Function at 0x6ceca0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffff634
push ebx
push esi
push edi
mov dword [ebp - 8], ecx
mov byte [ebp - 1], dl
mov esi, eax
mov ebx, dword [ebp + 0xc]
xor eax, eax
mov dword [ebp - 0x18], eax
xor eax, eax
mov dword [ebp - 0x6c], eax
mov byte [ebp - 0x58], 0
xor eax, eax
mov dword [ebp - 0x30], eax
xor eax, eax
mov dword [ebp - 0x50], eax
xor ecx, ecx
push ebp
push 0x6cfbfa
push dword fs:[ecx]
mov dword fs:[ecx], esp
lea eax, [ebp - 0x84]
xor ecx, ecx
mov edx, 0x30
call fcn.00404d90
mov eax, dword [ebx]
mov dword [ebp - 0x5c], eax
mov dl, 1
mov eax, dword [0x4306d0]
call fcn.00405828
mov dword [ebp - 0x18], eax
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x28]
mov dword [ebp - 0x90], eax
xor eax, eax
mov dword [ebp - 0xb8], eax
mov dword [ebp - 0xb4], eax
xor eax, eax
mov dword [ebp - 0xb0], eax
mov eax, dword [ebp - 8]
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0
je 0x6cf217
mov eax, dword [ebx]
cmp dword [eax + 8], 1
jne 0x6ced99
mov eax, dword [ebx]
cmp dword [eax + 0x10], 1
jne 0x6ced99
mov eax, dword [ebp - 8]
mov edx, dword [eax]
call dword [edx + 0x10]
cmp al, 1
je 0x6cedc9
lea ecx, [ebp - 0x36]
lea edx, [ebp - 0x33]
mov eax, dword [ebp - 8]
call fcn.0080c01c
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0
jne 0x6cedc9
mov eax, dword [ebp - 8]
mov edx, dword [eax]
call dword [edx + 8]
push eax
push 1
mov eax, dword [ebp - 8]
mov edx, dword [eax]
call dword [edx + 0xc]
mov ecx, eax
mov dl, 1
mov eax, dword [0x85ef34]
call fcn.00873288
mov dword [ebp - 0x30], eax
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 0x30]
call fcn.00875810
jmp 0x6cedc9
mov eax, dword [ebp - 8]
mov edx, dword [eax]
call dword [edx + 0x10]
cmp al, 1
jne 0x6cedc9
mov dl, 1
mov eax, dword [0x85ef34]
call fcn.008730d8
mov dword [ebp - 0x30], eax
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax]
call dword [ecx + 0x2c]
mov dl, 5
mov eax, dword [ebp - 0x30]
call fcn.00874524
mov edx, dword [ebx]
cmp dword [edx + 0x10], 1
jne 0x6cee6b
mov eax, dword [ebx]
mov eax, dword [eax + 8]
cmp eax, 8
jle 0x6cede8
cmp eax, 0x10
jne 0x6cee6b
mov eax, dword [ebx]
cmp dword [eax + 8], 1
jle 0x6cee6b
mov eax, dword [ebx]
mov ecx, dword [eax + 8]
mov eax, 1
shl eax, cl
mov edx, pe_nt_image_headers32
call fcn.00805a1c
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x3b8]
push eax
push 0xff
mov eax, dword [ebp - 0x50]
push eax
mov ecx, dword [ebp - 0x30]
mov dl, 1
mov eax, dword [0x712b68]
call fcn.00713874
mov dword [ebp - 0x6c], eax
mov eax, dword [ebx]
movzx eax, byte [eax + 0x3c]
cmp al, 5
je 0x6cee43
cmp al, 8
je 0x6cee43
cmp al, 9
je 0x6cee43
mov eax, dword [ebx]
mov byte [eax + 0x3c], 0
mov eax, dword [ebp - 0x6c]
cmp byte [eax + 0xc], 0
je 0x6cee54
mov eax, dword [ebx]
mov byte [eax + 0x48], 1
jmp 0x6cee6b
mov eax, dword [ebx]
mov byte [eax + 0x48], 3
mov eax, dword [ebx]
cmp dword [eax + 8], 0x10
jne 0x6cee6b
mov eax, dword [ebx]
mov dword [eax + 8], 8
mov eax, dword [ebx]
cmp byte [eax + 0x48], 3
jne 0x6cee81
mov eax, dword [ebx]
cmp dword [eax + 0x10], 1
jle 0x6cee81
mov eax, dword [ebx]
mov byte [eax + 0x48], 2
mov eax, dword [ebp - 0x30]
mov edx, dword [eax]
call dword [edx + 0x10]
cmp al, 8
jne 0x6ceea5
mov eax, dword [ebx]
mov dword [eax + 0x10], 3
mov eax, dword [ebx]
mov dword [eax + 8], 0x10
mov eax, dword [ebx]
mov byte [eax + 0x48], 2
mov eax, dword [ebx]
cmp dword [eax + 8], 8
jle 0x6ceecd
mov eax, dword [ebx]
cmp dword [eax + 0x10], 1
je 0x6ceecd
mov eax, dword [ebx]
mov dword [eax + 0x10], 3
mov eax, dword [ebx]
mov dword [eax + 8], 8
mov eax, dword [ebx]
mov byte [eax + 0x48], 2
mov eax, dword [ebx]
movzx eax, byte [eax + 0x48]
cmp al, 1
je 0x6ceedb
test al, al
jne 0x6ceef1
mov eax, dword [ebx]
cmp dword [eax + 8], 8
jne 0x6ceef1
mov eax, dword [ebx]
cmp dword [eax + 0x10], 3
jne 0x6ceef1
mov eax, dword [ebx]
mov byte [eax + 0x48], 2
mov eax, dword [ebx]
cmp byte [eax + 0x48], 2
jne 0x6cef0f
mov eax, dword [ebx]
cmp dword [eax + 0x10], 1
jne 0x6cef0f
mov eax, dword [ebx]
cmp dword [eax + 8], 1
jne 0x6cef0f
mov eax, dword [ebx]
mov byte [eax + 0x48], 1
mov eax, dword [ebx]
cmp byte [eax + 0x48], 6
jne 0x6cef25
mov eax, dword [ebx]
cmp byte [eax + 0x3c], 7
je 0x6cef25
mov eax, dword [ebx]
mov byte [eax + 0x48], 2
mov eax, dword [ebx]
cmp byte [eax + 0x48], 2
jne 0x6cef3e
mov eax, dword [ebx]
cmp dword [eax + 0x10], 3
jle 0x6cef3e
mov eax, dword [ebx]
mov dword [eax + 0x10], 3
mov eax, dword [ebp - 0x30]
mov edx, dword [eax]
call dword [edx + 0x10]
cmp al, 8
jne 0x6cef62
mov eax, dword [ebx]
mov dword [eax + 0x10], 3
mov eax, dword [ebx]
mov dword [eax + 8], 0x10
mov eax, dword [ebx]
mov byte [eax + 0x48], 2
mov eax, dword [ebp - 0x30]
mov edx, dword [eax]
call dword [edx + 0x10]
cmp al, 7
jne 0x6cef86
mov eax, dword [ebx]
mov dword [eax + 0x10], 4
mov eax, dword [ebx]
mov dword [eax + 8], 8
mov eax, dword [ebx]
mov byte [eax + 0x48], 5
xor eax, eax
mov dword [ebp - 0x7c], eax
mov eax, dword [ebx]
movzx eax, byte [eax + 0x48]
cmp eax, 7
ja case.default.0x6cef96
jmp dword [eax*4 + 0x6cef9d]
mov byte [ebp - 0x74], 1
jmp 0x6ceffa
mov byte [ebp - 0x74], 1
jmp 0x6ceffa
mov byte [ebp - 0x74], 3
jmp 0x6ceffa
mov byte [ebp - 0x74], 2
jmp 0x6ceffa
mov byte [ebp - 0x74], 2
jmp 0x6ceffa
mov byte [ebp - 0x74], 5
mov eax, dword [ebx]
mov dword [eax + 0x10], 4
jmp 0x6ceffa
mov byte [ebp - 0x74], 2
jmp 0x6ceffa
mov byte [ebp - 0x74], 7
jmp 0x6ceffa
mov byte [ebp - 0x74], 2
mov byte [ebp - 0x37], 0
mov eax, dword [ebx]
movzx eax, byte [eax + 0x3c]
movzx edx, al
cmp edx, 0xa
ja case.0x6cf010.0
jmp dword [edx*4 + 0x6cf017]
mov dword [ebp - 0x80], 5
mov dword [ebp - 0x70], 2
mov eax, dword [ebx]
cmp dword [eax + 0x78], 0
je 0x6cf069
mov eax, dword [ebx]
mov eax, dword [eax + 0x78]
mov dword [ebp - 0x84], eax
jmp case.default.0x6cf12e
mov eax, dword [0x8e622c]
cmp dword [eax], 0
je 0x6cf085
mov eax, dword [0x8e622c]
mov eax, dword [eax]
mov dword [ebp - 0x84], eax
jmp case.default.0x6cf12e
mov dword [ebp - 0x80], 1
mov dword [ebp - 0x70], 1
jmp case.default.0x6cf12e
mov dword [ebp - 0x80], 0x8005
jmp case.default.0x6cf12e
mov dword [ebp - 0x80], 2
mov byte [ebp - 0x74], 0
mov byte [ebp - 0x37], 1
jmp case.default.0x6cf12e
mov dword [ebp - 0x80], 3
mov byte [ebp - 0x74], 0
mov byte [ebp - 0x37], 1
jmp case.default.0x6cf12e
mov dword [ebp - 0x80], 3
mov dword [ebp - 0x7c], 1
mov byte [ebp - 0x74], 0
mov byte [ebp - 0x37], 1
jmp case.default.0x6cf12e
mov dword [ebp - 0x80], 4
mov byte [ebp - 0x74], 0
mov byte [ebp - 0x37], 1
jmp case.default.0x6cf12e
cmp al, 7
jne 0x6cf108
mov dword [ebp - 0x80], 7
jmp 0x6cf10f
mov dword [ebp - 0x80], 6
mov eax, dword [ebx]
mov eax, dword [eax + 0x80]
mov dword [ebp - 0x64], eax
mov eax, dword [ebx]
movzx eax, byte [eax + 0x84]
mov byte [ebp - 0x60], al
and eax, 0x7f
cmp eax, 4
ja case.default.0x6cf12e
jmp dword [eax*4 + 0x6cf135]
mov byte [ebp - 0x74], 2
jmp case.default.0x6cf12e
mov byte [ebp - 0x74], 1
jmp case.default.0x6cf12e
mov byte [ebp - 0x74], 6
jmp case.default.0x6cf12e
mov byte [ebp - 0x74], 5
jmp case.default.0x6cf12e
mov byte [ebp - 0x74], 2
mov byte [ebp - 0x60], 0
jmp case.default.0x6cf12e
mov dword [ebp - 0x80], 0x80b2
jmp case.default.0x6cf12e
mov dword [ebp - 0x80], 1
mov eax, dword [ebx]
mov eax, dword [eax + 0x90]
mov dword [ebp - 0x78], eax
mov eax, dword [ebp - 0x30]
mov edx, dword [eax]
call dword [edx + 0x10]
cmp al, 1
je 0x6cf1a9
cmp dword [ebp - 0x80], 1
jle 0x6cf1a9
cmp dword [ebp - 0x80], 5
jge 0x6cf1a9
mov dword [ebp - 0x80], 1
mov byte [ebp - 0x37], 0
mov eax, dword [ebx]
cmp dword [eax + 8], 8
jne 0x6cf1e0
mov eax, dword [ebx]
mov edi, dword [eax + 0x10]
cmp edi, 1
je 0x6cf1c0
cmp edi, 3
jne 0x6cf1e0
cmp byte [ebp - 0x74], 3
je 0x6cf1e0
mov eax, dword [ebx]
cmp dword [eax + 8], 1
jle 0x6cf1d4
cmp byte [ebp - 0x74], 1
je 0x6cf1e0
mov eax, dword [ebp - 0x30]
call fcn.00873aa4
test al, al
je 0x6cf1e7
mov dword [ebp - 0x70], 1
cmp byte [ebp - 0x37], 0
je 0x6cf217
mov eax, dword [ebp - 0x30]
cmp eax, dword [ebp - 8]
jne 0x6cf20f
mov dl, 1
mov eax, dword [0x85ef34]
call fcn.008730d8
mov dword [ebp - 0x30], eax
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax]
call dword [ecx + 0x2c]
mov eax, dword [ebp - 0x30]
call fcn.0080e848
mov eax, esi
call fcn.00440538
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x24], edx
xor eax, eax
mov dword [ebp - 0x48], eax
xor eax, eax
mov dword [ebp - 0x4c], eax
cmp byte [ebp - 1], 0
je 0x6cf300
lea edx, [ebp - 0x14]
mov ecx, 4
mov eax, esi
mov edi, dword [eax]
call dword [edi + 0xc]
cmp word [ebp - 0x14], 0x4949
je 0x6cf267
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x28]
mov byte [eax], 1
xor eax, eax
mov dword [ebp - 0xc], eax
call fcn.004064e8
jmp 0x6cfc01
xor eax, eax
mov dword [ebp - 0x40], eax
mov eax, esi
call fcn.00440538
mov dword [ebp - 0x1c], eax
lea edx, [ebp - 0x3c]
mov ecx, 4
mov eax, esi
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [ebx]
mov eax, dword [eax + 0x40]
cmp eax, dword [ebp - 0x40]
je 0x6cf29f
cmp dword [ebp - 0x3c], 0
jne 0x6cf2ab
mov eax, dword [ebx]
mov eax, dword [eax + 0x40]
cmp eax, dword [ebp - 0x40]
jle 0x6cf2ab
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x3c], 0
je 0x6cf2ea
mov eax, dword [ebp - 0x3c]
cdq
push edx
push eax
mov eax, esi
call fcn.00440558
lea edx, [ebp - 0x42]
mov ecx, 2
mov eax, esi
mov edi, dword [eax]
call dword [edi + 0xc]
movzx eax, word [ebp - 0x42]
add eax, eax
add eax, eax
lea eax, [eax + eax*2]
xor edx, edx
push edx
push eax
mov dl, 1
mov eax, esi
mov ecx, dword [eax]
call dword [ecx + 0x18]
inc dword [ebp - 0x40]
jmp 0x6cf26c
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0xc], eax
push 0
push 0
mov dl, 2
mov eax, esi
mov ecx, dword [eax]
call dword [ecx + 0x18]
jmp 0x6cf319
push 8
lea ecx, [ebp - 0x14]
mov edx, dword [ebp + 8]
mov edx, dword [edx + 0x28]
mov eax, esi
call fcn.00870d18
mov dword [ebp - 0xc], 1
mov eax, dword [ebx]
cmp byte [eax + 0x194], 0
je 0x6cf339
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x28]
push eax
mov ecx, ebx
mov edx, esi
mov eax, dword [ebp - 0x18]
call fcn.006d08c0
jmp 0x6cf3b0
mov eax, dword [ebx]
mov eax, dword [eax + 0x60]
push eax
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x28]
push eax
mov ecx, 0x10e
mov edx, esi
mov eax, dword [ebp - 0x18]
call fcn.006ccd14
mov eax, dword [ebx]
fild dword [eax + 0x1c]
add esp, 0xfffffff8
fstp qword [esp]
wait
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x28]
push eax
push 0
mov ecx, 0x11a
mov edx, esi
mov eax, dword [ebp - 0x18]
call fcn.006ccbbc
mov eax, dword [ebx]
fild dword [eax + 0x20]
add esp, 0xfffffff8
fstp qword [esp]
wait
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x28]
push eax
push 0
mov ecx, 0x11b
mov edx, esi
mov eax, dword [ebp - 0x18]
call fcn.006ccbbc
push 0
mov cx, 2
mov edx, 0x128
mov eax, dword [ebp - 0x18]
call fcn.006ccb2c
cmp dword [ebp - 0x30], 0
je 0x6cf79d
mov eax, dword [ebp - 0x30]
mov edx, dword [eax]
call dword [edx + 0xc]
mov ecx, eax
mov edx, pe_nt_image_headers32
mov eax, dword [ebp - 0x18]
call fcn.006cc94c
mov eax, dword [ebp - 0x30]
mov edx, dword [eax]
call dword [edx + 8]
mov ecx, eax
mov edx, 0x101
mov eax, dword [ebp - 0x18]
call fcn.006cc94c
mov eax, dword [ebp - 0x30]
mov edx, dword [eax]
call dword [edx + 0x10]
and eax, 0x7f
cmp eax, 8
ja case.0x6cf3fc.0
jmp dword [eax*4 + 0x6cf403]
push 0
mov cx, 1
mov edx, 0x102
mov eax, dword [ebp - 0x18]
call fcn.006ccb2c
jmp case.0x6cf3fc.0
push 0
mov cx, 8
mov edx, 0x102
mov eax, dword [ebp - 0x18]
call fcn.006ccb2c
jmp case.0x6cf3fc.0
push 0
mov cx, 8
mov edx, 0x102
mov eax, dword [ebp - 0x18]
call fcn.006ccb2c
jmp case.0x6cf3fc.0
push 0
mov cx, 0x10
mov edx, 0x102
mov eax, dword [ebp - 0x18]
call fcn.006ccb2c
jmp case.0x6cf3fc.0
mov word [ebp - 0x9bc], 0x10
mov word [ebp - 0x9ba], 0x10
mov word [ebp - 0x9b8], 0x10
lea eax, [ebp - 0x9bc]
push eax
push 2
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x28]
push eax
mov ecx, 0x102
mov edx, esi
mov eax, dword [ebp - 0x18]
call fcn.006cd17c
jmp case.0x6cf3fc.0
mov word [ebp - 0x9c4], 8
mov word [ebp - 0x9c2], 8
mov word [ebp - 0x9c0], 8
mov word [ebp - 0x9be], 8
lea eax, [ebp - 0x9c4]
push eax
push 3
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x28]
push eax
mov ecx, 0x102
mov edx, esi
mov eax, dword [ebp - 0x18]
call fcn.006cd17c
jmp case.0x6cf3fc.0
movzx eax, byte [ebp - 0x74]
dec al
je 0x6cf57a
sub al, 2
je 0x6cf563
sub al, 2
jne 0x6cf591
mov word [ebp - 0x9c4], 8
mov word [ebp - 0x9c2], 8
mov word [ebp - 0x9c0], 8
mov word [ebp - 0x9be], 8
lea eax, [ebp - 0x9c4]
push eax
push 3
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x28]
push eax
mov ecx, 0x102
mov edx, esi
mov eax, dword [ebp - 0x18]
call fcn.006cd17c
jmp case.0x6cf3fc.0
push 0
mov eax, dword [ebx]
movzx ecx, word [eax + 8]
mov edx, 0x102
mov eax, dword [ebp - 0x18]
call fcn.006ccb2c
jmp case.0x6cf3fc.0
push 0
mov eax, dword [ebx]
movzx ecx, word [eax + 8]
mov edx, 0x102
mov eax, dword [ebp - 0x18]
call fcn.006ccb2c
jmp case.0x6cf3fc.0
mov word [ebp - 0x9bc], 8
mov word [ebp - 0x9ba], 8
mov word [ebp - 0x9b8], 8
lea eax, [ebp - 0x9bc]
push eax
push 2
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x28]
push eax
mov ecx, 0x102
mov edx, esi
mov eax, dword [ebp - 0x18]
call fcn.006cd17c
push 0
movzx ecx, word [ebp - 0x80]
mov edx, 0x103
mov eax, dword [ebp - 0x18]
call fcn.006ccb2c
mov eax, dword [ebp - 0x30]
mov edx, dword [eax]
call dword [edx + 0x10]
cmp al, 1
jne 0x6cf627
movzx eax, byte [ebp - 0x74]
sub al, 1
jb 0x6cf5f9
je 0x6cf60f
jmp 0x6cf6d7
push 0
xor ecx, ecx
mov edx, 0x106
mov eax, dword [ebp - 0x18]
call fcn.006ccb2c
jmp 0x6cf6d7
push 0
mov cx, 1
mov edx, 0x106
mov eax, dword [ebp - 0x18]
call fcn.006ccb2c
jmp 0x6cf6d7
movzx eax, byte [ebp - 0x74]
cmp eax, 7
ja case.0x6cf634.0
jmp dword [eax*4 + 0x6cf63b]
push 0
mov cx, 5
mov edx, 0x106
mov eax, dword [ebp - 0x18]
call fcn.006ccb2c
jmp 0x6cf6d7
push 0
mov cx, 8
mov edx, 0x106
mov eax, dword [ebp - 0x18]
call fcn.006ccb2c
jmp 0x6cf6d7
push 0
mov cx, 3
mov edx, 0x106
mov eax, dword [ebp - 0x18]
call fcn.006ccb2c
jmp 0x6cf6d7
push 0
mov cx, 1
mov edx, 0x106
mov eax, dword [ebp - 0x18]
call fcn.006ccb2c
jmp 0x6cf6d7
push 0
mov cx, 6
mov edx, 0x106
mov eax, dword [ebp - 0x18]
call fcn.006ccb2c
jmp 0x6cf6d7
push 0
mov cx, 2
mov edx, 0x106
mov eax, dword [ebp - 0x18]
call fcn.006ccb2c
mov eax, dword [ebx]
mov eax, dword [eax + 0x5c]
push eax
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x28]
push eax
mov ecx, 0x10d
mov edx, esi
mov eax, dword [ebp - 0x18]
call fcn.006ccd14
mov eax, dword [ebp - 0x80]
cmp eax, 2
je 0x6cf705
cmp eax, 3
je 0x6cf705
cmp eax, 4
jne 0x6cf73c
push 0
movzx ecx, word [ebp - 0x78]
mov edx, 0x10a
mov eax, dword [ebp - 0x18]
call fcn.006ccb2c
push 0
mov cx, 1
mov edx, 0x11c
mov eax, dword [ebp - 0x18]
call fcn.006ccb2c
push 0
xor ecx, ecx
mov edx, 0x147
mov eax, dword [ebp - 0x18]
call fcn.006ccb2c
mov eax, dword [ebx]
mov eax, dword [eax + 8]
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 0x30]
movzx eax, byte [eax + 4]
mov byte [ebp - 0x51], al
mov eax, dword [ebp - 0x30]
movzx edx, byte [0x6cfc10]
mov byte [eax + 4], dl
cmp dword [ebp - 0x80], 6
jne 0x6cf77b
lea eax, [ebp - 0x84]
push eax
mov eax, dword [ebp + 8]
push eax
lea ecx, [ebp - 0x18]
mov edx, dword [ebp - 0x30]
mov eax, esi
call fcn.006cd558
jmp 0x6cf793
lea eax, [ebp - 0x84]
push eax
mov eax, dword [ebp + 8]
push eax
lea ecx, [ebp - 0x18]
mov edx, dword [ebp - 0x30]
mov eax, esi
call fcn.006cd7d8
mov eax, dword [ebp - 0x30]
movzx edx, byte [ebp - 0x51]
mov byte [eax + 4], dl
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x28]
cmp byte [eax], 0
jne 0x6cfbba
cmp dword [ebp - 0x30], 0
je 0x6cfaa5
mov eax, dword [ebp - 0x30]
mov edx, dword [eax]
call dword [edx + 0x10]
cmp al, 1
jne 0x6cf7da
push 0
mov cx, 1
mov edx, 0x115
mov eax, dword [ebp - 0x18]
call fcn.006ccb2c
jmp 0x6cf882
movzx eax, byte [ebp - 0x74]
dec al
je 0x6cf817
sub al, 2
je 0x6cf802
sub al, 2
jne 0x6cf82c
push 0
mov cx, 4
mov edx, 0x115
mov eax, dword [ebp - 0x18]
call fcn.006ccb2c
jmp 0x6cf882
push 0
mov cx, 1
mov edx, 0x115
mov eax, dword [ebp - 0x18]
call fcn.006ccb2c
jmp 0x6cf882
push 0
mov cx, 1
mov edx, 0x115
mov eax, dword [ebp - 0x18]
call fcn.006ccb2c
jmp 0x6cf882
cmp byte [ebp - 0x58], 0
je 0x6cf86f
push 0
mov cx, 4
mov edx, 0x115
mov eax, dword [ebp - 0x18]
call fcn.006ccb2c
mov word [ebp - 0x9c8], 1
lea eax, [ebp - 0x9c8]
push eax
push 0
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x28]
push eax
mov ecx, 0x152
mov edx, esi
mov eax, dword [ebp - 0x18]
call fcn.006cd17c
jmp 0x6cf882
push 0
mov cx, 3
mov edx, 0x115
mov eax, dword [ebp - 0x18]
call fcn.006ccb2c
cmp dword [ebp - 0x70], 2
jne 0x6cf89b
push 0
mov cx, 2
mov edx, 0x13d
mov eax, dword [ebp - 0x18]
call fcn.006ccb2c
mov eax, dword [ebx]
mov eax, dword [eax + 0x64]
push eax
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x28]
push eax
mov ecx, 0x11d
mov edx, esi
mov eax, dword [ebp - 0x18]
call fcn.006ccd14
mov eax, dword [ebx]
mov eax, dword [eax + 0x50]
test eax, eax
je 0x6cf8eb
mov dword [ebp - 0x9cc], eax
fild dword [ebp - 0x9cc]
add esp, 0xfffffff8
fstp qword [esp]
wait
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x28]
push eax
push 0
mov ecx, 0x11e
mov edx, esi
mov eax, dword [ebp - 0x18]
call fcn.006ccbbc
mov eax, dword [ebx]
mov eax, dword [eax + 0x54]
test eax, eax
je 0x6cf91f
mov dword [ebp - 0x9cc], eax
fild dword [ebp - 0x9cc]
add esp, 0xfffffff8
fstp qword [esp]
wait
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x28]
push eax
push 0
mov ecx, 0x11f
mov edx, esi
mov eax, dword [ebp - 0x18]
call fcn.006ccbbc
mov eax, dword [ebp - 0x80]
cmp eax, 3
jne 0x6cf939
mov ecx, dword [ebp - 0x7c]
mov edx, 0x124
mov eax, dword [ebp - 0x18]
call fcn.006cc94c
jmp 0x6cf94d
cmp eax, 4
jne 0x6cf94d
xor ecx, ecx
mov edx, 0x124
mov eax, dword [ebp - 0x18]
call fcn.006cc94c
mov eax, dword [ebp - 0x80]
cmp eax, 3
je 0x6cf95a
cmp eax, 4
jne 0x6cf969
xor ecx, ecx
mov edx, 0x125
mov eax, dword [ebp - 0x18]
call fcn.006cc94c
xor ecx, ecx
mov edx, 0xfe
mov eax, dword [ebp - 0x18]
call fcn.006cc94c
mov eax, dword [ebx]
cmp dword [eax + 0x68], 0xffffffff
jg 0x6cf988
mov eax, dword [ebx]
cmp dword [eax + 0x6c], 0xffffffff
jle 0x6cf9c1
mov eax, dword [ebx]
movzx eax, word [eax + 0x68]
mov word [ebp - 0x9cc], ax
mov eax, dword [ebx]
movzx eax, word [eax + 0x6c]
mov word [ebp - 0x9ca], ax
lea eax, [ebp - 0x9cc]
push eax
push 1
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x28]
push eax
mov ecx, 0x129
mov edx, esi
mov eax, dword [ebp - 0x18]
call fcn.006cd17c
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x28]
push eax
mov ecx, dword [ebx]
mov edx, esi
mov eax, dword [ebp - 0x18]
call fcn.006cd204
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x28]
push eax
mov ecx, dword [ebx]
mov edx, esi
mov eax, dword [ebp - 0x18]
call fcn.006cd29c
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x28]
push eax
mov ecx, dword [ebx]
mov edx, esi
mov eax, dword [ebp - 0x18]
call fcn.006cd3a8
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x28]
push eax
mov ecx, dword [ebx]
mov edx, esi
mov eax, dword [ebp - 0x18]
call fcn.006cd31c
cmp byte [ebp - 0x74], 3
jne 0x6cfaa5
mov ebx, dword [ebp - 0x50]
dec ebx
test ebx, ebx
jl 0x6cfa80
inc ebx
mov dword [ebp - 0x1c], 0
lea eax, [ebp - 0x3b6]
lea edx, [ebp - 0x9b4]
movzx ecx, byte [eax]
mov edi, ecx
shl ecx, 8
add ecx, edi
mov word [edx], cx
movzx ecx, byte [eax - 1]
mov edi, ecx
shl ecx, 8
add ecx, edi
mov edi, dword [ebp - 0x1c]
add edi, dword [ebp - 0x50]
mov word [ebp + edi*2 - 0x9b4], cx
movzx ecx, byte [eax - 2]
mov edi, ecx
shl ecx, 8
add ecx, edi
mov edi, dword [ebp - 0x50]
add edi, edi
add edi, dword [ebp - 0x1c]
mov word [ebp + edi*2 - 0x9b4], cx
inc dword [ebp - 0x1c]
add edx, 2
add eax, 3
dec ebx
jne 0x6cfa33
lea eax, [ebp - 0x9b4]
push eax
mov eax, dword [ebp - 0x50]
lea eax, [eax + eax*2]
dec eax
push eax
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x28]
push eax
mov ecx, 0x140
mov edx, esi
mov eax, dword [ebp - 0x18]
call fcn.006cd17c
mov edx, dword [ebp + 8]
mov edx, dword [edx + 0x28]
mov eax, esi
call fcn.006cc918
mov dword [ebp - 0x20], eax
cmp byte [ebp - 1], 0
je 0x6cfadc
mov eax, dword [ebp - 0x48]
cdq
push edx
push eax
mov eax, esi
call fcn.00440558
push 4
lea ecx, [ebp - 0x20]
mov edx, dword [ebp + 8]
mov edx, dword [edx + 0x28]
mov eax, esi
call fcn.00870d18
jmp 0x6cfb0d
push dword [ebp - 0x24]
push dword [ebp - 0x28]
mov eax, esi
call fcn.00440558
mov word [ebp - 0x14], 0x4949
mov word [ebp - 0x12], 0x2a
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x10], eax
push 8
lea ecx, [ebp - 0x14]
mov edx, dword [ebp + 8]
mov edx, dword [edx + 0x28]
mov eax, esi
call fcn.00870d18
mov eax, dword [ebp - 0x20]
cdq
push edx
push eax
mov eax, esi
call fcn.00440558
mov eax, dword [ebp - 0x18]
movzx eax, word [eax + 8]
mov word [ebp - 0x2a], ax
push 2
lea ecx, [ebp - 0x2a]
mov edx, dword [ebp + 8]
mov edx, dword [edx + 0x28]
mov eax, esi
call fcn.00870d18
mov eax, dword [ebp - 0x18]
call fcn.006c4924
mov eax, dword [ebp - 0x18]
mov ebx, dword [eax + 8]
dec ebx
test ebx, ebx
jl 0x6cfb89
inc ebx
mov dword [ebp - 0x1c], 0
push 0xc
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
call fcn.0043c34c
mov ecx, eax
mov edx, dword [ebp + 8]
mov edx, dword [edx + 0x28]
mov eax, esi
call fcn.00870d18
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
call fcn.0043c34c
mov edx, 0xc
call fcn.0040437c
inc dword [ebp - 0x1c]
dec ebx
jne 0x6cfb52
cmp byte [ebp - 1], 0
je 0x6cfba3
push 4
lea ecx, [ebp - 0x4c]
mov edx, dword [ebp + 8]
mov edx, dword [edx + 0x28]
mov eax, esi
call fcn.00870d18
jmp 0x6cfbba
xor eax, eax
mov dword [ebp - 0x1c], eax
push 4
lea ecx, [ebp - 0x1c]
mov edx, dword [ebp + 8]
mov edx, dword [edx + 0x28]
mov eax, esi
call fcn.00870d18
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x6cfc01
cmp dword [ebp - 0x18], 0
je 0x6cfbd5
lea eax, [ebp - 0x18]
call fcn.0041f804
cmp dword [ebp - 0x30], 0
je 0x6cfbeb
mov eax, dword [ebp - 0x30]
cmp eax, dword [ebp - 8]
je 0x6cfbeb
lea eax, [ebp - 0x30]
call fcn.0041f804
cmp dword [ebp - 0x6c], 0
je 0x6cfbf9
lea eax, [ebp - 0x6c]
call fcn.0041f804
ret
mov eax, dword [ebp - 0xc]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8