Function at 0x6f9860
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 8]
cmp eax, dword [ecx + 8]
jbe 0x6fa57c
sub esp, 0x88
mov eax, dword [esp + 0x8c]
test eax, eax
je 0x6fa54e
movzx ecx, byte [eax]
cmp cl, 0x10
ja 0x6f9c80
cmp cl, 0xd
jne 0x6f9b61
mov ecx, dword [eax + 8]
mov dword [esp + 0x44], ecx
mov edx, dword [eax + 4]
mov dword [esp + 0x84], edx
mov ebx, eax
xor ebp, ebp
jmp 0x6f98d1
mov esi, dword [esp + 0x38]
lea ebp, [esi + 1]
mov edx, dword [esp + 0x84]
mov ebx, edi
mov eax, ecx
mov ecx, dword [esp + 0x44]
cmp ebp, ecx
jge 0x6f9b53
mov dword [esp + 0x38], ebp
mov dword [esp + 0x6c], eax
mov eax, dword [edx + ebp*4]
mov dword [esp + 0x5c], eax
mov dword [esp], eax
call fcn.006f9860
mov eax, dword [esp + 4]
mov dword [esp + 0x64], eax
mov ecx, dword [esp + 0x6c]
mov edx, dword [esp + 0x8c]
cmp ecx, edx
jne 0x6f9913
mov ebx, dword [esp + 0x5c]
cmp eax, ebx
jne 0x6f99cc
cmp ecx, edx
je 0x6f99c5
mov ebx, dword [ecx + 4]
mov ebp, dword [ecx + 8]
mov esi, dword [ecx + 0xc]
mov edi, edx
lea edx, [ebp + 1]
cmp edx, esi
jg 0x6f9958
lea edx, [ebp + 1]
mov dword [ecx + 8], edx
lea edx, [ebx + ebp*4]
mov esi, dword [0xc6f140]
test esi, esi
jne 0x6f9948
mov dword [ebx + ebp*4], eax
jmp 0x6f98bb
mov ebx, edi
mov edi, edx
call fcn.0044c860
mov edi, ebx
jmp 0x6f98bb
mov dword [esp + 0x80], ecx
lea eax, [0x864ee0]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], edx
call fcn.00438c30
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x80]
mov dword [ebx + 0xc], edx
mov edx, dword [0xc6f140]
test edx, edx
jne 0x6f99bb
mov dword [ebx + 4], eax
mov edi, dword [esp + 0x8c]
mov ebp, ecx
mov ebx, eax
mov eax, dword [esp + 0x64]
mov ecx, dword [esp + 0x80]
jmp 0x6f992d
lea edi, [ebx + 4]
call fcn.0044c860
jmp 0x6f99a0
mov edi, edx
jmp 0x6f98bb
lea eax, [0x8709a0]
mov dword [esp], eax
call fcn.00409d90
mov edi, dword [esp + 4]
mov dword [esp + 0x6c], edi
mov eax, dword [0xc6f140]
test eax, eax
jne 0x6f9b31
mov esi, dword [esp + 0x8c]
call fcn.0044cdda
mov ecx, dword [esp + 0x6c]
mov dword [ecx + 0x18], 0
mov dword [ecx + 0x1c], 0
mov edx, dword [0xc6f140]
test edx, edx
jne 0x6f9b22
mov dword [ecx + 0x14], 0
mov eax, dword [esp + 0x8c]
mov edx, dword [eax + 0xc]
mov ebx, dword [eax + 4]
mov ebp, dword [esp + 0x38]
test ebp, ebp
jl 0x6fa575
cmp ebp, edx
ja 0x6fa575
lea esi, [ecx + 0x10]
cmp ebp, 1
ja 0x6f9ad0
mov edi, 1
cmp ebp, edi
ja 0x6fa575
mov dword [esp + 0x7c], esi
mov dword [esp + 0x40], edi
mov dword [esp + 4], esi
mov dword [esp + 8], ebp
mov dword [esp + 0xc], edi
lea eax, [0x864ee0]
mov dword [esp], eax
mov dword [esp + 0x10], ebx
mov dword [esp + 0x14], ebp
mov dword [esp + 0x18], edx
call fcn.0040f9e0
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x6c]
mov dword [ecx + 8], eax
mov edx, dword [esp + 0x40]
mov dword [ecx + 0xc], edx
mov edx, dword [0xc6f140]
test edx, edx
jne 0x6f9abe
mov edx, dword [esp + 0x7c]
mov dword [ecx + 4], edx
mov eax, dword [esp + 0x64]
mov edx, dword [esp + 0x8c]
jmp 0x6f9913
lea edi, [ecx + 4]
mov edx, eax
mov eax, dword [esp + 0x7c]
call fcn.0044c860
mov eax, edx
jmp 0x6f9aae
mov dword [esp + 0x40], edx
mov dword [esp + 0x78], ebx
lea eax, [0x864ee0]
mov dword [esp], eax
mov dword [esp + 4], esi
mov dword [esp + 8], 0
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], ebp
call fcn.00438c30
mov edi, dword [esp + 0x1c]
mov esi, dword [esp + 0x14]
mov eax, dword [esp + 0x8c]
mov ecx, dword [esp + 0x6c]
mov edx, dword [esp + 0x40]
mov ebx, dword [esp + 0x78]
mov ebp, dword [esp + 0x38]
jmp 0x6f9a55
lea edi, [ecx + 0x14]
xor eax, eax
call fcn.0044c860
jmp 0x6f9a23
lea eax, [0x8709a0]
mov dword [esp], eax
mov dword [esp + 4], edi
mov eax, dword [esp + 0x8c]
mov dword [esp + 8], eax
call fcn.0040f790
jmp 0x6f99fc
mov dword [esp + 0x90], eax
add esp, 0x88
ret
add ecx, 0xfffffff2
cmp cl, 2
ja 0x6f9c72
mov ecx, dword [eax + 4]
mov edx, dword [eax + 8]
test edx, edx
jbe 0x6fa56e
mov eax, dword [ecx]
mov dword [esp], eax
call fcn.006f9860
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x8c]
movzx edx, byte [ecx]
movzx ebx, word [ecx + 2]
movzx ebp, byte [eax]
xchg ebp, eax
cmp al, 2
xchg ebp, eax
jne 0x6f9baf
mov dword [esp + 0x90], eax
add esp, 0x88
ret
xchg ebp, eax
cmp al, dl
xchg ebp, eax
jne 0x6f9c6b
mov ebp, ebx
and ebx, 0x20
movzx esi, word [eax + 2]
and esi, 0x20
cmp si, bx
je 0x6f9ba1
mov ebx, dword [ecx + 4]
mov esi, dword [ecx + 8]
test esi, esi
jbe 0x6fa567
mov ebx, dword [ebx]
cmp eax, ebx
jne 0x6f9be2
mov eax, ecx
jmp 0x6f9ba1
mov dword [esp + 0x50], eax
mov word [esp + 0x2e], bp
mov byte [esp + 0x23], dl
lea eax, [0x8709a0]
mov dword [esp], eax
call fcn.00409d90
mov eax, dword [esp + 4]
movzx ecx, byte [esp + 0x23]
mov byte [eax], cl
movzx ecx, word [esp + 0x2e]
mov word [eax + 2], cx
mov ecx, dword [0xc6f140]
lea edi, [eax + 0x10]
test ecx, ecx
jne 0x6f9c5c
mov ecx, dword [esp + 0x50]
mov dword [eax + 0x10], ecx
mov dword [eax + 8], 1
mov dword [eax + 0xc], 1
mov ecx, dword [0xc6f140]
test ecx, ecx
jne 0x6f9c45
mov dword [eax + 4], edi
jmp 0x6f9ba1
lea ecx, [eax + 4]
mov edx, edi
mov edi, ecx
mov ebx, eax
mov eax, edx
call fcn.0044c860
mov eax, ebx
jmp 0x6f9ba1
mov ecx, eax
mov eax, dword [esp + 0x50]
call fcn.0044c860
mov eax, ecx
jmp 0x6f9c25
mov ebp, ebx
jmp 0x6f9bca
mov dword [esp + 0x90], eax
add esp, 0x88
ret
cmp cl, 0x11
jne 0x6fa53d
mov ecx, dword [eax + 0x28]
test ecx, ecx
jne 0x6f9c9b
mov ecx, dword [eax + 0x2c]
test ecx, ecx
je 0x6fa51a
mov ecx, dword [eax + 4]
mov edx, dword [eax + 8]
test edx, edx
jbe 0x6fa560
mov eax, dword [ecx]
mov dword [esp], eax
call fcn.006f9860
mov eax, dword [esp + 4]
mov dword [esp + 0x48], eax
mov ecx, dword [esp + 0x8c]
mov edx, dword [ecx + 0x2c]
cmp edx, 0xffffffff
jne 0x6fa08d
mov edx, dword [ecx + 0x28]
test edx, edx
je 0x6f9fe5
cmp edx, 1
je 0x6f9f3d
lea eax, [0x8709a0]
mov dword [esp], eax
call fcn.00409d90
mov eax, dword [esp + 4]
mov byte [eax], 0x12
mov dword [eax + 8], 0
mov dword [eax + 0xc], 1
mov ecx, dword [0xc6f140]
lea edi, [eax + 4]
lea edx, [eax + 0x10]
test ecx, ecx
jne 0x6f9f2d
mov dword [eax + 4], edx
mov dword [esp + 0x68], eax
mov dword [esp + 0x74], edi
mov ecx, dword [esp + 0x8c]
mov edx, dword [esp + 0x48]
xor ebx, ebx
jmp 0x6f9d43
mov ebp, dword [esp + 0x3c]
lea ebx, [ebp + 1]
mov ebp, dword [esp + 0x8c]
mov ecx, ebp
mov ebp, dword [ecx + 0x28]
dec ebp
cmp ebx, ebp
jge 0x6f9de9
mov dword [esp + 0x3c], ebx
mov ebp, dword [eax + 8]
lea esi, [ebp + 1]
mov ecx, dword [eax + 0xc]
mov ebx, dword [eax + 4]
cmp esi, ecx
jg 0x6f9d8e
lea ecx, [ebp + 1]
mov dword [eax + 8], ecx
mov ecx, dword [0xc6f140]
lea esi, [ebx + ebp*4]
test ecx, ecx
jne 0x6f9d7b
mov dword [ebx + ebp*4], edx
jmp 0x6f9d33
mov ecx, edi
mov edi, esi
mov ebx, eax
mov eax, edx
call fcn.0044c860
mov eax, ebx
mov edi, ecx
jmp 0x6f9d33
lea eax, [0x864ee0]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], esi
call fcn.00438c30
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x68]
mov dword [ebx + 0xc], edx
mov edx, dword [0xc6f140]
test edx, edx
jne 0x6f9dde
mov dword [ebx + 4], eax
mov edx, dword [esp + 0x48]
mov edi, dword [esp + 0x74]
mov ebp, ecx
mov ebx, eax
mov eax, dword [esp + 0x68]
jmp 0x6f9d63
mov edi, dword [esp + 0x74]
call fcn.0044c860
jmp 0x6f9dcc
movzx ecx, word [ecx + 2]
movzx ebx, byte [edx]
cmp bl, 2
jne 0x6f9e91
mov ecx, dword [eax + 8]
lea ebx, [ecx + 1]
mov ebp, dword [eax + 0xc]
mov esi, dword [eax + 4]
cmp ebx, ebp
jg 0x6f9e3a
lea ebx, [ecx + 1]
mov dword [eax + 8], ebx
mov ebx, dword [0xc6f140]
lea edi, [esi + ecx*4]
test ebx, ebx
jne 0x6f9e2d
mov dword [esi + ecx*4], edx
mov dword [esp + 0x90], eax
add esp, 0x88
ret
mov ecx, eax
mov eax, edx
call fcn.0044c860
mov eax, ecx
jmp 0x6f9e1f
mov dword [esp + 0x54], edx
lea eax, [0x864ee0]
mov dword [esp], eax
mov dword [esp + 4], esi
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], ebx
call fcn.00438c30
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x68]
mov dword [ebx + 0xc], edx
mov edx, dword [0xc6f140]
test edx, edx
jne 0x6f9e86
mov dword [ebx + 4], eax
mov edx, dword [esp + 0x54]
mov esi, eax
mov eax, ebx
jmp 0x6f9e09
mov edi, dword [esp + 0x74]
call fcn.0044c860
jmp 0x6f9e7c
mov word [esp + 0x26], cx
cmp bl, 0xf
jne 0x6f9eae
and ecx, 0x20
movzx ebp, word [edx + 2]
and ebp, 0x20
cmp bp, cx
je 0x6f9df9
lea eax, [0x8709a0]
mov dword [esp], eax
call fcn.00409d90
mov eax, dword [esp + 4]
mov byte [eax], 0xf
movzx ecx, word [esp + 0x26]
mov word [eax + 2], cx
mov ecx, dword [0xc6f140]
lea edi, [eax + 0x10]
test ecx, ecx
jne 0x6f9f1e
mov ecx, dword [esp + 0x48]
mov dword [eax + 0x10], ecx
mov dword [eax + 8], 1
mov dword [eax + 0xc], 1
mov ecx, dword [0xc6f140]
test ecx, ecx
jne 0x6f9f0a
mov dword [eax + 4], edi
mov edi, dword [esp + 0x74]
mov edx, eax
mov eax, dword [esp + 0x68]
jmp 0x6f9df9
lea ecx, [eax + 4]
mov edx, edi
mov edi, ecx
mov ebx, eax
mov eax, edx
call fcn.0044c860
mov eax, ebx
jmp 0x6f9efb
mov ecx, eax
mov eax, dword [esp + 0x48]
call fcn.0044c860
mov eax, ecx
jmp 0x6f9ee0
mov ecx, eax
mov eax, edx
call fcn.0044c860
mov eax, ecx
jmp 0x6f9d1c
movzx ecx, word [ecx + 2]
movzx edx, byte [eax]
cmp dl, 2
jne 0x6f9f57
mov dword [esp + 0x90], eax
add esp, 0x88
ret
mov word [esp + 0x28], cx
cmp dl, 0xf
jne 0x6f9f70
and ecx, 0x20
movzx ebx, word [eax + 2]
and ebx, 0x20
cmp bx, cx
je 0x6f9f49
lea eax, [0x8709a0]
mov dword [esp], eax
call fcn.00409d90
mov eax, dword [esp + 4]
mov byte [eax], 0xf
movzx ecx, word [esp + 0x28]
mov word [eax + 2], cx
mov ecx, dword [0xc6f140]
lea edi, [eax + 0x10]
test ecx, ecx
jne 0x6f9fd6
mov ecx, dword [esp + 0x48]
mov dword [eax + 0x10], ecx
mov dword [eax + 8], 1
mov dword [eax + 0xc], 1
mov ecx, dword [0xc6f140]
test ecx, ecx
jne 0x6f9fbf
mov dword [eax + 4], edi
jmp 0x6f9f49
lea ecx, [eax + 4]
mov edx, edi
mov edi, ecx
mov ebx, eax
mov eax, edx
call fcn.0044c860
mov eax, ebx
jmp 0x6f9f49
mov ecx, eax
mov eax, dword [esp + 0x48]
call fcn.0044c860
mov eax, ecx
jmp 0x6f9fa2
movzx ecx, word [ecx + 2]
movzx edx, byte [eax]
cmp dl, 2
jne 0x6f9fff
mov dword [esp + 0x90], eax
add esp, 0x88
ret
mov word [esp + 0x2a], cx
cmp dl, 0xe
jne 0x6fa018
and ecx, 0x20
movzx ebx, word [eax + 2]
and ebx, 0x20
cmp bx, cx
je 0x6f9ff1
lea eax, [0x8709a0]
mov dword [esp], eax
call fcn.00409d90
mov eax, dword [esp + 4]
mov byte [eax], 0xe
movzx ecx, word [esp + 0x2a]
mov word [eax + 2], cx
mov ecx, dword [0xc6f140]
lea edi, [eax + 0x10]
test ecx, ecx
jne 0x6fa07e
mov ecx, dword [esp + 0x48]
mov dword [eax + 0x10], ecx
mov dword [eax + 8], 1
mov dword [eax + 0xc], 1
mov ecx, dword [0xc6f140]
test ecx, ecx
jne 0x6fa067
mov dword [eax + 4], edi
jmp 0x6f9ff1
lea ecx, [eax + 4]
mov edx, edi
mov edi, ecx
mov ebx, eax
mov eax, edx
call fcn.0044c860
mov eax, ebx
jmp 0x6f9ff1
mov ecx, eax
mov eax, dword [esp + 0x48]
call fcn.0044c860
mov eax, ecx
jmp 0x6fa04a
mov ebx, dword [ecx + 0x28]
cmp ebx, 1
jne 0x6fa09e
cmp edx, 1
je 0x6fa50c
test ebx, ebx
jg 0x6fa3eb
xor edx, edx
mov ebx, dword [ecx + 0x2c]
mov ebp, dword [ecx + 0x28]
cmp ebx, ebp
jle 0x6fa2a0
mov dword [esp + 0x60], edx
movzx ebx, word [ecx + 2]
movzx ebp, byte [eax]
xchg ebp, eax
cmp al, 2
xchg ebp, eax
jne 0x6fa341
mov ebx, eax
mov ebp, dword [ecx + 0x28]
inc ebp
jmp 0x6fa0e1
mov esi, dword [esp + 0x34]
inc esi
mov edx, dword [esp + 0x60]
mov eax, ebp
mov ebp, esi
mov dword [esp + 0x58], eax
mov esi, dword [ecx + 0x2c]
cmp ebp, esi
jge 0x6fa272
mov dword [esp + 0x34], ebp
lea eax, [0x8709a0]
mov dword [esp], eax
call fcn.00409d90
mov eax, dword [esp + 4]
mov dword [esp + 0x4c], eax
mov byte [eax], 0x12
lea ecx, [0x864ee0]
mov dword [esp], ecx
lea edx, [eax + 0x10]
mov dword [esp + 4], edx
mov dword [esp + 8], 0
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 2
call fcn.00438c30
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [0xc6f140]
test ebx, ebx
jne 0x6fa24c
mov ebx, dword [esp + 0x48]
mov dword [eax], ebx
mov ebp, dword [esp + 0x58]
mov dword [eax + 4], ebp
add ecx, 2
mov ebp, dword [esp + 0x4c]
mov dword [ebp + 8], ecx
mov dword [ebp + 0xc], edx
mov ecx, dword [0xc6f140]
test ecx, ecx
jne 0x6fa23f
mov dword [ebp + 4], eax
mov ecx, dword [esp + 0x8c]
movzx edx, word [ecx + 2]
movzx esi, byte [ebp]
xchg esi, eax
cmp al, 2
xchg esi, eax
je 0x6fa0d4
mov word [esp + 0x2c], dx
xchg esi, eax
cmp al, 0x10
xchg esi, eax
jne 0x6fa1bd
and edx, 0x20
mov eax, ebx
movzx ebx, word [ebp + 2]
and ebx, 0x20
cmp bx, dx
jne 0x6fa1bd
mov ebx, eax
jmp 0x6fa0d4
lea eax, [0x8709a0]
mov dword [esp], eax
call fcn.00409d90
mov eax, dword [esp + 4]
mov byte [eax], 0x10
movzx ecx, word [esp + 0x2c]
mov word [eax + 2], cx
mov ecx, dword [0xc6f140]
lea edi, [eax + 0x10]
test ecx, ecx
jne 0x6fa230
mov ecx, dword [esp + 0x4c]
mov dword [eax + 0x10], ecx
mov dword [eax + 8], 1
mov dword [eax + 0xc], 1
mov ecx, dword [0xc6f140]
test ecx, ecx
jne 0x6fa21c
mov dword [eax + 4], edi
mov ecx, dword [esp + 0x8c]
mov ebx, dword [esp + 0x48]
mov ebp, eax
jmp 0x6fa0d4
lea ecx, [eax + 4]
mov edx, edi
mov edi, ecx
mov ebx, eax
mov eax, edx
call fcn.0044c860
mov eax, ebx
jmp 0x6fa20a
mov ecx, eax
mov eax, dword [esp + 0x4c]
call fcn.0044c860
mov eax, ecx
jmp 0x6fa1ef
lea edi, [ebp + 4]
call fcn.0044c860
jmp 0x6fa17f
mov edi, eax
mov eax, dword [esp + 0x48]
call fcn.0044c860
lea ebp, [edi + 4]
mov ebx, edi
mov edi, ebp
mov esi, eax
mov eax, dword [esp + 0x58]
call fcn.0044c860
mov eax, ebx
mov ebx, esi
jmp 0x6fa161
test edx, edx
je 0x6fa333
mov ecx, dword [edx + 4]
mov ebx, dword [edx + 0xc]
mov ebp, dword [edx + 8]
lea esi, [ebp + 1]
cmp esi, ebx
jg 0x6fa2dc
lea ebx, [ebp + 1]
mov dword [edx + 8], ebx
mov ebx, dword [0xc6f140]
lea edi, [ecx + ebp*4]
test ebx, ebx
jne 0x6fa2d5
mov dword [ecx + ebp*4], eax
test edx, edx
je 0x6fa2b2
mov dword [esp + 0x90], edx
add esp, 0x88
ret
lea eax, [0x8709a0]
mov dword [esp], eax
call fcn.00409d90
mov eax, dword [esp + 4]
mov byte [eax], 1
mov dword [esp + 0x90], eax
add esp, 0x88
ret
call fcn.0044c860
jmp 0x6fa2a0
lea eax, [0x864ee0]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], esi
call fcn.00438c30
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x60]
mov dword [ebx + 0xc], edx
mov edx, dword [0xc6f140]
test edx, edx
jne 0x6fa329
mov dword [ebx + 4], eax
mov edx, ebx
mov ebp, ecx
mov ecx, eax
mov eax, dword [esp + 0x58]
jmp 0x6fa28a
lea edi, [ebx + 4]
call fcn.0044c860
jmp 0x6fa31a
mov dword [esp + 0x90], eax
add esp, 0x88
ret
mov word [esp + 0x24], bx
xchg ebp, eax
cmp al, 0x10
xchg ebp, eax
jne 0x6fa363
and ebx, 0x20
movzx esi, word [eax + 2]
and esi, 0x20
cmp si, bx
jne 0x6fa363
mov ebx, eax
jmp 0x6fa0ce
lea eax, [0x8709a0]
mov dword [esp], eax
call fcn.00409d90
mov eax, dword [esp + 4]
mov byte [eax], 0x10
movzx ecx, word [esp + 0x24]
mov word [eax + 2], cx
mov ecx, dword [0xc6f140]
lea edi, [eax + 0x10]
test ecx, ecx
jne 0x6fa3d8
mov ecx, dword [esp + 0x48]
mov dword [eax + 0x10], ecx
mov dword [eax + 8], 1
mov dword [eax + 0xc], 1
mov edx, dword [0xc6f140]
test edx, edx
jne 0x6fa3c4
mov dword [eax + 4], edi
mov ecx, dword [esp + 0x8c]
mov edx, dword [esp + 0x60]
mov ebx, dword [esp + 0x48]
jmp 0x6fa0ce
lea edx, [eax + 4]
mov ebx, edi
mov edi, edx
mov ebp, eax
mov eax, ebx
call fcn.0044c860
mov eax, ebp
jmp 0x6fa3b0
mov ecx, eax
mov eax, dword [esp + 0x48]
call fcn.0044c860
mov eax, ecx
mov ecx, dword [esp + 0x48]
jmp 0x6fa395
lea eax, [0x8709a0]
mov dword [esp], eax
call fcn.00409d90
mov eax, dword [esp + 4]
mov byte [eax], 0x12
mov dword [eax + 8], 0
mov dword [eax + 0xc], 1
mov ecx, dword [0xc6f140]
lea edi, [eax + 4]
lea edx, [eax + 0x10]
test ecx, ecx
jne 0x6fa4fc
mov dword [eax + 4], edx
mov dword [esp + 0x60], eax
mov dword [esp + 0x70], edi
mov ecx, dword [esp + 0x8c]
mov edx, dword [esp + 0x48]
xor ebx, ebx
jmp 0x6fa44c
mov ebp, dword [esp + 0x30]
lea ebx, [ebp + 1]
mov ebp, dword [esp + 0x8c]
mov ecx, ebp
mov ebp, dword [ecx + 0x28]
cmp ebx, ebp
jge 0x6fa4f1
mov dword [esp + 0x30], ebx
mov ebp, dword [eax + 8]
lea esi, [ebp + 1]
mov ecx, dword [eax + 0xc]
mov ebx, dword [eax + 4]
cmp esi, ecx
jg 0x6fa496
lea ecx, [ebp + 1]
mov dword [eax + 8], ecx
mov ecx, dword [0xc6f140]
lea esi, [ebx + ebp*4]
test ecx, ecx
jne 0x6fa483
mov dword [ebx + ebp*4], edx
jmp 0x6fa43c
mov ecx, edi
mov edi, esi
mov ebx, eax
mov eax, edx
call fcn.0044c860
mov eax, ebx
mov edi, ecx
jmp 0x6fa43c
lea eax, [0x864ee0]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], esi
call fcn.00438c30
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x60]
mov dword [ebx + 0xc], edx
mov edx, dword [0xc6f140]
test edx, edx
jne 0x6fa4e6
mov dword [ebx + 4], eax
mov edx, dword [esp + 0x48]
mov edi, dword [esp + 0x70]
mov ebp, ecx
mov ebx, eax
mov eax, dword [esp + 0x60]
jmp 0x6fa46b
mov edi, dword [esp + 0x70]
call fcn.0044c860
jmp 0x6fa4d4
mov eax, edx
mov edx, dword [esp + 0x60]
jmp 0x6fa0a8
mov ecx, eax
mov eax, edx
call fcn.0044c860
mov eax, ecx
jmp 0x6fa425
mov dword [esp + 0x90], eax
add esp, 0x88
ret
lea eax, [0x8709a0]
mov dword [esp], eax
call fcn.00409d90
mov eax, dword [esp + 4]
mov byte [eax], 2
mov dword [esp + 0x90], eax
add esp, 0x88
ret
add ecx, 0xffffffee
cmp cl, 1
jbe 0x6f98a4
jmp 0x6f9c72
mov dword [esp + 0x90], 0
add esp, 0x88
ret
call fcn.00426770
ud2
call fcn.00426770
ud2
call fcn.00426770
ud2
call fcn.00426870
ud2
call fcn.0044b100
jmp fcn.006f9860