Function at 0x6ebb50
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0xa4]
cmp eax, dword [ecx + 8]
jbe 0x6ec9d3
sub esp, 0x124
mov eax, dword [esp + 0x128]
mov dword [esp], eax
mov ecx, dword [esp + 0x12c]
mov dword [esp + 4], ecx
call fcn.006ed180
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 8]
mov ebx, dword [esp + 0x14]
test ebx, ebx
jne 0x6ec84c
mov eax, dword [esp + 0x130]
cmp eax, 3
jne 0x6ec82d
mov ebx, 2
lea ebp, [0x7dc26b]
test eax, eax
je 0x6ec820
xor esi, esi
mov dword [esp + 0x48], ebx
mov dword [esp + 0x90], ebp
mov dword [esp + 0x50], ecx
xchg esi, eax
mov byte [esp + 0x134], al
xchg esi, eax
mov dword [esp + 0x98], edx
xchg esi, eax
test al, al
xchg esi, eax
je 0x6ec805
mov edi, dword [esp + 0x12c]
cmp edi, 1
jl 0x6ec7f7
lea eax, [edi - 1]
cmp eax, edi
ja 0x6ec9cc
sub edi, eax
mov dword [esp + 0x6c], edi
xchg edi, ebx
neg ebx
xchg edi, ebx
sar edi, 0x1f
and edi, eax
mov eax, dword [esp + 0x128]
add edi, eax
mov esi, dword [esp + 0x6c]
cmp esi, 1
je 0x6ec7ba
xor esi, esi
xchg esi, eax
test al, al
xchg esi, eax
je 0x6ec7a6
mov esi, dword [esp + 0x12c]
lea edi, [esi - 1]
test edi, edi
jl 0x6ec9c5
mov dword [esp + 0x70], eax
mov eax, 1
mov byte [esp + 0x2b], al
mov dword [esp + 0x6c], edi
lea eax, [0x771de0]
mov dword [esp], eax
shr ecx, 1
mov dword [esp + 0x68], ecx
mov dword [esp + 4], ecx
mov dword [esp + 8], ecx
call fcn.00438c00
mov eax, dword [esp + 0x14]
mov dword [esp + 0x3c], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x80], ecx
mov edx, dword [esp + 0x10]
mov dword [esp + 0x38], edx
lea ebx, [0x7d7c60]
mov dword [esp], ebx
mov ebx, dword [esp + 0x68]
mov dword [esp + 4], ebx
mov dword [esp + 8], ebx
call fcn.00438c00
mov eax, dword [esp + 0xc]
mov dword [esp + 0x7c], eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x34], ecx
mov edx, dword [esp + 0x10]
mov dword [esp + 0x30], edx
mov dword [esp], 0
mov dword [esp + 4], 0
mov dword [esp + 8], 0
call fcn.0043c1f0
mov eax, dword [esp + 0x14]
mov dword [esp + 0x64], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x60], ecx
mov edx, dword [esp + 0xc]
mov dword [esp + 0xa8], edx
lea ebx, [0x7a4640]
mov dword [esp], ebx
call fcn.00409dc0
mov edi, dword [esp + 4]
mov eax, dword [esp + 0x60]
mov dword [edi + 4], eax
mov eax, dword [esp + 0x64]
mov dword [edi + 8], eax
mov eax, dword [0xbc7270]
test eax, eax
jne 0x6ec795
mov eax, dword [esp + 0xa8]
mov dword [edi], eax
mov dword [esp + 0x9c], edi
mov dword [esp], edi
mov byte [esp + 4], 0x5e
call fcn.0045bd20
mov dword [esp], 0
mov dword [esp + 4], 0
mov dword [esp + 8], 0
call fcn.0043c1f0
mov eax, dword [esp + 0x14]
mov dword [esp + 0x64], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x60], ecx
mov edx, dword [esp + 0xc]
mov dword [esp + 0xa8], edx
lea ebx, [0x7a4640]
mov dword [esp], ebx
call fcn.00409dc0
mov edi, dword [esp + 4]
mov eax, dword [esp + 0x60]
mov dword [edi + 4], eax
mov eax, dword [esp + 0x64]
mov dword [edi + 8], eax
mov eax, dword [0xbc7270]
test eax, eax
jne 0x6ec784
mov eax, dword [esp + 0xa8]
mov dword [edi], eax
mov dword [esp + 0xa0], edi
mov eax, dword [esp + 0x6c]
mov ecx, dword [esp + 0x128]
mov edx, dword [esp + 0x98]
mov ebx, dword [esp + 0x50]
xor ebp, ebp
xor esi, esi
jmp 0x6ebe14
mov eax, dword [esp + 0x54]
add eax, 2
mov ecx, dword [esp + 0x6c]
mov edx, dword [esp + 0x128]
mov ebx, dword [esp + 0x98]
mov esi, dword [esp + 0x50]
mov ecx, edx
mov edx, ebx
mov ebx, esi
mov edi, dword [esp + 0xa0]
mov ebp, eax
mov esi, dword [esp + 0x5c]
mov eax, dword [esp + 0x6c]
cmp ebp, ebx
jge 0x6ec371
jae 0x6ec9be
mov edi, dword [edx + ebp*4]
test edi, edi
jl 0x6ec9b7
cmp esi, edi
ja 0x6ec9b7
cmp edi, eax
ja 0x6ec9b7
mov dword [esp + 0x64], edi
sub edi, esi
mov dword [esp + 0x40], edi
xchg edi, ebx
neg ebx
xchg edi, ebx
sar edi, 0x1f
and esi, edi
add esi, ecx
lea edi, [ebp + 1]
cmp edi, ebx
jae 0x6ec9b0
mov edi, dword [edx + ebp*4 + 4]
lea ebx, [edi - 1]
test ebx, ebx
jl 0x6ec9a9
mov dword [esp + 0x5c], edi
mov edi, dword [esp + 0x64]
inc edi
cmp edi, ebx
ja 0x6ec9a9
cmp ebx, eax
ja 0x6ec9a9
mov dword [esp + 0x54], ebp
mov dword [esp + 0x88], esi
sub ebx, edi
mov eax, ebx
neg ebx
sar ebx, 0x1f
and edi, ebx
lea edx, [ecx + edi]
mov dword [esp], edx
mov dword [esp + 4], eax
lea eax, [0x7dc206]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 2
call fcn.004d9740
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
test ecx, ecx
jbe 0x6ec9a2
mov edx, dword [eax]
mov ebx, dword [eax + 4]
cmp ecx, 2
jne 0x6ec361
mov ecx, dword [eax + 8]
mov eax, dword [eax + 0xc]
test ebx, ebx
je 0x6ec273
test eax, eax
je 0x6ec273
mov dword [esp + 0xa4], ecx
mov dword [esp + 0x64], eax
mov dword [esp + 0x94], edx
mov dword [esp + 0x4c], ebx
mov eax, dword [esp + 0x88]
mov dword [esp], eax
mov ecx, dword [esp + 0x40]
mov dword [esp + 4], ecx
call fcn.00690b30
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0xf4], eax
mov dword [esp + 0xf8], ecx
mov eax, dword [esp + 0x54]
mov ecx, eax
sar eax, 0x1f
shr eax, 0x1f
add eax, ecx
sar eax, 1
mov dword [esp + 0x60], eax
mov dword [esp], eax
call fcn.006ed400
mov eax, dword [esp + 8]
mov ecx, dword [esp + 4]
mov dword [esp + 0xec], ecx
mov dword [esp + 0xf0], eax
mov eax, dword [esp + 0xa4]
mov dword [esp + 0xe4], eax
mov ecx, dword [esp + 0x64]
mov dword [esp + 0xe8], ecx
lea edi, [esp + 0x10c]
xor eax, eax
call fcn.0044cd1a
lea ecx, [0x771de0]
mov dword [esp], ecx
lea ebx, [esp + 0xf4]
mov dword [esp + 4], ebx
call fcn.00407630
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
mov dword [esp + 0x10c], ecx
mov dword [esp + 0x110], eax
lea eax, [0x771de0]
mov dword [esp], eax
lea ecx, [esp + 0xec]
mov dword [esp + 4], ecx
call fcn.00407630
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x114], eax
mov dword [esp + 0x118], ecx
lea eax, [0x771de0]
mov dword [esp], eax
lea ecx, [esp + 0xe4]
mov dword [esp + 4], ecx
call fcn.00407630
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
mov dword [esp + 0x11c], ecx
mov dword [esp + 0x120], eax
lea eax, [0x8f8550]
mov dword [esp], eax
mov ecx, dword [esp + 0x9c]
mov dword [esp + 4], ecx
lea edx, [0x7debb0]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 0xc
lea ebx, [esp + 0x10c]
mov dword [esp + 0x10], ebx
mov dword [esp + 0x14], 3
mov dword [esp + 0x18], 3
call fcn.004bc910
mov eax, dword [esp + 0x88]
mov dword [esp + 0xd4], eax
mov eax, dword [esp + 0x40]
mov dword [esp + 0xd8], eax
mov dword [esp + 0xdc], 0
mov dword [esp + 0xe0], 0
lea eax, [0x771de0]
mov dword [esp], eax
lea ecx, [esp + 0xd4]
mov dword [esp + 4], ecx
call fcn.00407630
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0xdc], eax
mov dword [esp + 0xe0], ecx
lea eax, [0x8f8550]
mov dword [esp], eax
mov ecx, dword [esp + 0xa0]
mov dword [esp + 4], ecx
lea edx, [0x7dc9d7]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 5
lea ebx, [esp + 0xdc]
mov dword [esp + 0x10], ebx
mov dword [esp + 0x14], 1
mov dword [esp + 0x18], 1
call fcn.004bc910
mov eax, dword [esp + 0x60]
mov ecx, dword [esp + 0x38]
cmp eax, ecx
jae 0x6ec994
mov edx, dword [esp + 0x80]
lea ebx, [edx + eax*8 + 4]
mov ebp, dword [esp + 0x4c]
mov dword [ebx], ebp
mov ebx, dword [0xbc7270]
lea edi, [edx + eax*8]
test ebx, ebx
jne 0x6ec262
mov ebx, dword [esp + 0x94]
mov dword [edi], ebx
mov eax, dword [esp + 0xa4]
mov dword [esp + 0xc4], eax
mov eax, dword [esp + 0x64]
mov dword [esp + 0xc8], eax
mov dword [esp + 0xcc], 0
mov dword [esp + 0xd0], 0
lea eax, [0x771de0]
mov dword [esp], eax
lea ecx, [esp + 0xc4]
mov dword [esp + 4], ecx
call fcn.00407630
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
mov dword [esp + 0xcc], ecx
mov dword [esp + 0xd0], eax
lea eax, [0x7dc7f9]
mov dword [esp], eax
mov dword [esp + 4], 4
lea ecx, [esp + 0xcc]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004bca60
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0068ef50
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 8]
mov ebx, dword [esp + 0x60]
mov ebp, dword [esp + 0x30]
cmp ebx, ebp
jae 0x6ec98d
mov dword [esp + 0x58], ecx
mov esi, dword [0xbc7270]
mov edi, ebp
mov ebp, dword [esp + 0x7c]
lea ecx, [ebp + ebx*4]
test esi, esi
jne 0x6ec24f
mov dword [ebp + ebx*4], edx
mov ecx, dword [esp + 0x58]
test ecx, ecx
je 0x6ebde0
mov dword [esp + 0x138], 0
mov dword [esp + 0x13c], ecx
mov dword [esp + 0x140], eax
add esp, 0x124
ret
mov ebx, edi
mov edi, ecx
mov esi, eax
mov eax, edx
call fcn.0044cc20
mov eax, esi
mov edi, ebx
jmp 0x6ec223
mov eax, dword [esp + 0x94]
call fcn.0044cc20
jmp 0x6ec148
mov eax, dword [esp + 0x54]
mov ecx, dword [esp + 0x98]
mov eax, dword [ecx + eax*4]
mov ecx, dword [esp + 0x5c]
test ecx, ecx
jl 0x6ec99b
cmp eax, ecx
ja 0x6ec99b
mov edx, dword [esp + 0x6c]
cmp ecx, edx
ja 0x6ec99b
sub ecx, eax
mov edx, ecx
neg ecx
sar ecx, 0x1f
and ecx, eax
mov eax, dword [esp + 0x128]
add eax, ecx
mov dword [esp + 0xfc], eax
mov dword [esp + 0x100], edx
mov dword [esp + 0x104], 0
mov dword [esp + 0x108], 0
lea eax, [0x771de0]
mov dword [esp], eax
lea eax, [esp + 0xfc]
mov dword [esp + 4], eax
call fcn.00407630
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
mov dword [esp + 0x104], ecx
mov dword [esp + 0x108], eax
lea eax, [0x7ea783]
mov dword [esp], eax
mov dword [esp + 4], 0x22
lea eax, [esp + 0x104]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004bcb10
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x138], 0
mov dword [esp + 0x13c], ecx
mov dword [esp + 0x140], eax
add esp, 0x124
ret
mov ecx, dword [esp + 0x90]
mov eax, dword [esp + 0x48]
jmp 0x6ebeea
cmp esi, eax
ja 0x6ec986
sub eax, esi
mov dword [esp + 0x44], eax
mov edx, eax
neg eax
sar eax, 0x1f
and esi, eax
lea eax, [ecx + esi]
mov dword [esp + 0x8c], eax
mov dword [esp], eax
mov dword [esp + 4], edx
call fcn.00690b30
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x9c]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.0045b8a0
movzx eax, byte [esp + 0x134]
test al, al
jne 0x6ec74c
mov ecx, dword [esp + 0x130]
cmp ecx, 3
je 0x6ec6c8
cmp ecx, 2
jne 0x6ec6af
mov eax, dword [esp + 0xa0]
mov dword [esp], eax
mov ecx, dword [esp + 0x8c]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x44]
mov dword [esp + 8], ecx
call fcn.0045b8a0
movzx eax, byte [esp + 0x2b]
test al, al
jne 0x6ec696
mov eax, dword [esp + 0x9c]
test eax, eax
je 0x6ec686
mov ecx, dword [eax + 4]
mov edx, dword [eax]
mov ebx, dword [eax + 0xc]
mov eax, dword [eax + 8]
cmp ebx, ecx
ja 0x6ec978
mov dword [esp], 0
sub eax, ebx
mov ebp, eax
neg eax
sar eax, 0x1f
and eax, ebx
add eax, edx
mov dword [esp + 4], eax
sub ecx, ebx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebp
call fcn.0043c0a0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0068ef50
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xc]
test edx, edx
jne 0x6ec666
mov ecx, dword [eax + 0x34]
mov edx, dword [esp + 0x68]
cmp ecx, edx
jne 0x6ec873
mov dword [esp + 0x84], eax
mov ecx, dword [esp + 0xa0]
test ecx, ecx
je 0x6ec656
mov edx, dword [ecx + 4]
mov ebx, dword [ecx + 0xc]
mov ebp, dword [ecx]
mov ecx, dword [ecx + 8]
cmp ebx, edx
ja 0x6ec86c
mov dword [esp], 0
sub ecx, ebx
mov eax, ecx
neg ecx
sar ecx, 0x1f
and ecx, ebx
add ecx, ebp
mov dword [esp + 4], ecx
sub edx, ebx
mov dword [esp + 8], edx
mov dword [esp + 0xc], eax
call fcn.0043c0a0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x2c], eax
mov dword [esp + 0x78], ecx
lea edx, [0x7b43c0]
mov dword [esp], edx
call fcn.00409dc0
mov edi, dword [esp + 4]
mov eax, dword [esp + 0x12c]
mov dword [edi + 4], eax
mov eax, dword [0xbc7270]
test eax, eax
jne 0x6ec645
mov ecx, dword [esp + 0x128]
mov dword [edi], ecx
mov ecx, dword [esp + 0x130]
mov dword [edi + 8], ecx
movzx ecx, byte [esp + 0x134]
mov byte [edi + 0xc], cl
movzx ecx, byte [esp + 0x135]
mov byte [edi + 0xd], cl
mov ecx, dword [0xbc7270]
test ecx, ecx
jne 0x6ec629
mov ecx, dword [esp + 0x84]
mov dword [edi + 0x10], ecx
mov ecx, dword [esp + 0x2c]
mov dword [edi + 0x18], ecx
mov ecx, dword [0xbc7270]
test ecx, ecx
jne 0x6ec610
mov ecx, dword [esp + 0x78]
mov dword [edi + 0x14], ecx
mov ecx, dword [esp + 0x38]
mov dword [edi + 0x20], ecx
mov ecx, dword [esp + 0x3c]
mov dword [edi + 0x24], ecx
mov ecx, dword [0xbc7270]
test ecx, ecx
jne 0x6ec5f7
mov ecx, dword [esp + 0x80]
mov dword [edi + 0x1c], ecx
mov ecx, dword [esp + 0x30]
mov dword [edi + 0x2c], ecx
mov ecx, dword [esp + 0x34]
mov dword [edi + 0x30], ecx
mov ecx, dword [0xbc7270]
test ecx, ecx
jne 0x6ec5e1
mov eax, dword [esp + 0x7c]
mov dword [edi + 0x28], eax
mov dword [esp + 0x138], edi
mov dword [esp + 0x13c], 0
mov dword [esp + 0x140], 0
add esp, 0x124
ret
lea ecx, [edi + 0x28]
mov eax, edi
mov edi, ecx
mov edx, eax
mov eax, dword [esp + 0x7c]
call fcn.0044cc20
mov edi, edx
jmp 0x6ec5bd
lea ecx, [edi + 0x1c]
mov eax, edi
mov edi, ecx
mov edx, eax
mov eax, dword [esp + 0x80]
call fcn.0044cc20
mov edi, edx
jmp 0x6ec59e
lea ecx, [edi + 0x14]
mov eax, edi
mov edi, ecx
mov edx, eax
mov eax, dword [esp + 0x78]
call fcn.0044cc20
mov edi, edx
jmp 0x6ec57c
lea ecx, [edi + 0x10]
mov eax, edi
mov edi, ecx
mov edx, eax
mov eax, dword [esp + 0x84]
call fcn.0044cc20
mov edi, edx
jmp 0x6ec560
mov eax, dword [esp + 0x128]
call fcn.0044cc20
jmp 0x6ec528
mov eax, 5
lea ecx, [0x7dca5e]
jmp 0x6ec4ed
mov dword [esp + 0x138], 0
mov dword [esp + 0x13c], edx
mov dword [esp + 0x140], ecx
add esp, 0x124
ret
lea ecx, [0x7dca5e]
mov eax, 5
jmp 0x6ec466
mov eax, dword [esp + 0xa0]
mov dword [esp], eax
mov byte [esp + 4], 0x2f
call fcn.0045bd20
jmp 0x6ec415
mov eax, dword [esp + 0x9c]
mov dword [esp], eax
mov byte [esp + 4], 0x24
call fcn.0045bd20
jmp 0x6ec3e6
mov eax, dword [esp + 0x128]
mov dword [esp], eax
mov ecx, dword [esp + 0x12c]
mov dword [esp + 4], ecx
lea edx, [0x7dc209]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 2
call fcn.004d9740
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
cmp eax, 1
jbe 0x6ec97f
mov eax, dword [ecx + 0xc]
test eax, eax
je 0x6ec728
movzx eax, byte [esp + 0x134]
mov ecx, dword [esp + 0x130]
jmp 0x6ec3dd
mov eax, dword [esp + 0x9c]
mov dword [esp], eax
mov ecx, dword [esp + 0x90]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x48]
mov dword [esp + 8], ecx
call fcn.0045b8a0
jmp 0x6ec714
mov eax, dword [esp + 0x9c]
mov dword [esp], eax
lea ecx, [0x7dc7ad]
mov dword [esp + 4], ecx
mov dword [esp + 8], 4
call fcn.0045b8a0
mov ecx, dword [esp + 0x130]
cmp ecx, 3
movzx eax, byte [esp + 0x134]
jmp 0x6ec3d7
mov eax, dword [esp + 0xa8]
call fcn.0044cc20
jmp 0x6ebdbd
mov eax, dword [esp + 0xa8]
call fcn.0044cc20
jmp 0x6ebd3b
mov edi, dword [esp + 0x12c]
xor esi, esi
xchg esi, eax
mov byte [esp + 0x2b], al
xchg esi, eax
jmp 0x6ebc60
mov dword [esp], edi
lea eax, [0x7dc201]
mov dword [esp + 4], eax
mov dword [esp + 8], esi
call fcn.004021e0
movzx esi, byte [esp + 0xc]
mov eax, dword [esp + 0x128]
mov ecx, dword [esp + 0x50]
mov edx, dword [esp + 0x98]
mov ebx, dword [esp + 0x48]
mov ebp, dword [esp + 0x90]
jmp 0x6ebc37
mov eax, dword [esp + 0x128]
xor esi, esi
jmp 0x6ebc37
mov edi, dword [esp + 0x12c]
xor edi, edi
xchg edi, eax
mov byte [esp + 0x2b], al
xchg edi, eax
mov edi, dword [esp + 0x12c]
jmp 0x6ebc60
movzx esi, byte [esp + 0x134]
jmp 0x6ebbca
cmp eax, 1
jne 0x6ec844
lea ebx, [0x7dcb17]
mov ebp, ebx
mov ebx, 5
jmp 0x6ebbc0
lea ebx, [0x7dcb1c]
jmp 0x6ec838
mov dword [esp + 0x138], 0
mov dword [esp + 0x13c], ebx
mov dword [esp + 0x140], eax
add esp, 0x124
ret
call fcn.00426730
ud2
mov eax, dword [esp + 0x128]
mov dword [esp + 0xb4], eax
mov eax, dword [esp + 0x12c]
mov dword [esp + 0xb8], eax
mov dword [esp + 0xbc], 0
mov dword [esp + 0xc0], 0
lea eax, [0x771de0]
mov dword [esp], eax
lea ecx, [esp + 0xb4]
mov dword [esp + 4], ecx
call fcn.00407630
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
mov dword [esp + 0xbc], ecx
mov dword [esp + 0xc0], eax
lea eax, [0x7f0361]
mov dword [esp], eax
mov dword [esp + 4], 0x30
lea eax, [esp + 0xbc]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004bca60
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov dword [esp], 0
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
lea eax, [0x7f44d3]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0x4d
call fcn.0043bf20
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0xac], ecx
mov dword [esp + 0xb0], eax
lea eax, [0x771de0]
mov dword [esp], eax
lea eax, [esp + 0xac]
mov dword [esp + 4], eax
call fcn.00407630
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00427510
ud2
call fcn.00426730
ud2
call fcn.00426630
ud2
call fcn.00426730
ud2
call fcn.00426630
ud2
call fcn.00426630
ud2
call fcn.00426730
ud2
call fcn.00426630
ud2
call fcn.00426730
ud2
call fcn.00426630
ud2
call fcn.00426730
ud2
call fcn.00426630
ud2
call fcn.00426730
ud2
call fcn.00426730
ud2
call fcn.0044b4c0
jmp fcn.006ebb50