Function at 0x6879e6
Capabilities:
Inspect section memory permissions

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x70
mov eax, dword [ebp + 0x10]
mov dword [ebp - 4], eax
mov dword [ebp - 0x10], 0
mov ecx, dword [ebp + 0x10]
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 8]
and edx, 0xffff
mov word [ebp - 0xc], dx
cmp dword [ebp + 8], 0
je 0x687a1a
mov eax, dword [ebp + 8]
cmp dword [eax], 0x66
je 0x687a24
mov eax, 0xffffffcd
jmp 0x6898ab
push 0x1c
mov ecx, dword [ebp + 8]
push ecx
call fcn.006ac790
add esp, 8
cmp eax, 0x336
je 0x687a94
mov edx, dword [ebp + 8]
cmp dword [edx + 0x80], 0
je 0x687a59
xor eax, eax
test eax, eax
je 0x687a59
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x80]
mov dword [ebp - 0x3c], edx
jmp 0x687a60
mov dword [ebp - 0x3c], 0xffffffd3
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0x3c]
mov dword [eax + 0x80], ecx
push 0
push 0xff
push 0
push 0
push 0xcc
push 0xffffffffffffffd3
mov edx, dword [ebp + 8]
push edx
call fcn.0068a390
add esp, 0x1c
mov eax, 0xffffffd3
jmp 0x6898ab
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0x6e
jg 0x687ac7
cmp dword [ebp - 0x40], 0x6e
je 0x688419
mov ecx, dword [ebp - 0x40]
sub ecx, 2
mov dword [ebp - 0x40], ecx
cmp dword [ebp - 0x40], 0x68
ja case.0x687b93.2
mov edx, dword [ebp - 0x40]
jmp dword [edx*4 + 0x6898af]
cmp dword [ebp - 0x40], 0x1fe
jg 0x687b7a
cmp dword [ebp - 0x40], 0x1fe
je 0x689466
cmp dword [ebp - 0x40], 0x1f7
jg 0x687b5b
cmp dword [ebp - 0x40], 0x1f7
je 0x689583
cmp dword [ebp - 0x40], 0xc8
jg 0x687b2f
cmp dword [ebp - 0x40], 0xc8
je 0x688ac3
cmp dword [ebp - 0x40], 0x73
je 0x6887f3
cmp dword [ebp - 0x40], 0x78
je 0x688f67
cmp dword [ebp - 0x40], 0x82
je 0x687b9a
jmp case.0x687b93.2
cmp dword [ebp - 0x40], 0x1f4
je 0x68952c
cmp dword [ebp - 0x40], 0x1f5
je 0x689549
cmp dword [ebp - 0x40], 0x1f6
je 0x689566
jmp case.0x687b93.2
mov eax, dword [ebp - 0x40]
sub eax, 0x1f8
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 5
ja case.0x687b93.2
mov ecx, dword [ebp - 0x40]
jmp dword [ecx*4 + 0x689a53]
mov edx, dword [ebp - 0x40]
sub edx, 0x1ff
mov dword [ebp - 0x40], edx
cmp dword [ebp - 0x40], 0x10
ja case.0x687b93.2
mov eax, dword [ebp - 0x40]
jmp dword [eax*4 + 0x689a6b]
movsx ecx, word [ebp - 0xc]
test ecx, ecx
je 0x687bc8
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x19c]
mov ecx, dword [eax + 0x1ce4]
or ecx, 0x40000000
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x19c]
mov dword [eax + 0x1ce4], ecx
jmp 0x687beb
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x19c]
mov eax, dword [edx + 0x1ce4]
and eax, 0xbfffffff
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x19c]
mov dword [edx + 0x1ce4], eax
jmp 0x6898a8
mov dword [ebp - 0x14], 0
mov eax, dword [ebp - 4]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.00684f03
add esp, 8
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
je 0x687c4b
lea edx, [ebp - 0x18]
push edx
call fcn.00656688
add esp, 4
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x14]
jge 0x687c49
push 0
call fcn.00656688
add esp, 4
mov ecx, dword [ebp - 0x14]
sub ecx, eax
mov eax, ecx
cdq
mov ecx, 0x3c
idiv ecx
mov edx, dword [ebp + 8]
mov dword [edx + 0x190], eax
jmp 0x687cbd
mov eax, dword [ebp + 8]
cmp dword [eax + 0x80], 0
je 0x687c6b
xor ecx, ecx
test ecx, ecx
je 0x687c6b
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x80]
mov dword [ebp - 0x44], eax
jmp 0x687c72
mov dword [ebp - 0x44], 0xffffffd6
mov ecx, dword [ebp + 8]
mov edx, dword [ebp - 0x44]
mov dword [ecx + 0x80], edx
cmp dword [ebp - 4], 0
je 0x687c8c
mov eax, dword [ebp - 4]
mov dword [ebp - 0x48], eax
jmp 0x687c93
mov dword [ebp - 0x48], str.BORROW_EXPIRE_null
push 0
push 0xff
mov ecx, dword [ebp - 0x48]
push ecx
push 0
push 0x239
push 0xffffffffffffffd6
mov edx, dword [ebp + 8]
push edx
call fcn.0068a390
add esp, 0x1c
mov eax, 0xffffffd6
jmp 0x6898ab
jmp 0x6898a8
movsx eax, word [ebp - 0xc]
test eax, eax
je 0x687d25
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0x80], 0
je 0x687cea
xor edx, edx
test edx, edx
je 0x687cea
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x80]
mov dword [ebp - 0x4c], ecx
jmp 0x687cf1
mov dword [ebp - 0x4c], 0xffffffd3
mov edx, dword [ebp + 8]
mov eax, dword [ebp - 0x4c]
mov dword [edx + 0x80], eax
push 0
push 0xff
push 0
push 0
push 0x238
push 0xffffffffffffffd3
mov ecx, dword [ebp + 8]
push ecx
call fcn.0068a390
add esp, 0x1c
mov eax, 0xffffffd3
jmp 0x6898ab
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0xd4]
mov ecx, dword [eax + 0x10a4]
and ecx, 0xfffbffff
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0xd4]
mov dword [eax + 0x10a4], ecx
jmp 0x6898a8
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x19c]
mov eax, dword [edx + 0x1cdc]
mov ecx, dword [ebp - 4]
mov dword [eax + 0x564], ecx
jmp 0x6898a8
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0xd4]
mov cx, word [ebp - 0xc]
mov word [eax + 0x10a0], cx
jmp 0x6898a8
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0xd4]
mov ecx, dword [ebp + 0x10]
mov dword [eax + 0x1088], ecx
jmp 0x6898a8
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0xd4]
mov ecx, dword [ebp + 0x10]
mov dword [eax + 0x3c], ecx
jmp 0x6898a8
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0xd4]
mov ecx, dword [ebp + 0x10]
mov dword [eax + 0x40], ecx
jmp 0x6898a8
movsx edx, word [ebp - 0xc]
test edx, edx
je 0x687dee
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0xd4]
mov edx, dword [ecx + 0x10a4]
or edx, 0x40
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0xd4]
mov dword [ecx + 0x10a4], edx
jmp 0x687e0f
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0xd4]
mov ecx, dword [eax + 0x10a4]
and ecx, 0xffffffbf
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0xd4]
mov dword [eax + 0x10a4], ecx
jmp 0x6898a8
cmp dword [ebp + 0x10], 0
jl 0x687e4d
cmp dword [ebp + 0x10], 0x1e
jge 0x687e4d
push 0x7c4b90
mov ecx, dword [ebp + 8]
push ecx
call fcn.0069a7be
add esp, 8
test eax, eax
jne 0x687e4d
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0xd4]
cmp dword [eax + 0x14], 0x162e
jne 0x687ec6
cmp dword [ebp + 0x10], 0
jle 0x687ec6
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0xd4]
mov eax, dword [ebp + 0x10]
mov dword [edx + 0xc], eax
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0x124], 0
je 0x687eb1
mov edx, dword [ebp + 0x10]
mov dword [ebp - 0x1c], edx
cmp dword [ebp + 0x10], 0
jge 0x687e7b
mov dword [ebp - 0x1c], 0
mov eax, dword [ebp + 0x10]
imul eax, eax, 0x3e8
push eax
push 1
push 0x6b15d7
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0x3e8
push ecx
push 0xfffffb2e
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x124]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.006b2ef5
add esp, 0x1c
cmp dword [ebp + 0x10], 0
jg 0x687ec4
mov edx, dword [ebp + 8]
mov dword [edx + 0x124], 0
jmp 0x687f23
mov eax, dword [ebp + 8]
cmp dword [eax + 0x80], 0
je 0x687ee6
xor ecx, ecx
test ecx, ecx
je 0x687ee6
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x80]
mov dword [ebp - 0x50], eax
jmp 0x687eed
mov dword [ebp - 0x50], 0xffffffd6
mov ecx, dword [ebp + 8]
mov edx, dword [ebp - 0x50]
mov dword [ecx + 0x80], edx
push 0
push 0xff
push 0
push 0
push 0xcd
push 0xffffffffffffffd6
mov eax, dword [ebp + 8]
push eax
call fcn.0068a390
add esp, 0x1c
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x80]
mov dword [ebp - 0x10], edx
jmp 0x6898a8
cmp dword [ebp - 4], 0
jne 0x687f35
mov dword [ebp - 4], 0x7e4480
push 0x400
mov eax, dword [ebp - 4]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0xd4]
add edx, 0xc54
push edx
call fcn.00639a20
add esp, 0xc
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0xd4]
mov byte [ecx + 0x1054], 0
jmp 0x6898a8
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0xd4]
movsx ecx, word [ebp - 0xc]
mov dword [eax + 0x108c], ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0xd4]
mov dword [eax + 0x1094], 2
jmp 0x6898a8
push 4
mov ecx, dword [ebp + 0x10]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x19c]
mov ecx, dword [eax + 0x1cdc]
add ecx, 0x7fc
push ecx
call fcn.0069f2d7
add esp, 0xc
push str.07.1
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x19c]
mov ecx, dword [eax + 0x1cdc]
add ecx, 0x7fc
push ecx
call fcn.00643c00
add esp, 8
test eax, eax
jge 0x688001
push 1
push 0x5b
mov edx, dword [ebp + 8]
push edx
call fcn.006879e6
add esp, 0xc
push 0
push 0x57
mov eax, dword [ebp + 8]
push eax
call fcn.006879e6
add esp, 0xc
push 0x7c4bac
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x19c]
mov eax, dword [edx + 0x1cdc]
add eax, 0x7fc
push eax
call fcn.00643c00
add esp, 8
test eax, eax
jge 0x6880cf
push 0x4000
mov ecx, dword [ebp + 8]
push ecx
call fcn.006ad420
add esp, 8
push 0x2000
mov edx, dword [ebp + 8]
push edx
call fcn.006ad420
add esp, 8
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0xd4]
mov edx, dword [ecx + 0x10a4]
and edx, 0xffffffef
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0xd4]
mov dword [ecx + 0x10a4], edx
push 0x400
mov edx, dword [ebp + 8]
push edx
call fcn.006ad420
add esp, 8
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x19c]
mov edx, dword [ecx + 0x1cdc]
mov dword [edx + 0x7f8], 0x289beb8a
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0xd4]
mov edx, dword [ecx + 0x10a4]
and dh, 0xfb
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0xd4]
mov dword [ecx + 0x10a4], edx
push 0x800
mov edx, dword [ebp + 8]
push edx
call fcn.006ad420
add esp, 8
jmp 0x68816e
push 0x4000
mov eax, dword [ebp + 8]
push eax
call fcn.006ad497
add esp, 8
push 0x2000
mov ecx, dword [ebp + 8]
push ecx
call fcn.006ad497
add esp, 8
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0xd4]
mov ecx, dword [eax + 0x10a4]
or ecx, 0x10
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0xd4]
mov dword [eax + 0x10a4], ecx
push 0x400
mov ecx, dword [ebp + 8]
push ecx
call fcn.006ad497
add esp, 8
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x19c]
mov ecx, dword [eax + 0x1cdc]
mov dword [ecx + 0x7f8], 0x66d8b337
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0xd4]
mov ecx, dword [eax + 0x10a4]
or ch, 4
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0xd4]
mov dword [eax + 0x10a4], ecx
push 0x800
mov ecx, dword [ebp + 8]
push ecx
call fcn.006ad497
add esp, 8
push 0x7c4bb4
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x19c]
mov ecx, dword [eax + 0x1cdc]
add ecx, 0x7fc
push ecx
call fcn.00643c00
add esp, 8
test eax, eax
jge 0x6881bb
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0xd4]
mov ecx, dword [eax + 0x10a4]
and ecx, 0xfffeffff
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0xd4]
mov dword [eax + 0x10a4], ecx
jmp 0x6881de
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0xd4]
mov eax, dword [edx + 0x10a4]
or eax, 0x10000
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0xd4]
mov dword [edx + 0x10a4], eax
jmp 0x6898a8
cmp dword [ebp + 0x10], 0
je 0x68820f
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0xd4]
mov edx, dword [ecx + 0x10a4]
or edx, 0x10000
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0xd4]
mov dword [ecx + 0x10a4], edx
jmp 0x688233
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0xd4]
mov ecx, dword [eax + 0x10a4]
and ecx, 0xfffeffff
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0xd4]
mov dword [eax + 0x10a4], ecx
jmp 0x6898a8
cmp dword [ebp + 0x10], 0
jl 0x68824f
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0xd4]
mov eax, dword [ebp + 0x10]
mov dword [edx + 0x1c], eax
jmp 0x6882ac
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0x80], 0
je 0x68826f
xor edx, edx
test edx, edx
je 0x68826f
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x80]
mov dword [ebp - 0x54], ecx
jmp 0x688276
mov dword [ebp - 0x54], 0xffffffd6
mov edx, dword [ebp + 8]
mov eax, dword [ebp - 0x54]
mov dword [edx + 0x80], eax
push 0
push 0xff
push 0
push 0
push 0xce
push 0xffffffffffffffd6
mov ecx, dword [ebp + 8]
push ecx
call fcn.0068a390
add esp, 0x1c
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x80]
mov dword [ebp - 0x10], eax
jmp 0x6898a8
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x19c]
mov eax, dword [edx + 0x1cdc]
mov cx, word [ebp - 0xc]
mov word [eax + 0x570], cx
jmp 0x6898a8
movsx edx, word [ebp - 0xc]
test edx, edx
je 0x6882fb
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0xd4]
mov edx, dword [ecx + 0x10a4]
or edx, 4
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0xd4]
mov dword [ecx + 0x10a4], edx
jmp 0x68831c
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0xd4]
mov ecx, dword [eax + 0x10a4]
and ecx, 0xfffffffb
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0xd4]
mov dword [eax + 0x10a4], ecx
jmp 0x6898a8
cmp dword [ebp - 4], 0
jne 0x68832e
mov dword [ebp - 4], 0x7e4484
push 0x400
mov ecx, dword [ebp - 4]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0xd4]
add eax, 0x846
push eax
call fcn.00639a20
add esp, 0xc
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0xd4]
mov byte [edx + 0xc46], 0
jmp 0x6898a8
mov dword [ebp - 0x20], 0
cmp dword [0x7c4b58], 0xffffffff
jne 0x688389
push 0x7c4bbc
mov eax, dword [ebp + 8]
push eax
call fcn.0069a7be
add esp, 8
mov dword [0x7c4b58], eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0xd4]
movsx eax, word [edx + 2]
movsx ecx, word [ebp - 0xc]
cmp eax, ecx
je 0x6883bd
mov edx, dword [ebp + 8]
cmp dword [edx + 0xdc], 0
je 0x6883bd
mov eax, dword [ebp + 8]
cmp dword [eax + 0xe4], 0
je 0x6883bd
mov dword [ebp - 0x20], 1
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0xd4]
mov ax, word [ebp - 0xc]
mov word [edx + 2], ax
cmp dword [0x7c4b58], 0
je 0x6883eb
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0xd4]
mov ax, word [ebp - 0xc]
mov word [edx + 0x109a], ax
cmp dword [ebp - 0x20], 0
je 0x6883fd
mov ecx, dword [ebp + 8]
push ecx
call fcn.006951d0
add esp, 4
jmp 0x6898a8
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0xd4]
mov ecx, dword [ebp + 0x10]
mov dword [eax + 0x106c], ecx
jmp 0x6898a8
cmp dword [ebp + 0x10], 0
je 0x688445
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0xd4]
mov ecx, dword [eax + 0x10a4]
or ecx, 0x20000000
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0xd4]
mov dword [eax + 0x10a4], ecx
jmp 0x688468
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0xd4]
mov eax, dword [edx + 0x10a4]
and eax, 0xdfffffff
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0xd4]
mov dword [edx + 0x10a4], eax
jmp 0x6898a8
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x19c]
mov edx, dword [ecx + 0x1cdc]
mov eax, dword [ebp + 0x10]
mov dword [edx + 0x808], eax
jmp 0x6898a8
cmp dword [ebp - 4], 0
jne 0x688497
mov dword [ebp - 4], 0x7e4488
push 0x400
mov ecx, dword [ebp - 4]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0xd4]
add eax, 0x445
push eax
call fcn.00639a20
add esp, 0xc
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0xd4]
mov byte [edx + 0x845], 0
jmp 0x6898a8
movsx eax, word [ebp - 0xc]
test eax, eax
je 0x6884f7
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0xd4]
mov eax, dword [edx + 0x10a4]
or ah, 0x40
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0xd4]
mov dword [edx + 0x10a4], eax
jmp 0x688518
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0xd4]
mov edx, dword [ecx + 0x10a4]
and dh, 0xbf
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0xd4]
mov dword [ecx + 0x10a4], edx
jmp 0x6898a8
cmp dword [ebp + 0x10], 0
je 0x688559
push 1
mov edx, dword [ebp + 8]
push edx
call fcn.006ad497
add esp, 8
push 4
mov eax, dword [ebp + 8]
push eax
call fcn.006ad420
add esp, 8
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x19c]
mov eax, dword [edx + 0x1cdc]
mov ecx, dword [ebp + 0x10]
mov dword [eax + 0x55c], ecx
jmp 0x68858e
push 1
mov edx, dword [ebp + 8]
push edx
call fcn.006ad420
add esp, 8
push 4
mov eax, dword [ebp + 8]
push eax
call fcn.006ad497
add esp, 8
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x19c]
mov eax, dword [edx + 0x1cdc]
mov dword [eax + 0x55c], 0
jmp 0x6898a8
movsx ecx, word [ebp - 0xc]
test ecx, ecx
je 0x68860d
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0xd4]
mov ecx, dword [eax + 0x10a4]
or ecx, 0x200000
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0xd4]
mov dword [eax + 0x10a4], ecx
push 0x2000
mov ecx, dword [ebp + 8]
push ecx
call fcn.006ad420
add esp, 8
push 0x400
mov edx, dword [ebp + 8]
push edx
call fcn.006ad420
add esp, 8
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x19c]
mov edx, dword [ecx + 0x1cdc]
mov dword [edx + 0x7f8], 0x289beb8a
push 0x800
mov eax, dword [ebp + 8]
push eax
call fcn.006ad420
add esp, 8
jmp 0x68867c
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0xd4]
mov eax, dword [edx + 0x10a4]
and eax, 0xffdfffff
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0xd4]
mov dword [edx + 0x10a4], eax
push 0x2000
mov eax, dword [ebp + 8]
push eax
call fcn.006ad497
add esp, 8
push 0x400
mov ecx, dword [ebp + 8]
push ecx
call fcn.006ad497
add esp, 8
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x19c]
mov ecx, dword [eax + 0x1cdc]
mov dword [ecx + 0x7f8], 0x66d8b337
push 0x800
mov edx, dword [ebp + 8]
push edx
call fcn.006ad497
add esp, 8
jmp 0x6898a8
push 4
mov eax, dword [ebp + 0x10]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x19c]
mov eax, dword [edx + 0x1cdc]
add eax, 0x801
push eax
call fcn.0069f2d7
add esp, 0xc
push 0x7c4bd0
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x19c]
mov eax, dword [edx + 0x1cdc]
add eax, 0x801
push eax
call fcn.00643c00
add esp, 8
test eax, eax
jge 0x688729
push 0x4000
mov ecx, dword [ebp + 8]
push ecx
call fcn.006ad420
add esp, 8
push 0x2000
mov edx, dword [ebp + 8]
push edx
call fcn.006ad420
add esp, 8
push 0x400
mov eax, dword [ebp + 8]
push eax
call fcn.006ad420
add esp, 8
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x19c]
mov eax, dword [edx + 0x1cdc]
mov dword [eax + 0x7f8], 0x289beb8a
push 0x800
mov ecx, dword [ebp + 8]
push ecx
call fcn.006ad420
add esp, 8
jmp 0x688786
push 0x4000
mov edx, dword [ebp + 8]
push edx
call fcn.006ad497
add esp, 8
push 0x2000
mov eax, dword [ebp + 8]
push eax
call fcn.006ad497
add esp, 8
push 0x400
mov ecx, dword [ebp + 8]
push ecx
call fcn.006ad497
add esp, 8
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x19c]
mov ecx, dword [eax + 0x1cdc]
mov dword [ecx + 0x7f8], 0x66d8b337
push 0x800
mov edx, dword [ebp + 8]
push edx
call fcn.006ad497
add esp, 8
jmp 0x6898a8
mov dword [ebp - 0x24], 0
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x138]
and ecx, 0x10
test ecx, ecx
jne 0x6887c2
mov edx, dword [ebp + 8]
push edx
call fcn.006b14d6
add esp, 4
test eax, eax
jne 0x6887e7
mov eax, dword [ebp + 8]
push eax
call fcn.006b1522
add esp, 4
test eax, eax
jne 0x6887e7
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp - 4]
push edx
mov eax, dword [ebp + 8]
push eax
call fcn.00689aaf
add esp, 0xc
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
je 0x6887e5
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x10], ecx
jmp 0x6887ee
mov dword [ebp - 0x10], 0xffffff5a
jmp 0x6898a8
movsx edx, word [ebp - 0xc]
test edx, edx
je 0x68880b
push 0x40
mov eax, dword [ebp + 8]
push eax
call fcn.006ad420
add esp, 8
jmp 0x688819
push 0x40
mov ecx, dword [ebp + 8]
push ecx
call fcn.006ad497
add esp, 8
jmp 0x6898a8
movsx edx, word [ebp - 0xc]
test edx, edx
je 0x688852
push 0x400
mov eax, dword [ebp + 8]
push eax
call fcn.006ad420
add esp, 8
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x19c]
mov eax, dword [edx + 0x1cdc]
mov dword [eax + 0x7f8], 0x289beb8a
jmp 0x68887c
push 0x400
mov ecx, dword [ebp + 8]
push ecx
call fcn.006ad497
add esp, 8
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x19c]
mov ecx, dword [eax + 0x1cdc]
mov dword [ecx + 0x7f8], 0x66d8b337
jmp 0x6898a8
movsx edx, word [ebp - 0xc]
test edx, edx
je 0x68889c
push 0x4000
mov eax, dword [ebp + 8]
push eax
call fcn.006ad420
add esp, 8
jmp 0x6888ad
push 0x4000
mov ecx, dword [ebp + 8]
push ecx
call fcn.006ad497
add esp, 8
jmp 0x6898a8
push 0x19
mov edx, dword [ebp + 8]
push edx
call fcn.006ac790
add esp, 8
cmp eax, 0x9320
jne 0x688900
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0xd4]
mov edx, dword [ebp + 0x10]
mov dword [ecx + 0x1070], edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0xd4]
cmp dword [ecx + 0x1070], 0
jge 0x6888fe
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0xd4]
mov dword [eax + 0x1070], 0
jmp 0x68895d
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0x80], 0
je 0x688920
xor edx, edx
test edx, edx
je 0x688920
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x80]
mov dword [ebp - 0x58], ecx
jmp 0x688927
mov dword [ebp - 0x58], 0xffffffd3
mov edx, dword [ebp + 8]
mov eax, dword [ebp - 0x58]
mov dword [edx + 0x80], eax
push 0
push 0xff
push 0
push 0
push 0xd0
push 0xffffffffffffffd3
mov ecx, dword [ebp + 8]
push ecx
call fcn.0068a390
add esp, 0x1c
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x80]
mov dword [ebp - 0x10], eax
jmp 0x6898a8
movsx ecx, word [ebp - 0xc]
test ecx, ecx
je 0x68898d
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0xd4]
mov ecx, dword [eax + 0x10a4]
or ch, 4
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0xd4]
mov dword [eax + 0x10a4], ecx
jmp 0x6889ae
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0xd4]
mov eax, dword [edx + 0x10a4]
and ah, 0xfb
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0xd4]
mov dword [edx + 0x10a4], eax
jmp 0x6898a8
cmp dword [ebp + 0x10], 0x1000
jbe 0x6889c3
mov dword [ebp + 0x10], 0x1000
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0xd4]
mov dx, word [ebp - 0xc]
mov word [ecx], dx
jmp 0x6898a8
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0xd4]
mov edx, dword [ebp + 0x10]
mov dword [ecx + 0x1068], edx
jmp 0x6898a8
movsx eax, word [ebp - 0xc]
test eax, eax
je 0x688a1c
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0xd4]
mov eax, dword [edx + 0x10a4]
or eax, 0x80000000
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0xd4]
mov dword [edx + 0x10a4], eax
jmp 0x688a40
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0xd4]
mov edx, dword [ecx + 0x10a4]
and edx, 0x7fffffff
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0xd4]
mov dword [ecx + 0x10a4], edx
jmp 0x6898a8
movsx edx, word [ebp - 0xc]
test edx, edx
je 0x688a67
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x138]
and ecx, 0xdfffffff
mov edx, dword [ebp + 8]
mov dword [edx + 0x138], ecx
jmp 0x688a7f
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x138]
or ecx, 0x20000000
mov edx, dword [ebp + 8]
mov dword [edx + 0x138], ecx
jmp 0x6898a8
movsx eax, word [ebp - 0xc]
test eax, eax
je 0x688aa6
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x138]
or edx, 0x20000000
mov eax, dword [ebp + 8]
mov dword [eax + 0x138], edx
jmp 0x688abe
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x138]
and edx, 0xdfffffff
mov eax, dword [ebp + 8]
mov dword [eax + 0x138], edx
jmp 0x6898a8
movsx ecx, word [ebp - 0xc]
test ecx, ecx
je 0x688aee
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x19c]
mov ecx, dword [eax + 0x1ce4]
or ecx, 0x20
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x19c]
mov dword [eax + 0x1ce4], ecx
jmp 0x688b0e
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x19c]
mov eax, dword [edx + 0x1ce4]
and al, 0xdf
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x19c]
mov dword [edx + 0x1ce4], eax
jmp 0x6898a8
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0xd4]
mov dx, word [ebp - 0xc]
mov word [ecx + 0x1064], dx
jmp 0x6898a8
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0xd4]
mov dx, word [ebp - 0xc]
mov word [ecx + 0x20], dx
jmp 0x6898a8
cmp dword [ebp + 0x10], 0
je 0x688b6b
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0xd4]
mov edx, dword [ecx + 0x10a4]
or dh, 0x20
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0xd4]
mov dword [ecx + 0x10a4], edx
jmp 0x688b8c
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0xd4]
mov ecx, dword [eax + 0x10a4]
and ch, 0xdf
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0xd4]
mov dword [eax + 0x10a4], ecx
jmp 0x6898a8
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0xd4]
mov eax, dword [ebp + 0x10]
mov dword [edx + 0x1058], eax
jmp 0x6898a8
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0xd4]
mov eax, dword [ebp + 0x10]
mov dword [edx + 0x105c], eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0xd4]
mov dword [edx + 0x1060], 0
jmp 0x6898a8
cmp dword [ebp + 0x10], 0
je 0x688bfe
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0xd4]
mov edx, dword [ecx + 0x10a4]
or edx, 0x20000
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0xd4]
mov dword [ecx + 0x10a4], edx
jmp 0x688c22
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0xd4]
mov ecx, dword [eax + 0x10a4]
and ecx, 0xfffdffff
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0xd4]
mov dword [eax + 0x10a4], ecx
jmp 0x6898a8
push 0
push 0
push 0
push 0
push 0
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x19c]
mov eax, dword [edx + 0x1cdc]
mov ecx, dword [eax + 0x55c]
push ecx
mov edx, dword [ebp + 0x10]
push edx
push 0
mov eax, dword [ebp + 8]
push eax
call fcn.00686a96
add esp, 0x24
jmp 0x6898a8
push 0x1e
mov ecx, dword [ebp + 8]
push ecx
call fcn.006ac790
add esp, 8
cmp eax, 0xd30f
je 0x688cd2
mov edx, dword [ebp + 8]
cmp dword [edx + 0x80], 0
je 0x688c93
xor eax, eax
test eax, eax
je 0x688c93
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x80]
mov dword [ebp - 0x5c], edx
jmp 0x688c9a
mov dword [ebp - 0x5c], 0xffffff8c
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0x5c]
mov dword [eax + 0x80], ecx
push 0
push 0xff
push 0
push 0
push 0x21a
push 0xffffffffffffff8c
mov edx, dword [ebp + 8]
push edx
call fcn.0068a390
add esp, 0x1c
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x80]
jmp 0x6898ab
push 0
push 0
push 0
push 0
push 0
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x19c]
mov eax, dword [edx + 0x1cdc]
mov ecx, dword [eax + 0x55c]
push ecx
push 0
mov edx, dword [ebp + 0x10]
push edx
mov eax, dword [ebp + 8]
push eax
call fcn.00686a96
add esp, 0x24
jmp 0x6898a8
cmp dword [ebp - 4], 0
jne 0x688d16
mov dword [ebp - 4], 0x7e448c
push 0xc
mov ecx, dword [ebp - 4]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0xd4]
add eax, 0xc47
push eax
call fcn.0069f2d7
add esp, 0xc
jmp 0x6898a8
mov ecx, dword [ebp + 0x10]
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x30], 0
mov edx, dword [ebp - 0x2c]
add edx, 0x3c
mov dword [ebp - 0x28], edx
jmp 0x688d73
mov eax, dword [ebp - 0x30]
add eax, 1
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp - 0x28]
add ecx, 0x90
mov dword [ebp - 0x28], ecx
cmp dword [ebp - 0x30], 4
jge 0x688e0e
mov edx, dword [ebp - 0x28]
cmp dword [edx + 0x84], 0
jne 0x688d8e
jmp 0x688e0e
mov eax, dword [ebp - 0x28]
cmp dword [eax + 0x88], 2
jl 0x688da8
mov ecx, dword [ebp - 0x28]
mov edx, dword [ecx + 0x84]
mov dword [ebp - 0x60], edx
jmp 0x688daf
mov dword [ebp - 0x60], 0
mov eax, dword [ebp - 0x28]
cmp dword [eax + 0x88], 2
jl 0x688dc9
mov ecx, dword [ebp - 0x28]
mov edx, dword [ecx + 0x84]
mov dword [ebp - 0x64], edx
jmp 0x688dd0
mov dword [ebp - 0x64], 0
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax + 0x88]
push ecx
mov edx, dword [ebp - 0x28]
push edx
mov eax, dword [ebp - 0x28]
add eax, 0xc
push eax
mov ecx, dword [ebp - 0x28]
push ecx
push 8
mov edx, dword [ebp - 0x28]
mov eax, dword [edx + 0x8c]
push eax
mov ecx, dword [ebp - 0x60]
push ecx
mov edx, dword [ebp - 0x64]
push edx
mov eax, dword [ebp + 8]
push eax
call fcn.00686a96
add esp, 0x24
jmp 0x688d5e
jmp 0x6898a8
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x19c]
mov eax, dword [edx + 0x1cdc]
mov ecx, dword [ebp - 8]
mov dword [eax + 0x560], ecx
jmp 0x6898a8
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x19c]
mov ecx, dword [eax + 0x1cdc]
mov edx, dword [ebp + 0x10]
mov dword [ecx + 0x814], edx
mov eax, dword [ebp + 8]
push eax
call fcn.006afb4b
add esp, 4
jmp 0x6898a8
cmp dword [ebp + 0x10], 0
je 0x688e81
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0xd4]
mov eax, dword [edx + 0x10a4]
or al, 0x10
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0xd4]
mov dword [edx + 0x10a4], eax
jmp 0x688ea2
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0xd4]
mov edx, dword [ecx + 0x10a4]
and edx, 0xffffffef
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0xd4]
mov dword [ecx + 0x10a4], edx
jmp 0x6898a8
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0xd4]
mov ecx, dword [ebp + 0x10]
mov dword [eax + 0x18], ecx
jmp 0x6898a8
cmp dword [ebp + 0x10], 0
jl 0x688ef4
cmp dword [ebp + 0x10], 0x1e
jge 0x688ef4
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0xd4]
cmp dword [eax + 0x14], 0x162e
jne 0x688edf
cmp dword [ebp + 0x10], 0
jg 0x688ef4
push 0x7c4bd8
mov ecx, dword [ebp + 8]
push ecx
call fcn.0069a7be
add esp, 8
test eax, eax
je 0x688f05
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0xd4]
mov ecx, dword [ebp + 0x10]
mov dword [eax + 0x10], ecx
jmp 0x688f62
mov edx, dword [ebp + 8]
cmp dword [edx + 0x80], 0
je 0x688f25
xor eax, eax
test eax, eax
je 0x688f25
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x80]
mov dword [ebp - 0x68], edx
jmp 0x688f2c
mov dword [ebp - 0x68], 0xffffffd6
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0x68]
mov dword [eax + 0x80], ecx
push 0
push 0xff
push 0
push 0
push 0xd1
push 0xffffffffffffffd6
mov edx, dword [ebp + 8]
push edx
call fcn.0068a390
add esp, 0x1c
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x80]
mov dword [ebp - 0x10], ecx
jmp 0x6898a8
cmp dword [ebp + 0x10], 0
je 0x688f80
push 0x80
mov edx, dword [ebp + 8]
push edx
call fcn.006ad420
add esp, 8
jmp 0x688f91
push 0x80
mov eax, dword [ebp + 8]
push eax
call fcn.006ad497
add esp, 8
jmp 0x6898a8
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0xd4]
mov eax, dword [ebp + 0x10]
mov dword [edx + 0x1074], eax
jmp 0x6898a8
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0xd4]
mov eax, dword [ebp + 0x10]
mov dword [edx + 0x1078], eax
jmp 0x6898a8
cmp dword [ebp + 0x10], 0
je 0x688fdd
push 0x800
mov ecx, dword [ebp + 8]
push ecx
call fcn.006ad420
add esp, 8
jmp 0x688fee
push 0x800
mov edx, dword [ebp + 8]
push edx
call fcn.006ad497
add esp, 8
jmp 0x6898a8
cmp dword [ebp + 0x10], 0
je 0x68901c
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0xd4]
mov edx, dword [ecx + 0x10a4]
or edx, 0x20
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0xd4]
mov dword [ecx + 0x10a4], edx
jmp 0x68903d
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0xd4]
mov ecx, dword [eax + 0x10a4]
and ecx, 0xffffffdf
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0xd4]
mov dword [eax + 0x10a4], ecx
jmp 0x6898a8
cmp dword [ebp - 8], 0
jle 0x6890bd
cmp dword [ebp - 8], 0x3c
jge 0x6890bd
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0x80], 0
je 0x68906e
xor edx, edx
test edx, edx
je 0x68906e
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x80]
mov dword [ebp - 0x6c], ecx
jmp 0x689075
mov dword [ebp - 0x6c], 0xffffffd6
mov edx, dword [ebp + 8]
mov eax, dword [ebp - 0x6c]
mov dword [edx + 0x80], eax
push 0
push 0xff
push 0
push 0
push 0x11d
push 0xffffffffffffffd6
mov ecx, dword [ebp + 8]
push ecx
call fcn.0068a390
add esp, 0x1c
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x80]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0xd0]
mov dword [edx + 0x40], 0x3c
jmp 0x6890cc
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0xd0]
mov edx, dword [ebp - 8]
mov dword [ecx + 0x40], edx
jmp 0x6898a8
jmp 0x6898a8
movsx eax, word [ebp - 0xc]
test eax, eax
je 0x689100
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0xd4]
mov eax, dword [edx + 0x10a4]
or al, 8
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0xd4]
mov dword [edx + 0x10a4], eax
jmp 0x689121
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0xd4]
mov edx, dword [ecx + 0x10a4]
and edx, 0xfffffff7
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0xd4]
mov dword [ecx + 0x10a4], edx
jmp 0x6898a8
movsx edx, word [ebp - 0xc]
test edx, edx
je 0x689151
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0xd4]
mov edx, dword [ecx + 0x10a4]
or edx, 2
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0xd4]
mov dword [ecx + 0x10a4], edx
jmp 0x689172
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0xd4]
mov ecx, dword [eax + 0x10a4]
and ecx, 0xfffffffd
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0xd4]
mov dword [eax + 0x10a4], ecx
jmp 0x6898a8
movsx ecx, word [ebp - 0xc]
test ecx, ecx
je 0x6891a3
push 0x4000
mov edx, dword [ebp + 8]
push edx
call fcn.006ad420
add esp, 8
push 0x2000
mov eax, dword [ebp + 8]
push eax
call fcn.006ad420
add esp, 8
jmp 0x6891b4
push 0x2000
mov ecx, dword [ebp + 8]
push ecx
call fcn.006ad497
add esp, 8
jmp 0x6898a8
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0xd4]
mov ecx, dword [ebp + 0x10]
mov dword [eax + 0x24], ecx
jmp 0x6898a8
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0xd4]
mov ecx, dword [ebp + 0x10]
mov dword [eax + 0x30], ecx
jmp 0x6898a8
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0xd4]
mov ecx, dword [ebp + 0x10]
mov dword [eax + 0x10ac], ecx
jmp 0x6898a8
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0xd4]
mov ecx, dword [ebp + 0x10]
mov dword [eax + 0x28], ecx
jmp 0x6898a8
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0xd4]
mov ecx, dword [ebp + 0x10]
mov dword [eax + 0x34], ecx
jmp 0x6898a8
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0xd4]
mov ecx, dword [ebp + 0x10]
mov dword [eax + 0x2c], ecx
jmp 0x6898a8
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0xd4]
mov ecx, dword [ebp + 0x10]
mov dword [eax + 0x38], ecx
jmp 0x6898a8
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x19c]
mov ecx, dword [eax + 0x1cdc]
mov edx, dword [ebp + 0x10]
mov dword [ecx + 0x574], edx
jmp 0x6898a8
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x19c]
mov edx, dword [ecx + 0x1cdc]
mov eax, dword [ebp + 0x10]
mov dword [edx + 0x53c], eax
jmp 0x6898a8
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x19c]
mov eax, dword [edx + 0x1cdc]
mov ecx, dword [ebp + 0x10]
mov dword [eax + 0x540], ecx
jmp 0x6898a8
cmp dword [ebp - 4], 0
jne 0x6892ac
mov dword [ebp - 4], 0x7e4490
push 0x400
mov edx, dword [ebp - 4]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0xd4]
add ecx, 0x44
push ecx
call fcn.00639a20
add esp, 0xc
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0xd4]
mov byte [eax + 0x444], 0
jmp 0x6898a8
cmp dword [ebp + 0x10], 0
je 0x6892f8
push 0x8000
mov ecx, dword [ebp + 8]
push ecx
call fcn.006ad420
add esp, 8
jmp 0x689309
push 0x8000
mov edx, dword [ebp + 8]
push edx
call fcn.006ad497
add esp, 8
jmp 0x6898a8
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0xd4]
mov edx, dword [ebp + 0x10]
mov dword [ecx + 0x1080], edx
jmp 0x6898a8
mov dword [ebp - 0x34], 0
push 0x14
mov eax, dword [ebp + 8]
push eax
call fcn.0069f660
add esp, 8
mov dword [ebp - 0x34], eax
push 0x14
mov ecx, dword [ebp + 0x10]
push ecx
mov edx, dword [ebp - 0x34]
push edx
call fcn.00638a10
add esp, 0xc
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x19c]
mov edx, dword [ecx + 0x1cdc]
mov eax, dword [ebp - 0x34]
mov ecx, dword [edx + 0x810]
mov dword [eax + 0x10], ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x19c]
mov ecx, dword [eax + 0x1cdc]
mov edx, dword [ebp - 0x34]
mov eax, dword [edx + 0xc]
mov dword [ecx + 0x80c], eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x19c]
mov eax, dword [edx + 0x1cdc]
mov ecx, dword [ebp - 0x34]
mov dword [eax + 0x810], ecx
mov edx, dword [ebp + 8]
push edx
call fcn.006951d0
add esp, 4
jmp 0x6898a8
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x19c]
mov edx, dword [ecx + 0x1cdc]
mov eax, dword [ebp + 0x10]
mov dword [edx + 0x80c], eax
jmp 0x6898a8
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0xd4]
mov eax, dword [ebp + 0x10]
mov dword [edx + 0x1084], eax
jmp 0x6898a8
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0xd4]
mov eax, dword [ebp + 0x10]
mov dword [edx + 0x1090], eax
jmp 0x6898a8
push 0x27c
mov ecx, dword [ebp + 0x10]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x19c]
mov ecx, dword [eax + 0x1cdc]
add ecx, 0x57c
push ecx
call fcn.00638a10
add esp, 0xc
jmp 0x6898a8
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0xd4]
mov ecx, dword [ebp + 0x10]
mov dword [eax + 0x10a8], ecx
jmp 0x6898a8
mov edx, dword [ebp + 0x10]
mov dword [ebp - 0x38], edx
cmp dword [ebp - 0x38], 0
je 0x689461
mov eax, dword [ebp - 0x38]
mov ecx, dword [eax]
push ecx
mov edx, dword [ebp - 0x38]
mov eax, dword [edx + 4]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.006af200
add esp, 0xc
jmp 0x6898a8
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x19c]
mov ecx, dword [eax + 0x1cdc]
cmp dword [ecx + 0x8d0], 0
je 0x6894b5
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x19c]
mov ecx, dword [eax + 0x1cdc]
mov edx, dword [ecx + 0x8d0]
push edx
call fcn.0069f894
add esp, 4
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x19c]
mov edx, dword [ecx + 0x1cdc]
mov dword [edx + 0x8d0], 0
cmp dword [ebp + 0x10], 0
je 0x68950a
mov eax, dword [ebp + 0x10]
push eax
call fcn.00638e10
add esp, 4
add eax, 1
push eax
call fcn.0063c643
add esp, 4
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x19c]
mov ecx, dword [edx + 0x1cdc]
mov dword [ecx + 0x8d0], eax
mov edx, dword [ebp + 0x10]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x19c]
mov edx, dword [ecx + 0x1cdc]
mov eax, dword [edx + 0x8d0]
push eax
call fcn.00643790
add esp, 8
jmp 0x6898a8
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x19c]
mov eax, dword [edx + 0x1cdc]
mov ecx, dword [ebp + 0x10]
mov dword [eax + 0x8cc], ecx
jmp 0x6898a8
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x19c]
mov ecx, dword [eax + 0x1cdc]
mov edx, dword [ebp + 0x10]
mov dword [ecx + 0x818], edx
jmp 0x6898a8
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x19c]
mov edx, dword [ecx + 0x1cdc]
mov eax, dword [ebp + 0x10]
mov dword [edx + 0x81c], eax
jmp 0x6898a8
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x19c]
mov eax, dword [edx + 0x1cdc]
mov ecx, dword [ebp + 0x10]
mov dword [eax + 0x820], ecx
jmp 0x6898a8
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x19c]
mov ecx, dword [eax + 0x1cdc]
mov edx, dword [ebp + 0x10]
mov dword [ecx + 0x824], edx
jmp 0x6898a8
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x19c]
mov edx, dword [ecx + 0x1cdc]
mov eax, dword [ebp + 0x10]
mov dword [edx + 0x828], eax
jmp 0x6898a8
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x19c]
mov eax, dword [edx + 0x1cdc]
mov ecx, dword [ebp + 0x10]
mov dword [eax + 0x82c], ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x19c]
mov ecx, dword [eax + 0x1ce8]
add ecx, 1
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x19c]
mov dword [eax + 0x1ce8], ecx
jmp 0x6898a8
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x19c]
mov eax, dword [edx + 0x1cdc]
mov ecx, dword [ebp + 0x10]
mov dword [eax + 0x830], ecx
jmp 0x6898a8
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x19c]
mov ecx, dword [eax + 0x1cdc]
mov edx, dword [ebp + 0x10]
mov dword [ecx + 0x834], edx
jmp 0x6898a8
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x19c]
mov edx, dword [ecx + 0x1cdc]
mov eax, dword [ebp + 0x10]
mov dword [edx + 0x838], eax
jmp 0x6898a8
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x19c]
mov eax, dword [edx + 0x1cdc]
mov ecx, dword [ebp + 0x10]
mov dword [eax + 0x83c], ecx
jmp 0x6898a8
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x19c]
mov ecx, dword [eax + 0x1cdc]
mov edx, dword [ebp + 0x10]
mov dword [ecx + 0x840], edx
jmp 0x6898a8
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x19c]
mov edx, dword [ecx + 0x1cdc]
mov eax, dword [ebp + 0x10]
mov dword [edx + 0xaf0], eax
jmp 0x6898a8
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x19c]
mov eax, dword [edx + 0x1cdc]
mov ecx, dword [ebp + 0x10]
mov dword [eax + 0xaf4], ecx
jmp 0x6898a8
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x19c]
mov ecx, dword [eax + 0x1cdc]
mov edx, dword [ebp + 0x10]
mov dword [ecx + 0xaf8], edx
jmp 0x6898a8
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x19c]
mov edx, dword [ecx + 0x1cdc]
mov eax, dword [ebp + 0x10]
mov dword [edx + 0xafc], eax
jmp 0x6898a8
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x19c]
mov eax, dword [edx + 0x1cdc]
mov ecx, dword [ebp + 0x10]
mov dword [eax + 0xb00], ecx
jmp 0x6898a8
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x19c]
mov ecx, dword [eax + 0x1cdc]
mov edx, dword [ebp + 0x10]
mov dword [ecx + 0xb04], edx
jmp 0x6898a8
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x19c]
mov edx, dword [ecx + 0x1cdc]
mov eax, dword [ebp + 0x10]
mov dword [edx + 0xb08], eax
jmp 0x6898a8
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x19c]
mov eax, dword [edx + 0x1cdc]
cmp dword [eax + 0xb0c], 0
je 0x6897a6
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x19c]
mov eax, dword [edx + 0x1cdc]
mov ecx, dword [eax + 0xb0c]
push ecx
call fcn.0069f894
add esp, 4
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x19c]
mov ecx, dword [eax + 0x1cdc]
mov dword [ecx + 0xb0c], 0
cmp dword [ebp + 0x10], 0
je 0x6897fb
mov edx, dword [ebp + 0x10]
push edx
call fcn.00638e10
add esp, 4
add eax, 1
push eax
call fcn.0063c643
add esp, 4
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x19c]
mov ecx, dword [edx + 0x1cdc]
mov dword [ecx + 0xb0c], eax
mov edx, dword [ebp + 0x10]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x19c]
mov edx, dword [ecx + 0x1cdc]
mov eax, dword [edx + 0xb0c]
push eax
call fcn.00643790
add esp, 8
jmp 0x6898a8
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x19c]
mov eax, dword [edx + 0x1cdc]
mov ecx, dword [ebp + 0x10]
mov dword [eax + 0x554], ecx
jmp 0x6898a8
xor edx, edx
cmp dword [ebp + 0x10], 0
setne dl
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x19c]
mov dword [ecx + 0x1cec], edx
jmp 0x6898a8
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x19c]
mov ecx, dword [ebp + 0x10]
mov dword [eax + 0x1d04], ecx
jmp 0x6898a8
mov edx, dword [ebp + 8]
cmp dword [edx + 0x80], 0
je 0x68986b
xor eax, eax
test eax, eax
je 0x68986b
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x80]
mov dword [ebp - 0x70], edx
jmp 0x689872
mov dword [ebp - 0x70], 0xffffffe0
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0x70]
mov dword [eax + 0x80], ecx
push 0
push 0xff
push 0
push 0
push 0xd2
push 0xffffffffffffffe0
mov edx, dword [ebp + 8]
push edx
call fcn.0068a390
add esp, 0x1c
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x80]
mov dword [ebp - 0x10], ecx
mov eax, dword [ebp - 0x10]
mov esp, ebp
pop ebp
ret