Function at 0x6dbeafc0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0xc0]
cmp eax, dword [ecx + 8]
jbe 0x6dbebe9f
sub esp, 0x140
lea edi, [esp + 0xd8]
xor eax, eax
call fcn.6db237c3
mov ecx, dword [esp + 0x144]
mov ebx, dword [ecx]
mov dword [esp + 0xd8], ebx
mov byte [esp + 0xdc], 0x52
mov ebx, dword [ecx + 0x80]
mov ebp, dword [ecx + 0x34]
cmp ebx, ebp
jge 0x6dbeb01a
sub ebp, ebx
jmp 0x6dbeb01c
xor ebp, ebp
mov word [esp + 0xde], bp
mov ebx, dword [ecx + 0x18]
mov dword [esp + 0xe8], ebx
mov ebx, dword [ecx + 0xb0]
mov ebp, dword [ecx + 0xac]
mov edx, ebp
mov ebp, dword [ecx + 0xb4]
mov esi, ebp
mov ebp, dword [ecx + 0xb8]
cmp ebp, ebx
ja 0x6dbebe95
mov dword [esp + 0x90], esi
mov dword [esp + 0x70], ebx
mov dword [esp + 0xb0], edx
mov edi, esi
sub esi, ebp
mov dword [esp + 0x8c], esi
xchg esi, ebx
neg ebx
xchg esi, ebx
sar esi, 0x1f
and esi, ebp
lea ecx, [edx + esi]
mov dword [esp + 0xb4], ecx
sub ebx, ebp
mov dword [esp + 0xb8], ebx
mov ebx, dword [esp + 0x8c]
mov dword [esp + 0xbc], ebx
mov ebx, edi
lea edi, [esp + 0xc0]
call fcn.6db237ca
lea ecx, [0x6dbebeb0]
mov dword [esp + 0xc0], ecx
mov dword [esp + 0xc4], edx
mov ecx, dword [esp + 0x70]
mov dword [esp + 0xc8], ecx
mov dword [esp + 0xcc], ebx
lea ebp, [esp + 0xb4]
mov dword [esp + 0xd0], ebp
mov ebp, dword [esp + 0x144]
mov dword [esp + 0xd4], ebp
mov eax, ebx
mov ebx, dword [ebp + 0xa0]
mov dword [esp + 0xac], ebx
mov esi, ecx
mov ecx, dword [ebp + 0xa4]
mov dword [esp + 0x8c], ecx
xor edi, edi
jmp 0x6dbeb137
lea edi, [ebp + 1]
mov eax, dword [esp + 0x90]
mov ecx, dword [esp + 0x8c]
mov edx, dword [esp + 0xb0]
mov ebx, dword [esp + 0xac]
mov ebp, dword [esp + 0x144]
mov esi, dword [esp + 0x70]
cmp edi, ecx
jge 0x6dbeb218
mov dword [esp + 0x4c], edi
lea eax, [ebx + edi*8]
mov ecx, dword [eax]
mov dword [esp + 0x88], ecx
mov eax, dword [eax + 4]
mov dword [esp + 0x84], eax
mov ebp, dword [esp + 0xc0]
mov dword [esp], 0x18
lea edx, [esp + 0xc0]
call ebp
mov eax, dword [esp + 0x144]
mov ecx, dword [eax + 0x18]
mov ebx, dword [esp + 0x88]
mov ebp, ebx
sub ebx, ecx
test ebx, ebx
jge 0x6dbeb1a0
mov ebx, dword [eax + 0xa4]
dec ebx
mov ecx, ebp
mov ebp, dword [esp + 0x4c]
cmp ebp, ebx
jne 0x6dbeb10d
jmp 0x6dbeb1a2
mov ecx, ebp
mov dword [esp + 0xe4], ecx
mov eax, dword [esp + 0x84]
mov dword [esp + 0xe0], eax
mov eax, dword [esp + 0xb4]
mov ecx, dword [esp + 0xb8]
mov edx, dword [esp + 0xbc]
lea ebx, [esp + 0xd8]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
call fcn.6dbe9130
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov dword [esp + 0xb4], eax
mov dword [esp + 0xb8], ecx
mov dword [esp + 0xbc], edx
mov eax, dword [esp + 0x144]
mov ebp, dword [esp + 0x4c]
jmp 0x6dbeb10d
mov dword [ebp + 0xa4], 0
movzx ebx, byte [esp + 0x148]
test bl, bl
jne 0x6dbeb46d
mov ebx, dword [ebp + 0x38]
test ebx, ebx
je 0x6dbeb24c
mov dword [ebp + 0x54], 0
mov dword [ebp + 0x58], 0
jmp 0x6dbeb302
nop
lea edi, [esp]
lea esi, [0x6dd85240]
call fcn.6db23cae
call fcn.6db59fd0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0xf4240
call fcn.6db1d910
mov eax, dword [esp + 0x144]
mov ecx, dword [eax + 0x58]
mov edx, dword [esp + 0x10]
test ecx, ecx
jne 0x6dbeb2a8
mov dword [eax + 0x58], 0x1b58
lea ebx, [edx + 0x1b58]
mov dword [eax + 0x54], ebx
jmp 0x6dbeb2e9
mov ebx, dword [eax + 0x54]
mov ebp, edx
sub edx, ebx
test edx, edx
jl 0x6dbeb2e9
cmp ecx, 0x1b58
jae 0x6dbeb2c2
mov dword [eax + 0x58], 0x1b58
mov ebx, dword [eax + 0x58]
mov ecx, ebx
shr ebx, 1
add ebx, ecx
mov dword [eax + 0x58], ebx
cmp ebx, 0x1d4c0
jbe 0x6dbeb2dd
mov dword [eax + 0x58], 0x1d4c0
mov ebx, dword [eax + 0x58]
add ebx, ebp
mov dword [eax + 0x54], ebx
or dword [eax + 0x40], 1
mov eax, dword [esp + 0x90]
mov edx, dword [esp + 0xb0]
mov ebp, dword [esp + 0x144]
mov esi, dword [esp + 0x70]
mov ebx, dword [ebp + 0x40]
test ebx, 1
je 0x6dbeb39a
mov byte [esp + 0xdc], 0x53
mov eax, dword [esp + 0xc0]
mov dword [esp], 0x18
lea edx, [esp + 0xc0]
call eax
mov eax, dword [esp + 0xb4]
mov ecx, dword [esp + 0xb8]
mov ebx, dword [esp + 0xbc]
lea ebp, [esp + 0xd8]
mov dword [esp], ebp
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebx
call fcn.6dbe9130
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov dword [esp + 0xb4], eax
mov dword [esp + 0xb8], ecx
mov dword [esp + 0xbc], ebx
mov eax, dword [esp + 0x90]
mov edx, dword [esp + 0xb0]
mov ebp, dword [esp + 0x144]
mov esi, dword [esp + 0x70]
mov ebx, dword [ebp + 0x40]
test ebx, 2
je 0x6dbeb432
mov byte [esp + 0xdc], 0x54
mov eax, dword [esp + 0xc0]
mov dword [esp], 0x18
lea edx, [esp + 0xc0]
call eax
mov eax, dword [esp + 0xb4]
mov ecx, dword [esp + 0xb8]
mov ebx, dword [esp + 0xbc]
lea ebp, [esp + 0xd8]
mov dword [esp], ebp
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebx
call fcn.6dbe9130
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov dword [esp + 0xb4], eax
mov dword [esp + 0xb8], ecx
mov dword [esp + 0xbc], ebx
mov eax, dword [esp + 0x90]
mov edx, dword [esp + 0xb0]
mov ebp, dword [esp + 0x144]
mov esi, dword [esp + 0x70]
mov dword [ebp + 0x40], 0
mov ebx, dword [ebp + 0x30]
mov ecx, edx
mov edx, dword [ebp + 0x38]
cmp edx, ebx
jae 0x6dbeb447
mov ebx, edx
mov edx, dword [ebp + 0x68]
test edx, edx
jne 0x6dbeb459
mov edx, dword [ebp + 0x3c]
cmp ebx, edx
jae 0x6dbeb45b
mov edx, ebx
jmp 0x6dbeb45b
mov edx, ebx
mov dword [esp + 0x60], edx
mov ebx, dword [ebp + 0x74]
mov dword [esp + 0x8c], ebx
xor edi, edi
jmp 0x6dbeb4e2
nop
mov ecx, dword [esp + 0xb8]
mov ebx, esi
sub esi, ecx
cmp dword [ebp + 0xb8], esi
jge 0x6dbeb4a3
mov ecx, dword [ebp + 0xbc]
mov edi, dword [ecx]
mov dword [esp], edx
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
mov dword [esp + 0xc], esi
mov edx, ecx
call edi
mov ebp, dword [esp + 0x144]
mov eax, dword [ebp + 0x44]
mov dword [esp + 0x14c], eax
add esp, 0x140
ret
inc dword [ebx + 0x14]
mov ecx, dword [esp + 0x48]
lea edi, [ecx + 1]
mov edx, dword [esp + 0x60]
mov ecx, dword [esp + 0x8c]
mov ecx, dword [esp + 0xb0]
mov ebx, dword [esp + 0x8c]
mov ebp, dword [esp + 0x144]
mov esi, dword [esp + 0x70]
mov dword [esp + 0x48], edi
cmp edi, ebx
jge 0x6dbeb622
mov ebx, dword [ebp + 0x14]
mov ebp, dword [ebp + 0x10]
add ebp, edx
sub ebx, ebp
test ebx, ebx
jge 0x6dbeb61b
mov ebx, dword [esp + 0x144]
mov ebp, dword [ebx + 0x74]
mov edx, dword [ebx + 0x70]
cmp edi, ebp
jae 0x6dbebe8c
imul ebp, edi, 0x34
add edx, ebp
mov ebp, edi
lea edi, [esp + 0x10c]
mov esi, edx
call fcn.6db23c5e
mov ecx, dword [ebx]
mov dword [esp + 0x10c], ecx
mov byte [esp + 0x110], 0x51
mov ecx, dword [ebx + 0x14]
mov dword [esp + 0x118], ecx
mov ecx, dword [ebx + 0x8c]
inc ecx
mov edx, dword [ebx + 0x88]
mov esi, ebp
mov ebp, dword [ebx + 0x90]
cmp ebp, ecx
jae 0x6dbeb5c3
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], 1
lea eax, [0x6dc6baa0]
mov dword [esp + 0x10], eax
call fcn.6db0b1d0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x144]
mov dword [ebx + 0x90], edx
mov edx, dword [0x6ddaa8e0]
test edx, edx
jne 0x6dbeb5ab
mov dword [ebx + 0x88], eax
jmp 0x6dbeb5b6
lea edi, [ebx + 0x88]
call fcn.6db235b0
mov esi, dword [esp + 0x48]
mov edx, eax
mov eax, dword [esp + 0x90]
mov dword [ebx + 0x8c], ecx
imul ecx, ecx, 0x34
lea edi, [ecx + edx - 0x34]
mov ecx, dword [0x6ddaa8e0]
test ecx, ecx
jne 0x6dbeb5eb
lea esi, [esp + 0x10c]
call fcn.6db23c5e
jmp 0x6dbeb4b4
lea eax, [0x6dc6baa0]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x10c]
mov dword [esp + 8], eax
call fcn.6dad1910
mov eax, dword [esp + 0x90]
mov ebx, dword [esp + 0x144]
jmp 0x6dbeb4b4
mov ebp, dword [esp + 0x144]
test edi, edi
jle 0x6dbeb722
mov ebx, dword [ebp + 0x74]
mov edx, dword [ebp + 0x78]
mov dword [esp + 0x34], edx
mov ebp, dword [ebp + 0x70]
shr edx, 1
cmp edi, edx
jle 0x6dbeb6b1
cmp edi, ebx
ja 0x6dbebe83
mov dword [esp + 0xa0], ebp
lea eax, [0x6dc6baa0]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], ebx
mov eax, dword [esp + 0x34]
sub eax, edi
neg eax
sar eax, 0x1f
imul edx, edi, 0x34
and edx, eax
lea eax, [ebp + edx]
mov dword [esp + 0xc], eax
sub ebx, edi
mov dword [esp + 0x10], ebx
call fcn.6dad1a20
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x34]
cmp ecx, edx
ja 0x6dbebe7e
mov eax, dword [esp + 0x90]
mov esi, dword [esp + 0x70]
mov edi, dword [esp + 0x48]
mov ebp, dword [esp + 0xa0]
mov ebx, ecx
mov ecx, dword [esp + 0xb0]
jmp 0x6dbeb6dd
cmp edi, ebx
ja 0x6dbebe75
mov edx, dword [esp + 0x34]
sub edx, edi
mov dword [esp + 0x28], edx
sub ebx, edi
mov dword [esp + 0x24], ebx
neg edx
sar edx, 0x1f
imul ebx, edi, 0x34
and ebx, edx
add ebp, ebx
mov edx, dword [esp + 0x28]
mov ebx, dword [esp + 0x24]
mov ecx, dword [esp + 0x144]
mov dword [ecx + 0x74], ebx
mov dword [ecx + 0x78], edx
mov edx, dword [0x6ddaa8e0]
test edx, edx
jne 0x6dbeb6f9
mov dword [ecx + 0x70], ebp
jmp 0x6dbeb710
lea edx, [ecx + 0x70]
mov ebx, edi
mov edi, edx
mov eax, ebp
call fcn.6db235b0
mov eax, dword [esp + 0x90]
mov edi, ebx
mov ecx, dword [esp + 0xb0]
mov edx, dword [esp + 0x60]
mov ebp, dword [esp + 0x144]
mov ebx, dword [ebp + 0x64]
test ebx, ebx
jg 0x6dbeb72e
mov ebx, 0xffffffff
mov dword [esp + 0x30], ebx
nop
lea edi, [esp]
lea esi, [0x6dd85240]
call fcn.6db23cae
call fcn.6db59fd0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0xf4240
call fcn.6db1d910
mov eax, dword [esp + 0x144]
mov ecx, dword [eax + 0x44]
mov edx, dword [eax + 0x88]
mov dword [esp + 0xa8], edx
mov ebx, dword [eax + 0x8c]
mov dword [esp + 0x8c], ebx
mov ebp, dword [esp + 0x10]
mov esi, dword [esp + 0x48]
mov edi, dword [esp + 0x30]
mov dword [esp + 0x94], eax
xor eax, eax
mov dword [esp + 0x44], eax
xor eax, eax
mov dword [esp + 0x3c], eax
xor eax, eax
mov dword [esp + 0x40], eax
xor eax, eax
mov dword [esp + 0x54], eax
xor eax, eax
mov dword [esp + 0x50], eax
xor eax, eax
mov dword [esp + 0x58], eax
xor eax, eax
mov dword [esp + 0x5c], eax
xor eax, eax
mov dword [esp + 0x68], eax
xor eax, eax
mov dword [esp + 0x6c], eax
mov eax, dword [esp + 0x94]
jmp 0x6dbeb804
mov edi, dword [esp + 0x44]
inc edi
mov dword [esp + 0x44], edi
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x40], ecx
mov ecx, ebp
mov ebx, dword [esp + 0x8c]
mov edi, dword [esp + 0x30]
mov ebp, esi
mov esi, dword [esp + 0x48]
mov dword [esp + 0x38], ecx
mov dword [esp + 0x64], ebp
mov ebp, dword [esp + 0x44]
cmp ebp, ebx
jge 0x6dbebbf1
jae 0x6dbebe6c
imul ebx, ebp, 0x34
lea ebp, [ebx + edx]
mov dword [esp + 0x9c], ebp
lea ebp, [edx + ebx + 0x24]
cmp dword [ebp], 1
jne 0x6dbeb847
mov esi, dword [esp + 0x64]
mov ebx, dword [esp + 0x3c]
mov ecx, dword [esp + 0x40]
mov ebp, dword [esp + 0x38]
jmp 0x6dbeb7e0
mov dword [esp + 0x80], ebx
lea ebp, [edx + ebx + 0x18]
mov dword [esp + 0xa4], ebp
mov ebp, dword [ebx + edx + 0x18]
test ebp, ebp
jne 0x6dbeb889
mov ebp, dword [eax + 0x28]
mov dword [edx + ebx + 0x14], ebp
mov ebx, dword [esp + 0x64]
add ebp, ebx
mov ebx, dword [esp + 0x80]
mov dword [edx + ebx + 0x1c], ebp
mov ebp, ebx
mov esi, 1
mov ebx, dword [esp + 0x3c]
jmp 0x6dbeba2c
mov ebp, dword [edx + ebx + 0x20]
cmp edi, ebp
ja 0x6dbeb904
mov ebp, dword [esp + 0x68]
add ebp, 1
mov dword [esp + 0x68], ebp
mov ebp, dword [esp + 0x6c]
adc ebp, 0
mov dword [esp + 0x7c], ebp
mov ebp, dword [esp + 0x50]
add ebp, 1
mov dword [esp + 0x50], ebp
mov ebp, dword [esp + 0x54]
adc ebp, 0
mov dword [esp + 0x78], ebp
mov dword [edx + ebx + 0x20], 0
mov ebp, dword [eax + 0x28]
mov dword [edx + ebx + 0x14], ebp
mov ebx, dword [esp + 0x64]
add ebp, ebx
mov ebx, dword [esp + 0x80]
mov dword [edx + ebx + 0x1c], ebp
mov ebp, ebx
mov esi, 1
mov ebx, dword [esp + 0x3c]
mov ebp, dword [esp + 0x78]
mov dword [esp + 0x54], ebp
mov ebp, dword [esp + 0x7c]
mov dword [esp + 0x6c], ebp
mov ebp, dword [esp + 0x80]
jmp 0x6dbeba2c
test ebp, ebp
jbe 0x6dbeb97f
test esi, esi
jne 0x6dbeb97f
mov ebp, dword [esp + 0x68]
add ebp, 1
mov dword [esp + 0x68], ebp
mov ebp, dword [esp + 0x6c]
adc ebp, 0
mov dword [esp + 0x7c], ebp
mov ebp, dword [esp + 0x58]
add ebp, 1
mov dword [esp + 0x58], ebp
mov ebp, dword [esp + 0x5c]
adc ebp, 0
mov dword [esp + 0x78], ebp
mov dword [edx + ebx + 0x20], 0
mov ebp, dword [eax + 0x28]
mov dword [edx + ebx + 0x14], ebp
mov ebx, dword [esp + 0x64]
add ebp, ebx
mov ebx, dword [esp + 0x80]
mov dword [edx + ebx + 0x1c], ebp
mov ebp, ebx
mov esi, 1
mov ebx, dword [esp + 0x3c]
mov ebp, dword [esp + 0x78]
mov dword [esp + 0x5c], ebp
mov ebp, dword [esp + 0x7c]
mov dword [esp + 0x6c], ebp
mov ebp, dword [esp + 0x80]
jmp 0x6dbeba2c
mov ebp, dword [ebx + edx + 0x1c]
mov ebx, dword [esp + 0x64]
sub ebx, ebp
test ebx, ebx
jl 0x6dbeba1a
mov dword [esp + 0x88], ebx
mov ebp, dword [eax + 0x4c]
test ebp, ebp
jne 0x6dbeb9b3
mov ebp, dword [esp + 0x80]
mov ebx, dword [ebp + edx + 0x14]
add ebx, dword [eax + 0x28]
mov dword [edx + ebp + 0x14], ebx
jmp 0x6dbeb9cc
mov ebp, dword [esp + 0x80]
lea ebx, [edx + ebp + 0x14]
mov ebp, dword [eax + 0x28]
shr ebp, 1
add dword [ebx], ebp
mov ebp, dword [esp + 0x80]
mov ebx, dword [esp + 0x3c]
add ebx, 1
mov dword [esp + 0x3c], ebx
mov ebx, dword [esp + 0x40]
adc ebx, 0
mov dword [esp + 0x7c], ebx
mov dword [edx + ebp + 0x20], 0
mov ebx, dword [ebp + edx + 0x14]
mov ebp, dword [esp + 0x64]
add ebx, ebp
mov ebp, dword [esp + 0x80]
mov dword [edx + ebp + 0x1c], ebx
mov ebx, dword [esp + 0x88]
test ebx, ebx
mov ebx, dword [esp + 0x3c]
mov ebx, dword [esp + 0x7c]
mov dword [esp + 0x40], ebx
mov ebx, dword [esp + 0x3c]
jmp 0x6dbeba25
mov ebp, dword [esp + 0x80]
mov ebx, dword [esp + 0x3c]
xchg esi, ebx
setge bl
xchg esi, ebx
xchg esi, eax
test al, al
xchg esi, eax
jne 0x6dbeba3b
mov esi, dword [esp + 0x64]
jmp 0x6dbebbd8
mov dword [esp + 0x74], ebx
nop
lea edi, [esp]
lea esi, [0x6dd85240]
call fcn.6db23cae
call fcn.6db59fd0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0xf4240
call fcn.6db1d910
mov eax, dword [esp + 0x10]
mov dword [esp + 0x64], eax
mov ecx, dword [esp + 0xa4]
inc dword [ecx]
mov ecx, dword [esp + 0x80]
mov edx, dword [esp + 0xa8]
mov dword [edx + ecx + 8], eax
movzx ebx, word [esp + 0xde]
mov word [edx + ecx + 6], bx
mov ebx, dword [esp + 0xe8]
mov dword [edx + ecx + 0x10], ebx
mov ebx, dword [ecx + edx + 0x2c]
add ebx, 0x18
mov ebp, dword [esp + 0xc0]
mov dword [esp], ebx
lea edx, [esp + 0xc0]
call ebp
mov eax, dword [esp + 0xb4]
mov ecx, dword [esp + 0xb8]
mov edx, dword [esp + 0xbc]
mov ebx, dword [esp + 0x9c]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
call fcn.6dbe9130
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov dword [esp + 0xb4], eax
mov dword [esp + 0xb8], ecx
mov dword [esp + 0xbc], edx
mov edx, dword [esp + 0xa8]
mov ebx, dword [esp + 0x80]
mov ebp, dword [ebx + edx + 0x2c]
mov esi, edx
mov edx, dword [edx + ebx + 0x28]
cmp ebp, ecx
jl 0x6dbebb3b
mov ebp, ecx
cmp edx, eax
je 0x6dbebb5d
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ebp
call fcn.6db23ec0
mov ebx, dword [esp + 0x80]
mov esi, dword [esp + 0xa8]
mov ecx, dword [esp + 0xb8]
mov ebp, dword [esp + 0xbc]
mov eax, ebp
mov ebp, dword [esp + 0xb4]
mov edx, ebx
mov ebx, dword [ebx + esi + 0x2c]
cmp ebx, ecx
ja 0x6dbebe65
sub eax, ebx
mov edi, eax
neg eax
sar eax, 0x1f
and eax, ebx
add ebp, eax
mov dword [esp + 0xb4], ebp
sub ecx, ebx
mov dword [esp + 0xb8], ecx
mov dword [esp + 0xbc], edi
mov ebx, dword [edx + esi + 0x18]
mov ebp, dword [esp + 0x144]
cmp dword [ebp + 0x5c], ebx
ja 0x6dbebbbd
mov dword [ebp + 0xc], 0xffffffff
mov eax, ebp
mov ecx, dword [esp + 0x38]
mov ebx, dword [esp + 0x74]
mov ebp, edx
mov edi, dword [esp + 0x30]
mov esi, dword [esp + 0x64]
mov edx, dword [esp + 0xa8]
mov ebp, dword [ebp + edx + 0x1c]
sub ebp, esi
test ebp, ebp
jle 0x6dbebbe6
cmp ecx, ebp
jg 0x6dbebbe8
mov ebp, ecx
mov ecx, dword [esp + 0x40]
jmp 0x6dbeb7e0
nop
mov ebx, dword [esp + 0xb8]
mov ebp, dword [esp + 0x70]
mov esi, ebp
sub ebp, ebx
cmp dword [eax + 0xb8], ebp
jge 0x6dbebc3f
mov edx, dword [eax + 0xbc]
mov ecx, dword [edx]
mov ebx, dword [esp + 0xb0]
mov dword [esp], ebx
mov dword [esp + 4], esi
mov ebx, dword [esp + 0x90]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ebp
call ecx
mov eax, dword [esp + 0x144]
mov ecx, dword [esp + 0x38]
mov edi, dword [esp + 0x30]
mov edx, dword [esp + 0x40]
test edx, edx
sete bl
xchg ebp, ebx
seta bl
xchg ebp, ebx
mov esi, dword [esp + 0x3c]
test esi, esi
xchg edi, ebx
seta bl
xchg edi, ebx
and ebx, edi
or ebx, ebp
mov byte [esp + 0x23], bl
test bl, bl
je 0x6dbebc9d
mov eax, dword [0x6dd84094]
test byte [eax], al
add eax, 0x90
mov dword [esp], eax
mov dword [esp + 8], edx
mov dword [esp + 4], esi
call fcn.6db27b90
mov eax, dword [esp + 0x144]
mov ecx, dword [esp + 0x38]
mov edx, dword [esp + 0x40]
movzx ebx, byte [esp + 0x23]
mov esi, dword [esp + 0x3c]
mov ebp, dword [esp + 0x54]
test ebp, ebp
xchg edi, ebx
sete bl
xchg edi, ebx
xchg ebp, ebx
seta bl
xchg ebp, ebx
mov ebx, dword [esp + 0x50]
test ebx, ebx
seta bl
and edi, ebx
or edi, ebp
xchg edi, eax
test al, al
xchg edi, eax
je 0x6dbebd08
mov eax, dword [0x6dd84094]
test byte [eax], al
mov ecx, dword [esp + 0x50]
add esi, ecx
mov dword [esp + 0x2c], esi
mov ebx, dword [esp + 0x54]
adc edx, ebx
mov dword [esp + 0x7c], edx
add eax, 0x80
mov dword [esp], eax
mov dword [esp + 8], ebx
mov dword [esp + 4], ecx
call fcn.6db27b90
mov eax, dword [esp + 0x144]
mov ecx, dword [esp + 0x38]
mov esi, dword [esp + 0x2c]
mov edx, dword [esp + 0x7c]
mov ebx, dword [esp + 0x5c]
test ebx, ebx
xchg ebp, ebx
seta bl
xchg ebp, ebx
mov edi, dword [esp + 0x58]
test edi, edi
xchg edi, ebx
seta bl
xchg edi, ebx
test ebx, ebx
sete bl
and ebx, edi
or ebx, ebp
test bl, bl
je 0x6dbebd73
mov eax, dword [0x6dd84094]
test byte [eax], al
mov ecx, dword [esp + 0x58]
add esi, ecx
mov dword [esp + 0x2c], esi
mov ebx, dword [esp + 0x5c]
adc edx, ebx
mov dword [esp + 0x7c], edx
add eax, 0x88
mov dword [esp], eax
mov dword [esp + 8], ebx
mov dword [esp + 4], ecx
call fcn.6db27b90
mov eax, dword [esp + 0x144]
mov ecx, dword [esp + 0x38]
mov esi, dword [esp + 0x2c]
mov edx, dword [esp + 0x7c]
test edx, edx
seta bl
test esi, esi
xchg ebp, ebx
seta bl
xchg ebp, ebx
test edx, edx
xchg edi, ebx
sete bl
xchg edi, ebx
and edi, ebp
or ebx, edi
test bl, bl
je 0x6dbebdb8
mov eax, dword [0x6dd84094]
test byte [eax], al
add eax, 0x78
mov dword [esp], eax
mov dword [esp + 8], edx
mov dword [esp + 4], esi
call fcn.6db27b90
mov eax, dword [esp + 0x144]
mov ecx, dword [esp + 0x38]
mov edx, dword [eax + 0x68]
test edx, edx
jne 0x6dbebe57
mov edx, dword [esp + 0x68]
test edx, edx
seta dl
mov ebx, dword [esp + 0x6c]
test ebx, ebx
sete bl
xchg ebp, ebx
seta bl
xchg ebp, ebx
and ebx, edx
or ebx, ebp
test bl, bl
je 0x6dbebe19
mov edx, dword [eax + 0x14]
sub edx, dword [eax + 0x10]
shr edx, 1
mov dword [eax + 0x1c], edx
cmp edx, 2
jae 0x6dbebdfb
mov dword [eax + 0x1c], 2
mov edx, dword [eax + 0x1c]
mov ebx, dword [esp + 0x30]
add edx, ebx
mov dword [eax + 0x3c], edx
mov ebx, dword [eax + 8]
imul edx, ebx
mov dword [eax + 0x60], edx
movzx edx, byte [esp + 0x23]
test dl, dl
jmp 0x6dbebe20
movzx edx, byte [esp + 0x23]
test dl, dl
je 0x6dbebe44
mov edx, dword [esp + 0x60]
shr edx, 1
mov dword [eax + 0x1c], edx
cmp edx, 2
jae 0x6dbebe37
mov dword [eax + 0x1c], 2
mov dword [eax + 0x3c], 1
mov edx, dword [eax + 8]
mov dword [eax + 0x60], edx
cmp dword [eax + 0x3c], 1
jae 0x6dbebe57
mov dword [eax + 0x3c], 1
mov edx, dword [eax + 8]
mov dword [eax + 0x60], edx
mov dword [esp + 0x14c], ecx
add esp, 0x140
ret
mov eax, ebx
call fcn.6db23690
mov eax, ebp
mov ecx, ebx
call fcn.6db23630
mov eax, edi
mov ecx, ebx
call fcn.6db23690
call fcn.6db23670
mov eax, edi
mov ecx, ebx
call fcn.6db23690
mov eax, edi
mov ecx, ebp
call fcn.6db23630
mov eax, ebp
mov ecx, ebx
call fcn.6db23690
nop
call fcn.6db22180
jmp fcn.6dbeafc0