Function at 0x6ad2f0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [0x93d128]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
lea eax, [esp - 0xb4]
cmp eax, dword [ecx + 8]
jbe 0x6ae480
sub esp, 0x134
mov eax, dword [esp + 0x138]
mov ecx, dword [eax + 0x2c]
mov edx, dword [ecx + 0x44]
test edx, edx
jne 0x6ad3bd
movzx edx, byte [ecx + 0x50]
test dl, dl
jne 0x6ad3bd
call fcn.006d8310
mov eax, dword [esp + 4]
mov dword [esp + 0x98], eax
nop
mov ecx, dword [esp]
mov dword [esp + 0xf8], ecx
lea edx, [0x75a420]
mov dword [esp], edx
call fcn.0040ca90
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x98]
mov dword [eax + 4], ecx
mov ecx, dword [0x93d218]
test ecx, ecx
jne 0x6ad37c
mov ecx, dword [esp + 0xf8]
jmp 0x6ad38a
call fcn.0045f0d0
mov ecx, dword [esp + 0xf8]
mov dword [edi], ecx
mov dword [eax], ecx
mov dword [esp + 0x13c], 0
mov dword [esp + 0x140], 0
lea ecx, [0x7da180]
mov dword [esp + 0x144], ecx
mov dword [esp + 0x148], eax
add esp, 0x134
ret
mov edx, dword [ecx + 0x38]
mov ebx, dword [ecx + 0x34]
xor ebp, ebp
xor esi, esi
jmp 0x6ad3ce
inc ebp
lea esi, [esi + edi + 1]
cmp ebp, edx
jge 0x6ad473
lea edi, [ebx + ebp*8]
mov edi, dword [edi + 4]
test edi, edi
je 0x6ad3e8
cmp edi, 0xff
jle 0x6ad3c9
call fcn.006d9080
mov eax, dword [esp + 4]
mov dword [esp + 0x94], eax
nop
mov ecx, dword [esp]
mov dword [esp + 0xf4], ecx
lea edx, [0x75a420]
mov dword [esp], edx
call fcn.0040ca90
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x94]
mov dword [eax + 4], ecx
mov ecx, dword [0x93d218]
test ecx, ecx
jne 0x6ad432
mov ecx, dword [esp + 0xf4]
jmp 0x6ad440
call fcn.0045f0d0
mov ecx, dword [esp + 0xf4]
mov dword [edi], ecx
mov dword [eax], ecx
mov dword [esp + 0x13c], 0
mov dword [esp + 0x140], 0
lea ecx, [0x7da180]
mov dword [esp + 0x144], ecx
mov dword [esp + 0x148], eax
add esp, 0x134
ret
cmp esi, 0xffff
jle 0x6ad50a
call fcn.006d93c0
mov eax, dword [esp + 4]
mov dword [esp + 0x90], eax
nop
mov ecx, dword [esp]
mov dword [esp + 0xf0], ecx
lea edx, [0x75a420]
mov dword [esp], edx
call fcn.0040ca90
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x90]
mov dword [eax + 4], ecx
mov ecx, dword [0x93d218]
test ecx, ecx
jne 0x6ad4c9
mov ecx, dword [esp + 0xf0]
jmp 0x6ad4d7
call fcn.0045f0d0
mov ecx, dword [esp + 0xf0]
mov dword [edi], ecx
mov dword [eax], ecx
mov dword [esp + 0x13c], 0
mov dword [esp + 0x140], 0
lea ecx, [0x7da180]
mov dword [esp + 0x144], ecx
mov dword [esp + 0x148], eax
add esp, 0x134
ret
mov dword [esp + 0x100], ecx
mov dword [esp], ecx
mov byte [esp + 4], 1
call fcn.006a2f80
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0x10]
test eax, eax
je 0x6ad8ca
mov dword [esp + 0x118], ecx
mov dword [esp + 0xac], edx
mov dword [esp + 0xa8], eax
mov eax, dword [esp + 0x100]
mov dword [esp], eax
mov byte [esp + 4], 1
call fcn.006a2f80
mov eax, dword [esp + 0xc]
test eax, eax
jne 0x6ad567
xor eax, eax
jmp 0x6ad56e
mov eax, dword [esp + 8]
movzx eax, word [eax]
cmp ax, 0x303
jbe 0x6ad579
mov eax, 0x303
mov word [esp + 0x62], ax
lea ecx, [0x74afe0]
mov dword [esp], ecx
mov dword [esp + 4], 0x20
mov dword [esp + 8], 0x20
call fcn.00448800
mov eax, dword [esp + 0x100]
mov ecx, dword [eax + 0x40]
mov edx, dword [eax + 0x44]
mov ebx, dword [esp + 0xc]
mov dword [esp + 0x128], ebx
mov dword [esp], ecx
mov dword [esp + 4], edx
call fcn.006b4900
mov eax, dword [esp + 0x100]
mov ecx, dword [eax + 0x9c]
mov edx, dword [esp + 8]
mov dword [esp + 0x124], edx
mov ebx, dword [esp + 0xc]
mov dword [esp + 0xc8], ebx
test ecx, ecx
jne 0x6ad5fb
mov ebp, dword [0x724210]
mov ecx, dword [0x724214]
mov esi, dword [0x724218]
jmp 0x6ad607
mov ebp, dword [eax + 0x98]
mov esi, dword [eax + 0xa0]
mov dword [esp + 0x78], esi
mov dword [esp + 0x70], ecx
mov dword [esp + 0xd4], ebp
lea eax, [0x77f6c0]
mov dword [esp], eax
call fcn.0040ca90
mov eax, dword [esp + 4]
mov dword [esp + 0xfc], eax
movzx ecx, word [esp + 0x62]
mov word [eax + 0xc], cx
lea ecx, [0x747220]
mov dword [esp], ecx
call fcn.0040ca90
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0xfc]
mov dword [ecx + 0x38], 1
mov dword [ecx + 0x3c], 1
mov edx, dword [0x93d218]
test edx, edx
jne 0x6ad672
mov edx, dword [esp + 0x128]
jmp 0x6ad68f
call fcn.0045f100
mov dword [edi], eax
mov edx, dword [ecx + 0x34]
mov dword [edi + 4], edx
mov edx, dword [esp + 0x128]
mov dword [edi + 8], edx
mov ebx, dword [ecx + 0x10]
mov dword [edi + 0xc], ebx
mov dword [ecx + 0x34], eax
mov dword [ecx + 0x14], 0x20
mov dword [ecx + 0x18], 0x20
mov dword [ecx + 0x10], edx
mov byte [ecx + 0x9c], 1
mov byte [ecx + 0x48], 1
mov byte [ecx + 0xac], 1
mov eax, dword [esp + 0xc8]
mov dword [ecx + 0x44], eax
mov eax, dword [0x93d218]
test eax, eax
jne 0x6ad6d9
mov eax, dword [esp + 0x124]
mov edx, dword [esp + 0xd4]
jmp 0x6ad6fd
call fcn.0045f100
mov eax, dword [esp + 0x124]
mov dword [edi], eax
mov edx, dword [ecx + 0x40]
mov dword [edi + 4], edx
mov edx, dword [esp + 0xd4]
mov dword [edi + 8], edx
mov ebx, dword [ecx + 0x4c]
mov dword [edi + 0xc], ebx
mov dword [ecx + 0x40], eax
mov eax, dword [esp + 0x70]
mov dword [ecx + 0x50], eax
mov eax, dword [esp + 0x78]
mov dword [ecx + 0x54], eax
mov dword [ecx + 0x4c], edx
lea eax, [0x747220]
mov dword [esp], eax
call fcn.0040ca90
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0xfc]
mov dword [ecx + 0x5c], 1
mov dword [ecx + 0x60], 1
mov edx, dword [0x93d218]
test edx, edx
je 0x6ad74f
call fcn.0045f0e0
mov dword [edi], eax
mov edx, dword [ecx + 0x58]
mov dword [edi + 4], edx
mov dword [ecx + 0x58], eax
mov byte [ecx + 0x8c], 1
mov eax, dword [esp + 0x100]
mov edx, dword [eax + 0x38]
mov ebx, dword [eax + 0x3c]
mov ebp, dword [eax + 0x34]
mov dword [ecx + 0xa4], edx
mov dword [ecx + 0xa8], ebx
mov edx, dword [0x93d218]
test edx, edx
jne 0x6ad788
mov edx, dword [esp + 0x118]
jmp 0x6ad7ab
call fcn.0045f100
mov dword [edi], ebp
mov edx, dword [ecx + 0xa0]
mov dword [edi + 4], edx
mov edx, dword [esp + 0x118]
mov dword [edi + 8], edx
mov ebx, dword [ecx + 0xb0]
mov dword [edi + 0xc], ebx
mov dword [ecx + 0xa0], ebp
mov ebx, dword [esp + 0xa8]
mov dword [ecx + 0xb4], ebx
mov ebx, dword [esp + 0xac]
mov dword [ecx + 0xb8], ebx
mov dword [ecx + 0xb0], edx
mov edx, dword [esp + 0x138]
mov ebx, dword [edx + 0x30]
test ebx, ebx
jle 0x6ad819
mov dword [ecx + 0x94], 0xc
mov dword [ecx + 0x98], 0xc
mov ebx, dword [0x93d218]
lea ebp, [edx + 0xa9]
test ebx, ebx
je 0x6ad813
call fcn.0045f0e0
mov dword [edi], ebp
mov ebx, dword [ecx + 0x90]
mov dword [edi + 4], ebx
mov dword [ecx + 0x90], ebp
movzx ebx, byte [0x93d008]
mov ebp, dword [0x7241b0]
mov esi, dword [0x7241b4]
test bl, bl
jne 0x6ad83c
mov ebp, dword [0x7241c0]
mov esi, dword [0x7241c4]
mov dword [esp + 0xdc], ebp
mov dword [esp + 0x7c], esi
mov dword [esp], eax
call fcn.006a2ed0
mov eax, dword [esp + 8]
mov dword [esp + 0x9c], eax
mov ecx, dword [esp + 4]
mov dword [esp + 0x108], ecx
lea edx, [0x74b060]
mov dword [esp], edx
mov dword [esp + 4], 0
call fcn.00448800
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0xfc]
mov dword [ecx + 0x2c], 0
mov edx, dword [esp + 0x9c]
mov dword [ecx + 0x30], edx
mov ebx, dword [0x93d218]
test ebx, ebx
je 0x6ad8ae
call fcn.0045f0e0
mov dword [edi], eax
mov ebx, dword [ecx + 0x28]
mov dword [edi + 4], ebx
mov dword [ecx + 0x28], eax
mov eax, dword [esp + 0x7c]
mov ebx, dword [esp + 0xdc]
mov ebp, dword [esp + 0x108]
xor esi, esi
jmp 0x6ad95d
call fcn.006d94d0
mov eax, dword [esp + 4]
mov dword [esp + 0x8c], eax
nop
mov ecx, dword [esp]
mov dword [esp + 0xec], ecx
lea edx, [0x75a420]
mov dword [esp], edx
call fcn.0040ca90
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x8c]
mov dword [eax + 4], ecx
mov ecx, dword [0x93d218]
test ecx, ecx
jne 0x6ad914
mov ecx, dword [esp + 0xec]
jmp 0x6ad922
call fcn.0045f0d0
mov ecx, dword [esp + 0xec]
mov dword [edi], ecx
mov dword [eax], ecx
mov dword [esp + 0x13c], 0
mov dword [esp + 0x140], 0
lea ecx, [0x7da180]
mov dword [esp + 0x144], ecx
mov dword [esp + 0x148], eax
add esp, 0x134
ret
inc esi
mov ebx, dword [esp + 0xdc]
cmp eax, esi
jle 0x6ada65
movzx edi, word [ebx + esi*2]
mov word [esp + 0x66], di
mov dword [esp + 0xb8], eax
xor eax, eax
mov dword [esp + 0xc8], eax
mov eax, dword [esp + 0xb8]
jmp 0x6ae415
mov ebx, dword [0x724190]
mov ebp, dword [0x724194]
mov word [esp + 0xb0], ax
xor eax, eax
mov dword [esp + 0xc8], eax
movzx eax, word [esp + 0xb0]
jmp 0x6ae449
xor ebx, ebx
test ebx, ebx
je 0x6ad955
cmp word [ecx + 0xc], 0x303
jae 0x6ad9cd
mov ebx, dword [ebx + 0x14]
test ebx, 4
jne 0x6ad955
mov ebx, dword [ecx + 0x30]
mov ebp, dword [ecx + 0x2c]
inc ebp
mov edx, dword [ecx + 0x28]
cmp ebx, ebp
jae 0x6ada4a
mov dword [esp + 0xc8], esi
mov dword [esp], edx
mov dword [esp + 4], ebp
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 1
lea eax, [0x74b060]
mov dword [esp + 0x10], eax
call fcn.004488c0
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0xfc]
mov dword [ebx + 0x30], eax
mov eax, dword [0x93d218]
test eax, eax
je 0x6ada31
call fcn.0045f0e0
mov dword [edi], ecx
mov eax, dword [ebx + 0x28]
mov dword [edi + 4], eax
mov dword [ebx + 0x28], ecx
mov eax, dword [esp + 0x7c]
mov esi, dword [esp + 0xc8]
movzx edi, word [esp + 0x66]
mov ebp, edx
mov edx, ecx
mov ecx, ebx
mov dword [ecx + 0x2c], ebp
mov word [edx + ebp*2 - 2], di
mov edx, dword [esp + 0x9c]
mov ebp, dword [esp + 0x108]
jmp 0x6ad955
mov eax, dword [esp + 0x100]
mov edx, dword [eax]
test edx, edx
je 0x6ada77
mov ebx, dword [eax + 4]
jmp 0x6ada83
mov edx, dword [0x8fd8d0]
mov ebx, dword [0x8fd8d4]
mov eax, dword [ecx + 0x14]
mov ebp, dword [ecx + 0x10]
mov esi, dword [ecx + 0x18]
nop
mov dword [esp], edx
mov dword [esp + 4], ebx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], esi
mov dword [esp + 0x14], eax
call fcn.004b9220
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
test eax, eax
je 0x6adada
mov dword [esp + 0x114], ecx
mov dword [esp + 0x47], 0x35b21312
lea edi, [esp + 0x4a]
lea esi, [0x78d005]
call fcn.0045f824
xor ecx, ecx
jmp 0x6ae2dc
mov edx, dword [esp + 0x138]
mov ebx, dword [edx + 0x10]
test ebx, ebx
jne 0x6adb9a
lea eax, [0x74afe0]
mov dword [esp], eax
mov dword [esp + 4], 0x20
mov dword [esp + 8], 0x20
call fcn.00448800
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0xfc]
mov dword [ecx + 0x20], 0x20
mov dword [ecx + 0x24], 0x20
mov edx, dword [0x93d218]
test edx, edx
je 0x6adb3a
call fcn.0045f0e0
mov dword [edi], eax
mov edx, dword [ecx + 0x1c]
mov dword [edi + 4], edx
mov dword [ecx + 0x1c], eax
mov eax, dword [esp + 0x100]
mov edx, dword [eax]
test edx, edx
je 0x6adb4f
mov ebx, dword [eax + 4]
jmp 0x6adb5b
mov edx, dword [0x8fd8d0]
mov ebx, dword [0x8fd8d4]
mov eax, dword [ecx + 0x1c]
nop
mov dword [esp], edx
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0x20
mov dword [esp + 0x10], 0x20
mov dword [esp + 0x14], 0x20
call fcn.004b9220
mov eax, dword [esp + 0x1c]
test eax, eax
jne 0x6ae1c1
mov edx, dword [esp + 0x138]
mov ebx, dword [esp + 0xfc]
cmp word [ebx + 0xc], 0x303
jb 0x6adbdf
mov ebp, dword [0x7241f4]
mov esi, dword [0x7241f8]
mov edi, dword [0x7241f0]
mov dword [ebx + 0x78], ebp
mov dword [ebx + 0x7c], esi
mov ebp, dword [0x93d218]
test ebp, ebp
je 0x6adbdc
mov eax, edi
call fcn.0045f0e0
mov dword [edi], eax
mov ebp, dword [ebx + 0x74]
mov dword [edi + 4], ebp
mov edi, eax
mov dword [ebx + 0x74], edi
mov ebp, dword [0x8fdb58]
test ebp, ebp
je 0x6adc15
mov esi, dword [0x8fdb5c]
mov edi, dword [0x8fdb60]
mov dword [ebx + 0x78], esi
mov dword [ebx + 0x7c], edi
mov esi, dword [0x93d218]
test esi, esi
je 0x6adc12
call fcn.0045f0e0
mov dword [edi], ebp
mov esi, dword [ebx + 0x74]
mov dword [edi + 4], esi
mov dword [ebx + 0x74], ebp
mov ebp, dword [ebx + 0xb4]
test ebp, ebp
jbe 0x6ae2c5
mov eax, dword [ebx + 0xb0]
cmp word [eax], 0x304
jne 0x6ae0f3
cmp ebp, 1
jne 0x6adc62
mov dword [ebx + 0x2c], 0
mov dword [ebx + 0x30], 0
mov eax, dword [0x93d218]
test eax, eax
je 0x6adc5b
mov eax, dword [ebx + 0x28]
call fcn.0045f0d0
mov dword [edi], eax
mov dword [ebx + 0x28], 0
movzx eax, byte [0x93d008]
test al, al
je 0x6add44
mov eax, dword [0x7241d4]
mov ecx, dword [ebx + 0x30]
mov ebp, dword [ebx + 0x2c]
add ebp, eax
mov esi, dword [ebx + 0x28]
cmp ecx, ebp
jb 0x6adc8a
mov eax, ebp
jmp 0x6adcc2
mov dword [esp + 0xc4], ebp
mov dword [esp], esi
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
lea eax, [0x74b060]
mov dword [esp + 0x10], eax
call fcn.004488c0
mov esi, dword [esp + 0x14]
mov ebp, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov eax, dword [esp + 0xc4]
mov dword [esp + 0xc8], ecx
mov dword [esp + 0xc4], ebp
mov dword [esp + 0x120], esi
mov edx, dword [0x7241d4]
sub eax, edx
mov ebx, dword [0x7241d0]
lea eax, [esi + eax*2]
mov dword [esp], eax
mov dword [esp + 4], ebx
shl edx, 1
mov dword [esp + 8], edx
call fcn.0045fa40
mov eax, dword [esp + 0xc4]
mov ecx, dword [esp + 0xfc]
mov dword [ecx + 0x2c], eax
mov eax, dword [esp + 0xc8]
mov dword [ecx + 0x30], eax
mov eax, dword [0x93d218]
test eax, eax
jne 0x6add28
mov edx, dword [esp + 0x120]
jmp 0x6add3c
call fcn.0045f0e0
mov edx, dword [esp + 0x120]
mov dword [edi], edx
mov ebx, dword [ecx + 0x28]
mov dword [edi + 4], ebx
mov dword [ecx + 0x28], edx
jmp 0x6ade12
mov eax, dword [0x7241e4]
mov ecx, dword [ebx + 0x30]
mov ebp, dword [ebx + 0x2c]
add ebp, eax
mov esi, dword [ebx + 0x28]
cmp ecx, ebp
jb 0x6add5d
mov eax, ebp
jmp 0x6add95
mov dword [esp + 0xc4], ebp
mov dword [esp], esi
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
lea eax, [0x74b060]
mov dword [esp + 0x10], eax
call fcn.004488c0
mov esi, dword [esp + 0x14]
mov ebp, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov eax, dword [esp + 0xc4]
mov dword [esp + 0xc8], ecx
mov dword [esp + 0xc4], ebp
mov dword [esp + 0x120], esi
mov edx, dword [0x7241e4]
sub eax, edx
mov ebx, dword [0x7241e0]
lea eax, [esi + eax*2]
mov dword [esp], eax
mov dword [esp + 4], ebx
shl edx, 1
mov dword [esp + 8], edx
call fcn.0045fa40
mov eax, dword [esp + 0xc4]
mov ecx, dword [esp + 0xfc]
mov dword [ecx + 0x2c], eax
mov eax, dword [esp + 0xc8]
mov dword [ecx + 0x30], eax
mov eax, dword [0x93d218]
test eax, eax
jne 0x6addfb
mov edx, dword [esp + 0x120]
jmp 0x6ade0f
call fcn.0045f0e0
mov edx, dword [esp + 0x120]
mov dword [edi], edx
mov ebx, dword [ecx + 0x28]
mov dword [edi + 4], ebx
mov dword [ecx + 0x28], edx
mov edx, dword [esp + 0x100]
mov ebx, dword [edx + 0x9c]
test ebx, ebx
jne 0x6ade31
mov ebp, dword [0x724210]
mov ebx, dword [0x724214]
jmp 0x6ade37
mov ebp, dword [edx + 0x98]
test ebx, ebx
jbe 0x6ae2bc
movzx eax, word [ebp]
nop
cmp ax, 0x18
ja 0x6ade5b
cmp ax, 0x17
je 0x6ade6b
cmp ax, 0x18
je 0x6ade6b
jmp 0x6ae068
cmp ax, 0x19
je 0x6ade6b
cmp ax, 0x1d
jne 0x6ae068
mov ebx, dword [edx]
test ebx, ebx
je 0x6ade76
mov edx, dword [edx + 4]
jmp 0x6ade82
mov ebx, dword [0x8fd8d0]
mov edx, dword [0x8fd8d4]
mov word [esp + 0x64], ax
mov dword [esp], ebx
mov dword [esp + 4], edx
mov word [esp + 8], ax
call fcn.006c74b0
mov eax, dword [esp + 0x10]
test eax, eax
jne 0x6ae039
mov eax, dword [esp + 0xc]
mov dword [esp + 0x10c], eax
nop
mov dword [esp + 0x12c], 0
mov dword [esp + 0x130], 0
lea ecx, [0x6ae490]
mov dword [esp + 0x12c], ecx
mov dword [esp + 0x130], eax
test byte [eax], al
lea ecx, [eax + 0x1c]
mov dword [esp], ecx
lea ecx, [esp + 0x12c]
mov dword [esp + 4], ecx
call fcn.00464970
mov eax, dword [esp + 0x10c]
mov ecx, dword [eax + 0x18]
mov dword [esp + 0xd8], ecx
nop
lea edx, [0x748040]
mov dword [esp], edx
call fcn.0040ca90
mov eax, dword [esp + 0xd8]
mov ecx, dword [eax + 0xc]
mov edx, dword [esp + 4]
mov eax, dword [eax + 8]
cmp ecx, 0x85
ja 0x6adf34
mov ebx, ecx
mov ebp, 0x85
jmp 0x6adf80
mov dword [esp + 0x11c], eax
mov dword [esp + 0xc0], ecx
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x85
mov dword [esp + 0xc], ecx
lea eax, [0x74afe0]
mov dword [esp + 0x10], eax
call fcn.004488c0
mov edx, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov ebx, dword [esp + 0xc0]
mov ebp, eax
mov eax, dword [esp + 0x11c]
mov dword [esp + 0x74], ebp
mov dword [esp + 0x68], ecx
mov dword [esp + 0xcc], edx
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
call fcn.0045fa40
lea eax, [0x748100]
mov dword [esp], eax
call fcn.0040ca90
mov eax, dword [esp + 4]
movzx ecx, word [esp + 0x64]
mov word [eax], cx
mov ecx, dword [esp + 0x68]
mov dword [eax + 8], ecx
mov ecx, dword [esp + 0x74]
mov dword [eax + 0xc], ecx
mov ecx, dword [0x93d218]
test ecx, ecx
jne 0x6adfe1
mov ecx, dword [esp + 0xcc]
mov edx, dword [esp + 0xfc]
jmp 0x6ae002
call fcn.0045f0f0
mov ecx, dword [esp + 0xcc]
mov dword [edi], ecx
mov dword [edi + 4], eax
mov edx, dword [esp + 0xfc]
mov ebx, dword [edx + 0xc8]
mov dword [edi + 8], ebx
mov dword [eax + 4], ecx
mov dword [edx + 0xcc], 1
mov dword [edx + 0xd0], 1
mov dword [edx + 0xc8], eax
mov edx, dword [esp + 0x138]
mov ebx, dword [esp + 0xfc]
mov eax, dword [esp + 0x10c]
jmp 0x6ae0f5
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x13c], 0
mov dword [esp + 0x140], 0
mov dword [esp + 0x144], eax
mov dword [esp + 0x148], ecx
add esp, 0x134
ret
call fcn.006d9a60
mov eax, dword [esp + 4]
mov dword [esp + 0x80], eax
nop
mov ecx, dword [esp]
mov dword [esp + 0xe0], ecx
lea edx, [0x75a420]
mov dword [esp], edx
call fcn.0040ca90
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x80]
mov dword [eax + 4], ecx
mov ecx, dword [0x93d218]
test ecx, ecx
jne 0x6ae0b2
mov ecx, dword [esp + 0xe0]
jmp 0x6ae0c0
call fcn.0045f0d0
mov ecx, dword [esp + 0xe0]
mov dword [edi], ecx
mov dword [eax], ecx
mov dword [esp + 0x13c], 0
mov dword [esp + 0x140], 0
lea ecx, [0x7da180]
mov dword [esp + 0x144], ecx
mov dword [esp + 0x148], eax
add esp, 0x134
ret
xor eax, eax
mov ecx, dword [edx + 0x10]
test ecx, ecx
je 0x6ae167
mov dword [esp + 0x104], eax
mov dword [esp], edx
call fcn.006c9120
mov eax, dword [esp + 0x10]
test eax, eax
jne 0x6ae192
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0xc]
test eax, eax
jne 0x6ae12d
xor ecx, ecx
xor edx, edx
lea eax, [0x93d000]
mov ebx, dword [esp + 0xfc]
mov dword [ebx + 0x100], ecx
mov dword [ebx + 0x104], edx
mov ecx, dword [0x93d218]
test ecx, ecx
je 0x6ae15a
call fcn.0045f0e0
mov dword [edi], eax
mov ecx, dword [ebx + 0xfc]
mov dword [edi + 4], ecx
mov dword [ebx + 0xfc], eax
mov eax, dword [esp + 0x104]
mov dword [esp + 0x13c], ebx
mov dword [esp + 0x140], eax
mov dword [esp + 0x144], 0
mov dword [esp + 0x148], 0
add esp, 0x134
ret
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x13c], 0
mov dword [esp + 0x140], 0
mov dword [esp + 0x144], eax
mov dword [esp + 0x148], ecx
add esp, 0x134
ret
mov dword [esp + 0xa0], eax
mov eax, dword [esp + 0x20]
mov dword [esp + 0x110], eax
call fcn.006d9970
mov eax, dword [esp]
mov dword [esp + 0x124], eax
mov ecx, dword [esp + 4]
mov dword [esp + 0xc8], ecx
mov edx, dword [esp + 0xa0]
mov edx, dword [edx + 0x10]
mov ebx, dword [esp + 0x110]
mov dword [esp], ebx
call edx
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp], 0
mov edx, dword [esp + 0x124]
mov dword [esp + 4], edx
mov edx, dword [esp + 0xc8]
mov dword [esp + 8], edx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
call fcn.0044b500
mov eax, dword [esp + 0x18]
mov dword [esp + 0x84], eax
nop
mov ecx, dword [esp + 0x14]
mov dword [esp + 0xe4], ecx
lea edx, [0x75a420]
mov dword [esp], edx
call fcn.0040ca90
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x84]
mov dword [eax + 4], ecx
mov ecx, dword [0x93d218]
test ecx, ecx
jne 0x6ae27b
mov ecx, dword [esp + 0xe4]
jmp 0x6ae289
call fcn.0045f0d0
mov ecx, dword [esp + 0xe4]
mov dword [edi], ecx
mov dword [eax], ecx
mov dword [esp + 0x13c], 0
mov dword [esp + 0x140], 0
lea ecx, [0x7da180]
mov dword [esp + 0x144], ecx
mov dword [esp + 0x148], eax
add esp, 0x134
ret
xor eax, eax
mov ecx, eax
call fcn.0045f150
xor eax, eax
mov ecx, eax
call fcn.0045f150
movzx ebp, byte [esp + ecx + 0x47]
xor ebp, ebx
xchg ebp, eax
mov byte [esp + ecx + 0x47], al
xchg ebp, eax
inc ecx
cmp ecx, 0x1b
jge 0x6ae2f2
lea edx, [0x78cfe7]
movzx ebx, byte [edx + ecx]
jb 0x6ae2ce
jmp 0x6ae3f4
mov dword [esp + 0xa4], eax
lea eax, [esp + 0x27]
mov dword [esp], eax
lea eax, [esp + 0x47]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x1b
call fcn.0044b7a0
mov eax, dword [esp + 0xa4]
mov eax, dword [eax + 0x10]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0xd0], ecx
mov edx, dword [esp + 0x10]
mov dword [esp + 0x6c], edx
mov ebx, dword [esp + 0x114]
mov dword [esp], ebx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp], 0
mov edx, dword [esp + 0xd0]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x6c]
mov dword [esp + 8], edx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
call fcn.0044b500
mov eax, dword [esp + 0x18]
mov dword [esp + 0x88], eax
nop
mov ecx, dword [esp + 0x14]
mov dword [esp + 0xe8], ecx
lea edx, [0x75a420]
mov dword [esp], edx
call fcn.0040ca90
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x88]
mov dword [eax + 4], ecx
mov ecx, dword [0x93d218]
test ecx, ecx
jne 0x6ae3b3
mov ecx, dword [esp + 0xe8]
jmp 0x6ae3c1
call fcn.0045f0d0
mov ecx, dword [esp + 0xe8]
mov dword [edi], ecx
mov dword [eax], ecx
mov dword [esp + 0x13c], 0
mov dword [esp + 0x140], 0
lea ecx, [0x7da180]
mov dword [esp + 0x144], ecx
mov dword [esp + 0x148], eax
add esp, 0x134
ret
mov eax, ecx
mov ecx, 0x1b
call fcn.0045f150
lea eax, [ebx + 1]
mov ebx, dword [esp + 0xdc]
mov dword [esp + 0xc8], eax
mov eax, dword [esp + 0x7c]
mov ebx, dword [esp + 0xc8]
cmp ebx, edx
jge 0x6ad9b4
movzx eax, word [ebp + ebx*2]
cmp ax, di
jne 0x6ae400
jmp 0x6ad98a
lea edx, [edi + 1]
movzx edi, word [esp + 0x66]
mov dword [esp + 0xc8], edx
mov edx, dword [esp + 0x9c]
mov edi, dword [esp + 0xc8]
cmp edi, ebp
jge 0x6ae467
mov edx, dword [ebx + edi*4]
cmp word [edx], ax
jne 0x6ae433
mov eax, edx
mov edx, dword [esp + 0x9c]
jmp 0x6ae469
xor eax, eax
mov ebp, dword [esp + 0x108]
movzx edi, word [esp + 0x66]
mov ebx, eax
mov eax, dword [esp + 0x7c]
jmp 0x6ad9b6
call fcn.0045dcb0
jmp fcn.006ad2f0