Function at 0x6c90be80
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [0x6cb24420]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
lea eax, [esp - 0x44]
cmp eax, dword [ecx + 8]
jbe 0x6c90d727
sub esp, 0xc4
mov eax, dword [esp + 0xc8]
mov dword [eax + 0x44], 0
mov ecx, dword [eax + 0x28]
lea edx, [0x6c98eb00]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x13d
call fcn.6c7d02b0
mov eax, dword [esp + 0xc]
mov ecx, dword [eax + 4]
test ecx, ecx
jne 0x6c90bed8
xor eax, eax
jmp 0x6c90bedc
mov eax, dword [eax]
mov eax, dword [eax]
cmp eax, 2
jne 0x6c90c01f
mov eax, dword [esp + 0xc8]
mov ecx, dword [eax + 0x24]
cmp ecx, 1
je 0x6c90bffe
cmp ecx, 8
je 0x6c90bf9e
cmp ecx, 0x10
je 0x6c90bf29
mov ecx, dword [esp + 0xd4]
mov edx, dword [esp + 0xdc]
mov ebx, eax
mov esi, dword [esp + 0xe0]
mov edi, dword [esp + 0xd8]
jmp 0x6c90c01f
mov ecx, dword [eax + 0x28]
lea edx, [0x6c98eb00]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x102
call fcn.6c7d02b0
mov eax, dword [esp + 0xc]
mov eax, dword [eax + 4]
mov dword [esp + 0xc0], eax
mov ecx, eax
shl eax, 1
mov dword [esp + 0x88], eax
mov edx, dword [esp + 0xdc]
mov ebx, dword [esp + 0xc8]
mov ebp, dword [esp + 0xd4]
mov esi, dword [esp + 0xd8]
mov edi, dword [esp + 0xe0]
mov dword [esp + 0xa0], eax
xor eax, eax
mov dword [esp + 0x84], eax
mov eax, dword [esp + 0xa0]
jmp 0x6c90d504
mov ecx, dword [eax + 0x28]
lea edx, [0x6c98eb00]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x102
call fcn.6c7d02b0
mov eax, dword [esp + 0xc]
mov eax, dword [eax + 4]
mov dword [esp + 0xc0], eax
mov ecx, dword [esp + 0xd4]
mov edx, dword [esp + 0xdc]
mov ebx, dword [esp + 0xc8]
mov ebp, dword [esp + 0xd8]
mov esi, dword [esp + 0xe0]
mov edi, ebp
xor ebp, ebp
mov dword [esp + 0x80], ebp
mov ebp, edi
jmp 0x6c90d3fd
lea eax, [0x6c9fc1f8]
mov dword [esp + 0xe4], eax
lea eax, [0x6c9fb960]
mov dword [esp + 0xe8], eax
add esp, 0xc4
ret
mov eax, dword [esp + 0xcc]
mov ecx, dword [eax + 0x14]
mov edx, dword [esp + 0xd0]
mov dword [esp], edx
call ecx
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0xdc]
cmp ecx, eax
jle 0x6c90c046
mov ecx, eax
mov dword [esp + 0x30], ecx
mov eax, dword [esp + 0xcc]
mov edx, dword [eax + 0x14]
mov ebx, dword [esp + 0xd0]
mov dword [esp], ebx
call edx
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xe0]
cmp ecx, eax
jle 0x6c90c071
mov ecx, eax
mov dword [esp + 0x2c], ecx
mov ebx, dword [esp + 0xc8]
mov ebp, dword [ebx + 0x20]
cmp ebp, 3
jg 0x6c90c145
cmp ebp, 1
jne 0x6c90c0b9
mov edx, dword [esp + 0xcc]
lea ebp, [0x6c9fc614]
cmp edx, ebp
jne 0x6c90d3c4
mov edx, dword [esp + 0x30]
mov ebp, dword [esp + 0xd4]
mov esi, dword [esp + 0xd8]
jmp 0x6c90d280
cmp ebp, 2
jl 0x6c90c295
mov ebp, dword [ebx + 0x24]
cmp ebp, 0x10
jne 0x6c90c0f6
mov ebp, dword [esp + 0xcc]
lea esi, [0x6c9fc64c]
cmp ebp, esi
jne 0x6c90d252
mov ebp, dword [esp + 0x30]
mov esi, dword [esp + 0xd4]
mov edi, dword [esp + 0xd8]
jmp 0x6c90d102
mov edx, dword [esp + 0xcc]
lea esi, [0x6c9fc668]
cmp edx, esi
jne 0x6c90d0e3
mov eax, ecx
mov ecx, ebp
mov edx, 1
shl edx, cl
cmp ecx, 0x20
sbb ebp, ebp
and ebp, edx
mov dword [esp + 0xbc], ebp
lea edx, [ebp - 1]
mov dword [esp + 0x8c], edx
mov esi, dword [esp + 0x30]
mov edi, dword [esp + 0xd4]
mov ecx, dword [esp + 0xd8]
jmp 0x6c90cf21
cmp ebp, 4
jne 0x6c90c1b6
cmp dword [ebx + 0x24], 0x10
jne 0x6c90c17c
mov ebp, dword [esp + 0xcc]
lea esi, [0x6c9fc6f4]
cmp ebp, esi
jne 0x6c90ceef
mov ebp, dword [esp + 0x30]
mov esi, dword [esp + 0xd4]
mov edi, dword [esp + 0xd8]
jmp 0x6c90cce1
mov edx, dword [esp + 0xcc]
lea ebp, [0x6c9fc5dc]
cmp edx, ebp
jne 0x6c90ccc2
mov edx, dword [esp + 0xd0]
mov ebp, dword [esp + 0xd4]
mov esi, dword [esp + 0x30]
mov edi, dword [esp + 0xdc]
mov eax, dword [esp + 0xd8]
jmp 0x6c90cb4c
cmp ebp, 5
jne 0x6c90c227
cmp dword [ebx + 0x24], 0x10
jne 0x6c90c1ed
mov ebp, dword [esp + 0xcc]
lea esi, [0x6c9fc6f4]
cmp ebp, esi
jne 0x6c90cb12
mov ebp, dword [esp + 0x30]
mov esi, dword [esp + 0xd4]
mov edi, dword [esp + 0xd8]
jmp 0x6c90c893
mov ebp, dword [esp + 0xcc]
lea esi, [0x6c9fc5dc]
cmp ebp, esi
jne 0x6c90c874
mov ebp, dword [esp + 0xd8]
mov esi, dword [esp + 0xd4]
mov edi, dword [esp + 0xd0]
mov eax, dword [esp + 0x30]
mov edx, dword [esp + 0xdc]
jmp 0x6c90c71d
cmp ebp, 6
jne 0x6c90c295
cmp dword [ebx + 0x24], 0x10
jne 0x6c90c25e
mov ebp, dword [esp + 0xcc]
lea esi, [0x6c9fc6bc]
cmp ebp, esi
jne 0x6c90c6c9
mov ebp, dword [esp + 0x30]
mov esi, dword [esp + 0xd4]
mov edi, dword [esp + 0xd8]
jmp 0x6c90c44a
mov ebp, dword [esp + 0xcc]
lea esi, [0x6c9fc6d8]
cmp ebp, esi
jne 0x6c90c42b
mov ebp, dword [esp + 0xd8]
mov esi, dword [esp + 0x30]
mov edi, dword [esp + 0xd0]
mov eax, dword [esp + 0xd4]
mov edx, dword [esp + 0xdc]
jmp 0x6c90c2e6
mov dword [esp + 0xe4], 0
mov dword [esp + 0xe8], 0
add esp, 0xc4
ret
mov eax, dword [esp + 0x3c]
lea ebp, [eax + 1]
mov ecx, dword [esp + 0x2c]
mov eax, dword [esp + 0xd8]
mov esi, dword [esp + 0x30]
mov edi, dword [esp + 0xd0]
mov ebx, dword [esp + 0xd4]
mov eax, ebx
mov edx, dword [esp + 0xdc]
mov ebx, dword [esp + 0xc8]
cmp ebp, ecx
jge 0x6c90c295
mov dword [esp + 0x3c], ebp
sub edx, eax
mov ebx, dword [esp + 0xd8]
sub ebp, ebx
lea ebx, [ebp + 1]
imul ebx, edx
shl ebx, 2
mov dword [esp + 0x94], ebx
mov ecx, dword [edi + 0x14]
mov ebx, dword [esp + 0x3c]
sub ebx, ecx
imul ebx, dword [edi + 0xc]
mov ecx, dword [edi + 0x10]
sub eax, ecx
sub esi, ecx
mov dword [esp + 0xc0], esi
nop
nop
imul ebp, edx
lea ecx, [ebx + eax*4]
lea ebx, [ebx + esi*4]
mov edx, ebp
mov ebp, dword [esp + 0x94]
mov esi, dword [esp + 0xc8]
cmp dword [esi + 0x3c], ebp
jl 0x6c90c3d4
mov dword [esp + 0xb8], edx
mov edx, dword [edi + 8]
cmp edx, ebx
jb 0x6c90c424
cmp ebx, ecx
jb 0x6c90c41b
mov ebx, dword [esi + 0x40]
mov edi, dword [edi]
sub edx, ecx
neg edx
sar edx, 0x1f
and ecx, edx
shl eax, 2
mov edx, esi
mov esi, dword [esp + 0xc0]
shl esi, 2
sub esi, eax
add edi, ecx
cmp ebx, ebp
jb 0x6c90c412
mov eax, dword [esp + 0xb8]
shl eax, 2
cmp ebp, eax
jb 0x6c90c40b
mov ecx, dword [edx + 0x38]
sub ebp, eax
sub ebx, eax
neg ebx
sar ebx, 0x1f
and eax, ebx
lea ebx, [eax + ecx]
cmp ebp, esi
jl 0x6c90c3b0
mov ebp, esi
cmp ebx, edi
je 0x6c90c2b2
mov dword [esp], edi
mov dword [esp + 4], ebx
mov dword [esp + 8], ebp
call fcn.6c82c9c0
mov edx, dword [esp + 0xc8]
jmp 0x6c90c2b2
mov eax, dword [0x6c96bb38]
mov ecx, dword [0x6c96bb3c]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.6c7cb200
mov eax, dword [esp + 8]
lea ecx, [0x6c9fc1bc]
mov dword [esp + 0xe4], ecx
mov dword [esp + 0xe8], eax
add esp, 0xc4
ret
mov ecx, ebp
call fcn.6c82c140
mov ecx, ebp
mov edx, ebx
call fcn.6c82c120
mov eax, ecx
mov ecx, ebx
call fcn.6c82c140
mov ecx, ebx
call fcn.6c82c120
mov eax, dword [0x6c9fc6dc]
mov dword [esp], ebp
mov dword [esp + 4], eax
lea eax, [0x6c998a00]
mov dword [esp + 8], eax
call fcn.6c7caec0
inc edi
mov esi, eax
cmp edi, ecx
jge 0x6c90c295
mov dword [esp + 0x40], edi
mov eax, esi
jmp 0x6c90c516
movzx ebx, word [esp + 0x10]
mov word [esp + 0x26], bx
mov esi, dword [eax + 8]
mov edi, dword [eax + 0xc]
mov esi, dword [esi + 0x20]
mov ebx, dword [eax + 0x38]
mov dword [esp], edi
sub edx, ecx
lea ecx, [edx - 6]
mov edx, ecx
neg ecx
sar ecx, 0x1f
and ecx, ebp
add ecx, ebx
mov dword [esp + 4], ecx
mov dword [esp + 8], 2
mov dword [esp + 0xc], edx
call esi
movzx eax, word [esp + 0x10]
mov ecx, dword [esp + 0xc8]
add dword [ecx + 0x44], 8
mov edx, dword [esp + 0xd0]
mov dword [esp], edx
mov ebx, dword [esp + 0x60]
mov dword [esp + 4], ebx
mov ebp, dword [esp + 0x40]
mov dword [esp + 8], ebp
movzx esi, word [esp + 0x1a]
mov word [esp + 0xc], si
movzx esi, word [esp + 0x20]
mov word [esp + 0xe], si
movzx esi, word [esp + 0x26]
mov word [esp + 0x10], si
mov word [esp + 0x12], ax
call fcn.6c8f27e0
mov eax, dword [esp + 0x60]
lea esi, [eax + 1]
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0xc8]
mov eax, dword [esp + 0xd4]
mov ecx, dword [esp + 0x2c]
mov ebx, dword [esp + 0xc8]
mov ebp, dword [esp + 0x30]
mov edi, dword [esp + 0x40]
cmp esi, ebp
jge 0x6c90c447
mov edx, dword [ebx + 0x44]
lea eax, [edx + 8]
cmp dword [ebx + 0x3c], eax
jl 0x6c90c654
mov eax, dword [ebx + 0x40]
lea ecx, [edx + 2]
cmp eax, ecx
jb 0x6c90c6c2
cmp edx, ecx
ja 0x6c90c6bb
mov dword [esp + 0x60], esi
mov ecx, dword [ebx + 0x38]
mov ebp, dword [ebx + 8]
mov esi, dword [ebx + 0xc]
mov ebp, dword [ebp + 0x20]
mov dword [esp], esi
sub eax, edx
mov esi, eax
neg eax
sar eax, 0x1f
and edx, eax
lea eax, [edx + ecx]
mov dword [esp + 4], eax
mov dword [esp + 8], 2
mov dword [esp + 0xc], esi
call ebp
mov eax, dword [esp + 0xc8]
mov edx, dword [eax + 0x40]
mov ecx, dword [eax + 0x44]
lea ebx, [ecx + 4]
movzx ebp, word [esp + 0x10]
cmp edx, ebx
jb 0x6c90c6b4
lea esi, [ecx + 2]
cmp ebx, esi
jb 0x6c90c6ab
mov word [esp + 0x1a], bp
mov ebx, dword [eax + 8]
mov ebp, dword [eax + 0xc]
mov ebx, dword [ebx + 0x20]
mov edi, dword [eax + 0x38]
mov dword [esp], ebp
sub edx, ecx
lea ecx, [edx - 2]
mov edx, ecx
neg ecx
sar ecx, 0x1f
and ecx, esi
add ecx, edi
mov dword [esp + 4], ecx
mov dword [esp + 8], 2
mov dword [esp + 0xc], edx
call ebx
mov eax, dword [esp + 0xc8]
mov edx, dword [eax + 0x40]
mov ecx, dword [eax + 0x44]
lea ebx, [ecx + 6]
movzx ebp, word [esp + 0x10]
cmp edx, ebx
jb 0x6c90c6a4
lea esi, [ecx + 4]
cmp ebx, esi
jb 0x6c90c69b
mov word [esp + 0x20], bp
mov ebx, dword [eax + 8]
mov ebp, dword [eax + 0xc]
mov ebx, dword [ebx + 0x20]
mov edi, dword [eax + 0x38]
mov dword [esp], ebp
sub edx, ecx
lea ecx, [edx - 4]
mov edx, ecx
neg ecx
sar ecx, 0x1f
and esi, ecx
lea ecx, [edi + esi]
mov dword [esp + 4], ecx
mov dword [esp + 8], 2
mov dword [esp + 0xc], edx
call ebx
mov eax, dword [esp + 0xc8]
mov edx, dword [eax + 0x40]
mov ecx, dword [eax + 0x44]
lea ebx, [ecx + 8]
cmp edx, ebx
jb 0x6c90c694
lea ebp, [ecx + 6]
cmp ebx, ebp
jae 0x6c90c45d
jmp 0x6c90c68b
mov eax, dword [0x6c96bb38]
mov ecx, dword [0x6c96bb3c]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.6c7cb200
mov eax, dword [esp + 8]
lea ecx, [0x6c9fc1bc]
mov dword [esp + 0xe4], ecx
mov dword [esp + 0xe8], eax
add esp, 0xc4
ret
mov eax, ebp
mov ecx, ebx
call fcn.6c82c140
mov ecx, ebx
call fcn.6c82c120
mov eax, esi
mov ecx, ebx
call fcn.6c82c140
mov ecx, ebx
call fcn.6c82c120
mov eax, esi
mov ecx, ebx
call fcn.6c82c140
mov ecx, ebx
call fcn.6c82c120
mov eax, edx
call fcn.6c82c140
mov edx, eax
call fcn.6c82c120
mov eax, dword [0x6c9fc6c0]
mov dword [esp], ebp
mov dword [esp + 4], eax
lea eax, [0x6c998a00]
mov dword [esp + 8], eax
call fcn.6c7caec0
mov eax, dword [esp + 0x34]
lea ebp, [eax + 1]
mov eax, dword [esp + 0x2c]
mov edx, dword [esp + 0xd8]
mov esi, dword [esp + 0xd4]
mov edi, dword [esp + 0xd0]
mov ebx, dword [esp + 0x30]
mov eax, ebx
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0xdc]
mov ebx, dword [esp + 0xc8]
cmp ebp, ecx
jge 0x6c90c295
mov dword [esp + 0x34], ebp
sub edx, esi
mov ebx, dword [esp + 0xd8]
sub ebp, ebx
lea ebx, [ebp + 1]
imul ebx, edx
shl ebx, 2
mov dword [esp + 0x90], ebx
mov ecx, dword [edi + 0x10]
sub esi, ecx
mov dword [esp + 0xc0], esi
mov ebx, dword [edi + 0x14]
mov esi, dword [esp + 0x34]
sub esi, ebx
imul esi, dword [edi + 0xc]
sub eax, ecx
nop
nop
imul ebp, edx
mov dword [esp + 0xb8], ebp
mov ebx, dword [esp + 0xc0]
lea edx, [esi + ebx*4]
lea esi, [esi + eax*4]
mov ebp, dword [esp + 0x90]
mov ebx, dword [esp + 0xc8]
cmp dword [ebx + 0x3c], ebp
jl 0x6c90c819
mov ecx, dword [edi + 8]
cmp ecx, esi
jb 0x6c90c86b
cmp esi, edx
jb 0x6c90c862
mov esi, dword [ebx + 0x40]
mov edi, dword [edi]
sub ecx, edx
neg ecx
sar ecx, 0x1f
and edx, ecx
mov ecx, ebx
mov ebx, dword [esp + 0xc0]
shl ebx, 2
shl eax, 2
sub eax, ebx
lea ebx, [edx + edi]
cmp esi, ebp
jb 0x6c90c859
mov edi, dword [esp + 0xb8]
shl edi, 2
cmp ebp, edi
jb 0x6c90c850
mov edx, dword [ecx + 0x38]
sub ebp, edi
sub esi, edi
xchg esi, ebx
neg ebx
xchg esi, ebx
sar esi, 0x1f
and edi, esi
lea esi, [edx + edi]
cmp ebp, eax
jl 0x6c90c7f5
mov ebp, eax
cmp esi, ebx
je 0x6c90c6e5
mov dword [esp], ebx
mov dword [esp + 4], esi
mov dword [esp + 8], ebp
call fcn.6c82c9c0
mov ecx, dword [esp + 0xc8]
jmp 0x6c90c6e5
mov eax, dword [0x6c96bb38]
mov ecx, dword [0x6c96bb3c]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.6c7cb200
mov eax, dword [esp + 8]
lea ecx, [0x6c9fc1bc]
mov dword [esp + 0xe4], ecx
mov dword [esp + 0xe8], eax
add esp, 0xc4
ret
mov eax, edi
mov ecx, ebp
call fcn.6c82c140
mov ecx, ebp
mov edx, esi
call fcn.6c82c120
mov eax, edx
mov ecx, esi
call fcn.6c82c140
mov edx, ecx
mov ecx, esi
call fcn.6c82c120
mov eax, dword [0x6c9fc5e0]
mov dword [esp], ebp
mov dword [esp + 4], eax
lea eax, [0x6c998a00]
mov dword [esp + 8], eax
call fcn.6c7caec0
inc edi
mov esi, eax
cmp edi, ecx
jge 0x6c90c295
mov dword [esp + 0x38], edi
mov eax, esi
jmp 0x6c90c95f
movzx ebx, word [esp + 0x10]
mov word [esp + 0x24], bx
mov esi, dword [eax + 8]
mov edi, dword [eax + 0xc]
mov esi, dword [esi + 0x20]
mov ebx, dword [eax + 0x38]
mov dword [esp], edi
sub edx, ecx
lea ecx, [edx - 6]
mov edx, ecx
neg ecx
sar ecx, 0x1f
and ecx, ebp
add ecx, ebx
mov dword [esp + 4], ecx
mov dword [esp + 8], 2
mov dword [esp + 0xc], edx
call esi
movzx eax, word [esp + 0x10]
mov ecx, dword [esp + 0xc8]
add dword [ecx + 0x44], 8
mov edx, dword [esp + 0xd0]
mov dword [esp], edx
mov ebx, dword [esp + 0x5c]
mov dword [esp + 4], ebx
mov ebp, dword [esp + 0x38]
mov dword [esp + 8], ebp
movzx esi, word [esp + 0x18]
mov word [esp + 0xc], si
movzx esi, word [esp + 0x1e]
mov word [esp + 0xe], si
movzx esi, word [esp + 0x24]
mov word [esp + 0x10], si
mov word [esp + 0x12], ax
call fcn.6c8f2410
mov eax, dword [esp + 0x5c]
lea esi, [eax + 1]
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0xc8]
mov eax, dword [esp + 0xd4]
mov ecx, dword [esp + 0x2c]
mov ebx, dword [esp + 0xc8]
mov ebp, dword [esp + 0x30]
mov edi, dword [esp + 0x38]
cmp esi, ebp
jge 0x6c90c890
mov edx, dword [ebx + 0x44]
lea eax, [edx + 8]
cmp dword [ebx + 0x3c], eax
jl 0x6c90ca9d
mov eax, dword [ebx + 0x40]
lea ecx, [edx + 2]
cmp eax, ecx
jb 0x6c90cb0b
cmp edx, ecx
ja 0x6c90cb04
mov dword [esp + 0x5c], esi
mov ecx, dword [ebx + 0x38]
mov ebp, dword [ebx + 8]
mov esi, dword [ebx + 0xc]
mov ebp, dword [ebp + 0x20]
mov dword [esp], esi
sub eax, edx
mov esi, eax
neg eax
sar eax, 0x1f
and edx, eax
lea eax, [edx + ecx]
mov dword [esp + 4], eax
mov dword [esp + 8], 2
mov dword [esp + 0xc], esi
call ebp
mov eax, dword [esp + 0xc8]
mov edx, dword [eax + 0x40]
mov ecx, dword [eax + 0x44]
lea ebx, [ecx + 4]
movzx ebp, word [esp + 0x10]
cmp edx, ebx
jb 0x6c90cafd
lea esi, [ecx + 2]
cmp ebx, esi
jb 0x6c90caf4
mov word [esp + 0x18], bp
mov ebx, dword [eax + 8]
mov ebp, dword [eax + 0xc]
mov ebx, dword [ebx + 0x20]
mov edi, dword [eax + 0x38]
mov dword [esp], ebp
sub edx, ecx
lea ecx, [edx - 2]
mov edx, ecx
neg ecx
sar ecx, 0x1f
and ecx, esi
add ecx, edi
mov dword [esp + 4], ecx
mov dword [esp + 8], 2
mov dword [esp + 0xc], edx
call ebx
mov eax, dword [esp + 0xc8]
mov edx, dword [eax + 0x40]
mov ecx, dword [eax + 0x44]
lea ebx, [ecx + 6]
movzx ebp, word [esp + 0x10]
cmp edx, ebx
jb 0x6c90caed
lea esi, [ecx + 4]
cmp ebx, esi
jb 0x6c90cae4
mov word [esp + 0x1e], bp
mov ebx, dword [eax + 8]
mov ebp, dword [eax + 0xc]
mov ebx, dword [ebx + 0x20]
mov edi, dword [eax + 0x38]
mov dword [esp], ebp
sub edx, ecx
lea ecx, [edx - 4]
mov edx, ecx
neg ecx
sar ecx, 0x1f
and esi, ecx
lea ecx, [edi + esi]
mov dword [esp + 4], ecx
mov dword [esp + 8], 2
mov dword [esp + 0xc], edx
call ebx
mov eax, dword [esp + 0xc8]
mov edx, dword [eax + 0x40]
mov ecx, dword [eax + 0x44]
lea ebx, [ecx + 8]
cmp edx, ebx
jb 0x6c90cadd
lea ebp, [ecx + 6]
cmp ebx, ebp
jae 0x6c90c8a6
jmp 0x6c90cad4
mov eax, dword [0x6c96bb38]
mov ecx, dword [0x6c96bb3c]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.6c7cb200
mov eax, dword [esp + 8]
lea ecx, [0x6c9fc1bc]
mov dword [esp + 0xe4], ecx
mov dword [esp + 0xe8], eax
add esp, 0xc4
ret
mov eax, ebp
mov ecx, ebx
call fcn.6c82c140
mov ecx, ebx
call fcn.6c82c120
mov eax, esi
mov ecx, ebx
call fcn.6c82c140
mov ecx, ebx
call fcn.6c82c120
mov eax, esi
mov ecx, ebx
call fcn.6c82c140
mov ecx, ebx
call fcn.6c82c120
mov eax, edx
call fcn.6c82c140
mov edx, eax
call fcn.6c82c120
mov eax, dword [0x6c9fc6f8]
mov dword [esp], ebp
mov dword [esp + 4], eax
lea eax, [0x6c998a00]
mov dword [esp + 8], eax
call fcn.6c7caec0
mov ebx, dword [esp + 0x44]
inc ebx
mov ebp, dword [esp + 0xd4]
mov edi, dword [esp + 0xdc]
mov esi, eax
mov eax, ebx
mov ebx, dword [esp + 0xc8]
cmp eax, ecx
jge 0x6c90c295
mov dword [esp + 0x44], eax
mov ebx, dword [esp + 0xd8]
sub eax, ebx
sub edi, ebp
imul eax, edi
mov edi, dword [edx + 0x10]
sub ebp, edi
mov dword [esp + 0xc0], ebp
mov ebx, dword [edx + 0x14]
mov ebp, dword [esp + 0x44]
sub ebp, ebx
imul ebp, dword [edx + 0xc]
mov ebx, esi
sub esi, edi
nop
nop
lea edi, [eax + eax*2]
mov eax, ebx
mov ebx, dword [esp + 0xc0]
lea ebx, [ebp + ebx*4]
lea ebp, [ebp + esi*4]
mov dword [esp + 0x28], ebp
mov esi, dword [esp + 0xc8]
jmp 0x6c90cbc3
mov eax, dword [edx]
mov byte [ebx + eax + 3], 0xff
add ebx, 4
mov ebp, dword [esp + 0x28]
mov edi, dword [esp + 0xc0]
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x2c]
cmp ebx, ebp
jge 0x6c90cb2e
lea eax, [edi + 3]
mov ecx, dword [esi + 0x3c]
cmp ecx, eax
jl 0x6c90cc5e
cmp edi, ecx
jae 0x6c90ccbb
mov ecx, dword [esi + 0x38]
mov ebp, dword [edx + 4]
movzx ecx, byte [edi + ecx]
cmp ebx, ebp
jae 0x6c90ccb2
mov ebp, dword [edx]
mov byte [ebp + ebx], cl
mov ecx, dword [esi + 0x3c]
lea ebp, [edi + 1]
cmp ecx, ebp
jbe 0x6c90ccab
mov dword [esp + 0xc0], eax
mov ecx, dword [edx + 4]
lea ebp, [ebx + 1]
mov eax, dword [esi + 0x38]
movzx eax, byte [edi + eax + 1]
cmp ecx, ebp
jbe 0x6c90cca4
mov ebp, dword [edx]
mov byte [ebx + ebp + 1], al
mov ecx, dword [esi + 0x3c]
lea eax, [edi + 2]
cmp ecx, eax
jbe 0x6c90cc9f
mov ecx, dword [edx + 4]
lea eax, [ebx + 2]
mov ebp, dword [esi + 0x38]
movzx ebp, byte [edi + ebp + 2]
cmp ecx, eax
jbe 0x6c90cc9a
mov edi, dword [edx]
xchg ebp, eax
mov byte [ebx + edi + 2], al
xchg ebp, eax
mov ecx, dword [edx + 4]
lea eax, [ebx + 3]
cmp ecx, eax
ja 0x6c90cba6
jmp 0x6c90cc95
mov eax, dword [0x6c96bb38]
mov ecx, dword [0x6c96bb3c]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.6c7cb200
mov eax, dword [esp + 8]
lea ecx, [0x6c9fc1bc]
mov dword [esp + 0xe4], ecx
mov dword [esp + 0xe8], eax
add esp, 0xc4
ret
call fcn.6c82c0e0
call fcn.6c82c0e0
call fcn.6c82c0e0
mov eax, ebp
call fcn.6c82c0e0
mov eax, ebp
call fcn.6c82c0e0
mov eax, ebx
mov ecx, ebp
call fcn.6c82c0e0
mov eax, edi
call fcn.6c82c0e0
mov eax, dword [0x6c9fc5e0]
mov dword [esp], edx
mov dword [esp + 4], eax
lea eax, [0x6c998a00]
mov dword [esp + 8], eax
call fcn.6c7caec0
inc edi
mov esi, eax
cmp edi, ecx
jge 0x6c90c295
mov dword [esp + 0x48], edi
mov eax, esi
jmp 0x6c90cdab
movzx ebx, word [esp + 0x10]
mov word [esp + 0x22], bx
mov esi, dword [eax + 8]
mov edi, dword [eax + 0xc]
mov esi, dword [esi + 0x20]
mov ebx, dword [eax + 0x38]
mov dword [esp], edi
sub edx, ecx
lea ecx, [edx - 4]
mov edx, ecx
neg ecx
sar ecx, 0x1f
and ebp, ecx
lea ecx, [ebx + ebp]
mov dword [esp + 4], ecx
mov dword [esp + 8], 2
mov dword [esp + 0xc], edx
call esi
movzx eax, word [esp + 0x10]
mov ecx, dword [esp + 0xc8]
add dword [ecx + 0x44], 6
mov edx, dword [esp + 0xd0]
mov dword [esp], edx
mov ebx, dword [esp + 0x64]
mov dword [esp + 4], ebx
mov ebp, dword [esp + 0x48]
mov dword [esp + 8], ebp
movzx esi, word [esp + 0x1c]
mov word [esp + 0xc], si
movzx esi, word [esp + 0x22]
mov word [esp + 0xe], si
mov word [esp + 0x10], ax
mov word [esp + 0x12], 0xffff
call fcn.6c8f2410
mov eax, dword [esp + 0x64]
lea esi, [eax + 1]
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0xc8]
mov eax, dword [esp + 0xd4]
mov ecx, dword [esp + 0x2c]
mov ebx, dword [esp + 0xc8]
mov ebp, dword [esp + 0x30]
mov edi, dword [esp + 0x48]
cmp esi, ebp
jge 0x6c90ccde
mov edx, dword [ebx + 0x44]
lea eax, [edx + 6]
cmp dword [ebx + 0x3c], eax
jl 0x6c90ce8a
mov eax, dword [ebx + 0x40]
lea ecx, [edx + 2]
cmp eax, ecx
jb 0x6c90cee8
cmp edx, ecx
ja 0x6c90cee1
mov dword [esp + 0x64], esi
mov ecx, dword [ebx + 0x38]
mov ebp, dword [ebx + 8]
mov esi, dword [ebx + 0xc]
mov ebp, dword [ebp + 0x20]
mov dword [esp], esi
sub eax, edx
mov esi, eax
neg eax
sar eax, 0x1f
and edx, eax
lea eax, [ecx + edx]
mov dword [esp + 4], eax
mov dword [esp + 8], 2
mov dword [esp + 0xc], esi
call ebp
mov eax, dword [esp + 0xc8]
mov edx, dword [eax + 0x40]
mov ecx, dword [eax + 0x44]
lea ebx, [ecx + 4]
movzx ebp, word [esp + 0x10]
cmp edx, ebx
jb 0x6c90ceda
lea esi, [ecx + 2]
cmp ebx, esi
jb 0x6c90ced1
mov word [esp + 0x1c], bp
mov ebx, dword [eax + 8]
mov ebp, dword [eax + 0xc]
mov ebx, dword [ebx + 0x20]
mov edi, dword [eax + 0x38]
mov dword [esp], ebp
sub edx, ecx
lea ecx, [edx - 2]
mov edx, ecx
neg ecx
sar ecx, 0x1f
and ecx, esi
add ecx, edi
mov dword [esp + 4], ecx
mov dword [esp + 8], 2
mov dword [esp + 0xc], edx
call ebx
mov eax, dword [esp + 0xc8]
mov edx, dword [eax + 0x40]
mov ecx, dword [eax + 0x44]
lea ebx, [ecx + 6]
cmp edx, ebx
jb 0x6c90ceca
lea ebp, [ecx + 4]
cmp ebx, ebp
jae 0x6c90ccf4
jmp 0x6c90cec1
mov eax, dword [0x6c96bb38]
mov ecx, dword [0x6c96bb3c]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.6c7cb200
mov eax, dword [esp + 8]
lea ecx, [0x6c9fc1bc]
mov dword [esp + 0xe4], ecx
mov dword [esp + 0xe8], eax
add esp, 0xc4
ret
mov eax, ebp
mov ecx, ebx
call fcn.6c82c140
mov ecx, ebx
call fcn.6c82c120
mov eax, esi
mov ecx, ebx
call fcn.6c82c140
mov ecx, ebx
call fcn.6c82c120
mov eax, edx
call fcn.6c82c140
mov edx, eax
call fcn.6c82c120
mov eax, dword [0x6c9fc6f8]
mov dword [esp], ebp
mov dword [esp + 4], eax
lea eax, [0x6c998a00]
mov dword [esp + 8], eax
call fcn.6c7caec0
inc ecx
mov dword [ebx + 0x48], 0
mov dword [ebx + 0x4c], 0
mov edi, dword [esp + 0xd4]
cmp ecx, eax
jge 0x6c90c295
mov dword [esp + 0x4c], ecx
jmp 0x6c90cf45
lea edi, [esi + 1]
mov esi, dword [esp + 0x30]
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x4c]
mov edx, dword [esp + 0x8c]
cmp edi, esi
jge 0x6c90cf0b
mov dword [esp + 0x68], edi
mov eax, dword [ebx + 0x24]
jmp 0x6c90d073
sub esi, eax
mov dword [ebx + 0x4c], esi
mov eax, dword [ebx + 0x48]
mov dword [esp + 0xb4], eax
mov ecx, esi
shr eax, cl
cmp ecx, 0x20
sbb edi, edi
and eax, edi
mov dword [esp + 0x78], eax
shl eax, 8
mov edx, dword [esp + 0x78]
mov esi, edx
shl edx, cl
and edx, edi
not edx
mov edi, dword [esp + 0xb4]
and edi, edx
mov dword [ebx + 0x48], edi
sub eax, esi
cmp ebp, 1
je 0x6c90d0d5
mov esi, dword [esp + 0x8c]
xor edx, edx
div esi
cmp dword [ebx + 0x20], 3
jne 0x6c90cfb1
add eax, 0xffffff01
neg eax
mov edx, dword [esp + 0xd0]
mov edi, dword [edx + 0x10]
mov ecx, esi
mov esi, dword [esp + 0x68]
cmp esi, edi
jl 0x6c90cf2f
mov ecx, dword [edx + 0x18]
cmp esi, ecx
jge 0x6c90d048
mov ecx, dword [edx + 0x14]
mov ebp, dword [esp + 0x4c]
cmp ebp, ecx
jl 0x6c90d035
mov ebx, dword [edx + 0x1c]
cmp ebp, ebx
jge 0x6c90d01b
mov ebx, dword [edx + 4]
sub ebp, ecx
imul ebp, dword [edx + 0xc]
mov ecx, esi
sub esi, edi
add ebp, esi
nop
cmp ebx, ebp
jbe 0x6c90d0cc
mov ebx, dword [edx]
mov byte [ebx + ebp], al
mov ebx, dword [esp + 0xc8]
mov ebp, dword [esp + 0xbc]
mov esi, ecx
mov ecx, dword [esp + 0x8c]
jmp 0x6c90cf2f
mov ecx, dword [esp + 0x8c]
mov ebx, dword [esp + 0xc8]
mov ebp, dword [esp + 0xbc]
jmp 0x6c90cf2f
mov ecx, dword [esp + 0x8c]
mov ebp, dword [esp + 0xbc]
jmp 0x6c90cf2f
mov ecx, dword [esp + 0x8c]
jmp 0x6c90cf2f
mov edi, dword [ebx + 0x38]
movzx ecx, byte [edi + ecx]
or ecx, esi
mov dword [ebx + 0x48], ecx
inc dword [ebx + 0x44]
add dword [ebx + 0x4c], 8
mov ecx, dword [esp + 0x4c]
mov esi, dword [esp + 0x30]
mov edi, dword [esp + 0x68]
mov esi, dword [ebx + 0x4c]
cmp esi, eax
jae 0x6c90cf55
mov esi, dword [ebx + 0x48]
shl esi, 8
mov dword [ebx + 0x48], esi
mov ecx, dword [ebx + 0x44]
mov edi, dword [ebx + 0x3c]
cmp edi, ecx
jle 0x6c90d095
ja 0x6c90d054
jmp 0x6c90d0da
mov eax, dword [0x6c96bb38]
mov ecx, dword [0x6c96bb3c]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.6c7cb200
mov eax, dword [esp + 8]
lea ecx, [0x6c9fc1bc]
mov dword [esp + 0xe4], ecx
mov dword [esp + 0xe8], eax
add esp, 0xc4
ret
mov eax, ebp
mov ecx, ebx
call fcn.6c82c0e0
call fcn.6c7f8b40
mov eax, ecx
mov ecx, edi
call fcn.6c82c0e0
mov eax, dword [0x6c9fc66c]
mov dword [esp], edx
mov dword [esp + 4], eax
lea eax, [0x6c998a00]
mov dword [esp + 8], eax
call fcn.6c7caec0
inc edi
mov esi, eax
cmp edi, ecx
jge 0x6c90c295
mov dword [esp + 0x50], edi
mov eax, esi
jmp 0x6c90d18f
mov esi, dword [esp + 0xd0]
mov edx, dword [esi + 0x18]
cmp ebp, edx
jne 0x6c90d0ff
mov esi, dword [ebx + 0x44]
mov ebp, dword [esp + 0xdc]
sub ebp, edx
lea ebp, [esi + ebp*2]
mov dword [ebx + 0x44], ebp
mov ebp, dword [esp + 0x30]
mov esi, dword [esp + 0xd0]
jmp 0x6c90d0ff
mov ecx, dword [esp + 0xd0]
mov dword [esp], ecx
mov edx, dword [esp + 0x6c]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0x50]
mov dword [esp + 8], ebx
mov word [esp + 0xc], ax
call fcn.6c8f2c80
mov eax, dword [esp + 0x6c]
lea esi, [eax + 1]
mov eax, dword [esp + 0xc8]
mov ecx, dword [esp + 0x30]
mov eax, dword [esp + 0xd4]
mov ecx, dword [esp + 0x2c]
mov ebx, dword [esp + 0xc8]
mov ebp, dword [esp + 0x30]
mov edi, dword [esp + 0x50]
cmp esi, ebp
jge 0x6c90d112
mov edx, dword [ebx + 0x44]
lea eax, [edx + 2]
cmp dword [ebx + 0x3c], eax
jl 0x6c90d209
mov ecx, dword [ebx + 0x40]
cmp ecx, eax
jb 0x6c90d249
cmp edx, eax
ja 0x6c90d240
mov dword [esp + 0x6c], esi
mov eax, dword [ebx + 0x38]
mov ebp, dword [ebx + 8]
mov esi, dword [ebx + 0xc]
mov ebp, dword [ebp + 0x20]
mov dword [esp], esi
sub ecx, edx
mov esi, ecx
neg ecx
sar ecx, 0x1f
and ecx, edx
add eax, ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 2
mov dword [esp + 0xc], esi
call ebp
movzx eax, word [esp + 0x10]
mov ecx, dword [esp + 0xc8]
add dword [ecx + 0x44], 2
cmp dword [ecx + 0x20], 3
jne 0x6c90d13f
inc eax
neg eax
jmp 0x6c90d13f
mov eax, dword [0x6c96bb38]
mov ecx, dword [0x6c96bb3c]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.6c7cb200
mov eax, dword [esp + 8]
lea ecx, [0x6c9fc1bc]
mov dword [esp + 0xe4], ecx
mov dword [esp + 0xe8], eax
add esp, 0xc4
ret
mov ecx, eax
mov eax, edx
call fcn.6c82c140
mov edx, ecx
mov ecx, eax
call fcn.6c82c120
mov eax, dword [0x6c9fc650]
mov dword [esp], ebp
mov dword [esp + 4], eax
lea eax, [0x6c998a00]
mov dword [esp + 8], eax
call fcn.6c7caec0
inc esi
nop
mov dword [ebx + 0x48], 0
mov dword [ebx + 0x4c], 0
mov ebp, eax
cmp esi, ecx
jge 0x6c90c295
mov dword [esp + 0x7c], esi
mov eax, ebp
jmp 0x6c90d2a2
inc ebp
mov edi, dword [esp + 0x30]
mov eax, dword [esp + 0xd4]
mov ecx, dword [esp + 0x2c]
mov edx, edi
cmp ebp, edx
jge 0x6c90d26e
mov edi, dword [ebx + 0x24]
jmp 0x6c90d359
sub eax, edi
mov dword [ebx + 0x4c], eax
mov edi, dword [ebx + 0x48]
mov dword [esp + 0xbc], edi
mov ecx, eax
shr edi, cl
cmp eax, 0x20
sbb edx, edx
and edi, edx
mov eax, edi
shl edi, cl
and edi, edx
xchg edi, ebx
not ebx
xchg edi, ebx
mov edx, dword [esp + 0xbc]
and edx, edi
mov dword [ebx + 0x48], edx
mov edx, dword [esp + 0xd0]
mov edi, dword [edx + 0x10]
cmp ebp, edi
jl 0x6c90d290
mov ecx, dword [edx + 0x18]
cmp ebp, ecx
jge 0x6c90d290
mov ecx, dword [edx + 0x14]
cmp esi, ecx
jl 0x6c90d290
mov ebx, dword [edx + 0x1c]
cmp esi, ebx
jge 0x6c90d332
mov ebx, dword [edx + 4]
sub esi, ecx
imul esi, dword [edx + 0xc]
mov ecx, ebp
sub ebp, edi
add ebp, esi
nop
cmp ebx, ebp
jbe 0x6c90d3b2
mov ebx, dword [edx]
mov byte [ebx + ebp], al
mov ebx, dword [esp + 0xc8]
mov ebp, ecx
mov esi, dword [esp + 0x7c]
jmp 0x6c90d290
mov ebx, dword [esp + 0xc8]
jmp 0x6c90d290
mov edx, dword [ebx + 0x38]
movzx ecx, byte [edx + ecx]
or ecx, eax
mov dword [ebx + 0x48], ecx
inc dword [ebx + 0x44]
add dword [ebx + 0x4c], 8
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x30]
mov eax, dword [ebx + 0x4c]
cmp eax, edi
jae 0x6c90d2ae
mov eax, dword [ebx + 0x48]
shl eax, 8
mov dword [ebx + 0x48], eax
mov ecx, dword [ebx + 0x44]
mov edx, dword [ebx + 0x3c]
cmp edx, ecx
jle 0x6c90d37b
ja 0x6c90d33e
jmp 0x6c90d3bb
mov eax, dword [0x6c96bb38]
mov ecx, dword [0x6c96bb3c]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.6c7cb200
mov eax, dword [esp + 8]
lea ecx, [0x6c9fc1bc]
mov dword [esp + 0xe4], ecx
mov dword [esp + 0xe8], eax
add esp, 0xc4
ret
mov eax, ebp
mov ecx, ebx
call fcn.6c82c0e0
mov eax, ecx
mov ecx, edx
call fcn.6c82c0e0
mov eax, dword [0x6c9fc618]
mov dword [esp], edx
mov dword [esp + 4], eax
lea eax, [0x6c998a00]
mov dword [esp + 8], eax
call fcn.6c7caec0
inc ebp
mov edx, dword [esp + 0xdc]
mov esi, dword [esp + 0xe0]
mov dword [esp + 0x80], edi
mov edi, dword [esp + 0xd8]
cmp esi, ebp
jle 0x6c90c01f
mov dword [esp + 0x54], ebp
mov edi, dword [esp + 0x80]
add edi, eax
mov dword [esp + 0xa8], eax
xor eax, eax
mov dword [esp + 0x70], eax
mov eax, dword [esp + 0xa8]
jmp 0x6c90d465
movzx edx, byte [edi + ebp]
add eax, edx
mov byte [ebp + ebx], al
lea eax, [esi + 1]
lea edi, [ebx + 1]
mov edx, dword [esp + 0xdc]
mov ebx, dword [esp + 0xc0]
mov ebp, dword [esp + 0xc8]
mov ebx, ebp
mov ebp, dword [esp + 0x54]
mov esi, dword [esp + 0xe0]
mov dword [esp + 0x70], eax
mov eax, dword [esp + 0xc0]
sub edx, ecx
dec edx
imul edx, eax
mov esi, dword [esp + 0x70]
cmp esi, edx
jge 0x6c90d3e0
mov edx, dword [ebx + 0x3c]
cmp edi, edx
jge 0x6c90d49e
jae 0x6c90d4de
mov dword [esp + 0xb8], edi
mov ebp, dword [ebx + 0x38]
sub edi, eax
mov ebx, dword [esp + 0xb8]
movzx eax, byte [ebp + ebx]
cmp edx, edi
ja 0x6c90d428
jmp 0x6c90d4d5
mov eax, dword [0x6c96bb38]
mov ecx, dword [0x6c96bb3c]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.6c7cb200
mov eax, dword [esp + 8]
lea ecx, [0x6c9fc1bc]
mov dword [esp + 0xe4], ecx
mov dword [esp + 0xe8], eax
add esp, 0xc4
ret
mov eax, edi
mov ecx, edx
call fcn.6c82c0e0
mov eax, edi
mov ecx, edx
call fcn.6c82c0e0
inc esi
mov edx, dword [esp + 0xdc]
mov ebp, dword [esp + 0xd4]
mov dword [esp + 0x84], edi
mov edi, dword [esp + 0xe0]
cmp edi, esi
jle 0x6c90d52f
mov dword [esp + 0x58], esi
mov edi, dword [esp + 0x84]
lea edi, [edi + ecx*2]
mov dword [esp + 0x98], eax
xor eax, eax
mov dword [esp + 0x74], eax
mov eax, dword [esp + 0x98]
jmp 0x6c90d5db
mov ecx, ebp
mov esi, edi
mov edi, dword [esp + 0xd8]
jmp 0x6c90c01f
movzx ecx, word [esp + 0x10]
mov ebx, dword [eax + 8]
mov ebp, dword [eax + 0xc]
mov ebx, dword [ebx + 0x10]
mov esi, dword [eax + 0x38]
mov dword [esp], ebp
mov ebp, dword [esp + 0xb8]
sub edx, ebp
mov edi, edx
neg edx
sar edx, 0x1f
and ebp, edx
lea edx, [esi + ebp]
mov dword [esp + 4], edx
mov dword [esp + 8], 2
mov dword [esp + 0xc], edi
movzx edx, word [esp + 0x16]
add ecx, edx
mov word [esp + 0x10], cx
call ebx
mov eax, dword [esp + 0x74]
add eax, 2
mov ecx, dword [esp + 0xdc]
mov edx, dword [esp + 0xc8]
mov ebx, dword [esp + 0x88]
mov ebp, dword [esp + 0xd4]
mov esi, dword [esp + 0xb0]
mov ecx, dword [esp + 0xc0]
mov edx, dword [esp + 0xdc]
mov ebx, dword [esp + 0xc8]
mov esi, dword [esp + 0x58]
mov dword [esp + 0x74], eax
mov edi, dword [esp + 0xb0]
mov eax, dword [esp + 0x88]
sub edx, ebp
dec edx
imul edx, eax
mov ebp, dword [esp + 0x74]
cmp ebp, edx
jge 0x6c90d4e7
lea edx, [edi + 2]
cmp dword [ebx + 0x3c], edx
jl 0x6c90d6c8
mov dword [esp + 0xb8], edi
mov ecx, dword [ebx + 0x40]
sub edi, eax
lea esi, [edi + 2]
cmp ecx, esi
jb 0x6c90d71d
cmp edi, esi
ja 0x6c90d714
mov dword [esp + 0xb0], edx
mov eax, dword [ebx + 0x38]
mov edx, dword [ebx + 8]
mov ebp, dword [ebx + 0xc]
mov edx, dword [edx + 0x20]
mov dword [esp], ebp
sub ecx, edi
mov ebp, ecx
neg ecx
sar ecx, 0x1f
and edi, ecx
add eax, edi
mov dword [esp + 4], eax
mov dword [esp + 8], 2
mov dword [esp + 0xc], ebp
call edx
mov eax, dword [esp + 0xc8]
mov edx, dword [eax + 0x40]
movzx ecx, word [esp + 0x10]
mov ebx, dword [esp + 0xb0]
cmp edx, ebx
jb 0x6c90d70d
mov ebp, dword [esp + 0xb8]
cmp ebp, ebx
ja 0x6c90d704
mov word [esp + 0x16], cx
mov ecx, dword [eax + 8]
mov ebx, dword [eax + 0xc]
mov ecx, dword [ecx + 0x20]
mov esi, dword [eax + 0x38]
mov dword [esp], ebx
sub edx, ebp
mov ebx, edx
neg edx
sar edx, 0x1f
and edx, ebp
add edx, esi
mov dword [esp + 4], edx
mov dword [esp + 8], 2
mov dword [esp + 0xc], ebx
call ecx
mov eax, dword [esp + 0xc8]
mov edx, dword [eax + 0x40]
mov ecx, dword [esp + 0xb0]
cmp edx, ecx
jae 0x6c90d53f
jmp 0x6c90d6ff
mov eax, dword [0x6c96bb38]
mov ecx, dword [0x6c96bb3c]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.6c7cb200
mov eax, dword [esp + 8]
lea ecx, [0x6c9fc1bc]
mov dword [esp + 0xe4], ecx
mov dword [esp + 0xe8], eax
add esp, 0xc4
ret
call fcn.6c82c120
mov eax, ebp
mov ecx, ebx
call fcn.6c82c140
mov ecx, ebx
call fcn.6c82c120
mov eax, edi
mov ecx, esi
call fcn.6c82c140
mov edx, ecx
mov ecx, esi
call fcn.6c82c120
nop
call fcn.6c82ac40
jmp fcn.6c90be80