Function at 0x6bb8d0
Capabilities:
Enumerate pe sections
Reference http user-agent string

Disassembly:
mov ecx, dword [0x99504c]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
lea eax, [esp - 0xb0]
cmp eax, dword [ecx + 8]
jbe 0x6bc975
sub esp, 0x130
mov eax, dword [esp + 0x140]
test eax, eax
je 0x6bb942
mov dword [esp + 0xdc], eax
mov eax, dword [esp + 0x144]
mov dword [esp + 0xe0], eax
mov eax, dword [esp + 0xdc]
test eax, eax
je 0x6bb93a
movzx ecx, byte [eax + 0xf]
nop
mov edx, ecx
and ecx, 0x1f
test dl, 0x20
jne 0x6bb931
or ecx, 0x80
mov edx, dword [esp + 0xe0]
jmp 0x6bb948
xor ecx, ecx
xor eax, eax
xor edx, edx
jmp 0x6bb948
xor ecx, ecx
xor eax, eax
xor edx, edx
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.004ba8b0
mov eax, dword [esp + 0x14]
mov dword [esp + 0x80], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0xb0], ecx
mov edx, dword [esp + 0x10]
mov dword [esp + 0xac], edx
test eax, eax
je 0x6bb98c
test eax, 0x200
jne 0x6bb98c
lea ebx, [0x7b31a4]
jmp 0x6bb9a6
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.004bcb70
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov ebx, eax
mov dword [esp + 0x90], ecx
mov dword [esp + 0x4c], ebx
mov dword [esp], ebx
mov dword [esp + 4], ecx
call fcn.006bb590
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
test eax, eax
je 0x6bb9ce
movzx edx, byte [ecx]
jmp 0x6bb9d0
xor edx, edx
mov ebx, dword [esp + 0x138]
test ebx, ebx
je 0x6bba00
test eax, eax
je 0x6bb9ed
mov ebp, dword [esp + 0x134]
xor esi, esi
jmp 0x6bc876
mov eax, dword [esp + 0x13c]
mov ecx, dword [esp + 0x134]
jmp 0x6bba84
movzx eax, dl
lea ecx, [0x945c20]
lea eax, [ecx + eax*8]
mov dword [esp + 0xe4], 0
mov dword [esp + 0xe8], 0
lea ecx, [0x6f4820]
mov dword [esp + 0xe4], ecx
mov dword [esp + 0xe8], eax
lea eax, [0x748127]
mov dword [esp], eax
mov dword [esp + 4], 0x23
lea eax, [esp + 0xe4]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004c1f50
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x148], eax
mov dword [esp + 0x14c], ecx
add esp, 0x130
ret
mov byte [esp + 0x3e], dl
xor ebp, ebp
jmp 0x6bba99
mov edx, dword [esp + 0x70]
lea ebp, [edx + 1]
mov edx, ebx
mov ebx, eax
mov eax, edx
mov dword [esp + 0x70], ebp
mov dword [esp + 0x6c], eax
mov dword [esp + 0x68], ebx
mov dword [esp + 0x9c], ecx
mov edx, dword [esp + 0xb0]
mov dword [esp], edx
mov esi, dword [esp + 0xac]
mov dword [esp + 4], esi
mov edi, dword [esp + 0x80]
mov dword [esp + 8], edi
call fcn.004bbde0
mov eax, dword [esp + 0x70]
cmp dword [esp + 0xc], eax
jle 0x6bc66a
mov ecx, dword [esp + 0xb0]
mov dword [esp], ecx
mov edx, dword [esp + 0xac]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0x80]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
call fcn.004baa60
mov eax, dword [esp + 0x18]
mov dword [esp + 0x7c], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0xa8], ecx
mov edx, dword [esp + 0x14]
mov dword [esp + 0xa4], edx
test eax, eax
je 0x6bbb39
test eax, 0x200
jne 0x6bbb39
lea ebx, [0x7b31a4]
jmp 0x6bbb53
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.004bcb70
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov ebx, eax
mov dword [esp + 0x8c], ecx
mov dword [esp + 0x48], ebx
mov eax, dword [ebx + 0x50]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
cmp eax, 0xb
ja 0x6bbdb4
cmp eax, 8
ja 0x6bbc66
cmp eax, 1
jne 0x6bbbf5
mov eax, dword [esp + 0x68]
test eax, eax
je 0x6bc375
mov ecx, dword [esp + 0x9c]
movzx edx, byte [ecx]
mov ebx, dword [esp + 0xa8]
mov dword [esp], ebx
mov ebx, dword [esp + 0xa4]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x7c]
mov dword [esp + 8], ebx
mov ebx, dword [esp + 0x6c]
dec ebx
mov dword [esp + 0x78], ebx
neg ebx
sar ebx, 0x1f
and ebx, 1
add ecx, ebx
mov dword [esp + 0xa0], ecx
dec eax
mov dword [esp + 0x74], eax
test dl, dl
setne dl
mov byte [esp + 0xc], dl
call fcn.004bc190
mov ebx, dword [esp + 0x78]
mov eax, dword [esp + 0x74]
mov ecx, dword [esp + 0xa0]
jmp 0x6bba8c
cmp eax, 8
jne 0x6bc523
mov eax, dword [esp + 0x68]
test eax, eax
je 0x6bc396
mov eax, dword [esp + 0x9c]
movzx ecx, byte [eax]
mov edx, dword [esp + 0xa8]
mov dword [esp], edx
mov edx, dword [esp + 0xa4]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x7c]
mov dword [esp + 8], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], ecx
call fcn.004bc5e0
mov eax, dword [esp + 0x6c]
lea ebx, [eax - 1]
mov eax, ebx
neg eax
sar eax, 0x1f
and eax, 1
mov ecx, dword [esp + 0x9c]
add ecx, eax
mov eax, dword [esp + 0x68]
dec eax
jmp 0x6bba8c
cmp eax, 0xa
jne 0x6bbce6
nop
mov eax, dword [esp + 0x68]
cmp eax, 4
jl 0x6bc3b7
mov eax, dword [esp + 0x6c]
add eax, 0xfffffffc
mov dword [esp + 0x40], eax
neg eax
sar eax, 0x1f
and eax, 4
mov dword [esp + 0x78], eax
mov edx, dword [esp + 0x9c]
mov ebx, dword [edx]
bswap ebx
mov ebp, dword [esp + 0xa8]
mov dword [esp], ebp
mov ebp, dword [esp + 0xa4]
mov dword [esp + 4], ebp
mov ebp, dword [esp + 0x7c]
mov dword [esp + 8], ebp
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], ebx
call fcn.004bc5e0
mov eax, dword [esp + 0x78]
mov ecx, dword [esp + 0x9c]
add ecx, eax
mov eax, dword [esp + 0x68]
add eax, 0xfffffffc
mov ebx, dword [esp + 0x40]
jmp 0x6bba8c
cmp eax, 0xb
jne 0x6bc523
nop
mov eax, dword [esp + 0x68]
cmp eax, 8
jl 0x6bc3d8
mov eax, dword [esp + 0x6c]
add eax, 0xfffffff8
mov dword [esp + 0x44], eax
neg eax
sar eax, 0x1f
and eax, 8
mov dword [esp + 0x78], eax
mov edx, dword [esp + 0x9c]
movzx ebx, byte [edx + 7]
movzx ebp, byte [edx + 6]
mov esi, ebp
shl ebp, 8
or ebx, ebp
shr esi, 0x18
movzx ebp, byte [edx + 5]
mov edi, ebp
shr ebp, 0x10
or ebp, esi
shl edi, 0x10
or ebx, edi
movzx esi, byte [edx + 4]
mov edi, esi
shr esi, 8
or esi, ebp
shl edi, 0x18
or ebx, edi
movzx ebp, byte [edx + 3]
or ebp, esi
movzx esi, byte [edx + 2]
shl esi, 8
or ebp, esi
movzx esi, byte [edx + 1]
shl esi, 0x10
or ebp, esi
movzx esi, byte [edx]
shl esi, 0x18
or esi, ebp
mov ebp, dword [esp + 0xa8]
mov dword [esp], ebp
mov ebp, dword [esp + 0xa4]
mov dword [esp + 4], ebp
mov ebp, dword [esp + 0x7c]
mov dword [esp + 8], ebp
mov dword [esp + 0x10], esi
mov dword [esp + 0xc], ebx
call fcn.004bc5e0
mov eax, dword [esp + 0x78]
mov ecx, dword [esp + 0x9c]
add ecx, eax
mov eax, dword [esp + 0x68]
add eax, 0xfffffff8
mov ebx, dword [esp + 0x44]
jmp 0x6bba8c
cmp eax, 0x16
ja 0x6bbf4c
cmp eax, 0x11
je 0x6bbedb
cmp eax, 0x16
jne 0x6bc523
mov eax, dword [esp + 0x48]
cmp dword [0x96eaa0], eax
jne 0x6bc41a
mov ecx, dword [0x96eaa4]
mov dword [esp], eax
mov eax, dword [esp + 0x8c]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00404290
movzx eax, byte [esp + 0xc]
test al, al
je 0x6bc41a
mov eax, dword [esp + 0x9c]
mov dword [esp], eax
mov eax, dword [esp + 0x68]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 8], eax
call fcn.006be170
movzx eax, byte [esp + 0x1c]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
test al, al
je 0x6bc3f9
mov dword [esp + 0x78], ebx
mov dword [esp + 0x74], edx
mov dword [esp + 0xa0], ecx
mov eax, dword [esp + 0xc]
lea ebp, [0x739320]
mov dword [esp + 0xb4], ebp
mov dword [esp + 0xb8], eax
mov eax, dword [esp + 0xb4]
test eax, eax
je 0x6bbe93
movzx esi, byte [eax + 0xf]
nop
mov edi, esi
and esi, 0x1f
xchg edi, eax
test al, 0x20
xchg edi, eax
jne 0x6bbe8a
or esi, 0x80
mov edi, dword [esp + 0xb8]
jmp 0x6bbe99
xor esi, esi
xor eax, eax
xor edi, edi
mov ecx, dword [esp + 0xa8]
mov dword [esp], ecx
mov ecx, dword [esp + 0xa4]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x7c]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], edi
mov dword [esp + 0x14], esi
call fcn.004bc070
mov ebx, dword [esp + 0x78]
mov eax, dword [esp + 0x74]
mov ecx, dword [esp + 0xa0]
jmp 0x6bba8c
mov eax, dword [esp + 0x48]
mov ecx, dword [eax + 0x28]
mov edx, dword [esp + 0x8c]
mov dword [esp], edx
call ecx
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov eax, dword [eax + 0x50]
mov dword [esp], ecx
call eax
cmp dword [esp + 4], 8
jne 0x6bc489
mov eax, dword [esp + 0x48]
mov ecx, dword [eax + 0x54]
mov edx, dword [esp + 0x8c]
mov dword [esp], edx
call ecx
mov eax, dword [esp + 0x68]
cmp dword [esp + 4], eax
jg 0x6bc468
mov eax, dword [esp + 0x48]
mov ecx, dword [eax + 0x54]
mov edx, dword [esp + 0x8c]
mov dword [esp], edx
call ecx
mov eax, dword [esp + 4]
mov dword [esp + 0x60], eax
xor ecx, ecx
jmp 0x6bc751
cmp eax, 0x17
je 0x6bc029
cmp eax, 0x18
jne 0x6bc523
mov eax, dword [esp + 0x68]
cmp eax, 4
jge 0x6bbf75
xor eax, eax
xor ebx, ebx
xor ecx, ecx
xor esi, esi
xor edx, edx
xor ebp, ebp
jmp 0x6bbfc8
mov ecx, dword [esp + 0x6c]
lea edx, [ecx - 4]
neg edx
sar edx, 0x1f
and edx, 4
lea ebx, [eax - 4]
mov ebp, dword [esp + 0x9c]
mov esi, dword [ebp]
bswap esi
nop
add edx, ebp
cmp esi, ebx
jbe 0x6bbfa8
xor eax, eax
xor ebx, ebx
xor ecx, ecx
xor esi, esi
xor edx, edx
xor ebp, ebp
jmp 0x6bbfc8
sub ecx, esi
sub eax, esi
add ecx, 0xfffffffc
mov ebx, ecx
neg ecx
sar ecx, 0x1f
and ecx, esi
add ecx, edx
add eax, 0xfffffffc
mov ebp, edx
mov edx, ecx
mov ecx, eax
mov eax, 1
test al, al
je 0x6bc4d7
mov dword [esp + 0x5c], ebx
mov dword [esp + 0x54], ecx
mov dword [esp + 0x98], edx
mov dword [esp], 0
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
call fcn.004523c0
mov eax, dword [esp + 0xa8]
mov dword [esp], eax
mov eax, dword [esp + 0xa4]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x7c]
mov dword [esp + 8], eax
call fcn.004bc6e0
mov ebx, dword [esp + 0x5c]
mov eax, dword [esp + 0x54]
mov ecx, dword [esp + 0x98]
jmp 0x6bba8c
mov eax, dword [esp + 0x48]
mov eax, dword [eax + 0x28]
mov ecx, dword [esp + 0x8c]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov eax, dword [eax + 0x50]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
cmp eax, 8
je 0x6bc149
cmp eax, 0x18
jne 0x6bc5fb
mov eax, dword [esp + 0x9c]
mov dword [esp], eax
mov eax, dword [esp + 0x68]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 8], eax
call fcn.006bdf50
movzx eax, byte [esp + 0x24]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x20]
test al, al
je 0x6bc5da
mov dword [esp + 0x78], ebx
mov dword [esp + 0x74], edx
mov dword [esp + 0xa0], ecx
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.00409dc0
mov eax, dword [esp + 0xc]
lea ecx, [0x6ea2c0]
mov dword [esp + 0xbc], ecx
mov dword [esp + 0xc0], eax
mov edx, dword [esp + 0xbc]
test edx, edx
je 0x6bc101
movzx ebx, byte [edx + 0xf]
nop
mov ebp, ebx
and ebx, 0x1f
xchg ebp, eax
test al, 0x20
xchg ebp, eax
jne 0x6bc107
or ebx, 0x80
jmp 0x6bc107
xor ebx, ebx
xor edx, edx
xor eax, eax
mov ecx, dword [esp + 0xa8]
mov dword [esp], ecx
mov ecx, dword [esp + 0xa4]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x7c]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], ebx
call fcn.004bc070
mov eax, dword [esp + 0x78]
mov ecx, dword [esp + 0x74]
mov edx, dword [esp + 0xa0]
jmp 0x6bc36a
mov eax, dword [esp + 0x4c]
mov ecx, dword [eax + 0x2c]
mov edx, dword [esp + 0x90]
mov dword [esp], edx
mov ebx, dword [esp + 0x70]
mov dword [esp + 4], ebx
call ecx
lea edi, [esp + 0xfc]
lea esi, [esp + 8]
call fcn.0046958e
mov eax, dword [esp + 0x118]
mov ecx, dword [esp + 0x114]
mov dword [esp], ecx
mov dword [esp + 4], eax
lea eax, [0x73a628]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 3
call fcn.004b6290
cmp dword [esp + 0x14], 4
jne 0x6bc255
mov eax, dword [esp + 0x10]
cmp dword [eax], 0x74736572
jne 0x6bc255
mov eax, dword [esp + 0x9c]
mov dword [esp], eax
mov eax, dword [esp + 0x68]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 8], eax
call fcn.00409dc0
mov eax, dword [esp + 0xc]
lea ecx, [0x6e9a40]
mov dword [esp + 0xcc], ecx
mov dword [esp + 0xd0], eax
mov edx, dword [esp + 0xcc]
test edx, edx
je 0x6bc216
movzx ebx, byte [edx + 0xf]
nop
mov ebp, ebx
and ebx, 0x1f
xchg ebp, eax
test al, 0x20
xchg ebp, eax
jne 0x6bc21c
or ebx, 0x80
jmp 0x6bc21c
xor ebx, ebx
xor edx, edx
xor eax, eax
mov ecx, dword [esp + 0xa8]
mov dword [esp], ecx
mov ecx, dword [esp + 0xa4]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x7c]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], ebx
call fcn.004bc070
xor eax, eax
xor ecx, ecx
xor edx, edx
jmp 0x6bc36a
mov eax, dword [esp + 0x68]
cmp eax, 4
jge 0x6bc26e
xor eax, eax
xor ebp, ebp
xor ecx, ecx
xor ebx, ebx
xor edi, edi
xor edx, edx
xor esi, esi
jmp 0x6bc2c4
mov ecx, dword [esp + 0x6c]
lea edx, [ecx - 4]
mov ebx, edx
neg edx
sar edx, 0x1f
and edx, 4
lea ebp, [eax - 4]
mov esi, dword [esp + 0x9c]
mov edi, dword [esi]
bswap edi
nop
add edx, esi
cmp edi, ebp
jbe 0x6bc2a4
xor eax, eax
xor ebp, ebp
xor ecx, ecx
xor ebx, ebx
xor edi, edi
xor edx, edx
xor esi, esi
jmp 0x6bc2c4
sub ecx, edi
sub eax, edi
add ecx, 0xfffffffc
mov ebp, ecx
neg ecx
sar ecx, 0x1f
and ecx, edi
add ecx, edx
add eax, 0xfffffffc
mov esi, edx
mov edx, ecx
mov ecx, eax
mov eax, 1
test al, al
je 0x6bc649
mov dword [esp + 0x58], ebp
mov dword [esp + 0x50], ecx
mov dword [esp + 0x94], edx
mov dword [esp], esi
mov dword [esp + 4], edi
mov dword [esp + 8], ebx
call fcn.00409dc0
mov eax, dword [esp + 0xc]
lea ecx, [0x6e9a40]
mov dword [esp + 0xc4], ecx
mov dword [esp + 0xc8], eax
mov edx, dword [esp + 0xc4]
test edx, edx
je 0x6bc327
movzx ebx, byte [edx + 0xf]
nop
mov ebp, ebx
and ebx, 0x1f
xchg ebp, eax
test al, 0x20
xchg ebp, eax
jne 0x6bc32d
or ebx, 0x80
jmp 0x6bc32d
xor ebx, ebx
xor edx, edx
xor eax, eax
mov ecx, dword [esp + 0xa8]
mov dword [esp], ecx
mov ecx, dword [esp + 0xa4]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x7c]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], ebx
call fcn.004bc070
mov eax, dword [esp + 0x58]
mov ecx, dword [esp + 0x50]
mov edx, dword [esp + 0x94]
mov ebx, eax
mov eax, ecx
mov ecx, edx
jmp 0x6bba8c
mov eax, dword [0x9671c8]
mov ecx, dword [0x9671cc]
mov dword [esp + 0x148], eax
mov dword [esp + 0x14c], ecx
add esp, 0x130
ret
mov eax, dword [0x9671c8]
mov ecx, dword [0x9671cc]
mov dword [esp + 0x148], eax
mov dword [esp + 0x14c], ecx
add esp, 0x130
ret
mov eax, dword [0x9671c8]
mov ecx, dword [0x9671cc]
mov dword [esp + 0x148], eax
mov dword [esp + 0x14c], ecx
add esp, 0x130
ret
mov eax, dword [0x9671c8]
mov ecx, dword [0x9671cc]
mov dword [esp + 0x148], eax
mov dword [esp + 0x14c], ecx
add esp, 0x130
ret
mov eax, dword [0x9671c8]
mov ecx, dword [0x9671cc]
mov dword [esp + 0x148], eax
mov dword [esp + 0x14c], ecx
add esp, 0x130
ret
mov eax, dword [esp + 0x4c]
mov dword [esp], eax
mov eax, dword [esp + 0x90]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x70]
mov dword [esp + 8], eax
lea eax, [0x743fe5]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0x1b
call fcn.006bb730
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x148], eax
mov dword [esp + 0x14c], ecx
add esp, 0x130
ret
mov eax, dword [0x9671c8]
mov ecx, dword [0x9671cc]
mov dword [esp + 0x148], eax
mov dword [esp + 0x14c], ecx
add esp, 0x130
ret
mov eax, dword [esp + 0x4c]
mov dword [esp], eax
mov eax, dword [esp + 0x90]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x70]
mov dword [esp + 8], eax
lea eax, [0x742e40]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0x19
call fcn.006bb730
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x148], eax
mov dword [esp + 0x14c], ecx
add esp, 0x130
ret
mov eax, dword [esp + 0x4c]
mov dword [esp], eax
mov eax, dword [esp + 0x90]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x70]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call fcn.006bb730
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x148], eax
mov dword [esp + 0x14c], ecx
add esp, 0x130
ret
mov dword [esp + 0xe4], 0
mov dword [esp + 0xe8], 0
mov eax, dword [esp + 0x48]
test eax, eax
je 0x6bc546
mov ebx, dword [eax + 4]
jmp 0x6bc548
mov ebx, eax
mov dword [esp + 0xe4], ebx
mov eax, dword [esp + 0x8c]
mov dword [esp + 0xe8], eax
lea eax, [0x740376]
mov dword [esp], eax
mov dword [esp + 4], 0x14
lea eax, [esp + 0xe4]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004c4b20
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x4c]
mov dword [esp], edx
mov edx, dword [esp + 0x90]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x70]
mov dword [esp + 8], edx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
call fcn.006bb730
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x148], eax
mov dword [esp + 0x14c], ecx
add esp, 0x130
ret
mov eax, dword [0x9671c8]
mov ecx, dword [0x9671cc]
mov dword [esp + 0x148], eax
mov dword [esp + 0x14c], ecx
add esp, 0x130
ret
mov eax, dword [esp + 0x4c]
mov dword [esp], eax
mov eax, dword [esp + 0x90]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x70]
mov dword [esp + 8], eax
lea eax, [0x742e59]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0x19
call fcn.006bb730
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x148], eax
mov dword [esp + 0x14c], ecx
add esp, 0x130
ret
mov eax, dword [0x9671c8]
mov ecx, dword [0x9671cc]
mov dword [esp + 0x148], eax
mov dword [esp + 0x14c], ecx
add esp, 0x130
ret
mov eax, dword [esp + 0x68]
test eax, eax
je 0x6bc6ff
movzx eax, byte [esp + 0x3e]
movzx eax, al
lea ecx, [0x945c20]
lea eax, [ecx + eax*8]
mov dword [esp + 0xe4], 0
mov dword [esp + 0xe8], 0
lea ecx, [0x6f4820]
mov dword [esp + 0xe4], ecx
mov dword [esp + 0xe8], eax
lea eax, [0x748127]
mov dword [esp], eax
mov dword [esp + 4], 0x23
lea eax, [esp + 0xe4]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004c1f50
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x148], eax
mov dword [esp + 0x14c], ecx
add esp, 0x130
ret
mov dword [esp + 0x148], 0
mov dword [esp + 0x14c], 0
add esp, 0x130
ret
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov eax, dword [esp + 0x84]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x88]
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], edi
call fcn.004bc070
mov eax, dword [esp + 0x64]
lea ecx, [eax + 1]
mov eax, dword [esp + 0x60]
cmp ecx, eax
jge 0x6bc825
mov dword [esp + 0x64], ecx
mov eax, dword [esp + 0xa8]
mov dword [esp], eax
mov edx, dword [esp + 0xa4]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0x7c]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
call fcn.004baf30
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x68]
mov ebp, dword [esp + 0x64]
cmp ebx, ebp
jbe 0x6bc86c
mov esi, dword [esp + 0x9c]
movzx edi, byte [esi + ebp]
lea esi, [0x945c20]
lea edi, [esi + edi*8]
lea esi, [0x6f4820]
mov dword [esp + 0xd4], esi
mov dword [esp + 0xd8], edi
mov edi, dword [esp + 0xd4]
test edi, edi
je 0x6bc80c
movzx esi, byte [edi + 0xf]
xchg esi, eax
mov byte [esp + 0x3f], al
xchg esi, eax
nop
and esi, 0x1f
movzx ebx, byte [esp + 0x3f]
test bl, 0x20
jne 0x6bc7f0
or esi, 0x80
mov ebx, dword [esp + 0xd8]
mov dword [esp + 0x84], edi
mov dword [esp + 0x88], ebx
mov edi, esi
jmp 0x6bc71c
xor edi, edi
xor esi, esi
mov dword [esp + 0x84], esi
xor esi, esi
mov dword [esp + 0x88], esi
jmp 0x6bc71c
mov eax, dword [esp + 0x48]
mov eax, dword [eax + 0x54]
mov ecx, dword [esp + 0x8c]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x68]
cmp ecx, eax
jb 0x6bc867
mov ebx, dword [esp + 0x6c]
sub ebx, eax
mov edx, ebx
neg edx
sar edx, 0x1f
and edx, eax
sub ecx, eax
mov ebp, dword [esp + 0x9c]
add edx, ebp
mov eax, ecx
mov ecx, edx
jmp 0x6bba8c
call fcn.00468f30
mov eax, ebp
mov ecx, ebx
call fcn.00468ed0
inc esi
cmp esi, eax
jge 0x6bc8ad
movzx edi, byte [ecx + esi]
xchg edi, eax
test al, al
xchg edi, eax
jbe 0x6bc875
xchg edi, eax
cmp byte [ebp], al
xchg edi, eax
jne 0x6bc875
mov esi, dword [esp + 0x13c]
lea eax, [esi - 1]
mov esi, eax
xchg esi, ebx
neg ebx
xchg esi, ebx
sar esi, 0x1f
and esi, 1
lea ecx, [ebp + esi]
dec ebx
jmp 0x6bba84
mov edx, dword [esp + 0x10]
mov dword [esp + 0xec], 0
mov dword [esp + 0xf0], 0
mov dword [esp + 0xf4], 0
mov dword [esp + 0xf8], 0
movzx ebx, byte [ebp]
lea ebp, [0x6f4820]
mov dword [esp + 0xec], ebp
lea ebp, [0x945c20]
lea ebx, [ebp + ebx*8]
mov dword [esp + 0xf0], ebx
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], edx
call fcn.00409dc0
mov eax, dword [esp + 0xc]
lea ecx, [0x6e9a40]
mov dword [esp + 0xf4], ecx
mov dword [esp + 0xf8], eax
lea eax, [0x74e915]
mov dword [esp], eax
mov dword [esp + 4], 0x34
lea eax, [esp + 0xec]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004c1f50
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x148], eax
mov dword [esp + 0x14c], ecx
add esp, 0x130
ret
call fcn.00467a60
jmp fcn.006bb8d0