Function at 0x6d91af30
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [0x6da20954]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
lea eax, [esp - 0x1c]
cmp eax, dword [ecx + 8]
jbe 0x6d91bc82
sub esp, 0x9c
mov eax, dword [esp + 0xa0]
mov dword [esp + 0x94], eax
mov ecx, dword [esp + 0xa4]
mov dword [esp + 0x98], ecx
lea edx, [0x6d959140]
mov dword [esp], edx
mov ebx, dword [esp + 0xa8]
mov dword [esp + 4], ebx
lea ebp, [esp + 0x94]
mov dword [esp + 8], ebp
call fcn.6d8cd650
movzx eax, byte [esp + 0x10]
test al, al
jne 0x6d91b623
mov eax, dword [esp + 0xa0]
mov dword [esp + 0x94], eax
mov ecx, dword [esp + 0xa4]
mov dword [esp + 0x98], ecx
lea edx, [0x6d959140]
mov dword [esp], edx
mov edx, dword [esp + 0xa8]
mov dword [esp + 4], edx
lea ebx, [esp + 0x94]
mov dword [esp + 8], ebx
call fcn.6d8cd850
mov eax, dword [esp + 0xc]
test byte [eax], al
mov eax, dword [esp + 0xa4]
mov ecx, dword [esp + 0xa0]
cmp eax, ecx
je 0x6d91b614
movzx edx, byte [ecx + 0xf]
mov ebx, edx
and edx, 0x1f
movzx ebp, byte [eax + 0xf]
and ebp, 0x1f
xchg ebp, eax
cmp al, dl
xchg ebp, eax
jne 0x6d91b605
mov byte [esp + 0x17], bl
mov byte [esp + 0x16], dl
mov dword [esp], ecx
call fcn.6d919f70
mov eax, dword [esp + 8]
mov dword [esp + 0x4c], eax
mov ecx, dword [esp + 4]
mov dword [esp + 0x90], ecx
mov edx, dword [esp + 0xa4]
mov dword [esp], edx
call fcn.6d919f70
mov eax, dword [esp + 0x4c]
cmp dword [esp + 8], eax
jne 0x6d91b5f6
mov ecx, dword [esp + 0x90]
mov dword [esp], ecx
mov dword [esp + 8], eax
call fcn.6d8c2ef0
movzx eax, byte [esp + 0xc]
test al, al
je 0x6d91b5f6
mov ebp, dword [esp + 0xa0]
movzx esi, byte [ebp + 0xc]
xchg esi, eax
test al, 1
xchg esi, eax
jne 0x6d91b087
xor esi, esi
jmp 0x6d91b0e6
movzx esi, byte [ebp + 0xf]
and esi, 0x1f
cmp esi, 0x14
ja 0x6d91b0bb
cmp esi, 0x12
ja 0x6d91b0ac
cmp esi, 0x11
jne 0x6d91b0a2
lea esi, [ebp + 0x2c]
jmp 0x6d91b0e6
cmp esi, 0x12
jne 0x6d91b0e3
lea esi, [ebp + 0x28]
jmp 0x6d91b0e6
cmp esi, 0x13
jne 0x6d91b0b6
lea esi, [ebp + 0x24]
jmp 0x6d91b0e6
lea esi, [ebp + 0x30]
jmp 0x6d91b0e6
cmp esi, 0x16
ja 0x6d91b0cf
cmp esi, 0x15
jne 0x6d91b0ca
lea esi, [ebp + 0x38]
jmp 0x6d91b0e6
lea esi, [ebp + 0x24]
jmp 0x6d91b0e6
cmp esi, 0x17
jne 0x6d91b0d9
lea esi, [ebp + 0x24]
jmp 0x6d91b0e6
cmp esi, 0x19
jne 0x6d91b0e3
lea esi, [ebp + 0x30]
jmp 0x6d91b0e6
lea esi, [ebp + 0x20]
mov edi, dword [esp + 0xa4]
movzx eax, byte [edi + 0xc]
test al, 1
jne 0x6d91b0fa
xor eax, eax
jmp 0x6d91b159
movzx eax, byte [edi + 0xf]
and eax, 0x1f
cmp eax, 0x14
ja 0x6d91b12e
cmp eax, 0x12
ja 0x6d91b11f
cmp eax, 0x11
jne 0x6d91b115
lea eax, [edi + 0x2c]
jmp 0x6d91b159
cmp eax, 0x12
jne 0x6d91b156
lea eax, [edi + 0x28]
jmp 0x6d91b159
cmp eax, 0x13
jne 0x6d91b129
lea eax, [edi + 0x24]
jmp 0x6d91b159
lea eax, [edi + 0x30]
jmp 0x6d91b159
cmp eax, 0x16
ja 0x6d91b142
cmp eax, 0x15
jne 0x6d91b13d
lea eax, [edi + 0x38]
jmp 0x6d91b159
lea eax, [edi + 0x24]
jmp 0x6d91b159
cmp eax, 0x17
jne 0x6d91b14c
lea eax, [edi + 0x24]
jmp 0x6d91b159
cmp eax, 0x19
jne 0x6d91b156
lea eax, [edi + 0x30]
jmp 0x6d91b159
lea eax, [edi + 0x20]
test esi, esi
jne 0x6d91b169
test eax, eax
je 0x6d91b208
test esi, esi
je 0x6d91b16d
test eax, eax
jne 0x6d91b17c
mov byte [esp + 0xac], 0
add esp, 0x9c
ret
mov dword [esp + 0x60], eax
mov eax, dword [esi]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.6d91a130
mov eax, dword [esp + 8]
mov dword [esp], eax
call fcn.6d8c17c0
mov eax, dword [esp + 8]
mov dword [esp + 0x28], eax
mov ecx, dword [esp + 0x60]
mov ecx, dword [ecx]
mov edx, dword [esp + 4]
mov dword [esp + 0x70], edx
mov ebx, dword [esp + 0xa4]
mov dword [esp], ebx
mov dword [esp + 4], ecx
call fcn.6d91a130
mov eax, dword [esp + 8]
mov dword [esp], eax
call fcn.6d8c17c0
mov eax, dword [esp + 0x28]
cmp dword [esp + 8], eax
jne 0x6d91b5e7
mov ecx, dword [esp + 0x70]
mov dword [esp], ecx
mov dword [esp + 8], eax
call fcn.6d8c2ef0
movzx eax, byte [esp + 0xc]
test al, al
je 0x6d91b5e7
mov ebp, dword [esp + 0xa0]
mov edi, dword [esp + 0xa4]
movzx esi, byte [esp + 0x16]
xchg esi, eax
test al, al
xchg esi, eax
je 0x6d91b632
xchg esi, eax
cmp al, 0x10
xchg esi, eax
jbe 0x6d91b5d8
xchg esi, eax
cmp al, 0x15
xchg esi, eax
ja 0x6d91b4a2
xchg esi, eax
cmp al, 0x12
xchg esi, eax
jbe 0x6d91b405
xchg esi, eax
cmp al, 0x13
xchg esi, eax
jne 0x6d91b2fd
movzx esi, word [ebp + 0x22]
cmp word [edi + 0x22], si
jne 0x6d91b2ee
movzx esi, word [ebp + 0x20]
movzx eax, word [edi + 0x20]
cmp ax, si
jne 0x6d91b2ee
movzx ecx, byte [ebp + 0xc]
test cl, 1
je 0x6d91b272
mov ecx, 0x34
jmp 0x6d91b277
mov ecx, 0x24
test si, si
jne 0x6d91b282
xor edx, edx
xor esi, esi
jmp 0x6d91b294
movzx edx, si
lea esi, [ecx + ebp]
cmp edx, 0x10000
ja 0x6d91bc77
movzx ecx, byte [edi + 0xc]
test cl, 1
je 0x6d91b2a4
mov ecx, 0x34
jmp 0x6d91b2a9
mov ecx, 0x24
test ax, ax
jne 0x6d91b2b4
xor eax, eax
xor ecx, ecx
jmp 0x6d91b2c4
movzx eax, ax
add ecx, edi
cmp eax, 0x10000
ja 0x6d91bc6b
mov dword [esp + 0x24], edx
mov dword [esp + 0x5c], esi
mov dword [esp + 0x20], eax
mov dword [esp + 0x58], ecx
mov ebx, dword [esp + 0xa8]
mov dword [esp + 0x3c], eax
xor eax, eax
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0x3c]
jmp 0x6d91babc
mov byte [esp + 0xac], 0
add esp, 0x9c
ret
xchg esi, eax
cmp al, 0x14
xchg esi, eax
jne 0x6d91b39d
mov eax, dword [ebp + 0x20]
mov dword [esp], eax
call fcn.6d8c17c0
mov eax, dword [esp + 8]
mov dword [esp + 0x4c], eax
mov ecx, dword [esp + 0xa4]
mov edx, dword [ecx + 0x20]
mov ebx, dword [esp + 4]
mov dword [esp + 0x90], ebx
mov dword [esp], edx
call fcn.6d8c17c0
mov eax, dword [esp + 0x4c]
cmp dword [esp + 8], eax
jne 0x6d91b38e
mov ecx, dword [esp + 0x90]
mov dword [esp], ecx
mov dword [esp + 8], eax
call fcn.6d8c2ef0
movzx eax, byte [esp + 0xc]
test al, al
je 0x6d91b38e
mov edx, dword [esp + 0xa0]
mov ebx, dword [edx + 0x28]
mov ebp, dword [esp + 0xa4]
cmp dword [ebp + 0x28], ebx
jne 0x6d91b37f
mov dword [esp + 0x4c], ebx
xor eax, eax
jmp 0x6d91b89b
mov byte [esp + 0xac], 0
add esp, 0x9c
ret
mov byte [esp + 0xac], 0
add esp, 0x9c
ret
mov eax, dword [ebp + 0x20]
mov ecx, dword [edi + 0x20]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov eax, dword [esp + 0xa8]
mov dword [esp + 8], eax
call fcn.6d91af30
movzx eax, byte [esp + 0xc]
test al, al
jne 0x6d91b3c7
xor eax, eax
jmp 0x6d91b3f7
mov eax, dword [esp + 0xa0]
mov eax, dword [eax + 0x24]
mov ecx, dword [esp + 0xa4]
mov ecx, dword [ecx + 0x24]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov eax, dword [esp + 0xa8]
mov dword [esp + 8], eax
call fcn.6d91af30
movzx eax, byte [esp + 0xc]
mov byte [esp + 0xac], al
add esp, 0x9c
ret
xchg esi, eax
cmp al, 0x11
xchg esi, eax
je 0x6d91b453
xchg esi, eax
cmp al, 0x12
xchg esi, eax
jne 0x6d91b632
mov eax, dword [ebp + 0x24]
cmp dword [edi + 0x24], eax
je 0x6d91b423
xor eax, eax
jmp 0x6d91b445
mov eax, dword [ebp + 0x20]
mov ecx, dword [edi + 0x20]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov eax, dword [esp + 0xa8]
mov dword [esp + 8], eax
call fcn.6d91af30
movzx eax, byte [esp + 0xc]
mov byte [esp + 0xac], al
add esp, 0x9c
ret
mov eax, dword [ebp + 0x20]
mov ecx, dword [edi + 0x20]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov eax, dword [esp + 0xa8]
mov dword [esp + 8], eax
call fcn.6d91af30
movzx eax, byte [esp + 0xc]
test al, al
je 0x6d91b492
mov eax, dword [esp + 0xa0]
mov eax, dword [eax + 0x28]
mov ecx, dword [esp + 0xa4]
cmp dword [ecx + 0x28], eax
sete al
jmp 0x6d91b494
xor eax, eax
mov byte [esp + 0xac], al
add esp, 0x9c
ret
xchg esi, eax
cmp al, 0x17
xchg esi, eax
ja 0x6d91b510
xchg esi, eax
cmp al, 0x16
xchg esi, eax
jne 0x6d91b4e0
mov eax, dword [ebp + 0x20]
mov ecx, dword [edi + 0x20]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov eax, dword [esp + 0xa8]
mov dword [esp + 8], eax
call fcn.6d91af30
movzx eax, byte [esp + 0xc]
mov byte [esp + 0xac], al
add esp, 0x9c
ret
mov eax, dword [ebp + 0x20]
mov ecx, dword [edi + 0x20]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov eax, dword [esp + 0xa8]
mov dword [esp + 8], eax
call fcn.6d91af30
movzx eax, byte [esp + 0xc]
mov byte [esp + 0xac], al
add esp, 0x9c
ret
xchg esi, eax
cmp al, 0x18
xchg esi, eax
je 0x6d91b5c9
xchg esi, eax
cmp al, 0x19
xchg esi, eax
jne 0x6d91b5c2
mov eax, dword [edi + 0x28]
cmp dword [ebp + 0x28], eax
jne 0x6d91b5b3
mov eax, dword [ebp + 0x20]
mov dword [esp], eax
call fcn.6d8c17c0
mov eax, dword [esp + 8]
mov dword [esp + 0x4c], eax
mov ecx, dword [esp + 0xa4]
mov edx, dword [ecx + 0x20]
mov ebx, dword [esp + 4]
mov dword [esp + 0x90], ebx
mov dword [esp], edx
call fcn.6d8c17c0
mov eax, dword [esp + 0x4c]
cmp dword [esp + 8], eax
jne 0x6d91b5a4
mov ecx, dword [esp + 0x90]
mov dword [esp], ecx
mov dword [esp + 8], eax
call fcn.6d8c2ef0
movzx eax, byte [esp + 0xc]
test al, al
je 0x6d91b5a4
mov edx, dword [esp + 0xa0]
mov ebx, dword [edx + 0x28]
mov dword [esp + 0x4c], ebx
mov ebp, dword [esp + 0xa4]
xor eax, eax
jmp 0x6d91b69e
mov byte [esp + 0xac], 0
add esp, 0x9c
ret
mov byte [esp + 0xac], 0
add esp, 0x9c
ret
xchg esi, eax
cmp al, 0x1a
xchg esi, eax
jne 0x6d91b632
mov byte [esp + 0xac], 1
add esp, 0x9c
ret
mov byte [esp + 0xac], 1
add esp, 0x9c
ret
mov byte [esp + 0xac], 0
add esp, 0x9c
ret
mov byte [esp + 0xac], 0
add esp, 0x9c
ret
mov byte [esp + 0xac], 0
add esp, 0x9c
ret
mov byte [esp + 0xac], 1
add esp, 0x9c
ret
mov byte [esp + 0xac], 1
add esp, 0x9c
ret
call fcn.6d8f6b40
lea eax, [0x6d969961]
mov dword [esp], eax
mov dword [esp + 4], 0x1e
call fcn.6d8f73b0
movzx eax, byte [esp + 0x17]
and eax, 0x1f
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.6d8f70a0
call fcn.6d8f6d50
call fcn.6d8f6ba0
lea eax, [0x6d969603]
mov dword [esp], eax
mov dword [esp + 4], 0x1d
call fcn.6d8f4f30
mov esi, dword [esp + 0x2c]
lea eax, [esi + 1]
mov ebx, dword [esp + 0x4c]
mov edx, dword [esp + 0xa0]
mov ebp, dword [esp + 0xa4]
cmp eax, ebx
jge 0x6d91b869
mov ecx, dword [edx + 0x28]
cmp eax, ecx
jae 0x6d91b87d
mov ecx, dword [ebp + 0x28]
lea esi, [eax + eax*2]
cmp eax, ecx
jae 0x6d91b878
mov dword [esp + 0x48], esi
mov dword [esp + 0x2c], eax
mov eax, dword [edx + 0x24]
mov dword [esp + 0x8c], eax
mov ecx, dword [ebp + 0x24]
mov dword [esp + 0x88], ecx
mov ebx, dword [eax + esi*4]
mov dword [esp], ebx
call fcn.6d8c17c0
mov eax, dword [esp + 8]
mov dword [esp + 0x44], eax
mov ecx, dword [esp + 0x48]
mov edx, dword [esp + 0x88]
mov ebx, dword [edx + ecx*4]
mov ebp, dword [esp + 4]
mov dword [esp + 0x90], ebp
mov dword [esp], ebx
call fcn.6d8c17c0
mov eax, dword [esp + 0x44]
cmp dword [esp + 8], eax
jne 0x6d91b85a
mov ecx, dword [esp + 0x90]
mov dword [esp], ecx
mov dword [esp + 8], eax
call fcn.6d8c2ef0
movzx eax, byte [esp + 0xc]
test al, al
je 0x6d91b85a
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x8c]
mov edx, dword [ecx + eax*4 + 4]
mov ebx, dword [esp + 0x88]
mov ebp, dword [ebx + eax*4 + 4]
mov dword [esp], edx
mov dword [esp + 4], ebp
mov edx, dword [esp + 0xa8]
mov dword [esp + 8], edx
call fcn.6d91af30
movzx eax, byte [esp + 0xc]
test al, al
je 0x6d91b84b
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x8c]
mov edx, dword [ecx + eax*4]
mov dword [esp], edx
call fcn.6d8c1880
mov eax, dword [esp + 8]
mov dword [esp + 0x44], eax
mov ecx, dword [esp + 0x48]
mov edx, dword [esp + 0x88]
mov ebx, dword [edx + ecx*4]
mov ebp, dword [esp + 4]
mov dword [esp + 0x90], ebp
mov dword [esp], ebx
call fcn.6d8c1880
mov eax, dword [esp + 0x44]
cmp dword [esp + 8], eax
jne 0x6d91b83c
mov ecx, dword [esp + 0x90]
mov dword [esp], ecx
mov dword [esp + 8], eax
call fcn.6d8c2ef0
movzx eax, byte [esp + 0xc]
test al, al
je 0x6d91b83c
mov edx, dword [esp + 0x48]
mov ebx, dword [esp + 0x8c]
mov ebp, dword [ebx + edx*4 + 8]
mov esi, dword [esp + 0x88]
lea edi, [esi + edx*4 + 8]
cmp dword [edi], ebp
jne 0x6d91b82d
mov ebx, dword [ebx + edx*4]
mov edx, dword [esi + edx*4]
movzx ebx, byte [ebx]
movzx edx, byte [edx]
test bl, 8
setne bl
test dl, 8
setne dl
cmp dl, bl
je 0x6d91b685
mov byte [esp + 0xac], 0
add esp, 0x9c
ret
mov byte [esp + 0xac], 0
add esp, 0x9c
ret
mov byte [esp + 0xac], 0
add esp, 0x9c
ret
mov byte [esp + 0xac], 0
add esp, 0x9c
ret
mov byte [esp + 0xac], 0
add esp, 0x9c
ret
mov byte [esp + 0xac], 1
add esp, 0x9c
ret
call fcn.6d921300
call fcn.6d921300
mov esi, dword [esp + 0x30]
lea eax, [esi + 1]
mov ebx, dword [esp + 0x4c]
mov ebp, dword [esp + 0xa4]
mov edx, dword [esp + 0xa0]
cmp eax, ebx
jge 0x6d91ba6f
mov ecx, dword [edx + 0x28]
cmp eax, ecx
jae 0x6d91ba83
mov esi, dword [edx + 0x24]
mov ecx, dword [ebp + 0x28]
lea edi, [esi + eax*8]
cmp eax, ecx
jae 0x6d91ba7e
mov dword [esp + 0x84], esi
mov dword [esp + 0x30], eax
mov dword [esp + 0x68], edi
mov ecx, dword [ebp + 0x24]
mov dword [esp + 0x80], ecx
lea edx, [ecx + eax*8]
mov dword [esp + 0x64], edx
lea ebx, [esi + eax*8]
mov ebx, dword [ebx]
mov dword [esp], edi
mov dword [esp + 4], ebx
call fcn.6d91a130
mov eax, dword [esp + 8]
mov dword [esp + 0x7c], eax
mov ecx, dword [esp + 0x30]
mov edx, dword [esp + 0x80]
lea ebx, [edx + ecx*8]
mov ebx, dword [ebx]
mov ebp, dword [esp + 0x64]
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.6d91a130
mov eax, dword [esp + 8]
mov dword [esp + 0x78], eax
mov ecx, dword [esp + 0x7c]
mov dword [esp], ecx
call fcn.6d8c17c0
mov eax, dword [esp + 8]
mov dword [esp + 0x48], eax
mov ecx, dword [esp + 4]
mov dword [esp + 0x74], ecx
mov edx, dword [esp + 0x78]
mov dword [esp], edx
call fcn.6d8c17c0
mov eax, dword [esp + 0x48]
cmp dword [esp + 8], eax
jne 0x6d91ba60
mov ecx, dword [esp + 0x74]
mov dword [esp], ecx
mov dword [esp + 8], eax
call fcn.6d8c2ef0
movzx eax, byte [esp + 0xc]
test al, al
je 0x6d91ba60
mov eax, dword [esp + 0x7c]
mov dword [esp], eax
call fcn.6d91a8e0
mov eax, dword [esp + 8]
mov dword [esp + 0x48], eax
mov ecx, dword [esp + 4]
mov dword [esp + 0x90], ecx
mov edx, dword [esp + 0x78]
mov dword [esp], edx
call fcn.6d91a8e0
mov eax, dword [esp + 0x48]
cmp dword [esp + 8], eax
jne 0x6d91ba51
mov ecx, dword [esp + 0x90]
mov dword [esp], ecx
mov dword [esp + 8], eax
call fcn.6d8c2ef0
movzx eax, byte [esp + 0xc]
test al, al
je 0x6d91ba51
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x84]
lea ecx, [ecx + eax*8 + 4]
mov ecx, dword [ecx]
mov edx, dword [esp + 0x68]
mov dword [esp], edx
mov dword [esp + 4], ecx
call fcn.6d91a3e0
mov eax, dword [esp + 8]
mov dword [esp + 0x6c], eax
mov ecx, dword [esp + 0x30]
mov edx, dword [esp + 0x80]
lea edx, [edx + ecx*8 + 4]
mov edx, dword [edx]
mov ebx, dword [esp + 0x64]
mov dword [esp], ebx
mov dword [esp + 4], edx
call fcn.6d91a3e0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x6c]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov eax, dword [esp + 0xa8]
mov dword [esp + 8], eax
call fcn.6d91af30
movzx eax, byte [esp + 0xc]
test al, al
jne 0x6d91b882
mov byte [esp + 0xac], 0
add esp, 0x9c
ret
mov byte [esp + 0xac], 0
add esp, 0x9c
ret
mov byte [esp + 0xac], 0
add esp, 0x9c
ret
mov byte [esp + 0xac], 1
add esp, 0x9c
ret
call fcn.6d921300
call fcn.6d921300
mov eax, dword [esp + 0x38]
inc eax
mov edx, dword [esp + 0x24]
mov ebx, dword [esp + 0xa8]
mov ecx, dword [esp + 0x20]
mov ebp, dword [esp + 0x58]
mov esi, dword [esp + 0x5c]
mov ecx, ebp
mov ebp, dword [esp + 0xa0]
mov edi, dword [esp + 0xa4]
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0x20]
mov edi, dword [esp + 0x38]
cmp edi, edx
jge 0x6d91bafa
mov ebp, dword [esi + edi*4]
cmp edi, eax
jae 0x6d91bc62
mov eax, dword [ecx + edi*4]
mov dword [esp], ebp
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
call fcn.6d91af30
movzx eax, byte [esp + 0xc]
test al, al
jne 0x6d91ba88
mov byte [esp + 0xac], 0
add esp, 0x9c
ret
movzx esi, word [ebp + 0x22]
and esi, 0x7fff
nop
test si, si
jne 0x6d91bb10
xor esi, esi
xor ebp, ebp
jmp 0x6d91bb59
movzx edi, byte [ebp + 0xc]
xchg edi, eax
test al, 1
xchg edi, eax
je 0x6d91bb22
mov eax, 0x34
jmp 0x6d91bb27
mov eax, 0x24
movzx edi, word [ebp + 0x20]
add esi, edi
movzx edx, si
add ebp, eax
cmp edx, 0x20000
ja 0x6d91bc58
movzx eax, di
cmp eax, edx
ja 0x6d91bc51
sub edx, eax
mov esi, edx
neg edx
shl eax, 2
sar edx, 0x1f
and eax, edx
add ebp, eax
mov edi, dword [esp + 0xa4]
movzx eax, word [edi + 0x22]
and eax, 0x7fff
nop
test ax, ax
jne 0x6d91bb75
xor ecx, ecx
xor edx, edx
jmp 0x6d91bbbb
movzx ecx, byte [edi + 0xc]
test cl, 1
je 0x6d91bb85
mov ecx, 0x34
jmp 0x6d91bb8a
mov ecx, 0x24
movzx edx, word [edi + 0x20]
add eax, edx
movzx eax, ax
add edi, ecx
cmp eax, 0x20000
ja 0x6d91bc45
movzx edx, dx
cmp edx, eax
ja 0x6d91bc3c
sub eax, edx
mov ecx, eax
neg eax
shl edx, 2
sar eax, 0x1f
and edx, eax
add edx, edi
mov dword [esp + 0x1c], esi
mov dword [esp + 0x54], ebp
mov dword [esp + 0x18], ecx
mov dword [esp + 0x50], edx
xor eax, eax
jmp 0x6d91bbed
mov edi, dword [esp + 0x34]
lea eax, [edi + 1]
mov esi, dword [esp + 0x1c]
mov ebx, dword [esp + 0xa8]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x50]
mov ebp, dword [esp + 0x54]
cmp eax, esi
jge 0x6d91bc28
mov edi, dword [ebp + eax*4]
cmp eax, ecx
jae 0x6d91bc37
mov dword [esp + 0x34], eax
mov ecx, dword [edx + eax*4]
mov dword [esp], edi
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
call fcn.6d91af30
movzx eax, byte [esp + 0xc]
test al, al
jne 0x6d91bbcf
mov byte [esp + 0xac], 0
add esp, 0x9c
ret
mov byte [esp + 0xac], 1
add esp, 0x9c
ret
call fcn.6d921300
mov ecx, eax
mov eax, edx
call fcn.6d921390
mov edx, eax
mov ebx, 0x20000
call fcn.6d921380
mov ecx, edx
call fcn.6d921390
mov ebx, 0x20000
call fcn.6d921380
mov ecx, eax
mov eax, edi
call fcn.6d921300
mov edx, eax
mov ebx, 0x10000
call fcn.6d921380
mov ebx, 0x10000
call fcn.6d921380
nop
call fcn.6d91fe70
jmp fcn.6d91af30