Function at 0x6a11a0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x776908
mov eax, dword fs:[0]
push eax
push ecx
mov eax, 0x135c
call fcn.00660af0
mov eax, dword [0x867e6c]
xor eax, esp
mov dword [esp + 0x1358], eax
push ebx
push esi
push edi
mov eax, dword [0x867e6c]
xor eax, esp
push eax
lea eax, [esp + 0x1370]
mov dword fs:[0], eax
mov esi, ecx
lea eax, [esi + 0x1f14]
mov dword [esp + 0x4c], esi
call fcn.00421b00
push 0x4218b0
push fcn.00401ff0
push 0xf
xor edi, edi
push 0x18
lea eax, [esp + 0x94]
push eax
mov dword [esi + 0x1f4c], edi
mov dword [esp + 0x5c], edi
call fcn.00644b0e
lea ecx, [esp + 0x1ec]
lea edx, [esp + 0x94]
mov dword [esp + 0x1378], edi
mov dword [esp + 0x28], edi
mov dword [esp + 0x14], ecx
mov dword [esp + 0x3c], edx
mov edi, 0xf
cmp dword [esp + 0x48], edi
jge 0x6a1b87
mov eax, dword [esp + 0x14]
push 0x100
push 0xffffffffffffffff
push eax
call fcn.0064edd0
mov eax, dword [esp + 0x48]
mov esi, dword [eax]
mov ecx, eax
add esp, 0xc
lea ebx, [eax - 0x10]
cmp dword [ecx - 4], esi
jbe 0x6a1276
call fcn.006441b7
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax - 4]
mov edx, dword [ebx]
mov dword [esp + 0x6c], edx
mov dword [esp + 0x1c], ecx
cmp ecx, dword [eax]
jbe 0x6a1290
call fcn.006441b7
mov ecx, dword [esp + 0x6c]
mov edx, dword [esp + 0x1c]
mov eax, dword [ebx]
push esi
push ecx
push edx
push eax
lea eax, [esp + 0x84]
push eax
call fcn.00422a60
fld dword [0x82e254]
xor ebx, ebx
fstp dword [esp + 0x1144]
mov dword [esp + 0x1134], 1
mov dword [esp + 0x1138], 3
mov dword [esp + 0x113c], 0x844
mov byte [esp + 0x1140], bl
mov dword [esp + 0x1148], 0x8d
mov dword [esp + 0x114c], 0xfffffffe
mov dword [esp + 0x1168], edi
mov dword [esp + 0x1164], ebx
mov byte [esp + 0x1154], bl
fld dword [0x82e250]
mov esi, 2
fstp dword [esp + 0x117c]
mov dword [esp + 0x116c], esi
mov dword [esp + 0x1170], esi
mov dword [esp + 0x1174], 0x845
mov byte [esp + 0x1178], bl
mov dword [esp + 0x1180], 0xffffff9e
mov dword [esp + 0x1184], 0x18
mov dword [esp + 0x11a0], edi
mov dword [esp + 0x119c], ebx
mov byte [esp + 0x118c], bl
fld dword [0x82e08c]
mov eax, 3
fstp dword [esp + 0x11b4]
mov dword [esp + 0x11a4], esi
mov dword [esp + 0x11a8], eax
mov dword [esp + 0x11ac], 0x846
mov byte [esp + 0x11b0], bl
mov dword [esp + 0x11b8], 0x1e
mov dword [esp + 0x11bc], ebx
mov dword [esp + 0x11d8], edi
mov dword [esp + 0x11d4], ebx
mov byte [esp + 0x11c4], bl
fld dword [0x82e24c]
fst dword [esp + 0x11ec]
mov dword [esp + 0x11dc], 4
mov dword [esp + 0x11e0], esi
mov dword [esp + 0x11e4], 0x847
mov byte [esp + 0x11e8], bl
mov dword [esp + 0x11f0], 0x33
mov dword [esp + 0x11f4], 0xffffffb4
mov dword [esp + 0x1210], edi
mov dword [esp + 0x120c], ebx
mov byte [esp + 0x11fc], bl
fstp dword [esp + 0x1224]
mov dword [esp + 0x1214], esi
mov dword [esp + 0x1218], esi
mov dword [esp + 0x121c], 0x848
mov byte [esp + 0x1220], bl
mov dword [esp + 0x1228], 0x30
mov dword [esp + 0x122c], 0x4a
mov dword [esp + 0x1248], edi
mov dword [esp + 0x1244], ebx
mov byte [esp + 0x1234], bl
fld dword [0x82e248]
fst dword [esp + 0x125c]
mov dword [esp + 0x124c], esi
mov dword [esp + 0x1250], eax
mov dword [esp + 0x1254], 0x849
mov byte [esp + 0x1258], bl
mov dword [esp + 0x1260], 0xffffff84
mov dword [esp + 0x1264], 0x21
mov dword [esp + 0x1280], edi
mov dword [esp + 0x127c], ebx
mov byte [esp + 0x126c], bl
fld dword [0x82e244]
fstp dword [esp + 0x1294]
mov dword [esp + 0x1284], esi
mov dword [esp + 0x1288], esi
mov dword [esp + 0x128c], 0x84a
mov byte [esp + 0x1290], bl
mov dword [esp + 0x1298], 0x46
mov dword [esp + 0x129c], 0xffffffbc
mov dword [esp + 0x12b8], edi
mov dword [esp + 0x12b4], ebx
mov byte [esp + 0x12a4], bl
mov byte [esp + 0x1378], 7
fstp dword [esp + 0x12cc]
push 9
push str.X__X__XXX
lea ecx, [esp + 0x12e0]
mov dword [esp + 0x12c4], eax
mov dword [esp + 0x12c8], eax
mov dword [esp + 0x12cc], 0x84b
mov byte [esp + 0x12d0], bl
mov dword [esp + 0x12d8], 0x25
mov dword [esp + 0x12dc], 0xffffffd5
mov dword [esp + 0x12f8], edi
mov dword [esp + 0x12f4], ebx
mov byte [esp + 0x12e4], bl
call fcn.004016e0
fld dword [0x82e240]
fstp dword [esp + 0x1304]
mov dword [esp + 0x12f4], 3
fld dword [0x82e248]
mov dword [esp + 0x12f8], esi
fstp dword [esp + 0x133c]
mov dword [esp + 0x12fc], 0x84c
mov byte [esp + 0x1300], bl
mov dword [esp + 0x1308], 0x2e
mov dword [esp + 0x130c], 0x56
mov dword [esp + 0x1328], edi
mov dword [esp + 0x1324], ebx
mov byte [esp + 0x1314], bl
mov dword [esp + 0x132c], esi
mov dword [esp + 0x1330], 4
mov dword [esp + 0x1334], 0x84d
mov byte [esp + 0x1338], bl
mov dword [esp + 0x1340], 0xffffffb6
mov dword [esp + 0x1344], 0xfffffff9
mov dword [esp + 0x1360], edi
mov dword [esp + 0x135c], ebx
mov byte [esp + 0x134c], bl
lea ecx, [esp + 0x54]
mov byte [esp + 0x1378], 8
call fcn.00401ff0
mov ecx, dword [esp + 0x4c]
mov byte [esp + 0x1378], 9
mov eax, dword [ecx + 0x1f10]
sub eax, 1
je 0x6a169e
sub eax, 1
je 0x6a168b
sub eax, 1
jne 0x6a16aa
mov eax, 6
mov dword [esp + 0x38], eax
mov dword [esp + 0x2c], 9
jmp 0x6a16ae
mov eax, 3
mov dword [esp + 0x38], eax
mov dword [esp + 0x2c], 5
jmp 0x6a16ae
xor eax, eax
mov dword [esp + 0x38], eax
mov dword [esp + 0x2c], esi
jmp 0x6a16ae
mov eax, dword [esp + 0x38]
cmp eax, dword [esp + 0x2c]
mov esi, eax
mov eax, dword [esp + 0x64]
mov dword [esp + 0x20], esi
jg 0x6a1721
mov edi, edi
mov edx, dword [esp + 0x60]
cmp edx, ebx
jne 0x6a16cc
xor ecx, ecx
jmp 0x6a16d5
mov ecx, dword [esp + 0x68]
sub ecx, edx
sar ecx, 2
mov edi, eax
sub edi, edx
sar edi, 2
cmp edi, ecx
jae 0x6a16eb
mov dword [eax], esi
add eax, 4
mov dword [esp + 0x64], eax
jmp 0x6a1716
mov edi, eax
cmp edx, eax
jbe 0x6a16f6
call fcn.006441b7
mov eax, dword [esp + 0x54]
push edi
push eax
lea edx, [esp + 0x28]
push edx
lea eax, [esp + 0x88]
push eax
lea eax, [esp + 0x64]
call fcn.004024a0
mov eax, dword [esp + 0x64]
inc esi
cmp esi, dword [esp + 0x2c]
mov dword [esp + 0x20], esi
jle 0x6a16c0
mov ecx, dword [esp + 0x60]
mov dword [esp + 0x1c], eax
cmp ecx, eax
jbe 0x6a173a
call fcn.006441b7
mov eax, dword [esp + 0x64]
mov ecx, dword [esp + 0x60]
mov edi, dword [esp + 0x54]
mov esi, ecx
cmp ecx, eax
jbe 0x6a1751
call fcn.006441b7
mov eax, dword [esp + 0x64]
mov ecx, dword [esp + 0x60]
cmp dword [esp + 0x54], ebx
je 0x6a175d
cmp dword [esp + 0x54], edi
je 0x6a176a
call fcn.006441b7
mov eax, dword [esp + 0x64]
mov ecx, dword [esp + 0x60]
mov edx, dword [esp + 0x1c]
cmp esi, edx
je 0x6a1787
push esi
mov ebx, edx
call fcn.00421130
mov eax, dword [esp + 0x68]
mov ecx, dword [esp + 0x64]
add esp, 4
xor ebx, ebx
sub eax, ecx
test eax, 0xfffffffc
jle 0x6a191a
lea eax, [esp + 0x54]
call fcn.0040ab50
mov eax, dword [eax]
lea ecx, [eax*8]
sub ecx, eax
mov edx, dword [esp + ecx*8 + 0x1134]
lea eax, [esp + ecx*8 + 0x1134]
mov dword [esp + 0x30], eax
mov eax, dword [eax + 4]
mov dword [esp + 0x40], edx
mov dword [esp + 0x24], eax
mov dword [esp + 0x50], 0x1f3
lea ecx, [ecx]
mov ecx, dword [esp + 0x30]
mov al, byte [ecx + 0xc]
xor edx, edx
cmp al, bl
sete dl
mov edi, edx
call fcn.00437c00
mov ecx, 9
sub ecx, dword [esp + 0x24]
cdq
sub ecx, edi
idiv ecx
mov esi, edx
mov dword [esp + 0x1c], esi
call fcn.00437c00
mov ecx, dword [esp + 0x30]
xor edx, edx
cmp byte [ecx + 0xc], bl
mov ecx, 9
setne dl
mov dword [esp + 0x10], esi
dec edx
and edx, 2
sub ecx, edx
sub ecx, dword [esp + 0x40]
cdq
idiv ecx
mov ecx, esi
xor al, al
add edx, edi
mov edi, dword [esp + 0x24]
add esi, edi
mov dword [esp + 0x44], edx
neg edx
mov dword [esp + 0x20], esi
mov dword [esp + 0x18], edx
cmp ecx, dword [esp + 0x20]
jge 0x6a18d5
mov edi, dword [esp + 0x44]
cmp al, bl
jne 0x6a18be
mov esi, dword [esp + 0x40]
mov edx, edi
add edx, esi
mov dword [esp + 0x34], edx
cmp edi, dword [esp + 0x34]
jge 0x6a18be
mov edx, dword [esp + 0x14]
lea eax, [edi + ecx*8]
cmp dword [edx + eax*4], 0xffffffff
jne 0x6a187d
cmp ecx, ebx
je 0x6a1874
cmp ecx, 7
jne 0x6a18b3
cmp edi, ebx
je 0x6a187d
cmp edi, 7
jne 0x6a18b3
mov eax, dword [esp + 0x30]
cmp dword [eax + 0x30], ebx
je 0x6a18b7
mov ecx, dword [esp + 0x18]
lea esi, [ecx + edi]
cmp esi, dword [eax + 0x30]
jbe 0x6a189b
call fcn.006441b7
mov eax, dword [esp + 0x30]
cmp dword [eax + 0x34], 0x10
jb 0x6a18a6
mov eax, dword [eax + 0x20]
jmp 0x6a18a9
add eax, 0x20
cmp byte [esi + eax], 0x58
mov ecx, dword [esp + 0x10]
je 0x6a18b7
xor al, al
jmp 0x6a18b9
mov al, 1
inc edi
cmp al, bl
je 0x6a1858
mov edx, dword [esp + 0x40]
add dword [esp + 0x18], edx
inc ecx
mov dword [esp + 0x10], ecx
cmp al, bl
je 0x6a183a
jmp 0x6a18d9
cmp al, bl
je 0x6a1930
mov ecx, dword [esp + 0x50]
dec ecx
cmp ecx, ebx
mov dword [esp + 0x50], ecx
jg 0x6a17d0
cmp al, bl
jne 0x6a1b2e
mov eax, dword [esp + 0x64]
mov ecx, dword [esp + 0x60]
mov edx, eax
sub edx, ecx
test edx, 0xfffffffc
je 0x6a190d
sub eax, 4
mov dword [esp + 0x64], eax
sub eax, ecx
test eax, 0xfffffffc
jg 0x6a1794
inc dword [esp + 0x48]
add dword [esp + 0x14], 0x100
add dword [esp + 0x3c], 0x18
jmp 0x6a1b32
mov eax, dword [esp + 0x30]
mov eax, dword [eax + 8]
cmp eax, 0xffffffff
jne 0x6a1940
xor eax, eax
jmp 0x6a1949
mov ecx, dword [eax*4 + 0x879598]
mov eax, dword [ecx]
fldz
sub esp, 8
fstp dword [esp + 4]
fld1
fstp dword [esp]
push eax
mov eax, dword [esp + 0x58]
call fcn.0069f8f0
mov edx, dword [esp + 0x44]
mov ecx, dword [esp + 0x1c]
mov esi, dword [esp + 0x30]
fld dword [esi + 0x10]
mov dword [esp + 0x10f0], ecx
mov ecx, dword [esp + 0x24]
fstp dword [esp + 0x1108]
mov dword [esp + 0x10ec], edx
mov edx, dword [esp + 0x40]
mov dword [esp + 0x10f8], ecx
mov ecx, dword [esi + 0x18]
push 0xffffffffffffffff
mov dword [esp + 0x10f8], edx
mov edx, dword [esi + 8]
mov dword [esp + 0x1104], eax
mov eax, dword [esi + 0x14]
push ebx
mov dword [esp + 0x1118], ecx
add esi, 0x1c
push esi
lea ecx, [esp + 0x1120]
mov dword [esp + 0x1108], edx
mov byte [esp + 0x1110], bl
mov byte [esp + 0x1111], bl
mov dword [esp + 0x1118], eax
mov dword [esp + 0x1138], 0xf
mov dword [esp + 0x1134], ebx
mov byte [esp + 0x1124], bl
call fcn.00401530
call fcn.00437c00
cdq
mov ecx, 0x3e8
idiv ecx
mov dword [esp + 0x1130], edx
mov edi, dword [esp + 0x3c]
lea edx, [esp + 0x10ec]
push edx
add edi, 0xfffffff0
mov byte [esp + 0x137c], 0xa
call fcn.00421a60
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x24]
add ecx, eax
cmp eax, ecx
mov dword [esp + 0x18], eax
mov dword [esp + 0x20], ecx
jge 0x6a1aee
mov edi, dword [esp + 0x44]
mov edx, dword [esp + 0x40]
lea eax, [edi + edx]
mov edx, edi
neg edx
mov dword [esp + 0x34], eax
mov dword [esp + 0x10], edx
jmp 0x6a1a60
cmp edi, eax
jge 0x6a1ad3
mov eax, dword [esp + 0x30]
cmp dword [eax + 0x30], ebx
je 0x6a1a95
lea eax, [edx + edi]
cmp eax, dword [esi + 0x14]
jbe 0x6a1a7e
call fcn.006441b7
mov edx, dword [esp + 0x10]
cmp dword [esi + 0x18], 0x10
jb 0x6a1a89
mov ecx, dword [esi + 4]
jmp 0x6a1a8c
lea ecx, [esi + 4]
lea eax, [edx + edi]
cmp byte [eax + ecx], 0x58
jne 0x6a1ac6
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
sub ecx, dword [eax - 4]
add eax, 0xfffffff0
mov eax, 0x38e38e39
imul ecx
mov eax, dword [esp + 0x18]
sar edx, 4
mov ecx, edx
shr ecx, 0x1f
lea edx, [edx + ecx - 1]
lea ecx, [edi + eax*8]
mov eax, dword [esp + 0x14]
mov dword [eax + ecx*4], edx
mov edx, dword [esp + 0x10]
mov eax, dword [esp + 0x34]
inc edi
cmp edi, eax
jl 0x6a1a64
mov edi, dword [esp + 0x44]
mov ecx, dword [esp + 0x18]
add edx, dword [esp + 0x40]
inc ecx
cmp ecx, dword [esp + 0x20]
mov dword [esp + 0x18], ecx
mov dword [esp + 0x10], edx
jl 0x6a1a60
mov byte [esp + 0x1378], 9
cmp dword [esp + 0x112c], 0x10
jb 0x6a1b10
mov ecx, dword [esp + 0x1118]
push ecx
call fcn.006441c7
add esp, 4
mov dword [esp + 0x112c], 0xf
mov dword [esp + 0x1128], ebx
mov byte [esp + 0x1118], bl
jmp 0x6a18f2
mov ecx, dword [esp + 0x60]
cmp ecx, ebx
je 0x6a1b3f
push ecx
call fcn.006441c7
add esp, 4
mov eax, dword [esp + 0x54]
push eax
mov dword [esp + 0x64], ebx
mov dword [esp + 0x68], ebx
mov dword [esp + 0x6c], ebx
call fcn.006441c7
add esp, 4
push 0x421450
push 0xa
push 0x38
lea ecx, [esp + 0x1140]
push ecx
mov byte [esp + 0x1388], bl
call fcn.0064441b
mov eax, dword [esp + 0x28]
inc eax
cmp eax, 0x64
mov dword [esp + 0x28], eax
jl 0x6a123e
cmp dword [esp + 0x48], 0
fldz
fst dword [esp + 0x28]
mov dword [esp + 0x24], 0xffffffff
mov dword [esp + 0x38], 0
jle 0x6a1e42
fld qword [0x87d2f0]
lea edx, [esp + 0x1ec]
mov dword [esp + 0x2c], edx
lea edi, [esp + 0x90]
jmp 0x6a1bc4
fxch st(1)
mov ecx, dword [edi + 4]
fxch st(1)
sub ecx, dword [edi]
fst dword [esp + 0x14]
mov eax, 0x38e38e39
imul ecx
sar edx, 4
mov eax, edx
xor ebx, ebx
shr eax, 0x1f
add eax, edx
mov dword [esp + 0x18], ebx
je 0x6a1d31
mov dword [esp + 0x10], ebx
mov eax, dword [edi]
fst dword [esp + 0x34]
mov ecx, dword [edi + 4]
sub ecx, eax
mov eax, 0x38e38e39
imul ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
xor esi, esi
add eax, edx
je 0x6a1cfd
mov dword [esp + 0x20], esi
cmp ebx, esi
je 0x6a1cd5
fstp st(0)
cmp ebx, eax
jb 0x6a1c33
fstp st(0)
call fcn.006441b7
fld qword [0x87d2f0]
mov eax, dword [edi]
mov ecx, dword [esp + 0x10]
lea ebx, [ecx + eax]
mov ecx, dword [edi + 4]
sub ecx, eax
mov eax, 0x38e38e39
imul ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp esi, eax
jb 0x6a1c63
fstp st(0)
call fcn.006441b7
fld qword [0x87d2f0]
fild dword [ebx + 8]
mov eax, dword [edi]
mov ecx, dword [esp + 0x20]
add eax, ecx
fmul st(1)
fiadd dword [ebx]
fild dword [eax + 8]
fmul st(2)
fiadd dword [eax]
fsubp st(1)
fstp dword [esp + 0x50]
fild dword [ebx + 0xc]
fmul st(1)
fiadd dword [ebx + 4]
fild dword [eax + 0xc]
fmul st(2)
fiadd dword [eax + 4]
fsubp st(1)
fstp dword [esp + 0x1c]
fld dword [esp + 0x1c]
fld dword [esp + 0x50]
fmul st(0), st(0)
fld st(1)
fmulp st(2)
faddp st(1)
fstp dword [esp + 0x1c]
fldz
fld st(0)
fld dword [esp + 0x34]
fucom st(1)
fnstsw ax
fstp st(1)
fld dword [esp + 0x1c]
test ah, 0x44
jnp 0x6a1d80
fcom st(1)
fnstsw ax
fstp st(1)
test ah, 5
jnp 0x6a1d82
fstp st(0)
mov ecx, dword [edi + 4]
sub ecx, dword [edi]
add dword [esp + 0x20], 0x48
mov ebx, dword [esp + 0x18]
mov eax, 0x38e38e39
imul ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
inc esi
add eax, edx
cmp esi, eax
jb 0x6a1c18
mov ecx, dword [edi + 4]
fld dword [esp + 0x34]
sub ecx, dword [edi]
fadd dword [esp + 0x14]
add dword [esp + 0x10], 0x48
mov eax, 0x38e38e39
imul ecx
fstp dword [esp + 0x14]
sar edx, 4
mov eax, edx
shr eax, 0x1f
inc ebx
add eax, edx
mov dword [esp + 0x18], ebx
cmp ebx, eax
jb 0x6a1bf0
mov eax, dword [esp + 0x2c]
add eax, 0xe0
mov ecx, 8
cmp dword [eax], 0xffffffff
je 0x6a1d52
fld dword [esp + 0x14]
fsub qword [0x82dc10]
fstp dword [esp + 0x14]
add eax, 4
sub ecx, 1
jne 0x6a1d3f
cmp dword [esp + 0x24], 0xffffffff
fld dword [esp + 0x14]
je 0x6a1d72
fld dword [esp + 0x28]
fcomp st(1)
fnstsw ax
test ah, 5
jp 0x6a1d8b
mov ecx, dword [esp + 0x38]
fstp dword [esp + 0x28]
mov dword [esp + 0x24], ecx
jmp 0x6a1d8d
fstp st(1)
fstp dword [esp + 0x34]
jmp 0x6a1cd5
fstp st(0)
mov eax, dword [esp + 0x38]
add dword [esp + 0x2c], 0x100
inc eax
add edi, 0x18
cmp eax, dword [esp + 0x48]
mov dword [esp + 0x38], eax
jl 0x6a1bc2
mov eax, dword [esp + 0x24]
fstp st(1)
fstp st(0)
test eax, eax
jl 0x6a1e44
mov ebx, dword [esp + 0x4c]
shl eax, 8
lea edi, [esp + eax + 0x1ec]
add ebx, 0x114
mov dword [esp + 0x28], 8
mov eax, ebx
mov ecx, edi
mov edx, 8
mov esi, dword [ecx]
mov dword [eax - 4], 0
mov dword [eax], esi
add ecx, 0x20
add eax, 0x3c0
sub edx, 1
jne 0x6a1de0
add edi, 4
add ebx, 0x78
sub dword [esp + 0x28], 1
jne 0x6a1dd7
mov eax, dword [esp + 0x24]
mov edi, dword [esp + 0x4c]
lea ebx, [eax + eax*2]
lea esi, [edi + 0x1f14]
lea ebx, [esp + ebx*8 + 0x84]
push esi
call fcn.00421900
mov ecx, dword [esi + 0x10]
sub ecx, dword [esi + 0xc]
mov eax, 0x38e38e39
imul ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [edi + 0x1f4c], eax
jmp 0x6a1e44
fstp st(0)
push 0x4218b0
push 0xf
push 0x18
lea ecx, [esp + 0x90]
push ecx
mov dword [esp + 0x1388], 0xffffffff
call fcn.0064441b
mov ecx, dword [esp + 0x1370]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x1358]
xor ecx, esp
call fcn.00643db8
mov esp, ebp
pop ebp
ret