Function at 0x6eb830
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0xe8]
cmp eax, dword [ecx + 8]
jbe 0x6ecaf8
sub esp, 0x168
mov ecx, dword [esp + 0x170]
movzx edx, byte [ecx]
cmp dl, 9
ja 0x6ec028
cmp dl, 4
ja 0x6ebbfb
cmp dl, 2
jbe 0x6ebad6
cmp dl, 3
jne 0x6eba8c
mov edx, dword [ecx + 0x18]
test edx, edx
je 0x6eb996
mov dword [esp + 0x50], edx
mov eax, dword [esp + 0x16c]
xor ebx, ebx
xor ebp, ebp
xor esi, esi
jmp 0x6eb8cb
mov edi, dword [esp + 0x50]
mov edx, dword [esp + 0x16c]
mov ebx, dword [esp + 0x170]
mov ebp, dword [esp + 0x4c]
mov edx, edi
mov ebx, ebp
mov ebp, eax
mov esi, ecx
mov eax, dword [esp + 0x16c]
mov ecx, dword [esp + 0x170]
cmp ebx, edx
jge 0x6eb981
mov dword [esp + 0x2c], ebp
mov dword [esp + 0x34], esi
mov edi, dword [ecx + 0x1c]
mov ebp, dword [ecx + 0x14]
lea esi, [ebx + 1]
test esi, esi
jl 0x6ecad7
cmp ebx, esi
ja 0x6ecad7
cmp esi, edi
ja 0x6ecad7
mov dword [esp + 0x20], ebx
mov dword [esp + 0x4c], esi
movzx edx, word [ecx + 2]
mov word [esp + 0x10], dx
mov dword [esp], eax
sub edi, ebx
shl ebx, 2
mov esi, edi
xchg edi, ebx
neg ebx
xchg edi, ebx
sar edi, 0x1f
and ebx, edi
add ebx, ebp
mov dword [esp + 4], ebx
mov dword [esp + 8], 1
mov dword [esp + 0xc], esi
call fcn.006ed060
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x20]
test edx, edx
je 0x6eb89f
mov edx, dword [esp + 0x16c]
mov dword [esp], edx
mov ebx, dword [esp + 0x34]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x2c]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
call fcn.006ecb10
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
jmp 0x6eb89f
mov dword [esp + 0x174], esi
mov dword [esp + 0x178], ebp
add esp, 0x168
ret
mov ecx, dword [esp + 0x16c]
mov edx, dword [ecx]
mov edx, dword [edx + 4]
mov dword [esp + 0x50], edx
lea edi, [esp + 0x138]
xor eax, eax
call fcn.0044c95a
mov byte [esp + 0x138], 6
mov ecx, dword [esp + 0x16c]
mov ecx, dword [ecx]
mov ebx, dword [ecx + 8]
mov ebp, dword [ecx + 4]
mov eax, edx
mov edx, dword [ecx]
mov esi, ecx
lea ecx, [ebp + 1]
cmp ecx, ebx
jg 0x6eba35
lea ecx, [ebp + 1]
mov dword [esi + 4], ecx
lea ecx, [ebp + ebp*2]
lea edi, [edx + ecx*8]
mov ecx, dword [0xc6f140]
test ecx, ecx
jne 0x6eba12
lea esi, [esp + 0x138]
call fcn.0044ce34
mov dword [esp + 0x174], eax
shl eax, 1
mov dword [esp + 0x178], eax
add esp, 0x168
ret
lea eax, [0x850080]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x138]
mov dword [esp + 8], eax
call fcn.0040f790
mov eax, dword [esp + 0x50]
jmp 0x6eb9fb
mov dword [esp + 0x5c], esi
lea eax, [0x850080]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], ecx
call fcn.00438c30
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0x5c]
mov dword [edi + 8], edx
mov edx, dword [0xc6f140]
test edx, edx
jne 0x6eba85
mov dword [edi], eax
mov esi, edi
mov ebp, ecx
mov edx, eax
mov eax, dword [esp + 0x50]
jmp 0x6eb9d8
call fcn.0044c860
jmp 0x6eba76
mov eax, dword [ecx + 0x1c]
mov edx, dword [ecx + 0x18]
mov ebx, dword [ecx + 0x14]
movzx ecx, word [ecx + 2]
mov word [esp + 0x10], cx
mov ecx, dword [esp + 0x16c]
mov dword [esp], ecx
mov dword [esp + 4], ebx
mov dword [esp + 8], edx
mov dword [esp + 0xc], eax
call fcn.006ed060
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x174], ecx
mov dword [esp + 0x178], eax
add esp, 0x168
ret
cmp dl, 1
je 0x6ebbde
cmp dl, 2
jne 0x6ecade
mov ecx, dword [esp + 0x16c]
mov edx, dword [ecx]
mov edx, dword [edx + 4]
mov dword [esp + 0x50], edx
lea edi, [esp + 0x150]
xor eax, eax
call fcn.0044c95a
mov byte [esp + 0x150], 6
mov ecx, dword [esp + 0x16c]
mov ecx, dword [ecx]
mov ebx, dword [ecx + 8]
mov ebp, dword [ecx + 4]
mov eax, edx
mov edx, dword [ecx]
mov esi, ecx
lea ecx, [ebp + 1]
cmp ecx, ebx
jg 0x6ebb87
lea ecx, [ebp + 1]
mov dword [esi + 4], ecx
lea ecx, [ebp + ebp*2]
lea edi, [edx + ecx*8]
mov ecx, dword [0xc6f140]
test ecx, ecx
jne 0x6ebb64
lea esi, [esp + 0x150]
call fcn.0044ce34
mov dword [esp + 0x174], eax
shl eax, 1
mov dword [esp + 0x178], eax
add esp, 0x168
ret
lea eax, [0x850080]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x150]
mov dword [esp + 8], eax
call fcn.0040f790
mov eax, dword [esp + 0x50]
jmp 0x6ebb4d
mov dword [esp + 0x5c], esi
lea eax, [0x850080]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], ecx
call fcn.00438c30
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0x5c]
mov dword [edi + 8], edx
mov edx, dword [0xc6f140]
test edx, edx
jne 0x6ebbd7
mov dword [edi], eax
mov esi, edi
mov ebp, ecx
mov edx, eax
mov eax, dword [esp + 0x50]
jmp 0x6ebb2a
call fcn.0044c860
jmp 0x6ebbc8
mov dword [esp + 0x174], 0
mov dword [esp + 0x178], 0
add esp, 0x168
ret
cmp dl, 6
ja 0x6ebcab
cmp dl, 5
jne 0x6ebc5a
mov eax, dword [esp + 0x16c]
mov dword [esp], eax
mov eax, dword [0xc55360]
mov ecx, dword [0xc5535c]
mov edx, dword [0xc55358]
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
mov word [esp + 0x10], 0
call fcn.006ed060
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x174], ecx
mov dword [esp + 0x178], eax
add esp, 0x168
ret
mov eax, dword [esp + 0x16c]
mov dword [esp], eax
mov eax, dword [0xc55350]
mov ecx, dword [0xc5534c]
mov edx, dword [0xc55348]
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
mov word [esp + 0x10], 0
call fcn.006ed060
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x174], ecx
mov dword [esp + 0x178], eax
add esp, 0x168
ret
cmp dl, 7
jne 0x6ebdd9
mov ecx, dword [esp + 0x16c]
mov edx, dword [ecx]
mov edx, dword [edx + 4]
mov dword [esp + 0x50], edx
lea edi, [esp + 0x120]
xor eax, eax
call fcn.0044c95a
mov byte [esp + 0x120], 3
mov ecx, dword [esp + 0x16c]
mov ebx, dword [ecx]
mov ebp, dword [ebx + 4]
mov eax, edx
mov edx, dword [ebx]
mov esi, ecx
mov ecx, dword [ebx + 8]
mov edi, ebx
lea ebx, [ebp + 1]
cmp ebx, ecx
jg 0x6ebd7d
lea ecx, [ebp + 1]
mov dword [edi + 4], ecx
lea ecx, [ebp + ebp*2]
lea edi, [edx + ecx*8]
mov ecx, dword [0xc6f140]
test ecx, ecx
jne 0x6ebd5a
lea esi, [esp + 0x120]
call fcn.0044ce34
mov ecx, dword [esp + 0x16c]
mov ecx, dword [ecx]
mov edx, dword [ecx + 4]
mov ecx, dword [ecx]
cmp eax, edx
jae 0x6ecad0
lea edx, [eax + eax*2]
shl edx, 3
mov dword [ecx + edx + 8], 1
mov dword [esp + 0x174], eax
shl eax, 1
mov dword [esp + 0x178], eax
add esp, 0x168
ret
lea eax, [0x850080]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x120]
mov dword [esp + 8], eax
call fcn.0040f790
mov eax, dword [esp + 0x50]
jmp 0x6ebd1f
mov dword [esp + 0x5c], edi
lea eax, [0x850080]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebx
call fcn.00438c30
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0x5c]
mov dword [edi + 8], edx
mov edx, dword [0xc6f140]
test edx, edx
jne 0x6ebdd2
mov dword [edi], eax
mov esi, dword [esp + 0x16c]
mov ebp, ecx
mov edx, eax
mov eax, dword [esp + 0x50]
jmp 0x6ebcfc
call fcn.0044c860
jmp 0x6ebdbe
cmp dl, 8
jne 0x6ebf04
mov ecx, dword [esp + 0x16c]
mov edx, dword [ecx]
mov edx, dword [edx + 4]
mov dword [esp + 0x50], edx
lea edi, [esp + 0x108]
xor eax, eax
call fcn.0044c95a
mov byte [esp + 0x108], 3
mov ecx, dword [esp + 0x16c]
mov ebx, dword [ecx]
mov ebp, dword [ebx + 8]
mov eax, edx
mov edx, dword [ebx]
mov esi, ecx
mov ecx, dword [ebx + 4]
mov edi, ebx
lea ebx, [ecx + 1]
cmp ebx, ebp
jg 0x6ebeaa
lea ebx, [ecx + 1]
mov dword [edi + 4], ebx
lea ecx, [ecx + ecx*2]
lea edi, [edx + ecx*8]
mov ecx, dword [0xc6f140]
test ecx, ecx
jne 0x6ebe87
lea esi, [esp + 0x108]
call fcn.0044ce34
mov ecx, dword [esp + 0x16c]
mov ecx, dword [ecx]
mov edx, dword [ecx + 4]
mov ecx, dword [ecx]
cmp eax, edx
jae 0x6ecac9
lea edx, [eax + eax*2]
shl edx, 3
mov dword [ecx + edx + 8], 2
mov dword [esp + 0x174], eax
shl eax, 1
mov dword [esp + 0x178], eax
add esp, 0x168
ret
lea eax, [0x850080]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x108]
mov dword [esp + 8], eax
call fcn.0040f790
mov eax, dword [esp + 0x50]
jmp 0x6ebe4c
mov dword [esp + 0x5c], edi
lea eax, [0x850080]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], ebx
call fcn.00438c30
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0x5c]
mov dword [edi + 8], edx
mov edx, dword [0xc6f140]
test edx, edx
jne 0x6ebefd
mov dword [edi], eax
mov esi, dword [esp + 0x16c]
mov edx, eax
mov eax, dword [esp + 0x50]
jmp 0x6ebe2a
call fcn.0044c860
jmp 0x6ebeeb
mov ecx, dword [esp + 0x16c]
mov edx, dword [ecx]
mov edx, dword [edx + 4]
mov dword [esp + 0x50], edx
lea edi, [esp + 0xf0]
xor eax, eax
call fcn.0044c95a
mov byte [esp + 0xf0], 3
mov ecx, dword [esp + 0x16c]
mov ebx, dword [ecx]
mov ebp, dword [ebx + 8]
mov eax, edx
mov edx, dword [ebx + 4]
mov esi, ecx
mov ecx, dword [ebx]
mov edi, ebx
lea ebx, [edx + 1]
cmp ebx, ebp
jg 0x6ebfcc
lea ebx, [edx + 1]
mov dword [edi + 4], ebx
lea edx, [edx + edx*2]
lea edi, [ecx + edx*8]
mov ecx, dword [0xc6f140]
test ecx, ecx
jne 0x6ebfa9
lea esi, [esp + 0xf0]
call fcn.0044ce34
mov ecx, dword [esp + 0x16c]
mov ecx, dword [ecx]
mov edx, dword [ecx + 4]
mov ecx, dword [ecx]
cmp eax, edx
jae 0x6ecac2
lea edx, [eax + eax*2]
shl edx, 3
mov dword [ecx + edx + 8], 4
mov dword [esp + 0x174], eax
shl eax, 1
mov dword [esp + 0x178], eax
add esp, 0x168
ret
lea eax, [0x850080]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0xf0]
mov dword [esp + 8], eax
call fcn.0040f790
mov eax, dword [esp + 0x50]
jmp 0x6ebf6e
mov dword [esp + 0x5c], edi
lea eax, [0x850080]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], ebx
call fcn.00438c30
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0x5c]
mov dword [edi + 8], edx
mov edx, dword [0xc6f140]
test edx, edx
jne 0x6ec021
mov dword [edi], eax
mov esi, dword [esp + 0x16c]
mov edx, ecx
mov ecx, eax
mov eax, dword [esp + 0x50]
jmp 0x6ebf4c
call fcn.0044c860
jmp 0x6ec00d
cmp dl, 0xd
jbe 0x6ec406
cmp dl, 0xf
jbe 0x6ec315
cmp dl, 0x10
je 0x6ec29f
cmp dl, 0x12
jne 0x6ec1ff
mov edx, dword [ecx + 4]
mov ecx, dword [ecx + 8]
test ecx, ecx
je 0x6ec115
mov dword [esp + 0x50], ecx
mov dword [esp + 0x58], edx
xor eax, eax
xor ebx, ebx
xor ebp, ebp
jmp 0x6ec07d
mov esi, dword [esp + 0x24]
inc esi
mov edx, dword [esp + 0x58]
mov ebx, eax
mov ebp, ecx
mov ecx, dword [esp + 0x50]
mov eax, esi
cmp eax, ecx
jge 0x6ec100
mov dword [esp + 0x24], eax
mov esi, dword [edx + eax*4]
test eax, eax
jne 0x6ec0a9
mov eax, dword [esp + 0x16c]
mov dword [esp], eax
mov dword [esp + 4], esi
call fcn.006eb830
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
jmp 0x6ec06a
mov dword [esp + 0x30], ebx
mov dword [esp + 0x38], ebp
mov eax, dword [esp + 0x16c]
mov dword [esp], eax
mov dword [esp + 4], esi
call fcn.006eb830
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0x16c]
mov dword [esp], edx
mov ebx, dword [esp + 0x38]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x30]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
call fcn.006ecb10
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
jmp 0x6ec06a
mov dword [esp + 0x174], ebp
mov dword [esp + 0x178], ebx
add esp, 0x168
ret
mov ecx, dword [esp + 0x16c]
mov edx, dword [ecx]
mov edx, dword [edx + 4]
mov dword [esp + 0x50], edx
lea edi, [esp + 0x60]
xor eax, eax
call fcn.0044c95a
mov byte [esp + 0x60], 6
mov ecx, dword [esp + 0x16c]
mov ecx, dword [ecx]
mov ebx, dword [ecx + 8]
mov ebp, dword [ecx + 4]
mov eax, edx
mov edx, dword [ecx]
mov esi, ecx
lea ecx, [ebp + 1]
cmp ecx, ebx
jg 0x6ec1a8
lea ecx, [ebp + 1]
mov dword [esi + 4], ecx
lea ecx, [ebp + ebp*2]
lea edi, [edx + ecx*8]
mov ecx, dword [0xc6f140]
test ecx, ecx
jne 0x6ec188
lea esi, [esp + 0x60]
call fcn.0044ce34
mov dword [esp + 0x174], eax
shl eax, 1
mov dword [esp + 0x178], eax
add esp, 0x168
ret
lea eax, [0x850080]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x60]
mov dword [esp + 8], eax
call fcn.0040f790
mov eax, dword [esp + 0x50]
jmp 0x6ec171
mov dword [esp + 0x5c], esi
lea eax, [0x850080]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], ecx
call fcn.00438c30
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0x5c]
mov dword [edi + 8], edx
mov edx, dword [0xc6f140]
test edx, edx
jne 0x6ec1f8
mov dword [edi], eax
mov esi, edi
mov ebp, ecx
mov edx, eax
mov eax, dword [esp + 0x50]
jmp 0x6ec151
call fcn.0044c860
jmp 0x6ec1e9
cmp dl, 0x13
jne 0x6ecade
mov eax, dword [ecx + 8]
mov dword [esp + 0x50], eax
mov ecx, dword [ecx + 4]
mov dword [esp + 0x54], ecx
xor edx, edx
xor ebx, ebx
xor ebp, ebp
jmp 0x6ec286
mov dword [esp + 0x28], ebx
mov dword [esp + 0x3c], ebp
mov dword [esp + 0x4c], edx
mov eax, dword [ecx + edx*4]
mov ebx, dword [esp + 0x16c]
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.006eb830
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0x16c]
mov dword [esp], edx
mov ebx, dword [esp + 0x3c]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x28]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
call fcn.006ecb80
mov eax, dword [esp + 0x4c]
lea edx, [eax + 1]
mov ebx, dword [esp + 0x18]
mov ebp, dword [esp + 0x14]
mov eax, dword [esp + 0x50]
mov ecx, dword [esp + 0x54]
cmp edx, eax
jl 0x6ec21e
mov dword [esp + 0x174], ebp
mov dword [esp + 0x178], ebx
add esp, 0x168
ret
mov eax, dword [ecx + 4]
mov edx, dword [ecx + 8]
test edx, edx
jbe 0x6eca83
mov eax, dword [eax]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x16c]
mov dword [esp], eax
call fcn.006eb830
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0x170]
movzx edx, word [edx + 2]
test dx, 0x20
setne dl
mov byte [esp + 0xc], dl
mov edx, dword [esp + 0x16c]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.006ecd20
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x174], ecx
mov dword [esp + 0x178], eax
add esp, 0x168
ret
cmp dl, 0xe
jne 0x6ec390
mov eax, dword [ecx + 4]
mov edx, dword [ecx + 8]
test edx, edx
jbe 0x6eca91
mov eax, dword [eax]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x16c]
mov dword [esp], eax
call fcn.006eb830
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0x170]
movzx edx, word [edx + 2]
test dx, 0x20
setne dl
mov byte [esp + 0xc], dl
mov edx, dword [esp + 0x16c]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.006ece90
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x174], ecx
mov dword [esp + 0x178], eax
add esp, 0x168
ret
mov eax, dword [ecx + 4]
mov edx, dword [ecx + 8]
test edx, edx
jbe 0x6eca8a
mov eax, dword [eax]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x16c]
mov dword [esp], eax
call fcn.006eb830
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0x170]
movzx edx, word [edx + 2]
test dx, 0x20
setne dl
mov byte [esp + 0xc], dl
mov edx, dword [esp + 0x16c]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.006ed000
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x174], ecx
mov dword [esp + 0x178], eax
add esp, 0x168
ret
cmp dl, 0xb
ja 0x6ec662
cmp dl, 0xa
jne 0x6ec53d
mov ecx, dword [esp + 0x16c]
mov edx, dword [ecx]
mov edx, dword [edx + 4]
mov dword [esp + 0x50], edx
lea edi, [esp + 0xd8]
xor eax, eax
call fcn.0044c95a
mov byte [esp + 0xd8], 3
mov ecx, dword [esp + 0x16c]
mov ebx, dword [ecx]
mov ebp, dword [ebx]
mov eax, edx
mov edx, dword [ebx + 4]
mov esi, ecx
mov ecx, dword [ebx + 8]
mov edi, ebx
lea ebx, [edx + 1]
cmp ebx, ecx
jg 0x6ec4e1
lea ecx, [edx + 1]
mov dword [edi + 4], ecx
lea ecx, [edx + edx*2]
lea edi, [ebp + ecx*8]
mov ecx, dword [0xc6f140]
test ecx, ecx
jne 0x6ec4be
lea esi, [esp + 0xd8]
call fcn.0044ce34
mov ecx, dword [esp + 0x16c]
mov ecx, dword [ecx]
mov edx, dword [ecx]
mov ecx, dword [ecx + 4]
cmp eax, ecx
jae 0x6ecabb
lea ecx, [eax + eax*2]
shl ecx, 3
mov dword [edx + ecx + 8], 8
mov dword [esp + 0x174], eax
shl eax, 1
mov dword [esp + 0x178], eax
add esp, 0x168
ret
lea eax, [0x850080]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0xd8]
mov dword [esp + 8], eax
call fcn.0040f790
mov eax, dword [esp + 0x50]
jmp 0x6ec483
mov dword [esp + 0x5c], edi
lea eax, [0x850080]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], edx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebx
call fcn.00438c30
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0x5c]
mov dword [edi + 8], edx
mov edx, dword [0xc6f140]
test edx, edx
jne 0x6ec536
mov dword [edi], eax
mov esi, dword [esp + 0x16c]
mov edx, ecx
mov ebp, eax
mov eax, dword [esp + 0x50]
jmp 0x6ec460
call fcn.0044c860
jmp 0x6ec522
mov ecx, dword [esp + 0x16c]
mov edx, dword [ecx]
mov edx, dword [edx + 4]
mov dword [esp + 0x50], edx
lea edi, [esp + 0xc0]
xor eax, eax
call fcn.0044c95a
mov byte [esp + 0xc0], 3
mov ecx, dword [esp + 0x16c]
mov ebx, dword [ecx]
mov ebp, dword [ebx]
mov eax, edx
mov edx, dword [ebx + 4]
mov esi, ecx
mov ecx, dword [ebx + 8]
mov edi, ebx
lea ebx, [edx + 1]
cmp ebx, ecx
jg 0x6ec606
lea ecx, [edx + 1]
mov dword [edi + 4], ecx
lea ecx, [edx + edx*2]
lea edi, [ebp + ecx*8]
mov ecx, dword [0xc6f140]
test ecx, ecx
jne 0x6ec5e3
lea esi, [esp + 0xc0]
call fcn.0044ce34
mov ecx, dword [esp + 0x16c]
mov ecx, dword [ecx]
mov edx, dword [ecx + 4]
mov ecx, dword [ecx]
cmp eax, edx
jae 0x6ecab4
lea edx, [eax + eax*2]
shl edx, 3
mov dword [ecx + edx + 8], 0x10
mov dword [esp + 0x174], eax
shl eax, 1
mov dword [esp + 0x178], eax
add esp, 0x168
ret
lea eax, [0x850080]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0xc0]
mov dword [esp + 8], eax
call fcn.0040f790
mov eax, dword [esp + 0x50]
jmp 0x6ec5a8
mov dword [esp + 0x5c], edi
lea eax, [0x850080]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], edx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebx
call fcn.00438c30
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0x5c]
mov dword [edi + 8], edx
mov edx, dword [0xc6f140]
test edx, edx
jne 0x6ec65b
mov dword [edi], eax
mov esi, dword [esp + 0x16c]
mov edx, ecx
mov ebp, eax
mov eax, dword [esp + 0x50]
jmp 0x6ec585
call fcn.0044c860
jmp 0x6ec647
cmp dl, 0xc
jne 0x6ec790
mov ecx, dword [esp + 0x16c]
mov edx, dword [ecx]
mov edx, dword [edx + 4]
mov dword [esp + 0x50], edx
lea edi, [esp + 0xa8]
xor eax, eax
call fcn.0044c95a
mov byte [esp + 0xa8], 3
mov ecx, dword [esp + 0x16c]
mov ebx, dword [ecx]
mov ebp, dword [ebx]
mov eax, edx
mov edx, dword [ebx + 4]
mov esi, ecx
mov ecx, dword [ebx + 8]
mov edi, ebx
lea ebx, [edx + 1]
cmp ebx, ecx
jg 0x6ec734
lea ecx, [edx + 1]
mov dword [edi + 4], ecx
lea ecx, [edx + edx*2]
mov edx, dword [0xc6f140]
lea edi, [ebp + ecx*8]
test edx, edx
jne 0x6ec711
lea esi, [esp + 0xa8]
call fcn.0044ce34
mov ecx, dword [esp + 0x16c]
mov ecx, dword [ecx]
mov edx, dword [ecx + 4]
mov ecx, dword [ecx]
cmp eax, edx
jae 0x6ecaad
lea edx, [eax + eax*2]
shl edx, 3
mov dword [ecx + edx + 8], 0x20
mov dword [esp + 0x174], eax
shl eax, 1
mov dword [esp + 0x178], eax
add esp, 0x168
ret
lea eax, [0x850080]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0xa8]
mov dword [esp + 8], eax
call fcn.0040f790
mov eax, dword [esp + 0x50]
jmp 0x6ec6d6
mov dword [esp + 0x5c], edi
lea eax, [0x850080]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], edx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebx
call fcn.00438c30
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0x5c]
mov dword [edi + 8], edx
mov edx, dword [0xc6f140]
test edx, edx
jne 0x6ec789
mov dword [edi], eax
mov esi, dword [esp + 0x16c]
mov edx, ecx
mov ebp, eax
mov eax, dword [esp + 0x50]
jmp 0x6ec6b3
call fcn.0044c860
jmp 0x6ec775
mov edx, dword [esp + 0x16c]
mov ebx, dword [edx]
mov ebp, dword [ecx + 0x30]
mov dword [esp + 0x50], ebp
mov ebx, dword [ebx + 4]
mov dword [esp + 0x4c], ebx
lea edi, [esp + 0x90]
xor eax, eax
call fcn.0044c95a
mov byte [esp + 0x90], 2
mov ecx, dword [edx]
mov dword [esp + 0x5c], ecx
mov esi, ebp
mov ebp, dword [ecx + 4]
mov edi, ebx
mov ebx, dword [ecx]
mov edx, dword [ecx + 8]
lea ecx, [ebp + 1]
cmp ecx, edx
jg 0x6eca2c
lea ecx, [ebp + 1]
mov edx, dword [esp + 0x5c]
mov dword [edx + 4], ecx
lea ecx, [ebp + ebp*2]
mov edx, dword [0xc6f140]
lea ecx, [ebx + ecx*8]
test edx, edx
jne 0x6eca00
mov edx, edi
mov edi, ecx
mov ebx, esi
lea esi, [esp + 0x90]
call fcn.0044ce34
mov ecx, dword [esp + 0x16c]
mov ebp, dword [ecx]
mov esi, dword [ebp + 4]
mov ebp, dword [ebp]
cmp edx, esi
jae 0x6ecaa6
shl ebx, 1
lea esi, [edx + edx*2]
shl esi, 3
mov dword [ebp + esi + 8], ebx
mov ebp, dword [ecx]
mov esi, dword [ebp + 0x10]
inc ebx
cmp esi, ebx
jge 0x6ec83b
mov dword [ebp + 0x10], ebx
mov ebx, dword [esp + 0x170]
mov ebp, dword [ebx + 4]
mov esi, dword [ebx + 8]
test esi, esi
jbe 0x6eca9f
mov eax, dword [ebp]
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.006eb830
mov eax, dword [esp + 0x16c]
mov ecx, dword [eax]
mov edx, dword [esp + 0xc]
mov dword [esp + 0x48], edx
mov ebx, dword [esp + 8]
mov dword [esp + 0x44], ebx
mov ebp, dword [esp + 0x170]
mov ebp, dword [ebp + 0x30]
mov dword [esp + 0x50], ebp
mov ecx, dword [ecx + 4]
mov dword [esp + 0x40], ecx
lea edi, [esp + 0x78]
mov esi, eax
xor eax, eax
call fcn.0044c95a
mov byte [esp + 0x78], 2
mov eax, dword [esi]
mov ecx, dword [eax + 8]
mov edi, dword [eax + 4]
mov edx, dword [eax]
lea ebx, [edi + 1]
cmp ebx, ecx
jg 0x6ec9a2
lea ecx, [edi + 1]
mov dword [eax + 4], ecx
lea eax, [edi + edi*2]
mov ecx, dword [0xc6f140]
lea edi, [edx + eax*8]
test ecx, ecx
jne 0x6ec978
mov eax, esi
lea esi, [esp + 0x78]
call fcn.0044ce34
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
mov ecx, dword [ecx]
mov ebx, dword [esp + 0x40]
cmp ebx, edx
jae 0x6eca98
shl ebp, 1
or ebp, 1
lea edx, [ebx + ebx*2]
shl edx, 3
mov dword [ecx + edx + 8], ebp
mov ecx, dword [eax]
mov edx, dword [ecx + 0x10]
inc ebp
cmp edx, ebp
jge 0x6ec908
mov dword [ecx + 0x10], ebp
mov dword [esp], eax
mov ecx, dword [esp + 0x4c]
mov dword [esp + 4], ecx
shl ecx, 1
mov dword [esp + 8], ecx
mov ecx, dword [esp + 0x44]
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0x48]
mov dword [esp + 0x10], ecx
call fcn.006ecb10
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x16c]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov eax, dword [esp + 0x40]
mov dword [esp + 0xc], eax
shl eax, 1
mov dword [esp + 0x10], eax
call fcn.006ecb10
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x174], ecx
mov dword [esp + 0x178], eax
add esp, 0x168
ret
lea eax, [0x850080]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x78]
mov dword [esp + 8], eax
call fcn.0040f790
mov eax, dword [esp + 0x16c]
mov ebp, dword [esp + 0x50]
jmp 0x6ec8d9
mov dword [esp + 0x5c], eax
lea eax, [0x850080]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], edi
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebx
call fcn.00438c30
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0x5c]
mov dword [edi + 8], edx
mov edx, dword [0xc6f140]
test edx, edx
jne 0x6ec9f9
mov dword [edi], eax
mov ebp, dword [esp + 0x50]
mov esi, dword [esp + 0x16c]
mov edx, eax
mov eax, edi
mov edi, ecx
jmp 0x6ec8b4
call fcn.0044c860
jmp 0x6ec9e3
lea eax, [0x850080]
mov dword [esp], eax
mov dword [esp + 4], ecx
lea eax, [esp + 0x90]
mov dword [esp + 8], eax
call fcn.0040f790
xor eax, eax
mov edx, dword [esp + 0x4c]
mov ebx, dword [esp + 0x50]
jmp 0x6ec80b
lea eax, [0x850080]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ecx
call fcn.00438c30
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0x5c]
mov dword [edi + 8], edx
mov edx, dword [0xc6f140]
test edx, edx
jne 0x6eca7c
mov dword [edi], eax
mov esi, dword [esp + 0x50]
mov edi, dword [esp + 0x4c]
mov ebp, ecx
mov ebx, eax
xor eax, eax
jmp 0x6ec7da
call fcn.0044c860
jmp 0x6eca69
call fcn.00426770
ud2
call fcn.00426770
ud2
call fcn.00426770
ud2
call fcn.00426770
ud2
call fcn.00426770
ud2
call fcn.00426770
ud2
call fcn.00426770
ud2
call fcn.00426770
ud2
call fcn.00426770
ud2
call fcn.00426770
ud2
call fcn.00426770
ud2
call fcn.00426770
ud2
call fcn.00426870
ud2
lea eax, [0x80a3e0]
mov dword [esp], eax
lea eax, [0x91ff38]
mov dword [esp + 4], eax
call fcn.00427650
ud2
call fcn.0044b100
jmp fcn.006eb830