Function at 0x6d7320
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x84]
cmp eax, dword [ecx + 8]
jbe 0x6d8717
sub esp, 0x104
mov ecx, dword [esp + 0x110]
cmp ecx, 2
jl 0x6d861a
mov ebx, dword [esp + 0x114]
mov ebp, dword [esp + 0x10c]
mov eax, ebp
mov edx, ebx
xor esi, esi
xor edi, edi
xor eax, eax
mov word [esp + 0x24], ax
xor edx, edx
mov dword [esp + 0x30], edx
xor edx, edx
mov dword [esp + 0x34], edx
xor edx, edx
mov dword [esp + 0xb8], edx
xor ebx, ebx
mov dword [esp + 0x3c], ebx
mov ebx, dword [esp + 0x114]
mov eax, ebp
mov edx, ebx
jmp 0x6d742a
inc ebx
mov ebp, dword [esp + 0xb8]
mov esi, dword [esp + 0x30]
mov ebp, dword [esp + 0x28]
movzx esi, word [esp + 0x24]
mov dword [esp + 0x38], ebx
movzx ebx, word [esp + 0x22]
mov ebx, dword [esp + 0x38]
mov esi, dword [esp + 0x30]
cmp ebx, esi
jge 0x6d73eb
cmp ebx, ebp
jge 0x6d73eb
cmp ebx, esi
jae 0x6d8706
mov ebp, dword [esp + 0xb8]
lea ebp, [ebp + ebx*4]
mov esi, dword [esp + 0xa8]
mov esi, dword [esi + ebx*4]
cmp dword [ebp], esi
je 0x6d739b
test ebx, ebx
jle 0x6d74b4
mov ebp, dword [esp + 0x34]
cmp ebx, ebp
ja 0x6d86fd
movzx esi, word [esp + 0x24]
mov edx, dword [esp + 0x68]
inc edx
mov word [esp + 0x24], si
mov dword [esp + 0x30], ebx
mov dword [esp + 0x34], ebp
mov ebp, dword [esp + 0xd8]
mov ebx, dword [esp + 0x40]
mov esi, edx
mov edx, dword [esp + 0x114]
mov dword [esp + 0x40], ebx
mov dword [esp + 0xd8], ebp
cmp esi, ecx
jg 0x6d7a98
mov dword [esp + 0x68], esi
jge 0x6d7a84
jae 0x6d870f
mov ebp, dword [eax + esi*4]
cmp byte [ebp], 0x12
jne 0x6d7a7d
mov ebx, dword [ebp + 8]
mov esi, dword [ebp + 4]
test ebx, ebx
jle 0x6d7a7d
mov ebx, dword [esi]
cmp byte [ebx], 3
je 0x6d7a5d
xor ebx, ebx
xor ebp, ebp
xor esi, esi
xor ebx, ebx
mov dword [esp + 0x2c], ebx
xor ebx, ebx
mov word [esp + 0x22], bx
mov dword [esp + 0xa8], esi
mov dword [esp + 0x28], ebp
movzx esi, word [esp + 0x24]
cmp bx, si
jne 0x6d74b4
mov dword [esp + 0xa0], eax
xor eax, eax
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0xa0]
jmp 0x6d73b9
mov ebx, dword [esp + 0x2c]
mov ebp, dword [esp + 0x28]
mov esi, dword [esp + 0xa8]
movzx ebx, word [esp + 0x22]
mov word [esp + 0x26], bx
mov ebx, dword [esp + 0x2c]
mov dword [esp + 0x5c], ebx
mov ebx, dword [esp + 0x68]
cmp ebx, edi
jne 0x6d7500
mov edi, dword [esp + 0x3c]
mov ebx, ebp
mov dword [esp + 0xb8], esi
mov dword [esp + 0x3c], edi
mov edi, dword [esp + 0x68]
movzx esi, word [esp + 0x26]
mov ebp, dword [esp + 0x5c]
jmp 0x6d7404
mov dword [esp + 0x58], ebp
mov dword [esp + 0xdc], esi
lea ebp, [edi + 1]
cmp ebx, ebp
jne 0x6d75ff
cmp ecx, edi
jbe 0x6d86f6
mov ebp, dword [esp + 0x3c]
lea ebx, [ebp + 1]
mov esi, dword [eax + edi*4]
mov edi, esi
mov esi, dword [esp + 0x40]
cmp ebx, esi
ja 0x6d7598
mov dword [esp + 0x84], ebx
mov dword [esp + 0x40], esi
mov ebx, dword [0x10fd360]
mov esi, dword [esp + 0xd8]
lea ebp, [esi + ebp*4]
test ebx, ebx
jne 0x6d7584
mov ebx, dword [esp + 0x3c]
mov dword [esi + ebx*4], edi
mov ebx, dword [esp + 0x84]
mov ebp, dword [esp + 0x40]
mov edi, ebx
mov dword [esp + 0x40], ebp
mov dword [esp + 0xd8], esi
mov ebx, dword [esp + 0x68]
mov ebp, dword [esp + 0x58]
mov esi, dword [esp + 0xdc]
jmp 0x6d74e1
mov ebx, edi
mov edi, ebp
mov eax, ebx
call fcn.00460b40
mov eax, dword [esp + 0x10c]
jmp 0x6d7558
mov dword [esp + 0x100], edi
lea eax, [0xb3ada0]
mov dword [esp], eax
mov ecx, dword [esp + 0xd8]
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ebx
call fcn.00447080
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
lea ebx, [ecx + 1]
mov ecx, dword [esp + 0x110]
mov edx, dword [esp + 0x114]
mov ebp, dword [esp + 0x3c]
mov edi, dword [esp + 0x100]
mov dword [esp + 0xd8], eax
mov eax, dword [esp + 0x10c]
jmp 0x6d7532
mov dword [esp + 0x48], edi
nop
mov ebp, dword [esp + 0x108]
mov esi, dword [ebp + 0x10]
lea edx, [ebp + 0x10]
mov dword [esp + 0xfc], edx
test esi, esi
je 0x6d7a31
mov ecx, dword [0x10fd360]
mov ebx, dword [esi + 0x10]
test ecx, ecx
jne 0x6d79ee
mov dword [ebp + 0x10], ebx
mov edi, esi
mov ebx, eax
xor eax, eax
call fcn.00460de1
mov dword [esp + 0xd0], esi
mov byte [esi], 3
movzx eax, word [esp + 0x24]
mov word [esi + 2], ax
mov eax, dword [esi + 0x1c]
mov ecx, dword [esi + 0x14]
mov edi, dword [esp + 0x30]
cmp eax, edi
jb 0x6d79bb
mov dword [esp + 0x84], eax
mov dword [esp + 0xf8], ecx
mov dword [esp], ecx
mov edx, dword [esp + 0xb8]
mov dword [esp + 4], edx
shl edi, 2
mov dword [esp + 8], edi
call fcn.004614f0
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0xd0]
mov dword [ecx + 0x18], eax
mov edx, dword [esp + 0x84]
mov dword [ecx + 0x1c], edx
mov edx, dword [0x10fd360]
test edx, edx
jne 0x6d79a3
mov ebx, dword [esp + 0xf8]
mov dword [ecx + 0x14], ebx
mov ebx, dword [esp + 0x10c]
mov ebp, dword [esp + 0x108]
mov esi, dword [esp + 0x110]
mov edi, dword [esp + 0x68]
mov edx, dword [esp + 0x48]
jmp 0x6d770b
inc edx
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x108]
mov ebp, dword [esp + 0x110]
mov esi, dword [esp + 0x68]
mov ecx, dword [esp + 0xd0]
mov ebp, dword [esp + 0x108]
mov esi, dword [esp + 0x110]
mov edi, dword [esp + 0x68]
cmp edi, edx
jle 0x6d7761
cmp edx, esi
jae 0x6d86ed
mov dword [esp + 0x84], edx
mov ecx, dword [ebx + edx*4]
mov dword [esp], ebp
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.006d8730
mov eax, dword [0x10fd360]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x84]
mov ebx, dword [esp + 0x10c]
lea edi, [ebx + edx*4]
test eax, eax
jne 0x6d7755
mov dword [ebx + edx*4], ecx
jmp 0x6d76db
mov eax, ecx
call fcn.00460b40
jmp 0x6d76db
mov edx, dword [esp + 0x114]
cmp edi, edx
ja 0x6d86e6
mov eax, dword [esp + 0x48]
cmp edi, eax
jb 0x6d86df
mov dword [esp], ebp
sub edx, eax
mov esi, edx
neg edx
shl eax, 2
sar edx, 0x1f
and eax, edx
add eax, ebx
mov dword [esp + 4], eax
mov eax, dword [esp + 0x48]
sub edi, eax
mov dword [esp + 8], edi
mov dword [esp + 0xc], esi
mov byte [esp + 0x10], 0x13
call fcn.006d6f60
mov eax, dword [esp + 0x14]
mov dword [esp + 0xb0], eax
nop
mov ecx, dword [esp + 0x108]
mov edi, dword [ecx + 0x10]
test edi, edi
je 0x6d7985
mov dword [esp + 0xc8], edi
mov ebx, dword [0x10fd360]
mov ebp, dword [edi + 0x10]
test ebx, ebx
jne 0x6d7955
mov dword [ecx + 0x10], ebp
mov edx, eax
xor eax, eax
call fcn.00460de1
mov eax, dword [esp + 0xc8]
mov dword [esp + 0xcc], eax
mov byte [eax], 0x12
mov ebx, dword [eax + 0xc]
mov ebp, dword [eax + 4]
cmp ebx, 2
jb 0x6d790d
mov ecx, 2
mov esi, dword [0x10fd360]
test esi, esi
jne 0x6d78e7
mov esi, dword [esp + 0xd0]
mov dword [ebp], esi
mov dword [ebp + 4], edx
mov dword [eax + 8], ecx
mov dword [eax + 0xc], ebx
mov ebx, dword [0x10fd360]
test ebx, ebx
jne 0x6d78d4
mov dword [eax + 4], ebp
mov ebx, dword [esp + 0x3c]
lea ebp, [ebx + 1]
mov esi, dword [esp + 0x40]
cmp ebp, esi
ja 0x6d7893
mov ecx, dword [esp + 0xd8]
mov edx, ebp
mov ebp, dword [0x10fd360]
lea edi, [ecx + ebx*4]
test ebp, ebp
jne 0x6d788c
mov dword [ecx + ebx*4], eax
mov eax, dword [esp + 0x10c]
mov ebx, edx
mov ebp, esi
mov esi, ecx
mov ecx, dword [esp + 0x110]
mov edx, dword [esp + 0x114]
jmp 0x6d7563
call fcn.00460b40
jmp 0x6d786c
lea eax, [0xb3ada0]
mov dword [esp], eax
mov ecx, dword [esp + 0xd8]
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ebp
call fcn.00447080
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
lea ebp, [eax + 1]
mov eax, dword [esp + 0xcc]
mov ebx, dword [esp + 0x3c]
jmp 0x6d785a
lea edi, [eax + 4]
mov ecx, eax
mov eax, ebp
call fcn.00460b40
mov eax, ecx
jmp 0x6d7844
mov edi, ebp
mov eax, dword [esp + 0xd0]
call fcn.00460b40
lea esi, [ebp + 4]
mov edi, esi
mov eax, edx
call fcn.00460b40
mov eax, dword [esp + 0xcc]
jmp 0x6d782d
lea eax, [0xb3ada0]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], 0
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], 2
call fcn.00447080
mov ebp, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
lea ecx, [eax + 2]
mov eax, dword [esp + 0xcc]
mov edx, dword [esp + 0xb0]
jmp 0x6d7812
mov eax, edi
mov edi, dword [esp + 0xfc]
mov ecx, eax
mov eax, ebp
call fcn.00460b40
lea edx, [0xb52220]
mov dword [esp], edx
mov dword [esp + 4], ecx
call fcn.00411a10
mov edx, dword [esp + 0xb0]
jmp 0x6d77ed
lea eax, [0xb52220]
mov dword [esp], eax
call fcn.0040bd00
mov eax, dword [esp + 4]
mov edx, dword [esp + 0xb0]
jmp 0x6d77f4
lea edi, [ecx + 0x14]
mov edx, eax
mov eax, dword [esp + 0xf8]
call fcn.00460b40
mov eax, edx
jmp 0x6d76bc
lea edx, [0xaa8ca0]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], edi
call fcn.00447080
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x1c]
mov edi, dword [esp + 0x30]
jmp 0x6d7664
mov dword [esp + 0xc0], esi
mov edi, edx
mov eax, ebx
call fcn.00460b40
lea ecx, [0xb52220]
mov dword [esp], ecx
mov dword [esp + 4], esi
call fcn.00411a10
mov edx, dword [esp + 0xfc]
mov ebx, dword [esp + 0x10c]
mov ebp, dword [esp + 0x108]
mov esi, dword [esp + 0xc0]
jmp 0x6d763f
lea eax, [0xb52220]
mov dword [esp], eax
call fcn.0040bd00
mov esi, dword [esp + 4]
mov edx, dword [esp + 0xfc]
mov ebx, dword [esp + 0x10c]
mov ebp, dword [esp + 0x108]
jmp 0x6d763f
mov esi, dword [ebx + 0x14]
mov ebp, dword [ebx + 0x18]
mov edx, dword [ebx + 0x1c]
movzx ebx, word [ebx + 2]
and ebx, 1
mov dword [esp + 0x2c], edx
mov edx, dword [esp + 0x114]
jmp 0x6d7481
mov ebx, ebp
jmp 0x6d746a
xor ebx, ebx
xor ebp, ebp
xor esi, esi
xor ebx, ebx
mov word [esp + 0x26], bx
xor ebx, ebx
jmp 0x6d74d1
mov esi, dword [esp + 0x3c]
mov eax, ebp
mov ecx, ebx
xor edx, edx
xor edi, edi
xor eax, eax
mov dword [esp + 0xd4], eax
xor ecx, ecx
mov dword [esp + 0x84], ecx
mov eax, ebp
mov ecx, ebx
jmp 0x6d7ad6
inc edx
mov dword [esp + 0xd4], ebp
mov dword [esp + 0x84], esi
mov ebp, dword [esp + 0xf0]
mov esi, dword [esp + 0x3c]
mov dword [esp + 0xf4], ebp
cmp edx, esi
jg 0x6d8091
mov dword [esp + 0x64], edx
mov dword [esp + 0x80], ebx
mov dword [esp + 0x50], edi
jge 0x6d8083
jae 0x6d86d6
mov ebp, dword [eax + edx*4]
movzx ebx, byte [ebp]
cmp bl, 2
jne 0x6d804e
xor ebx, ebx
mov dword [esp + 0xac], ebx
mov ebp, dword [esp + 0xd4]
test ebp, ebp
jne 0x6d800f
mov dword [esp + 0x98], eax
xor eax, eax
mov byte [esp + 0x21], al
mov eax, dword [esp + 0x98]
movzx esi, byte [esp + 0x21]
xchg esi, eax
test al, al
xchg esi, eax
je 0x6d7be1
movzx esi, byte [ebp]
xchg esi, eax
cmp al, 3
xchg esi, eax
jne 0x6d7b84
cmp dword [ebp + 0x18], 1
jne 0x6d7b84
mov ebx, dword [esp + 0x80]
mov esi, dword [esp + 0x84]
mov ebx, dword [esp + 0xf4]
mov dword [esp + 0xf0], ebx
mov ebx, dword [esp + 0x80]
jmp 0x6d7abc
xchg esi, eax
cmp al, 4
xchg esi, eax
je 0x6d7b5c
xchg esi, eax
cmp al, 5
xchg esi, eax
je 0x6d7b5c
xchg esi, eax
cmp al, 6
xchg esi, eax
je 0x6d7b5c
xchg esi, eax
cmp al, 0x11
xchg esi, eax
jne 0x6d7be1
mov esi, dword [ebp + 0x2c]
cmp dword [ebp + 0x28], esi
jne 0x6d7be1
mov esi, dword [ebp + 8]
mov ebx, dword [ebp + 4]
test esi, esi
jbe 0x6d86cd
mov ebx, dword [ebx]
movzx esi, byte [ebx]
xchg esi, eax
cmp al, 3
xchg esi, eax
jne 0x6d7bc8
cmp dword [ebx + 0x18], 1
je 0x6d7b5c
xchg esi, eax
cmp al, 4
xchg esi, eax
je 0x6d7b5c
xchg esi, eax
cmp al, 5
xchg esi, eax
je 0x6d7b5c
xchg esi, eax
cmp al, 6
xchg esi, eax
je 0x6d7b5c
mov ebx, dword [esp + 0xac]
cmp edx, edi
jne 0x6d7c23
mov ebp, dword [esp + 0x80]
mov esi, dword [esp + 0x84]
mov edi, dword [esp + 0xf4]
mov dword [esp + 0xf0], edi
mov edi, edx
mov dword [esp + 0x90], eax
mov eax, ebp
mov ebp, ebx
mov ebx, eax
mov eax, dword [esp + 0x90]
jmp 0x6d7abc
mov dword [esp + 0xe0], ebx
lea esi, [edi + 1]
cmp edx, esi
jne 0x6d7d36
mov ebp, dword [esp + 0x3c]
cmp ebp, edi
jbe 0x6d86c4
mov esi, dword [esp + 0x84]
lea ebp, [esi + 1]
mov ebx, dword [eax + edi*4]
mov edi, ebx
mov ebx, dword [esp + 0x80]
cmp ebp, ebx
ja 0x6d7cd2
mov dword [esp + 0x88], eax
mov eax, dword [esp + 0xf4]
mov dword [esp + 0xec], eax
mov eax, dword [esp + 0x88]
mov dword [esp + 0x84], ebp
mov dword [esp + 0x7c], ebx
mov ebx, dword [0x10fd360]
mov ebp, dword [esp + 0xec]
lea ebp, [ebp + esi*4]
test ebx, ebx
jne 0x6d7cba
mov ebx, dword [esp + 0xec]
mov dword [ebx + esi*4], edi
mov ebp, dword [esp + 0x7c]
mov esi, dword [esp + 0x84]
mov edi, ebx
mov ebx, dword [esp + 0xe0]
jmp 0x6d7c01
mov ebx, edi
mov edi, ebp
mov esi, eax
mov eax, ebx
call fcn.00460b40
mov eax, esi
mov ebx, dword [esp + 0xec]
jmp 0x6d7ca1
mov dword [esp + 0x100], edi
lea eax, [0xb3ada0]
mov dword [esp], eax
mov ecx, dword [esp + 0xf4]
mov dword [esp + 4], ecx
mov dword [esp + 8], esi
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], ebp
call fcn.00447080
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
lea ebp, [ecx + 1]
mov ecx, dword [esp + 0x40]
mov edx, dword [esp + 0x64]
mov esi, dword [esp + 0x84]
mov edi, dword [esp + 0x100]
mov dword [esp + 0xec], eax
mov eax, dword [esp + 0xd8]
jmp 0x6d7c77
mov esi, dword [esp + 0x108]
jmp 0x6d7d72
lea edi, [edx + 1]
mov eax, dword [esp + 0x50]
mov ecx, dword [esp + 0x108]
mov edx, dword [esp + 0x3c]
mov ebp, dword [esp + 0x64]
mov eax, ebx
mov ecx, dword [esp + 0x40]
mov edx, ebp
mov ebx, dword [esp + 0xe0]
mov ebp, dword [esp + 0xd4]
mov esi, dword [esp + 0x108]
cmp edx, edi
jle 0x6d7dd2
mov ebx, dword [esp + 0x3c]
cmp edi, ebx
jae 0x6d86bb
mov dword [esp + 0x7c], edi
mov ecx, dword [eax + edi*4]
mov dword [esp], esi
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x50]
cmp edi, ecx
setne dl
mov byte [esp + 8], dl
call fcn.006d8970
mov eax, dword [0x10fd360]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x7c]
mov ebx, dword [esp + 0xd8]
lea edi, [ebx + edx*4]
test eax, eax
jne 0x6d7dc6
mov dword [ebx + edx*4], ecx
jmp 0x6d7d3f
mov eax, ecx
call fcn.00460b40
jmp 0x6d7d3f
cmp edx, ecx
ja 0x6d86b0
mov edi, dword [esp + 0x50]
cmp edx, edi
jb 0x6d86a7
mov dword [esp], esi
sub ecx, edi
mov ebp, ecx
neg ecx
shl edi, 2
sar ecx, 0x1f
and edi, ecx
lea ecx, [eax + edi]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x50]
sub edx, ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebp
mov byte [esp + 0x10], 0x13
call fcn.006d6f60
mov eax, dword [esp + 0x14]
mov dword [esp + 0xb4], eax
nop
mov ecx, dword [esp + 0x108]
mov edi, dword [ecx + 0x10]
test edi, edi
je 0x6d7ff1
mov dword [esp + 0xbc], edi
mov ebx, dword [0x10fd360]
mov ebp, dword [edi + 0x10]
test ebx, ebx
jne 0x6d7fc3
mov dword [ecx + 0x10], ebp
mov edx, eax
xor eax, eax
call fcn.00460de1
mov eax, dword [esp + 0xbc]
mov dword [esp + 0xc4], eax
mov byte [eax], 0x12
mov ebx, dword [eax + 0xc]
mov ebp, dword [eax + 4]
cmp ebx, 2
jb 0x6d7f7b
mov ecx, 2
mov esi, dword [0x10fd360]
test esi, esi
jne 0x6d7f55
mov esi, dword [esp + 0xd4]
mov dword [ebp], esi
mov dword [ebp + 4], edx
mov dword [eax + 8], ecx
mov dword [eax + 0xc], ebx
mov ebx, dword [0x10fd360]
test ebx, ebx
jne 0x6d7f42
mov dword [eax + 4], ebp
mov ebx, dword [esp + 0x84]
lea ebp, [ebx + 1]
mov esi, dword [esp + 0x80]
cmp ebp, esi
ja 0x6d7efe
mov ecx, dword [esp + 0xf4]
mov edx, ebp
mov ebp, dword [0x10fd360]
lea edi, [ecx + ebx*4]
test ebp, ebp
jne 0x6d7ef7
mov dword [ecx + ebx*4], eax
mov eax, dword [esp + 0xd8]
mov ebp, esi
mov esi, edx
mov ebx, ecx
mov ecx, dword [esp + 0x40]
mov edx, dword [esp + 0x64]
jmp 0x6d7cac
call fcn.00460b40
jmp 0x6d7edd
lea eax, [0xb3ada0]
mov dword [esp], eax
mov ecx, dword [esp + 0xf4]
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ebp
call fcn.00447080
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
lea ebp, [eax + 1]
mov eax, dword [esp + 0xc4]
mov ebx, dword [esp + 0x84]
jmp 0x6d7ecb
lea edi, [eax + 4]
mov ecx, eax
mov eax, ebp
call fcn.00460b40
mov eax, ecx
jmp 0x6d7eaf
mov edi, ebp
mov eax, dword [esp + 0xd4]
call fcn.00460b40
lea esi, [ebp + 4]
mov edi, esi
mov eax, edx
call fcn.00460b40
mov eax, dword [esp + 0xc4]
jmp 0x6d7e98
lea eax, [0xb3ada0]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], 0
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], 2
call fcn.00447080
mov ebp, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
lea ecx, [eax + 2]
mov eax, dword [esp + 0xc4]
mov edx, dword [esp + 0xb4]
jmp 0x6d7e7d
lea edx, [ecx + 0x10]
mov eax, edi
mov edi, edx
mov ebx, eax
mov eax, ebp
call fcn.00460b40
lea edx, [0xb52220]
mov dword [esp], edx
mov dword [esp + 4], ebx
call fcn.00411a10
mov edx, dword [esp + 0xb4]
jmp 0x6d7e58
lea eax, [0xb52220]
mov dword [esp], eax
call fcn.0040bd00
mov eax, dword [esp + 4]
mov edx, dword [esp + 0xb4]
jmp 0x6d7e5f
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.006def30
movzx eax, byte [esp + 8]
mov ecx, dword [esp + 0x40]
mov edx, dword [esp + 0x64]
mov ebx, dword [esp + 0xac]
mov ebp, dword [esp + 0xd4]
mov esi, dword [esp + 0x3c]
mov edi, dword [esp + 0x50]
mov byte [esp + 0x21], al
mov eax, dword [esp + 0xd8]
jmp 0x6d7b3c
cmp bl, 0x12
jne 0x6d8078
mov ebx, dword [ebp + 8]
mov esi, dword [ebp + 4]
test ebx, ebx
jle 0x6d8078
mov ebx, dword [esi]
cmp byte [ebx], 2
jne 0x6d806f
mov esi, dword [esp + 0x3c]
xor ebx, ebx
jmp 0x6d7b12
mov esi, dword [esp + 0x3c]
jmp 0x6d7b12
mov esi, dword [esp + 0x3c]
mov ebx, ebp
jmp 0x6d7b12
mov ebp, dword [esp + 0xd4]
xor ebx, ebx
jmp 0x6d7be8
mov edx, dword [esp + 0x84]
mov eax, ebp
xor ecx, ecx
xor esi, esi
xor edi, edi
jmp 0x6d80b3
inc ecx
mov ebx, dword [esp + 0x84]
mov ebx, edx
mov edx, dword [esp + 0x84]
mov dword [esp + 0x3c], edi
mov dword [esp + 0xd8], ebp
cmp ecx, edx
jg 0x6d84e1
mov dword [esp + 0x78], ebx
jge 0x6d80f8
jae 0x6d869e
mov edx, dword [eax + ecx*4]
movzx ebx, byte [edx]
cmp bl, 3
jne 0x6d80e9
cmp dword [edx + 0x18], 1
jne 0x6d80e9
mov edx, dword [esp + 0x78]
jmp 0x6d80a2
cmp bl, 4
je 0x6d80e3
cmp bl, 5
je 0x6d80e3
cmp bl, 6
je 0x6d80e3
mov dword [esp + 0x60], ecx
cmp ecx, esi
jne 0x6d81bb
mov edx, dword [esp + 0x84]
cmp ecx, edx
mov ebx, dword [esp + 0x78]
jge 0x6d81b5
jae 0x6d865f
lea esi, [edi + 1]
mov edx, dword [eax + ecx*4]
cmp ebx, esi
jb 0x6d8162
mov dword [esp + 0x3c], esi
mov dword [esp + 0x40], ebx
mov ebx, dword [0x10fd360]
lea esi, [ebp + edi*4]
test ebx, ebx
jne 0x6d8153
mov dword [ebp + edi*4], edx
mov edx, dword [esp + 0x40]
mov ebx, dword [esp + 0x3c]
lea esi, [ecx + 1]
mov edi, ebx
jmp 0x6d80a2
mov edi, esi
mov ebx, eax
mov eax, edx
call fcn.00460b40
mov eax, ebx
jmp 0x6d8141
mov dword [esp + 0x74], edi
mov dword [esp + 0x100], edx
lea eax, [0xb3ada0]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], edi
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], esi
call fcn.00447080
mov ebp, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
lea esi, [eax + 1]
mov eax, dword [esp + 0xf4]
mov ecx, dword [esp + 0x60]
mov edx, dword [esp + 0x100]
mov edi, dword [esp + 0x74]
jmp 0x6d8127
mov edx, ebx
mov ebx, edi
jmp 0x6d8149
lea edx, [esi + 1]
cmp ecx, edx
jne 0x6d827e
mov edx, dword [esp + 0x84]
cmp edx, esi
jbe 0x6d8695
lea ebx, [edi + 1]
mov esi, dword [eax + esi*4]
mov edx, dword [esp + 0x78]
cmp ebx, edx
ja 0x6d822f
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x40], edx
mov edx, dword [0x10fd360]
lea ebx, [ebp + edi*4]
test edx, edx
jne 0x6d8215
mov dword [ebp + edi*4], esi
mov edx, dword [esp + 0x84]
cmp ecx, edx
mov ebx, dword [esp + 0x40]
mov esi, dword [esp + 0x3c]
mov edi, esi
jmp 0x6d8111
mov edi, ebx
mov edx, eax
mov eax, esi
call fcn.00460b40
mov ebx, dword [esp + 0x84]
cmp ecx, ebx
mov eax, edx
mov edx, ebx
jmp 0x6d8206
mov dword [esp + 0x100], esi
lea eax, [0xb3ada0]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], edi
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ebx
call fcn.00447080
mov ebp, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
lea ebx, [eax + 1]
mov eax, dword [esp + 0xf4]
mov ecx, dword [esp + 0x60]
mov esi, dword [esp + 0x100]
mov edi, dword [esp + 0x3c]
jmp 0x6d81e3
mov dword [esp + 0x80], edx
mov dword [esp + 0x44], esi
mov ebx, dword [esp + 0x84]
jmp 0x6d82b0
mov ebx, dword [esp + 0x54]
inc ebx
mov ebp, dword [esp + 0x84]
mov ebp, dword [esp + 0xd8]
mov esi, edx
mov edx, ebx
mov ebx, dword [esp + 0x84]
mov dword [esp + 0x7c], esi
cmp ecx, edx
jle 0x6d82f5
cmp ebx, esi
jbe 0x6d868c
mov ebp, dword [eax + esi*4]
movzx esi, byte [ebp]
cmp edx, ebx
jae 0x6d8683
mov dword [esp + 0x54], edx
mov ebx, dword [eax + edx*4]
movzx edx, byte [ebx]
xchg esi, eax
cmp al, dl
xchg esi, eax
jae 0x6d82e5
mov edx, dword [esp + 0x54]
jmp 0x6d8292
jne 0x6d82ef
mov edx, dword [ebx + 0x18]
cmp dword [ebp + 0x18], edx
jl 0x6d82df
mov edx, dword [esp + 0x7c]
jmp 0x6d8292
mov edx, dword [esp + 0x44]
cmp ebx, edx
jbe 0x6d867a
mov ebp, dword [eax + edx*4]
mov dword [esp + 0x100], ebp
lea ebp, [eax + edx*4]
cmp ebx, esi
jbe 0x6d8671
mov dword [esp + 0xe8], ebp
mov ebp, dword [0x10fd360]
mov ebx, dword [eax + esi*4]
lea esi, [eax + esi*4]
test ebp, ebp
jne 0x6d84b5
mov dword [eax + edx*4], ebx
mov ebx, dword [esp + 0x7c]
mov ebp, dword [esp + 0x100]
mov dword [eax + ebx*4], ebp
mov ebx, dword [esp + 0x84]
mov ebp, dword [esp + 0x80]
jmp 0x6d8375
lea esi, [eax + 1]
mov eax, dword [esp + 0x84]
mov edx, dword [esp + 0x44]
mov ebx, dword [esp + 0x60]
mov eax, ecx
mov ecx, ebx
mov ebx, dword [esp + 0x84]
mov edi, dword [esp + 0x3c]
mov ebp, esi
cmp ecx, ebp
jle 0x6d83e0
mov esi, dword [eax + edx*4]
cmp ebx, ebp
jbe 0x6d8668
mov dword [esp + 0x4c], ebp
mov ecx, dword [eax + ebp*4]
mov dword [esp], esi
mov dword [esp + 4], ecx
call fcn.006da520
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0xf4]
mov edx, dword [ecx + eax*4]
test byte [edx], al
mov ebx, dword [0x10fd360]
mov ebp, dword [esp + 0x108]
mov esi, dword [ebp + 0x10]
test ebx, ebx
jne 0x6d83c3
mov dword [edx + 0x10], esi
mov dword [ebp + 0x10], edx
jmp 0x6d8352
lea edi, [edx + 0x10]
mov ebx, eax
mov eax, esi
call fcn.00460b40
lea edi, [ebp + 0x10]
mov eax, edx
call fcn.00460b40
mov eax, ebx
jmp 0x6d8352
mov ecx, dword [eax + edx*4]
mov dword [esp], ecx
call fcn.006d6da0
mov eax, dword [esp + 0x3c]
lea ecx, [eax + 1]
mov edx, dword [esp + 0x44]
mov ebx, dword [esp + 0xf4]
mov edx, dword [ebx + edx*4]
mov ebp, dword [esp + 0x78]
cmp ebp, ecx
jb 0x6d8463
mov esi, dword [esp + 0xd8]
mov dword [esp + 0x40], ebp
mov edi, ebx
mov ebx, dword [0x10fd360]
lea ebp, [esi + eax*4]
test ebx, ebx
jne 0x6d8445
mov dword [esi + eax*4], edx
mov eax, dword [esp + 0x60]
mov edx, dword [esp + 0x84]
cmp eax, edx
mov eax, edi
mov ebx, dword [esp + 0x40]
mov ebp, esi
mov esi, ecx
mov ecx, dword [esp + 0x60]
jmp 0x6d820e
mov eax, edi
mov edi, ebp
mov ebx, eax
mov eax, edx
call fcn.00460b40
mov eax, dword [esp + 0x60]
mov edx, dword [esp + 0x84]
cmp eax, edx
mov edi, ebx
jmp 0x6d8432
mov dword [esp + 0x100], edx
lea edx, [0xb3ada0]
mov dword [esp], edx
mov ebx, dword [esp + 0xd8]
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], ecx
call fcn.00447080
mov esi, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ebp, dword [esp + 0x1c]
lea ecx, [eax + 1]
mov eax, dword [esp + 0x3c]
mov edx, dword [esp + 0x100]
mov ebx, dword [esp + 0xf4]
jmp 0x6d840f
mov ebp, edi
mov edi, dword [esp + 0xe8]
mov eax, ebx
call fcn.00460b40
mov edi, esi
mov eax, dword [esp + 0x100]
call fcn.00460b40
mov eax, dword [esp + 0xf4]
mov edi, ebp
jmp 0x6d8342
mov eax, ebp
xor ecx, ecx
xor edx, edx
jmp 0x6d84ed
mov ebp, ecx
mov ecx, esi
cmp edi, ecx
jle 0x6d85fe
mov dword [esp + 0xe4], ebp
lea esi, [ecx + 1]
cmp edi, esi
jle 0x6d85f7
cmp edi, ecx
jbe 0x6d8656
mov ebp, dword [eax + ecx*4]
cmp byte [ebp], 2
jne 0x6d85f0
cmp edi, esi
jbe 0x6d864d
mov ebp, dword [eax + ecx*4 + 4]
cmp byte [ebp], 2
jne 0x6d8537
mov ecx, dword [esp + 0xe4]
jmp 0x6d84e9
cmp edi, ecx
jbe 0x6d8644
mov dword [esp + 0x70], esi
lea ebp, [edx + 1]
mov esi, dword [eax + ecx*4]
cmp ebx, ebp
jb 0x6d8596
mov ecx, dword [esp + 0xe4]
mov dword [esp + 0x84], ebp
mov dword [esp + 0x40], ebx
mov ebx, dword [0x10fd360]
lea ebp, [ecx + edx*4]
test ebx, ebx
jne 0x6d8583
mov dword [ecx + edx*4], esi
mov esi, dword [esp + 0x70]
mov ebx, dword [esp + 0x40]
mov edx, dword [esp + 0x84]
jmp 0x6d84e9
mov edx, edi
mov edi, ebp
mov ebx, eax
mov eax, esi
call fcn.00460b40
mov eax, ebx
mov edi, edx
jmp 0x6d856f
mov dword [esp + 0x6c], edx
mov dword [esp + 0x100], esi
lea eax, [0xb3ada0]
mov dword [esp], eax
mov ecx, dword [esp + 0xe4]
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], ebp
call fcn.00447080
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
lea ebp, [eax + 1]
mov eax, dword [esp + 0xd8]
mov edx, dword [esp + 0x6c]
mov esi, dword [esp + 0x100]
mov edi, dword [esp + 0x3c]
jmp 0x6d8554
cmp edi, ecx
jmp 0x6d8539
cmp edi, ecx
jmp 0x6d8539
mov dword [esp + 0x118], ebp
mov dword [esp + 0x11c], edx
mov dword [esp + 0x120], ebx
add esp, 0x104
ret
mov eax, dword [esp + 0x10c]
mov dword [esp + 0x118], eax
mov dword [esp + 0x11c], ecx
mov eax, dword [esp + 0x114]
mov dword [esp + 0x120], eax
add esp, 0x104
ret
mov eax, ecx
mov ecx, edi
call fcn.00460bc0
mov eax, esi
mov ecx, edi
call fcn.00460bc0
mov eax, ecx
mov ecx, edi
call fcn.00460bc0
mov eax, ecx
mov ecx, edx
call fcn.00460bc0
mov eax, ebp
mov ecx, ebx
call fcn.00460bc0
mov eax, esi
mov ecx, ebx
call fcn.00460bc0
mov eax, edx
mov ecx, ebx
call fcn.00460bc0
mov eax, edx
mov ecx, ebx
call fcn.00460bc0
mov eax, esi
mov ecx, ebx
call fcn.00460bc0
mov eax, esi
mov ecx, edx
call fcn.00460bc0
mov eax, ecx
mov ecx, edx
call fcn.00460bc0
mov eax, edi
mov ecx, edx
call fcn.00460c20
mov eax, ecx
mov ecx, edx
mov edx, eax
call fcn.00460c00
mov eax, edi
mov ecx, ebx
call fcn.00460bc0
mov eax, edi
mov ecx, ebp
call fcn.00460bc0
xor eax, eax
mov ecx, esi
call fcn.00460bc0
mov eax, edx
mov ecx, esi
call fcn.00460bc0
mov ecx, edi
call fcn.00460c20
mov ecx, edi
call fcn.00460c00
mov eax, edx
mov ecx, esi
call fcn.00460bc0
mov eax, edi
call fcn.00460bc0
mov ecx, ebx
mov edx, ebp
call fcn.00460c00
mov eax, ebx
mov ecx, esi
call fcn.00460bc0
mov eax, esi
call fcn.00460bc0
nop
call fcn.0045f5f0
jmp fcn.006d7320