Function at 0x6d23c0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x90]
cmp eax, dword [ecx + 8]
jbe 0x6d38cc
sub esp, 0x110
mov ecx, dword [esp + 0x11c]
cmp ecx, 2
jl 0x6d37d1
mov ebx, dword [esp + 0x118]
mov ebp, dword [esp + 0x120]
mov eax, ebp
mov edx, ebx
xor esi, esi
xor edi, edi
xor eax, eax
mov word [esp + 0x24], ax
xor edx, edx
mov dword [esp + 0x34], edx
xor edx, edx
mov dword [esp + 0x30], edx
xor edx, edx
mov dword [esp + 0x10c], edx
xor ebx, ebx
mov dword [esp + 0x3c], ebx
mov ebx, dword [esp + 0x118]
mov eax, ebp
mov edx, ebx
jmp 0x6d24d0
inc ebx
mov ebp, dword [esp + 0x10c]
mov esi, dword [esp + 0x30]
mov ebp, dword [esp + 0x104]
movzx esi, word [esp + 0x24]
mov dword [esp + 0x38], ebx
movzx ebx, word [esp + 0x22]
mov ebx, dword [esp + 0x38]
mov esi, dword [esp + 0x30]
cmp ebx, esi
jge 0x6d2491
mov ebp, dword [esp + 0x28]
cmp ebx, ebp
jge 0x6d2491
cmp ebx, esi
jae 0x6d38bb
mov ebp, dword [esp + 0x10c]
mov ebp, dword [ebp + ebx*4]
mov esi, dword [esp + 0x104]
mov esi, dword [esi + ebx*4]
cmp ebp, esi
je 0x6d243b
test ebx, ebx
jle 0x6d2551
mov ebp, dword [esp + 0x34]
cmp ebx, ebp
ja 0x6d38b2
movzx esi, word [esp + 0x24]
mov eax, dword [esp + 0x64]
inc eax
mov word [esp + 0x24], si
mov dword [esp + 0x34], ebp
mov dword [esp + 0x30], ebx
mov ebp, dword [esp + 0x40]
mov ebx, dword [esp + 0x108]
mov esi, eax
mov eax, dword [esp + 0x120]
mov dword [esp + 0x40], ebp
mov dword [esp + 0x108], ebx
cmp esi, ecx
jg 0x6d2b82
mov dword [esp + 0x64], esi
jge 0x6d2b6e
jae 0x6d38c4
mov ebx, dword [edx + esi*4]
cmp byte [ebx], 0x12
jne 0x6d2507
mov ebp, dword [ebx + 8]
mov esi, dword [ebx + 4]
test ebp, ebp
jle 0x6d2507
mov ebx, dword [esi]
cmp byte [ebx], 3
je 0x6d2b4a
xor ebx, ebx
xor ebp, ebp
xor esi, esi
xor ebx, ebx
mov dword [esp + 0x28], ebx
xor ebx, ebx
mov word [esp + 0x22], bx
mov dword [esp + 0x104], ebp
mov dword [esp + 0x2c], esi
movzx esi, word [esp + 0x24]
cmp bx, si
jne 0x6d2551
mov dword [esp + 0xb0], eax
xor eax, eax
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0xb0]
jmp 0x6d245c
mov ebx, dword [esp + 0x2c]
mov ebp, dword [esp + 0x28]
mov esi, dword [esp + 0x104]
movzx ebx, word [esp + 0x22]
mov word [esp + 0x26], bx
mov ebx, dword [esp + 0x2c]
mov dword [esp + 0x5c], ebx
mov ebx, dword [esp + 0x64]
cmp ebx, edi
jne 0x6d25a3
mov edi, dword [esp + 0x108]
mov ebx, ebp
mov dword [esp + 0x10c], esi
mov dword [esp + 0x108], edi
mov edi, dword [esp + 0x64]
movzx esi, word [esp + 0x26]
mov ebp, dword [esp + 0x5c]
jmp 0x6d24aa
mov dword [esp + 0x58], ebp
mov dword [esp + 0x100], esi
lea ebp, [edi + 1]
cmp ebx, ebp
jne 0x6d26ba
cmp edi, ecx
jae 0x6d38ab
mov ebp, dword [esp + 0x3c]
lea ebx, [ebp + 1]
mov esi, dword [edx + edi*4]
mov edi, esi
mov esi, dword [esp + 0x40]
cmp ebx, esi
ja 0x6d2653
mov dword [esp + 0xa8], eax
mov eax, dword [esp + 0x108]
mov dword [esp + 0xe0], eax
mov eax, dword [esp + 0xa8]
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x40], esi
mov ebx, dword [esp + 0xe0]
lea esi, [ebx + ebp*4]
mov dword [esp + 0xfc], esi
mov esi, dword [0xc6be00]
test esi, esi
jne 0x6d263d
mov dword [ebx + ebp*4], edi
mov ebp, dword [esp + 0x40]
mov esi, dword [esp + 0x3c]
mov edi, ebx
mov dword [esp + 0x40], ebp
mov dword [esp + 0x3c], esi
mov ebx, dword [esp + 0x64]
mov ebp, dword [esp + 0x58]
mov esi, dword [esp + 0x100]
jmp 0x6d2581
mov ebp, edi
mov edi, dword [esp + 0xfc]
mov esi, eax
mov eax, ebp
call fcn.00451ff0
mov eax, esi
jmp 0x6d2617
mov dword [esp + 0xf8], edi
lea eax, [0x891380]
mov dword [esp], eax
mov ecx, dword [esp + 0x108]
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ebx
call fcn.0043d1d0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
lea ebx, [ecx + 1]
mov ecx, dword [esp + 0x11c]
mov edx, dword [esp + 0x118]
mov ebp, dword [esp + 0x3c]
mov edi, dword [esp + 0xf8]
mov dword [esp + 0xe0], eax
mov eax, dword [esp + 0x120]
jmp 0x6d25f1
mov dword [esp + 0x4c], edi
nop
mov ebp, dword [esp + 0x114]
mov esi, dword [ebp + 0x10]
lea edx, [ebp + 0x10]
mov dword [esp + 0xf4], edx
test esi, esi
je 0x6d2b1c
mov ecx, dword [0xc6be00]
mov ebx, dword [esi + 0x10]
test ecx, ecx
jne 0x6d2ad7
mov dword [ebp + 0x10], ebx
mov edi, esi
mov ebx, eax
xor eax, eax
call fcn.00452291
mov dword [esp + 0xdc], esi
mov byte [esi], 3
movzx ecx, word [esp + 0x24]
mov word [esi + 2], cx
mov ecx, dword [esi + 0x14]
mov edi, dword [esi + 0x1c]
mov edx, dword [esp + 0x30]
cmp edx, edi
ja 0x6d2aa4
mov dword [esp + 0x84], edi
mov dword [esp + 0x104], ecx
mov dword [esp], ecx
mov eax, dword [esp + 0x10c]
mov dword [esp + 4], eax
shl edx, 2
mov dword [esp + 8], edx
call fcn.004529a0
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0xdc]
mov dword [ecx + 0x18], eax
mov edx, dword [esp + 0x84]
mov dword [ecx + 0x1c], edx
mov edx, dword [0xc6be00]
test edx, edx
jne 0x6d2a8c
mov ebx, dword [esp + 0x104]
mov dword [ecx + 0x14], ebx
mov ebx, dword [esp + 0x118]
mov ebp, dword [esp + 0x114]
mov esi, dword [esp + 0x11c]
mov edi, dword [esp + 0x64]
mov edx, dword [esp + 0x4c]
jmp 0x6d27c6
inc edx
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x114]
mov ebp, dword [esp + 0x11c]
mov esi, dword [esp + 0x64]
mov ecx, dword [esp + 0xdc]
mov ebp, dword [esp + 0x114]
mov esi, dword [esp + 0x11c]
mov edi, dword [esp + 0x64]
cmp edx, edi
jge 0x6d281c
cmp edx, esi
jae 0x6d38a2
mov dword [esp + 0x84], edx
mov ecx, dword [ebx + edx*4]
mov dword [esp], ebp
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.006d38e0
mov eax, dword [0xc6be00]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x84]
mov ebx, dword [esp + 0x118]
lea edi, [ebx + edx*4]
test eax, eax
jne 0x6d2810
mov dword [ebx + edx*4], ecx
jmp 0x6d2796
mov eax, ecx
call fcn.00451ff0
jmp 0x6d2796
mov edx, dword [esp + 0x120]
cmp edi, edx
ja 0x6d389b
mov eax, dword [esp + 0x4c]
cmp eax, edi
ja 0x6d3894
mov dword [esp], ebp
sub edx, eax
mov dword [esp + 0x84], edx
mov esi, eax
shl eax, 2
neg edx
sar edx, 0x1f
and edx, eax
lea eax, [ebx + edx]
mov dword [esp + 4], eax
sub edi, esi
mov dword [esp + 8], edi
mov edx, dword [esp + 0x84]
mov dword [esp + 0xc], edx
mov byte [esp + 0x10], 0x13
call fcn.006d1fe0
mov eax, dword [esp + 0x14]
mov dword [esp + 0xc0], eax
nop
mov ecx, dword [esp + 0x114]
mov edi, dword [ecx + 0x10]
test edi, edi
je 0x6d2a6c
mov dword [esp + 0xd4], edi
mov ebx, dword [0xc6be00]
mov ebp, dword [edi + 0x10]
test ebx, ebx
jne 0x6d2a3a
mov dword [ecx + 0x10], ebp
mov edx, eax
xor eax, eax
call fcn.00452291
mov ecx, dword [esp + 0xd4]
mov dword [esp + 0xd0], ecx
mov byte [ecx], 0x12
mov ebx, dword [ecx + 4]
mov ebp, dword [ecx + 0xc]
cmp ebp, 2
jb 0x6d29f0
mov esi, 2
mov edi, ebp
mov ebp, dword [0xc6be00]
test ebp, ebp
jne 0x6d29c1
mov ebp, dword [esp + 0xdc]
mov dword [ebx], ebp
mov dword [ebx + 4], edx
mov dword [ecx + 8], esi
mov dword [ecx + 0xc], edi
mov ebp, dword [0xc6be00]
test ebp, ebp
jne 0x6d29b0
mov dword [ecx + 4], ebx
mov ebx, dword [esp + 0x3c]
lea ebp, [ebx + 1]
mov esi, dword [esp + 0x40]
cmp ebp, esi
ja 0x6d296a
mov edx, dword [esp + 0x108]
mov dword [esp + 0x40], esi
mov edi, ebp
mov ebp, dword [0xc6be00]
lea esi, [edx + ebx*4]
test ebp, ebp
jne 0x6d2959
mov dword [edx + ebx*4], ecx
mov eax, dword [esp + 0x120]
mov ecx, dword [esp + 0x11c]
mov ebp, dword [esp + 0x40]
mov ebx, edx
mov esi, edi
mov edx, dword [esp + 0x118]
jmp 0x6d261f
mov ebx, edi
mov edi, esi
mov eax, ecx
call fcn.00451ff0
xor eax, eax
mov edi, ebx
jmp 0x6d2937
lea eax, [0x891380]
mov dword [esp], eax
mov ecx, dword [esp + 0x108]
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ebp
call fcn.0043d1d0
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
lea ebp, [eax + 1]
xor eax, eax
mov ecx, dword [esp + 0xd0]
mov ebx, dword [esp + 0x3c]
jmp 0x6d2921
lea edi, [ecx + 4]
mov eax, ebx
call fcn.00451ff0
xor eax, eax
jmp 0x6d290b
mov dword [esp + 0x84], edi
mov edi, ebx
mov eax, dword [esp + 0xdc]
call fcn.00451ff0
lea ebp, [ebx + 4]
mov edi, ebp
mov eax, edx
call fcn.00451ff0
xor eax, eax
mov edi, dword [esp + 0x84]
jmp 0x6d28f4
lea eax, [0x891380]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], 0
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], 2
call fcn.0043d1d0
mov ebx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ebp, dword [esp + 0x1c]
lea esi, [eax + 2]
xor eax, eax
mov ecx, dword [esp + 0xd0]
mov edx, dword [esp + 0xc0]
jmp 0x6d28d8
mov eax, edi
mov edi, dword [esp + 0xf4]
mov ecx, eax
mov eax, ebp
call fcn.00451ff0
lea edx, [0x89f0e0]
mov dword [esp], edx
mov dword [esp + 4], ecx
call fcn.00410e90
xor eax, eax
mov edx, dword [esp + 0xc0]
jmp 0x6d28b3
lea eax, [0x89f0e0]
mov dword [esp], eax
call fcn.0040a800
mov ecx, dword [esp + 4]
xor eax, eax
mov edx, dword [esp + 0xc0]
jmp 0x6d28ba
lea edi, [ecx + 0x14]
mov edx, eax
mov eax, dword [esp + 0x104]
call fcn.00451ff0
mov eax, edx
jmp 0x6d2777
lea eax, [0x843080]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], 0
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], edx
call fcn.0043d1d0
mov edi, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x30]
jmp 0x6d271f
mov dword [esp + 0xcc], esi
mov edi, edx
mov eax, ebx
call fcn.00451ff0
lea ecx, [0x89f0e0]
mov dword [esp], ecx
mov dword [esp + 4], esi
call fcn.00410e90
xor eax, eax
mov edx, dword [esp + 0xf4]
mov ebx, dword [esp + 0x120]
mov ebp, dword [esp + 0x114]
mov esi, dword [esp + 0xcc]
jmp 0x6d26fa
lea eax, [0x89f0e0]
mov dword [esp], eax
call fcn.0040a800
mov esi, dword [esp + 4]
xor eax, eax
mov edx, dword [esp + 0xf4]
mov ebx, dword [esp + 0x120]
mov ebp, dword [esp + 0x114]
jmp 0x6d26fa
mov ebp, dword [ebx + 0x18]
mov esi, dword [ebx + 0x14]
mov eax, dword [ebx + 0x1c]
movzx ebx, word [ebx + 2]
and ebx, 1
mov dword [esp + 0x28], ebp
mov ebp, esi
mov esi, eax
mov eax, dword [esp + 0x120]
jmp 0x6d251e
xor ebx, ebx
xor ebp, ebp
xor esi, esi
xor ebx, ebx
mov word [esp + 0x26], bx
xor ebx, ebx
jmp 0x6d256e
mov esi, dword [esp + 0x3c]
mov eax, ebp
mov ecx, ebx
xor edx, edx
xor edi, edi
xor eax, eax
mov dword [esp + 0xd8], eax
xor ecx, ecx
mov dword [esp + 0x84], ecx
mov eax, ebp
mov ecx, ebx
jmp 0x6d2bc2
inc edx
mov dword [esp + 0xd8], ebp
mov ebp, dword [esp + 0x84]
mov dword [esp + 0x84], ebx
mov ebx, esi
mov esi, dword [esp + 0x3c]
mov dword [esp + 0x10c], ebx
cmp edx, esi
jg 0x6d31ef
mov dword [esp + 0x60], edx
mov dword [esp + 0x80], ebp
mov dword [esp + 0x50], edi
jge 0x6d31e1
jae 0x6d388b
mov ebx, dword [ecx + edx*4]
movzx ebp, byte [ebx]
xchg ebp, eax
cmp al, 2
xchg ebp, eax
jne 0x6d31ab
xor ebx, ebx
mov dword [esp + 0xb8], ebx
mov ebp, dword [esp + 0xd8]
test ebp, ebp
jne 0x6d316c
mov dword [esp + 0xa0], eax
xor eax, eax
mov byte [esp + 0x21], al
mov eax, dword [esp + 0xa0]
movzx esi, byte [esp + 0x21]
xchg esi, eax
test al, al
xchg esi, eax
je 0x6d2ca2
movzx esi, byte [ebp]
xchg esi, eax
cmp al, 3
xchg esi, eax
jne 0x6d3141
cmp dword [ebp + 0x18], 1
jne 0x6d3141
mov dword [esp + 0x98], eax
mov eax, 1
mov byte [esp + 0x20], al
mov eax, dword [esp + 0x98]
movzx ebx, byte [esp + 0x20]
test bl, bl
je 0x6d30e6
mov ebx, 1
test bl, bl
je 0x6d2ca2
mov ebx, dword [esp + 0x84]
mov esi, dword [esp + 0x10c]
mov esi, dword [esp + 0x80]
mov dword [esp + 0x84], esi
mov esi, dword [esp + 0x10c]
jmp 0x6d2ba6
mov ebx, dword [esp + 0xb8]
cmp edx, edi
jne 0x6d2cd6
mov ebp, dword [esp + 0x10c]
mov esi, dword [esp + 0x80]
mov edi, dword [esp + 0x84]
mov dword [esp + 0x84], esi
mov esi, ebp
mov ebp, ebx
mov ebx, edi
mov edi, edx
jmp 0x6d2ba6
mov dword [esp + 0xe4], ebx
lea esi, [edi + 1]
cmp edx, esi
jne 0x6d2dea
mov ebp, dword [esp + 0x3c]
cmp edi, ebp
jae 0x6d3879
mov esi, dword [esp + 0x84]
lea ebp, [esi + 1]
mov ebx, dword [ecx + edi*4]
mov edi, ebx
mov ebx, dword [esp + 0x80]
cmp ebp, ebx
ja 0x6d2d86
mov dword [esp + 0x90], eax
mov eax, dword [esp + 0x10c]
mov dword [esp + 0xe0], eax
mov eax, dword [esp + 0x90]
mov dword [esp + 0x84], ebp
mov dword [esp + 0x7c], ebx
mov ebx, dword [esp + 0xe0]
lea ebp, [ebx + esi*4]
mov dword [esp + 0xf0], ebp
mov ebp, dword [0xc6be00]
test ebp, ebp
jne 0x6d2d70
mov dword [ebx + esi*4], edi
mov ebp, dword [esp + 0x7c]
mov esi, dword [esp + 0x84]
mov edi, esi
mov esi, ebp
mov ebp, ebx
mov ebx, dword [esp + 0xe4]
jmp 0x6d2cc2
mov ebp, edi
mov edi, dword [esp + 0xf0]
mov esi, eax
mov eax, ebp
call fcn.00451ff0
mov eax, esi
jmp 0x6d2d53
mov dword [esp + 0xf8], edi
lea eax, [0x891380]
mov dword [esp], eax
mov ecx, dword [esp + 0x10c]
mov dword [esp + 4], ecx
mov dword [esp + 8], esi
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], ebp
call fcn.0043d1d0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
lea ebp, [ecx + 1]
mov ecx, dword [esp + 0x108]
mov edx, dword [esp + 0x60]
mov esi, dword [esp + 0x84]
mov edi, dword [esp + 0xf8]
mov dword [esp + 0xe0], eax
mov eax, dword [esp + 0x40]
jmp 0x6d2d2a
mov esi, dword [esp + 0x114]
jmp 0x6d2e26
lea edi, [edx + 1]
mov eax, dword [esp + 0x50]
mov ecx, dword [esp + 0x114]
mov edx, dword [esp + 0x3c]
mov ebp, dword [esp + 0x60]
mov eax, dword [esp + 0x40]
mov ecx, ebx
mov edx, ebp
mov ebx, dword [esp + 0xe4]
mov ebp, dword [esp + 0xd8]
mov esi, dword [esp + 0x114]
cmp edi, edx
jge 0x6d2e86
mov ebx, dword [esp + 0x3c]
cmp edi, ebx
jae 0x6d3870
mov dword [esp + 0x7c], edi
mov eax, dword [ecx + edi*4]
mov dword [esp], esi
mov dword [esp + 4], eax
mov eax, dword [esp + 0x50]
cmp edi, eax
setne dl
mov byte [esp + 8], dl
call fcn.006d3b10
mov eax, dword [0xc6be00]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x7c]
mov ebx, dword [esp + 0x108]
lea edi, [ebx + edx*4]
test eax, eax
jne 0x6d2e7a
mov dword [ebx + edx*4], ecx
jmp 0x6d2df3
mov eax, ecx
call fcn.00451ff0
jmp 0x6d2df3
cmp edx, eax
ja 0x6d3867
mov edi, dword [esp + 0x50]
cmp edi, edx
ja 0x6d385e
mov dword [esp], esi
sub eax, edi
mov ebp, eax
neg eax
shl edi, 2
sar eax, 0x1f
and eax, edi
add eax, ecx
mov dword [esp + 4], eax
mov eax, dword [esp + 0x50]
sub edx, eax
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebp
mov byte [esp + 0x10], 0x13
call fcn.006d1fe0
mov eax, dword [esp + 0x14]
mov dword [esp + 0xbc], eax
nop
mov ecx, dword [esp + 0x114]
mov edi, dword [ecx + 0x10]
test edi, edi
je 0x6d30c6
mov dword [esp + 0xc8], edi
mov ebx, dword [0xc6be00]
mov ebp, dword [edi + 0x10]
test ebx, ebx
jne 0x6d3096
mov dword [ecx + 0x10], ebp
mov edx, eax
xor eax, eax
call fcn.00452291
mov ecx, dword [esp + 0xc8]
mov dword [esp + 0xc4], ecx
mov byte [ecx], 0x12
mov ebx, dword [ecx + 0xc]
mov ebp, dword [ecx + 4]
cmp ebx, 2
jb 0x6d304c
mov esi, 2
mov edi, ebx
mov ebx, dword [0xc6be00]
test ebx, ebx
jne 0x6d3023
mov ebx, dword [esp + 0xd8]
mov dword [ebp], ebx
mov dword [ebp + 4], edx
mov dword [ecx + 8], esi
mov dword [ecx + 0xc], edi
mov ebx, dword [0xc6be00]
test ebx, ebx
jne 0x6d3012
mov dword [ecx + 4], ebp
mov ebx, dword [esp + 0x84]
lea ebp, [ebx + 1]
mov esi, dword [esp + 0x80]
cmp ebp, esi
ja 0x6d2fc9
mov edx, dword [esp + 0x10c]
mov dword [esp + 0x84], esi
mov edi, ebp
mov ebp, dword [0xc6be00]
lea esi, [edx + ebx*4]
test ebp, ebp
jne 0x6d2fb8
mov dword [edx + ebx*4], ecx
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x108]
mov ebp, dword [esp + 0x84]
mov esi, edi
mov ebx, edx
mov edx, dword [esp + 0x60]
jmp 0x6d2d5e
mov ebx, edi
mov edi, esi
mov eax, ecx
call fcn.00451ff0
xor eax, eax
mov edi, ebx
jmp 0x6d2f99
lea eax, [0x891380]
mov dword [esp], eax
mov ecx, dword [esp + 0x10c]
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ebp
call fcn.0043d1d0
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
lea ebp, [eax + 1]
xor eax, eax
mov ecx, dword [esp + 0xc4]
mov ebx, dword [esp + 0x84]
jmp 0x6d2f80
lea edi, [ecx + 4]
mov eax, ebp
call fcn.00451ff0
xor eax, eax
jmp 0x6d2f64
mov dword [esp + 0x7c], edi
mov edi, ebp
mov eax, dword [esp + 0xd8]
call fcn.00451ff0
lea ebx, [ebp + 4]
mov edi, ebx
mov eax, edx
call fcn.00451ff0
xor eax, eax
mov edi, dword [esp + 0x7c]
jmp 0x6d2f4d
lea eax, [0x891380]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], 0
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], 2
call fcn.0043d1d0
mov ebp, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
lea esi, [eax + 2]
xor eax, eax
mov ecx, dword [esp + 0xc4]
mov edx, dword [esp + 0xbc]
jmp 0x6d2f30
lea edx, [ecx + 0x10]
mov eax, edi
mov edi, edx
mov ebx, eax
mov eax, ebp
call fcn.00451ff0
lea edx, [0x89f0e0]
mov dword [esp], edx
mov dword [esp + 4], ebx
call fcn.00410e90
xor eax, eax
mov edx, dword [esp + 0xbc]
jmp 0x6d2f0b
lea eax, [0x89f0e0]
mov dword [esp], eax
call fcn.0040a800
mov ecx, dword [esp + 4]
xor eax, eax
mov edx, dword [esp + 0xbc]
jmp 0x6d2f12
xchg esi, eax
cmp al, 0x11
xchg esi, eax
jne 0x6d313a
mov ebx, dword [ebp + 0x2c]
cmp dword [ebp + 0x28], ebx
jne 0x6d313a
mov ebx, dword [ebp + 4]
mov esi, dword [ebp + 8]
test esi, esi
jbe 0x6d3882
mov ebx, dword [ebx]
movzx esi, byte [ebx]
xchg esi, eax
cmp al, 3
xchg esi, eax
jne 0x6d311f
cmp dword [ebx + 0x18], 1
jne 0x6d311f
mov ebx, 1
jmp 0x6d2c76
xchg esi, eax
cmp al, 4
xchg esi, eax
je 0x6d3115
xchg esi, eax
cmp al, 5
xchg esi, eax
je 0x6d3115
xchg esi, eax
cmp al, 6
xchg esi, eax
sete bl
jmp 0x6d2c76
xor ebx, ebx
jmp 0x6d2c76
xchg esi, eax
cmp al, 4
xchg esi, eax
je 0x6d2c4d
xchg esi, eax
cmp al, 5
xchg esi, eax
je 0x6d2c4d
xchg esi, eax
cmp al, 6
xchg esi, eax
sete al
mov byte [esp + 0x20], al
mov eax, dword [esp + 0x40]
jmp 0x6d2c64
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.006da2a0
movzx eax, byte [esp + 8]
mov ecx, dword [esp + 0x108]
mov edx, dword [esp + 0x60]
mov ebx, dword [esp + 0xb8]
mov ebp, dword [esp + 0xd8]
mov esi, dword [esp + 0x3c]
mov edi, dword [esp + 0x50]
mov byte [esp + 0x21], al
mov eax, dword [esp + 0x40]
jmp 0x6d2c29
xchg ebp, eax
cmp al, 0x12
xchg ebp, eax
jne 0x6d31d8
mov ebp, dword [ebx + 4]
mov esi, dword [ebx + 8]
test esi, esi
jle 0x6d31d8
mov ebx, dword [ebp]
cmp byte [ebx], 2
jne 0x6d31cf
mov esi, dword [esp + 0x3c]
xor ebx, ebx
jmp 0x6d2bff
mov esi, dword [esp + 0x3c]
jmp 0x6d2bff
mov esi, dword [esp + 0x3c]
jmp 0x6d2bff
mov ebp, dword [esp + 0xd8]
xor ebx, ebx
jmp 0x6d2ca9
mov edx, dword [esp + 0x84]
mov eax, ebx
xor ecx, ecx
xor esi, esi
xor edi, edi
jmp 0x6d3211
inc ecx
mov ebx, dword [esp + 0x84]
mov ebx, edx
mov edx, dword [esp + 0x84]
mov dword [esp + 0x3c], edi
mov dword [esp + 0x108], ebx
cmp ecx, edx
jg 0x6d369a
jge 0x6d3257
jae 0x6d3855
mov edx, dword [eax + ecx*4]
movzx ebx, byte [edx]
cmp bl, 3
jne 0x6d367d
cmp dword [edx + 0x18], 1
jne 0x6d367d
mov edx, 1
test dl, dl
je 0x6d3257
mov edx, dword [esp + 0x108]
jmp 0x6d3200
mov dword [esp + 0x68], ecx
cmp ecx, esi
jne 0x6d331f
mov edx, dword [esp + 0x84]
cmp ecx, edx
mov ebx, dword [esp + 0x108]
jge 0x6d3319
jae 0x6d3816
lea esi, [edi + 1]
mov edx, dword [eax + ecx*4]
cmp esi, ebp
ja 0x6d32c6
mov dword [esp + 0x3c], esi
mov dword [esp + 0x40], ebp
mov ebp, dword [0xc6be00]
lea esi, [ebx + edi*4]
test ebp, ebp
jne 0x6d32b7
mov dword [ebx + edi*4], edx
mov edx, dword [esp + 0x40]
mov ebp, dword [esp + 0x3c]
lea esi, [ecx + 1]
mov edi, ebp
mov ebp, edx
mov edx, ebx
jmp 0x6d3200
mov edi, esi
mov ebp, eax
mov eax, edx
call fcn.00451ff0
mov eax, ebp
jmp 0x6d32a1
mov dword [esp + 0x78], edi
mov dword [esp + 0xf8], edx
lea eax, [0x891380]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], edi
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], esi
call fcn.0043d1d0
mov ebx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ebp, dword [esp + 0x1c]
lea esi, [eax + 1]
mov eax, dword [esp + 0x10c]
mov ecx, dword [esp + 0x68]
mov edx, dword [esp + 0xf8]
mov edi, dword [esp + 0x78]
jmp 0x6d3289
mov edx, ebp
mov ebp, edi
jmp 0x6d32a9
lea edx, [esi + 1]
cmp ecx, edx
jne 0x6d3410
mov edx, dword [esp + 0x84]
cmp esi, edx
jae 0x6d384c
lea ebx, [edi + 1]
mov esi, dword [eax + esi*4]
cmp ebx, ebp
ja 0x6d33ac
mov dword [esp + 0x88], eax
mov eax, dword [esp + 0x108]
mov dword [esp + 0xe0], eax
mov eax, dword [esp + 0x88]
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x40], ebp
mov ebx, dword [esp + 0xe0]
lea ebp, [ebx + edi*4]
mov dword [esp + 0xec], ebp
mov ebp, dword [0xc6be00]
test ebp, ebp
jne 0x6d3396
mov dword [ebx + edi*4], esi
cmp ecx, edx
mov ebp, dword [esp + 0x40]
mov esi, dword [esp + 0x3c]
mov edi, esi
jmp 0x6d3273
mov edi, dword [esp + 0xec]
mov ebp, eax
mov eax, esi
call fcn.00451ff0
cmp ecx, edx
mov eax, ebp
jmp 0x6d3387
mov dword [esp + 0xf8], esi
lea eax, [0x891380]
mov dword [esp], eax
mov ecx, dword [esp + 0x108]
mov dword [esp + 4], ecx
mov dword [esp + 8], edi
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], ebx
call fcn.0043d1d0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov ebp, dword [esp + 0x1c]
lea ebx, [ecx + 1]
mov ecx, dword [esp + 0x68]
mov edx, dword [esp + 0x84]
mov esi, dword [esp + 0xf8]
mov edi, dword [esp + 0x3c]
mov dword [esp + 0xe0], eax
mov eax, dword [esp + 0x10c]
jmp 0x6d335f
mov dword [esp + 0x74], ebp
mov dword [esp + 0x80], edx
mov dword [esp + 0x44], esi
mov ebx, dword [esp + 0x84]
jmp 0x6d3443
mov ebx, dword [esp + 0x54]
inc ebx
mov ebp, dword [esp + 0x84]
mov ebp, dword [esp + 0x74]
mov esi, edx
mov edx, ebx
mov ebx, dword [esp + 0x84]
mov dword [esp + 0x7c], esi
cmp edx, ecx
jge 0x6d3491
cmp esi, ebx
jae 0x6d3843
mov ebp, dword [eax + esi*4]
movzx esi, byte [ebp]
cmp edx, ebx
jae 0x6d383a
mov dword [esp + 0x54], edx
mov ebx, dword [eax + edx*4]
movzx edx, byte [ebx]
xchg esi, eax
cmp al, dl
xchg esi, eax
jae 0x6d3478
mov edx, dword [esp + 0x54]
jmp 0x6d3428
jne 0x6d348d
mov edx, dword [ebx + 0x18]
cmp dword [ebp + 0x18], edx
setl dl
test dl, dl
jne 0x6d3472
mov edx, dword [esp + 0x7c]
jmp 0x6d3428
xor edx, edx
jmp 0x6d3483
mov edx, dword [esp + 0x44]
cmp edx, ebx
jae 0x6d3831
mov ebp, dword [eax + edx*4]
mov dword [esp + 0xf8], ebp
lea ebp, [eax + edx*4]
cmp esi, ebx
jae 0x6d3828
mov dword [esp + 0xe8], ebp
mov ebp, dword [0xc6be00]
mov ebx, dword [eax + esi*4]
lea esi, [eax + esi*4]
test ebp, ebp
jne 0x6d3651
mov dword [eax + edx*4], ebx
mov ebx, dword [esp + 0x7c]
mov ebp, dword [esp + 0xf8]
mov dword [eax + ebx*4], ebp
mov ebx, dword [esp + 0x84]
mov ebp, dword [esp + 0x80]
jmp 0x6d3511
lea esi, [eax + 1]
mov eax, dword [esp + 0x84]
mov edx, dword [esp + 0x44]
mov ebx, dword [esp + 0x68]
mov eax, ecx
mov ecx, ebx
mov ebx, dword [esp + 0x84]
mov edi, dword [esp + 0x3c]
mov ebp, esi
cmp ebp, ecx
jge 0x6d357c
mov esi, dword [eax + edx*4]
cmp ebp, ebx
jae 0x6d381f
mov dword [esp + 0x48], ebp
mov ecx, dword [eax + ebp*4]
mov dword [esp], esi
mov dword [esp + 4], ecx
call fcn.006d5800
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x10c]
mov edx, dword [ecx + eax*4]
test byte [edx], al
mov ebx, dword [0xc6be00]
mov ebp, dword [esp + 0x114]
mov esi, dword [ebp + 0x10]
test ebx, ebx
jne 0x6d355f
mov dword [edx + 0x10], esi
mov dword [ebp + 0x10], edx
jmp 0x6d34ee
lea edi, [edx + 0x10]
mov ebx, eax
mov eax, esi
call fcn.00451ff0
lea edi, [ebp + 0x10]
mov eax, edx
call fcn.00451ff0
mov eax, ebx
jmp 0x6d34ee
mov ecx, dword [eax + edx*4]
mov dword [esp], ecx
call fcn.006d1e10
mov eax, dword [esp + 0x3c]
lea ecx, [eax + 1]
mov edx, dword [esp + 0x44]
mov ebx, dword [esp + 0x10c]
mov edx, dword [ebx + edx*4]
mov ebp, dword [esp + 0x74]
cmp ecx, ebp
ja 0x6d35ff
mov esi, dword [esp + 0x108]
mov dword [esp + 0x40], ebp
mov edi, ebx
mov ebx, dword [0xc6be00]
lea ebp, [esi + eax*4]
test ebx, ebx
jne 0x6d35e1
mov dword [esi + eax*4], edx
mov eax, dword [esp + 0x68]
mov edx, dword [esp + 0x84]
cmp eax, edx
mov eax, edi
mov ebx, esi
mov ebp, dword [esp + 0x40]
mov esi, ecx
mov ecx, dword [esp + 0x68]
jmp 0x6d338f
mov eax, edi
mov edi, ebp
mov ebx, eax
mov eax, edx
call fcn.00451ff0
mov eax, dword [esp + 0x68]
mov edx, dword [esp + 0x84]
cmp eax, edx
mov edi, ebx
jmp 0x6d35ce
mov dword [esp + 0xf8], edx
lea edx, [0x891380]
mov dword [esp], edx
mov ebx, dword [esp + 0x108]
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], ecx
call fcn.0043d1d0
mov esi, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ebp, dword [esp + 0x1c]
lea ecx, [eax + 1]
mov eax, dword [esp + 0x3c]
mov edx, dword [esp + 0xf8]
mov ebx, dword [esp + 0x10c]
jmp 0x6d35ab
mov ebp, edi
mov edi, dword [esp + 0xe8]
mov eax, ebx
call fcn.00451ff0
mov edi, esi
mov eax, dword [esp + 0xf8]
call fcn.00451ff0
mov eax, dword [esp + 0x10c]
mov edi, ebp
jmp 0x6d34de
cmp bl, 4
je 0x6d3245
cmp bl, 5
je 0x6d3245
cmp bl, 6
sete dl
jmp 0x6d324a
mov eax, ebx
xor ecx, ecx
xor edx, edx
jmp 0x6d36a6
mov ebx, ecx
mov ecx, esi
cmp ecx, edi
jge 0x6d37b5
mov dword [esp + 0x10c], ebx
lea esi, [ecx + 1]
cmp esi, edi
jge 0x6d37ae
cmp ecx, edi
jae 0x6d380d
mov ebx, dword [eax + ecx*4]
cmp byte [ebx], 2
jne 0x6d37a7
cmp esi, edi
jae 0x6d3804
mov ebx, dword [eax + ecx*4 + 4]
cmp byte [ebx], 2
jne 0x6d36ee
mov ecx, dword [esp + 0x10c]
jmp 0x6d36a2
cmp ecx, edi
jae 0x6d37fb
mov dword [esp + 0x70], esi
lea ebx, [edx + 1]
mov esi, dword [eax + ecx*4]
cmp ebx, ebp
ja 0x6d374d
mov ecx, dword [esp + 0x10c]
mov dword [esp + 0x84], ebx
mov dword [esp + 0x40], ebp
mov ebx, dword [0xc6be00]
lea ebp, [ecx + edx*4]
test ebx, ebx
jne 0x6d373a
mov dword [ecx + edx*4], esi
mov esi, dword [esp + 0x70]
mov ebp, dword [esp + 0x40]
mov edx, dword [esp + 0x84]
jmp 0x6d36a2
mov edx, edi
mov edi, ebp
mov ebx, eax
mov eax, esi
call fcn.00451ff0
mov eax, ebx
mov edi, edx
jmp 0x6d3726
mov dword [esp + 0x6c], edx
mov dword [esp + 0xf8], esi
lea eax, [0x891380]
mov dword [esp], eax
mov ecx, dword [esp + 0x10c]
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], ebx
call fcn.0043d1d0
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ebp, dword [esp + 0x1c]
lea ebx, [eax + 1]
mov eax, dword [esp + 0x108]
mov edx, dword [esp + 0x6c]
mov esi, dword [esp + 0xf8]
mov edi, dword [esp + 0x3c]
jmp 0x6d370b
cmp ecx, edi
jmp 0x6d36f0
cmp ecx, edi
jmp 0x6d36f0
mov dword [esp + 0x124], ebx
mov dword [esp + 0x128], edx
mov dword [esp + 0x12c], ebp
add esp, 0x110
ret
mov eax, dword [esp + 0x118]
mov dword [esp + 0x124], eax
mov dword [esp + 0x128], ecx
mov eax, dword [esp + 0x120]
mov dword [esp + 0x12c], eax
add esp, 0x110
ret
mov eax, ecx
mov ecx, edi
call fcn.00452070
mov eax, esi
mov ecx, edi
call fcn.00452070
mov eax, ecx
mov ecx, edi
call fcn.00452070
mov eax, ecx
mov ecx, edx
call fcn.00452070
mov eax, ebp
mov ecx, ebx
call fcn.00452070
mov eax, esi
mov ecx, ebx
call fcn.00452070
mov eax, edx
mov ecx, ebx
call fcn.00452070
mov eax, edx
mov ecx, ebx
call fcn.00452070
mov eax, esi
mov ecx, ebx
call fcn.00452070
mov eax, esi
mov ecx, edx
call fcn.00452070
mov eax, ecx
mov ecx, edx
call fcn.00452070
mov eax, edi
mov ecx, edx
call fcn.004520d0
mov ecx, edx
mov edx, eax
call fcn.004520b0
mov eax, edi
mov ecx, ebx
call fcn.00452070
mov eax, edi
mov ecx, ebp
call fcn.00452070
xor eax, eax
mov ecx, esi
call fcn.00452070
mov eax, edx
mov ecx, esi
call fcn.00452070
mov ecx, edi
call fcn.004520d0
mov ecx, edi
call fcn.004520b0
mov eax, edx
mov ecx, esi
call fcn.00452070
mov eax, edi
call fcn.00452070
mov ecx, ebx
mov edx, ebp
call fcn.004520b0
mov eax, ebx
mov ecx, esi
call fcn.00452070
mov eax, esi
call fcn.00452070
nop
call fcn.004507b0
jmp fcn.006d23c0