Function at 0x6b5cb0
Capabilities:
Check for software breakpoints
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0xac]
cmp eax, dword [ecx + 8]
jbe 0x6b6f08
sub esp, 0x12c
mov eax, dword [esp + 0x130]
movzx ecx, byte [eax + 8]
test cl, cl
jne 0x6b6f01
mov byte [eax + 8], 1
mov ecx, dword [eax]
mov dword [esp + 0x58], ecx
mov edx, dword [ecx]
mov edx, dword [edx]
mov dword [esp], edx
call fcn.006bcbd0
mov eax, dword [esp + 0x58]
mov ecx, dword [eax + 4]
movzx edx, byte [esp + 4]
mov ebx, dword [ecx]
cmp dword [ecx + 4], 4
jne 0x6b6efa
cmp dword [ebx], 0x44414548
sete cl
mov byte [esp + 0x37], dl
mov byte [esp + 0x38], cl
mov ebx, dword [esp + 0x130]
mov ebp, dword [ebx + 4]
test ebp, ebp
je 0x6b6ef2
mov dword [esp + 0x64], ebp
mov dword [esp + 0x68], 0
mov dword [esp + 0x98], 0
mov byte [esp + 0x9c], 0
mov dword [esp + 0xa0], 0
mov dword [esp + 0xa4], 0
lea ecx, [0x6d4b50]
mov dword [esp + 0x98], ecx
setne cl
mov byte [esp + 0x9c], cl
mov dword [esp + 0xa0], ebp
lea ecx, [esp + 0x68]
mov dword [esp + 0xa4], ecx
lea edi, [esp + 0xcc]
xor eax, eax
call fcn.00456d74
mov ecx, dword [ebx + 4]
mov dword [esp + 0x8c], ecx
lea edi, [esp + 0xfc]
call fcn.00456d74
lea ecx, [0x9aece0]
mov dword [esp], ecx
mov edx, dword [esp + 0x8c]
mov dword [esp + 4], edx
lea edx, [esp + 0xfc]
mov dword [esp + 8], edx
call fcn.0040cd40
xor eax, eax
jmp 0x6b5df9
mov byte [esp + 0x35], al
lea ecx, [esp + 0xfc]
mov dword [esp], ecx
call fcn.0040cfb0
movzx eax, byte [esp + 0x35]
mov byte [esp + 0x35], al
mov ecx, dword [esp + 0xfc]
test ecx, ecx
je 0x6b5e9c
mov edx, dword [ecx + 4]
mov dword [esp + 0x48], edx
mov ecx, dword [ecx]
mov dword [esp + 0x60], ecx
cmp edx, 8
jge 0x6b5e6e
xor ebx, ebx
test bl, bl
je 0x6b5de1
mov eax, dword [esp + 0x68]
test eax, eax
je 0x6b5e58
lea eax, [0x9323c0]
mov dword [esp], eax
mov ebx, dword [esp + 0x68]
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
call fcn.00410630
mov eax, dword [esp + 0x10]
mov byte [eax], 1
mov eax, 1
jmp 0x6b5de1
call fcn.0040ba50
mov eax, dword [esp]
mov dword [esp + 0x68], eax
mov ecx, dword [esp + 0x60]
mov edx, dword [esp + 0x48]
jmp 0x6b5e2c
mov dword [esp], ecx
lea eax, [0x9cf752]
mov dword [esp + 4], eax
mov dword [esp + 8], 8
call fcn.00402350
movzx ebx, byte [esp + 0xc]
movzx eax, byte [esp + 0x35]
mov ecx, dword [esp + 0x60]
mov edx, dword [esp + 0x48]
jmp 0x6b5e20
mov eax, dword [esp + 0x130]
mov ecx, dword [eax + 4]
lea edx, [0x9aece0]
mov dword [esp], edx
mov dword [esp + 4], ecx
lea ecx, [0x9ce517]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 7
call fcn.0040ff20
mov eax, dword [esp + 0x10]
mov ecx, dword [eax + 4]
mov dword [esp + 0x54], ecx
mov eax, dword [eax]
mov dword [esp + 0x88], eax
xor edx, edx
movzx ebx, byte [esp + 0x35]
jmp 0x6b5f54
mov dword [esp + 0x50], edx
lea ecx, [eax + edx*8]
mov ebx, dword [ecx + 4]
mov ecx, dword [ecx]
mov dword [esp + 0x90], 0
mov dword [esp + 0x94], 0
lea ebp, [0x6df6d0]
mov dword [esp + 0x90], ebp
mov esi, dword [esp + 0x130]
mov edi, dword [esi]
mov dword [esp + 0x94], edi
mov dword [esp], ecx
mov dword [esp + 4], ebx
lea ecx, [esp + 0x90]
mov dword [esp + 8], ecx
call fcn.006b6f20
mov eax, dword [esp + 0x50]
lea edx, [eax + 1]
mov eax, dword [esp + 0x88]
mov ecx, dword [esp + 0x54]
mov ebx, 1
cmp edx, ecx
jl 0x6b5ee7
mov byte [esp + 0x35], bl
lea eax, [0x9aece0]
mov dword [esp], eax
mov ecx, dword [esp + 0x64]
mov dword [esp + 4], ecx
lea edx, [0x9d6882]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 0x11
call fcn.0040ff20
mov eax, dword [esp + 0x10]
mov ecx, dword [eax + 4]
mov eax, dword [eax]
test ecx, ecx
jle 0x6b6ee9
mov ecx, dword [eax + 4]
mov eax, dword [eax]
mov dword [esp + 0x5c], eax
mov dword [esp + 0x40], ecx
mov edx, dword [esp + 0x58]
lea ebx, [edx + 0x54]
mov dword [esp], ebx
call fcn.0045d5e0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x40]
test ecx, ecx
test eax, eax
je 0x6b6ee2
movzx eax, byte [esp + 0x35]
test al, al
je 0x6b6e4d
xor eax, eax
test al, al
je 0x6b6e3c
movzx eax, byte [esp + 0x38]
test al, al
je 0x6b6e2b
mov edx, dword [esp + 0x138]
test edx, edx
setg bl
test bl, bl
jne 0x6b6daf
mov ebx, dword [esp + 0x58]
movzx ebp, byte [ebx + 0x16]
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x6b6da5
movzx ebp, byte [esp + 0x37]
xchg ebp, eax
test al, al
xchg ebp, eax
jne 0x6b6cc3
cmp dword [ebx + 0x38], 0xffffffff
xchg esi, ebx
setne bl
xchg esi, ebx
cmp dword [ebx + 0x3c], 0xffffffff
xchg edi, ebx
setne bl
xchg edi, ebx
or edi, esi
xchg edi, eax
mov byte [esp + 0x39], al
xchg edi, eax
movzx esi, byte [ebx + 0x16]
xchg esi, eax
test al, al
xchg esi, eax
je 0x6b6059
test al, al
je 0x6b6c83
mov eax, 1
test al, al
jne 0x6b6c31
mov eax, dword [ebx + 4]
mov esi, dword [eax + 0x14]
cmp esi, 1
jle 0x6b6c1c
mov eax, 1
test al, al
je 0x6b6079
movzx eax, byte [ebx + 0x17]
test al, al
je 0x6b607d
mov byte [ebx + 0x44], 1
lea eax, [0x9aece0]
mov dword [esp], eax
mov ecx, dword [esp + 0x64]
mov dword [esp + 4], ecx
lea edx, [0x9d0e7a]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 0xa
call fcn.0040ff20
mov eax, dword [esp + 0x10]
mov ecx, dword [eax + 4]
mov eax, dword [eax]
test ecx, ecx
jle 0x6b6c13
mov ecx, dword [eax + 4]
mov eax, dword [eax]
cmp ecx, 5
jne 0x6b6bfd
cmp dword [eax], 0x736f6c63
jne 0x6b6bfd
cmp byte [eax + 4], 0x65
jne 0x6b6bfd
mov eax, dword [esp + 0x58]
mov byte [eax + 0x44], 1
mov ecx, dword [eax + 4]
mov ebx, dword [ecx + 0x24]
lea ebp, [0xaa93d0]
cmp dword [ecx + 0x20], ebp
jne 0x6b6bf3
jne 0x6b6105
movzx ecx, byte [ebx + 0xd]
test cl, cl
je 0x6b6bea
mov ecx, dword [eax + 4]
mov ebx, dword [ecx + 0x2c]
test ebx, ebx
setne bl
mov esi, dword [ecx + 0x30]
test esi, esi
xchg esi, ebx
setne bl
xchg esi, ebx
or esi, ebx
xchg esi, eax
test al, al
xchg esi, eax
je 0x6b6130
movzx ebx, byte [eax + 0x44]
test bl, bl
je 0x6b693c
mov ecx, dword [eax + 0x40]
mov dword [esp + 0x44], ecx
nop
cmp ecx, 0x64
jl 0x6b689b
cmp ecx, 0xc7
jg 0x6b689b
cmp ecx, 0x130
jne 0x6b686b
mov ebx, dword [0xe71ff8]
mov ebp, dword [0xe71ffc]
mov dword [esp + 0x3c], ebp
mov dword [esp + 0x84], ebx
xor edx, edx
jmp 0x6b61b1
mov dword [esp + 0x54], edx
lea eax, [ebx + edx*8]
mov ecx, dword [eax + 4]
mov eax, dword [eax]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov eax, dword [esp + 0x98]
lea edx, [esp + 0x98]
call eax
mov eax, dword [esp + 0x54]
lea edx, [eax + 1]
mov eax, dword [esp + 0x58]
mov ecx, dword [esp + 0x44]
mov ebx, dword [esp + 0x84]
mov ebp, dword [esp + 0x3c]
cmp edx, ebp
jl 0x6b6174
lea eax, [0x9aece0]
mov dword [esp], eax
mov ecx, dword [esp + 0x64]
mov dword [esp + 4], ecx
lea ecx, [0x9cb748]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 4
call fcn.00410290
movzx eax, byte [esp + 0x14]
test al, al
je 0x6b67f4
movzx eax, byte [esp + 0x39]
test al, al
je 0x6b67eb
mov ecx, dword [esp + 0x40]
test ecx, ecx
je 0x6b6215
cmp ecx, 8
je 0x6b67cc
mov edx, 1
test dl, dl
jne 0x6b66d9
mov ebx, dword [esp + 0x58]
mov ebp, dword [ebx + 4]
mov esi, dword [ebp]
cmp dword [ebp + 4], 4
jne 0x6b66cd
cmp dword [esi], 0x44414548
jne 0x6b64ba
mov eax, dword [esp + 0x130]
movzx ecx, byte [eax + 9]
test cl, cl
jne 0x6b6489
mov ecx, dword [ebx + 4]
mov ebp, dword [ecx + 0x14]
cmp ebp, 1
jle 0x6b6473
mov ecx, 1
test cl, cl
je 0x6b646c
movzx ecx, byte [ebx + 0x44]
test cl, cl
je 0x6b6465
movzx ecx, byte [esp + 0x37]
test cl, cl
jne 0x6b63f0
mov ecx, 1
test cl, cl
jne 0x6b6380
mov ecx, dword [ebx + 4]
mov edx, dword [ecx + 0x14]
cmp edx, 1
jle 0x6b636b
mov ecx, 1
mov eax, dword [ebx]
mov eax, dword [eax + 0x2c]
mov dword [esp], eax
mov byte [esp + 4], cl
mov eax, dword [esp + 0x44]
mov dword [esp + 8], eax
lea eax, [ebx + 0x7f]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], 3
call fcn.006b7050
mov eax, dword [esp + 0x58]
mov ecx, dword [eax]
mov edx, dword [esp + 0x130]
mov edx, dword [edx + 4]
mov ebx, dword [esp + 0x68]
mov ecx, dword [ecx + 0x2c]
mov dword [esp], edx
lea edx, [0xaa4910]
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], 0
call fcn.006ab480
mov eax, dword [esp + 0x58]
mov ecx, dword [eax]
mov ecx, dword [ecx + 0x2c]
mov dword [esp + 0x80], ecx
mov edi, esp
lea esi, [esp + 0xcc]
call fcn.00457218
mov ecx, dword [esp + 0x80]
mov dword [esp + 0x30], ecx
call fcn.006b5a50
mov eax, dword [esp + 0x58]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c]
mov dword [esp], eax
mov eax, dword [0xe71f28]
mov ecx, dword [0xe71f2c]
mov edx, dword [0xe71f30]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
call fcn.00472760
add esp, 0x12c
ret
jne 0x6b6379
cmp dword [ecx + 0x18], 1
setge cl
jmp 0x6b629e
xor ecx, ecx
jmp 0x6b629e
lea eax, [0x9d0e7a]
mov dword [esp], eax
mov dword [esp + 4], 0xa
mov eax, dword [esp + 0x98]
lea edx, [esp + 0x98]
call eax
mov eax, dword [esp + 0x58]
mov ecx, dword [eax + 4]
mov ebx, dword [ecx + 0x14]
cmp ebx, 1
jle 0x6b63e1
mov ecx, 1
test cl, cl
je 0x6b63d1
lea ecx, [0x9cc692]
mov dword [esp + 0xd4], ecx
mov dword [esp + 0xd8], 5
mov eax, dword [esp + 0x130]
mov ebx, dword [esp + 0x58]
jmp 0x6b628a
jne 0x6b63ec
cmp dword [ecx + 0x18], 1
setge cl
jmp 0x6b63b5
xor ecx, ecx
jmp 0x6b63b5
mov ecx, dword [eax + 4]
lea edx, [0x9aece0]
mov dword [esp], edx
mov dword [esp + 4], ecx
lea ecx, [0x9d0e7a]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 0xa
call fcn.0040ff20
mov eax, dword [esp + 0x10]
mov ecx, dword [eax + 4]
mov eax, dword [eax]
test ecx, ecx
jle 0x6b645f
mov ecx, dword [eax + 4]
mov eax, dword [eax]
mov dword [esp], eax
mov dword [esp + 4], ecx
lea eax, [0x9cc692]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 5
call fcn.006ab890
movzx ecx, byte [esp + 0x10]
xor ecx, 1
mov eax, dword [esp + 0x130]
mov ebx, dword [esp + 0x58]
jmp 0x6b6282
xor ecx, ecx
xor eax, eax
jmp 0x6b6429
xor ecx, ecx
jmp 0x6b6282
add esp, 0x12c
ret
jne 0x6b6482
mov ecx, dword [ecx + 0x18]
test ecx, ecx
setge cl
jmp 0x6b625c
xor ecx, ecx
jmp 0x6b625c
lea eax, [0x9d3e42]
mov dword [esp], eax
mov dword [esp + 4], 0xe
mov eax, dword [esp + 0x98]
lea edx, [esp + 0x98]
call eax
mov eax, dword [esp + 0x130]
mov ebx, dword [esp + 0x58]
jmp 0x6b6248
mov esi, dword [esp + 0x44]
cmp esi, 0x64
jl 0x6b66a5
cmp esi, 0xc7
jg 0x6b66a5
xor edx, edx
test dl, dl
je 0x6b6235
cmp esi, 0xcc
je 0x6b6670
test al, al
jne 0x6b663b
mov eax, dword [ebp + 0x14]
cmp eax, 1
jle 0x6b6626
mov eax, 1
test al, al
je 0x6b65ed
test ecx, ecx
je 0x6b65e4
cmp ecx, 8
jne 0x6b65de
mov eax, dword [esp + 0x5c]
cmp dword [eax], 0x6e656469
jne 0x6b65d7
cmp dword [eax + 4], 0x79746974
xchg ebp, ebx
sete bl
xchg ebp, ebx
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x6b6553
mov eax, dword [esp + 0x130]
mov byte [eax + 9], 0
mov byte [ebx + 0x44], 1
jmp 0x6b6235
test ecx, ecx
mov ebp, dword [esp + 0x130]
mov byte [ebp + 9], 1
lea edi, [0x9ce74e]
mov dword [esp + 0xdc], edi
mov dword [esp + 0xe0], 7
je 0x6b659a
cmp ecx, 7
jne 0x6b65d3
cmp dword [eax], 0x6e756863
jne 0x6b65d3
cmp word [eax + 4], 0x656b
jne 0x6b65d3
cmp byte [eax + 6], 0x64
sete al
test al, al
jne 0x6b65a1
mov eax, ebp
jmp 0x6b6235
lea eax, [0x9d6882]
mov dword [esp], eax
mov dword [esp + 4], 0x11
mov eax, dword [esp + 0x98]
lea edx, [esp + 0x98]
call eax
mov ebx, dword [esp + 0x58]
mov ebp, dword [esp + 0x130]
mov esi, dword [esp + 0x44]
jmp 0x6b659a
xor eax, eax
jmp 0x6b6596
xor ebp, ebp
jmp 0x6b6539
mov eax, dword [esp + 0x5c]
jmp 0x6b65d7
mov eax, dword [esp + 0x5c]
jmp 0x6b6555
mov byte [ebx + 0x44], 1
lea eax, [0x9d6882]
mov dword [esp], eax
mov dword [esp + 4], 0x11
mov eax, dword [esp + 0x98]
lea edx, [esp + 0x98]
call eax
mov eax, dword [esp + 0x130]
mov ebx, dword [esp + 0x58]
mov esi, dword [esp + 0x44]
jmp 0x6b6235
jne 0x6b6634
cmp dword [ebp + 0x18], 1
setge al
jmp 0x6b6502
xor eax, eax
jmp 0x6b6502
lea eax, [0x9d6882]
mov dword [esp], eax
mov dword [esp + 4], 0x11
mov eax, dword [esp + 0x98]
lea edx, [esp + 0x98]
call eax
mov eax, dword [esp + 0x130]
mov ebx, dword [esp + 0x58]
mov esi, dword [esp + 0x44]
jmp 0x6b6235
lea eax, [0x9d6882]
mov dword [esp], eax
mov dword [esp + 4], 0x11
mov eax, dword [esp + 0x98]
lea edx, [esp + 0x98]
call eax
mov eax, dword [esp + 0x130]
mov ebx, dword [esp + 0x58]
mov esi, dword [esp + 0x44]
jmp 0x6b6235
cmp esi, 0xcc
jne 0x6b66b4
xor edx, edx
jmp 0x6b64d5
cmp esi, 0x130
jne 0x6b66c3
xor edx, edx
jmp 0x6b64d5
mov edx, 1
jmp 0x6b64d5
mov esi, dword [esp + 0x44]
cmp esi, 0x64
jmp 0x6b64c1
mov eax, dword [esp + 0x5c]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00408790
mov eax, dword [esp + 8]
mov dword [esp + 0x7c], eax
mov ecx, dword [esp + 0x58]
mov edx, dword [ecx + 0x38]
mov ebx, dword [ecx + 0x3c]
mov dword [esp], edx
mov dword [esp + 4], ebx
call fcn.00408720
mov eax, dword [esp + 8]
mov dword [esp + 0xa8], 0
mov dword [esp + 0xac], 0
mov dword [esp + 0xb0], 0
mov dword [esp + 0xb4], 0
lea ecx, [0x92c840]
mov dword [esp + 0xa8], ecx
mov ecx, dword [esp + 0x7c]
mov dword [esp + 0xac], ecx
lea ecx, [0x92bb40]
mov dword [esp + 0xb0], ecx
mov dword [esp + 0xb4], eax
mov eax, dword [esp + 0x58]
mov ecx, dword [eax]
mov ecx, dword [ecx]
mov dword [esp], ecx
lea ecx, [0x9f41b7]
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x55
lea ecx, [esp + 0xa8]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], 2
mov dword [esp + 0x14], 2
call fcn.006bcca0
lea eax, [0x9d3e42]
mov dword [esp], eax
mov dword [esp + 4], 0xe
mov ecx, dword [esp + 0x98]
lea edx, [esp + 0x98]
call ecx
mov ecx, dword [esp + 0x40]
xor eax, eax
jmp 0x6b6215
mov ebx, dword [esp + 0x5c]
cmp dword [ebx], 0x6e656469
jne 0x6b6208
cmp dword [ebx + 4], 0x79746974
setne dl
jmp 0x6b620d
mov ecx, dword [esp + 0x40]
jmp 0x6b6215
mov eax, dword [esp + 0x130]
mov ecx, dword [eax]
mov dword [esp + 0x78], ecx
test byte [ecx], al
call fcn.004bf9a0
lea edi, [esp + 0xb8]
mov esi, esp
call fcn.0045725e
mov eax, dword [esp + 0x78]
add eax, 0x58
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x1d
lea edi, [esp + 0xc]
lea esi, [esp + 0xb8]
call fcn.0045725e
call fcn.006b42e0
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x28]
mov dword [esp + 0xe4], eax
mov dword [esp + 0xe8], ecx
mov dword [esp + 0xec], edx
jmp 0x6b61ea
nop
cmp ecx, 0x64
jl 0x6b688a
cmp ecx, 0xc7
jg 0x6b688a
mov ebx, dword [0xe72008]
mov ebp, dword [0xe7200c]
jmp 0x6b6165
cmp ecx, 0xcc
je 0x6b6879
xor ebp, ebp
xor ebx, ebx
jmp 0x6b6165
cmp ecx, 0xcc
je 0x6b614d
cmp ecx, 0x130
je 0x6b614d
lea eax, [0x9aece0]
mov dword [esp], eax
mov ecx, dword [esp + 0x64]
mov dword [esp + 4], ecx
lea edx, [0x9d268a]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 0xc
call fcn.00410290
movzx eax, byte [esp + 0x14]
test al, al
jne 0x6b61b5
mov eax, dword [esp + 0x40]
test eax, eax
jne 0x6b61b5
mov ecx, dword [esp + 0x138]
test ecx, ecx
jle 0x6b61b5
mov eax, dword [esp + 0x134]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov eax, dword [esp + 0x13c]
mov dword [esp + 8], eax
call fcn.006bd780
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0xcc], ecx
mov dword [esp + 0xd0], eax
jmp 0x6b61b5
mov ebx, dword [ecx + 0x24]
mov ecx, dword [ecx + 0x20]
test ecx, ecx
je 0x6b6b11
mov esi, dword [ecx + 8]
cmp esi, 0x1a0af671
jne 0x6b6be3
lea edi, [0xaa9370]
cmp edi, ecx
jne 0x6b6bd7
mov edx, ebx
je 0x6b6b27
cmp esi, 0x2b9fd821
jne 0x6b6b11
cmp ebp, ecx
jne 0x6b6b1d
jne 0x6b6b11
mov ecx, dword [edx]
movzx ecx, byte [ecx + 0x15]
xor edx, edx
test cl, cl
jne 0x6b69e7
test dl, dl
je 0x6b6130
mov dword [esp], eax
call fcn.006b2ca0
lea eax, [0x9d0e7a]
mov dword [esp], eax
mov dword [esp + 4], 0xa
mov ecx, dword [esp + 0x98]
lea edx, [esp + 0x98]
call ecx
lea eax, [0x9cc692]
mov dword [esp + 0xd4], eax
mov dword [esp + 0xd8], 5
mov eax, dword [esp + 0x58]
jmp 0x6b6130
mov byte [esp + 0x36], dl
mov ecx, dword [eax + 0xc]
mov edx, dword [eax + 8]
lea ebx, [0x9432c0]
mov dword [esp], ebx
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.004089e0
mov eax, dword [0xe7132c]
mov ecx, dword [0xe71328]
mov edx, dword [esp + 0xc]
mov ebx, dword [esp + 0x10]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], 0x40001
mov dword [esp + 0x14], 0
call fcn.00464c60
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x24]
test eax, eax
je 0x6b6b03
cmp dword [0xe7ad98], eax
je 0x6b6ac1
cmp dword [0xe7acc8], eax
je 0x6b6a73
mov eax, dword [esp + 0x58]
mov byte [eax + 0x44], 1
movzx ecx, byte [esp + 0x36]
mov edx, ecx
jmp 0x6b6995
mov dword [esp], eax
mov dword [esp + 4], ecx
mov eax, dword [0xe7accc]
mov dword [esp + 8], eax
call fcn.00402f80
movzx eax, byte [esp + 0xc]
test al, al
je 0x6b6a5f
mov eax, dword [esp + 0x58]
mov ecx, dword [eax + 8]
mov edx, dword [eax + 0xc]
mov ecx, dword [ecx + 0x10]
mov dword [esp], edx
call ecx
mov eax, dword [esp + 4]
test eax, eax
je 0x6b6abb
mov eax, dword [esp + 0x58]
mov byte [eax + 0x44], 1
movzx ecx, byte [esp + 0x36]
jmp 0x6b6a6c
mov eax, dword [esp + 0x58]
jmp 0x6b6ab4
mov dword [esp + 0x4c], eax
mov dword [esp + 0x6c], ecx
mov dword [esp], eax
mov dword [esp + 4], ecx
mov edx, dword [0xe7ad9c]
mov dword [esp + 8], edx
call fcn.00402f80
movzx eax, byte [esp + 0xc]
test al, al
je 0x6b6af6
mov eax, dword [esp + 0x58]
movzx ecx, byte [esp + 0x36]
jmp 0x6b6a6c
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0x6c]
jmp 0x6b6a57
mov eax, dword [esp + 0x58]
mov ecx, 1
jmp 0x6b6a6c
mov ecx, 1
xor edx, edx
jmp 0x6b6991
mov edx, 0
jmp 0x6b6983
mov dword [esp + 0x70], ebx
test byte [ebx], al
lea eax, [ebx + 0x18]
mov dword [esp + 0x74], eax
mov dword [esp], eax
call fcn.00462cc0
mov eax, dword [esp + 0x70]
movzx ecx, byte [eax + 0x21]
test cl, cl
je 0x6b6b85
movzx eax, byte [eax + 0x20]
test al, al
je 0x6b6b7b
xor eax, eax
xor ecx, ecx
mov byte [esp + 0x3b], cl
mov byte [esp + 0x3a], al
mov edx, dword [esp + 0x74]
mov dword [esp], edx
call fcn.00463090
mov eax, dword [esp + 0x58]
movzx ecx, byte [esp + 0x3a]
movzx edx, byte [esp + 0x3b]
jmp 0x6b6991
mov eax, dword [esp + 0x58]
mov byte [eax + 0x44], 1
jmp 0x6b6b50
mov ecx, dword [eax + 4]
lea edx, [0xaa5130]
cmp dword [eax], edx
jne 0x6b6bd0
jne 0x6b6bc4
mov eax, dword [ecx + 8]
mov ecx, dword [ecx + 0xc]
cmp eax, 0x40000
setae al
test ecx, ecx
setg cl
sete dl
and edx, eax
or edx, ecx
test dl, dl
je 0x6b6bbb
xor eax, eax
mov ecx, 1
jmp 0x6b6b54
mov eax, 1
xor ecx, ecx
jmp 0x6b6b54
mov eax, 0xffffffff
mov ecx, 0xffffffff
jmp 0x6b6b9a
mov ecx, 0
jmp 0x6b6b92
mov edx, ebx
mov ebx, 0
jmp 0x6b6969
mov edx, ebx
jmp 0x6b696f
mov byte [eax + 0x44], 1
jmp 0x6b6105
mov ebx, 0
jmp 0x6b60f7
movzx eax, byte [esp + 0x37]
test al, al
je 0x6b60da
mov eax, dword [esp + 0x58]
jmp 0x6b60e2
xor ecx, ecx
xor eax, eax
jmp 0x6b60bb
jne 0x6b6c2a
cmp dword [eax + 0x18], 1
setge al
jmp 0x6b606d
xor eax, eax
jmp 0x6b606d
lea eax, [0x9aece0]
mov dword [esp], eax
mov ecx, dword [esp + 0x64]
mov dword [esp + 4], ecx
lea edx, [0x9d0e7a]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 0xa
call fcn.00410290
movzx eax, byte [esp + 0x14]
test al, al
jne 0x6b607d
lea eax, [0x9d1546]
mov dword [esp + 0xd4], eax
mov dword [esp + 0xd8], 0xa
jmp 0x6b607d
xchg edi, eax
test al, al
xchg edi, eax
jne 0x6b604c
mov eax, dword [ebx + 0x40]
cmp eax, 0x64
jl 0x6b6ca6
cmp eax, 0xc7
jg 0x6b6ca6
xor eax, eax
xor eax, 1
jmp 0x6b6051
cmp eax, 0xcc
jne 0x6b6cb1
xor eax, eax
jmp 0x6b6c9e
cmp eax, 0x130
jne 0x6b6cbc
xor eax, eax
jmp 0x6b6c9e
mov eax, 1
jmp 0x6b6c9e
lea eax, [0x9aece0]
mov dword [esp], eax
mov ecx, dword [esp + 0x64]
mov dword [esp + 4], ecx
lea edx, [0x9d3e42]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 0xe
call fcn.0040ff20
mov eax, dword [esp + 0x10]
mov ecx, dword [eax]
mov eax, dword [eax + 4]
test eax, eax
jle 0x6b6d9e
mov eax, dword [ecx + 4]
test eax, eax
jne 0x6b6d35
xor eax, eax
test al, al
je 0x6b6d2f
mov eax, dword [esp + 0x58]
mov byte [eax + 0x44], 0
movzx eax, byte [esp + 0x38]
mov ecx, dword [esp + 0x40]
mov edx, dword [esp + 0x138]
mov ebx, dword [esp + 0x58]
movzx ebp, byte [esp + 0x37]
jmp 0x6b601c
mov eax, dword [esp + 0x58]
jmp 0x6b6d11
lea eax, [0x9aece0]
mov dword [esp], eax
mov ecx, dword [esp + 0x64]
mov dword [esp + 4], ecx
lea edx, [0x9d0e7a]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 0xa
call fcn.0040ff20
mov eax, dword [esp + 0x10]
mov ecx, dword [eax + 4]
mov eax, dword [eax]
test ecx, ecx
jle 0x6b6d98
mov ecx, dword [eax + 4]
mov eax, dword [eax]
cmp ecx, 0xa
je 0x6b6d78
xor eax, eax
jmp 0x6b6d05
mov dword [esp], eax
lea eax, [0x9d1546]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00402350
movzx eax, byte [esp + 0xc]
jmp 0x6b6d05
xor ecx, ecx
xor eax, eax
jmp 0x6b6d6f
xor eax, eax
jmp 0x6b6cff
movzx ebp, byte [esp + 0x37]
jmp 0x6b601c
mov eax, dword [esp + 0x58]
mov dword [eax + 0x38], edx
mov ecx, edx
sar edx, 0x1f
mov dword [eax + 0x3c], edx
mov ebx, dword [esp + 0x130]
mov ebp, dword [ebx]
test byte [ebp], al
add ebp, 0x75
mov dword [esp], ebp
mov dword [esp + 4], 0
mov dword [esp + 8], 0xa
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], edx
mov dword [esp + 0x14], 0xa
call fcn.0047ea20
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x18]
mov dword [esp + 0xf0], edx
mov dword [esp + 0xf4], eax
mov dword [esp + 0xf8], ecx
movzx eax, byte [esp + 0x38]
mov ecx, dword [esp + 0x40]
mov edx, dword [esp + 0x138]
jmp 0x6b5ffb
mov edx, dword [esp + 0x138]
mov ebx, 1
jmp 0x6b5ff3
movzx eax, byte [esp + 0x38]
mov edx, dword [esp + 0x138]
jmp 0x6b5ffb
test ecx, ecx
je 0x6b6e58
xor eax, eax
jmp 0x6b5fd2
mov eax, dword [esp + 0x58]
mov edx, dword [eax + 0x40]
cmp edx, 0x64
jl 0x6b6ec3
cmp edx, 0xc7
jg 0x6b6ec3
xor edx, edx
test dl, dl
jne 0x6b6e79
xor eax, eax
jmp 0x6b5fd2
lea eax, [0x9aece0]
mov dword [esp], eax
mov ecx, dword [esp + 0x64]
mov dword [esp + 4], ecx
lea edx, [0x9d3e42]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 0xe
call fcn.0040ff20
mov eax, dword [esp + 0x10]
mov ecx, dword [eax]
mov eax, dword [eax + 4]
test eax, eax
jle 0x6b6ebf
mov eax, dword [ecx + 4]
test eax, eax
sete al
mov ecx, dword [esp + 0x40]
jmp 0x6b5fd2
xor eax, eax
jmp 0x6b6eb1
cmp edx, 0xcc
jne 0x6b6ecf
xor edx, edx
jmp 0x6b6e6e
cmp edx, 0x130
jne 0x6b6edb
xor edx, edx
jmp 0x6b6e6e
mov edx, 1
jmp 0x6b6e6e
xor eax, eax
jmp 0x6b5fd2
xor eax, eax
xor ecx, ecx
jmp 0x6b5f9a
mov ebp, dword [eax + 0x28]
jmp 0x6b5d37
xor ecx, ecx
jmp 0x6b5d1d
add esp, 0x12c
ret
call fcn.00455270
jmp fcn.006b5cb0