20]
mov dword [esp + 0x6c], ebp
mov esi, ebp
xchg ebp, ebx
neg ebx
xchg ebp, ebx
cmp ebp, 0x20
sbb edi, edi
mov dword [esp + 0x68], edi
cmp ebx, 0x20
sbb eax, eax
mov dword [esp + 0x64], eax
cmp esi, 0x20
sbb eax, eax
mov dword [esp + 0x60], eax
mov ecx, ebp
mov eax, dword [esp + 0x38]
shr eax, cl
mov ecx, ebx
shl edx, cl
and eax, edi
mov ecx, esi
mov edi, dword [esp + 0x38]
shl edi, cl
mov esi, dword [esp + 0x60]
and edi, esi
mov esi, dword [esp + 0x64]
and edx, esi
or edx, eax
or edx, edi
mov ecx, ebx
mov edi, edx
shr edx, cl
and edx, esi
mov eax, dword [esp + 0x3c]
cmp edx, eax
setne dl
mov ecx, ebp
mov ebp, edi
shl edi, cl
mov ecx, ebx
mov eax, dword [esp + 0x38]
shl eax, cl
and eax, esi
shr eax, cl
and eax, esi
mov ebx, dword [esp + 0x68]
and edi, ebx
or eax, edi
mov ecx, dword [esp + 0x6c]
shr ebp, cl
mov ebx, dword [esp + 0x60]
and ebp, ebx
or eax, ebp
mov ebx, dword [esp + 0x38]
cmp eax, ebx
setne al
or eax, edx
test al, al
jne 0x6e7ebb
mov eax, dword [esp + 0xa0]
mov dword [esp], eax
mov eax, dword [esp + 0xa4]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x70]
mov dword [esp + 8], eax
mov dword [esp + 0xc], ebx
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x10], eax
call fcn.004900d0
jmp 0x6e744f
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0xa
mov dword [esp + 0xc], 0x40
call fcn.004778e0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
test eax, eax
je 0x6e827d
mov eax, dword [esp + 0xa0]
mov dword [esp], eax
mov eax, dword [esp + 0xa4]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x70]
mov dword [esp + 8], eax
call fcn.00490af0
mov eax, dword [esp + 0x10]
mov dword [esp + 0xa8], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x78], ecx
mov edx, dword [esp + 0xe0]
mov ebx, dword [edx + 0xc]
mov dword [esp + 0x74], ebx
lea ebp, [0x97f540]
mov dword [esp], ebp
call fcn.0040af00
mov eax, dword [esp + 4]
mov dword [esp + 0x9c], eax
mov dword [esp], 0
lea ecx, [0x9ced36]
mov dword [esp + 4], ecx
mov dword [esp + 8], 7
mov ecx, dword [esp + 0x94]
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0x4c]
mov dword [esp + 0x10], ecx
call fcn.00443570
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edi, dword [esp + 0x9c]
mov dword [edi + 4], ecx
mov ecx, dword [0xe8ff30]
test ecx, ecx
jne 0x6e8273
mov dword [edi], eax
mov ecx, dword [esp + 0x78]
mov dword [edi + 8], ecx
mov ecx, dword [0xe8ff30]
test ecx, ecx
jne 0x6e825a
mov eax, dword [esp + 0xa8]
mov dword [edi + 0xc], eax
mov eax, dword [esp + 0x74]
dec eax
mov dword [edi + 0x10], eax
sar eax, 0x1f
mov dword [edi + 0x14], eax
mov eax, dword [esp + 0xe0]
mov ecx, dword [eax + 0x4c]
test ecx, ecx
jne 0x6e744f
mov dword [esp], eax
lea ecx, [0xaa4bd0]
mov dword [esp + 4], ecx
mov dword [esp + 8], edi
call fcn.006e3250
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0xe0]
mov dword [edx + 0x4c], ecx
mov ecx, dword [0xe8ff30]
test ecx, ecx
jne 0x6e824d
mov dword [edx + 0x50], eax
jmp 0x6e744f
lea edi, [edx + 0x50]
call fcn.00456ab0
jmp 0x6e744f
lea ecx, [edi + 0xc]
mov eax, edi
mov edi, ecx
mov edx, eax
mov eax, dword [esp + 0xa8]
call fcn.00456ab0
mov edi, edx
jmp 0x6e81f3
call fcn.00456ab0
jmp 0x6e81d8
mov dword [esp + 0x34], ecx
mov dword [esp + 0x40], edx
mov eax, dword [esp + 0xa0]
mov ebx, dword [eax]
shl ebx, 3
add ebx, 0xffffffc0
neg ebx
mov ebp, ebx
shr ebx, 5
cmp ebx, 1
sbb ebx, ebx
mov dword [esp + 0x6c], ebx
cmp ebp, 0x20
sbb esi, esi
mov dword [esp + 0x68], esi
sbb edi, edi
mov dword [esp + 0x78], edi
lea eax, [ebp - 0x20]
mov dword [esp + 0x64], eax
cmp eax, 0x20
sbb edi, edi
neg eax
cmp eax, 0x20
sbb ebx, ebx
mov dword [esp + 0x60], ebx
mov ecx, dword [esp + 0x64]
mov esi, dword [esp + 0x34]
shl esi, cl
mov ecx, eax
mov ebx, dword [esp + 0x34]
shr ebx, cl
mov ecx, ebp
shl edx, cl
and esi, edi
mov ebp, dword [esp + 0x60]
and ebx, ebp
mov ebp, dword [esp + 0x68]
and edx, ebp
or edx, ebx
or edx, esi
mov ebx, ecx
mov ecx, eax
mov esi, edx
shl edx, cl
xchg edi, ebx
not ebx
xchg edi, ebx
mov eax, dword [esp + 0x64]
or edi, eax
mov ecx, ebx
mov eax, dword [esp + 0x34]
shl eax, cl
and eax, ebp
shr eax, cl
mov ecx, edi
mov edi, esi
sar esi, cl
and eax, ebp
mov ebp, dword [esp + 0x60]
and edx, ebp
or eax, edx
mov edx, dword [esp + 0x6c]
xor edx, 0xffffffff
and edx, esi
or edx, eax
mov eax, dword [esp + 0x34]
cmp edx, eax
setne dl
mov ecx, dword [esp + 0x78]
not ecx
or ecx, ebx
sar edi, cl
mov ebx, dword [esp + 0x40]
cmp edi, ebx
xchg ebp, ebx
setne bl
xchg ebp, ebx
or ebp, edx
xchg ebp, eax
test al, al
xchg ebp, eax
jne 0x6e8129
mov ecx, dword [esp + 0xa0]
mov dword [esp], ecx
mov ecx, dword [esp + 0xa4]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x70]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ebx
call fcn.0048fb30
jmp 0x6e744f
lea ebp, [edx - 0xd]
cmp ebp, 1
jbe 0x6e8641
cmp edx, 0x14
jne 0x6e7af9
mov edx, dword [esp + 0xe0]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.006e6a30
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov ebx, dword [esp + 0xc]
test edx, edx
je 0x6e841c
nop
mov ecx, dword [esp + 0xe0]
mov ebx, dword [ecx + 0x4c]
test ebx, ebx
jne 0x6e744f
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.006e3250
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0xe0]
mov dword [edx + 0x4c], ecx
mov ecx, dword [0xe8ff30]
test ecx, ecx
jne 0x6e840f
mov dword [edx + 0x50], eax
jmp 0x6e744f
lea edi, [edx + 0x50]
call fcn.00456ab0
jmp 0x6e744f
mov dword [esp + 0x84], ecx
mov dword [esp + 0x30], ebx
mov eax, dword [esp + 0xa0]
mov dword [esp], eax
mov ecx, dword [esp + 0xa4]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x70]
mov dword [esp + 8], edx
call fcn.0048e770
mov eax, dword [esp + 0xc]
test eax, eax
jne 0x6e851f
mov ecx, dword [esp + 0x30]
test ecx, ecx
je 0x6e8517
nop
movzx edx, byte [0xe7b378]
test dl, dl
je 0x6e850b
mov dword [0xe7b37c], ecx
mov edx, dword [0xe8ff30]
test edx, edx
jne 0x6e84f7
mov eax, dword [esp + 0x84]
mov dword [0xe7b380], eax
mov dword [esp + 0xbc], ecx
mov dword [esp + 0xc0], eax
mov ecx, dword [esp + 0xbc]
test ecx, ecx
je 0x6e84ef
nop
movzx edx, byte [ecx + 0xf]
mov ebx, edx
and edx, 0x1f
test bl, 0x20
jne 0x6e84bc
or edx, 0x80
mov ebx, dword [esp + 0xa0]
mov dword [esp], ebx
mov ebx, dword [esp + 0xa4]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x70]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], edx
call fcn.0048f510
jmp 0x6e744f
xor edx, edx
xor eax, eax
xor ecx, ecx
jmp 0x6e84bc
lea edi, [0xe7b380]
mov eax, dword [esp + 0x84]
call fcn.00456ab0
jmp 0x6e848e
mov eax, dword [esp + 0x84]
jmp 0x6e848e
xor edx, edx
xor eax, eax
xor ecx, ecx
jmp 0x6e84bc
mov eax, dword [esp + 0xa0]
mov dword [esp], eax
mov eax, dword [esp + 0xa4]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x70]
mov dword [esp + 8], eax
call fcn.00490af0
mov eax, dword [esp + 0x10]
mov dword [esp + 0xa8], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x78], ecx
mov edx, dword [esp + 0xe0]
mov ebx, dword [edx + 0xc]
mov dword [esp + 0x74], ebx
lea ebp, [0x97f540]
mov dword [esp], ebp
call fcn.0040af00
mov edi, dword [esp + 4]
mov dword [edi + 4], 6
mov eax, dword [0xe8ff30]
test eax, eax
jne 0x6e8631
lea ecx, [0x9cdaa8]
mov dword [edi], ecx
mov ecx, dword [esp + 0x78]
mov dword [edi + 8], ecx
mov ecx, dword [0xe8ff30]
test ecx, ecx
jne 0x6e8615
mov eax, dword [esp + 0xa8]
mov dword [edi + 0xc], eax
mov eax, dword [esp + 0x74]
dec eax
mov dword [edi + 0x10], eax
sar eax, 0x1f
mov dword [edi + 0x14], eax
mov eax, dword [esp + 0xe0]
mov ecx, dword [eax + 0x4c]
test ecx, ecx
jne 0x6e744f
mov dword [esp], eax
lea ecx, [0xaa4bd0]
mov dword [esp + 4], ecx
mov dword [esp + 8], edi
call fcn.006e3250
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xe0]
mov dword [edx + 0x4c], eax
mov eax, dword [0xe8ff30]
test eax, eax
jne 0x6e8606
mov dword [edx + 0x50], ecx
jmp 0x6e744f
lea edi, [edx + 0x50]
mov eax, ecx
call fcn.00456ab0
jmp 0x6e744f
lea ecx, [edi + 0xc]
mov eax, edi
mov edi, ecx
mov edx, eax
mov eax, dword [esp + 0xa8]
call fcn.00456ab0
mov edi, edx
jmp 0x6e85ac
lea eax, [0x9cdaa8]
call fcn.00456ab0
jmp 0x6e8591
mov dword [esp + 0x5c], edx
mov eax, dword [esp + 0xa0]
mov dword [esp], eax
mov ecx, dword [esp + 0xa4]
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
call fcn.00490af0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov eax, dword [eax + 0x18]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x94]
mov dword [esp], ecx
mov edx, dword [esp + 0x4c]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.00476b40
movsd xmm0, qword [esp + 0xc]
mov eax, dword [esp + 0x14]
test eax, eax
je 0x6e87fa
mov eax, dword [esp + 0xa0]
mov dword [esp], eax
mov eax, dword [esp + 0xa4]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x70]
mov dword [esp + 8], eax
call fcn.00490af0
mov eax, dword [esp + 0x10]
mov dword [esp + 0xa8], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x78], ecx
mov edx, dword [esp + 0xe0]
mov ebx, dword [edx + 0xc]
mov dword [esp + 0x74], ebx
lea ebp, [0x97f540]
mov dword [esp], ebp
call fcn.0040af00
mov eax, dword [esp + 4]
mov dword [esp + 0x9c], eax
mov dword [esp], 0
lea ecx, [0x9ced36]
mov dword [esp + 4], ecx
mov dword [esp + 8], 7
mov ecx, dword [esp + 0x94]
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0x4c]
mov dword [esp + 0x10], ecx
call fcn.00443570
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov edi, dword [esp + 0x9c]
mov dword [edi + 4], eax
mov eax, dword [0xe8ff30]
test eax, eax
jne 0x6e87ee
mov dword [edi], ecx
mov ecx, dword [esp + 0x78]
mov dword [edi + 8], ecx
mov ecx, dword [0xe8ff30]
test ecx, ecx
jne 0x6e87d5
mov eax, dword [esp + 0xa8]
mov dword [edi + 0xc], eax
mov eax, dword [esp + 0x74]
dec eax
mov dword [edi + 0x10], eax
sar eax, 0x1f
mov dword [edi + 0x14], eax
mov eax, dword [esp + 0xe0]
mov ecx, dword [eax + 0x4c]
test ecx, ecx
jne 0x6e744f
mov dword [esp], eax
lea ecx, [0xaa4bd0]
mov dword [esp + 4], ecx
mov dword [esp + 8], edi
call fcn.006e3250
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0xe0]
mov dword [edx + 0x4c], ecx
mov ecx, dword [0xe8ff30]
test ecx, ecx
jne 0x6e87c8
mov dword [edx + 0x50], eax
jmp 0x6e744f
lea edi, [edx + 0x50]
call fcn.00456ab0
jmp 0x6e744f
lea ecx, [edi + 0xc]
mov eax, edi
mov edi, ecx
mov edx, eax
mov eax, dword [esp + 0xa8]
call fcn.00456ab0
mov edi, edx
jmp 0x6e876e
mov eax, ecx
call fcn.00456ab0
jmp 0x6e8753
mov eax, dword [esp + 0x5c]
cmp eax, 0xd
jne 0x6e8869
nop
xorps xmm1, xmm1
ucomisd xmm1, xmm0
jbe 0x6e8819
movsd xmm1, qword [0xa9b088]
pxor xmm0, xmm1
movsd xmm1, qword [0xa9b070]
ucomisd xmm0, xmm1
jbe 0x6e8865
movsd xmm1, qword [0xa9b078]
ucomisd xmm1, xmm0
setae al
test al, al
jne 0x6e86a4
mov eax, dword [esp + 0xa0]
mov dword [esp], eax
mov eax, dword [esp + 0xa4]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x70]
mov dword [esp + 8], eax
call fcn.0048fa50
jmp 0x6e744f
xor eax, eax
jmp 0x6e8836
cmp eax, 0xe
jne 0x6e8872
xor eax, eax
jmp 0x6e8836
lea eax, [0x95b800]
mov dword [esp], eax
call fcn.0040af00
mov edi, dword [esp + 4]
mov dword [edi + 4], 0x1b
mov eax, dword [0xe8ff30]
test eax, eax
jne 0x6e88a2
lea eax, [0x9df81a]
mov dword [edi], eax
jmp 0x6e92c3
lea eax, [0x9df81a]
call fcn.00456ab0
jmp 0x6e92c3
cmp cl, 0x39
seta cl
jmp 0x6e7983
mov dword [esp], eax
mov ecx, dword [esp + 0xe8]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0xec]
mov dword [esp + 8], edx
call fcn.006e9b30
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0xc]
movzx edx, byte [esp + 0x18]
mov ebx, dword [esp + 0x10]
test dl, dl
je 0x6e8f68
mov dword [esp + 0x54], eax
mov dword [esp + 0x90], ecx
mov dword [esp + 0x50], ebx
nop
mov edx, dword [esp + 0x70]
mov ebp, edx
and edx, 0x1f
cmp edx, 0x14
je 0x6e8d38
cmp edx, 0x17
je 0x6e8a8c
cmp edx, 0x18
jne 0x6e8973
mov dword [esp], 0
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
call fcn.004436f0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xa0]
mov dword [esp], edx
mov edx, dword [esp + 0xa4]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x70]
mov dword [esp + 8], edx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
call fcn.004902f0
jmp 0x6e744f
mov eax, dword [esp + 0xa0]
mov dword [esp], eax
mov eax, dword [esp + 0xa4]
mov dword [esp + 4], eax
mov dword [esp + 8], ebp
call fcn.00490af0
mov eax, dword [esp + 0x10]
mov dword [esp + 0xa8], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x78], ecx
mov edx, dword [esp + 0xe0]
mov ebx, dword [edx + 0xc]
mov dword [esp + 0x74], ebx
lea ebp, [0x97f540]
mov dword [esp], ebp
call fcn.0040af00
mov edi, dword [esp + 4]
mov dword [edi + 4], 6
mov eax, dword [0xe8ff30]
test eax, eax
jne 0x6e8a7c
lea ecx, [0x9cddae]
mov dword [edi], ecx
mov ecx, dword [esp + 0x78]
mov dword [edi + 8], ecx
mov ecx, dword [0xe8ff30]
test ecx, ecx
jne 0x6e8a63
mov eax, dword [esp + 0xa8]
mov dword [edi + 0xc], eax
mov eax, dword [esp + 0x74]
dec eax
mov dword [edi + 0x10], eax
sar eax, 0x1f
mov dword [edi + 0x14], eax
mov eax, dword [esp + 0xe0]
mov ecx, dword [eax + 0x4c]
test ecx, ecx
jne 0x6e744f
mov dword [esp], eax
lea ecx, [0xaa4bd0]
mov dword [esp + 4], ecx
mov dword [esp + 8], edi
call fcn.006e3250
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0xe0]
mov dword [edx + 0x4c], ecx
mov ecx, dword [0xe8ff30]
test ecx, ecx
jne 0x6e8a56
mov dword [edx + 0x50], eax
jmp 0x6e744f
lea edi, [edx + 0x50]
call fcn.00456ab0
jmp 0x6e744f
lea ecx, [edi + 0xc]
mov eax, edi
mov edi, ecx
mov edx, eax
mov eax, dword [esp + 0xa8]
call fcn.00456ab0
mov edi, edx
jmp 0x6e89fc
lea eax, [0x9cddae]
call fcn.00456ab0
jmp 0x6e89e1
mov eax, dword [esp + 0xa0]
mov dword [esp], eax
mov ecx, dword [esp + 0xa4]
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
call fcn.00490af0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov eax, dword [eax + 0x28]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov eax, dword [eax + 0x50]
mov dword [esp], ecx
call eax
cmp dword [esp + 4], 8
jne 0x6e8c16
mov eax, dword [0xe79754]
cmp dword [eax + 0x140], 0xffffffff
jne 0x6e8c07
mov eax, dword [esp + 0x50]
lea ecx, [eax + eax*2]
mov edx, ecx
shl ecx, 1
sar ecx, 0x1f
shr ecx, 0x1d
lea ecx, [ecx + edx*2]
sar ecx, 3
mov dword [esp + 0x58], ecx
lea eax, [0x92cb00]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], ecx
call fcn.00440170
mov eax, dword [esp + 0xc]
mov dword [esp + 0x98], eax
mov ecx, dword [0xe79754]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov ecx, dword [esp + 0x58]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ecx
mov edx, dword [esp + 0x90]
mov dword [esp + 0x10], edx
mov edx, dword [esp + 0x50]
mov dword [esp + 0x14], edx
mov edx, dword [esp + 0x54]
mov dword [esp + 0x18], edx
call fcn.005698e0
mov ecx, dword [esp + 0x1c]
mov eax, dword [esp + 0x24]
mov edx, dword [esp + 0x20]
test edx, edx
je 0x6e8bc1
nop
mov ecx, dword [esp + 0xe0]
mov ebx, dword [ecx + 0x4c]
test ebx, ebx
jne 0x6e744f
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.006e3250
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0xe0]
mov dword [edx + 0x4c], ecx
mov ecx, dword [0xe8ff30]
test ecx, ecx
jne 0x6e8bb4
mov dword [edx + 0x50], eax
jmp 0x6e744f
lea edi, [edx + 0x50]
call fcn.00456ab0
jmp 0x6e744f
mov edx, dword [esp + 0x58]
cmp ecx, edx
ja 0x6e92f4
mov eax, dword [esp + 0xa0]
mov dword [esp], eax
mov eax, dword [esp + 0xa4]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x70]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x98]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
call fcn.0048f6f0
jmp 0x6e744f
mov eax, dword [esp + 0x50]
shr eax, 2
lea ecx, [eax + eax*2]
jmp 0x6e8aff
mov eax, dword [esp + 0xa0]
mov dword [esp], eax
mov eax, dword [esp + 0xa4]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x70]
mov dword [esp + 8], eax
call fcn.00490af0
mov eax, dword [esp + 0x10]
mov dword [esp + 0xa8], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x78], ecx
mov edx, dword [esp + 0xe0]
mov ebx, dword [edx + 0xc]
mov dword [esp + 0x74], ebx
lea ebp, [0x97f540]
mov dword [esp], ebp
call fcn.0040af00
mov edi, dword [esp + 4]
mov dword [edi + 4], 6
mov eax, dword [0xe8ff30]
test eax, eax
jne 0x6e8d28
lea ecx, [0x9cddae]
mov dword [edi], ecx
mov ecx, dword [esp + 0x78]
mov dword [edi + 8], ecx
mov ecx, dword [0xe8ff30]
test ecx, ecx
jne 0x6e8d0c
mov eax, dword [esp + 0xa8]
mov dword [edi + 0xc], eax
mov eax, dword [esp + 0x74]
dec eax
mov dword [edi + 0x10], eax
sar eax, 0x1f
mov dword [edi + 0x14], eax
mov eax, dword [esp + 0xe0]
mov ecx, dword [eax + 0x4c]
test ecx, ecx
jne 0x6e744f
mov dword [esp], eax
lea ecx, [0xaa4bd0]
mov dword [esp + 4], ecx
mov dword [esp + 8], edi
call fcn.006e3250
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xe0]
mov dword [edx + 0x4c], eax
mov eax, dword [0xe8ff30]
test eax, eax
jne 0x6e8cfd
mov dword [edx + 0x50], ecx
jmp 0x6e744f
lea edi, [edx + 0x50]
mov eax, ecx
call fcn.00456ab0
jmp 0x6e744f
lea ecx, [edi + 0xc]
mov eax, edi
mov edi, ecx
mov edx, eax
mov eax, dword [esp + 0xa8]
call fcn.00456ab0
mov edi, edx
jmp 0x6e8ca3
lea eax, [0x9cddae]
call fcn.00456ab0
jmp 0x6e8c88
mov eax, dword [esp + 0xa0]
mov dword [esp], eax
mov ecx, dword [esp + 0xa4]
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
call fcn.0048e770
mov eax, dword [esp + 0xc]
test eax, eax
jne 0x6e8e4b
mov dword [esp], 0
mov eax, dword [esp + 0x90]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 0xc], eax
call fcn.004436f0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00408790
mov eax, dword [esp + 8]
nop
movzx ecx, byte [0xe7b378]
test cl, cl
je 0x6e8e43
lea ecx, [0x92c840]
mov dword [0xe7b37c], ecx
mov edx, dword [0xe8ff30]
test edx, edx
jne 0x6e8e36
mov dword [0xe7b380], eax
mov dword [esp + 0xb4], ecx
mov dword [esp + 0xb8], eax
mov ecx, dword [esp + 0xb4]
test ecx, ecx
je 0x6e8e2e
nop
movzx edx, byte [ecx + 0xf]
mov ebx, edx
and edx, 0x1f
test bl, 0x20
jne 0x6e8dfb
or edx, 0x80
mov ebx, dword [esp + 0xa0]
mov dword [esp], ebx
mov ebx, dword [esp + 0xa4]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x70]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], edx
call fcn.0048f510
jmp 0x6e744f
xor edx, edx
xor eax, eax
xor ecx, ecx
jmp 0x6e8dfb
lea edi, [0xe7b380]
call fcn.00456ab0
jmp 0x6e8dcd
lea ecx, [0x92c840]
jmp 0x6e8dcd
mov eax, dword [esp + 0xa0]
mov dword [esp], eax
mov eax, dword [esp + 0xa4]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x70]
mov dword [esp + 8], eax
call fcn.00490af0
mov eax, dword [esp + 0x10]
mov dword [esp + 0xa8], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x78], ecx
mov edx, dword [esp + 0xe0]
mov ebx, dword [edx + 0xc]
mov dword [esp + 0x74], ebx
lea ebp, [0x97f540]
mov dword [esp], ebp
call fcn.0040af00
mov edi, dword [esp + 4]
mov dword [edi + 4], 6
mov eax, dword [0xe8ff30]
test eax, eax
jne 0x6e8f58
lea ecx, [0x9cddae]
mov dword [edi], ecx
mov ecx, dword [esp + 0x78]
mov dword [edi + 8], ecx
mov ecx, dword [0xe8ff30]
test ecx, ecx
jne 0x6e8f3f
mov eax, dword [esp + 0xa8]
mov dword [edi + 0xc], eax
mov eax, dword [esp + 0x74]
dec eax
mov dword [edi + 0x10], eax
sar eax, 0x1f
mov dword [edi + 0x14], eax
mov eax, dword [esp + 0xe0]
mov ecx, dword [eax + 0x4c]
test ecx, ecx
jne 0x6e744f
mov dword [esp], eax
lea ecx, [0xaa4bd0]
mov dword [esp + 4], ecx
mov dword [esp + 8], edi
call fcn.006e3250
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0xe0]
mov dword [edx + 0x4c], ecx
mov ecx, dword [0xe8ff30]
test ecx, ecx
jne 0x6e8f32
mov dword [edx + 0x50], eax
jmp 0x6e744f
lea edi, [edx + 0x50]
call fcn.00456ab0
jmp 0x6e744f
lea ecx, [edi + 0xc]
mov eax, edi
mov edi, ecx
mov edx, eax
mov eax, dword [esp + 0xa8]
call fcn.00456ab0
mov edi, edx
jmp 0x6e8ed8
lea eax, [0x9cddae]
call fcn.00456ab0
jmp 0x6e8ebd
movzx eax, byte [esp + 0xfc]
test al, al
je 0x6e92f9
mov eax, dword [esp + 0xa0]
mov dword [esp], eax
mov eax, dword [esp + 0xa4]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x70]
mov dword [esp + 8], eax
call fcn.00490af0
mov eax, dword [esp + 0x10]
mov dword [esp + 0xa8], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x78], ecx
mov edx, dword [esp + 0xe4]
mov dword [esp], edx
mov edx, dword [esp + 0xe8]
mov dword [esp + 4], edx
mov edx, dword [esp + 0xec]
mov dword [esp + 8], edx
call fcn.00408810
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x78]
test ecx, ecx
je 0x6e8fe1
mov ecx, dword [ecx + 4]
mov dword [esp + 0xcc], 0
mov dword [esp + 0xd0], 0
mov dword [esp + 0xd4], 0
mov dword [esp + 0xd8], 0
lea edx, [0x909bc0]
mov dword [esp + 0xcc], edx
mov dword [esp + 0xd0], eax
mov dword [esp + 0xd4], ecx
mov eax, dword [esp + 0xa8]
mov dword [esp + 0xd8], eax
lea eax, [0x9f33f8]
mov dword [esp], eax
mov dword [esp + 4], 0x47
lea eax, [esp + 0xcc]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004d7200
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x100], ecx
mov dword [esp + 0x104], eax
add esp, 0xdc
ret
cmp cl, 0x6e
jne 0x6e926f
movzx ecx, byte [esp + 0xfc]
test cl, cl
je 0x6e90b2
mov ecx, dword [esp + 0xe8]
cmp ecx, 4
je 0x6e9261
mov edx, 1
test dl, dl
jne 0x6e9127
mov eax, ebp
and ebp, 0x1f
lea ecx, [ebp - 0x14]
nop
cmp ecx, 3
ja 0x6e744f
mov dword [esp], edi
mov dword [esp + 4], esi
mov dword [esp + 8], eax
call fcn.00490af0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00491950
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 8]
mov ebx, dword [esp + 0xa0]
mov dword [esp], ebx
mov ebx, dword [esp + 0xa4]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x70]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], eax
call fcn.0048f510
jmp 0x6e744f
mov dword [esp], edi
mov dword [esp + 4], esi
mov dword [esp + 8], ebp
call fcn.00490af0
mov eax, dword [esp + 0x10]
mov dword [esp + 0xa8], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x78], ecx
mov edx, dword [esp + 0xe4]
mov dword [esp], edx
mov edx, dword [esp + 0xe8]
mov dword [esp + 4], edx
mov edx, dword [esp + 0xec]
mov dword [esp + 8], edx
call fcn.00408810
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x78]
test ecx, ecx
je 0x6e917e
mov ecx, dword [ecx + 4]
mov dword [esp + 0xcc], 0
mov dword [esp + 0xd0], 0
mov dword [esp + 0xd4], 0
mov dword [esp + 0xd8], 0
lea edx, [0x909bc0]
mov dword [esp + 0xcc], edx
mov dword [esp + 0xd0], eax
mov dword [esp + 0xd4], ecx
mov eax, dword [esp + 0xa8]
mov dword [esp + 0xd8], eax
lea eax, [0x9f33f8]
mov dword [esp], eax
mov dword [esp + 4], 0x47
lea eax, [esp + 0xcc]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004d7200
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0xe0]
mov ebx, dword [edx + 0x4c]
test ebx, ebx
jne 0x6e744f
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.006e3250
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xe0]
mov dword [edx + 0x4c], eax
mov eax, dword [0xe8ff30]
test eax, eax
jne 0x6e9252
mov dword [edx + 0x50], ecx
jmp 0x6e744f
lea edi, [edx + 0x50]
mov eax, ecx
call fcn.00456ab0
jmp 0x6e744f
cmp dword [eax], 0x6c6c756e
setne dl
jmp 0x6e90ae
cmp cl, 0x74
je 0x6e72db
jmp 0x6e796c
mov eax, dword [ebx + 0x10]
mov dword [esp], edx
mov ecx, dword [esp + 0xe4]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0xe8]
mov dword [esp + 8], ecx
mov ecx, dword [esp + 0xec]
mov dword [esp + 0xc], ecx
call eax
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x100], ecx
mov dword [esp + 0x104], eax
add esp, 0xdc
ret
mov eax, dword [esp + 0x5c]
mov dword [edi + 8], eax
lea eax, [0x93faa0]
mov dword [esp], eax
mov dword [esp + 4], edi
call fcn.0042cc50
lea eax, [0x92c840]
mov dword [esp], eax
lea eax, [0xa9bbd0]
mov dword [esp + 4], eax
call fcn.0042cc50
call fcn.00456b70
lea eax, [0x92c840]
mov dword [esp], eax
lea eax, [0xa9bbc8]
mov dword [esp + 4], eax
call fcn.0042cc50
lea eax, [0x92c840]
mov dword [esp], eax
lea eax, [0xa9bbc0]
mov dword [esp + 4], eax
call fcn.0042cc50
nop
call fcn.00455270
jmp fcn.006e6c00