Function at 0x6b4c1cf0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x24
mov esi, ecx
mov edi, dword [esp + 0x3c]
cmp edi, 4
ja 0x6b4c1d17
push str.Host_key_data_is_too_short
push 0xfffffffffffffff6
push esi
call fcn.6b4c5c00
add esp, 0x30
jmp 0x6b4c272c
mov ebx, edx
mov ebp, dword [esp + 0x4c]
mov eax, dword [ebp]
cmp eax, 2
je 0x6b4c1d3c
test eax, eax
jne 0x6b4c2630
call fcn.6b537210
mov dword [ebp + 0x70], eax
mov dword [ebp], 2
mov dword [esp + 0x14], ebx
mov eax, dword [esp + 0x38]
mov dword [esp + 0x18], eax
mov dword [esp + 0x20], edi
inc eax
mov dword [esp + 0x1c], eax
lea eax, [esi + 0x60]
mov edi, esp
lea ecx, [esp + 0x18]
push edi
push eax
push ecx
push esi
call fcn.6b4c6430
add esp, 0x10
test eax, eax
je 0x6b4c1d76
push str.Unable_to_allocate_memory_for_a_copy_of_the_host_key
push 0xfffffffffffffffa
jmp 0x6b4c26ed
mov eax, dword [esp]
mov dword [esi + 0x64], eax
lea ebx, [esp + 4]
push ebx
call fcn.6b4d59e0
add esp, 4
xor ebp, ebp
test eax, eax
mov eax, 0
je 0x6b4c1dc9
push dword [esi + 0x64]
push dword [esi + 0x60]
push dword [esp + 0xc]
call fcn.6b564620
add esp, 0xc
lea eax, [esi + 0x68]
push 0
push eax
push dword [esp + 0xc]
call fcn.6b564700
add esp, 0xc
push dword [esp + 4]
call fcn.6b564090
add esp, 4
mov eax, 1
mov dword [esi + 0x78], eax
push ebx
call fcn.6b4d58a0
add esp, 4
test eax, eax
je 0x6b4c1e0e
push dword [esi + 0x64]
push dword [esi + 0x60]
push dword [esp + 0xc]
call fcn.6b564620
add esp, 0xc
lea eax, [esi + 0x7c]
push 0
push eax
push dword [esp + 0xc]
call fcn.6b564700
add esp, 0xc
push dword [esp + 4]
call fcn.6b564090
add esp, 4
mov ebp, 1
mov dword [esi + 0x90], ebp
push ebx
call fcn.6b4d58f0
add esp, 4
test eax, eax
je 0x6b4c1e5b
push dword [esi + 0x64]
push dword [esi + 0x60]
push dword [esp + 0xc]
call fcn.6b564620
add esp, 0xc
lea eax, [esi + 0x94]
push 0
push eax
push dword [esp + 0xc]
call fcn.6b564700
add esp, 0xc
push dword [esp + 4]
call fcn.6b564090
add esp, 4
mov eax, 1
jmp 0x6b4c1e5d
xor eax, eax
mov ebp, dword [esp + 0x4c]
mov dword [esi + 0xb4], eax
mov eax, dword [esi + 0x58]
lea ebx, [esi + 0x5c]
push ebx
push dword [esi + 0x64]
push dword [esi + 0x60]
push esi
call dword [eax + 8]
add esp, 0x10
test eax, eax
je 0x6b4c1e8b
push str.Unable_to_initialize_hostkey_importer
push 0xfffffffffffffff6
jmp 0x6b4c26ed
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ebx
lea eax, [esp + 8]
push edi
push eax
lea esi, [esp + 0x20]
push esi
call fcn.6b4c63e0
add esp, 0xc
test eax, eax
je 0x6b4c1eba
push str.Unexpected_key_length
push 0xfffffffffffffff2
mov esi, dword [esp + 0x14]
jmp 0x6b4c26ed
lea eax, [ebp + 0x7c]
lea ecx, [ebp + 0x88]
push ecx
push eax
push esi
call fcn.6b4c63e0
add esp, 0xc
test eax, eax
mov esi, dword [esp + 0xc]
je 0x6b4c1ee2
push str.Unexpected_ecdh_server_sig_length
push 0xfffffffffffffff6
jmp 0x6b4c26ed
lea eax, [ebp + 0x70]
push dword [esp]
push dword [esp + 0xc]
push dword [esp + 0x50]
push eax
call fcn.6b4d5cd0
add esp, 0x10
test eax, eax
je 0x6b4c1f09
push str.Unable_to_create_ECDH_shared_secret
push 0xfffffffffffffffb
jmp 0x6b4c26ed
push dword [ebp + 0x70]
call fcn.6b536f30
add esp, 4
lea ecx, [eax + 7]
add eax, 0xe
test ecx, ecx
cmovns eax, ecx
sar eax, 3
add eax, 5
mov dword [ebp + 0x84], eax
push dword [ebp + 0x70]
call fcn.6b536f30
add esp, 4
test al, 7
mov eax, dword [ebp + 0x84]
je 0x6b4c1f47
dec eax
mov dword [ebp + 0x84], eax
mov ebx, dword [esp + 0x14]
push esi
push eax
call dword [esi + 4]
add esp, 8
mov dword [ebp + 0x78], eax
test eax, eax
je 0x6b4c202b
mov ecx, dword [ebp + 0x84]
add ecx, 0xfffffffc
push ecx
push eax
call fcn.6b4c5d10
add esp, 8
push dword [ebp + 0x70]
call fcn.6b536f30
add esp, 4
mov ecx, 4
test al, 7
jne 0x6b4c1f91
mov eax, dword [ebp + 0x78]
mov byte [eax + 4], 0
mov ecx, 5
add ecx, dword [ebp + 0x78]
push ecx
push dword [ebp + 0x70]
call fcn.6b537a20
add esp, 8
cmp ebx, 0x2cc
je 0x6b4c2035
cmp ebx, 0x2cb
je 0x6b4c209c
cmp ebx, 0x19f
jne 0x6b4c2620
lea eax, [esp + 4]
mov dword [ebp + 0x8c], eax
push eax
call fcn.6b4d58f0
add esp, 4
mov eax, dword [esi + 0xf0]
add ebp, 0x10
test eax, eax
je 0x6b4c2103
push eax
call sub.msvcrt.dll_strlen
add esp, 4
add eax, 0xfffffffe
push eax
push ebp
call fcn.6b4c5d10
add esp, 8
push 4
push ebp
push dword [esp + 0xc]
call fcn.6b564620
add esp, 0xc
mov edi, dword [esp + 4]
mov ebx, dword [esi + 0xf0]
push ebx
call sub.msvcrt.dll_strlen
add esp, 4
add eax, 0xfffffffe
push eax
push ebx
push edi
jmp 0x6b4c2128
push str.Unable_to_allocate_buffer_for_K
jmp 0x6b4c1d6f
lea eax, [esp + 4]
mov dword [ebp + 0x8c], eax
push eax
call fcn.6b4d5990
add esp, 4
mov eax, dword [esi + 0xf0]
add ebp, 0x10
test eax, eax
je 0x6b4c22ac
push eax
call sub.msvcrt.dll_strlen
add esp, 4
add eax, 0xfffffffe
push eax
push ebp
call fcn.6b4c5d10
add esp, 8
push 4
push ebp
push dword [esp + 0xc]
call fcn.6b564620
add esp, 0xc
mov edi, dword [esp + 4]
mov ebx, dword [esi + 0xf0]
push ebx
call sub.msvcrt.dll_strlen
add esp, 4
add eax, 0xfffffffe
push eax
push ebx
push edi
jmp 0x6b4c22d1
lea eax, [esp + 4]
mov dword [ebp + 0x8c], eax
push eax
call fcn.6b4d5940
add esp, 4
mov eax, dword [esi + 0xf0]
add ebp, 0x10
test eax, eax
je 0x6b4c2455
push eax
call sub.msvcrt.dll_strlen
add esp, 4
add eax, 0xfffffffe
push eax
push ebp
call fcn.6b4c5d10
add esp, 8
push 4
push ebp
push dword [esp + 0xc]
call fcn.6b564620
add esp, 0xc
mov edi, dword [esp + 4]
mov ebx, dword [esi + 0xf0]
push ebx
call sub.msvcrt.dll_strlen
add esp, 4
add eax, 0xfffffffe
push eax
push ebx
push edi
jmp 0x6b4c247a
push 0x16
push ebp
call fcn.6b4c5d10
add esp, 8
push 4
push ebp
push dword [esp + 0xc]
call fcn.6b564620
add esp, 0xc
push 0x16
push str.SSH_2.0_libssh2_1.10.0
push dword [esp + 0xc]
call fcn.6b564620
add esp, 0xc
push dword [esi + 0xb8]
call sub.msvcrt.dll_strlen
add esp, 4
push eax
push ebp
call fcn.6b4c5d10
add esp, 8
push 4
push ebp
push dword [esp + 0xc]
call fcn.6b564620
add esp, 0xc
mov edi, dword [esp + 4]
mov ebx, dword [esi + 0xb8]
push ebx
call sub.msvcrt.dll_strlen
add esp, 4
push eax
push ebx
push edi
call fcn.6b564620
add esp, 0xc
push dword [esi + 0xf8]
push ebp
call fcn.6b4c5d10
add esp, 8
push 4
push ebp
push dword [esp + 0xc]
call fcn.6b564620
add esp, 0xc
push dword [esi + 0xf8]
push dword [esi + 0xf4]
push dword [esp + 0xc]
call fcn.6b564620
add esp, 0xc
push dword [esi + 0xc0]
push ebp
call fcn.6b4c5d10
add esp, 8
push 4
push ebp
push dword [esp + 0xc]
call fcn.6b564620
add esp, 0xc
push dword [esi + 0xc0]
push dword [esi + 0xbc]
push dword [esp + 0xc]
call fcn.6b564620
add esp, 0xc
push dword [esi + 0x64]
push ebp
call fcn.6b4c5d10
add esp, 8
push 4
push ebp
push dword [esp + 0xc]
call fcn.6b564620
add esp, 0xc
push dword [esi + 0x64]
push dword [esi + 0x60]
push dword [esp + 0xc]
call fcn.6b564620
add esp, 0xc
mov edi, dword [esp + 0x44]
push edi
push ebp
call fcn.6b4c5d10
add esp, 8
push 4
push ebp
push dword [esp + 0xc]
call fcn.6b564620
add esp, 0xc
push edi
push dword [esp + 0x44]
push dword [esp + 0xc]
call fcn.6b564620
add esp, 0xc
push dword [esp]
push ebp
call fcn.6b4c5d10
add esp, 8
push 4
push ebp
push dword [esp + 0xc]
call fcn.6b564620
add esp, 0xc
push dword [esp]
push dword [esp + 0xc]
push dword [esp + 0xc]
call fcn.6b564620
add esp, 0xc
mov edi, dword [esp + 0x4c]
push dword [edi + 0x84]
push dword [edi + 0x78]
push dword [esp + 0xc]
call fcn.6b564620
add esp, 0xc
push 0
push ebp
push dword [esp + 0xc]
call fcn.6b564700
add esp, 0xc
push dword [esp + 4]
call fcn.6b564090
add esp, 4
mov eax, dword [esi + 0x58]
push dword [esp + 0x10]
push 0x20
jmp 0x6b4c25f9
push 0x16
push ebp
call fcn.6b4c5d10
add esp, 8
push 4
push ebp
push dword [esp + 0xc]
call fcn.6b564620
add esp, 0xc
push 0x16
push str.SSH_2.0_libssh2_1.10.0
push dword [esp + 0xc]
call fcn.6b564620
add esp, 0xc
push dword [esi + 0xb8]
call sub.msvcrt.dll_strlen
add esp, 4
push eax
push ebp
call fcn.6b4c5d10
add esp, 8
push 4
push ebp
push dword [esp + 0xc]
call fcn.6b564620
add esp, 0xc
mov edi, dword [esp + 4]
mov ebx, dword [esi + 0xb8]
push ebx
call sub.msvcrt.dll_strlen
add esp, 4
push eax
push ebx
push edi
call fcn.6b564620
add esp, 0xc
push dword [esi + 0xf8]
push ebp
call fcn.6b4c5d10
add esp, 8
push 4
push ebp
push dword [esp + 0xc]
call fcn.6b564620
add esp, 0xc
push dword [esi + 0xf8]
push dword [esi + 0xf4]
push dword [esp + 0xc]
call fcn.6b564620
add esp, 0xc
push dword [esi + 0xc0]
push ebp
call fcn.6b4c5d10
add esp, 8
push 4
push ebp
push dword [esp + 0xc]
call fcn.6b564620
add esp, 0xc
push dword [esi + 0xc0]
push dword [esi + 0xbc]
push dword [esp + 0xc]
call fcn.6b564620
add esp, 0xc
push dword [esi + 0x64]
push ebp
call fcn.6b4c5d10
add esp, 8
push 4
push ebp
push dword [esp + 0xc]
call fcn.6b564620
add esp, 0xc
push dword [esi + 0x64]
push dword [esi + 0x60]
push dword [esp + 0xc]
call fcn.6b564620
add esp, 0xc
mov edi, dword [esp + 0x44]
push edi
push ebp
call fcn.6b4c5d10
add esp, 8
push 4
push ebp
push dword [esp + 0xc]
call fcn.6b564620
add esp, 0xc
push edi
push dword [esp + 0x44]
push dword [esp + 0xc]
call fcn.6b564620
add esp, 0xc
push dword [esp]
push ebp
call fcn.6b4c5d10
add esp, 8
push 4
push ebp
push dword [esp + 0xc]
call fcn.6b564620
add esp, 0xc
push dword [esp]
push dword [esp + 0xc]
push dword [esp + 0xc]
call fcn.6b564620
add esp, 0xc
mov edi, dword [esp + 0x4c]
push dword [edi + 0x84]
push dword [edi + 0x78]
push dword [esp + 0xc]
call fcn.6b564620
add esp, 0xc
push 0
push ebp
push dword [esp + 0xc]
call fcn.6b564700
add esp, 0xc
push dword [esp + 4]
call fcn.6b564090
add esp, 4
mov eax, dword [esi + 0x58]
push dword [esp + 0x10]
push 0x40
jmp 0x6b4c25f9
push 0x16
push ebp
call fcn.6b4c5d10
add esp, 8
push 4
push ebp
push dword [esp + 0xc]
call fcn.6b564620
add esp, 0xc
push 0x16
push str.SSH_2.0_libssh2_1.10.0
push dword [esp + 0xc]
call fcn.6b564620
add esp, 0xc
push dword [esi + 0xb8]
call sub.msvcrt.dll_strlen
add esp, 4
push eax
push ebp
call fcn.6b4c5d10
add esp, 8
push 4
push ebp
push dword [esp + 0xc]
call fcn.6b564620
add esp, 0xc
mov edi, dword [esp + 4]
mov ebx, dword [esi + 0xb8]
push ebx
call sub.msvcrt.dll_strlen
add esp, 4
push eax
push ebx
push edi
call fcn.6b564620
add esp, 0xc
push dword [esi + 0xf8]
push ebp
call fcn.6b4c5d10
add esp, 8
push 4
push ebp
push dword [esp + 0xc]
call fcn.6b564620
add esp, 0xc
push dword [esi + 0xf8]
push dword [esi + 0xf4]
push dword [esp + 0xc]
call fcn.6b564620
add esp, 0xc
push dword [esi + 0xc0]
push ebp
call fcn.6b4c5d10
add esp, 8
push 4
push ebp
push dword [esp + 0xc]
call fcn.6b564620
add esp, 0xc
push dword [esi + 0xc0]
push dword [esi + 0xbc]
push dword [esp + 0xc]
call fcn.6b564620
add esp, 0xc
push dword [esi + 0x64]
push ebp
call fcn.6b4c5d10
add esp, 8
push 4
push ebp
push dword [esp + 0xc]
call fcn.6b564620
add esp, 0xc
push dword [esi + 0x64]
push dword [esi + 0x60]
push dword [esp + 0xc]
call fcn.6b564620
add esp, 0xc
mov edi, dword [esp + 0x44]
push edi
push ebp
call fcn.6b4c5d10
add esp, 8
push 4
push ebp
push dword [esp + 0xc]
call fcn.6b564620
add esp, 0xc
push edi
push dword [esp + 0x44]
push dword [esp + 0xc]
call fcn.6b564620
add esp, 0xc
push dword [esp]
push ebp
call fcn.6b4c5d10
add esp, 8
push 4
push ebp
push dword [esp + 0xc]
call fcn.6b564620
add esp, 0xc
push dword [esp]
push dword [esp + 0xc]
push dword [esp + 0xc]
call fcn.6b564620
add esp, 0xc
mov edi, dword [esp + 0x4c]
push dword [edi + 0x84]
push dword [edi + 0x78]
push dword [esp + 0xc]
call fcn.6b564620
add esp, 0xc
push 0
push ebp
push dword [esp + 0xc]
call fcn.6b564700
add esp, 0xc
push dword [esp + 4]
call fcn.6b564090
add esp, 4
mov eax, dword [esi + 0x58]
push dword [esp + 0x10]
push 0x30
push ebp
mov ebp, edi
push dword [edi + 0x88]
push dword [edi + 0x7c]
push esi
call dword [eax + 0x14]
add esp, 0x18
test eax, eax
mov ebx, dword [esp + 0x14]
je 0x6b4c2620
push str.Unable_to_verify_hostkey_signature
push 0xfffffffffffffff5
jmp 0x6b4c26ed
mov byte [ebp + 0x50], 0x15
mov dword [ebp], 3
mov eax, 3
cmp eax, 5
je 0x6b4c266f
cmp eax, 3
jne 0x6b4c3ac8
mov edi, ebx
lea eax, [ebp + 0x50]
push 0
push 0
push 1
push eax
push esi
call fcn.6b4d2110
add esp, 0x14
mov ebx, eax
cmp eax, 0xffffffdb
je 0x6b4c2727
test ebx, ebx
jne 0x6b4c26e7
mov dword [ebp], 5
mov ebx, edi
mov dword [esp + 0x14], ebx
lea edi, [ebp + 0xc]
lea eax, [ebp + 0x5c]
lea ecx, [ebp + 0x90]
push ecx
push 0
push 0
push 0
push eax
push edi
push 0x15
push esi
call fcn.6b4c7730
add esp, 0x20
mov ebx, eax
cmp eax, 0xffffffdb
je 0x6b4c2727
test ebx, ebx
jne 0x6b4c26e0
or byte [esi + 0x34], 2
push esi
push dword [edi]
call dword [esi + 0xc]
add esp, 8
cmp dword [esi + 0x48], 0
mov ebx, dword [esp + 0x14]
jne 0x6b4c2761
cmp ebx, 0x19f
je 0x6b4c2731
cmp ebx, 0x2cc
je 0x6b4c2738
cmp ebx, 0x2cb
jne 0x6b4c2982
mov edi, 0x30
jmp 0x6b4c273d
push str.Timed_out_waiting_for_NEWKEYS
jmp 0x6b4c26ec
push str.Unable_to_send_NEWKEYS_message
push ebx
push esi
call fcn.6b4c5c00
add esp, 0xc
mov ebx, eax
push dword [ebp + 0x70]
call fcn.6b537100
add esp, 4
mov dword [ebp + 0x70], 0
mov eax, dword [ebp + 0x78]
test eax, eax
je 0x6b4c2720
push esi
push eax
call dword [esi + 0xc]
add esp, 8
mov dword [ebp + 0x78], 0
mov dword [ebp], 0
mov eax, ebx
add esp, 0x24
pop esi
pop edi
pop ebx
pop ebp
ret
mov edi, 0x20
jmp 0x6b4c273d
mov edi, 0x40
push esi
push edi
call dword [esi + 4]
add esp, 8
mov dword [esi + 0x48], eax
test eax, eax
je 0x6b4c2978
lea ecx, [ebp + 0x10]
push edi
push ecx
push eax
call sub.msvcrt.dll_memcpy
add esp, 0xc
mov dword [esi + 0x4c], edi
mov eax, dword [esi + 0xfc]
mov ecx, dword [eax + 0x20]
test ecx, ecx
je 0x6b4c2781
lea eax, [esi + 0x100]
push eax
push esi
call ecx
add esp, 8
mov eax, dword [esi + 0xfc]
cmp dword [eax + 0x18], 0
je 0x6b4c2ddc
mov dword [esp + 0x18], 0
mov dword [esp + 8], 0
cmp ebx, 0x19f
jne 0x6b4c2880
mov eax, dword [eax + 0xc]
add eax, 0x20
push esi
push eax
call dword [esi + 4]
add esp, 8
mov dword [esp + 0xc], eax
test eax, eax
je 0x6b4c2a63
mov eax, dword [esi + 0xfc]
cmp dword [eax + 0xc], 0
je 0x6b4c2a63
mov eax, dword [esp + 0x4c]
lea edi, [eax + 0x10]
xor ebp, ebp
jmp 0x6b4c2831
push 1
push str.ACBDEF
push eax
call fcn.6b564620
add esp, 0xc
push dword [esi + 0x4c]
push dword [esi + 0x48]
push dword [esp + 8]
call fcn.6b564620
add esp, 0xc
mov ebx, dword [esp + 0xc]
lea eax, [ebx + ebp]
push 0
push eax
push dword [esp + 8]
call fcn.6b564700
add esp, 0xc
push dword [esp]
call fcn.6b564090
add esp, 4
add ebp, 0x20
mov eax, dword [esi + 0xfc]
cmp ebp, dword [eax + 0xc]
jae 0x6b4c2a63
mov eax, esp
push eax
call fcn.6b4d58f0
add esp, 4
mov eax, dword [esp + 0x4c]
push dword [eax + 0x84]
push dword [eax + 0x78]
push dword [esp + 8]
call fcn.6b564620
add esp, 0xc
push 0x20
push edi
push dword [esp + 8]
call fcn.6b564620
add esp, 0xc
test ebp, ebp
mov eax, dword [esp]
je 0x6b4c27dc
push ebp
mov ebx, dword [esp + 0x10]
push ebx
push eax
call fcn.6b564620
add esp, 0xc
jmp 0x6b4c2802
cmp ebx, 0x2cc
je 0x6b4c298e
mov ecx, ebx
mov ebx, 0xffffffff
cmp ecx, 0x2cb
jne 0x6b4c26f8
mov eax, dword [eax + 0xc]
add eax, 0x30
push esi
push eax
call dword [esi + 4]
add esp, 8
mov dword [esp + 0xc], eax
test eax, eax
je 0x6b4c2a63
mov eax, dword [esi + 0xfc]
cmp dword [eax + 0xc], 0
je 0x6b4c2a63
mov eax, dword [esp + 0x4c]
lea edi, [eax + 0x10]
xor ebp, ebp
jmp 0x6b4c2929
push 1
push str.ACBDEF
push eax
call fcn.6b564620
add esp, 0xc
push dword [esi + 0x4c]
push dword [esi + 0x48]
push dword [esp + 8]
call fcn.6b564620
add esp, 0xc
mov ebx, dword [esp + 0xc]
lea eax, [ebx + ebp]
push 0
push eax
push dword [esp + 8]
call fcn.6b564700
add esp, 0xc
push dword [esp]
call fcn.6b564090
add esp, 4
add ebp, 0x30
mov eax, dword [esi + 0xfc]
cmp ebp, dword [eax + 0xc]
jae 0x6b4c2a63
mov eax, esp
push eax
call fcn.6b4d5940
add esp, 4
mov eax, dword [esp + 0x4c]
push dword [eax + 0x84]
push dword [eax + 0x78]
push dword [esp + 8]
call fcn.6b564620
add esp, 0xc
push 0x30
push edi
push dword [esp + 8]
call fcn.6b564620
add esp, 0xc
test ebp, ebp
mov eax, dword [esp]
je 0x6b4c28d4
push ebp
mov ebx, dword [esp + 0x10]
push ebx
push eax
call fcn.6b564620
add esp, 0xc
jmp 0x6b4c28fa
push str.Unable_to_allocate_buffer_for_SHA_digest
jmp 0x6b4c1d6f
push str.Unknown_SHA_digest_for_EC_curve
push 0xfffffffffffffffb
jmp 0x6b4c26ed
mov eax, dword [eax + 0xc]
add eax, 0x40
push esi
push eax
call dword [esi + 4]
add esp, 8
mov dword [esp + 0xc], eax
test eax, eax
je 0x6b4c2a63
mov eax, dword [esi + 0xfc]
cmp dword [eax + 0xc], 0
je 0x6b4c2a63
mov eax, dword [esp + 0x4c]
lea edi, [eax + 0x10]
xor ebp, ebp
jmp 0x6b4c2a14
push 1
push str.ACBDEF
push eax
call fcn.6b564620
add esp, 0xc
push dword [esi + 0x4c]
push dword [esi + 0x48]
push dword [esp + 8]
call fcn.6b564620
add esp, 0xc
mov ebx, dword [esp + 0xc]
lea eax, [ebx + ebp]
push 0
push eax
push dword [esp + 8]
call fcn.6b564700
add esp, 0xc
push dword [esp]
call fcn.6b564090
add esp, 4
add ebp, 0x40
mov eax, dword [esi + 0xfc]
cmp ebp, dword [eax + 0xc]
jae 0x6b4c2a63
mov eax, esp
push eax
call fcn.6b4d5990
add esp, 4
mov eax, dword [esp + 0x4c]
push dword [eax + 0x84]
push dword [eax + 0x78]
push dword [esp + 8]
call fcn.6b564620
add esp, 0xc
push 0x40
push edi
push dword [esp + 8]
call fcn.6b564620
add esp, 0xc
test ebp, ebp
mov eax, dword [esp]
je 0x6b4c29c3
push ebp
mov ebx, dword [esp + 0x10]
push ebx
push eax
call fcn.6b564620
add esp, 0xc
jmp 0x6b4c29e9
cmp dword [esp + 0xc], 0
mov ebp, dword [esp + 0x4c]
je 0x6b4c2b60
mov eax, dword [esp + 0x14]
cmp eax, 0x19f
jne 0x6b4c2b6a
mov eax, dword [esi + 0xfc]
mov eax, dword [eax + 0x10]
add eax, 0x20
push esi
push eax
call dword [esi + 4]
add esp, 8
mov dword [esp + 0x10], eax
test eax, eax
je 0x6b4c2d3a
mov eax, dword [esi + 0xfc]
cmp dword [eax + 0x10], 0
je 0x6b4c2d3a
mov eax, dword [esp + 0x4c]
lea edi, [eax + 0x10]
xor ebp, ebp
jmp 0x6b4c2b11
push 1
push 0x6b748d46
push eax
call fcn.6b564620
add esp, 0xc
push dword [esi + 0x4c]
push dword [esi + 0x48]
push dword [esp + 8]
call fcn.6b564620
add esp, 0xc
mov ebx, dword [esp + 0x10]
lea eax, [ebx + ebp]
push 0
push eax
push dword [esp + 8]
call fcn.6b564700
add esp, 0xc
push dword [esp]
call fcn.6b564090
add esp, 4
add ebp, 0x20
mov eax, dword [esi + 0xfc]
cmp ebp, dword [eax + 0x10]
jae 0x6b4c2d3a
mov eax, esp
push eax
call fcn.6b4d58f0
add esp, 4
mov eax, dword [esp + 0x4c]
push dword [eax + 0x84]
push dword [eax + 0x78]
push dword [esp + 8]
call fcn.6b564620
add esp, 0xc
push 0x20
push edi
push dword [esp + 8]
call fcn.6b564620
add esp, 0xc
test ebp, ebp
mov eax, dword [esp]
je 0x6b4c2abc
push ebp
mov ebx, dword [esp + 0x14]
push ebx
push eax
call fcn.6b564620
add esp, 0xc
jmp 0x6b4c2ae2
mov ebx, 0xffffffff
jmp 0x6b4c26f8
cmp eax, 0x2cc
je 0x6b4c2c5f
cmp eax, 0x2cb
jne 0x6b4c2d7d
mov eax, dword [esi + 0xfc]
mov eax, dword [eax + 0x10]
add eax, 0x30
push esi
push eax
call dword [esi + 4]
add esp, 8
mov dword [esp + 0x10], eax
test eax, eax
je 0x6b4c2d3a
mov eax, dword [esi + 0xfc]
cmp dword [eax + 0x10], 0
je 0x6b4c2d3a
mov eax, dword [esp + 0x4c]
lea edi, [eax + 0x10]
xor ebp, ebp
jmp 0x6b4c2c10
push 1
push 0x6b748d46
push eax
call fcn.6b564620
add esp, 0xc
push dword [esi + 0x4c]
push dword [esi + 0x48]
push dword [esp + 8]
call fcn.6b564620
add esp, 0xc
mov ebx, dword [esp + 0x10]
lea eax, [ebx + ebp]
push 0
push eax
push dword [esp + 8]
call fcn.6b564700
add esp, 0xc
push dword [esp]
call fcn.6b564090
add esp, 4
add ebp, 0x30
mov eax, dword [esi + 0xfc]
cmp ebp, dword [eax + 0x10]
jae 0x6b4c2d3a
mov eax, esp
push eax
call fcn.6b4d5940
add esp, 4
mov eax, dword [esp + 0x4c]
push dword [eax + 0x84]
push dword [eax + 0x78]
push dword [esp + 8]
call fcn.6b564620
add esp, 0xc
push 0x30
push edi
push dword [esp + 8]
call fcn.6b564620
add esp, 0xc
test ebp, ebp
mov eax, dword [esp]
je 0x6b4c2bbb
push ebp
mov ebx, dword [esp + 0x14]
push ebx
push eax
call fcn.6b564620
add esp, 0xc
jmp 0x6b4c2be1
mov eax, dword [esi + 0xfc]
mov eax, dword [eax + 0x10]
add eax, 0x40
push esi
push eax
call dword [esi + 4]
add esp, 8
mov dword [esp + 0x10], eax
test eax, eax
je 0x6b4c2d3a
mov eax, dword [esi + 0xfc]
cmp dword [eax + 0x10], 0
je 0x6b4c2d3a
mov eax, dword [esp + 0x4c]
lea edi, [eax + 0x10]
xor ebp, ebp
jmp 0x6b4c2ceb
push 1
push 0x6b748d46
push eax
call fcn.6b564620
add esp, 0xc
push dword [esi + 0x4c]
push dword [esi + 0x48]
push dword [esp + 8]
call fcn.6b564620
add esp, 0xc
mov ebx, dword [esp + 0x10]
lea eax, [ebx + ebp]
push 0
push eax
push dword [esp + 8]
call fcn.6b564700
add esp, 0xc
push dword [esp]
call fcn.6b564090
add esp, 4
add ebp, 0x40
mov eax, dword [esi + 0xfc]
cmp ebp, dword [eax + 0x10]
jae 0x6b4c2d3a
mov eax, esp
push eax
call fcn.6b4d5990
add esp, 4
mov eax, dword [esp + 0x4c]
push dword [eax + 0x84]
push dword [eax + 0x78]
push dword [esp + 8]
call fcn.6b564620
add esp, 0xc
push 0x40
push edi
push dword [esp + 8]
call fcn.6b564620
add esp, 0xc
test ebp, ebp
mov eax, dword [esp]
je 0x6b4c2c9a
push ebp
mov ebx, dword [esp + 0x14]
push ebx
push eax
call fcn.6b564620
add esp, 0xc
jmp 0x6b4c2cc0
mov edi, dword [esp + 0x10]
test edi, edi
mov ebp, dword [esp + 0x4c]
je 0x6b4c2d7d
mov eax, dword [esi + 0xfc]
lea ecx, [esi + 0x100]
lea edx, [esp + 8]
lea ebx, [esp + 0x18]
push ecx
push 1
push edx
push edi
push ebx
mov ebx, dword [esp + 0x20]
push ebx
push eax
push esi
call dword [eax + 0x18]
add esp, 0x20
test eax, eax
je 0x6b4c2d92
push esi
push ebx
call dword [esi + 0xc]
add esp, 8
push esi
push edi
jmp 0x6b4c2d82
push esi
push dword [esp + 0x10]
call dword [esi + 0xc]
add esp, 8
mov ebx, 0xfffffffb
jmp 0x6b4c26f8
cmp dword [esp + 0x18], 0
je 0x6b4c2db3
mov eax, dword [esi + 0xfc]
push dword [eax + 0xc]
push ebx
call fcn.6b4c6250
add esp, 8
push esi
push ebx
call dword [esi + 0xc]
add esp, 8
cmp dword [esp + 8], 0
mov ebx, dword [esp + 0x14]
je 0x6b4c2ddc
mov eax, dword [esi + 0xfc]
push dword [eax + 0x10]
mov edi, dword [esp + 0x14]
push edi
call fcn.6b4c6250
add esp, 8
push esi
push edi
call dword [esi + 0xc]
add esp, 8
mov eax, dword [esi + 0xc4]
mov ecx, dword [eax + 0x20]
test ecx, ecx
je 0x6b4c2dfc
lea eax, [esi + 0xc8]
push eax
push esi
call ecx
add esp, 8
mov eax, dword [esi + 0xc4]
cmp dword [eax + 0x18], 0
je 0x6b4c342b
mov dword [esp + 0x18], 0
mov dword [esp + 8], 0
cmp ebx, 0x19f
jne 0x6b4c2efb
mov eax, dword [eax + 0xc]
add eax, 0x20
push esi
push eax
call dword [esi + 4]
add esp, 8
mov dword [esp + 0xc], eax
test eax, eax
je 0x6b4c30c1
mov eax, dword [esi + 0xc4]
cmp dword [eax + 0xc], 0
je 0x6b4c30c1
mov eax, dword [esp + 0x4c]
lea edi, [eax + 0x10]
xor ebp, ebp
jmp 0x6b4c2eac
push 1
push 0x6b748d48
push eax
call fcn.6b564620
add esp, 0xc
push dword [esi + 0x4c]
push dword [esi + 0x48]
push dword [esp + 8]
call fcn.6b564620
add esp, 0xc
mov ebx, dword [esp + 0xc]
lea eax, [ebx + ebp]
push 0
push eax
push dword [esp + 8]
call fcn.6b564700
add esp, 0xc
push dword [esp]
call fcn.6b564090
add esp, 4
add ebp, 0x20
mov eax, dword [esi + 0xc4]
cmp ebp, dword [eax + 0xc]
jae 0x6b4c30c1
mov eax, esp
push eax
call fcn.6b4d58f0
add esp, 4
mov eax, dword [esp + 0x4c]
push dword [eax + 0x84]
push dword [eax + 0x78]
push dword [esp + 8]
call fcn.6b564620
add esp, 0xc
push 0x20
push edi
push dword [esp + 8]
call fcn.6b564620
add esp, 0xc
test ebp, ebp
mov eax, dword [esp]
je 0x6b4c2e57
push ebp
mov ebx, dword [esp + 0x10]
push ebx
push eax
call fcn.6b564620
add esp, 0xc
jmp 0x6b4c2e7d
cmp ebx, 0x2cc
je 0x6b4c2fec
cmp ebx, 0x2cb
jne 0x6b4c3acf
mov eax, dword [eax + 0xc]
add eax, 0x30
push esi
push eax
call dword [esi + 4]
add esp, 8
mov dword [esp + 0xc], eax
test eax, eax
je 0x6b4c30c1
mov eax, dword [esi + 0xc4]
cmp dword [eax + 0xc], 0
je 0x6b4c30c1
mov eax, dword [esp + 0x4c]
lea edi, [eax + 0x10]
xor ebp, ebp
jmp 0x6b4c2f9d
push 1
push 0x6b748d48
push eax
call fcn.6b564620
add esp, 0xc
push dword [esi + 0x4c]
push dword [esi + 0x48]
push dword [esp + 8]
call fcn.6b564620
add esp, 0xc
mov ebx, dword [esp + 0xc]
lea eax, [ebx + ebp]
push 0
push eax
push dword [esp + 8]
call fcn.6b564700
add esp, 0xc
push dword [esp]
call fcn.6b564090
add esp, 4
add ebp, 0x30
mov eax, dword [esi + 0xc4]
cmp ebp, dword [eax + 0xc]
jae 0x6b4c30c1
mov eax, esp
push eax
call fcn.6b4d5940
add esp, 4
mov eax, dword [esp + 0x4c]
push dword [eax + 0x84]
push dword [eax + 0x78]
push dword [esp + 8]
call fcn.6b564620
add esp, 0xc
push 0x30
push edi
push dword [esp + 8]
call fcn.6b564620
add esp, 0xc
test ebp, ebp
mov eax, dword [esp]
je 0x6b4c2f48
push ebp
mov ebx, dword [esp + 0x10]
push ebx
push eax
call fcn.6b564620
add esp, 0xc
jmp 0x6b4c2f6e
mov eax, dword [eax + 0xc]
add eax, 0x40
push esi
push eax
call dword [esi + 4]
add esp, 8
mov dword [esp + 0xc], eax
test eax, eax
je 0x6b4c30c1
mov eax, dword [esi + 0xc4]
cmp dword [eax + 0xc], 0
je 0x6b4c30c1
mov eax, dword [esp + 0x4c]
lea edi, [eax + 0x10]
xor ebp, ebp
jmp 0x6b4c3072
push 1
push 0x6b748d48
push eax
call fcn.6b564620
add esp, 0xc
push dword [esi + 0x4c]
push dword [esi + 0x48]
push dword [esp + 8]
call fcn.6b564620
add esp, 0xc
mov ebx, dword [esp + 0xc]
lea eax, [ebx + ebp]
push 0
push eax
push dword [esp + 8]
call fcn.6b564700
add esp, 0xc
push dword [esp]
call fcn.6b564090
add esp, 4
add ebp, 0x40
mov eax, dword [esi + 0xc4]
cmp ebp, dword [eax + 0xc]
jae 0x6b4c30c1
mov eax, esp
push eax
call fcn.6b4d5990
add esp, 4
mov eax, dword [esp + 0x4c]
push dword [eax + 0x84]
push dword [eax + 0x78]
push dword [esp + 8]
call fcn.6b564620
add esp, 0xc
push 0x40
push edi
push dword [esp + 8]
call fcn.6b564620
add esp, 0xc
test ebp, ebp
mov eax, dword [esp]
je 0x6b4c3021
push ebp
mov ebx, dword [esp + 0x10]
push ebx
push eax
call fcn.6b564620
add esp, 0xc
jmp 0x6b4c3047
cmp dword [esp + 0xc], 0
mov ebp, dword [esp + 0x4c]
je 0x6b4c3acf
mov eax, dword [esp + 0x14]
cmp eax, 0x19f
jne 0x6b4c31be
mov eax, dword [esi + 0xc4]
mov eax, dword [eax + 0x10]
add eax, 0x20
push esi
push eax
call dword [esi + 4]
add esp, 8
mov dword [esp + 0x10], eax
test eax, eax
je 0x6b4c338e
mov eax, dword [esi + 0xc4]
cmp dword [eax + 0x10], 0
je 0x6b4c338e
mov eax, dword [esp + 0x4c]
lea edi, [eax + 0x10]
xor ebp, ebp
jmp 0x6b4c316f
push 1
push 0x6b748d4a
push eax
call fcn.6b564620
add esp, 0xc
push dword [esi + 0x4c]
push dword [esi + 0x48]
push dword [esp + 8]
call fcn.6b564620
add esp, 0xc
mov ebx, dword [esp + 0x10]
lea eax, [ebx + ebp]
push 0
push eax
push dword [esp + 8]
call fcn.6b564700
add esp, 0xc
push dword [esp]
call fcn.6b564090
add esp, 4
add ebp, 0x20
mov eax, dword [esi + 0xc4]
cmp ebp, dword [eax + 0x10]
jae 0x6b4c338e
mov eax, esp
push eax
call fcn.6b4d58f0
add esp, 4
mov eax, dword [esp + 0x4c]
push dword [eax + 0x84]
push dword [eax + 0x78]
push dword [esp + 8]
call fcn.6b564620
add esp, 0xc
push 0x20
push edi
push dword [esp + 8]
call fcn.6b564620
add esp, 0xc
test ebp, ebp
mov eax, dword [esp]
je 0x6b4c311a
push ebp
mov ebx, dword [esp + 0x14]
push ebx
push eax
call fcn.6b564620
add esp, 0xc
jmp 0x6b4c3140
cmp eax, 0x2cc
je 0x6b4c32b3
cmp eax, 0x2cb
jne 0x6b4c33d1
mov eax, dword [esi + 0xc4]
mov eax, dword [eax + 0x10]
add eax, 0x30
push esi
push eax
call dword [esi + 4]
add esp, 8
mov dword [esp + 0x10], eax
test eax, eax
je 0x6b4c338e
mov eax, dword [esi + 0xc4]
cmp dword [eax + 0x10], 0
je 0x6b4c338e
mov eax, dword [esp + 0x4c]
lea edi, [eax + 0x10]
xor ebp, ebp
jmp 0x6b4c3264
push 1
push 0x6b748d4a
push eax
call fcn.6b564620
add esp, 0xc
push dword [esi + 0x4c]
push dword [esi + 0x48]
push dword [esp + 8]
call fcn.6b564620
add esp, 0xc
mov ebx, dword [esp + 0x10]
lea eax, [ebx + ebp]
push 0
push eax
push dword [esp + 8]
call fcn.6b564700
add esp, 0xc
push dword [esp]
call fcn.6b564090
add esp, 4
add ebp, 0x30
mov eax, dword [esi + 0xc4]
cmp ebp, dword [eax + 0x10]
jae 0x6b4c338e
mov eax, esp
push eax
call fcn.6b4d5940
add esp, 4
mov eax, dword [esp + 0x4c]
push dword [eax + 0x84]
push dword [eax + 0x78]
push dword [esp + 8]
call fcn.6b564620
add esp, 0xc
push 0x30
push edi
push dword [esp + 8]
call fcn.6b564620
add esp, 0xc
test ebp, ebp
mov eax, dword [esp]
je 0x6b4c320f
push ebp
mov ebx, dword [esp + 0x14]
push ebx
push eax
call fcn.6b564620
add esp, 0xc
jmp 0x6b4c3235
mov eax, dword [esi + 0xc4]
mov eax, dword [eax + 0x10]
add eax, 0x40
push esi
push eax
call dword [esi + 4]
add esp, 8
mov dword [esp + 0x10], eax
test eax, eax
je 0x6b4c338e
mov eax, dword [esi + 0xc4]
cmp dword [eax + 0x10], 0
je 0x6b4c338e
mov eax, dword [esp + 0x4c]
lea edi, [eax + 0x10]
xor ebp, ebp
jmp 0x6b4c333f
push 1
push 0x6b748d4a
push eax
call fcn.6b564620
add esp, 0xc
push dword [esi + 0x4c]
push dword [esi + 0x48]
push dword [esp + 8]
call fcn.6b564620
add esp, 0xc
mov ebx, dword [esp + 0x10]
lea eax, [ebx + ebp]
push 0
push eax
push dword [esp + 8]
call fcn.6b564700
add esp, 0xc
push dword [esp]
call fcn.6b564090
add esp, 4
add ebp, 0x40
mov eax, dword [esi + 0xc4]
cmp ebp, dword [eax + 0x10]
jae 0x6b4c338e
mov eax, esp
push eax
call fcn.6b4d5990
add esp, 4
mov eax, dword [esp + 0x4c]
push dword [eax + 0x84]
push dword [eax + 0x78]
push dword [esp + 8]
call fcn.6b564620
add esp, 0xc
push 0x40
push edi
push dword [esp + 8]
call fcn.6b564620
add esp, 0xc
test ebp, ebp
mov eax, dword [esp]
je 0x6b4c32ee
push ebp
mov ebx, dword [esp + 0x14]
push ebx
push eax
call fcn.6b564620
add esp, 0xc
jmp 0x6b4c3314
mov edi, dword [esp + 0x10]
test edi, edi
mov ebp, dword [esp + 0x4c]
je 0x6b4c33d1
mov eax, dword [esi + 0xc4]
lea ecx, [esi + 0xc8]
lea edx, [esp + 8]
lea ebx, [esp + 0x18]
push ecx
push 0
push edx
push edi
push ebx
mov ebx, dword [esp + 0x20]
push ebx
push eax
push esi
call dword [eax + 0x18]
add esp, 0x20
test eax, eax
je 0x6b4c33e1
push esi
push ebx
call dword [esi + 0xc]
add esp, 8
push esi
push edi
jmp 0x6b4c33d6
push esi
push dword [esp + 0x10]
call dword [esi + 0xc]
add esp, 8
jmp 0x6b4c3acf
cmp dword [esp + 0x18], 0
je 0x6b4c3402
mov eax, dword [esi + 0xc4]
push dword [eax + 0xc]
push ebx
call fcn.6b4c6250
add esp, 8
push esi
push ebx
call dword [esi + 0xc]
add esp, 8
cmp dword [esp + 8], 0
mov ebx, dword [esp + 0x14]
je 0x6b4c342b
mov eax, dword [esi + 0xc4]
push dword [eax + 0x10]
mov edi, dword [esp + 0x14]
push edi
call fcn.6b4c6250
add esp, 8
push esi
push edi
call dword [esi + 0xc]
add esp, 8
mov eax, dword [esi + 0x104]
mov ecx, dword [eax + 0x14]
test ecx, ecx
je 0x6b4c344b
lea eax, [esi + 0x10c]
push eax
push esi
call ecx
add esp, 8
mov eax, dword [esi + 0x104]
cmp dword [eax + 0xc], 0
je 0x6b4c372a
mov dword [esp + 0x18], 0
cmp ebx, 0x2cc
je 0x6b4c354d
cmp ebx, 0x2cb
je 0x6b4c3619
cmp ebx, 0x19f
jne 0x6b4c3acf
mov edi, ebp
mov eax, dword [eax + 8]
add eax, 0x20
push esi
push eax
call dword [esi + 4]
add esp, 8
mov ebx, eax
test eax, eax
je 0x6b4c36e1
mov eax, dword [esi + 0x104]
cmp dword [eax + 8], 0
je 0x6b4c36e1
lea eax, [edi + 0x10]
mov dword [esp + 0xc], eax
xor ebp, ebp
jmp 0x6b4c3508
push 1
push 0x6b748d4c
push eax
call fcn.6b564620
add esp, 0xc
push dword [esi + 0x4c]
push dword [esi + 0x48]
push dword [esp + 0x10]
call fcn.6b564620
add esp, 0xc
lea eax, [ebx + ebp]
push 0
push eax
push dword [esp + 0x10]
call fcn.6b564700
add esp, 0xc
push dword [esp + 8]
call fcn.6b564090
add esp, 4
add ebp, 0x20
mov eax, dword [esi + 0x104]
cmp ebp, dword [eax + 8]
jae 0x6b4c36e1
lea eax, [esp + 8]
push eax
call fcn.6b4d58f0
add esp, 4
push dword [edi + 0x84]
push dword [edi + 0x78]
push dword [esp + 0x10]
call fcn.6b564620
add esp, 0xc
push 0x20
push dword [esp + 0x10]
push dword [esp + 0x10]
call fcn.6b564620
add esp, 0xc
test ebp, ebp
mov eax, dword [esp + 8]
je 0x6b4c34b6
push ebp
push ebx
push eax
jmp 0x6b4c34d0
mov edi, ebp
mov eax, dword [eax + 8]
add eax, 0x40
push esi
push eax
call dword [esi + 4]
add esp, 8
mov ebx, eax
test eax, eax
je 0x6b4c36e1
mov eax, dword [esi + 0x104]
cmp dword [eax + 8], 0
je 0x6b4c36e1
lea eax, [edi + 0x10]
mov dword [esp + 0xc], eax
xor ebp, ebp
jmp 0x6b4c35d4
push 1
push 0x6b748d4c
push eax
call fcn.6b564620
add esp, 0xc
push dword [esi + 0x4c]
push dword [esi + 0x48]
push dword [esp + 0x10]
call fcn.6b564620
add esp, 0xc
lea eax, [ebx + ebp]
push 0
push eax
push dword [esp + 0x10]
call fcn.6b564700
add esp, 0xc
push dword [esp + 8]
call fcn.6b564090
add esp, 4
add ebp, 0x40
mov eax, dword [esi + 0x104]
cmp ebp, dword [eax + 8]
jae 0x6b4c36e1
lea eax, [esp + 8]
push eax
call fcn.6b4d5990
add esp, 4
push dword [edi + 0x84]
push dword [edi + 0x78]
push dword [esp + 0x10]
call fcn.6b564620
add esp, 0xc
push 0x40
push dword [esp + 0x10]
push dword [esp + 0x10]
call fcn.6b564620
add esp, 0xc
test ebp, ebp
mov eax, dword [esp + 8]
je 0x6b4c3582
push ebp
push ebx
push eax
jmp 0x6b4c359c
mov edi, ebp
mov eax, dword [eax + 8]
add eax, 0x30
push esi
push eax
call dword [esi + 4]
add esp, 8
mov ebx, eax
test eax, eax
je 0x6b4c36e1
mov eax, dword [esi + 0x104]
cmp dword [eax + 8], 0
je 0x6b4c36e1
lea eax, [edi + 0x10]
mov dword [esp + 0xc], eax
xor ebp, ebp
jmp 0x6b4c369c
push 1
push 0x6b748d4c
push eax
call fcn.6b564620
add esp, 0xc
push dword [esi + 0x4c]
push dword [esi + 0x48]
push dword [esp + 0x10]
call fcn.6b564620
add esp, 0xc
lea eax, [ebx + ebp]
push 0
push eax
push dword [esp + 0x10]
call fcn.6b564700
add esp, 0xc
push dword [esp + 8]
call fcn.6b564090
add esp, 4
add ebp, 0x30
mov eax, dword [esi + 0x104]
cmp ebp, dword [eax + 8]
jae 0x6b4c36e1
lea eax, [esp + 8]
push eax
call fcn.6b4d5940
add esp, 4
push dword [edi + 0x84]
push dword [edi + 0x78]
push dword [esp + 0x10]
call fcn.6b564620
add esp, 0xc
push 0x30
push dword [esp + 0x10]
push dword [esp + 0x10]
call fcn.6b564620
add esp, 0xc
test ebp, ebp
mov eax, dword [esp + 8]
je 0x6b4c364e
push ebp
push ebx
push eax
jmp 0x6b4c3668
test ebx, ebx
mov ebp, edi
je 0x6b4c3acf
mov eax, dword [esi + 0x104]
lea ecx, [esi + 0x10c]
lea edx, [esp + 0x18]
push ecx
push edx
push ebx
push esi
call dword [eax + 0xc]
add esp, 0x10
cmp dword [esp + 0x18], 0
je 0x6b4c3726
mov eax, dword [esi + 0x104]
push dword [eax + 8]
push ebx
call fcn.6b4c6250
add esp, 8
push esi
push ebx
call dword [esi + 0xc]
add esp, 8
mov ebx, dword [esp + 0x14]
mov eax, dword [esi + 0xcc]
mov ecx, dword [eax + 0x14]
test ecx, ecx
je 0x6b4c374a
lea eax, [esi + 0xd4]
push eax
push esi
call ecx
add esp, 8
mov eax, dword [esi + 0xcc]
cmp dword [eax + 0xc], 0
je 0x6b4c3a22
mov dword [esp + 0x18], 0
cmp ebx, 0x2cc
je 0x6b4c384b
cmp ebx, 0x2cb
je 0x6b4c3916
cmp ebx, 0x19f
jne 0x6b4c3acf
mov edi, ebp
mov eax, dword [eax + 8]
add eax, 0x20
push esi
push eax
call dword [esi + 4]
add esp, 8
mov ebx, eax
test eax, eax
je 0x6b4c39dd
mov eax, dword [esi + 0xcc]
cmp dword [eax + 8], 0
je 0x6b4c39dd
lea eax, [edi + 0x10]
mov dword [esp + 0x14], eax
xor ebp, ebp
jmp 0x6b4c37f0
push ebp
push ebx
push eax
call fcn.6b564620
add esp, 0xc
lea eax, [ebx + ebp]
push 0
push eax
push dword [esp + 0x10]
call fcn.6b564700
add esp, 0xc
push dword [esp + 8]
call fcn.6b564090
add esp, 4
add ebp, 0x20
mov eax, dword [esi + 0xcc]
cmp ebp, dword [eax + 8]
jae 0x6b4c39dd
lea eax, [esp + 8]
push eax
call fcn.6b4d58f0
add esp, 4
push dword [edi + 0x84]
push dword [edi + 0x78]
push dword [esp + 0x10]
call fcn.6b564620
add esp, 0xc
push 0x20
push dword [esp + 0x18]
push dword [esp + 0x10]
call fcn.6b564620
add esp, 0xc
test ebp, ebp
mov eax, dword [esp + 8]
jne 0x6b4c37b5
push 1
push 0x6b748d4e
push eax
call fcn.6b564620
add esp, 0xc
push dword [esi + 0x4c]
push dword [esi + 0x48]
push dword [esp + 0x10]
jmp 0x6b4c37b8
mov edi, ebp
mov eax, dword [eax + 8]
add eax, 0x40
push esi
push eax
call dword [esi + 4]
add esp, 8
mov ebx, eax
test eax, eax
je 0x6b4c39dd
mov eax, dword [esi + 0xcc]
cmp dword [eax + 8], 0
je 0x6b4c39dd
lea eax, [edi + 0x10]
mov dword [esp + 0x14], eax
xor ebp, ebp
jmp 0x6b4c38bb
push ebp
push ebx
push eax
call fcn.6b564620
add esp, 0xc
lea eax, [ebx + ebp]
push 0
push eax
push dword [esp + 0x10]
call fcn.6b564700
add esp, 0xc
push dword [esp + 8]
call fcn.6b564090
add esp, 4
add ebp, 0x40
mov eax, dword [esi + 0xcc]
cmp ebp, dword [eax + 8]
jae 0x6b4c39dd
lea eax, [esp + 8]
push eax
call fcn.6b4d5990
add esp, 4
push dword [edi + 0x84]
push dword [edi + 0x78]
push dword [esp + 0x10]
call fcn.6b564620
add esp, 0xc
push 0x40
push dword [esp + 0x18]
push dword [esp + 0x10]
call fcn.6b564620
add esp, 0xc
test ebp, ebp
mov eax, dword [esp + 8]
jne 0x6b4c3880
push 1
push 0x6b748d4e
push eax
call fcn.6b564620
add esp, 0xc
push dword [esi + 0x4c]
push dword [esi + 0x48]
push dword [esp + 0x10]
jmp 0x6b4c3883
mov edi, ebp
mov eax, dword [eax + 8]
add eax, 0x30
push esi
push eax
call dword [esi + 4]
add esp, 8
mov ebx, eax
test eax, eax
je 0x6b4c39dd
mov eax, dword [esi + 0xcc]
cmp dword [eax + 8], 0
je 0x6b4c39dd
lea eax, [edi + 0x10]
mov dword [esp + 0x14], eax
xor ebp, ebp
jmp 0x6b4c3982
push ebp
push ebx
push eax
call fcn.6b564620
add esp, 0xc
lea eax, [ebx + ebp]
push 0
push eax
push dword [esp + 0x10]
call fcn.6b564700
add esp, 0xc
push dword [esp + 8]
call fcn.6b564090
add esp, 4
add ebp, 0x30
mov eax, dword [esi + 0xcc]
cmp ebp, dword [eax + 8]
jae 0x6b4c39dd
lea eax, [esp + 8]
push eax
call fcn.6b4d5940
add esp, 4
push dword [edi + 0x84]
push dword [edi + 0x78]
push dword [esp + 0x10]
call fcn.6b564620
add esp, 0xc
push 0x30
push dword [esp + 0x18]
push dword [esp + 0x10]
call fcn.6b564620
add esp, 0xc
test ebp, ebp
mov eax, dword [esp + 8]
jne 0x6b4c394b
push 1
push 0x6b748d4e
push eax
call fcn.6b564620
add esp, 0xc
push dword [esi + 0x4c]
push dword [esi + 0x48]
push dword [esp + 0x10]
jmp 0x6b4c394e
test ebx, ebx
mov ebp, edi
je 0x6b4c3acf
mov eax, dword [esi + 0xcc]
lea ecx, [esi + 0xd4]
lea edx, [esp + 0x18]
push ecx
push edx
push ebx
push esi
call dword [eax + 0xc]
add esp, 0x10
cmp dword [esp + 0x18], 0
je 0x6b4c3a22
mov eax, dword [esi + 0xcc]
push dword [eax + 8]
push ebx
call fcn.6b4c6250
add esp, 8
push esi
push ebx
call dword [esi + 0xc]
add esp, 8
mov eax, dword [esi + 0x110]
test eax, eax
je 0x6b4c3a6f
mov ecx, dword [eax + 0x18]
test ecx, ecx
je 0x6b4c3a4c
lea eax, [esi + 0x114]
push eax
push 1
push esi
call ecx
add esp, 0xc
mov eax, dword [esi + 0x110]
test eax, eax
je 0x6b4c3a6f
mov eax, dword [eax + 0xc]
test eax, eax
je 0x6b4c3a6f
lea ecx, [esi + 0x114]
push ecx
push 1
push esi
call eax
add esp, 0xc
mov ebx, 0xfffffffb
test eax, eax
jne 0x6b4c26f8
mov eax, dword [esi + 0xd8]
test eax, eax
je 0x6b4c3ac8
mov ecx, dword [eax + 0x18]
test ecx, ecx
je 0x6b4c3a99
lea eax, [esi + 0xdc]
push eax
push 0
push esi
call ecx
add esp, 0xc
mov eax, dword [esi + 0xd8]
test eax, eax
je 0x6b4c3ac8
mov eax, dword [eax + 0xc]
test eax, eax
mov ebx, 0
je 0x6b4c26f8
lea ecx, [esi + 0xdc]
push ecx
push 0
push esi
call eax
add esp, 0xc
xor ecx, ecx
test eax, eax
sete cl
lea ebx, [ecx + ecx*4 - 5]
jmp 0x6b4c26f8
xor ebx, ebx
jmp 0x6b4c26f8
mov ebx, 0xfffffffb
jmp 0x6b4c26f8