Function at 0x6d12c0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x488]
cmp eax, dword [ecx + 8]
jbe 0x6d2475
sub esp, 0x508
lea edi, [esp + 0x374]
xor eax, eax
call fcn.00464653
mov ecx, dword [esp + 0x50c]
mov dword [esp + 0x39c], ecx
mov ecx, dword [esp + 0x510]
mov dword [esp + 0x3a0], ecx
lea edi, [esp + 0x49c]
call fcn.00464645
call fcn.0044ff60
lea edi, [esp + 0x11c]
xor eax, eax
call fcn.00464659
lea edi, [esp + 0x430]
call fcn.00464645
lea ecx, [esp + 0x430]
mov dword [esp + 0x128], ecx
call fcn.0044ff60
mov ecx, dword [esp]
mov dword [esp + 0x124], ecx
lea edi, [esp + 0x100]
xor eax, eax
call fcn.00464659
lea edi, [esp + 0x3dc]
call fcn.0046464b
lea ecx, [esp + 0x3dc]
mov dword [esp + 0x10c], ecx
call fcn.0044ff60
mov ecx, dword [esp]
mov dword [esp + 0x108], ecx
mov eax, 1
lea ecx, [esp + 0x374]
mov edx, 1
xor ebx, ebx
lea ebp, [esp + 0x3c]
lea esi, [esp + 0x11c]
xor edi, edi
xor eax, eax
mov dword [esp + 0x74], eax
xor eax, eax
mov dword [esp + 0x70], eax
mov eax, 1
jmp 0x6d13e8
mov eax, dword [esp + 0x50]
mov ecx, dword [esp + 0xc4]
mov edx, dword [esp + 0x54]
mov ebx, dword [esp + 0x7c]
mov dword [esp + 0x74], ebp
mov dword [esp + 0x70], esi
mov ebp, dword [esp + 0xd8]
mov esi, dword [esp + 0xc0]
mov dword [esp + 0xd4], edi
test eax, eax
je 0x6d146c
mov dword [esp + 0x7c], edx
mov dword [esp + 0x78], eax
mov dword [esp + 0xd8], ecx
mov dword [esp + 0xf4], ebp
mov dword [esp + 0xa4], ebx
mov dword [esp + 0xdc], esi
call fcn.0040c7a0
mov eax, dword [esp]
mov dword [esp + 0xc0], eax
mov ecx, dword [esp + 0xd8]
mov edx, ecx
xor ebx, ebx
mov ebp, dword [esp + 0x74]
mov esi, dword [esp + 0x70]
mov edi, dword [esp + 0xd4]
mov ebp, dword [esp + 0xa4]
mov dword [esp + 0x54], ebp
xor ebp, ebp
mov dword [esp + 0x50], ebp
mov esi, dword [esp + 0xf4]
mov dword [esp + 0xc4], esi
mov ebp, dword [esp + 0x74]
mov esi, dword [esp + 0x70]
jmp 0x6d1a5e
mov dword [esp], edi
mov eax, dword [esp + 0x70]
mov dword [esp + 4], eax
mov ecx, dword [esp + 0x74]
mov dword [esp + 8], ecx
call fcn.00409680
mov eax, dword [esp + 0xc]
lea ecx, [0x8458bc]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00494700
mov eax, dword [esp + 0x74]
mov ecx, dword [esp + 0x70]
mov edx, dword [esp + 0xd4]
mov ebx, eax
mov ebp, edx
xor esi, esi
xor edi, edi
jmp 0x6d14d0
mov ecx, dword [esp + 0xd4]
mov esi, dword [esp + 0x98]
mov ecx, ebx
mov ebx, dword [esp + 0x74]
mov edi, ebp
mov ebp, dword [esp + 0xd4]
mov dword [esp + 0xa4], eax
mov dword [esp + 0xa0], edi
mov dword [esp + 0xf4], edx
cmp esi, ecx
jge 0x6d1844
jae 0x6d1a18
mov dword [esp + 0x68], esi
imul ebx, esi, 0x34
mov dword [esp + 0x9c], ebx
add ebx, ebp
lea edi, [esp + 0x23c]
mov esi, ebx
call fcn.00464aee
mov ecx, dword [esp + 0x23c]
mov dword [esp + 0xc8], ecx
mov ebx, dword [esp + 0x240]
mov dword [esp + 0x58], ebx
mov esi, dword [esp + 0x68]
mov edi, dword [esp + 0x70]
mov dword [esp + 0xb0], eax
mov eax, 1
mov dword [esp + 0x80], eax
mov eax, dword [esp + 0xb0]
jmp 0x6d18d2
mov eax, dword [esp + 0xa4]
mov edx, dword [esp + 0xf4]
mov esi, dword [esp + 0xd4]
mov ebx, dword [esp + 0x98]
mov ebp, esi
mov esi, dword [esp + 0x68]
mov edi, dword [esp + 0x70]
mov ecx, ebp
mov ebp, dword [esp + 0x80]
cmp ebp, 1
jne 0x6d163f
mov ebp, dword [esp + 0xa0]
inc ebp
cmp eax, ebp
jae 0x6d15d5
mov dword [esp], edx
mov dword [esp + 4], ebp
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
lea eax, [0x796fe0]
mov dword [esp + 0x10], eax
call fcn.0044b1b0
mov edx, dword [esp + 0x14]
mov ebp, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0xd4]
mov ebx, dword [esp + 0x98]
mov edi, dword [esp + 0x70]
imul ecx, ebp, 0x34
lea ecx, [edx + ecx - 0x34]
mov ebx, dword [0xaab020]
test ebx, ebx
jne 0x6d15fb
mov ebx, edi
mov edi, ecx
lea esi, [esp + 0x23c]
call fcn.00464aee
jmp 0x6d14b3
mov dword [esp + 0xb8], edx
mov dword [esp + 0x44], ebp
mov dword [esp + 0x48], eax
lea eax, [0x796fe0]
mov dword [esp], eax
mov dword [esp + 4], ecx
lea eax, [esp + 0x23c]
mov dword [esp + 8], eax
call fcn.00411480
mov eax, dword [esp + 0x48]
mov edx, dword [esp + 0xb8]
mov ebx, dword [esp + 0x70]
mov ebp, dword [esp + 0x44]
jmp 0x6d14b3
mov ebp, dword [esp + 0x74]
cmp ebp, ebx
jb 0x6d1a06
cmp esi, ebx
ja 0x6d19fd
lea edi, [esp + 0x138]
xor eax, eax
call fcn.00464653
mov ecx, ebp
sub ebp, esi
mov esi, ebp
xchg ebp, ebx
neg ebx
xchg ebp, ebx
sar ebp, 0x1f
mov edi, ecx
mov ecx, dword [esp + 0x9c]
and ecx, ebp
mov ebp, dword [esp + 0xd4]
lea ebx, [ecx + ebp]
mov dword [esp + 0xd0], ebx
mov ebx, dword [esp + 0x80]
test ebx, ebx
jbe 0x6d19f4
mov dword [esp + 0x9c], esi
mov ebp, dword [ebp + ecx + 0x20]
mov dword [esp + 0x94], ebp
mov ecx, ebp
mov ebp, dword [esp + 0xd0]
xor eax, eax
mov dword [esp + 0x64], eax
mov eax, 0xffffffff
mov dword [esp + 0x40], eax
xor eax, eax
jmp 0x6d196f
lea edi, [esp + 0x138]
call fcn.00464653
xor ecx, ecx
jmp 0x6d1756
mov ebx, dword [esp + 0x9c]
cmp ebp, ebx
ja 0x6d19eb
mov edi, dword [esp + 0x74]
mov ebx, ebp
mov ebp, dword [esp + 0x40]
test ebp, ebp
jl 0x6d1721
cmp ebx, ebp
jbe 0x6d19e2
imul ecx, ebp, 0x34
mov ebx, dword [esp + 0xd0]
lea esi, [ebx + ecx]
lea edi, [esp + 0x138]
call fcn.00464aee
mov ecx, 1
jmp 0x6d1756
cmp ebx, 1
jle 0x6d1736
lea edi, [esp + 0x138]
call fcn.00464653
xor ecx, ecx
jmp 0x6d1756
test ebx, ebx
jbe 0x6d19d9
mov esi, dword [esp + 0xd0]
lea edi, [esp + 0x138]
call fcn.00464aee
mov ecx, 1
mov byte [esp + 0x3d], cl
lea edi, [esp + 0x340]
lea esi, [esp + 0x138]
call fcn.00464aee
movzx ecx, byte [esp + 0x3d]
test cl, cl
je 0x6d1829
mov ecx, dword [esp + 0xa0]
inc ecx
mov ebx, dword [esp + 0xa4]
cmp ebx, ecx
jae 0x6d17bf
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 1
lea eax, [0x796fe0]
mov dword [esp + 0x10], eax
call fcn.0044b1b0
mov edx, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov ebx, eax
xor eax, eax
mov dword [esp + 0xa4], ecx
imul ebp, ecx, 0x34
lea edi, [edx + ebp - 0x34]
mov ebp, dword [0xaab020]
test ebp, ebp
jne 0x6d17e5
lea esi, [esp + 0x340]
call fcn.00464aee
jmp 0x6d1820
mov dword [esp + 0xf0], edx
mov dword [esp + 0x8c], ebx
lea eax, [0x796fe0]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x340]
mov dword [esp + 8], eax
call fcn.00411480
xor eax, eax
mov edx, dword [esp + 0xf0]
mov ebx, dword [esp + 0x8c]
mov ecx, dword [esp + 0xa4]
jmp 0x6d1837
mov ebx, dword [esp + 0xa4]
mov ecx, dword [esp + 0xa0]
mov eax, ebx
mov ebp, ecx
mov ebx, dword [esp + 0x70]
jmp 0x6d14b3
mov dword [esp], edx
mov dword [esp + 4], edi
mov dword [esp + 8], eax
call fcn.00409680
mov eax, dword [esp + 0xc]
lea ecx, [0x8458a0]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00494700
mov eax, dword [esp + 0xf4]
mov dword [esp + 0x514], eax
mov eax, dword [esp + 0xa0]
mov dword [esp + 0x518], eax
mov eax, dword [esp + 0xa4]
mov dword [esp + 0x51c], eax
add esp, 0x508
ret
mov eax, dword [esp + 0x80]
inc eax
mov esi, dword [esp + 0x68]
mov ebp, dword [esp + 0xd4]
mov ecx, dword [esp + 0xc8]
mov edi, dword [esp + 0x70]
mov ebx, dword [esp + 0x58]
mov edx, dword [esp + 0xf4]
mov dword [esp + 0x80], eax
mov eax, dword [esp + 0xa4]
mov ebx, dword [esp + 0x80]
add ebx, esi
mov dword [esp + 0x98], ebx
cmp edi, ebx
jle 0x6d1577
jbe 0x6d1a0f
imul ebx, ebx, 0x34
add ebx, ebp
lea edi, [esp + 0x208]
mov esi, ebx
call fcn.00464aee
mov ecx, dword [esp + 0x20c]
mov ebx, dword [esp + 0x208]
mov esi, ebp
mov ebp, dword [esp + 0x58]
cmp ecx, ebp
jne 0x6d1566
mov dword [esp], ebx
mov eax, dword [esp + 0xc8]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00402a70
movzx eax, byte [esp + 0xc]
test al, al
jne 0x6d189b
jmp 0x6d1551
add ebx, 0x34
inc ebp
mov edi, dword [esp + 0x80]
mov edi, dword [esp + 0x74]
mov dword [esp + 0x64], ebp
mov ebp, ebx
mov dword [esp + 0x40], esi
mov ebx, dword [esp + 0x80]
mov esi, dword [esp + 0x9c]
mov dword [esp + 0x90], ebp
mov ebp, dword [esp + 0x64]
cmp ebp, ebx
jge 0x6d16f1
mov ebx, dword [esp + 0x90]
lea edi, [esp + 0x270]
mov esi, ebx
call fcn.00464aee
mov ecx, dword [esp + 0x94]
cmp dword [esp + 0x290], ecx
jg 0x6d16dc
mov esi, ebp
movzx ebp, byte [esp + 0x288]
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x6d19ce
mov ebp, dword [esp + 0x40]
test ebp, ebp
jge 0x6d16cc
mov ebp, esi
jmp 0x6d1948
mov ebp, esi
mov esi, dword [esp + 0x40]
jmp 0x6d1948
xor eax, eax
mov ecx, eax
call fcn.00464430
mov eax, ebp
mov ecx, ebx
call fcn.00464430
mov ecx, ebp
mov edx, ebx
call fcn.00464470
xor eax, eax
mov ecx, eax
call fcn.00464430
mov eax, esi
mov ecx, ebx
call fcn.00464490
mov ecx, ebx
mov edx, ebp
call fcn.00464470
mov eax, ebx
mov ecx, edi
call fcn.00464430
mov eax, esi
call fcn.00464430
mov dword [esp + 0x74], eax
mov edi, dword [esp + 0xe8]
add edi, 0x34
mov eax, dword [esp + 0xa4]
inc eax
mov dword [esp + 0x54], ebp
mov dword [esp + 0x50], ebx
mov dword [esp + 0xc4], esi
mov ebx, eax
mov ebp, dword [esp + 0x74]
mov esi, ecx
mov eax, dword [esp + 0xc0]
mov ecx, edi
mov edi, edx
mov edx, dword [esp + 0xd8]
mov eax, dword [esp + 0x78]
cmp ebx, eax
jge 0x6d13bf
mov dword [esp + 0xa4], ebx
mov dword [esp + 0xa0], ebp
mov dword [esp + 0x9c], esi
mov dword [esp + 0xec], edi
mov dword [esp + 0xe8], ecx
lea edi, [esp + 0x30c]
mov esi, ecx
call fcn.00464aee
lea eax, [0x75caa0]
mov dword [esp], eax
lea ecx, [esp + 0x100]
mov dword [esp + 4], ecx
lea edx, [esp + 0x334]
mov dword [esp + 8], edx
call fcn.0040cb70
mov eax, dword [esp + 0xc]
movzx eax, byte [eax]
test al, al
je 0x6d1af3
mov eax, dword [esp + 0xa0]
mov ecx, dword [esp + 0x9c]
mov edx, dword [esp + 0xec]
mov ebx, dword [esp + 0x50]
mov ebp, dword [esp + 0x54]
mov esi, dword [esp + 0xc4]
jmp 0x6d1a1f
lea eax, [0x75caa0]
mov dword [esp], eax
lea ecx, [esp + 0x100]
mov dword [esp + 4], ecx
lea edx, [esp + 0x334]
mov dword [esp + 8], edx
call fcn.0040d0c0
mov eax, dword [esp + 0xc]
mov byte [eax], 1
xor eax, eax
mov ecx, dword [esp + 0xa0]
mov edx, dword [esp + 0xec]
mov ebx, dword [esp + 0x9c]
mov ebp, dword [esp + 0x54]
mov esi, dword [esp + 0xc4]
mov edi, dword [esp + 0x50]
jmp 0x6d1b8f
mov eax, dword [esp + 0x74]
mov ecx, dword [esp + 0x70]
mov edx, dword [esp + 0xd4]
mov ebx, dword [esp + 0x50]
mov ebp, dword [esp + 0x54]
mov esi, dword [esp + 0xc4]
jmp 0x6d1a1f
mov edi, dword [esp + 0x6c]
inc edi
mov dword [esp + 0xa8], eax
mov eax, edi
mov edi, dword [esp + 0xa8]
mov edi, ecx
mov ecx, ebx
mov ebx, edx
mov edx, esi
mov esi, edi
mov edi, dword [esp + 0xa8]
mov dword [esp + 0xd4], edx
mov dword [esp + 0x70], ebx
mov dword [esp + 0x6c], eax
mov dword [esp + 0x50], edi
mov dword [esp + 0x74], ecx
mov dword [esp + 0xc4], esi
mov dword [esp + 0x54], ebp
mov ecx, dword [esp + 0x334]
mov edx, dword [esp + 0x338]
mov ecx, dword [ecx + 0x64]
mov dword [esp], edx
call ecx
mov eax, dword [esp + 0x6c]
cmp dword [esp + 4], eax
jle 0x6d1b46
mov ecx, dword [esp + 0x334]
mov edx, dword [esp + 0x338]
mov ecx, dword [ecx + 0x2c]
mov dword [esp], edx
mov dword [esp + 4], eax
call ecx
lea edi, [esp + 0x1d4]
lea esi, [esp + 8]
call fcn.00464aee
mov eax, dword [esp + 0x1e0]
test eax, eax
je 0x6d1c2d
mov edx, dword [esp + 0x70]
mov ebx, dword [esp + 0x74]
mov esi, dword [esp + 0xd4]
mov eax, dword [esp + 0x50]
mov ebp, dword [esp + 0x54]
mov ecx, dword [esp + 0xc4]
jmp 0x6d1b69
mov eax, dword [esp + 0x1ec]
mov ecx, dword [esp + 0x1f0]
mov dword [esp], eax
mov dword [esp + 4], ecx
lea eax, [0x7b5d5d]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 4
call fcn.004bd5d0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
cmp eax, 1
jne 0x6d1c8e
cmp byte [ecx], 0x2d
jne 0x6d1c8e
mov edx, dword [esp + 0x70]
mov ebx, dword [esp + 0x74]
mov esi, dword [esp + 0xd4]
mov eax, dword [esp + 0x50]
mov ebp, dword [esp + 0x54]
mov ecx, dword [esp + 0xc4]
jmp 0x6d1b69
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.006d2a10
mov eax, dword [esp + 0x10]
mov dword [esp + 0xbc], eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x4c], ecx
mov edx, dword [esp + 8]
mov dword [esp + 0xcc], edx
mov ebx, dword [esp + 0xc]
mov dword [esp + 0x5c], ebx
mov dword [esp], edx
mov dword [esp + 4], ebx
call fcn.006d2610
movzx eax, byte [esp + 8]
test al, al
je 0x6d1ce2
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0xcc]
jmp 0x6d1ce6
xor eax, eax
xor ecx, ecx
mov dword [esp + 0x5c], eax
mov dword [esp + 0xcc], ecx
mov edx, dword [esp + 0x32c]
lea ebx, [0x7583c0]
mov dword [esp], ebx
inc edx
mov dword [esp + 0x60], edx
mov dword [esp + 4], edx
mov dword [esp + 8], edx
call fcn.0044b030
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x328]
mov edx, dword [esp + 0x32c]
mov ebx, dword [esp + 0x60]
cmp edx, ebx
jl 0x6d1d2f
mov edx, ebx
mov dword [esp + 0xe4], eax
cmp ecx, eax
je 0x6d1d58
mov dword [esp], eax
mov dword [esp + 4], ecx
shl edx, 2
mov dword [esp + 8], edx
call fcn.00464d50
mov eax, dword [esp + 0xe4]
mov ebx, dword [esp + 0x60]
mov edx, dword [esp + 0x32c]
cmp edx, ebx
jae 0x6d246b
mov ecx, dword [esp + 0x6c]
mov dword [eax + edx*4], ecx
mov edx, dword [esp + 0x1e4]
mov ebx, dword [esp + 0x1e8]
mov dword [esp + 0xf8], edx
mov dword [esp + 0xfc], ebx
mov edx, dword [edx + 0x60]
mov dword [esp], ebx
call edx
mov eax, dword [esp + 8]
test eax, eax
jne 0x6d1de3
mov eax, dword [esp + 0xf8]
mov ecx, dword [esp + 0xfc]
mov eax, dword [eax + 0x50]
mov dword [esp], ecx
call eax
cmp dword [esp + 4], 0x16
jne 0x6d1de3
mov eax, dword [esp + 0xf8]
mov ecx, dword [esp + 0xfc]
mov eax, dword [eax + 0x28]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp + 0xf8], eax
mov dword [esp + 0xfc], ecx
mov eax, dword [esp + 0x5c]
test eax, eax
je 0x6d1df2
mov ecx, 1
jmp 0x6d1e29
movzx ecx, byte [esp + 0x204]
test cl, cl
jne 0x6d1e05
mov ecx, 1
jmp 0x6d1e29
mov eax, dword [esp + 0xf8]
mov ecx, dword [esp + 0xfc]
mov eax, dword [eax + 0x50]
mov dword [esp], ecx
call eax
cmp dword [esp + 4], 0x19
setne al
mov ecx, eax
mov eax, dword [esp + 0x5c]
test cl, cl
je 0x6d1f9e
test eax, eax
jne 0x6d1e45
mov ecx, dword [esp + 0x1d4]
mov edx, dword [esp + 0x1d8]
jmp 0x6d1e4e
mov edx, eax
mov ecx, dword [esp + 0xcc]
mov dword [esp + 0x98], edx
mov dword [esp + 0xcc], ecx
mov eax, dword [esp + 0xbc]
mov dword [esp], eax
mov ebx, dword [esp + 0x4c]
mov dword [esp + 4], ebx
lea ebp, [0x7b8187]
mov dword [esp + 8], ebp
mov dword [esp + 0xc], 9
call fcn.006d2ad0
movzx eax, byte [esp + 0x10]
mov byte [esp + 0x3f], al
mov ecx, dword [esp + 0xbc]
mov dword [esp], ecx
mov ecx, dword [esp + 0x4c]
mov dword [esp + 4], ecx
lea ecx, [0x7b6d8b]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 6
call fcn.006d2ad0
movzx eax, byte [esp + 0x10]
mov ecx, dword [esp + 0x5c]
test ecx, ecx
setne cl
mov byte [esp + 0x3e], cl
lea edi, [esp + 0x2d8]
mov edx, eax
xor eax, eax
call fcn.00464653
mov ecx, dword [esp + 0xcc]
mov dword [esp + 0x2d8], ecx
mov ecx, dword [esp + 0x98]
mov dword [esp + 0x2dc], ecx
movzx ecx, byte [esp + 0x3e]
mov byte [esp + 0x2f0], cl
mov ecx, dword [esp + 0xe4]
mov dword [esp + 0x2f4], ecx
mov ecx, dword [esp + 0x60]
mov dword [esp + 0x2f8], ecx
mov dword [esp + 0x2fc], ecx
mov ecx, dword [esp + 0xf8]
mov ebx, dword [esp + 0xfc]
mov dword [esp + 0x300], ecx
mov dword [esp + 0x304], ebx
movzx ecx, byte [esp + 0x3f]
mov byte [esp + 0x308], cl
mov byte [esp + 0x309], dl
mov ecx, dword [esp + 0x2d8]
mov edx, dword [esp + 0x2dc]
mov dword [esp], 0
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.0044f070
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov dword [esp + 0x2e0], eax
mov dword [esp + 0x2e4], ecx
mov dword [esp + 0x2e8], edx
xor edx, edx
xor ebx, ebx
xor ebp, ebp
jmp 0x6d2224
lea eax, [0x75cbe0]
mov dword [esp], eax
mov ecx, dword [esp + 0xc0]
mov dword [esp + 4], ecx
lea edx, [esp + 0xf8]
mov dword [esp + 8], edx
call fcn.0040d0c0
mov eax, dword [esp + 0xc]
inc dword [eax]
lea eax, [0x75cbe0]
mov dword [esp], eax
mov ecx, dword [esp + 0xc0]
mov dword [esp + 4], ecx
lea edx, [esp + 0xf8]
mov dword [esp + 8], edx
call fcn.0040cb70
mov eax, dword [esp + 0xc]
cmp dword [eax], 1
je 0x6d2009
mov eax, dword [esp + 0x50]
mov ebp, dword [esp + 0x54]
mov ecx, dword [esp + 0xc4]
jmp 0x6d21c4
mov eax, dword [esp + 0xf8]
mov ecx, dword [esp + 0xfc]
mov eax, dword [eax + 0x60]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp + 0x98], ecx
lea edi, [esp + 0x2a4]
mov edx, eax
xor eax, eax
call fcn.00464653
mov dword [esp + 0x2a4], edx
mov ecx, dword [esp + 0x98]
mov dword [esp + 0x2a8], ecx
mov ebx, dword [esp + 0xe4]
mov dword [esp + 0x2c0], ebx
mov ebx, dword [esp + 0x60]
mov dword [esp + 0x2c4], ebx
mov dword [esp + 0x2c8], ebx
mov ebx, dword [esp + 0xfc]
mov ebp, dword [esp + 0xf8]
mov dword [esp + 0x2cc], ebp
mov dword [esp + 0x2d0], ebx
mov dword [esp], 0
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.0044f070
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov dword [esp + 0x2ac], eax
mov dword [esp + 0x2b0], ecx
mov dword [esp + 0x2b4], edx
xor edx, edx
xor ebx, ebx
xor ebp, ebp
jmp 0x6d21dd
lea eax, [0x7e05c4]
jmp 0x6d20f7
test bl, bl
je 0x6d20e3
lea eax, [0x7e08ec]
jmp 0x6d20f7
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x6d20f1
lea eax, [0x7e08e8]
jmp 0x6d20f7
lea eax, [0x7e08f0]
mov dword [esp + 0x2b8], eax
lea edi, [esp + 0x16c]
lea esi, [esp + 0x2a4]
call fcn.00464aee
mov eax, dword [esp + 0x50]
inc eax
mov ecx, dword [esp + 0x54]
cmp ecx, eax
jb 0x6d2129
mov esi, dword [esp + 0xc4]
mov ebp, ecx
jmp 0x6d215e
mov edx, dword [esp + 0xc4]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 1
lea eax, [0x796fe0]
mov dword [esp + 0x10], eax
call fcn.0044b1b0
mov esi, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ebp, dword [esp + 0x1c]
mov dword [esp + 0xc4], esi
imul ecx, eax, 0x34
lea edi, [ecx + esi - 0x34]
mov ecx, dword [0xaab020]
test ecx, ecx
jne 0x6d2184
lea esi, [esp + 0x16c]
call fcn.00464aee
jmp 0x6d21bd
mov dword [esp + 0x94], eax
mov dword [esp + 0x88], ebp
lea eax, [0x796fe0]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x16c]
mov dword [esp + 8], eax
call fcn.00411480
mov eax, dword [esp + 0x94]
mov ebp, dword [esp + 0x88]
mov ecx, dword [esp + 0xc4]
mov edx, dword [esp + 0x70]
mov ebx, dword [esp + 0x74]
mov esi, dword [esp + 0xd4]
jmp 0x6d1b69
inc edx
mov eax, edi
mov ebp, esi
cmp edx, ecx
jge 0x6d20d7
mov esi, ebp
movzx ebp, byte [eax + edx]
xchg ebp, eax
cmp al, 0x80
xchg ebp, eax
jae 0x6d20cf
and ebp, 0xffffffdf
mov edi, eax
lea eax, [ebp - 0x41]
cmp al, 0x19
jbe 0x6d220a
mov esi, 1
jmp 0x6d21d8
xchg ebp, eax
cmp al, 0x4b
xchg ebp, eax
je 0x6d2218
xchg ebp, eax
cmp al, 0x53
xchg ebp, eax
jne 0x6d21d8
mov ebx, 1
jmp 0x6d21d8
inc edx
mov eax, edi
mov ebp, esi
cmp edx, ecx
jge 0x6d2266
mov esi, ebp
movzx ebp, byte [eax + edx]
xchg ebp, eax
cmp al, 0x80
xchg ebp, eax
jae 0x6d225e
and ebp, 0xffffffdf
mov edi, eax
lea eax, [ebp - 0x41]
cmp al, 0x19
jbe 0x6d2249
mov esi, 1
jmp 0x6d221f
xchg ebp, eax
cmp al, 0x4b
xchg ebp, eax
je 0x6d2257
xchg ebp, eax
cmp al, 0x53
xchg ebp, eax
jne 0x6d221f
mov ebx, 1
jmp 0x6d221f
lea eax, [0x7e05c4]
jmp 0x6d2286
test bl, bl
je 0x6d2272
lea eax, [0x7e08ec]
jmp 0x6d2286
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x6d2280
lea eax, [0x7e08e8]
jmp 0x6d2286
lea eax, [0x7e08f0]
mov dword [esp + 0x2ec], eax
lea edi, [esp + 0x1a0]
lea esi, [esp + 0x2d8]
call fcn.00464aee
mov eax, dword [esp + 0x70]
inc eax
mov ecx, dword [esp + 0x74]
cmp ecx, eax
jb 0x6d22b6
mov edx, dword [esp + 0xd4]
jmp 0x6d22eb
mov edx, dword [esp + 0xd4]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 1
lea eax, [0x796fe0]
mov dword [esp + 0x10], eax
call fcn.0044b1b0
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0xd4], edx
mov dword [esp + 0x70], eax
mov dword [esp + 0x74], ecx
imul ebx, eax, 0x34
lea edi, [edx + ebx - 0x34]
mov dword [esp + 0xf4], edi
mov ebx, dword [0xaab020]
test ebx, ebx
jne 0x6d2320
lea esi, [esp + 0x1a0]
call fcn.00464aee
jmp 0x6d233d
lea eax, [0x796fe0]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x1a0]
mov dword [esp + 8], eax
call fcn.00411480
lea eax, [0x75cbe0]
mov dword [esp], eax
mov ecx, dword [esp + 0xdc]
mov dword [esp + 4], ecx
lea edx, [esp + 0x334]
mov dword [esp + 8], edx
call fcn.0040cb70
mov eax, dword [esp + 0xc]
cmp dword [eax], 1
jle 0x6d243d
mov ecx, dword [esp + 0x70]
lea eax, [ecx - 1]
cmp ecx, eax
jbe 0x6d2466
lea edi, [esp + 0x3a8]
mov esi, dword [esp + 0xf4]
call fcn.00464aee
mov eax, dword [esp + 0x70]
inc eax
mov ecx, dword [esp + 0x74]
cmp ecx, eax
jb 0x6d23a6
mov edx, dword [esp + 0xd4]
jmp 0x6d23db
mov edx, dword [esp + 0xd4]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 1
lea eax, [0x796fe0]
mov dword [esp + 0x10], eax
call fcn.0044b1b0
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x74], ecx
imul ebx, eax, 0x34
lea edi, [ebx + edx - 0x34]
mov ebx, dword [0xaab020]
test ebx, ebx
jne 0x6d23fe
lea esi, [esp + 0x3a8]
call fcn.00464aee
jmp 0x6d2437
mov dword [esp + 0xe0], edx
mov dword [esp + 0x84], eax
lea eax, [0x796fe0]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x3a8]
mov dword [esp + 8], eax
call fcn.00411480
mov eax, dword [esp + 0x84]
mov edx, dword [esp + 0xe0]
mov ecx, dword [esp + 0x74]
jmp 0x6d244c
mov ecx, dword [esp + 0x74]
mov eax, dword [esp + 0x70]
mov edx, dword [esp + 0xd4]
mov ebx, ecx
mov esi, edx
mov ebp, dword [esp + 0x54]
mov ecx, dword [esp + 0xc4]
mov edx, eax
mov eax, dword [esp + 0x50]
jmp 0x6d1b69
call fcn.00464430
mov eax, edx
mov ecx, ebx
call fcn.00464430
nop
call fcn.00462fa0
jmp fcn.006d12c0