Function at 0x6e002c
Capabilities:
Get memory capacity

Disassembly:
push edi
push esi
push ebp
push ebx
sub esp, 0x124
mov ebp, ecx
movzx eax, byte [esp + 0x140]
mov edx, dword [esp + 0x144]
mov bl, byte [esp + 0x150]
mov dword [esp + 0x11c], eax
mov eax, dword [ebp + 0x28]
test eax, eax
mov dword [esp + 0x114], edx
je 0x6e0070
push eax
mov ecx, dword [esp + 0x140]
call fcn.006d4844
xor al, al
lea esi, [esp + 0x4c]
mov edx, dword [esp + 0x138]
mov byte [esp + 0x118], al
push edx
push esi
call fcn.006e8728
add esp, 8
lea ecx, [esp + 0x4c]
call fcn.00701de0
lea ecx, [esp + 0x50]
push 0x88a580
call fcn.00701780
lea ecx, [esp + 0x4c]
push eax
call fcn.00701cc0
mov dword [esp + 0x120], eax
lea ecx, [esp + 0x50]
call fcn.00701810
mov eax, dword [esp + 0x120]
movzx edx, al
test edx, edx
je 0x6e00d6
mov al, 1
mov byte [esp + 0x118], al
test bl, bl
je 0x6e00ff
mov byte [0x7b3b30], 1
lea eax, [esp + 0x54]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalMemoryStatus]
mov eax, dword [esp + 0x60]
mov dword [0x7b3b2c], eax
mov dword [0x7b3b28], 0
lea ecx, [esp + 0x74]
call fcn.006ebda8
mov ecx, 0x85fb40
call fcn.006ea05c
movzx eax, al
test eax, eax
jne 0x6e0180
lea ecx, [esp + 0x74]
push 0x85fb40
call fcn.006e9d34
lea eax, [esp + 0x7c]
push eax
mov ecx, dword [esp + 0x13c]
call fcn.006ec268
lea ecx, [esp + 0x74]
lea eax, [esp + 0x7c]
push eax
call fcn.006ea37c
mov ecx, dword [esp + 0x7c]
test ecx, ecx
je 0x6e015f
mov dword [esp + 0x7c], 0
je 0x6e015f
push 1
call fcn.00433260
mov ecx, dword [esp + 0x80]
test ecx, ecx
je 0x6e0191
mov dword [esp + 0x80], 0
je 0x6e0191
push 1
call fcn.00433290
jmp 0x6e0191
lea ecx, [esp + 0x74]
mov eax, dword [esp + 0x138]
push eax
call fcn.006e9d34
lea ecx, [esp + 0x88]
call fcn.00736414
mov dword [esp + 0x84], 0
lea ecx, [esp + 0x8c]
call fcn.00736414
lea ecx, [esp + 0x90]
call fcn.00736414
mov al, 1
mov byte [esp + 0x94], al
mov byte [esp + 0x95], al
mov dword [esp + 0x98], 0
call dword [sym.imp.USER32.dll_GetFocus]
mov dword [esp + 0x98], eax
lea ecx, [esp + 0x74]
call fcn.006e9ebc
cmp eax, 5
je 0x6e020c
lea ecx, [esp + 0x74]
call fcn.006e9ebc
cmp eax, 3
je 0x6e0fd5
mov al, 1
jmp 0x6e020e
xor al, al
mov byte [esp + 0x94], al
lea ecx, [esp + 0x74]
call fcn.006e9ebc
cmp eax, 1
jne 0x6e0227
mov al, 1
jmp 0x6e023b
lea ecx, [esp + 0x74]
call fcn.006e9ebc
cmp eax, 3
je 0x6e1302
xor al, al
mov byte [esp + 0x95], al
mov eax, dword [ebp + 0x150]
test eax, eax
je 0x6e12e5
mov eax, dword [eax + 0x9654]
cmp eax, 3
je 0x6e12e5
xor eax, eax
mov dword [esp + 0x114], eax
mov ebx, dword [esp + 0x11c]
mov esi, dword [esp + 0x114]
mov edi, dword [esp + 0x13c]
lea eax, [esp + 0x74]
lea edx, [esp + 0x9c]
mov ecx, edi
push edx
push dword [ebp + 0x130]
push esi
push ebx
push eax
call fcn.006d3f74
mov dword [ebp + 0x28], eax
test eax, eax
je 0x6e079d
mov bl, byte [esp + 0x150]
test bl, bl
je 0x6e030c
lea ecx, [esp + 0x74]
lea eax, [esp + 0xe0]
push eax
call fcn.006ec404
lea eax, [esp + 0xe0]
push eax
call fcn.006f2984
pop ecx
mov ecx, dword [esp + 0xe0]
test ecx, ecx
je 0x6e02ed
mov dword [esp + 0xe0], 0
je 0x6e02ed
push 1
call fcn.00433260
mov ecx, dword [esp + 0xe4]
test ecx, ecx
je 0x6e030c
mov dword [esp + 0xe4], 0
je 0x6e030c
push 1
call fcn.00433290
lea eax, [esp + 0xe8]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalMemoryStatus]
mov al, byte [0x7b3b30]
test al, al
je 0x6e0456
mov eax, dword [esp + 0xf4]
cmp eax, 0x100000
jae 0x6e0443
mov byte [0x7b3b30], 0
lea ecx, [esp + 0x10c]
call fcn.00736414
mov dword [esp + 0x108], 0
lea ecx, [esp + 0x44]
push 0x88ce40
call fcn.00701780
lea eax, [esp + 0x108]
lea ecx, [esp + 0x108]
lea ebx, [esp + 0x44]
mov dword [esp + 0x40], eax
mov edx, 3
mov dword [esp + 0x48], 3
and edx, 0xf
or edx, 0x30
push edx
push ebx
call fcn.006f2434
xor edx, edx
cmp eax, 3
sete dl
lea ecx, [esp + 0x44]
mov dword [esp + 0x120], edx
call fcn.00701810
mov eax, dword [esp + 0x120]
test eax, eax
jne 0x6e0435
lea ecx, [esp + 0x10c]
call fcn.00701810
lea ecx, [esp + 0x90]
call fcn.00701810
lea ecx, [esp + 0x8c]
call fcn.00701810
lea ecx, [esp + 0x88]
call fcn.00701810
mov ecx, dword [esp + 0x74]
test ecx, ecx
je 0x6e0401
mov dword [esp + 0x74], 0
je 0x6e0401
push 1
call fcn.00433260
mov ecx, dword [esp + 0x78]
test ecx, ecx
je 0x6e041a
mov dword [esp + 0x78], 0
je 0x6e041a
push 1
call fcn.00433290
lea ecx, [esp + 0x4c]
call fcn.00701810
mov eax, 4
add esp, 0x124
pop ebx
pop ebp
pop esi
pop edi
ret 0x20
lea ecx, [esp + 0x10c]
call fcn.00701810
jmp 0x6e0456
mov eax, dword [0x7b3b2c]
sub eax, dword [0x7b3b28]
test eax, eax
jl 0x6e0339
mov al, byte [esp + 0x9c]
test al, al
je 0x6e0496
mov ecx, dword [ebp + 0x28]
xor eax, eax
push eax
push eax
call fcn.006d03e8
mov edx, dword [esp + 0x114]
test edx, edx
jne 0x6e0490
mov edx, dword [esp + 0x154]
test edx, edx
jle 0x6e0490
mov edx, dword [esp + 0x154]
cmp edx, eax
jge 0x6e0490
mov eax, edx
add dword [0x7b3b28], eax
mov edx, dword [ebp + 0x28]
test edx, edx
je 0x6e0fdc
mov al, byte [esp + 0x118]
test al, al
je 0x6e04be
mov eax, dword [esp + 0x138]
mov ecx, ebp
push eax
call fcn.006e3aec
mov edx, dword [ebp + 0x28]
lea ecx, [edx + 0x310]
mov eax, dword [edx + 0x310]
call dword [eax + 8]
movzx eax, al
test eax, eax
je 0x6e05c1
mov esi, dword [ebp + 0x28]
lea ebx, [esi + 0x310]
mov eax, dword [esi + 0x310]
mov ecx, ebx
call dword [eax + 8]
movzx eax, al
test eax, eax
je 0x6e0503
mov eax, dword [esi + 0x310]
mov ecx, ebx
call dword [eax + 0xc]
mov esi, dword [eax + 4]
jmp 0x6e0505
xor esi, esi
mov eax, dword [ebp + 0x28]
lea edi, [ebp + 0x2c]
mov ecx, edi
push dword [eax + 0x35c]
push esi
call fcn.006d3be4
xor ebx, ebx
test esi, esi
jle 0x6e05c1
mov dword [esp + 0x118], edi
mov dword [esp + 0x114], esi
mov dword [esp + 0x110], ebp
lea esi, [esi]
mov edx, dword [esp + 0x110]
mov esi, dword [edx + 0x28]
lea ebp, [esi + 0x310]
mov eax, dword [esi + 0x310]
mov ecx, ebp
call dword [eax + 8]
movzx eax, al
test eax, eax
je 0x6e059c
mov eax, dword [esi + 0x310]
mov ecx, ebp
call dword [eax + 0xc]
mov edx, dword [eax + 4]
dec edx
mov edi, ebx
sar edi, 0x1f
xor edi, 0xffffffff
and edi, ebx
mov eax, edi
sub eax, edx
sub edx, edi
sar edx, 0x1f
and eax, edx
sub edi, eax
mov esi, dword [esi + 0x310]
mov ecx, ebp
call dword [esi + 0xc]
mov eax, dword [eax + edi*8 + 8]
jmp 0x6e059e
xor eax, eax
push 0
push eax
push ebx
mov ecx, dword [esp + 0x124]
call fcn.006d2644
inc ebx
mov eax, dword [esp + 0x114]
cmp ebx, eax
jl 0x6e053c
mov ebp, dword [esp + 0x110]
xor eax, eax
mov ecx, ebp
push eax
push eax
push 1
call fcn.006e3dcc
mov eax, dword [ebp + 0x28]
lea edi, [ebp + 0x58]
add esp, 0xfffffff4
fld qword [eax + 0x350]
mov ecx, edi
fstp qword [esp]
mov byte [esp + 8], 0
call fcn.0069c658
mov al, byte [esp + 0x14c]
test al, al
jne 0x6e072f
xor eax, eax
mov dl, byte [eax + ebp + 0x65]
add eax, 0x18
cmp dl, 2
jg 0x6e062e
cmp dl, 1
je 0x6e062e
cmp eax, 0xc0
jl 0x6e05fd
mov esi, dword [ebp + 0x28]
test esi, esi
je 0x6e0631
add esi, 0x238
mov ecx, 0x36
rep movsd dword es:[edi], dword [esi]
mov esi, dword [ebp + 0x28]
jmp 0x6e0631
mov esi, dword [ebp + 0x28]
mov edx, dword [esi + 0x35c]
sar edx, 2
shr edx, 0x1d
add edx, dword [esi + 0x35c]
sar edx, 3
xor al, al
mov byte [esp + 0x120], al
mov bl, byte [ebp + 0x65]
test bl, bl
jne 0x6e0669
mov al, 1
mov byte [esp + 0x120], al
mov dword [ebp + 0x58], 0
mov dword [ebp + 0x5c], edx
mov al, byte [ebp + 0x7d]
test al, al
jne 0x6e0676
mov dword [ebp + 0x70], edx
mov dword [ebp + 0x74], edx
lea eax, [edx + edx]
mov bl, byte [ebp + 0x95]
test bl, bl
jne 0x6e068f
mov dword [ebp + 0x88], eax
mov dword [ebp + 0x8c], edx
add eax, edx
mov bl, byte [ebp + 0xad]
test bl, bl
jne 0x6e06a7
mov dword [ebp + 0xa0], eax
mov dword [ebp + 0xa4], edx
add eax, edx
mov bl, byte [ebp + 0xc5]
test bl, bl
jne 0x6e06bf
mov dword [ebp + 0xb8], eax
mov dword [ebp + 0xbc], edx
add eax, edx
mov bl, byte [ebp + 0xdd]
test bl, bl
jne 0x6e06d7
mov dword [ebp + 0xd0], eax
mov dword [ebp + 0xd4], edx
add eax, edx
mov bl, byte [ebp + 0xf5]
test bl, bl
jne 0x6e06ef
mov dword [ebp + 0xe8], eax
mov dword [ebp + 0xec], edx
add eax, edx
mov bl, byte [ebp + 0x10d]
test bl, bl
jne 0x6e0707
mov dword [ebp + 0x100], eax
mov dword [ebp + 0x104], edx
mov al, byte [esp + 0x120]
test al, al
je 0x6e072f
mov edx, dword [ebp + 0x130]
mov eax, dword [ebp + 0x28]
mov dword [ebp + 0x58], edx
mov ebx, dword [eax + 0x35c]
add ebx, dword [ebp + 0x134]
sub ebx, edx
mov dword [ebp + 0x5c], ebx
lea ecx, [esp + 0x90]
call fcn.00701810
lea ecx, [esp + 0x8c]
call fcn.00701810
lea ecx, [esp + 0x88]
call fcn.00701810
mov ecx, dword [esp + 0x74]
test ecx, ecx
je 0x6e076c
mov dword [esp + 0x74], 0
je 0x6e076c
push 1
call fcn.00433260
mov ecx, dword [esp + 0x78]
test ecx, ecx
je 0x6e0785
mov dword [esp + 0x78], 0
je 0x6e0785
push 1
call fcn.00433290
lea ecx, [esp + 0x4c]
call fcn.00701810
xor eax, eax
add esp, 0x124
pop ebx
pop ebp
pop esi
pop edi
ret 0x20
lea ecx, [esp + 0xa0]
call fcn.00736414
lea ecx, [esp + 0xa8]
call fcn.00736414
mov dword [esp + 0xa4], 0
mov eax, dword [edi + 0x798]
cmp eax, 4
je 0x6e10ec
cmp eax, 5
je 0x6e0ddc
cmp eax, 3
jne 0x6e09da
lea ecx, [esp + 0x74]
lea eax, [esp + 0xb8]
push eax
call fcn.006ec268
lea ecx, [esp + 0xb8]
lea eax, [esp + 0xc0]
push 0
push eax
call fcn.006ecde8
lea eax, [esp + 0xa0]
push dword [esp + 0xc0]
push 0x88cd80
push eax
call fcn.007020f0
add esp, 0xc
lea ecx, [esp + 0xc0]
call fcn.00701810
mov ecx, dword [esp + 0xb8]
test ecx, ecx
je 0x6e084f
mov dword [esp + 0xb8], 0
je 0x6e084f
push 1
call fcn.00433260
mov ecx, dword [esp + 0xbc]
test ecx, ecx
je 0x6e086e
mov dword [esp + 0xbc], 0
je 0x6e086e
push 1
call fcn.00433290
lea ecx, [esp + 0x14]
lea eax, [esp + 0xa0]
push eax
call fcn.00701760
lea eax, [esp + 0xa4]
lea ecx, [esp + 0xa4]
lea ebx, [esp + 0x14]
mov dword [esp + 0x10], eax
mov edx, 2
mov dword [esp + 0x18], 2
and edx, 0xf
or edx, 0x30
push edx
push ebx
call fcn.006f2434
xor ebx, ebx
cmp eax, 3
sete bl
lea ecx, [esp + 0x14]
call fcn.00701810
test ebx, ebx
je 0x6e0951
lea ecx, [esp + 0xa8]
call fcn.00701810
lea ecx, [esp + 0xa0]
call fcn.00701810
lea ecx, [esp + 0x90]
call fcn.00701810
lea ecx, [esp + 0x8c]
call fcn.00701810
lea ecx, [esp + 0x88]
call fcn.00701810
mov ecx, dword [esp + 0x74]
test ecx, ecx
je 0x6e091d
mov dword [esp + 0x74], 0
je 0x6e091d
push 1
call fcn.00433260
mov ecx, dword [esp + 0x78]
test ecx, ecx
je 0x6e0936
mov dword [esp + 0x78], 0
je 0x6e0936
push 1
call fcn.00433290
lea ecx, [esp + 0x4c]
call fcn.00701810
mov eax, 3
add esp, 0x124
pop ebx
pop ebp
pop esi
pop edi
ret 0x20
lea ecx, [esp + 0xa8]
call fcn.00701810
lea ecx, [esp + 0xa0]
call fcn.00701810
lea ecx, [esp + 0x90]
call fcn.00701810
lea ecx, [esp + 0x8c]
call fcn.00701810
lea ecx, [esp + 0x88]
call fcn.00701810
mov ecx, dword [esp + 0x74]
test ecx, ecx
je 0x6e09a6
mov dword [esp + 0x74], 0
je 0x6e09a6
push 1
call fcn.00433260
mov ecx, dword [esp + 0x78]
test ecx, ecx
je 0x6e09bf
mov dword [esp + 0x78], 0
je 0x6e09bf
push 1
call fcn.00433290
lea ecx, [esp + 0x4c]
call fcn.00701810
mov eax, 4
add esp, 0x124
pop ebx
pop ebp
pop esi
pop edi
ret 0x20
cmp eax, 2
jne 0x6e0bdc
lea ecx, [esp + 0x74]
lea eax, [esp + 0xac]
push eax
call fcn.006ec268
lea ecx, [esp + 0xac]
lea eax, [esp + 0xb4]
push 0
push eax
call fcn.006ecde8
lea eax, [esp + 0xa0]
push dword [esp + 0xb4]
push 0x88cde0
push eax
call fcn.007020f0
add esp, 0xc
lea ecx, [esp + 0xb4]
call fcn.00701810
mov ecx, dword [esp + 0xac]
test ecx, ecx
je 0x6e0a51
mov dword [esp + 0xac], 0
je 0x6e0a51
push 1
call fcn.00433260
mov ecx, dword [esp + 0xb0]
test ecx, ecx
je 0x6e0a70
mov dword [esp + 0xb0], 0
je 0x6e0a70
push 1
call fcn.00433290
lea ecx, [esp + 4]
lea eax, [esp + 0xa0]
push eax
call fcn.00701760
lea eax, [esp + 0xa4]
lea ecx, [esp + 0xa4]
lea ebx, [esp + 4]
mov dword [esp], eax
mov edx, 2
mov dword [esp + 8], 2
and edx, 0xf
or edx, 0x30
push edx
push ebx
call fcn.006f2434
xor ebx, ebx
cmp eax, 3
sete bl
lea ecx, [esp + 4]
call fcn.00701810
test ebx, ebx
je 0x6e0b52
lea ecx, [esp + 0xa8]
call fcn.00701810
lea ecx, [esp + 0xa0]
call fcn.00701810
lea ecx, [esp + 0x90]
call fcn.00701810
lea ecx, [esp + 0x8c]
call fcn.00701810
lea ecx, [esp + 0x88]
call fcn.00701810
mov ecx, dword [esp + 0x74]
test ecx, ecx
je 0x6e0b1e
mov dword [esp + 0x74], 0
je 0x6e0b1e
push 1
call fcn.00433260
mov ecx, dword [esp + 0x78]
test ecx, ecx
je 0x6e0b37
mov dword [esp + 0x78], 0
je 0x6e0b37
push 1
call fcn.00433290
lea ecx, [esp + 0x4c]
call fcn.00701810
mov eax, 3
add esp, 0x124
pop ebx
pop ebp
pop esi
pop edi
ret 0x20
lea ecx, [esp + 0xa8]
call fcn.00701810
lea ecx, [esp + 0xa0]
call fcn.00701810
lea ecx, [esp + 0x90]
call fcn.00701810
lea ecx, [esp + 0x8c]
call fcn.00701810
lea ecx, [esp + 0x88]
call fcn.00701810
mov ecx, dword [esp + 0x74]
test ecx, ecx
je 0x6e0ba7
mov dword [esp + 0x74], 0
je 0x6e0ba7
push 1
call fcn.00433260
mov ecx, dword [esp + 0x78]
test ecx, ecx
je 0x6e0bc0
mov dword [esp + 0x78], 0
je 0x6e0bc0
push 1
call fcn.00433290
lea ecx, [esp + 0x4c]
call fcn.00701810
mov eax, 4
add esp, 0x124
pop ebx
pop ebp
pop esi
pop edi
ret 0x20
lea ecx, [esp + 0x74]
lea eax, [esp + 0xdc]
push eax
call fcn.006eb15c
lea ecx, [esp + 0x90]
lea eax, [esp + 0xdc]
push eax
call fcn.0072d110
cmp eax, 5
je 0x6e10e2
cmp eax, 4
je 0x6e104d
cmp eax, 2
je 0x6e0d7f
cmp eax, 3
jne 0x6e0c4c
lea eax, [esp + 0x74]
mov ecx, ebp
push dword [esp + 0x148]
push eax
call fcn.006e130c
movzx eax, al
xor ebx, ebx
test eax, eax
sete bl
jmp 0x6e0d95
cmp eax, 1
jne 0x6e0cea
lea ecx, [esp + 0xdc]
call fcn.00701810
lea ecx, [esp + 0xa8]
call fcn.00701810
lea ecx, [esp + 0xa0]
call fcn.00701810
lea ecx, [esp + 0x90]
call fcn.00701810
lea ecx, [esp + 0x8c]
call fcn.00701810
lea ecx, [esp + 0x88]
call fcn.00701810
mov ecx, dword [esp + 0x74]
test ecx, ecx
je 0x6e0cb6
mov dword [esp + 0x74], 0
je 0x6e0cb6
push 1
call fcn.00433260
mov ecx, dword [esp + 0x78]
test ecx, ecx
je 0x6e0ccf
mov dword [esp + 0x78], 0
je 0x6e0ccf
push 1
call fcn.00433290
lea ecx, [esp + 0x4c]
call fcn.00701810
mov eax, 1
add esp, 0x124
pop ebx
pop ebp
pop esi
pop edi
ret 0x20
lea ecx, [esp + 0xdc]
call fcn.00701810
lea ecx, [esp + 0xa8]
call fcn.00701810
lea ecx, [esp + 0xa0]
call fcn.00701810
lea ecx, [esp + 0x90]
call fcn.00701810
lea ecx, [esp + 0x8c]
call fcn.00701810
lea ecx, [esp + 0x88]
call fcn.00701810
mov ecx, dword [esp + 0x74]
test ecx, ecx
je 0x6e0d4b
mov dword [esp + 0x74], 0
je 0x6e0d4b
push 1
call fcn.00433260
mov ecx, dword [esp + 0x78]
test ecx, ecx
je 0x6e0d64
mov dword [esp + 0x78], 0
je 0x6e0d64
push 1
call fcn.00433290
lea ecx, [esp + 0x4c]
call fcn.00701810
mov eax, 1
add esp, 0x124
pop ebx
pop ebp
pop esi
pop edi
ret 0x20
lea eax, [esp + 0x74]
mov ecx, ebp
push eax
call fcn.006e36dc
movzx eax, al
xor ebx, ebx
test eax, eax
sete bl
lea ecx, [esp + 0xdc]
call fcn.00701810
test ebx, ebx
jne 0x6e0bdc
mov ebx, dword [esp + 0x11c]
mov esi, dword [esp + 0x114]
mov edi, dword [esp + 0x13c]
lea ecx, [esp + 0xa8]
call fcn.00701810
lea ecx, [esp + 0xa0]
call fcn.00701810
jmp 0x6e027d
lea ecx, [esp + 0x74]
lea eax, [esp + 0xc4]
push eax
call fcn.006ec268
lea ecx, [esp + 0xc4]
lea eax, [esp + 0xcc]
push 0
push eax
call fcn.006ecde8
lea eax, [esp + 0xa0]
push dword [esp + 0xcc]
push 0x88cd20
push eax
call fcn.007020f0
add esp, 0xc
lea ecx, [esp + 0xcc]
call fcn.00701810
mov ecx, dword [esp + 0xc4]
test ecx, ecx
je 0x6e0e4a
mov dword [esp + 0xc4], 0
je 0x6e0e4a
push 1
call fcn.00433260
mov ecx, dword [esp + 0xc8]
test ecx, ecx
je 0x6e0e69
mov dword [esp + 0xc8], 0
je 0x6e0e69
push 1
call fcn.00433290
lea ecx, [esp + 0x24]
lea eax, [esp + 0xa0]
push eax
call fcn.00701760
lea eax, [esp + 0xa4]
lea ecx, [esp + 0xa4]
lea ebx, [esp + 0x24]
mov dword [esp + 0x20], eax
mov edx, 2
mov dword [esp + 0x28], 2
and edx, 0xf
or edx, 0x30
push edx
push ebx
call fcn.006f2434
xor ebx, ebx
cmp eax, 3
sete bl
lea ecx, [esp + 0x24]
call fcn.00701810
test ebx, ebx
je 0x6e0f4c
lea ecx, [esp + 0xa8]
call fcn.00701810
lea ecx, [esp + 0xa0]
call fcn.00701810
lea ecx, [esp + 0x90]
call fcn.00701810
lea ecx, [esp + 0x8c]
call fcn.00701810
lea ecx, [esp + 0x88]
call fcn.00701810
mov ecx, dword [esp + 0x74]
test ecx, ecx
je 0x6e0f18
mov dword [esp + 0x74], 0
je 0x6e0f18
push 1
call fcn.00433260
mov ecx, dword [esp + 0x78]
test ecx, ecx
je 0x6e0f31
mov dword [esp + 0x78], 0
je 0x6e0f31
push 1
call fcn.00433290
lea ecx, [esp + 0x4c]
call fcn.00701810
mov eax, 3
add esp, 0x124
pop ebx
pop ebp
pop esi
pop edi
ret 0x20
lea ecx, [esp + 0xa8]
call fcn.00701810
lea ecx, [esp + 0xa0]
call fcn.00701810
lea ecx, [esp + 0x90]
call fcn.00701810
lea ecx, [esp + 0x8c]
call fcn.00701810
lea ecx, [esp + 0x88]
call fcn.00701810
mov ecx, dword [esp + 0x74]
test ecx, ecx
je 0x6e0fa1
mov dword [esp + 0x74], 0
je 0x6e0fa1
push 1
call fcn.00433260
mov ecx, dword [esp + 0x78]
test ecx, ecx
je 0x6e0fba
mov dword [esp + 0x78], 0
je 0x6e0fba
push 1
call fcn.00433290
lea ecx, [esp + 0x4c]
call fcn.00701810
mov eax, 4
add esp, 0x124
pop ebx
pop ebp
pop esi
pop edi
ret 0x20
xor al, al
jmp 0x6e020e
lea ecx, [esp + 0x90]
call fcn.00701810
lea ecx, [esp + 0x8c]
call fcn.00701810
lea ecx, [esp + 0x88]
call fcn.00701810
mov ecx, dword [esp + 0x74]
test ecx, ecx
je 0x6e1019
mov dword [esp + 0x74], 0
je 0x6e1019
push 1
call fcn.00433260
mov ecx, dword [esp + 0x78]
test ecx, ecx
je 0x6e1032
mov dword [esp + 0x78], 0
je 0x6e1032
push 1
call fcn.00433290
lea ecx, [esp + 0x4c]
call fcn.00701810
mov eax, 1
add esp, 0x124
pop ebx
pop ebp
pop esi
pop edi
ret 0x20
lea ecx, [esp + 0xdc]
call fcn.00701810
lea ecx, [esp + 0xa8]
call fcn.00701810
lea ecx, [esp + 0xa0]
call fcn.00701810
lea ecx, [esp + 0x90]
call fcn.00701810
lea ecx, [esp + 0x8c]
call fcn.00701810
lea ecx, [esp + 0x88]
call fcn.00701810
mov ecx, dword [esp + 0x74]
test ecx, ecx
je 0x6e10ae
mov dword [esp + 0x74], 0
je 0x6e10ae
push 1
call fcn.00433260
mov ecx, dword [esp + 0x78]
test ecx, ecx
je 0x6e10c7
mov dword [esp + 0x78], 0
je 0x6e10c7
push 1
call fcn.00433290
lea ecx, [esp + 0x4c]
call fcn.00701810
mov eax, 4
add esp, 0x124
pop ebx
pop ebp
pop esi
pop edi
ret 0x20
xor ebx, ebx
jmp 0x6e0d95
lea ecx, [esp + 0x74]
lea eax, [esp + 0xd0]
push eax
call fcn.006ec268
lea ecx, [esp + 0xd0]
lea eax, [esp + 0xd8]
push 0
push eax
call fcn.006ecde8
lea eax, [esp + 0xa0]
push dword [esp + 0xd8]
push 0x88ccc0
push eax
call fcn.007020f0
add esp, 0xc
lea ecx, [esp + 0xd8]
call fcn.00701810
mov ecx, dword [esp + 0xd0]
test ecx, ecx
je 0x6e115a
mov dword [esp + 0xd0], 0
je 0x6e115a
push 1
call fcn.00433260
mov ecx, dword [esp + 0xd4]
test ecx, ecx
je 0x6e1179
mov dword [esp + 0xd4], 0
je 0x6e1179
push 1
call fcn.00433290
lea ecx, [esp + 0x34]
lea eax, [esp + 0xa0]
push eax
call fcn.00701760
lea eax, [esp + 0xa4]
lea ecx, [esp + 0xa4]
lea ebx, [esp + 0x34]
mov dword [esp + 0x30], eax
mov edx, 2
mov dword [esp + 0x38], 2
and edx, 0xf
or edx, 0x30
push edx
push ebx
call fcn.006f2434
xor ebx, ebx
cmp eax, 3
sete bl
lea ecx, [esp + 0x34]
call fcn.00701810
test ebx, ebx
je 0x6e125c
lea ecx, [esp + 0xa8]
call fcn.00701810
lea ecx, [esp + 0xa0]
call fcn.00701810
lea ecx, [esp + 0x90]
call fcn.00701810
lea ecx, [esp + 0x8c]
call fcn.00701810
lea ecx, [esp + 0x88]
call fcn.00701810
mov ecx, dword [esp + 0x74]
test ecx, ecx
je 0x6e1228
mov dword [esp + 0x74], 0
je 0x6e1228
push 1
call fcn.00433260
mov ecx, dword [esp + 0x78]
test ecx, ecx
je 0x6e1241
mov dword [esp + 0x78], 0
je 0x6e1241
push 1
call fcn.00433290
lea ecx, [esp + 0x4c]
call fcn.00701810
mov eax, 2
add esp, 0x124
pop ebx
pop ebp
pop esi
pop edi
ret 0x20
lea ecx, [esp + 0xa8]
call fcn.00701810
lea ecx, [esp + 0xa0]
call fcn.00701810
lea ecx, [esp + 0x90]
call fcn.00701810
lea ecx, [esp + 0x8c]
call fcn.00701810
lea ecx, [esp + 0x88]
call fcn.00701810
mov ecx, dword [esp + 0x74]
test ecx, ecx
je 0x6e12b1
mov dword [esp + 0x74], 0
je 0x6e12b1
push 1
call fcn.00433260
mov ecx, dword [esp + 0x78]
test ecx, ecx
je 0x6e12ca
mov dword [esp + 0x78], 0
je 0x6e12ca
push 1
call fcn.00433290
lea ecx, [esp + 0x4c]
call fcn.00701810
mov eax, 4
add esp, 0x124
pop ebx
pop ebp
pop esi
pop edi
ret 0x20
mov eax, dword [esp + 0x114]
test eax, eax
jle 0x6e0268
xor eax, eax
mov dword [esp + 0x11c], eax
jmp 0x6e0268
mov al, 1
jmp 0x6e023b