Function at 0x6d0e50
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x28
push ebx
push ebp
push esi
push edi
mov edi, dword [esp + 0x3c]
mov eax, dword [edi]
movzx edx, byte [edi + 0x30]
mov ecx, dword [edi + 4]
dec edx
mov dword [esp + 0x14], eax
mov esi, dword [eax + 8]
mov eax, dword [eax]
mov dword [esp + 0x20], eax
mov dword [esp + 0x28], esi
mov eax, dword [esi + 0x74]
mov dword [esp + 0x30], ecx
mov dword [esp + 0x34], eax
mov dword [esp + 0x24], edx
js 0x6d1697
jmp 0x6d0e90
imul eax, edx, 0x58
lea ebx, [edi + 0x300]
add ebx, eax
mov dword [esp + 0x10], ebx
cmp byte [ebx + 0x39], 0xb6
mov ecx, dword [ebx + 0x4c]
mov dword [esp + 0x1c], ecx
je 0x6d10ac
mov eax, dword [esp + 0x3c]
xor edi, edi
cmp byte [eax + 0x33], 2
jne 0x6d0f5d
movzx eax, byte [eax + 0x30]
dec eax
cmp edx, eax
jne 0x6d0f5d
test dword [ecx + 0x2c], 0x200
je 0x6d0f5d
mov eax, dword [ecx + 0x20]
test byte [eax + 0x38], 0x80
je 0x6d0f5d
movzx ebp, word [ecx + 0x1e]
test ebp, ebp
jle 0x6d0f5d
mov eax, dword [eax + 8]
cmp word [eax + ebp*2], 0x24
jl 0x6d0f5d
mov ecx, dword [esp + 0x14]
mov eax, dword [ecx + 0x2c]
inc eax
mov dword [esp + 0x18], eax
test ebp, ebp
jle 0x6d0f24
add eax, edi
push eax
push edi
push dword [ebx + 8]
push 0x5d
push esi
call fcn.006bfa80
mov eax, dword [esp + 0x2c]
inc edi
add esp, 0x14
cmp edi, ebp
jl 0x6d0f05
mov ecx, dword [esp + 0x14]
lea eax, [ebp + 1]
add dword [ecx + 0x2c], eax
xor eax, eax
cmp byte [ebx + 0x39], 4
push ebp
push dword [esp + 0x1c]
setne al
dec eax
push 0
push dword [ebx + 8]
and eax, 0xfffffffd
add eax, 0x1a
push eax
push esi
call fcn.006bfbb0
push dword [ebx + 0x40]
mov edi, eax
push 1
push 0xb
push esi
call fcn.006bfa20
add esp, 0x28
mov ecx, dword [esi + 0xc]
mov edx, dword [ebx + 0x18]
not edx
mov eax, dword [ecx + 0x3c]
add eax, dword [ecx + 0x38]
jns 0x6d0f7a
push edx
push esi
push ecx
call fcn.006865c0
add esp, 0xc
jmp 0x6d0f83
mov ecx, dword [ecx + 0x40]
mov eax, dword [esi + 0x74]
mov dword [ecx + edx*4], eax
movzx ecx, byte [ebx + 0x39]
mov eax, dword [ebx + 0x3c]
movzx edx, byte [ebx + 0x3a]
mov ebp, dword [ebx + 0x40]
mov dword [esp + 0x18], ecx
mov ecx, dword [esi + 0x74]
mov dword [esp + 0x2c], eax
cmp dword [esi + 0x78], ecx
jg 0x6d0fb3
push edx
push ebp
push eax
push dword [esp + 0x24]
push esi
call fcn.00674520
add esp, 0x14
jmp 0x6d0fee
mov ebx, dword [esp + 0x18]
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov byte [eax + ecx*4], bl
xor ebx, ebx
mov word [eax + ecx*4 + 2], bx
mov ebx, dword [esp + 0x2c]
mov dword [eax + ecx*4 + 4], ebx
mov ebx, dword [esp + 0x10]
mov dword [eax + ecx*4 + 8], ebp
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov byte [eax + ecx*4 + 1], 0
mov eax, dword [esi + 0x74]
test eax, eax
jle 0x6d1004
movzx edx, byte [ebx + 0x3b]
lea ecx, [eax + eax*4]
mov eax, dword [esi + 0x70]
mov word [eax + ecx*4 - 0x12], dx
cmp dword [ebx + 0x24], 0
je 0x6d107f
mov ecx, dword [esi + 0xc]
mov edx, dword [ebx + 0x28]
not edx
mov eax, dword [ecx + 0x3c]
add eax, dword [ecx + 0x38]
jns 0x6d1027
push edx
push esi
push ecx
call fcn.006865c0
add esp, 0xc
jmp 0x6d1030
mov ecx, dword [ecx + 0x40]
mov eax, dword [esi + 0x74]
mov dword [ecx + edx*4], eax
mov edx, dword [ebx + 0x40]
mov ecx, dword [esi + 0x74]
dec edx
mov ebp, dword [ebx + 0x24]
cmp dword [esi + 0x78], ecx
jg 0x6d1050
push 0
push edx
push ebp
push 0x3c
push esi
call fcn.00674520
add esp, 0x14
jmp 0x6d107f
mov ebx, dword [esp + 0x10]
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4], 0x3c
mov dword [eax + ecx*4 + 4], ebp
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
test edi, edi
je 0x6d10d2
mov edx, dword [esi + 0x74]
jns 0x6d108b
lea edi, [edx - 1]
mov eax, dword [esi]
cmp byte [eax + 0x57], 0
je 0x6d109d
mov eax, 0x7c89b4
mov dword [eax + 8], edx
jmp 0x6d10d2
mov eax, dword [esi + 0x70]
lea ecx, [edi + edi*4]
mov dword [eax + ecx*4 + 8], edx
lea eax, [eax + ecx*4]
jmp 0x6d10d2
mov ecx, dword [esi + 0xc]
mov edx, dword [ebx + 0x18]
not edx
mov eax, dword [ecx + 0x3c]
add eax, dword [ecx + 0x38]
jns 0x6d10c9
push edx
push esi
push ecx
call fcn.006865c0
add esp, 0xc
jmp 0x6d10d2
mov ecx, dword [ecx + 0x40]
mov eax, dword [esi + 0x74]
mov dword [ecx + edx*4], eax
mov eax, dword [esp + 0x1c]
test dword [eax + 0x2c], 0x800
je 0x6d12bd
cmp dword [ebx + 0x44], 0
jle 0x6d12bd
mov ecx, dword [esi + 0xc]
mov edx, dword [ebx + 0x10]
not edx
mov eax, dword [ecx + 0x3c]
add eax, dword [ecx + 0x38]
jns 0x6d110a
push edx
push esi
push ecx
call fcn.006865c0
add esp, 0xc
jmp 0x6d1113
mov ecx, dword [ecx + 0x40]
mov eax, dword [esi + 0x74]
mov dword [ecx + edx*4], eax
mov ebp, dword [ebx + 0x44]
mov eax, dword [ebx + 0x48]
mov dword [esp + 0x18], ebp
lea edi, [ebp - 1]
lea edi, [edi + edi*4]
lea edi, [eax + edi*4]
test ebp, ebp
jle 0x6d12bd
mov edi, edi
mov ecx, dword [edi + 4]
inc ecx
mov edx, dword [esi + 0x74]
jns 0x6d113c
lea ecx, [edx - 1]
mov eax, dword [esi]
cmp byte [eax + 0x57], 0
je 0x6d114b
mov eax, 0x7c89b4
jmp 0x6d1154
mov eax, dword [esi + 0x70]
lea ecx, [ecx + ecx*4]
lea eax, [eax + ecx*4]
mov dword [eax + 8], edx
cmp byte [edi + 0x10], 0xb6
je 0x6d1286
cmp dword [edi + 0xc], 0
je 0x6d122b
mov eax, dword [esp + 0x1c]
mov eax, dword [eax + 0x2c]
test eax, 0x400
jne 0x6d1187
test eax, 0x40000
je 0x6d1187
mov ebp, 1
jmp 0x6d1189
xor ebp, ebp
cmp dword [ebx], 0
je 0x6d11e5
mov ecx, dword [esi + 0x74]
lea edx, [ebp + 2]
mov eax, dword [edi]
add edx, ecx
mov dword [esp + 0x2c], eax
cmp dword [esi + 0x78], ecx
jg 0x6d11b2
push 0
push edx
push eax
push 0x1b
push esi
call fcn.00674520
add esp, 0x14
jmp 0x6d11e5
mov ebx, dword [esp + 0x2c]
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4 + 4], ebx
mov ebx, dword [esp + 0x10]
mov dword [eax + ecx*4], 0x1b
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
test ebp, ebp
je 0x6d122b
push dword [edi + 0xc]
mov eax, dword [esi + 0x74]
push dword [edi + 8]
add eax, 2
push eax
push dword [ebx + 8]
push 0x1c
push esi
call fcn.006bfbb0
mov ecx, dword [edi + 4]
add esp, 0x18
inc ecx
mov edx, dword [esi + 0x74]
jns 0x6d1210
lea ecx, [edx - 1]
mov eax, dword [esi]
cmp byte [eax + 0x57], 0
je 0x6d121f
mov eax, 0x7c89b4
jmp 0x6d1228
mov eax, dword [esi + 0x70]
lea ecx, [ecx + ecx*4]
lea eax, [eax + ecx*4]
mov dword [eax + 8], edx
movzx eax, byte [edi + 0x10]
mov ecx, dword [esi + 0x74]
mov edx, dword [edi + 4]
mov ebp, dword [edi]
mov dword [esp + 0x2c], eax
cmp dword [esi + 0x78], ecx
jg 0x6d1250
push 0
push edx
push ebp
push eax
push esi
call fcn.00674520
add esp, 0x14
jmp 0x6d1282
mov ebx, dword [esp + 0x2c]
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov byte [eax + ecx*4], bl
xor ebx, ebx
mov word [eax + ecx*4 + 2], bx
mov dword [eax + ecx*4 + 0xc], ebx
mov dword [eax + ecx*4 + 0x10], ebx
mov byte [eax + ecx*4 + 1], bl
mov ebx, dword [esp + 0x10]
mov dword [eax + ecx*4 + 4], ebp
mov dword [eax + ecx*4 + 8], edx
mov ebp, dword [esp + 0x18]
mov ecx, dword [edi + 4]
dec ecx
mov edx, dword [esi + 0x74]
jns 0x6d1292
lea ecx, [edx - 1]
mov eax, dword [esi]
cmp byte [eax + 0x57], 0
je 0x6d12a1
mov eax, 0x7c89b4
jmp 0x6d12aa
mov eax, dword [esi + 0x70]
lea ecx, [ecx + ecx*4]
lea eax, [eax + ecx*4]
dec ebp
mov dword [eax + 8], edx
sub edi, 0x14
mov dword [esp + 0x18], ebp
test ebp, ebp
jg 0x6d1130
mov ecx, dword [esi + 0xc]
mov edx, dword [ebx + 0xc]
not edx
mov eax, dword [ecx + 0x3c]
add eax, dword [ecx + 0x38]
jns 0x6d12da
push edx
push esi
push ecx
call fcn.006865c0
add esp, 0xc
jmp 0x6d12e3
mov ecx, dword [ecx + 0x40]
mov eax, dword [esi + 0x74]
mov dword [ecx + edx*4], eax
mov edx, dword [ebx + 0x14]
test edx, edx
je 0x6d1388
mov ecx, dword [esi + 0x74]
cmp dword [esi + 0x78], ecx
jg 0x6d1308
push 0
push edx
push 0
push 0xb
push esi
call fcn.00674520
add esp, 0x14
jmp 0x6d1337
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4], 0xb
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [ebx + 0x14]
mov edx, dword [esi + 0x74]
test ecx, ecx
jns 0x6d1344
lea ecx, [edx - 1]
mov eax, dword [esi]
cmp byte [eax + 0x57], 0
je 0x6d1353
mov eax, 0x7c89b4
jmp 0x6d135c
mov eax, dword [esi + 0x70]
lea ecx, [ecx + ecx*4]
lea eax, [eax + ecx*4]
mov dword [eax + 8], edx
mov ecx, dword [ebx + 0x14]
sub ecx, 2
mov edx, dword [esi + 0x74]
jns 0x6d136d
lea ecx, [edx - 1]
mov eax, dword [esi]
cmp byte [eax + 0x57], 0
je 0x6d137c
mov eax, 0x7c89b4
jmp 0x6d1385
mov eax, dword [esi + 0x70]
lea ecx, [ecx + ecx*4]
lea eax, [eax + ecx*4]
mov dword [eax + 8], edx
mov edi, dword [ebx + 0x30]
test edi, edi
je 0x6d13d8
mov edx, dword [ebx + 0x2c]
mov ecx, dword [esi + 0x74]
shr edx, 1
cmp dword [esi + 0x78], ecx
jg 0x6d13ad
push 0
push edi
push edx
push 0x3c
push esi
call fcn.00674520
add esp, 0x14
jmp 0x6d13d8
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4], 0x3c
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], edi
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ebp, dword [ebx]
test ebp, ebp
je 0x6d1684
mov eax, dword [esp + 0x1c]
mov edi, dword [esi + 0x74]
mov edx, dword [eax + 0x2c]
mov dword [esp + 0x1c], edx
cmp dword [esi + 0x78], edi
jg 0x6d140d
push 0
push 0
push ebp
push 0x31
push esi
call fcn.00674520
mov edx, dword [esp + 0x30]
add esp, 0x14
mov edi, eax
jmp 0x6d1440
mov ebx, dword [esp + 0x10]
lea eax, [edi + 1]
mov dword [esi + 0x74], eax
lea ecx, [edi + edi*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4], 0x31
mov dword [eax + ecx*4 + 4], ebp
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
test dl, 0x40
jne 0x6d149c
mov ecx, dword [esi + 0x74]
mov ebp, dword [ebx + 4]
cmp dword [esi + 0x78], ecx
jg 0x6d1469
push 0
push 0
push ebp
push 0x87
push esi
call fcn.00674520
mov edx, dword [esp + 0x30]
add esp, 0x14
jmp 0x6d149c
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov esi, dword [esp + 0x28]
mov dword [eax + ecx*4], 0x87
mov dword [eax + ecx*4 + 4], ebp
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
test edx, 0x200
jne 0x6d14ba
test edx, 0x2000
je 0x6d15db
cmp dword [ebx + 0x44], 0
je 0x6d15db
test edx, 0x2000
je 0x6d158c
mov ebp, dword [ebx + 0x44]
mov edx, 0xffff8000
mov dword [esp + 0x1c], ebp
mov ecx, dword [ebp + 0x18]
test ecx, ecx
je 0x6d14f8
mov eax, dword [esp + 0x20]
xor edx, edx
mov eax, dword [eax + 0x10]
add eax, 0xc
cmp dword [eax], ecx
je 0x6d14f8
lea esp, [esp]
lea eax, [eax + 0x10]
inc edx
cmp dword [eax], ecx
jne 0x6d14f0
mov ecx, dword [esi + 0x74]
mov eax, dword [ebx + 8]
mov ebp, dword [ebp + 0x2c]
mov dword [esp + 0x2c], eax
cmp dword [esi + 0x78], ecx
jg 0x6d151a
push edx
push ebp
push eax
push 0x64
push esi
call fcn.00674520
add esp, 0x14
jmp 0x6d1549
mov ebx, dword [esp + 0x2c]
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4 + 4], ebx
mov ebx, dword [esp + 0x10]
mov dword [eax + ecx*4], 0x64
mov dword [eax + ecx*4 + 8], ebp
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esp + 0x14]
push dword [esp + 0x1c]
push eax
mov ebp, dword [eax + 8]
call fcn.006ab770
mov edx, eax
add esp, 8
test edx, edx
je 0x6d158c
mov eax, dword [ebp]
cmp byte [eax + 0x57], 0
je 0x6d157a
push edx
push 0xfffffffffffffff7
push eax
call fcn.006612f0
add esp, 0xc
jmp 0x6d158c
mov eax, dword [ebp + 0x74]
lea ecx, [eax + eax*4]
mov eax, dword [ebp + 0x70]
mov byte [eax + ecx*4 - 0x13], 0xf7
mov dword [eax + ecx*4 - 4], edx
mov ecx, dword [esi + 0x74]
mov edx, dword [ebx + 8]
cmp dword [esi + 0x78], ecx
jg 0x6d15ac
push 0
push 0
push edx
push 0x87
push esi
call fcn.00674520
add esp, 0x14
jmp 0x6d15db
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4], 0x87
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
cmp byte [ebx + 0x39], 0x43
mov edx, dword [ebx + 0x1c]
mov ecx, dword [esi + 0x74]
jne 0x6d1619
mov ebx, dword [ebx + 0x3c]
cmp dword [esi + 0x78], ecx
jg 0x6d1600
push 0
push edx
push ebx
push 0xc
push esi
call fcn.00674520
add esp, 0x14
jmp 0x6d165f
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4], 0xc
mov dword [eax + ecx*4 + 4], ebx
jmp 0x6d164b
cmp dword [esi + 0x78], ecx
jg 0x6d1630
push 0
push edx
push 0
push 0xb
push esi
call fcn.00674520
add esp, 0x14
jmp 0x6d165f
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4], 0xb
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 0x10], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 8], edx
mov edx, dword [esi + 0x74]
test edi, edi
jns 0x6d1669
lea edi, [edx - 1]
mov eax, dword [esi]
cmp byte [eax + 0x57], 0
je 0x6d1678
mov eax, 0x7c89b4
jmp 0x6d1681
mov eax, dword [esi + 0x70]
lea ecx, [edi + edi*4]
lea eax, [eax + ecx*4]
mov dword [eax + 8], edx
mov edx, dword [esp + 0x24]
mov edi, dword [esp + 0x3c]
dec edx
mov dword [esp + 0x24], edx
jns 0x6d0e90
mov ecx, dword [esi + 0xc]
mov edx, dword [edi + 0x24]
not edx
mov eax, dword [ecx + 0x3c]
add eax, dword [ecx + 0x38]
jns 0x6d16b4
push edx
push esi
push ecx
call fcn.006865c0
add esp, 0xc
jmp 0x6d16bd
mov ecx, dword [ecx + 0x40]
mov eax, dword [esi + 0x74]
mov dword [ecx + edx*4], eax
xor ebx, ebx
mov dword [esp + 0x10], ebx
cmp byte [edi + 0x30], bl
jbe 0x6d1880
lea ebp, [edi + 0x34c]
mov dword [esp + 0x18], ebp
jmp 0x6d16e0
movzx eax, byte [ebp - 0x14]
mov edx, dword [esp + 0x30]
lea eax, [eax + eax*8]
test byte [edx + eax*8 + 0x30], 0x10
mov ecx, dword [edx + eax*8 + 0x18]
mov dword [esp + 0x2c], ecx
mov ecx, dword [ebp]
je 0x6d171a
push 0
push dword [edx + eax*8 + 0x28]
push dword [ebp - 0x48]
push dword [ebp - 0x2c]
push dword [esp + 0x24]
call fcn.006d7280
add esp, 0x14
jmp 0x6d1868
mov eax, dword [ecx + 0x2c]
test eax, 0x240
je 0x6d1729
mov eax, dword [ecx + 0x20]
jmp 0x6d1737
test eax, 0x2000
je 0x6d1868
mov eax, dword [ebp - 8]
mov dword [esp + 0x24], eax
test eax, eax
je 0x6d1868
mov ecx, dword [esp + 0x20]
cmp byte [ecx + 0x57], 0
jne 0x6d1868
cmp byte [edi + 0x32], 0
je 0x6d1765
mov eax, dword [eax + 0xc]
test byte [eax + 0x1c], 0x80
jne 0x6d1765
mov edi, dword [edi + 0x40]
jmp 0x6d1769
mov edi, dword [esp + 0x34]
mov edx, dword [ebp - 0x2c]
inc edx
mov ecx, edx
jns 0x6d1775
mov ecx, dword [esi + 0x74]
dec ecx
mov eax, dword [esi]
cmp byte [eax + 0x57], 0
je 0x6d1784
mov ebx, 0x7c89b4
jmp 0x6d178d
mov eax, dword [esi + 0x70]
lea ecx, [ecx + ecx*4]
lea ebx, [eax + ecx*4]
mov esi, dword [esp + 0x24]
sub edi, edx
lea eax, [edi + edi*4]
lea eax, [ebx + eax*4]
add ebx, 4
mov dword [esp + 0x1c], eax
mov ecx, eax
mov eax, dword [ebx]
cmp eax, dword [ebp - 0x48]
jne 0x6d184e
mov al, byte [ebx - 4]
cmp al, 0x5d
jne 0x6d1838
mov ecx, dword [esp + 0x2c]
mov ebp, dword [ebx + 4]
mov eax, dword [ecx + 0x1c]
test al, al
jns 0x6d17d8
push ecx
call fcn.006b4280
add esp, 4
mov eax, dword [eax + 4]
movsx edi, word [eax + ebp*2]
jmp 0x6d1804
movzx edx, bp
test al, 0x20
je 0x6d1801
xor eax, eax
xor edi, edi
cmp ax, bp
jg 0x6d1801
mov ecx, dword [ecx + 4]
add ecx, 0xe
mov edi, edi
test byte [ecx], 0x20
je 0x6d17f6
inc edx
inc edi
movsx eax, dx
add ecx, 0x10
cmp edi, eax
jle 0x6d17f0
movsx edi, dx
movzx edx, word [esi + 0x34]
xor eax, eax
test edx, edx
jle 0x6d181e
mov ecx, dword [esi + 4]
cmp di, word [ecx]
je 0x6d1833
inc eax
add ecx, 2
cmp eax, edx
jl 0x6d1811
or eax, 0xffffffff
mov ebp, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
cwde
test eax, eax
js 0x6d184e
mov dword [ebx + 4], eax
jmp 0x6d1849
movzx eax, ax
jmp 0x6d1821
cmp al, 0x86
jne 0x6d1845
mov eax, dword [ebp - 0x44]
mov byte [ebx - 4], 0x8d
jmp 0x6d184c
cmp al, 0x16
jne 0x6d184e
mov eax, dword [ebp - 0x44]
mov dword [ebx], eax
add ebx, 0x14
lea eax, [ebx - 4]
cmp eax, ecx
jb 0x6d17a2
mov esi, dword [esp + 0x28]
mov ebx, dword [esp + 0x10]
mov edi, dword [esp + 0x3c]
movzx eax, byte [edi + 0x30]
inc ebx
add ebp, 0x58
mov dword [esp + 0x10], ebx
mov dword [esp + 0x18], ebp
cmp ebx, eax
jl 0x6d16e0
cmp dword [edi + 0x48], 0
je 0x6d188f
push edi
call fcn.006e4eb0
add esp, 4
mov ecx, dword [esp + 0x14]
mov eax, dword [edi + 0x28]
push edi
push dword [esp + 0x24]
mov dword [ecx + 0x88], eax
call fcn.006e0440
add esp, 8
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x28
ret