Function at 0x6ac888
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x80
mov eax, dword [esp + 0x84]
mov ecx, dword [eax + 0x1c]
push ebx
mov dword [esp + 0x10], ecx
mov ecx, dword [esp + 0x8c]
push ebp
mov ebp, dword [eax]
mov ebx, dword [ebp + 0xc]
shl ecx, 6
push esi
lea esi, [ecx + eax + 0x20]
movzx ecx, byte [esi + 0x28]
mov eax, dword [eax + 8]
push edi
lea edi, [ecx*8]
sub edi, ecx
mov ecx, dword [eax + edi*8 + 0x20]
lea eax, [eax + edi*8 + 8]
mov dword [esp + 0x4c], eax
mov eax, dword [esi]
mov edi, eax
shr edi, 0x19
xor edx, edx
and edi, 1
mov dword [esp + 0x38], edx
mov dword [esp + 0x14], ebx
mov dword [esp + 0x10], esi
mov dword [esp + 0x18], ecx
mov dword [esp + 0x20], edi
test eax, 0x800000
je 0x6ac908
test byte [esp + 0x9c], 0x40
mov dword [esp + 0x60], 1
je 0x6ac90c
mov dword [esp + 0x60], edx
mov eax, ebx
call fcn.00671918
mov dword [esp + 0x44], eax
mov dword [esi + 0x1c], eax
mov dword [esi + 0x18], eax
mov eax, ebx
call fcn.00671918
cmp byte [esi + 0x28], 0
mov dword [esp + 0x54], eax
mov dword [esi + 0x20], eax
jbe 0x6ac953
mov edx, dword [esp + 0x4c]
test byte [edx + 0x15], 8
je 0x6ac953
inc dword [ebp + 0x48]
mov eax, dword [ebp + 0x48]
push eax
mov dword [esi + 0xc], eax
push 0
push 7
mov eax, ebx
call fcn.00671818
add esp, 0xc
mov eax, dword [esi]
test eax, 0x8000000
je 0x6acc9f
mov eax, dword [esi + 8]
mov edx, dword [eax + 0x10]
mov ecx, dword [eax]
mov edi, dword [ebp + 0x3c]
mov dword [esp + 0x40], eax
mov eax, dword [eax + 4]
inc dword [ebp + 0x54]
mov dword [esp + 0x3c], edx
mov edx, dword [ebp + 0x38]
mov dword [esp + 0x4c], eax
lea eax, [ecx + 2]
cmp eax, edx
mov dword [esp + 0x50], ecx
mov dword [esp + 0x48], eax
mov dword [esp + 0x28], edi
jg 0x6ac99f
add edi, eax
sub edx, eax
mov dword [ebp + 0x3c], edi
mov dword [ebp + 0x38], edx
jmp 0x6ac9ae
mov edx, dword [ebp + 0x48]
lea edi, [edx + 1]
add edx, eax
mov dword [esp + 0x28], edi
mov dword [ebp + 0x48], edx
mov edx, 1
cmp ecx, edx
mov dword [esp + 0x34], edx
jl 0x6aca95
jmp 0x6ac9c8
mov edi, dword [esp + 0x3c]
xor eax, eax
mov dword [esp + 0x30], eax
test ecx, ecx
jle 0x6aca7a
cmp dword [edi + eax*8], edx
je 0x6ac9ed
inc eax
cmp eax, ecx
jl 0x6ac9da
mov dword [esp + 0x30], eax
jmp 0x6aca7a
mov ecx, dword [esp + 0x28]
lea edi, [ecx + edx + 1]
lea edx, [eax + eax*2]
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x4c]
mov eax, dword [eax + edx*4 + 8]
mov edx, dword [esp + 0x1c]
lea ecx, [eax + eax*4]
mov eax, dword [edx + 0x1c]
mov ecx, dword [eax + ecx*8]
mov eax, dword [ecx + 0xc]
push edi
push eax
push ebp
mov dword [esp + 0x64], edi
call fcn.00681448
add esp, 0xc
mov dword [esp + 0x5c], eax
cmp eax, edi
je 0x6aca7a
mov edi, dword [ebp + 0xc]
test edi, edi
je 0x6aca7a
mov eax, dword [edi + 0xc]
cmp dword [edi + 0x10], eax
mov dword [esp + 0x60], eax
jg 0x6aca4b
call fcn.00671688
test eax, eax
jne 0x6aca7a
mov eax, dword [esp + 0x60]
inc dword [edi + 0xc]
mov ecx, dword [esp + 0x5c]
lea edx, [eax + eax*4]
mov eax, dword [edi + 0x14]
lea eax, [eax + edx*4]
mov edx, dword [esp + 0x58]
mov dword [eax + 4], ecx
xor ecx, ecx
mov byte [eax], 0xf
mov byte [eax + 3], 0
mov dword [eax + 8], edx
mov dword [eax + 0xc], ecx
mov dword [eax + 0x10], ecx
mov byte [eax + 1], cl
mov byte [edi + 0x62], cl
mov ecx, dword [esp + 0x50]
mov edx, dword [esp + 0x34]
cmp dword [esp + 0x30], ecx
je 0x6aca95
inc edx
cmp edx, ecx
mov dword [esp + 0x34], edx
jle 0x6ac9c8
mov eax, dword [esp + 0x40]
mov ecx, dword [eax + 0x14]
mov eax, dword [ebx + 0xc]
cmp dword [ebx + 0x10], eax
mov dword [esp + 0x5c], ecx
mov dword [esp + 0x60], eax
jg 0x6acabf
mov edi, ebx
call fcn.00671688
mov edx, dword [esp + 0x34]
test eax, eax
jne 0x6acaee
mov eax, dword [esp + 0x60]
mov ecx, dword [ebx + 0x14]
inc dword [ebx + 0xc]
lea eax, [eax + eax*4]
lea eax, [ecx + eax*4]
mov ecx, dword [esp + 0x5c]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x28]
mov dword [eax + 8], ecx
xor ecx, ecx
mov byte [eax], 7
mov byte [eax + 3], 0
mov dword [eax + 0xc], ecx
mov dword [eax + 0x10], ecx
mov byte [eax + 1], cl
mov byte [ebx + 0x62], cl
mov eax, dword [ebx + 0xc]
cmp dword [ebx + 0x10], eax
mov dword [esp + 0x60], eax
jg 0x6acb0d
mov edi, ebx
call fcn.00671688
test eax, eax
jne 0x6acb3a
mov eax, dword [esp + 0x60]
mov edx, dword [esp + 0x34]
mov ecx, dword [ebx + 0x14]
inc dword [ebx + 0xc]
dec edx
lea eax, [eax + eax*4]
lea eax, [ecx + eax*4]
mov dword [eax + 4], edx
mov edx, dword [esp + 0x28]
inc edx
xor ecx, ecx
mov byte [eax], 7
mov byte [eax + 3], 0
mov dword [eax + 8], edx
mov dword [eax + 0xc], ecx
mov dword [eax + 0x10], ecx
mov byte [eax + 1], cl
mov byte [ebx + 0x62], cl
mov ecx, dword [esp + 0x40]
mov eax, dword [ecx + 0x1c]
neg eax
sbb eax, eax
and eax, 0xfffffff7
add eax, 0xfffffffe
mov dword [esp + 0x58], eax
mov eax, dword [ecx + 0x18]
mov ecx, dword [ebx + 0xc]
cmp dword [ebx + 0x10], ecx
mov dword [esp + 0x5c], eax
mov dword [esp + 0x60], ecx
jg 0x6acb78
mov edi, ebx
call fcn.00671688
test eax, eax
je 0x6acb74
mov eax, 1
jmp 0x6acbb1
mov ecx, dword [esp + 0x60]
mov eax, dword [ebx + 0x14]
inc dword [ebx + 0xc]
lea edx, [ecx + ecx*4]
lea eax, [eax + edx*4]
mov edx, dword [esp + 0x18]
mov dword [eax + 4], edx
mov edx, dword [esp + 0x44]
mov dword [eax + 8], edx
mov edx, dword [esp + 0x28]
mov byte [eax], 0x7d
mov byte [eax + 3], 0
mov dword [eax + 0xc], edx
mov dword [eax + 0x10], 0
mov byte [eax + 1], 0
mov byte [ebx + 0x62], 0
mov eax, ecx
mov ecx, dword [esp + 0x5c]
push ecx
mov ecx, dword [esp + 0x5c]
push ebx
call fcn.00671e28
mov eax, dword [esp + 0x58]
mov edx, dword [esp + 0x48]
add esp, 8
mov dword [edx + 0x1c], 0
test eax, eax
jle 0x6acc5a
mov edi, dword [esp + 0x4c]
mov ecx, dword [esp + 0x3c]
add edi, 8
add ecx, 4
mov dword [esp + 0x44], ecx
mov dword [esp + 0x50], eax
mov edx, dword [esp + 0x44]
cmp byte [edx], 0
je 0x6acc4b
mov eax, dword [edi]
mov ecx, dword [esp + 0x1c]
mov edx, dword [ecx + 0x1c]
lea eax, [eax + eax*4]
lea eax, [edx + eax*8]
test eax, eax
je 0x6acc4b
mov cl, byte [eax + 0x12]
test cl, 4
jne 0x6acc4b
cmp dword [esi + 0xc], 0
je 0x6acc22
mov edx, dword [eax]
test byte [edx + 2], 1
je 0x6acc4b
or cl, 4
mov byte [eax + 0x12], cl
mov ecx, dword [eax + 4]
test ecx, ecx
jl 0x6acc4b
mov eax, dword [eax + 0x14]
mov edx, dword [eax + 0x1c]
lea ecx, [ecx + ecx*4]
add byte [edx + ecx*8 + 0x13], 0xff
lea eax, [edx + ecx*8]
jne 0x6acc4b
mov esi, dword [esp + 0x10]
call fcn.006ac3b8
add dword [esp + 0x44], 8
add edi, 0xc
sub dword [esp + 0x50], 1
jne 0x6acbf0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x18]
mov edi, dword [esp + 0x48]
mov byte [eax + 0x29], 0x7f
mov dword [eax + 0x2c], ecx
mov edx, dword [ebx + 0xc]
mov dword [eax + 0x30], edx
mov eax, dword [esp + 0x28]
push eax
mov eax, edi
mov esi, ebp
call fcn.00680fd8
add esp, 4
cmp edi, dword [ebp + 0x38]
jle 0x6acc93
mov ecx, dword [esp + 0x28]
mov dword [ebp + 0x38], edi
mov dword [ebp + 0x3c], ecx
mov eax, ebp
call fcn.00681038
jmp 0x6acd44
test eax, 0x1000
je 0x6acdce
mov al, byte [ebp + 0x15]
test al, al
jne 0x6accbd
inc dword [ebp + 0x48]
mov edx, dword [ebp + 0x48]
mov dword [esp + 0x38], edx
jmp 0x6acccd
dec al
mov byte [ebp + 0x15], al
movzx eax, al
mov ecx, dword [ebp + eax*4 + 0x18]
mov dword [esp + 0x38], ecx
mov edx, dword [esp + 0xa4]
mov eax, dword [esp + 0xa0]
mov edi, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
push 0
push 3
push edx
push eax
push edi
push ecx
or ebx, 0xffffffff
call fcn.006aa1b8
mov edx, dword [esp + 0x50]
push edx
push eax
push ebp
mov ebx, esi
call fcn.006ac468
mov ebx, eax
mov eax, dword [esi + 0x1c]
add esp, 0x24
push eax
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x18]
push ebx
push 0x15
call fcn.00671818
mov eax, dword [esp + 0x48]
add esp, 0xc
push ebx
push eax
mov eax, dword [esp + 0x1c]
push edi
push 0x33
call fcn.00671708
push 0xffffffffffffffff
push edi
mov edx, ebp
call fcn.00680ed8
add esp, 0x18
mov byte [esi + 0x29], 0x85
mov ebx, dword [esp + 0x14]
mov eax, dword [esp + 0x1c]
mov edx, dword [eax + 4]
mov eax, dword [edx]
xor ecx, ecx
test eax, eax
jle 0x6acd6a
mov esi, dword [esp + 0x18]
add edx, 4
cmp dword [edx], esi
je 0x6ad82f
inc ecx
add edx, 4
cmp ecx, eax
jl 0x6acd5a
xor eax, eax
xor edx, edx
not eax
and dword [esp + 0xa0], eax
mov eax, dword [esp + 0x1c]
mov edi, dword [eax + 0x14]
mov esi, dword [eax + 0x1c]
not edx
and dword [esp + 0xa4], edx
test edi, edi
jle 0x6ad873
lea ebx, [ebx]
test byte [esi + 0x12], 6
jne 0x6ad867
mov eax, dword [esi + 0x20]
mov ecx, dword [esi + 0x24]
and eax, dword [esp + 0xa0]
and ecx, dword [esp + 0xa4]
or eax, ecx
je 0x6ad840
mov ecx, dword [esp + 0x94]
mov byte [ecx + 7], 1
jmp 0x6ad867
test eax, 0x2000
je 0x6ad002
mov ecx, dword [esp + 0xa4]
mov edi, dword [esp + 0xa0]
mov esi, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
push 0
push 0x24
push ecx
push edi
push esi
push edx
or ebx, 0xffffffff
mov dword [esp + 0x54], 0x85
mov dword [esp + 0x68], 0
call fcn.006aa1b8
mov ecx, dword [esp + 0x34]
push 0
push 0x18
mov dword [esp + 0x54], eax
mov eax, dword [esp + 0xc4]
push eax
push edi
push esi
push ecx
or ebx, ebx
call fcn.006aa1b8
mov ebx, dword [esp + 0x50]
add esp, 0x30
mov dword [esp + 0x30], eax
test ebx, ebx
je 0x6ace4c
mov eax, dword [esp + 0x34]
mov edx, dword [esp + 0x30]
mov dword [esp + 0x34], edx
mov dword [esp + 0x30], eax
cmp dword [esp + 0x34], 0
je 0x6aceca
mov eax, dword [esp + 0x34]
mov edi, dword [eax]
lea ecx, [esp + 0x60]
push ecx
mov ecx, dword [edi + 0xc]
mov esi, ebp
mov byte [esp + 0x44], 0x2e
mov byte [esp + 0x45], 0x2c
mov byte [esp + 0x46], 0x2b
mov byte [esp + 0x47], 0x2d
call fcn.006823b8
movzx ecx, byte [edi]
mov edx, dword [esp + 0x48]
mov edi, dword [esp + 0x18]
add esp, 4
mov esi, eax
mov eax, dword [esp + 0x18]
push esi
push edx
movzx edx, byte [esp + ecx - 5]
push eax
push edx
mov eax, edi
call fcn.00671708
push esi
mov eax, 1
mov esi, ebp
call fcn.00680fd8
mov esi, dword [esp + 0x74]
add esp, 0x14
mov edx, ebp
call fcn.006835e8
mov eax, dword [esp + 0x34]
mov esi, dword [esp + 0x10]
call fcn.006ac3b8
jmp 0x6aceee
mov eax, dword [esp + 0x44]
mov edi, dword [esp + 0x14]
xor ecx, ecx
test ebx, ebx
sete cl
push eax
push esi
mov eax, edi
lea ecx, [ecx + ecx + 0x3e]
push ecx
call fcn.00671818
mov esi, dword [esp + 0x1c]
add esp, 0xc
cmp dword [esp + 0x30], 0
je 0x6acf54
mov edx, dword [esp + 0x30]
mov ebx, dword [edx]
inc dword [ebp + 0x48]
mov esi, dword [ebp + 0x48]
mov eax, dword [ebx + 0xc]
mov edi, ebp
mov dword [esp + 0x50], esi
call fcn.00682438
mov bl, byte [ebx]
cmp bl, 0x4f
je 0x6acf2e
cmp bl, 0x4d
je 0x6acf2e
xor eax, eax
cmp dword [esp + 0x20], eax
setne al
lea eax, [eax + eax + 0x4d]
mov dword [esp + 0x3c], eax
jmp 0x6acf3f
xor ecx, ecx
cmp dword [esp + 0x20], ecx
sete cl
lea ecx, [ecx + ecx + 0x4e]
mov dword [esp + 0x3c], ecx
mov eax, dword [esp + 0x30]
mov esi, dword [esp + 0x10]
call fcn.006ac3b8
mov edi, dword [esp + 0x14]
mov ebx, dword [esp + 0x20]
mov eax, dword [edi + 0xc]
mov ecx, dword [esp + 0x18]
test ebx, ebx
sete dl
add dl, 0x41
cmp dword [esp + 0x34], 0
mov byte [esi + 0x29], dl
mov dword [esi + 0x2c], ecx
mov dword [esi + 0x30], eax
jne 0x6acf81
cmp dword [esp + 0x30], 0
jne 0x6acf81
mov eax, 1
jmp 0x6acf83
xor eax, eax
cmp dword [esp + 0x3c], 0x85
mov byte [esi + 0x2a], al
je 0x6acd40
mov al, byte [ebp + 0x15]
test al, al
jne 0x6acfa3
inc dword [ebp + 0x48]
mov ebx, dword [ebp + 0x48]
jmp 0x6acfaf
dec al
movzx edx, al
mov byte [ebp + 0x15], al
mov ebx, dword [ebp + edx*4 + 0x18]
push ebx
mov esi, ecx
push esi
push 0x3c
mov eax, edi
mov dword [esp + 0x44], ebx
call fcn.00671818
add esp, 0xc
push 0xffffffffffffffff
push esi
mov edx, ebp
call fcn.00680ed8
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0x58]
mov edx, dword [esp + 0x44]
push ebx
push eax
push ecx
push edx
mov eax, edi
call fcn.00671708
mov eax, dword [edi + 0x14]
add esp, 0x18
test eax, eax
je 0x6acd40
mov edi, dword [edi + 0xc]
lea ecx, [edi + edi*4]
mov byte [eax + ecx*4 - 0x11], 0x6b
jmp 0x6acd40
test eax, 0x30000
je 0x6ad52f
mov edx, dword [esi + 0x14]
mov ecx, dword [esi + 8]
mov edi, dword [esi + 4]
xor eax, eax
test byte [esp + 0x9c], 1
mov dword [esp + 0x44], edx
mov edx, dword [ecx + 8]
mov edx, dword [edx + edi*4]
mov dword [esp + 0x70], eax
mov dword [esp + 0x74], eax
mov dword [esp + 0x78], 0x40
mov dword [esp + 0x7c], 0x3e
mov dword [esp + 0x80], 0x2e
mov dword [esp + 0x84], 0x2b
mov dword [esp + 0x88], 0x2d
mov dword [esp + 0x8c], 0x2c
mov dword [esp + 0x64], 0x85
mov dword [esp + 0x68], 0x51
mov dword [esp + 0x6c], 0x48
mov dword [esp + 0x24], edi
mov dword [esp + 0x58], eax
mov dword [esp + 0x40], eax
mov dword [esp + 0x28], eax
mov dword [esp + 0x48], ecx
mov dword [esp + 0x30], edx
je 0x6ad0b6
test dword [esi], 0x1000000
je 0x6ad0b6
cmp dword [ecx + 4], edi
jle 0x6ad0b6
mov eax, 1
mov dword [esp + 0x58], eax
test dword [esi], 0x100000
je 0x6ad0f6
mov edx, dword [esp + 0xa0]
mov ebx, dword [esp + 0x30]
mov eax, ecx
mov ecx, dword [esp + 0xa4]
push eax
mov eax, dword [esp + 0x1c]
push 0x18
push ecx
mov ecx, dword [esp + 0x28]
push edx
push eax
push ecx
call fcn.006aa1b8
mov ebx, dword [esp + 0x2c]
mov dword [esp + 0x40], eax
add esp, 0x18
mov eax, 1
test dword [esi], 0x200000
je 0x6ad140
mov edx, dword [esp + 0x48]
mov eax, dword [esp + 0xa4]
mov ecx, dword [esp + 0xa0]
mov ebx, dword [esp + 0x30]
push edx
mov edx, dword [esp + 0x1c]
push 0x24
push eax
mov eax, dword [esp + 0x28]
push ecx
push edx
push eax
call fcn.006aa1b8
mov esi, dword [esp + 0x28]
mov ebx, dword [esp + 0x2c]
mov edi, dword [esp + 0x3c]
mov dword [esp + 0x58], eax
add esp, 0x18
mov eax, 1
mov edx, dword [esp + 0xa4]
lea ecx, [esp + 0x2c]
push ecx
mov ecx, dword [esp + 0x20]
push eax
mov eax, dword [esp + 0xa8]
push edx
push eax
push ecx
push esi
push ebp
call fcn.006ac5c8
mov edx, dword [esi + 0x1c]
mov dword [esp + 0x50], eax
mov eax, dword [esp + 0x64]
mov ecx, dword [eax + 0x28]
mov dword [esp + 0x58], edx
xor edx, edx
add esp, 0x1c
cmp byte [edi + ecx], dl
sete dl
cmp dword [esp + 0x20], edx
jne 0x6ad197
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x40]
mov dword [esp + 0x28], ecx
mov dword [esp + 0x40], eax
jmp 0x6ad19f
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x28]
xor edx, edx
cmp eax, edx
je 0x6ad1af
test byte [eax + 0x10], 0x28
mov dword [esp + 0x4c], edx
je 0x6ad1b7
mov dword [esp + 0x4c], 1
cmp ecx, edx
je 0x6ad1c5
test byte [ecx + 0x10], 0x28
mov dword [esp + 0x5c], edx
je 0x6ad1cd
mov dword [esp + 0x5c], 1
cmp eax, edx
jne 0x6ad1d9
cmp edi, edx
mov dword [esp + 0x50], edx
jle 0x6ad1e1
mov dword [esp + 0x50], 1
mov dword [esp + 0x30], edi
cmp eax, edx
je 0x6ad28f
mov eax, dword [esp + 0x40]
mov ecx, dword [eax]
mov edx, dword [esp + 0x34]
mov eax, dword [ecx + 0xc]
lea esi, [edx + edi]
mov edi, ebp
mov dword [esp + 0x48], eax
call fcn.00682438
mov eax, dword [esp + 0x48]
mov cl, byte [eax]
cmp cl, 0x9d
je 0x6ad218
cmp cl, 0x9c
jne 0x6ad21d
mov eax, dword [eax + 8]
jmp 0x6ad20c
mov cl, byte [eax]
cmp cl, 0x84
jne 0x6ad227
mov cl, byte [eax + 0x23]
cmp cl, 0x5e
je 0x6ad246
cmp cl, 0x80
jbe 0x6ad236
cmp cl, 0x83
jbe 0x6ad246
mov eax, dword [esp + 0x3c]
push eax
push esi
mov eax, ebx
call fcn.0067fea8
add esp, 8
cmp dword [esp + 0x2c], 0
mov esi, dword [esp + 0x24]
je 0x6ad27c
mov edi, dword [esp + 0x2c]
mov bl, byte [edi + esi]
mov eax, dword [esp + 0x48]
call fcn.0067e568
cmp al, 0x62
jne 0x6ad268
mov byte [edi + esi], al
mov dl, byte [edi + esi]
mov ecx, dword [esp + 0x48]
call fcn.0067fef8
test eax, eax
je 0x6ad27c
mov byte [edi + esi], 0x62
mov ebx, dword [esp + 0x14]
mov edi, dword [esp + 0x24]
inc esi
mov dword [esp + 0x30], esi
mov esi, dword [esp + 0x10]
jmp 0x6ad2c1
cmp dword [esp + 0x58], edx
je 0x6ad2c1
mov ecx, dword [esp + 0x34]
add ecx, edi
push ecx
push 0
push 0xa
mov eax, ebx
call fcn.00671818
lea edx, [edi + 1]
add esp, 0xc
mov dword [esp + 0x30], edx
mov dword [esp + 0x4c], 0
mov dword [esp + 0x50], 1
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x30]
push eax
mov eax, dword [esp + 0x30]
push ebp
call fcn.006ac3f8
mov ecx, dword [esp + 0x38]
mov edx, dword [esp + 0x54]
mov eax, dword [esp + 0x58]
push ecx
lea ecx, [edx + eax*2]
mov edx, dword [esp + 0x2c]
lea eax, [edx + ecx*2]
mov ecx, dword [esp + eax*4 + 0x7c]
mov eax, dword [esp + 0x40]
mov edx, dword [esp + 0x50]
push ecx
mov ecx, dword [esp + 0x4c]
push ebx
call fcn.006718a8
add esp, 0x14
cmp dword [esp + 0x28], 0
mov dword [esp + 0x30], edi
je 0x6ad3e0
mov edx, dword [esp + 0x28]
mov eax, dword [edx]
mov edx, dword [esp + 0x34]
mov ecx, dword [eax + 0xc]
add edi, edx
push edi
mov eax, 1
mov esi, ebp
mov dword [esp + 0x34], ecx
mov dword [esp + 0x5c], edi
call fcn.00680fd8
mov eax, dword [esp + 0x34]
mov esi, edi
add esp, 4
mov edi, ebp
call fcn.00682438
mov eax, dword [esp + 0x30]
mov cl, byte [eax]
cmp cl, 0x9d
je 0x6ad358
cmp cl, 0x9c
jne 0x6ad35d
mov eax, dword [eax + 8]
jmp 0x6ad34c
mov cl, byte [eax]
cmp cl, 0x84
jne 0x6ad367
mov cl, byte [eax + 0x23]
cmp cl, 0x5e
je 0x6ad38a
cmp cl, 0x80
jbe 0x6ad376
cmp cl, 0x83
jbe 0x6ad38a
mov eax, dword [esp + 0x3c]
mov ecx, dword [esp + 0x58]
push eax
push ecx
mov eax, ebx
call fcn.0067fea8
add esp, 8
mov esi, dword [esp + 0x2c]
mov edi, dword [esp + 0x24]
test esi, esi
je 0x6ad3bd
mov bl, byte [esi + edi]
mov eax, dword [esp + 0x30]
call fcn.0067e568
cmp al, 0x62
jne 0x6ad3a9
mov byte [esi + edi], al
mov dl, byte [esi + edi]
mov ecx, dword [esp + 0x30]
call fcn.0067fef8
test eax, eax
je 0x6ad3bd
mov byte [esi + edi], 0x62
mov edx, dword [esp + 0x34]
push edx
inc edi
push ebp
mov eax, esi
mov ecx, edi
call fcn.006ac3f8
mov ebx, dword [esp + 0x1c]
mov esi, dword [esp + 0x18]
mov dword [esp + 0x38], edi
mov edi, dword [esp + 0x2c]
add esp, 8
mov eax, dword [esp + 0x2c]
mov ecx, dword [ebp]
push eax
push ecx
call fcn.0065b588
mov edx, dword [ebx + 0xc]
add esp, 8
cmp dword [esp + 0x28], 0
mov dword [esi + 0x30], edx
jne 0x6ad406
test edi, edi
jne 0x6ad406
xor eax, eax
jmp 0x6ad40b
mov eax, 1
mov ecx, dword [esp + 0x20]
inc ecx
imul ecx, eax
mov eax, dword [esp + ecx*4 + 0x64]
cmp eax, 0x85
je 0x6ad455
mov edx, dword [esp + 0x30]
mov ecx, dword [esp + 0x3c]
push edx
mov edx, dword [esp + 0x48]
push eax
mov eax, dword [esp + 0x3c]
push ebx
call fcn.006718a8
mov eax, dword [ebx + 0x14]
add esp, 0xc
test eax, eax
je 0x6ad455
mov ecx, dword [esp + 0x20]
cmp dword [esp + 0x5c], ecx
mov ecx, dword [ebx + 0xc]
setne dl
lea ecx, [ecx + ecx*4]
mov byte [eax + ecx*4 - 0x11], dl
mov al, byte [ebp + 0x15]
test al, al
jne 0x6ad468
inc dword [ebp + 0x48]
mov edx, dword [ebp + 0x48]
mov dword [esp + 0x50], edx
jmp 0x6ad478
dec al
mov byte [ebp + 0x15], al
movzx eax, al
mov ecx, dword [ebp + eax*4 + 0x18]
mov dword [esp + 0x50], ecx
test dword [esi], 0x300000
je 0x6ad4a6
mov esi, dword [esp + 0x50]
mov edx, dword [esp + 0x44]
push esi
push edi
push edx
push 0x1c
mov eax, ebx
call fcn.00671708
mov eax, dword [esp + 0x64]
push eax
push esi
push 0x49
mov eax, ebx
call fcn.00671818
add esp, 0x1c
mov esi, dword [esp + 0x50]
mov edx, ebp
call fcn.006835e8
mov eax, dword [esp + 0x40]
mov esi, dword [esp + 0x10]
call fcn.006ac3b8
mov eax, dword [esp + 0x28]
call fcn.006ac3b8
cmp dword [esp + 0x60], 0
jne 0x6ad515
mov eax, ebp
call fcn.006835c8
mov ecx, dword [esp + 0x44]
mov esi, dword [esp + 0x14]
mov ebx, eax
push ebx
push ecx
push 0x47
mov eax, esi
mov dword [esp + 0x44], ebx
call fcn.00671818
mov edi, dword [esp + 0x24]
add esp, 0xc
push 0xffffffffffffffff
push edi
mov edx, ebp
call fcn.00680ed8
push ebx
push edi
push 0x2f
mov eax, esi
call fcn.00671818
mov esi, dword [esp + 0x24]
mov ebx, dword [esp + 0x28]
add esp, 0x14
cmp dword [esp + 0x20], 0
mov eax, dword [esp + 0x44]
sete dl
add dl, 0x41
mov byte [esi + 0x29], dl
mov dword [esi + 0x2c], eax
jmp 0x6acd44
test eax, 0x10000000
je 0x6ad7fa
inc dword [ebp + 0x48]
mov edi, dword [ebp + 0x48]
xor eax, eax
mov dword [esp + 0x58], eax
mov dword [esp + 0x5c], eax
mov eax, ebx
mov dword [esp + 0x3c], edi
call fcn.00671918
mov dword [esp + 0x34], eax
mov eax, dword [esi + 8]
mov ecx, dword [eax + 0xc]
mov dword [esp + 0x48], ecx
mov ecx, dword [esp + 0x94]
mov dword [esp + 0x28], eax
mov byte [esi + 0x29], 3
mov dword [esi + 0x2c], edi
mov eax, dword [ecx + 0x18]
cmp eax, 1
mov dword [esp + 0x30], 0
jle 0x6ad637
sub eax, dword [esp + 0x98]
mov esi, dword [ebp]
dec eax
lea ecx, [eax*8]
sub ecx, eax
lea ecx, [ecx*8 + 0x40]
mov dword [esp + 0x60], eax
call fcn.0065b758
mov dword [esp + 0x40], eax
test eax, eax
je 0x6ad9e7
mov eax, dword [esp + 0x60]
mov edx, dword [esp + 0x40]
mov esi, dword [esp + 0x4c]
lea ecx, [eax + 1]
mov word [edx + 2], cx
mov word [edx], cx
lea edi, [edx + 8]
mov ecx, 0xe
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [esp + 0x94]
mov ecx, dword [ecx + 8]
add ecx, 8
cmp eax, 1
mov dword [esp + 0x44], ecx
jl 0x6ad63e
add edx, 0x40
mov dword [esp + 0x50], edx
mov edx, dword [esp + 0x10]
add edx, 0x68
mov dword [esp + 0x60], eax
lea esp, [esp]
movzx eax, byte [edx]
mov edi, dword [esp + 0x50]
add dword [esp + 0x50], 0x38
lea ecx, [eax*8]
sub ecx, eax
mov eax, dword [esp + 0x44]
lea esi, [eax + ecx*8]
mov ecx, 0xe
add edx, 0x40
sub dword [esp + 0x60], 1
rep movsd dword es:[edi], dword [esi]
jne 0x6ad608
jmp 0x6ad63e
mov ecx, dword [ecx + 8]
mov dword [esp + 0x40], ecx
mov eax, dword [esp + 0x9c]
and eax, 8
mov dword [esp + 0x60], eax
jne 0x6ad671
mov eax, dword [ebp + 0x48]
lea ecx, [eax + 1]
lea eax, [ecx + 1]
push ecx
mov dword [ebp + 0x48], eax
mov dword [esp + 0x60], eax
push 0
push 0xa
mov eax, ebx
mov dword [esp + 0x64], ecx
call fcn.00671818
add esp, 0xc
mov edx, dword [esp + 0x3c]
push edx
xor edi, edi
push edi
push 7
mov eax, ebx
call fcn.00671818
mov esi, dword [esp + 0x54]
add esp, 0xc
cmp dword [esi + 0x14], edi
mov ecx, eax
mov dword [esp + 0x2c], ecx
mov dword [esp + 0x44], edi
jle 0x6ad783
mov dword [esp + 0x50], edi
jmp 0x6ad6a8
mov eax, dword [esi + 0x1c]
add eax, dword [esp + 0x50]
mov ecx, dword [esp + 0x18]
cmp dword [eax + 8], ecx
je 0x6ad6c7
mov edx, 0x200
cmp word [eax + 0x10], dx
jne 0x6ad768
mov eax, dword [eax]
mov ecx, dword [esp + 0x40]
push 0xf0
push 0
push eax
push ecx
push ebp
call fcn.006adae8
mov edi, eax
add esp, 0x14
test edi, edi
je 0x6ad768
cmp word [esp + 0x60], 0
jne 0x6ad73b
mov edx, dword [esi + 0x14]
dec edx
cmp dword [esp + 0x44], edx
jne 0x6ad700
or esi, 0xffffffff
jmp 0x6ad704
mov esi, dword [esp + 0x44]
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x4c]
push eax
mov eax, dword [edx + 0xc]
push ecx
push 0xffffffffffffffff
push eax
push ebp
call fcn.006810a8
mov ecx, dword [ebx + 0xc]
mov edx, dword [esp + 0x6c]
add esp, 0x14
push esi
push 0x6a
add ecx, 2
push ebx
call fcn.006718a8
mov esi, dword [esp + 0x54]
add esp, 0xc
mov ecx, dword [esp + 0x34]
mov edx, dword [esp + 0x3c]
push ecx
push edx
push 2
mov eax, ebx
call fcn.00671818
add esp, 0xc
cmp byte [edi + 7], 0
je 0x6ad75f
mov dword [esp + 0x30], 1
push edi
call fcn.006ae5b8
add esp, 4
mov eax, dword [esp + 0x44]
add dword [esp + 0x50], 0x28
inc eax
cmp eax, dword [esi + 0x14]
mov dword [esp + 0x44], eax
jl 0x6ad6a8
mov ecx, dword [esp + 0x2c]
mov eax, dword [ebx + 0xc]
cmp eax, ecx
jle 0x6ad794
mov edx, dword [ebx + 0x14]
lea ecx, [ecx + ecx*4]
mov dword [edx + ecx*4 + 4], eax
mov esi, dword [esp + 0x10]
mov eax, dword [esi + 0x18]
push eax
push 0
push 1
mov eax, ebx
call fcn.00671818
mov eax, dword [ebx + 0x20]
add esp, 0xc
test eax, eax
je 0x6ad7c3
mov ecx, dword [esp + 0x34]
lea edx, [ecx*4 + 4]
mov ecx, dword [ebx + 0xc]
sub eax, edx
mov dword [eax], ecx
mov edx, dword [esp + 0x94]
cmp dword [edx + 0x18], 1
jle 0x6ad7e1
mov eax, dword [esp + 0x40]
mov ecx, dword [ebp]
push eax
push ecx
call fcn.0065b588
add esp, 8
cmp dword [esp + 0x30], 0
jne 0x6acd44
mov eax, dword [esp + 0x28]
call fcn.006ac3b8
jmp 0x6acd44
mov dl, byte [edi + 0x100a6f6c]
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x44]
mov dword [esi + 0x2c], eax
mov byte [esi + 0x29], dl
movzx edx, byte [edi + 0x100a6f70]
push ecx
push eax
push edx
mov eax, ebx
call fcn.00671818
add esp, 0xc
inc eax
mov dword [esi + 0x30], eax
mov byte [esi + 0x2a], 1
jmp 0x6acd44
mov eax, 1
xor edx, edx
call fcn.006f4888
jmp 0x6acd6e
mov edx, dword [esp + 0x10]
cmp dword [edx + 0xc], 0
mov eax, dword [esi]
je 0x6ad852
test byte [eax + 2], 1
je 0x6ad867
mov ecx, dword [esp + 0x54]
push 8
push ecx
push eax
push ebp
call fcn.00682cf8
add esp, 0x10
or byte [esi + 0x12], 4
dec edi
add esi, 0x28
test edi, edi
jg 0x6acd98
mov eax, dword [esp + 0x10]
cmp dword [eax + 0xc], 0
je 0x6ad9ba
mov edx, dword [ebx + 0xc]
mov dword [eax + 0x24], edx
mov eax, dword [eax + 0xc]
mov edi, dword [ebx + 0xc]
mov dword [esp + 0x60], eax
mov eax, dword [ebx + 0x10]
cmp eax, edi
jg 0x6ad8fb
test eax, eax
je 0x6ad8a0
add eax, eax
jmp 0x6ad8a5
mov eax, 0x33
lea ecx, [eax + eax*4]
mov eax, dword [ebx + 0x14]
add ecx, ecx
add ecx, ecx
push ecx
mov ecx, dword [ebx]
call fcn.0065b7c8
mov esi, eax
add esp, 4
test esi, esi
je 0x6ad92b
mov eax, dword [ebx]
test eax, eax
je 0x6ad8df
cmp esi, dword [eax + 0xf0]
jb 0x6ad8df
cmp esi, dword [eax + 0xf4]
jae 0x6ad8df
movzx ecx, word [eax + 0xe0]
jmp 0x6ad8eb
push esi
call dword [0x100d93f4]
add esp, 4
mov ecx, eax
mov eax, 0xcccccccd
mul ecx
shr edx, 4
mov dword [ebx + 0x10], edx
mov dword [ebx + 0x14], esi
mov eax, dword [ebx + 0x14]
mov ecx, 1
add dword [ebx + 0xc], ecx
lea edx, [edi + edi*4]
lea eax, [eax + edx*4]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x60]
mov dword [eax + 8], ecx
xor ecx, ecx
mov byte [eax], 7
mov byte [eax + 3], 0
mov dword [eax + 0xc], ecx
mov dword [eax + 0x10], ecx
mov byte [eax + 1], cl
mov byte [ebx + 0x62], cl
lea eax, [ebp + 0x70]
mov esi, 0xa
jmp 0x6ad938
mov edx, dword [eax]
test edx, edx
je 0x6ad960
cmp byte [eax - 8], 0
je 0x6ad95a
mov cl, byte [ebp + 0x15]
cmp cl, 8
jae 0x6ad956
movzx ecx, cl
mov dword [ebp + ecx*4 + 0x18], edx
inc byte [ebp + 0x15]
mov byte [eax - 8], 0
mov dword [eax], 0
add eax, 0x18
sub esi, 1
jne 0x6ad938
mov eax, dword [esp + 0x1c]
mov esi, dword [eax + 0x1c]
xor edi, edi
cmp dword [eax + 0x14], edi
jle 0x6ad9ba
mov ebx, dword [esp + 0xa0]
test byte [esi + 0x12], 6
jne 0x6ad9ad
mov ecx, dword [esi + 0x24]
mov eax, dword [esi + 0x20]
and ecx, dword [esp + 0xa4]
and eax, ebx
or eax, ecx
jne 0x6ad9ad
mov edx, dword [esp + 0x54]
mov eax, dword [esi]
push 8
push edx
push eax
push ebp
call fcn.00682cf8
add esp, 0x10
or byte [esi + 0x12], 4
mov ecx, dword [esp + 0x1c]
inc edi
add esi, 0x28
cmp edi, dword [ecx + 0x14]
jl 0x6ad97d
mov esi, dword [esp + 0x38]
test esi, esi
je 0x6ad9e7
mov dl, byte [ebp + 0x15]
cmp dl, 8
jae 0x6ad9e7
xor eax, eax
lea ecx, [ebp + 0x60]
cmp dword [ecx + 0x10], esi
je 0x6ada00
inc eax
add ecx, 0x18
cmp eax, 0xa
jl 0x6ad9cf
movzx edx, dl
mov dword [ebp + edx*4 + 0x18], esi
inc byte [ebp + 0x15]
mov edx, dword [esp + 0xa4]
mov eax, dword [esp + 0xa0]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x80
ret
mov edx, dword [esp + 0xa4]
mov eax, dword [esp + 0xa0]
pop edi
pop esi
pop ebp
mov byte [ecx + 8], 1
pop ebx
add esp, 0x80
ret