Function at 0x6e7f90
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0xd4]
cmp eax, dword [ecx + 8]
jbe 0x6e8de1
sub esp, 0x154
lea edi, [esp + 0xf4]
xor eax, eax
call fcn.0044dd64
mov ecx, dword [esp + 0x158]
mov ebx, dword [ecx]
mov dword [esp + 0xf4], ebx
mov byte [esp + 0xf8], 0x52
mov ebx, dword [ecx + 0x80]
mov ebp, dword [ecx + 0x34]
cmp ebx, ebp
jge 0x6e8dbe
sub ebp, ebx
mov word [esp + 0xfa], bp
mov eax, dword [ecx + 0x18]
mov dword [esp + 0x104], eax
mov eax, dword [ecx + 0xb4]
mov dword [esp + 0x38], eax
mov ebx, dword [ecx + 0xb0]
mov dword [esp + 0x34], ebx
mov ebp, dword [ecx + 0xac]
mov dword [esp + 0xd4], ebp
mov edx, eax
mov eax, dword [ecx + 0xa4]
mov dword [esp + 0x8c], eax
mov esi, ecx
mov ecx, dword [ecx + 0xa0]
mov dword [esp + 0xf0], ecx
mov edi, ebx
xor ebx, ebx
mov dword [esp + 0x50], ebx
mov ebx, edi
jmp 0x6e8062
inc eax
mov edi, dword [esp + 0x34]
mov dword [esp + 0x50], eax
mov ebp, ecx
mov eax, dword [esp + 0x8c]
mov ecx, dword [esp + 0xf0]
mov dword [esp + 0xec], ebp
mov ebp, dword [esp + 0x50]
cmp ebp, eax
jge 0x6e8153
lea eax, [ecx + ebp*8]
lea ecx, [ecx + ebp*8 + 4]
mov ecx, dword [ecx]
mov dword [esp + 0x88], ecx
mov eax, dword [eax]
sub edi, ebx
lea ecx, [edi + 0x18]
mov ebp, dword [esi + 4]
cmp ecx, ebp
jg 0x6e8102
mov ecx, dword [esp + 0xec]
mov ebp, dword [esi + 0x18]
cmp eax, ebp
jae 0x6e80fe
mov ebp, dword [esi + 0xa4]
dec ebp
mov edi, eax
mov eax, dword [esp + 0x50]
cmp ebp, eax
jne 0x6e8049
mov dword [esp + 0x100], edi
mov eax, dword [esp + 0x88]
mov dword [esp + 0xfc], eax
lea eax, [esp + 0xf4]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], edx
call fcn.006e6130
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x50]
mov esi, dword [esp + 0x158]
jmp 0x6e8049
mov edi, eax
jmp 0x6e80b2
mov dword [esp + 0x84], eax
mov edx, dword [esi + 0xb8]
mov eax, dword [esp + 0xd4]
mov dword [esp], eax
mov ecx, dword [esp + 0x34]
mov dword [esp + 4], ecx
mov ebx, dword [esp + 0x38]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], edi
mov ebp, dword [edx]
call ebp
mov eax, dword [esp + 0x84]
mov esi, dword [esp + 0x158]
mov edx, dword [esp + 0x38]
mov ebx, dword [esp + 0x34]
mov ecx, dword [esp + 0xd4]
jmp 0x6e809a
mov dword [esi + 0xa4], 0
movzx eax, byte [esp + 0x15c]
test al, al
jne 0x6e8d89
mov eax, dword [esi + 0x38]
test eax, eax
je 0x6e8cfc
mov dword [esi + 0x54], 0
mov dword [esi + 0x58], 0
mov eax, dword [esi + 0x40]
test eax, 1
jne 0x6e8c73
mov eax, dword [esp + 0xec]
mov ecx, dword [esi + 0x40]
test ecx, 2
jne 0x6e8be9
mov dword [esi + 0x40], 0
mov ecx, dword [esi + 0x30]
mov ebp, dword [esi + 0x38]
cmp ecx, ebp
ja 0x6e8be2
mov ebp, dword [esi + 0x68]
test ebp, ebp
jne 0x6e8bdb
mov ebp, dword [esi + 0x3c]
cmp ebp, ecx
ja 0x6e8bd4
mov dword [esp + 0x8c], edx
mov dword [esp + 0x80], ebx
mov dword [esp + 0xec], eax
mov dword [esp + 0x64], ebp
mov ecx, dword [esi + 0x74]
mov dword [esp + 0x7c], ecx
lea eax, [esi + 0x70]
mov dword [esp + 0xe8], eax
mov dword [esp + 0xc8], eax
xor eax, eax
mov dword [esp + 0x4c], eax
mov eax, dword [esp + 0xc8]
jmp 0x6e8242
lea ecx, [ebx + 1]
mov eax, dword [esp + 0xe8]
mov edx, dword [esp + 0x8c]
mov ebx, dword [esp + 0x80]
mov ebp, esi
mov esi, dword [esp + 0x158]
mov edi, dword [esp + 0x34]
mov dword [esp + 0x4c], ecx
mov ecx, dword [esp + 0x7c]
mov eax, dword [esp + 0x4c]
cmp eax, ecx
jge 0x6e8433
mov edx, dword [esi + 0x14]
mov ebx, dword [esi + 0x10]
add ebx, ebp
sub edx, ebx
test edx, edx
jge 0x6e8433
mov edx, dword [esi + 0x74]
mov ebx, dword [esi + 0x70]
cmp eax, edx
jae 0x6e8dda
lea edx, [eax + eax*2]
shl edx, 4
mov dword [esp + 0x78], edx
add ebx, edx
lea edi, [esp + 0x124]
mov esi, ebx
call fcn.0044e208
mov ecx, dword [esp + 0x158]
mov ebx, dword [ecx]
mov dword [esp + 0x124], ebx
mov byte [esp + 0x128], 0x51
mov ebx, dword [ecx + 0x14]
mov dword [esp + 0x130], ebx
mov ebx, dword [ecx + 0x90]
mov esi, ebp
mov ebp, dword [ecx + 0x8c]
mov edi, edx
mov edx, dword [ecx + 0x88]
lea eax, [ecx + 0x88]
mov dword [esp + 0xe4], eax
lea eax, [ebp + 1]
cmp eax, ebx
jg 0x6e83a7
lea eax, [ebp + 1]
mov dword [ecx + 0x8c], eax
lea eax, [ebp + ebp*2]
shl eax, 4
add eax, edx
mov edx, dword [0xcc2260]
test edx, edx
jne 0x6e837d
mov edx, edi
mov edi, eax
mov ebx, esi
lea esi, [esp + 0x124]
call fcn.0044e208
mov eax, dword [esp + 0x158]
mov ecx, dword [eax + 0x14]
inc ecx
mov dword [eax + 0x14], ecx
mov ecx, dword [eax + 0x74]
mov ebp, dword [eax + 0x70]
mov esi, ebx
mov ebx, dword [esp + 0x4c]
cmp ebx, ecx
jae 0x6e8dd3
mov dword [ebp + edx + 0x28], 0
mov dword [ebp + edx + 0x2c], 0
lea ecx, [edx + ebp + 0x24]
mov edi, ecx
mov ecx, dword [0xcc2260]
test ecx, ecx
jne 0x6e8359
mov dword [ebp + edx + 0x24], 0
jmp 0x6e8215
mov dword [esp], edi
mov dword [esp + 4], 0
call fcn.0040f360
mov eax, dword [esp + 0x158]
mov ebx, dword [esp + 0x4c]
mov esi, dword [esp + 0x64]
jmp 0x6e8215
lea ecx, [0x825d20]
mov dword [esp], ecx
mov dword [esp + 4], eax
lea eax, [esp + 0x124]
mov dword [esp + 8], eax
call fcn.0040f470
mov edx, dword [esp + 0x78]
mov ebx, dword [esp + 0x64]
jmp 0x6e830a
lea ecx, [0x825d20]
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], eax
call fcn.0043a030
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x158]
mov dword [ebx + 0x90], edx
mov edx, dword [0xcc2260]
test edx, edx
jne 0x6e8401
mov dword [ebx + 0x88], eax
mov esi, dword [esp + 0x64]
mov edi, dword [esp + 0x78]
mov ebp, ecx
mov edx, eax
mov ecx, ebx
jmp 0x6e82d8
mov dword [esp + 0xe0], eax
mov dword [esp + 0x74], ecx
mov ecx, dword [esp + 0xe4]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0040f360
mov eax, dword [esp + 0xe0]
mov ecx, dword [esp + 0x74]
mov ebx, dword [esp + 0x158]
jmp 0x6e83ee
test eax, eax
jg 0x6e8b5e
mov ecx, dword [esi + 0x64]
test ecx, ecx
jg 0x6e8447
mov ecx, 0xffffffff
mov dword [esp + 0x30], ecx
call fcn.006ed0a0
mov eax, dword [esp]
mov ecx, dword [esp + 0x158]
mov edx, dword [ecx + 0x8c]
mov dword [esp + 0x7c], edx
xor ebx, ebx
mov ebp, dword [esp + 0x8c]
mov esi, dword [esp + 0x80]
mov edi, dword [esp + 0xec]
xor ebp, ebp
mov dword [esp + 0x54], ebp
xor esi, esi
mov dword [esp + 0x58], esi
xor edi, edi
mov dword [esp + 0x5c], edi
mov dword [esp + 0xc0], eax
xor eax, eax
mov dword [esp + 0x60], eax
mov dword [esp + 0xb8], ecx
xor ecx, ecx
mov dword [esp + 0x6c], ecx
mov dword [esp + 0xb0], edx
xor edx, edx
mov dword [esp + 0x70], edx
xor ebx, ebx
mov dword [esp + 0x3c], ebx
xor ebp, ebp
mov dword [esp + 0x40], ebp
mov ebp, dword [esp + 0x8c]
mov esi, dword [esp + 0x80]
mov edi, dword [esp + 0xec]
mov eax, dword [esp + 0xc0]
mov ecx, dword [esp + 0xb8]
mov edx, dword [esp + 0xb0]
xor ebx, ebx
jmp 0x6e8509
mov esi, dword [esp + 0x48]
inc esi
mov dword [esp + 0xa8], eax
mov eax, ebx
mov ebx, esi
mov esi, ebp
mov ebp, eax
mov eax, dword [esp + 0xa8]
cmp ebx, edx
jge 0x6e88c6
mov dword [esp + 0x8c], ebp
mov dword [esp + 0x80], esi
mov ebp, dword [ecx + 0x8c]
mov esi, dword [ecx + 0x88]
cmp ebx, ebp
jae 0x6e8dcc
mov dword [esp + 0x48], ebx
mov dword [esp + 0x44], eax
lea ebp, [ebx + ebx*2]
shl ebp, 4
mov dword [esp + 0x78], ebp
lea ebx, [ebp + esi]
mov dword [esp + 0xd0], ebx
mov ebx, dword [ebp + esi + 0x18]
test ebx, ebx
jne 0x6e86fd
mov ebx, dword [ecx + 0x28]
mov dword [esi + ebp + 0x14], ebx
add ebx, eax
mov dword [esi + ebp + 0x1c], ebx
mov ebx, 1
test bl, bl
jne 0x6e8585
mov ebx, dword [esp + 0x8c]
mov ebp, dword [esp + 0x80]
jmp 0x6e84ee
mov dword [esp + 0xe0], esi
mov ebx, dword [ebp + esi + 0x18]
inc ebx
mov dword [esi + ebp + 0x18], ebx
mov dword [esi + ebp + 8], eax
movzx ebx, word [esp + 0xfa]
mov word [esi + ebp + 6], bx
mov ebx, dword [esp + 0x104]
mov dword [esi + ebp + 0x10], ebx
mov ebx, dword [esp + 0x34]
mov eax, dword [esp + 0x80]
sub ebx, eax
mov ebp, dword [ebp + esi + 0x28]
lea ebp, [ebx + ebp + 0x18]
mov esi, dword [ecx + 4]
cmp ebp, esi
jg 0x6e86b9
mov ebx, dword [esp + 0x44]
mov ebp, dword [esp + 0x8c]
mov dword [esp + 0x68], ebx
mov ecx, dword [esp + 0xd0]
mov dword [esp], ecx
mov dword [esp + 4], edi
mov dword [esp + 8], eax
mov dword [esp + 0xc], ebp
call fcn.006e6130
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x18]
dec esp
and al, 0x18
mov dword [esp + 0x8c], ecx
mov edx, dword [esp + 0x14]
mov dword [esp + 0x80], edx
mov ebx, dword [esp + 0xe0]
mov ebp, dword [esp + 0x78]
mov esi, dword [ebp + ebx + 0x28]
mov edi, dword [ebx + ebp + 0x24]
cmp edx, esi
jle 0x6e86b2
mov dword [esp + 0xdc], eax
mov dword [esp], eax
mov dword [esp + 4], edi
mov dword [esp + 8], esi
call fcn.0044e470
mov eax, dword [esp + 0xe0]
mov ecx, dword [esp + 0x78]
mov edx, dword [ecx + eax + 0x28]
mov ebx, dword [esp + 0x80]
cmp edx, ebx
ja 0x6e8dc5
sub ebx, edx
mov ebp, dword [esp + 0x8c]
sub ebp, edx
mov esi, ebp
xchg ebp, ebx
neg ebx
xchg ebp, ebx
sar ebp, 0x1f
and edx, ebp
mov ebp, dword [esp + 0xdc]
add ebp, edx
mov eax, dword [ecx + eax + 0x18]
mov ecx, dword [esp + 0x158]
mov edi, dword [ecx + 0x5c]
cmp eax, edi
jb 0x6e869f
mov dword [ecx + 0xc], 0xffffffff
mov edx, dword [esp + 0x7c]
mov eax, dword [esp + 0x68]
mov edi, ebp
mov ebp, ebx
mov ebx, esi
jmp 0x6e84ee
mov esi, edx
jmp 0x6e8630
mov edx, dword [ecx + 0xb8]
mov eax, dword [esp + 0xd4]
mov dword [esp], eax
mov ebp, dword [esp + 0x34]
mov dword [esp + 4], ebp
mov esi, dword [esp + 0x38]
mov dword [esp + 8], esi
mov dword [esp + 0xc], ebx
mov ebx, dword [edx]
call ebx
call fcn.006ed0a0
mov ebx, dword [esp]
mov ebp, dword [esp + 0x38]
mov eax, dword [esp + 0x34]
mov edi, dword [esp + 0xd4]
jmp 0x6e85dc
mov dword [esp + 0xd8], edi
mov ebx, dword [esi + ebp + 0x1c]
sub eax, ebx
test eax, eax
jl 0x6e8778
mov eax, dword [ecx + 0x4c]
test eax, eax
jne 0x6e8767
mov eax, dword [esi + ebp + 0x14]
mov ebx, dword [ecx + 0x28]
add eax, ebx
mov dword [esi + ebp + 0x14], eax
mov eax, dword [esp + 0x3c]
mov ebx, eax
add eax, 1
mov ecx, dword [ebp + esi + 0x14]
mov edi, dword [esp + 0x44]
add ecx, edi
mov dword [esi + ebp + 0x1c], ecx
add ebx, 1
mov ecx, dword [esp + 0x40]
adc ecx, 0
mov ebx, 1
mov edi, dword [esp + 0xd8]
mov dword [esp + 0x3c], eax
mov dword [esp + 0x40], ecx
mov eax, dword [esp + 0x44]
mov ecx, dword [esp + 0x158]
jmp 0x6e856e
mov eax, dword [esi + ebp + 0x14]
mov ebx, dword [ecx + 0x28]
shr ebx, 1
add eax, ebx
mov dword [esi + ebp + 0x14], eax
jmp 0x6e8722
mov eax, dword [esi + ebp + 0x20]
mov ebx, dword [esp + 0x30]
cmp eax, ebx
jb 0x6e8808
mov eax, dword [esp + 0x6c]
add eax, 1
mov ebx, dword [esp + 0x54]
add ebx, 1
mov dword [esi + ebp + 0x20], 0
mov ecx, dword [ecx + 0x28]
mov dword [esi + ebp + 0x14], ecx
mov edi, dword [esp + 0x44]
add ecx, edi
mov dword [esi + ebp + 0x1c], ecx
mov ecx, dword [esp + 0x6c]
add ecx, 1
mov ecx, dword [esp + 0x70]
adc ecx, 0
mov ebp, dword [esp + 0x54]
add ebp, 1
mov ebp, dword [esp + 0x58]
adc ebp, 0
mov dword [esp + 0xa0], eax
mov eax, 1
mov byte [esp + 0x22], al
mov eax, dword [esp + 0xa0]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x58], ebp
mov dword [esp + 0x6c], eax
mov dword [esp + 0x70], ecx
mov eax, dword [esp + 0x3c]
mov ecx, dword [esp + 0x40]
mov ebp, dword [esp + 0x78]
movzx ebx, byte [esp + 0x22]
jmp 0x6e8748
test eax, eax
jbe 0x6e88aa
mov eax, dword [esp + 0x4c]
test eax, eax
jne 0x6e8887
mov eax, dword [esp + 0x6c]
add eax, 1
mov ebx, dword [esp + 0x5c]
add ebx, 1
mov dword [esi + ebp + 0x20], 0
mov ecx, dword [ecx + 0x28]
mov dword [esi + ebp + 0x14], ecx
mov edi, dword [esp + 0x44]
add ecx, edi
mov dword [esi + ebp + 0x1c], ecx
mov ecx, dword [esp + 0x6c]
add ecx, 1
mov ecx, dword [esp + 0x70]
adc ecx, 0
mov ebp, dword [esp + 0x5c]
add ebp, 1
mov ebp, dword [esp + 0x60]
adc ebp, 0
mov dword [esp + 0x90], eax
mov eax, 1
mov byte [esp + 0x22], al
mov eax, dword [esp + 0x90]
mov dword [esp + 0x5c], ebx
mov dword [esp + 0x60], ebp
mov ebp, dword [esp + 0x58]
mov ebx, dword [esp + 0x54]
jmp 0x6e87e2
mov edi, dword [esp + 0x44]
mov dword [esp + 0x98], eax
xor eax, eax
mov byte [esp + 0x22], al
mov ebx, dword [esp + 0x5c]
mov ebp, dword [esp + 0x60]
mov eax, dword [esp + 0x6c]
mov ecx, dword [esp + 0x70]
jmp 0x6e8872
mov edi, dword [esp + 0x44]
xor eax, eax
mov byte [esp + 0x22], al
mov ebx, dword [esp + 0x5c]
mov ebp, dword [esp + 0x60]
mov eax, dword [esp + 0x6c]
mov ecx, dword [esp + 0x70]
jmp 0x6e8872
mov eax, dword [esp + 0x34]
mov ebx, eax
sub eax, esi
test eax, eax
jg 0x6e8b2e
mov eax, dword [esp + 0x40]
test eax, eax
sete dl
mov ebx, dword [esp + 0x3c]
test ebx, ebx
xchg ebp, ebx
seta bl
xchg ebp, ebx
and ebp, edx
test eax, eax
seta dl
or ebp, edx
xchg ebp, eax
mov byte [esp + 0x23], al
xchg ebp, eax
xchg ebp, eax
test al, al
xchg ebp, eax
jne 0x6e8af7
mov edx, dword [esp + 0x58]
test edx, edx
xchg esi, ebx
sete bl
xchg esi, ebx
mov edi, dword [esp + 0x54]
test edi, edi
xchg edi, ebx
seta bl
xchg edi, ebx
and edi, esi
test edx, edx
xchg esi, ebx
seta bl
xchg esi, ebx
or edi, esi
xchg edi, eax
test al, al
xchg edi, eax
jne 0x6e8aa1
mov edx, dword [esp + 0x5c]
test edx, edx
xchg esi, ebx
seta bl
xchg esi, ebx
mov edi, dword [esp + 0x60]
test edi, edi
sete dl
and esi, edx
test edi, edi
seta dl
or edx, esi
test dl, dl
jne 0x6e8a43
test eax, eax
sete dl
test ebx, ebx
xchg esi, ebx
seta bl
xchg esi, ebx
and edx, esi
test eax, eax
xchg esi, ebx
seta bl
xchg esi, ebx
or edx, esi
test dl, dl
jne 0x6e8a17
mov eax, dword [esp + 0x6c]
test eax, eax
seta al
mov edx, dword [esp + 0x70]
test edx, edx
sete bl
and eax, ebx
test edx, edx
seta dl
or edx, eax
test dl, dl
je 0x6e8a11
mov eax, dword [ecx + 0x14]
mov edx, dword [ecx + 0x10]
sub eax, edx
shr eax, 1
mov dword [ecx + 0x1c], eax
cmp eax, 2
jae 0x6e89b8
mov dword [ecx + 0x1c], 2
mov eax, dword [ecx + 0x1c]
mov edx, dword [esp + 0x30]
add eax, edx
mov dword [ecx + 0x3c], eax
mov edx, dword [ecx + 8]
imul eax, edx
mov dword [ecx + 0x60], eax
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x6e89f5
mov eax, dword [esp + 0x64]
shr eax, 1
mov dword [ecx + 0x1c], eax
cmp eax, 2
jae 0x6e89e8
mov dword [ecx + 0x1c], 2
mov dword [ecx + 0x3c], 1
mov eax, dword [ecx + 8]
mov dword [ecx + 0x60], eax
mov eax, dword [ecx + 0x3c]
cmp eax, 1
jae 0x6e8a0a
mov dword [ecx + 0x3c], 1
mov eax, dword [ecx + 8]
mov dword [ecx + 0x60], eax
add esp, 0x154
ret
xchg ebp, eax
test al, al
xchg ebp, eax
jmp 0x6e89d1
mov ecx, dword [0xcac394]
test byte [ecx], al
add ecx, 0x78
mov dword [esp], ecx
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
call fcn.004012d0
mov ecx, dword [esp + 0x158]
movzx ebp, byte [esp + 0x23]
jmp 0x6e8980
mov dword [esp + 0x24], ebx
mov dword [esp + 0x28], eax
mov eax, dword [0xcac394]
test byte [eax], al
mov ecx, dword [esp + 0x5c]
add ebx, ecx
mov dword [esp + 0x88], ebx
add eax, 0x88
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edi
call fcn.004012d0
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x5c]
add eax, ecx
mov eax, dword [esp + 0x60]
mov ecx, dword [esp + 0x28]
adc eax, ecx
mov ecx, dword [esp + 0x158]
movzx ebp, byte [esp + 0x23]
mov ebx, dword [esp + 0x88]
jmp 0x6e895d
mov eax, dword [0xcac394]
test byte [eax], al
mov ecx, dword [esp + 0x54]
add ebx, ecx
mov dword [esp + 0x88], ebx
add eax, 0x80
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.004012d0
mov eax, dword [esp + 0x3c]
mov ecx, dword [esp + 0x54]
add eax, ecx
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x58]
adc eax, ecx
mov ecx, dword [esp + 0x158]
movzx ebp, byte [esp + 0x23]
mov ebx, dword [esp + 0x88]
jmp 0x6e8936
mov ecx, dword [0xcac394]
test byte [ecx], al
add ecx, 0x90
mov dword [esp], ecx
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
call fcn.004012d0
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x158]
mov ebx, dword [esp + 0x3c]
movzx ebp, byte [esp + 0x23]
jmp 0x6e8905
mov edx, dword [ecx + 0xb8]
mov ebp, dword [esp + 0xd4]
mov dword [esp], ebp
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x38]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
mov eax, dword [edx]
call eax
mov ecx, dword [esp + 0x158]
jmp 0x6e88d6
mov ecx, dword [esi + 0x78]
mov edx, dword [esi + 0x74]
mov ebx, dword [esi + 0x70]
mov dword [esp + 4], ebx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ecx
mov dword [esp], esi
mov dword [esp + 0x10], eax
call fcn.006e9130
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
mov ebx, dword [esp + 0x158]
mov dword [ebx + 0x74], ecx
mov dword [ebx + 0x78], eax
mov eax, dword [0xcc2260]
test eax, eax
jne 0x6e8bb8
mov dword [ebx + 0x70], edx
mov eax, dword [esp + 0x4c]
mov ebp, dword [esp + 0x64]
mov esi, ebx
mov edi, dword [esp + 0x34]
jmp 0x6e843b
mov eax, dword [esp + 0xe8]
mov dword [esp], eax
mov dword [esp + 4], edx
call fcn.0040f360
mov ebx, dword [esp + 0x158]
jmp 0x6e8ba5
mov ebp, ecx
jmp 0x6e81d5
mov ebp, ecx
jmp 0x6e81d5
mov ecx, ebp
jmp 0x6e81bf
mov byte [esp + 0xf8], 0x54
mov ecx, edi
sub edi, ebx
mov dword [esp + 0x2c], edi
lea ebp, [edi + 0x18]
mov edi, dword [esi + 4]
cmp ebp, edi
jg 0x6e8c3a
lea ecx, [esp + 0xf4]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
mov dword [esp + 0xc], edx
call fcn.006e6130
mov ebx, dword [esp + 0x14]
mov eax, dword [esp + 0x10]
mov edx, dword [esp + 0x18]
mov esi, dword [esp + 0x158]
mov edi, dword [esp + 0x34]
jmp 0x6e81aa
mov edx, dword [esi + 0xb8]
mov eax, dword [esp + 0xd4]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov ebx, dword [esp + 0x38]
mov dword [esp + 8], ebx
mov ebp, dword [esp + 0x2c]
mov dword [esp + 0xc], ebp
mov ebp, dword [edx]
call ebp
mov edx, dword [esp + 0x38]
mov ebx, dword [esp + 0x34]
mov eax, dword [esp + 0xd4]
jmp 0x6e8c03
mov byte [esp + 0xf8], 0x53
mov eax, edi
sub edi, ebx
lea ecx, [edi + 0x18]
mov ebp, dword [esi + 4]
cmp ecx, ebp
jg 0x6e8cc7
mov ecx, dword [esp + 0xec]
lea eax, [esp + 0xf4]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], edx
call fcn.006e6130
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x14]
mov eax, dword [esp + 0x10]
mov esi, dword [esp + 0x158]
mov edi, dword [esp + 0x34]
jmp 0x6e819b
mov edx, dword [esi + 0xb8]
mov ecx, dword [esp + 0xd4]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov ebx, dword [esp + 0x38]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], edi
mov ebp, dword [edx]
call ebp
mov ebx, dword [esp + 0x34]
mov ecx, dword [esp + 0xd4]
mov edx, dword [esp + 0x38]
jmp 0x6e8c90
mov dword [esp + 0x80], ebx
mov dword [esp + 0x7c], edx
call fcn.006ed0a0
mov eax, dword [esp]
mov ecx, dword [esp + 0x158]
mov edx, dword [ecx + 0x58]
test edx, edx
jne 0x6e8d42
mov dword [ecx + 0x58], 0x1b58
add eax, 0x1b58
mov dword [ecx + 0x54], eax
mov edx, dword [esp + 0x7c]
mov ebx, dword [esp + 0x80]
mov esi, ecx
mov edi, dword [esp + 0x34]
jmp 0x6e8186
mov ebx, dword [ecx + 0x54]
mov ebp, eax
sub eax, ebx
test eax, eax
jl 0x6e8d2c
cmp edx, 0x1b58
jae 0x6e8d5c
mov dword [ecx + 0x58], 0x1b58
mov eax, dword [ecx + 0x58]
mov ebx, eax
shr eax, 1
add eax, ebx
mov dword [ecx + 0x58], eax
cmp eax, 0x1d4c0
jbe 0x6e8d76
mov dword [ecx + 0x58], 0x1d4c0
mov eax, dword [ecx + 0x58]
add eax, ebp
mov dword [ecx + 0x54], eax
mov eax, dword [ecx + 0x40]
or eax, 1
mov dword [ecx + 0x40], eax
jmp 0x6e8d2c
mov eax, edi
sub edi, ebx
test edi, edi
jg 0x6e8d98
add esp, 0x154
ret
mov edx, dword [esi + 0xb8]
mov ecx, dword [esp + 0xd4]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov eax, dword [esp + 0x38]
mov dword [esp + 8], eax
mov dword [esp + 0xc], edi
mov eax, dword [edx]
call eax
jmp 0x6e8d91
xor ebp, ebp
jmp 0x6e7fec
call fcn.00426ad0
ud2
call fcn.00426a70
ud2
call fcn.00426a70
ud2
call fcn.00426a70
ud2
call fcn.0044c200
jmp fcn.006e7f90