Function at 0x6e4270
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 4]
cmp eax, dword [ecx + 8]
jbe 0x6e4e71
sub esp, 0x84
mov edx, dword [esp + 0x88]
mov ebx, dword [edx + 8]
movzx ebp, byte [edx + 0x50]
nop
mov ecx, dword [ebx + 4]
mov ebx, dword [ebx]
mov eax, dword [esp + 0x98]
cmp eax, ecx
jae 0x6e4e6b
xchg ebp, eax
mov byte [esp + 0x22], al
xchg ebp, eax
lea ebp, [eax + eax*2]
lea ebx, [ebx + ebp*8]
cmp byte [ebx], 5
je 0x6e4dbb
mov ebx, dword [esp + 0x8c]
mov ebp, dword [ebx]
inc ebp
imul ebp, eax
mov esi, edx
mov edx, dword [esp + 0x9c]
add ebp, edx
mov dword [esp + 0x50], ebp
mov edi, edx
mov edx, dword [ebx + 0x28]
mov ebx, dword [ebx + 0x2c]
shr ebp, 5
cmp ebp, ebx
jae 0x6e4e62
mov dword [esp + 0x68], edx
mov ebx, dword [edx + ebp*4]
mov ecx, dword [esp + 0x50]
mov edx, 1
shl edx, cl
test edx, ebx
je 0x6e4da8
xor ecx, ecx
test cl, cl
je 0x6e4d9c
mov edx, dword [esp + 0x8c]
mov ebx, dword [edx + 0x20]
mov dword [esp + 0x50], ebx
mov ebp, dword [edx + 0x1c]
mov ecx, edx
mov edx, dword [edx + 0x24]
inc ebx
cmp ebx, edx
ja 0x6e4d2d
mov edx, dword [esp + 0x50]
lea ebx, [edx + 1]
mov dword [ecx + 0x20], ebx
lea edx, [edx + edx*2]
mov dword [ebp + edx*4], eax
lea ebx, [ebp + edx*4]
mov byte [ebx + 4], 0
mov dword [ebp + edx*4 + 8], edi
mov edx, dword [esp + 0x90]
mov ebx, dword [esp + 0x94]
jmp 0x6e447e
mov ecx, dword [esp + 0x8c]
mov edx, dword [esp + 0x90]
mov ebx, dword [esp + 0x88]
mov ebp, dword [esp + 0x2c]
mov ebp, dword [esp + 0x64]
mov dword [esp + 0x3c], edi
mov ebx, esi
mov edx, dword [esp + 0x2c]
mov esi, dword [esp + 0x88]
mov edi, dword [esp + 0x90]
mov dword [esp + 0x30], edx
mov byte [esp + 0x23], bl
mov ebp, dword [esi + 8]
mov edx, dword [ebp + 4]
mov ebp, dword [ebp]
mov ebx, dword [esp + 0x3c]
cmp ebx, edx
jae 0x6e4e50
lea edx, [ebx + ebx*2]
lea ebp, [ebp + edx*8]
lea edi, [esp + 0x6c]
mov esi, ebp
call fcn.004612c4
movzx ecx, byte [esp + 0x6c]
cmp cl, 4
ja 0x6e4b66
cmp cl, 1
ja 0x6e48a3
test cl, cl
jne 0x6e45ee
movzx ebp, byte [esp + 0x23]
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x6e44e5
mov edx, dword [esp + 0x74]
mov ecx, dword [esp + 0x30]
xor ebx, ebx
mov ebp, dword [esp + 0x8c]
mov esi, ebx
mov ebx, dword [ebp]
inc ebx
imul ebx, edx
add ebx, ecx
mov dword [esp + 0x50], ebx
mov edi, edx
mov edx, dword [ebp + 0x28]
mov ebp, dword [ebp + 0x2c]
shr ebx, 5
cmp ebx, ebp
jae 0x6e4e59
mov dword [esp + 0x2c], ecx
mov dword [esp + 0x68], edx
mov ebp, dword [edx + ebx*4]
mov ecx, dword [esp + 0x50]
mov edx, 1
shl edx, cl
test edx, ebp
je 0x6e44d1
xor ecx, ecx
test cl, cl
jne 0x6e436a
mov ebp, dword [esp + 0x8c]
mov ecx, dword [esp + 0x90]
mov edx, dword [esp + 0x88]
mov ecx, ebp
mov edx, dword [esp + 0x90]
mov ebx, eax
mov esi, dword [esp + 0x88]
mov ebp, dword [ecx + 0x20]
mov eax, ebx
mov ebx, dword [ecx + 0x1c]
test ebp, ebp
jle 0x6e4d01
mov edi, edx
lea edx, [ebp - 1]
mov dword [esp + 0x40], edx
lea ebp, [ebp + ebp*2]
mov edx, dword [ebx + ebp*4 - 0xc]
mov dword [esp + 0x38], edx
mov edx, dword [ebx + ebp*4 - 4]
lea ebx, [ebx + ebp*4 - 8]
movzx ebx, byte [ebx]
mov ebp, dword [esp + 0x40]
mov dword [ecx + 0x20], ebp
lea ebp, [ecx + 0x1c]
mov dword [esp + 0x64], ebp
mov dword [esp + 0x54], eax
mov eax, dword [esp + 0x38]
mov dword [esp + 0x3c], eax
mov eax, dword [esp + 0x54]
jmp 0x6e439f
or edx, ebp
mov ebp, dword [esp + 0x68]
mov dword [ebp + ebx*4], edx
mov ecx, 1
jmp 0x6e444f
mov ecx, ebp
mov ebp, dword [esp + 0x88]
mov esi, ebp
mov ebp, dword [ebp + 8]
nop
mov edi, edx
mov edx, dword [ebp + 4]
mov ebp, dword [ebp]
cmp ebx, edx
jae 0x6e4e17
lea edx, [ebp + edi*8]
cmp byte [edx], 5
je 0x6e45de
mov edx, dword [esp + 0x8c]
mov ebp, dword [edx + 0x20]
mov dword [esp + 0x50], ebp
mov edi, ebx
lea ebx, [ebp + 1]
mov ebp, dword [edx + 0x1c]
mov edx, dword [edx + 0x24]
cmp ebx, edx
ja 0x6e456e
mov edx, dword [esp + 0x50]
mov dword [esp + 0x60], ebp
lea ebx, [edx + 1]
mov ebp, dword [esp + 0x8c]
mov dword [ebp + 0x20], ebx
lea edx, [edx + edx*2]
mov ebx, dword [esp + 0x60]
mov dword [ebx + edx*4], edi
mov edi, ebp
lea ebp, [ebx + edx*4]
mov byte [ebp + 4], 1
mov ebp, dword [esp + 0x30]
mov dword [ebx + edx*4 + 8], ebp
mov edx, dword [esp + 0x70]
mov ecx, ebp
movzx ebx, byte [esp + 0x23]
jmp 0x6e4406
lea eax, [0xb0aac0]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov ecx, dword [esp + 0x50]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ebx
call fcn.00447080
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x8c]
mov dword [ebx + 0x24], edx
mov edx, dword [0x10fd360]
test edx, edx
jne 0x6e45d3
mov dword [ebx + 0x1c], eax
mov esi, dword [esp + 0x88]
mov edi, dword [esp + 0x3c]
mov edx, ecx
mov ebp, eax
mov eax, dword [esp + 0x94]
movzx ecx, byte [esp + 0x23]
jmp 0x6e4532
mov edi, dword [esp + 0x64]
call fcn.00460b40
jmp 0x6e45b3
mov ebp, dword [esp + 0x30]
mov edi, dword [esp + 0x8c]
jmp 0x6e455e
mov edx, dword [esp + 0x88]
mov ebx, dword [edx + 8]
mov ecx, dword [ebx + 4]
mov ebx, dword [ebx]
mov ebp, dword [esp + 0x70]
cmp ecx, ebp
jbe 0x6e4e10
mov esi, edx
lea edx, [ebp + ebp*2]
lea edx, [ebx + edx*8]
movzx edx, byte [edx]
mov edi, ebp
lea ebp, [edx - 7]
xchg ebp, eax
cmp al, 3
xchg ebp, eax
ja 0x6e476d
mov edx, dword [esp + 0x74]
cmp ecx, edx
jbe 0x6e4e09
mov dword [esp + 0x34], edx
lea ebp, [edx + edx*2]
lea ebx, [ebx + ebp*8]
cmp byte [ebx], 5
je 0x6e4762
mov ebx, dword [esp + 0x8c]
mov ebp, dword [ebx]
inc ebp
imul ebp, edx
mov edx, dword [esp + 0x30]
add ebp, edx
mov dword [esp + 0x50], ebp
mov edi, edx
mov edx, dword [ebx + 0x28]
mov ebx, dword [ebx + 0x2c]
shr ebp, 5
cmp ebp, ebx
jae 0x6e4e00
mov dword [esp + 0x68], edx
mov ebx, dword [edx + ebp*4]
mov ecx, dword [esp + 0x50]
mov edx, 1
shl edx, cl
test ebx, edx
je 0x6e474f
xor ecx, ecx
test cl, cl
je 0x6e4746
mov edx, dword [esp + 0x8c]
mov ebx, dword [edx + 0x20]
lea ebp, [ebx + 1]
mov ecx, ebx
mov ebx, dword [edx + 0x1c]
mov edx, dword [edx + 0x24]
cmp ebp, edx
ja 0x6e46e1
lea edx, [ecx + 1]
mov ebp, dword [esp + 0x8c]
mov dword [ebp + 0x20], edx
lea edx, [ecx + ecx*2]
mov ecx, ebp
mov ebp, dword [esp + 0x34]
mov dword [ebx + edx*4], ebp
lea ebp, [ebx + edx*4]
mov byte [ebp + 4], 0
mov dword [ebx + edx*4 + 8], edi
mov edx, dword [esp + 0x74]
mov ebp, dword [ecx]
mov ecx, ebp
movzx ebx, byte [esp + 0x23]
jmp 0x6e4406
lea eax, [0xb0aac0]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ebp
call fcn.00447080
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x8c]
mov dword [ebx + 0x24], edx
mov edx, dword [0x10fd360]
test edx, edx
jne 0x6e473b
mov dword [ebx + 0x1c], eax
mov esi, dword [esp + 0x88]
mov edi, dword [esp + 0x30]
mov ebx, eax
mov eax, dword [esp + 0x94]
jmp 0x6e46ab
mov edi, dword [esp + 0x64]
call fcn.00460b40
jmp 0x6e4722
mov ecx, dword [esp + 0x8c]
jmp 0x6e46cf
or edx, ebx
mov ebx, dword [esp + 0x68]
mov dword [ebx + ebp*4], edx
mov ecx, 1
jmp 0x6e468a
mov edi, dword [esp + 0x30]
xor ecx, ecx
jmp 0x6e468a
mov ebx, dword [esp + 0x8c]
mov ebp, dword [ebx]
mov dword [esp + 0x28], ebp
cmp dl, 5
je 0x6e489c
lea edx, [ebp + 1]
imul edx, edi
lea ecx, [edx + ebp]
mov dword [esp + 0x50], ecx
mov edx, dword [ebx + 0x28]
mov ebp, dword [ebx + 0x2c]
shr ecx, 5
cmp ecx, ebp
jae 0x6e4df7
mov dword [esp + 0x4c], ecx
mov ebp, dword [edx + ecx*4]
mov ecx, dword [esp + 0x50]
mov ebx, 1
shl ebx, cl
test ebp, ebx
je 0x6e4889
xor ecx, ecx
test cl, cl
je 0x6e487d
mov edx, dword [esp + 0x8c]
mov ebx, dword [edx + 0x20]
lea ebp, [ebx + 1]
mov ecx, ebx
mov ebx, dword [edx + 0x1c]
mov edx, dword [edx + 0x24]
cmp edx, ebp
jb 0x6e4814
lea edx, [ecx + 1]
mov ebp, dword [esp + 0x8c]
mov dword [ebp + 0x20], edx
lea edx, [ecx + ecx*2]
mov dword [ebx + edx*4], edi
mov ecx, ebp
lea ebp, [ebx + edx*4]
mov byte [ebp + 4], 0
mov ebp, dword [esp + 0x28]
mov dword [ebx + edx*4 + 8], ebp
mov edx, dword [esp + 0x70]
mov ecx, dword [esp + 0x30]
movzx ebx, byte [esp + 0x23]
jmp 0x6e4406
mov dword [esp + 0x48], edi
lea eax, [0xb0aac0]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ebp
call fcn.00447080
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x8c]
mov dword [ebx + 0x24], edx
mov edx, dword [0x10fd360]
test edx, edx
jne 0x6e4872
mov dword [ebx + 0x1c], eax
mov esi, dword [esp + 0x88]
mov edi, dword [esp + 0x48]
mov ebx, eax
mov eax, dword [esp + 0x94]
jmp 0x6e47de
mov edi, dword [esp + 0x64]
call fcn.00460b40
jmp 0x6e4859
mov ecx, dword [esp + 0x8c]
jmp 0x6e4802
or ebx, ebp
mov ebp, dword [esp + 0x4c]
mov dword [edx + ebp*4], ebx
mov ecx, 1
jmp 0x6e47bd
xor ecx, ecx
jmp 0x6e47bd
cmp cl, 2
jne 0x6e4a26
movzx ebp, byte [esp + 0x23]
xchg ebp, eax
test al, al
xchg ebp, eax
jne 0x6e4a01
mov ecx, ebp
mov ebp, dword [esp + 0x74]
mov esi, edx
mov edx, dword [esp + 0x8c]
mov edi, ebx
mov ebx, dword [edx + 4]
cmp dword [edx + 8], ebp
jbe 0x6e49f1
mov edx, dword [esp + 0x88]
mov edx, dword [edx + 8]
mov ebx, dword [ebx + ebp*4]
mov ebp, dword [edx + 4]
mov edx, dword [edx]
cmp edi, ebp
jae 0x6e4dde
lea edx, [edx + esi*8]
cmp byte [edx], 5
je 0x6e49e5
mov edx, dword [esp + 0x8c]
mov ebp, dword [edx + 0x20]
mov dword [esp + 0x50], ebp
mov esi, ebx
lea ebx, [ebp + 1]
mov ebp, dword [edx + 0x1c]
mov edx, dword [edx + 0x24]
cmp edx, ebx
jb 0x6e4974
mov edx, dword [esp + 0x50]
mov dword [esp + 0x5c], ebp
lea ebx, [edx + 1]
mov ebp, dword [esp + 0x8c]
mov dword [ebp + 0x20], ebx
lea edx, [edx + edx*2]
mov ebx, dword [esp + 0x5c]
mov dword [ebx + edx*4], edi
mov edi, ebp
lea ebp, [ebx + edx*4]
mov byte [ebp + 4], 1
mov dword [ebx + edx*4 + 8], esi
mov edx, dword [edi + 8]
mov ebx, dword [edi + 4]
mov ebp, dword [esp + 0x74]
cmp ebp, edx
jae 0x6e4dd5
mov edx, dword [esp + 0x30]
mov dword [ebx + ebp*4], edx
mov ebp, dword [esp + 0x70]
mov edx, ebp
mov ecx, dword [esp + 0x30]
movzx ebx, byte [esp + 0x23]
jmp 0x6e4406
mov dword [esp + 0x44], esi
lea eax, [0xb0aac0]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov ecx, dword [esp + 0x50]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ebx
call fcn.00447080
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x8c]
mov dword [ebx + 0x24], edx
mov edx, dword [0x10fd360]
test edx, edx
jne 0x6e49da
mov dword [ebx + 0x1c], eax
mov esi, dword [esp + 0x44]
mov edi, dword [esp + 0x3c]
mov edx, ecx
mov ebp, eax
mov eax, dword [esp + 0x94]
movzx ecx, byte [esp + 0x23]
jmp 0x6e491f
mov edi, dword [esp + 0x64]
call fcn.00460b40
jmp 0x6e49bd
mov edi, dword [esp + 0x8c]
jmp 0x6e4947
mov edx, dword [esp + 0x30]
mov edi, dword [esp + 0x8c]
jmp 0x6e4960
mov edx, dword [esp + 0x8c]
mov ecx, dword [edx + 8]
mov ebx, dword [edx + 4]
mov ebp, dword [esp + 0x74]
cmp ecx, ebp
jbe 0x6e4de7
mov edx, dword [esp + 0x30]
mov dword [ebx + ebp*4], edx
jmp 0x6e4457
cmp cl, 3
jne 0x6e4a8c
mov ecx, dword [esp + 0x90]
mov edx, dword [ecx + 0x14]
mov dword [esp], eax
mov ebx, dword [esp + 0x30]
mov dword [esp + 4], ebx
call edx
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov eax, dword [esp + 0x74]
mov byte [esp + 8], al
call fcn.006e52d0
movzx eax, byte [esp + 0xc]
test al, al
je 0x6e4a80
mov edx, dword [esp + 0x70]
mov eax, dword [esp + 0x94]
mov ecx, dword [esp + 0x30]
movzx ebx, byte [esp + 0x23]
jmp 0x6e4406
mov eax, dword [esp + 0x94]
jmp 0x6e4457
mov edx, dword [esp + 0x8c]
mov ebx, dword [edx + 8]
mov ebp, dword [edx + 4]
test ebx, ebx
je 0x6e4b57
cmp ebx, 1
jle 0x6e4b4e
mov ebx, dword [esp + 0x30]
mov dword [ebp + 4], ebx
mov ecx, dword [edx + 0x14]
mov ebp, dword [edx + 0x10]
cmp ecx, 1
jbe 0x6e4dcb
mov esi, ebp
mov ebp, dword [ebp + 4]
cmp ebp, 0xffffffff
jne 0x6e4b34
mov ebp, dword [edx + 4]
mov edi, edx
mov edx, dword [edx + 8]
cmp edx, ecx
jge 0x6e4b30
cmp ebp, esi
je 0x6e4aed
mov dword [esp], esi
mov dword [esp + 4], ebp
shl edx, 2
mov dword [esp + 8], edx
call fcn.004614f0
movzx edx, byte [esp + 0x22]
test dl, dl
je 0x6e4b21
mov ebx, dword [esp + 0x30]
mov ebp, dword [esp + 0x8c]
cmp dword [ebp], ebx
je 0x6e4b12
mov eax, dword [esp + 0x94]
jmp 0x6e4457
mov byte [esp + 0xa0], 1
add esp, 0x84
ret
mov byte [esp + 0xa0], 1
add esp, 0x84
ret
mov edx, ecx
jmp 0x6e4ad6
mov edi, edx
movzx edx, byte [esp + 0x22]
test dl, dl
je 0x6e4aed
test ebx, ebx
jle 0x6e4aed
cmp ebp, ebx
jge 0x6e4aed
mov edx, edi
jmp 0x6e4aca
mov ebx, dword [esp + 0x30]
jmp 0x6e4ab1
mov byte [esp + 0xa0], 1
add esp, 0x84
ret
cmp cl, 7
ja 0x6e4bf5
cmp cl, 5
je 0x6e4e38
cmp cl, 6
jne 0x6e4b8f
mov edx, dword [esp + 0x70]
mov ecx, dword [esp + 0x30]
movzx ebx, byte [esp + 0x23]
jmp 0x6e4406
mov ecx, dword [esp + 0x90]
mov edx, dword [ecx + 0x20]
mov dword [esp], eax
mov ebx, dword [esp + 0x30]
mov dword [esp + 4], ebx
call edx
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x24], ecx
lea edx, [esp + 0x6c]
mov dword [esp], edx
mov dword [esp + 4], eax
call fcn.006ddb30
cmp dword [esp + 8], 0xffffffff
je 0x6e4be9
mov ebp, dword [esp + 0x24]
mov eax, dword [esp + 0x30]
lea ecx, [eax + ebp]
mov edx, dword [esp + 0x70]
mov eax, dword [esp + 0x94]
movzx ebx, byte [esp + 0x23]
jmp 0x6e4406
mov eax, dword [esp + 0x94]
jmp 0x6e4457
cmp cl, 8
je 0x6e4ca7
cmp cl, 9
je 0x6e4c5c
cmp cl, 0xa
jne 0x6e4e20
mov ecx, dword [esp + 0x90]
mov edx, dword [ecx + 0x20]
mov dword [esp], eax
mov ebx, dword [esp + 0x30]
mov dword [esp + 4], ebx
call edx
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
cmp eax, 0xa
je 0x6e4c50
cmp eax, 0xffffffff
je 0x6e4c50
mov ebp, dword [esp + 0x30]
add ecx, ebp
mov edx, dword [esp + 0x70]
mov eax, dword [esp + 0x94]
movzx ebx, byte [esp + 0x23]
jmp 0x6e4406
mov eax, dword [esp + 0x94]
jmp 0x6e4457
mov ecx, dword [esp + 0x90]
mov edx, dword [ecx + 0x20]
mov dword [esp], eax
mov ebx, dword [esp + 0x30]
mov dword [esp + 4], ebx
call edx
mov eax, dword [esp + 0xc]
cmp dword [esp + 8], 0xffffffff
je 0x6e4c9b
mov ebp, dword [esp + 0x30]
lea ecx, [ebp + eax]
mov edx, dword [esp + 0x70]
mov eax, dword [esp + 0x94]
movzx ebx, byte [esp + 0x23]
jmp 0x6e4406
mov eax, dword [esp + 0x94]
jmp 0x6e4457
mov ecx, dword [esp + 0x90]
mov edx, dword [ecx + 0x20]
mov dword [esp], eax
mov ebx, dword [esp + 0x30]
mov dword [esp + 4], ebx
call edx
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x7c]
mov ebx, dword [esp + 0x78]
test edx, edx
jbe 0x6e4dee
cmp dword [ebx], eax
jne 0x6e4cf5
mov ebp, dword [esp + 0x30]
add ecx, ebp
mov edx, dword [esp + 0x70]
mov eax, dword [esp + 0x94]
movzx ebx, byte [esp + 0x23]
jmp 0x6e4406
mov eax, dword [esp + 0x94]
jmp 0x6e4457
movzx eax, byte [esp + 0x22]
test al, al
je 0x6e4d29
mov eax, dword [ecx + 0x10]
cmp dword [ecx + 0x14], 1
jle 0x6e4d29
mov eax, dword [eax + 4]
test eax, eax
setge al
mov byte [esp + 0xa0], al
add esp, 0x84
ret
xor eax, eax
jmp 0x6e4d1b
lea eax, [0xb0aac0]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov ecx, dword [esp + 0x50]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ebx
call fcn.00447080
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x8c]
mov dword [ebx + 0x24], edx
mov edx, dword [0x10fd360]
test edx, edx
jne 0x6e4d92
mov dword [ebx + 0x1c], eax
mov esi, dword [esp + 0x88]
mov edi, dword [esp + 0x9c]
mov edx, ecx
mov ebp, eax
mov eax, dword [esp + 0x98]
mov ecx, ebx
jmp 0x6e433e
lea edi, [ebx + 0x1c]
call fcn.00460b40
jmp 0x6e4d72
mov ecx, dword [esp + 0x8c]
jmp 0x6e4357
or edx, ebx
mov ebx, dword [esp + 0x68]
mov dword [ebx + ebp*4], edx
mov ecx, 1
jmp 0x6e4313
mov esi, edx
mov edi, dword [esp + 0x9c]
xor ecx, ecx
jmp 0x6e4313
mov eax, 1
call fcn.00460bc0
mov eax, ebp
mov ecx, edx
call fcn.00460bd0
mov eax, edi
mov ecx, ebp
call fcn.00460bd0
mov eax, ebp
call fcn.00460bd0
xor eax, eax
mov ecx, edx
call fcn.00460bc0
mov eax, ecx
mov ecx, ebp
call fcn.00460bd0
mov eax, ebp
mov ecx, ebx
call fcn.00460bd0
mov eax, edx
call fcn.00460bd0
mov eax, ebp
call fcn.00460bd0
mov eax, ebx
mov ecx, edx
call fcn.00460bd0
lea eax, [0xaa9660]
mov dword [esp], eax
lea eax, [0xc75d70]
mov dword [esp + 4], eax
call fcn.00433120
lea eax, [0xaa9660]
mov dword [esp], eax
lea eax, [0xc75d78]
mov dword [esp + 4], eax
call fcn.00433120
mov eax, ebx
mov ecx, edx
call fcn.00460bd0
mov eax, ebx
mov ecx, ebp
call fcn.00460bd0
mov eax, ebp
mov ecx, ebx
call fcn.00460bd0
call fcn.00460bd0
nop
call fcn.0045f5f0
jmp fcn.006e4270