Function at 0x6e75a0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x3d8]
cmp eax, dword [ecx + 8]
jbe 0x6e8d32
sub esp, 0x458
nop
mov ecx, dword [esp + 0x45c]
movzx edx, byte [ecx + 0xa8]
test dl, dl
je 0x6e8c94
mov eax, 1
test al, al
je 0x6e8c8d
mov edx, dword [ecx + 0x94]
mov ebx, dword [ecx + 0xa0]
cmp dword [ecx + 0x98], ebx
jbe 0x6e8d2b
lea ebx, [ebx + ebx*8]
lea edx, [edx + ebx*8]
test edx, edx
je 0x6e8c7e
mov ebx, dword [edx]
cmp ebx, 0x12
jne 0x6e7757
mov ebx, dword [ecx + 0xd4]
mov ebp, dword [ecx + 0xd0]
mov eax, edx
lea edx, [ebx - 1]
cmp edx, ebx
jae 0x6e8d24
mov edx, dword [ebp + ebx*4 - 4]
mov dword [ecx + 0xcc], edx
mov edx, dword [ecx + 0xd4]
dec edx
test edx, edx
jl 0x6e8d1d
mov dword [ecx + 0xd4], edx
lea edi, [esp + 0x400]
mov edx, eax
xor eax, eax
call fcn.0044f1ba
mov byte [esp + 0x400], 5
mov ecx, dword [edx + 0xc]
mov ebx, dword [edx + 8]
mov ebp, dword [edx + 4]
mov dword [esp + 0x404], ebp
mov dword [esp + 0x408], ebx
mov dword [esp + 0x40c], ecx
mov ecx, dword [edx + 0x18]
mov ebx, dword [edx + 0x14]
mov ebp, dword [edx + 0x10]
mov dword [esp + 0x410], ebp
mov dword [esp + 0x414], ebx
mov dword [esp + 0x418], ecx
mov ecx, dword [edx + 0x28]
mov ebx, dword [edx + 0x24]
mov edx, dword [edx + 0x20]
mov dword [esp + 0x430], edx
mov dword [esp + 0x434], ebx
mov dword [esp + 0x438], ecx
mov edi, dword [esp + 0x460]
test byte [edi], al
mov ecx, dword [0xb91180]
test ecx, ecx
jne 0x6e7738
lea esi, [esp + 0x400]
call fcn.0044f604
nop
mov eax, dword [esp + 0x45c]
mov byte [eax + 0xa8], 0
inc dword [eax + 0xa4]
mov ecx, dword [eax + 0x94]
mov edx, dword [eax + 0xa0]
cmp dword [eax + 0x98], edx
jbe 0x6e8d16
lea edx, [edx + edx*8]
shl edx, 3
mov ecx, dword [ecx + edx]
cmp ecx, 2
sete cl
mov byte [eax + 0x8d], cl
inc dword [eax + 0xa0]
mov byte [esp + 0x468], 1
add esp, 0x458
ret
lea eax, [0x7fbb00]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x400]
mov dword [esp + 8], eax
call fcn.004101b0
jmp 0x6e76e1
mov ebp, dword [edx + 0xc]
mov dword [esp + 0x94], ebp
mov eax, ebp
mov ebp, dword [edx + 8]
mov dword [esp + 0x90], ebp
mov esi, ebp
mov ebp, dword [edx + 4]
mov dword [esp + 0x8c], ebp
cmp ebx, 0x13
jne 0x6e8875
mov ebx, dword [edx + 0x20]
mov dword [esp + 0x18c], ebx
mov edi, ebp
mov ebp, dword [edx + 0x24]
mov dword [esp + 0x6c], ebp
mov ebx, dword [edx + 0x28]
mov dword [esp + 0x70], ebx
mov ebx, dword [edx + 0x18]
mov dword [esp + 0x88], ebx
mov ebp, dword [edx + 0x14]
mov edx, dword [edx + 0x10]
mov dword [esp + 0x84], edx
nop
mov byte [ecx + 0xa8], 0
inc dword [ecx + 0xa4]
mov edx, dword [ecx + 0x94]
mov ebx, dword [ecx + 0xa0]
cmp dword [ecx + 0x98], ebx
jbe 0x6e8d0f
lea ebx, [ebx + ebx*8]
shl ebx, 3
mov edx, dword [edx + ebx]
cmp edx, 2
sete dl
mov byte [ecx + 0x8d], dl
inc dword [ecx + 0xa0]
nop
movzx edx, byte [ecx + 0xa8]
test dl, dl
je 0x6e8839
mov edx, 1
test dl, dl
je 0x6e8832
mov edx, dword [ecx + 0x94]
mov ebx, dword [ecx + 0xa0]
cmp dword [ecx + 0x98], ebx
jbe 0x6e8d08
lea ebx, [ebx + ebx*8]
lea edx, [edx + ebx*8]
test edx, edx
je 0x6e8823
cmp dword [edx], 0x14
jne 0x6e87ba
mov ebx, dword [edx + 0x20]
mov dword [esp + 0x180], ebx
mov ebp, dword [edx + 0x24]
mov ebx, dword [edx + 0x28]
mov dword [esp + 0x3c], ebx
mov ebx, dword [edx + 0x2c]
mov dword [esp + 0x17c], ebx
mov ebx, dword [edx + 0x30]
mov dword [esp + 0x24], ebx
mov ebx, dword [edx + 0x34]
mov dword [esp + 0x28], ebx
mov ebx, dword [edx + 0xc]
mov dword [esp + 0x88], ebx
mov ebx, dword [edx + 8]
mov dword [esp + 0x84], ebx
mov ebx, dword [edx + 4]
mov dword [esp + 0x80], ebx
mov ebx, dword [edx + 0x18]
mov dword [esp + 0x7c], ebx
mov ebx, dword [edx + 0x14]
mov dword [esp + 0x78], ebx
mov edx, dword [edx + 0x10]
mov dword [esp + 0x74], edx
nop
mov byte [ecx + 0xa8], 0
inc dword [ecx + 0xa4]
mov edx, dword [ecx + 0x94]
mov ebx, dword [ecx + 0xa0]
cmp dword [ecx + 0x98], ebx
jbe 0x6e8d01
lea ebx, [ebx + ebx*8]
shl ebx, 3
mov edx, dword [edx + ebx]
cmp edx, 2
sete dl
mov byte [ecx + 0x8d], dl
inc dword [ecx + 0xa0]
nop
movzx edx, byte [ecx + 0xa8]
test dl, dl
je 0x6e8784
mov edx, 1
test dl, dl
je 0x6e877d
mov edx, dword [ecx + 0x94]
mov ebx, dword [ecx + 0xa0]
cmp dword [ecx + 0x98], ebx
jbe 0x6e8cfa
lea ebx, [ebx + ebx*8]
lea edx, [edx + ebx*8]
test edx, edx
je 0x6e876e
mov ebx, 1
mov ebx, dword [esp + 0x88]
mov dword [esp + 0x34], ebx
mov dword [esp + 0x168], eax
mov eax, dword [esp + 0x84]
mov dword [esp + 0x2c], eax
mov dword [esp + 0x160], ecx
mov ecx, dword [esp + 0x80]
mov dword [esp + 0x30], ecx
mov dword [esp + 0x158], edx
mov edx, dword [esp + 0x7c]
mov dword [esp + 0x60], edx
mov dword [esp + 0x150], ebp
mov ebp, dword [esp + 0x78]
mov dword [esp + 0x58], ebp
mov dword [esp + 0x148], esi
mov esi, dword [esp + 0x74]
mov dword [esp + 0x5c], esi
mov ebx, 1
mov eax, dword [esp + 0x168]
mov ecx, dword [esp + 0x160]
mov edx, dword [esp + 0x158]
mov ebp, dword [esp + 0x150]
mov esi, dword [esp + 0x148]
mov dword [esp + 0x140], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x68], eax
mov dword [esp + 0x138], ecx
mov ecx, dword [esp + 0x180]
mov dword [esp + 0x188], ecx
mov dword [esp + 0x130], edx
mov edx, dword [esp + 0x17c]
mov dword [esp + 0x184], edx
mov byte [esp + 0x128], bl
mov ebx, dword [esp + 0x28]
mov dword [esp + 0x44], ebx
mov dword [esp + 0x120], ebp
mov ebp, dword [esp + 0x24]
mov dword [esp + 0x40], ebp
mov dword [esp + 0x118], esi
mov esi, dword [esp + 0x2c]
mov dword [esp + 0x48], esi
mov dword [esp + 0x110], edi
mov edi, dword [esp + 0x30]
mov dword [esp + 0x4c], edi
mov dword [esp + 0x108], edi
mov edi, dword [esp + 0x34]
mov dword [esp + 0x50], edi
mov edx, dword [esp + 0x130]
mov eax, dword [esp + 0x140]
mov ecx, dword [esp + 0x138]
movzx ebx, byte [esp + 0x128]
mov ebp, dword [esp + 0x120]
mov esi, dword [esp + 0x118]
mov edi, dword [esp + 0x110]
mov dword [esp + 0x178], edx
test bl, bl
je 0x6e875f
test ebp, ebp
jne 0x6e844f
mov ebx, dword [esp + 0x44]
mov ebp, dword [esp + 0x184]
mov dword [esp + 0x44], ebx
mov dword [esp + 0x184], ebp
mov ebx, dword [esp + 0x40]
test ebx, ebx
xchg ebp, ebx
sete bl
xchg ebp, ebx
xchg ebp, eax
mov byte [esp + 0x23], al
xchg ebp, eax
movzx ebp, byte [esp + 0x465]
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x6e7bbb
cmp dword [edx], 0xe
jne 0x6e7bbb
mov ebp, dword [edx + 0x18]
mov ebx, dword [edx + 0x14]
mov edx, dword [edx + 0x10]
mov dword [ecx + 0xcc], 0xa
lea edi, [esp + 0x3a8]
lea esi, [0x8bca00]
call fcn.0044f604
mov ecx, dword [esp + 0x8c]
mov dword [esp + 0x3ac], ecx
mov ecx, dword [esp + 0x90]
mov dword [esp + 0x3b0], ecx
mov dword [esp + 0x3b4], eax
mov dword [esp + 0x3b8], edx
mov dword [esp + 0x3bc], ebx
mov dword [esp + 0x3c0], ebp
mov eax, dword [esp + 0x18c]
mov dword [esp + 0x3d8], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 0x3dc], eax
mov eax, dword [esp + 0x70]
mov dword [esp + 0x3e0], eax
mov eax, dword [esp + 0x184]
mov dword [esp + 0x3e4], eax
mov eax, dword [esp + 0x40]
mov dword [esp + 0x3e8], eax
mov eax, dword [esp + 0x44]
mov dword [esp + 0x3ec], eax
movzx eax, byte [esp + 0x23]
mov byte [esp + 0x3fc], al
mov edi, dword [esp + 0x460]
test byte [edi], al
mov eax, dword [0xb91180]
test eax, eax
jne 0x6e7b9c
lea esi, [esp + 0x3a8]
call fcn.0044f604
mov byte [esp + 0x468], 1
add esp, 0x458
ret
lea eax, [0x7fbb00]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x3a8]
mov dword [esp + 8], eax
call fcn.004101b0
jmp 0x6e7b8d
mov ebp, dword [edx]
cmp ebp, 0x15
jne 0x6e7e17
mov ebp, dword [edx + 0x18]
mov dword [esp + 0x94], ebp
mov ebp, dword [edx + 0x14]
mov dword [esp + 0x90], ebp
mov ebp, dword [edx + 0x10]
test ebx, ebx
jne 0x6e7dc3
cmp byte [edx + 0x44], 1
jne 0x6e7dc3
mov dword [esp + 0xb8], eax
xor eax, eax
mov byte [esp + 0x21], al
mov eax, 1
mov byte [esp + 0x22], al
mov eax, dword [esp + 0xb8]
mov dword [esp + 0x8c], ebp
mov edx, dword [ecx + 0xd4]
mov ebx, dword [ecx + 0xd0]
lea ebp, [edx - 1]
cmp ebp, edx
jae 0x6e8cc9
mov edx, dword [ebx + edx*4 - 4]
mov dword [ecx + 0xcc], edx
mov edx, dword [ecx + 0xd4]
dec edx
test edx, edx
jl 0x6e8cc2
mov dword [ecx + 0xd4], edx
mov edx, edi
lea edi, [esp + 0x350]
mov ebx, esi
lea esi, [0x8bca60]
call fcn.0044f604
mov dword [esp + 0x354], edx
mov dword [esp + 0x358], ebx
mov dword [esp + 0x35c], eax
mov eax, dword [esp + 0x8c]
mov dword [esp + 0x360], eax
mov eax, dword [esp + 0x90]
mov dword [esp + 0x364], eax
mov eax, dword [esp + 0x94]
mov dword [esp + 0x368], eax
mov eax, dword [esp + 0x18c]
mov dword [esp + 0x380], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 0x384], eax
mov eax, dword [esp + 0x70]
mov dword [esp + 0x388], eax
mov eax, dword [esp + 0x184]
mov dword [esp + 0x38c], eax
mov eax, dword [esp + 0x40]
mov dword [esp + 0x390], eax
mov eax, dword [esp + 0x44]
mov dword [esp + 0x394], eax
mov eax, dword [esp + 0x178]
mov ecx, dword [eax + 0x28]
mov edx, dword [eax + 0x24]
mov ebx, dword [eax + 0x20]
mov dword [esp + 0x398], ebx
mov dword [esp + 0x39c], edx
mov dword [esp + 0x3a0], ecx
movzx ecx, byte [esp + 0x22]
mov byte [esp + 0x3a4], cl
movzx ecx, byte [esp + 0x21]
mov byte [esp + 0x3a5], cl
movzx eax, byte [eax + 0x44]
mov byte [esp + 0x3a6], al
mov edi, dword [esp + 0x460]
test byte [edi], al
mov eax, dword [0xb91180]
test eax, eax
jne 0x6e7da4
lea esi, [esp + 0x350]
call fcn.0044f604
nop
mov eax, dword [esp + 0x45c]
mov byte [eax + 0xa8], 0
inc dword [eax + 0xa4]
mov ecx, dword [eax + 0x94]
mov edx, dword [eax + 0xa0]
cmp dword [eax + 0x98], edx
jbe 0x6e8cbb
lea edx, [edx + edx*8]
shl edx, 3
mov ecx, dword [ecx + edx]
cmp ecx, 2
sete cl
mov byte [eax + 0x8d], cl
inc dword [eax + 0xa0]
mov byte [esp + 0x468], 1
add esp, 0x458
ret
lea eax, [0x7fbb00]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x350]
mov dword [esp + 8], eax
call fcn.004101b0
jmp 0x6e7d4d
cmp ebx, 1
jne 0x6e7e0c
mov edx, dword [esp + 0x184]
cmp byte [edx], 0x21
sete bl
test bl, bl
je 0x6e7de9
mov edx, dword [esp + 0x178]
mov ebx, dword [esp + 0x40]
jmp 0x6e7bef
mov edx, dword [esp + 0x178]
mov ebx, dword [esp + 0x40]
movzx ebx, byte [esp + 0x23]
mov byte [esp + 0x21], bl
xor ebx, ebx
mov byte [esp + 0x22], bl
mov ebx, dword [esp + 0x40]
jmp 0x6e7c0c
mov edx, dword [esp + 0x184]
xor ebx, ebx
jmp 0x6e7dd5
cmp ebp, 0xa
jne 0x6e7f1e
mov ebp, dword [edx + 0x18]
mov ebx, dword [edx + 0x14]
mov edx, dword [edx + 0x10]
mov dword [ecx + 0xcc], 0xe
lea edi, [esp + 0x2f8]
lea esi, [0x8bcac0]
call fcn.0044f604
mov ecx, dword [esp + 0x8c]
mov dword [esp + 0x2fc], ecx
mov ecx, dword [esp + 0x90]
mov dword [esp + 0x300], ecx
mov dword [esp + 0x304], eax
mov dword [esp + 0x308], edx
mov dword [esp + 0x30c], ebx
mov dword [esp + 0x310], ebp
mov eax, dword [esp + 0x18c]
mov dword [esp + 0x328], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 0x32c], eax
mov eax, dword [esp + 0x70]
mov dword [esp + 0x330], eax
mov eax, dword [esp + 0x184]
mov dword [esp + 0x334], eax
mov eax, dword [esp + 0x40]
mov dword [esp + 0x338], eax
mov eax, dword [esp + 0x44]
mov dword [esp + 0x33c], eax
movzx eax, byte [esp + 0x23]
mov byte [esp + 0x34c], al
mov edi, dword [esp + 0x460]
test byte [edi], al
mov eax, dword [0xb91180]
test eax, eax
jne 0x6e7eff
lea esi, [esp + 0x2f8]
call fcn.0044f604
mov byte [esp + 0x468], 1
add esp, 0x458
ret
lea eax, [0x7fbb00]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x2f8]
mov dword [esp + 8], eax
call fcn.004101b0
jmp 0x6e7ef0
cmp ebp, 0xc
jne 0x6e8025
mov ebp, dword [edx + 0x14]
mov ebx, dword [edx + 0x18]
mov edx, dword [edx + 0x10]
mov dword [ecx + 0xcc], 0x13
lea edi, [esp + 0x2a0]
lea esi, [0x8bcb20]
call fcn.0044f604
mov ecx, dword [esp + 0x8c]
mov dword [esp + 0x2a4], ecx
mov ecx, dword [esp + 0x90]
mov dword [esp + 0x2a8], ecx
mov dword [esp + 0x2ac], eax
mov dword [esp + 0x2b0], edx
mov dword [esp + 0x2b4], ebp
mov dword [esp + 0x2b8], ebx
mov eax, dword [esp + 0x18c]
mov dword [esp + 0x2d0], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 0x2d4], eax
mov eax, dword [esp + 0x70]
mov dword [esp + 0x2d8], eax
mov eax, dword [esp + 0x184]
mov dword [esp + 0x2dc], eax
mov eax, dword [esp + 0x40]
mov dword [esp + 0x2e0], eax
mov eax, dword [esp + 0x44]
mov dword [esp + 0x2e4], eax
movzx eax, byte [esp + 0x23]
mov byte [esp + 0x2f4], al
mov edi, dword [esp + 0x460]
test byte [edi], al
mov eax, dword [0xb91180]
test eax, eax
jne 0x6e8006
lea esi, [esp + 0x2a0]
call fcn.0044f604
mov byte [esp + 0x468], 1
add esp, 0x458
ret
lea eax, [0x7fbb00]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x2a0]
mov dword [esp + 8], eax
call fcn.004101b0
jmp 0x6e7ff7
movzx ebx, byte [esp + 0x464]
test bl, bl
je 0x6e813e
cmp ebp, 7
jne 0x6e813c
mov ebx, dword [edx + 0x18]
mov ebp, dword [edx + 0x14]
mov edx, dword [edx + 0x10]
mov dword [ecx + 0xcc], 8
lea edi, [esp + 0x248]
lea esi, [0x8bcb80]
call fcn.0044f604
mov ecx, dword [esp + 0x8c]
mov dword [esp + 0x24c], ecx
mov ecx, dword [esp + 0x90]
mov dword [esp + 0x250], ecx
mov dword [esp + 0x254], eax
mov dword [esp + 0x258], edx
mov dword [esp + 0x25c], ebp
mov dword [esp + 0x260], ebx
mov eax, dword [esp + 0x18c]
mov dword [esp + 0x278], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 0x27c], eax
mov eax, dword [esp + 0x70]
mov dword [esp + 0x280], eax
mov eax, dword [esp + 0x184]
mov dword [esp + 0x284], eax
mov eax, dword [esp + 0x40]
mov dword [esp + 0x288], eax
mov eax, dword [esp + 0x44]
mov dword [esp + 0x28c], eax
movzx eax, byte [esp + 0x23]
mov byte [esp + 0x29c], al
mov edi, dword [esp + 0x460]
test byte [edi], al
mov eax, dword [0xb91180]
test eax, eax
jne 0x6e811d
lea esi, [esp + 0x248]
call fcn.0044f604
mov byte [esp + 0x468], 1
add esp, 0x458
ret
lea eax, [0x7fbb00]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x248]
mov dword [esp + 8], eax
call fcn.004101b0
jmp 0x6e810e
test bl, bl
je 0x6e824b
cmp ebp, 8
jne 0x6e824b
mov ebx, dword [edx + 0x18]
mov ebp, dword [edx + 0x14]
mov edx, dword [edx + 0x10]
mov dword [ecx + 0xcc], 0xb
lea edi, [esp + 0x1f0]
lea esi, [0x8bcbe0]
call fcn.0044f604
mov ecx, dword [esp + 0x8c]
mov dword [esp + 0x1f4], ecx
mov ecx, dword [esp + 0x90]
mov dword [esp + 0x1f8], ecx
mov dword [esp + 0x1fc], eax
mov dword [esp + 0x200], edx
mov dword [esp + 0x204], ebp
mov dword [esp + 0x208], ebx
mov eax, dword [esp + 0x18c]
mov dword [esp + 0x220], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 0x224], eax
mov eax, dword [esp + 0x70]
mov dword [esp + 0x228], eax
mov eax, dword [esp + 0x184]
mov dword [esp + 0x22c], eax
mov eax, dword [esp + 0x40]
mov dword [esp + 0x230], eax
mov eax, dword [esp + 0x44]
mov dword [esp + 0x234], eax
movzx eax, byte [esp + 0x23]
mov byte [esp + 0x244], al
mov edi, dword [esp + 0x460]
test byte [edi], al
mov eax, dword [0xb91180]
test eax, eax
jne 0x6e822c
lea esi, [esp + 0x1f0]
call fcn.0044f604
mov byte [esp + 0x468], 1
add esp, 0x458
ret
lea eax, [0x7fbb00]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x1f0]
mov dword [esp + 8], eax
call fcn.004101b0
jmp 0x6e821d
mov ebp, dword [esp + 0x6c]
test ebp, ebp
jle 0x6e837f
mov edx, dword [ecx + 0xd4]
mov ebx, dword [ecx + 0xd0]
lea ebp, [edx - 1]
cmp ebp, edx
jae 0x6e8cb4
mov edx, dword [ebx + edx*4 - 4]
mov dword [ecx + 0xcc], edx
mov edx, dword [ecx + 0xd4]
dec edx
test edx, edx
jl 0x6e8cad
mov dword [ecx + 0xd4], edx
lea edi, [esp + 0x198]
mov edx, esi
lea esi, [0x8bcc40]
call fcn.0044f604
mov ecx, dword [esp + 0x8c]
mov dword [esp + 0x19c], ecx
mov dword [esp + 0x1a0], edx
mov dword [esp + 0x1a4], eax
mov eax, dword [esp + 0x5c]
mov dword [esp + 0x1a8], eax
mov eax, dword [esp + 0x58]
mov dword [esp + 0x1ac], eax
mov eax, dword [esp + 0x60]
mov dword [esp + 0x1b0], eax
mov eax, dword [esp + 0x18c]
mov dword [esp + 0x1c8], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 0x1cc], eax
mov eax, dword [esp + 0x70]
mov dword [esp + 0x1d0], eax
mov eax, dword [esp + 0x184]
mov dword [esp + 0x1d4], eax
mov eax, dword [esp + 0x40]
mov dword [esp + 0x1d8], eax
mov eax, dword [esp + 0x44]
mov dword [esp + 0x1dc], eax
movzx eax, byte [esp + 0x23]
mov byte [esp + 0x1ec], al
mov edi, dword [esp + 0x460]
test byte [edi], al
mov eax, dword [0xb91180]
test eax, eax
jne 0x6e8360
lea esi, [esp + 0x198]
call fcn.0044f604
mov byte [esp + 0x468], 1
add esp, 0x458
ret
lea eax, [0x7fbb00]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x198]
mov dword [esp + 8], eax
call fcn.004101b0
jmp 0x6e8351
mov ebp, dword [esp + 0x40]
test ebp, ebp
jle 0x6e8390
mov ebp, dword [esp + 0x6c]
jmp 0x6e8257
test bl, bl
je 0x6e843f
mov ebx, 0x1a
lea ebp, [0x81f2c1]
nop
mov esi, dword [edx + 0xc]
mov dword [esp + 0x88], esi
mov esi, dword [edx + 8]
mov edx, dword [edx + 4]
mov dword [ecx], 4
mov dword [ecx + 0x24], ebx
mov ebx, dword [0xb91180]
test ebx, ebx
jne 0x6e8423
mov dword [ecx + 0x20], ebp
mov dword [ecx + 0x28], edi
mov ebx, dword [esp + 0x90]
mov dword [ecx + 0x2c], ebx
mov dword [ecx + 0x30], eax
mov dword [ecx + 8], 0x22
mov ebx, dword [0xb91180]
test ebx, ebx
jne 0x6e8413
lea eax, [0x8240ed]
mov dword [ecx + 4], eax
mov dword [ecx + 0x14], edx
mov dword [ecx + 0x18], esi
mov eax, dword [esp + 0x88]
mov dword [ecx + 0x1c], eax
mov byte [esp + 0x468], 0
add esp, 0x458
ret
lea edi, [ecx + 4]
lea eax, [0x8240ed]
call fcn.0044f0d0
jmp 0x6e83f4
lea ebx, [ecx + 0x20]
mov edi, ebx
mov eax, ebp
call fcn.0044f0d0
mov eax, dword [esp + 0x94]
mov edi, dword [esp + 0x8c]
jmp 0x6e83ca
mov ebx, 0x19
lea ebp, [0x81e938]
jmp 0x6e83a3
mov dword [esp + 0x64], ebp
mov ebx, dword [ecx + 0xec]
mov dword [esp + 0x88], ebx
mov dword [esp + 0xb0], eax
xor eax, eax
mov dword [esp + 0x54], eax
mov eax, dword [esp + 0xb0]
jmp 0x6e84bc
mov eax, dword [esp + 0x54]
inc eax
mov ecx, dword [esp + 0x45c]
mov edx, dword [esp + 0x64]
mov ebx, dword [esp + 0x88]
mov ebp, dword [esp + 0x188]
mov esi, dword [esp + 0x68]
mov edx, dword [esp + 0x178]
mov ebp, dword [esp + 0x64]
mov esi, dword [esp + 0x90]
mov edi, dword [esp + 0x8c]
mov dword [esp + 0x54], eax
mov eax, dword [esp + 0x94]
mov edx, dword [esp + 0x54]
cmp edx, ebx
jge 0x6e8754
mov eax, dword [ecx + 0xe8]
cmp dword [ecx + 0xec], edx
jbe 0x6e8cd7
nop
lea ecx, [edx + edx*2]
mov dword [esp + 0x84], ecx
shl ecx, 3
mov dword [esp + 0x80], ecx
mov esi, dword [eax + ecx + 4]
mov edi, dword [eax + ecx + 8]
mov eax, dword [eax + ecx]
mov dword [esp], eax
mov dword [esp + 4], esi
mov dword [esp + 8], edi
mov eax, dword [esp + 0x188]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ebp
mov esi, dword [esp + 0x68]
mov dword [esp + 0x14], esi
call fcn.00401fe0
movzx eax, byte [esp + 0x18]
test al, al
je 0x6e8476
mov eax, dword [esp + 0x45c]
mov ecx, dword [eax + 0xe8]
mov edx, dword [esp + 0x54]
cmp dword [eax + 0xec], edx
jbe 0x6e8cd0
mov edx, dword [esp + 0x80]
mov edx, dword [ecx + edx + 0xc]
mov ebx, dword [esp + 0x84]
lea ecx, [ecx + ebx*8]
mov ecx, dword [ecx + 0x10]
mov dword [esp + 0x88], ecx
test ecx, ecx
ja 0x6e8708
xor ebx, ebx
xor ebp, ebp
mov dword [esp + 0x44], ebx
mov dword [esp + 0x194], ebp
mov dword [esp], ebp
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.0044f8d0
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x88]
lea edx, [ecx + eax]
mov dword [esp + 0x84], edx
mov ebx, dword [esp + 0x44]
cmp edx, ebx
ja 0x6e86cb
mov ebp, dword [esp + 0x194]
mov dword [esp + 0x44], ebx
mov dword [esp + 0x194], ebp
add ecx, ebp
mov dword [esp], ecx
mov ecx, dword [esp + 0x184]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.0044f8d0
mov eax, dword [esp + 0x84]
mov ecx, dword [esp + 0x194]
mov edx, dword [esp + 0x44]
test eax, eax
jne 0x6e869b
nop
mov ecx, dword [esp + 0x45c]
mov dword [ecx], 4
mov dword [ecx + 0x24], 0x14
mov edx, dword [0xb91180]
test edx, edx
jne 0x6e868b
lea edx, [0x81b469]
mov dword [ecx + 0x20], edx
mov edx, dword [esp + 0x8c]
mov dword [ecx + 0x28], edx
mov edx, dword [esp + 0x90]
mov dword [ecx + 0x2c], edx
mov edx, dword [esp + 0x94]
mov dword [ecx + 0x30], edx
mov dword [ecx + 8], 0x1a
mov edx, dword [0xb91180]
test edx, edx
jne 0x6e867b
lea eax, [0x81ee97]
mov dword [ecx + 4], eax
mov eax, dword [esp + 0x4c]
mov dword [ecx + 0x14], eax
mov eax, dword [esp + 0x48]
mov dword [ecx + 0x18], eax
mov eax, dword [esp + 0x50]
mov dword [ecx + 0x1c], eax
mov byte [esp + 0x468], 0
add esp, 0x458
ret
lea edi, [ecx + 4]
lea eax, [0x81ee97]
call fcn.0044f0d0
jmp 0x6e8657
lea edi, [ecx + 0x20]
lea eax, [0x81b469]
call fcn.0044f0d0
jmp 0x6e861f
mov esi, dword [esp + 0x90]
mov edi, dword [esp + 0x8c]
mov ebx, edx
mov ebp, ecx
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x94]
mov ecx, dword [esp + 0x45c]
mov edx, dword [esp + 0x178]
jmp 0x6e7a84
lea eax, [0x7ac140]
mov dword [esp], eax
mov eax, dword [esp + 0x194]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], edx
call fcn.0043a950
mov ebx, dword [esp + 0x1c]
mov ebp, dword [esp + 0x14]
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x88]
jmp 0x6e85b9
mov dword [esp + 0x190], edx
lea eax, [0x7ac140]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], ecx
call fcn.0043a950
mov ebp, dword [esp + 0x14]
mov ebx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x88]
mov edx, dword [esp + 0x190]
jmp 0x6e8576
xor eax, eax
xor ecx, ecx
xor edx, edx
jmp 0x6e85ef
xor ebx, ebx
xor ebp, ebp
mov dword [esp + 0x40], ebp
xor ebp, ebp
jmp 0x6e7a84
mov byte [esp + 0x468], 0
add esp, 0x458
ret
xor edx, edx
jmp 0x6e791b
mov dword [esp + 0x38], ebp
mov dword [esp], ecx
call fcn.006ef020
movzx edx, byte [esp + 4]
mov eax, dword [esp + 0x94]
mov ecx, dword [esp + 0x45c]
mov ebp, dword [esp + 0x38]
mov esi, dword [esp + 0x90]
mov edi, dword [esp + 0x8c]
jmp 0x6e78f5
xor ebx, ebx
xor ebx, ebx
mov dword [esp + 0x3c], ebx
xor ebx, ebx
mov dword [esp + 0x180], ebx
xor ebx, ebx
mov dword [esp + 0x28], ebx
xor ebx, ebx
mov dword [esp + 0x24], ebx
xor ebx, ebx
mov dword [esp + 0x17c], ebx
xor ebx, ebx
mov dword [esp + 0x34], ebx
xor ebx, ebx
mov dword [esp + 0x2c], ebx
xor ebx, ebx
mov dword [esp + 0x30], ebx
mov ebx, dword [esp + 0x88]
mov dword [esp + 0x60], ebx
mov dword [esp + 0x58], ebp
mov dword [esp + 0x170], eax
mov eax, dword [esp + 0x84]
mov dword [esp + 0x5c], eax
xor ebp, ebp
xor ebx, ebx
mov eax, dword [esp + 0x170]
jmp 0x6e79ac
mov byte [esp + 0x468], 0
add esp, 0x458
ret
xor edx, edx
jmp 0x6e782f
mov dword [esp + 0x80], ebp
mov dword [esp], ecx
call fcn.006ef020
movzx edx, byte [esp + 4]
mov eax, dword [esp + 0x94]
mov ecx, dword [esp + 0x45c]
mov ebp, dword [esp + 0x80]
mov esi, dword [esp + 0x90]
mov edi, dword [esp + 0x8c]
jmp 0x6e7809
cmp ebx, 0x14
jne 0x6e8c12
mov ebx, dword [edx + 0x24]
mov edi, ebx
mov ebx, dword [edx + 0x20]
mov dword [esp + 0x180], ebx
mov ebx, dword [edx + 0x28]
mov dword [esp + 0x3c], ebx
mov ebx, dword [edx + 0x2c]
mov dword [esp + 0x17c], ebx
mov ebx, dword [edx + 0x30]
mov dword [esp + 0x24], ebx
mov ebx, dword [edx + 0x34]
mov dword [esp + 0x28], ebx
mov ebx, dword [edx + 0x18]
mov dword [esp + 0x88], ebx
mov ebp, dword [edx + 0x14]
mov edx, dword [edx + 0x10]
mov dword [esp + 0x84], edx
nop
mov byte [ecx + 0xa8], 0
inc dword [ecx + 0xa4]
mov edx, dword [ecx + 0x94]
mov ebx, dword [ecx + 0xa0]
cmp dword [ecx + 0x98], ebx
jbe 0x6e8cf3
mov dword [esp + 0x80], edi
lea ebx, [ebx + ebx*8]
shl ebx, 3
mov edx, dword [edx + ebx]
cmp edx, 2
sete dl
mov byte [ecx + 0x8d], dl
inc dword [ecx + 0xa0]
nop
movzx edx, byte [ecx + 0xa8]
test dl, dl
je 0x6e8bdc
mov edx, 1
test dl, dl
je 0x6e8bd5
mov edx, dword [ecx + 0x94]
mov ebx, dword [ecx + 0xa0]
cmp dword [ecx + 0x98], ebx
jbe 0x6e8cec
lea ebx, [ebx + ebx*8]
lea edx, [edx + ebx*8]
test edx, edx
je 0x6e8bc6
cmp dword [edx], 0x13
jne 0x6e8b8d
mov ebx, dword [edx + 0x24]
mov dword [esp + 0x6c], ebx
mov ebp, dword [edx + 0x20]
mov ebx, dword [edx + 0x28]
mov dword [esp + 0x70], ebx
mov ebx, dword [edx + 0x18]
mov dword [esp + 0x88], ebx
mov ebx, dword [edx + 0x14]
mov dword [esp + 0x84], ebx
mov edx, dword [edx + 0x10]
mov dword [esp + 0x7c], edx
nop
mov byte [ecx + 0xa8], 0
inc dword [ecx + 0xa4]
mov edx, dword [ecx + 0x94]
mov ebx, dword [ecx + 0xa0]
cmp dword [ecx + 0x98], ebx
jbe 0x6e8ce5
lea ebx, [ebx + ebx*8]
shl ebx, 3
mov edx, dword [edx + ebx]
cmp edx, 2
sete dl
mov byte [ecx + 0x8d], dl
inc dword [ecx + 0xa0]
nop
movzx edx, byte [ecx + 0xa8]
test dl, dl
je 0x6e8b51
mov edx, 1
test dl, dl
je 0x6e8b4a
mov edx, dword [ecx + 0x94]
mov ebx, dword [ecx + 0xa0]
cmp dword [ecx + 0x98], ebx
jbe 0x6e8cde
lea ebx, [ebx + ebx*8]
lea edx, [edx + ebx*8]
test edx, edx
je 0x6e8b3b
mov ebx, dword [esp + 0x70]
mov ebx, dword [esp + 0x88]
mov dword [esp + 0x60], ebx
mov ebx, dword [esp + 0x84]
mov dword [esp + 0x58], ebx
mov ebx, dword [esp + 0x7c]
mov dword [esp + 0x5c], ebx
mov ebx, dword [esp + 0x70]
mov dword [esp + 0xa0], eax
mov eax, 1
mov byte [esp + 0x20], al
mov eax, dword [esp + 0xa0]
mov dword [esp + 0x98], eax
mov eax, dword [esp + 0x8c]
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0xa0]
mov dword [esp + 0x100], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x68], eax
mov dword [esp + 0xf8], ecx
mov ecx, dword [esp + 0x180]
mov dword [esp + 0x188], ecx
mov dword [esp + 0xf0], edx
mov edx, dword [esp + 0x17c]
mov dword [esp + 0x184], edx
mov dword [esp + 0xe8], ebx
mov ebx, dword [esp + 0x28]
mov dword [esp + 0x44], ebx
mov dword [esp + 0xe0], ebp
mov ebp, dword [esp + 0x24]
mov dword [esp + 0x40], ebp
mov dword [esp + 0x48], esi
mov dword [esp + 0xd8], esi
mov esi, dword [esp + 0x30]
mov dword [esp + 0x4c], esi
mov dword [esp + 0xd0], edi
mov edi, dword [esp + 0x100]
mov dword [esp + 0x50], edi
mov edx, dword [esp + 0xf0]
mov dword [esp + 0xc8], edi
mov edi, dword [esp + 0xe8]
mov dword [esp + 0x70], edi
mov dword [esp + 0xc0], edx
mov edx, dword [esp + 0xe0]
mov dword [esp + 0x18c], edx
mov eax, dword [esp + 0x94]
mov esi, dword [esp + 0x90]
mov edi, dword [esp + 0x8c]
movzx ebx, byte [esp + 0x20]
mov ebp, dword [esp + 0xd0]
mov ecx, dword [esp + 0xf8]
mov edx, dword [esp + 0xf0]
jmp 0x6e7a62
mov byte [esp + 0x468], 0
add esp, 0x458
ret
xor edx, edx
jmp 0x6e89ff
mov dword [esp + 0x18c], ebp
mov dword [esp], ecx
call fcn.006ef020
movzx edx, byte [esp + 4]
mov eax, dword [esp + 0x94]
mov ecx, dword [esp + 0x45c]
mov ebp, dword [esp + 0x18c]
mov esi, dword [esp + 0x90]
mov edi, dword [esp + 0x80]
jmp 0x6e89d9
xor ebx, ebx
xor ebx, ebx
mov dword [esp + 0x6c], ebx
mov ebx, dword [esp + 0x88]
mov dword [esp + 0x60], ebx
mov dword [esp + 0x58], ebp
mov dword [esp + 0xa8], eax
mov eax, dword [esp + 0x84]
mov dword [esp + 0x5c], eax
xor ebp, ebp
xor ebx, ebx
mov eax, dword [esp + 0xa8]
jmp 0x6e8a2d
mov byte [esp + 0x468], 0
add esp, 0x458
ret
xor edx, edx
jmp 0x6e8946
mov dword [esp + 0x7c], ebp
mov dword [esp], ecx
call fcn.006ef020
movzx edx, byte [esp + 4]
mov eax, dword [esp + 0x94]
mov ecx, dword [esp + 0x45c]
mov ebp, dword [esp + 0x7c]
mov esi, dword [esp + 0x90]
mov edi, dword [esp + 0x80]
jmp 0x6e8920
xor ebx, ebx
mov byte [esp + 0x20], bl
xor edi, edi
mov dword [esp + 0x3c], edi
xor edi, edi
xor ebx, ebx
mov dword [esp + 0x180], ebx
xor ebx, ebx
mov dword [esp + 0x28], ebx
xor ebx, ebx
mov dword [esp + 0x24], ebx
xor ebx, ebx
mov dword [esp + 0x17c], ebx
xor eax, eax
xor esi, esi
xor eax, eax
mov dword [esp + 0x30], eax
xor ebx, ebx
xor eax, eax
mov dword [esp + 0x6c], eax
xor ebp, ebp
mov eax, dword [esp + 0x94]
mov dword [esp + 0x60], eax
mov ebx, dword [esp + 0x90]
mov dword [esp + 0x58], ebx
mov ebp, dword [esp + 0x8c]
mov dword [esp + 0x5c], ebp
xor eax, eax
xor ebx, ebx
xor ebp, ebp
jmp 0x6e8a5d
mov byte [esp + 0x468], 0
add esp, 0x458
ret
xor edx, edx
jmp 0x6e7605
mov dword [esp], ecx
call fcn.006ef020
movzx eax, byte [esp + 4]
mov ecx, dword [esp + 0x45c]
jmp 0x6e75df
call fcn.004288c0
ud2
call fcn.004287c0
ud2
call fcn.004287c0
ud2
call fcn.004288c0
ud2
call fcn.004287c0
ud2
call fcn.004287c0
ud2
call fcn.004287c0
ud2
call fcn.004287c0
ud2
call fcn.004287c0
ud2
call fcn.004287c0
ud2
call fcn.004287c0
ud2
call fcn.004287c0
ud2
call fcn.004287c0
ud2
call fcn.004287c0
ud2
call fcn.004287c0
ud2
call fcn.004287c0
ud2
call fcn.004288c0
ud2
call fcn.004287c0
ud2
call fcn.004287c0
ud2
call fcn.0044d880
jmp fcn.006e75a0