Function at 0x6bddb0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0xe4]
cmp eax, dword [ecx + 8]
jbe 0x6bf3c7
sub esp, 0x164
mov dword [esp + 0x184], 0
mov dword [esp + 0x188], 0
mov dword [esp + 0x18c], 0
mov dword [esp + 0x190], 0
mov eax, dword [esp + 0x17c]
mov dword [esp], eax
mov eax, dword [esp + 0x180]
mov dword [esp + 4], eax
call fcn.006bf3e0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 8]
mov ebx, dword [esp + 0x18]
mov ebp, dword [esp + 0x14]
test ebp, ebp
jne 0x6bf33a
mov dword [esp + 0x3c], eax
mov dword [esp + 0x48], ecx
mov dword [esp + 0x110], edx
mov eax, dword [esp + 0x16c]
mov ecx, dword [eax + 0x10]
mov edx, dword [esp + 0x170]
mov dword [esp], edx
call ecx
movzx eax, byte [esp + 0x18]
lea esi, [esp + 4]
mov dword [esp + 0x134], esi
lea edi, [esp + 0x150]
call fcn.0045725e
test al, al
je 0x6bf333
lea edi, [esp + 0x13c]
lea esi, [esp + 0x150]
call fcn.0045725e
mov eax, dword [esp + 0x13c]
mov ecx, dword [esp + 0x140]
mov edx, ecx
shr ecx, 0x1f
shl ecx, 0x1f
test ecx, ecx
je 0x6bf320
mov ecx, eax
shr eax, 0x1f
shl edx, 1
or edx, eax
mov eax, ecx
shl ecx, 1
shr ecx, 0x1f
mov ebx, edx
shl edx, 1
or edx, ecx
mov ecx, edx
add edx, 0xd7b17f80
shr ebx, 0x1f
add ecx, 0xd7b17f80
adc ebx, 0xd
test edx, edx
sete cl
test ebx, ebx
sete dl
and edx, ecx
test dl, dl
je 0x6bf319
test eax, 0x3fffffff
sete al
xor eax, 1
test al, al
jne 0x6bf287
mov eax, dword [0xe796e4]
mov ecx, dword [esp + 0x16c]
lea edx, [0xaabcc0]
cmp ecx, edx
je 0x6bf25e
lea eax, [0x90d100]
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.00403fd0
mov eax, dword [esp + 8]
mov dword [esp + 0x114], eax
lea ecx, [0x90d780]
mov dword [esp], ecx
mov dword [esp + 4], 0
call fcn.00403fd0
mov eax, dword [esp + 8]
mov dword [esp + 0x118], eax
mov dword [esp + 0x90], 0xc
lea ecx, [0x9ff680]
mov dword [esp + 0xa0], ecx
mov dword [esp + 0xac], eax
lea ecx, [esp + 0x18c]
mov dword [esp + 0xb0], ecx
mov ecx, dword [esp + 0x114]
mov dword [esp + 0xb4], ecx
lea edx, [esp + 0x90]
mov dword [esp], edx
call fcn.0042c1c0
test eax, eax
jne 0x6bf251
mov dword [esp], 0x18
lea eax, [0x9ff684]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x16c]
mov dword [esp + 8], eax
mov ecx, dword [esp + 0x170]
mov dword [esp + 0xc], ecx
mov edx, dword [esp + 0x174]
mov dword [esp + 0x10], edx
mov ebx, dword [esp + 0x178]
mov dword [esp + 0x14], ebx
mov ebp, dword [esp + 0x114]
mov dword [esp + 0x18], ebp
mov ebp, dword [esp + 0x118]
mov dword [esp + 0x1c], ebp
call fcn.00435470
lea eax, [0x92cb00]
mov dword [esp], eax
mov dword [esp + 4], 0
mov ecx, dword [esp + 0x48]
lea edx, [ecx + 6]
mov dword [esp + 0x60], edx
mov dword [esp + 8], edx
call fcn.00440170
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x60]
cmp ecx, 1
jb 0x6bf213
mov edx, 1
mov dword [esp + 0x5c], edx
mov byte [eax], 5
mov ebx, dword [esp + 0x168]
mov ebp, dword [ebx + 0x1c]
mov esi, dword [ebx + 0x18]
test ebp, ebp
je 0x6bf1c3
mov edi, dword [ebx + 0x24]
test edi, edi
je 0x6bf1c3
cmp ebp, 0xff
jg 0x6bf16b
mov dword [esp + 0x7c], ebp
mov dword [esp + 0x130], esi
lea edi, [edx + 1]
cmp edi, ecx
ja 0x6bf121
xchg ebp, ebx
mov byte [eax + edx], bl
xchg ebp, ebx
xor edx, edx
jmp 0x6be0b1
mov byte [eax + edi], bl
inc edx
mov ebx, dword [esp + 0x130]
mov ebx, dword [esp + 0x168]
mov edi, esi
mov esi, dword [esp + 0x130]
cmp edx, ebp
jge 0x6be10c
mov ebx, dword [esi + edx*4]
lea esi, [edi + 1]
cmp esi, ecx
jbe 0x6be096
mov dword [esp + 0x78], edx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x74], edi
lea edx, [0x92cb00]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], edi
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], esi
call fcn.004402d0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
lea esi, [ecx + 1]
mov ebx, dword [esp + 0x64]
mov ebp, dword [esp + 0x7c]
mov edi, dword [esp + 0x74]
mov ecx, edx
mov edx, dword [esp + 0x78]
jmp 0x6be096
mov dword [esp + 0x50], ecx
mov dword [esp + 0x124], eax
mov dword [esp + 0x5c], edi
mov edx, dword [esp + 0x174]
mov ebx, dword [edx + 0x2c]
mov ebp, dword [esp + 0x178]
mov dword [esp], ebp
mov dword [esp + 4], eax
mov dword [esp + 8], edi
mov dword [esp + 0xc], ecx
call ebx
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x18c], ecx
mov dword [esp + 0x190], eax
test ecx, ecx
jne 0x6bf114
mov edx, dword [esp + 0x50]
cmp edx, 2
jb 0x6bf3bc
lea eax, [0x9432c0]
mov dword [esp], eax
mov ecx, dword [esp + 0x174]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x178]
mov dword [esp + 8], edx
call fcn.004089e0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov eax, dword [esp + 0x124]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov ecx, dword [esp + 0x50]
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], 2
call fcn.00464ae0
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x18c], ecx
mov dword [esp + 0x190], eax
test ecx, ecx
jne 0x6bf107
mov ecx, dword [esp + 0x5c]
test ecx, ecx
jbe 0x6bf3b5
mov edx, dword [esp + 0x124]
movzx ebx, byte [edx]
cmp bl, 5
jne 0x6bf04b
cmp ecx, 1
jbe 0x6bf3ab
movzx eax, byte [edx + 1]
cmp eax, 0xff
je 0x6beff3
mov ecx, dword [esp + 0x168]
mov ebx, dword [ecx + 0x24]
test ebx, ebx
jne 0x6bef52
mov eax, dword [ecx]
mov ecx, dword [esp + 0x50]
cmp ecx, 3
jb 0x6bef10
mov ebx, 3
mov dword [esp + 0x128], edx
mov dword [esp + 0x5c], ebx
mov dword [esp + 0x60], ecx
mov byte [edx], 5
mov byte [edx + 1], al
mov byte [edx + 2], 0
mov eax, dword [esp + 0x110]
mov dword [esp], eax
mov ebp, dword [esp + 0x48]
mov dword [esp + 4], ebp
call fcn.004f9490
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
test eax, eax
jne 0x6bebba
mov eax, dword [esp + 0x48]
cmp eax, 0xff
jg 0x6beb62
mov ecx, dword [esp + 0x5c]
lea edx, [ecx + 1]
mov ebx, dword [esp + 0x60]
cmp edx, ebx
ja 0x6beb21
mov ebp, dword [esp + 0x128]
mov byte [ebp + ecx], 3
lea ecx, [edx + 1]
cmp ecx, ebx
ja 0x6beae3
mov byte [ebp + edx], al
lea edx, [eax + ecx]
mov dword [esp + 0x5c], edx
cmp edx, ebx
ja 0x6beaac
mov dword [esp + 0x128], ebp
mov dword [esp + 0x60], ebx
add ecx, ebp
mov dword [esp], ecx
mov ecx, dword [esp + 0x110]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.00457480
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x128]
mov edx, dword [esp + 0x60]
lea ebx, [eax + 2]
cmp ebx, edx
ja 0x6bea72
mov dword [esp + 0x120], ecx
mov dword [esp + 0x5c], ebx
mov dword [esp + 0x58], edx
mov ebp, dword [esp + 0x3c]
mov esi, ebp
sar ebp, 8
xchg ebp, ebx
mov byte [ecx + eax], bl
xchg ebp, ebx
xchg esi, ebx
mov byte [ecx + eax + 1], bl
xchg esi, ebx
mov eax, dword [esp + 0x174]
mov ebp, dword [eax + 0x2c]
mov esi, dword [esp + 0x178]
mov dword [esp], esi
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], edx
call ebp
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x18c], eax
mov dword [esp + 0x190], ecx
test eax, eax
jne 0x6bea65
mov edx, dword [esp + 0x58]
cmp edx, 4
jb 0x6bf3a1
lea eax, [0x9432c0]
mov dword [esp], eax
mov ecx, dword [esp + 0x174]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x178]
mov dword [esp + 8], edx
call fcn.004089e0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov eax, dword [esp + 0x120]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 4
mov ecx, dword [esp + 0x58]
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], 4
call fcn.00464ae0
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x18c], ecx
mov dword [esp + 0x190], eax
test ecx, ecx
jne 0x6bea58
mov ecx, dword [esp + 0x5c]
test ecx, ecx
jbe 0x6bf39a
mov edx, dword [esp + 0x120]
movzx ebx, byte [edx]
cmp bl, 5
jne 0x6be99c
cmp ecx, 1
jbe 0x6bf390
movzx ebx, byte [edx + 1]
test ebx, ebx
jne 0x6be8e2
cmp ecx, 2
jbe 0x6bf386
movzx eax, byte [edx + 2]
test al, al
jne 0x6be88a
lea eax, [0x96e8e0]
mov dword [esp], eax
call fcn.0040af00
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x5c]
cmp ecx, 3
jbe 0x6bf37c
mov dword [esp + 0x138], eax
mov ecx, dword [esp + 0x120]
movzx edx, byte [ecx + 3]
cmp dl, 1
je 0x6be832
cmp dl, 3
je 0x6be781
cmp dl, 4
jne 0x6be6c5
lea eax, [0x92cb00]
mov dword [esp], eax
mov dword [esp + 4], 0x10
mov dword [esp + 8], 0x10
call fcn.00440170
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x138]
mov dword [ecx + 0xc], 0x10
mov dword [ecx + 0x10], 0x10
mov edx, dword [0xe8ff30]
test edx, edx
jne 0x6be6b8
mov dword [ecx + 8], eax
mov eax, 0x12
mov dword [esp + 0x4c], eax
mov edx, dword [esp + 0x58]
cmp edx, eax
jl 0x6be695
cmp eax, edx
ja 0x6bf375
mov ebx, dword [esp + 0x120]
mov dword [esp + 0x54], edx
mov dword [esp + 0x11c], ebx
lea eax, [0x9432c0]
mov dword [esp], eax
mov eax, dword [esp + 0x174]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x178]
mov dword [esp + 8], eax
call fcn.004089e0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov eax, dword [esp + 0x11c]
mov dword [esp + 8], eax
mov ecx, dword [esp + 0x4c]
mov dword [esp + 0xc], ecx
mov edx, dword [esp + 0x54]
mov dword [esp + 0x10], edx
mov dword [esp + 0x14], ecx
call fcn.00464ae0
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x18c], ecx
mov dword [esp + 0x190], eax
test ecx, ecx
jne 0x6be688
mov ebx, dword [esp + 0x138]
mov ebp, dword [ebx + 0xc]
mov esi, dword [ebx + 8]
test esi, esi
je 0x6be627
mov ecx, dword [esp + 0x4c]
cmp ebp, ecx
jle 0x6be61e
mov eax, ecx
mov edx, dword [esp + 0x11c]
cmp edx, esi
je 0x6be5b8
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.00457480
mov ecx, dword [esp + 0x4c]
lea eax, [ecx - 2]
cmp eax, ecx
jae 0x6bf36b
mov eax, dword [esp + 0x11c]
movzx edx, byte [ecx + eax - 2]
shl edx, 8
movzx eax, byte [ecx + eax - 1]
or edx, eax
mov eax, dword [esp + 0x138]
mov dword [eax + 0x14], edx
lea ecx, [0xaa96d0]
mov dword [esp + 0x184], ecx
mov dword [esp + 0x188], eax
mov dword [esp + 0x18c], 0
mov dword [esp + 0x190], 0
nop
call fcn.0042c900
add esp, 0x164
ret
mov eax, ecx
mov ecx, ebp
jmp 0x6be59d
mov eax, dword [esp + 0x4c]
lea ecx, [eax - 2]
mov edx, dword [esp + 0x54]
cmp ecx, edx
ja 0x6bf370
mov dword [esp], 0
mov eax, dword [esp + 0x11c]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
call fcn.004436f0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov edi, dword [esp + 0x138]
mov dword [edi + 4], eax
mov eax, dword [0xe8ff30]
test eax, eax
jne 0x6be67c
mov dword [edi], ecx
jmp 0x6be5b8
mov eax, ecx
call fcn.00456ab0
jmp 0x6be5b8
nop
call fcn.0042c900
add esp, 0x164
ret
lea ecx, [0x92cb00]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], eax
call fcn.00440170
mov ebx, dword [esp + 0xc]
mov edx, dword [esp + 0x4c]
jmp 0x6be4fa
lea edi, [ecx + 8]
call fcn.00456ab0
jmp 0x6be4d6
movzx eax, dl
mov dword [esp], eax
sar eax, 0x1f
mov dword [esp + 4], eax
mov dword [esp + 8], 0xa
call fcn.0047e8d0
mov dword [esp], 0
lea eax, [0x9da9d6]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x15
call fcn.00443570
mov eax, dword [esp + 0x18]
mov dword [esp + 0x30], eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0xf8], ecx
lea edx, [0x94a0a0]
mov dword [esp], edx
call fcn.0040af00
mov edi, dword [esp + 4]
mov eax, dword [esp + 0x30]
mov dword [edi + 4], eax
mov eax, dword [0xe8ff30]
test eax, eax
jne 0x6be773
mov eax, dword [esp + 0xf8]
mov dword [edi], eax
mov dword [esp + 0x184], 0
mov dword [esp + 0x188], 0
lea eax, [0xaa4cf0]
mov dword [esp + 0x18c], eax
mov dword [esp + 0x190], edi
nop
call fcn.0042c900
add esp, 0x164
ret
mov eax, dword [esp + 0xf8]
call fcn.00456ab0
jmp 0x6be73c
lea eax, [0x9432c0]
mov dword [esp], eax
mov ecx, dword [esp + 0x174]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x178]
mov dword [esp + 8], edx
call fcn.004089e0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov eax, dword [esp + 0x120]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov ecx, dword [esp + 0x58]
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], 1
call fcn.00464ae0
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x1c]
test ecx, ecx
jne 0x6be801
mov ebx, dword [esp + 0x120]
movzx ebp, byte [ebx]
lea eax, [ebp + 2]
mov ecx, dword [esp + 0x138]
jmp 0x6be4db
mov dword [esp + 0x184], 0
mov dword [esp + 0x188], 0
mov dword [esp + 0x18c], ecx
mov dword [esp + 0x190], eax
nop
call fcn.0042c900
add esp, 0x164
ret
lea eax, [0x92cb00]
mov dword [esp], eax
mov dword [esp + 4], 4
mov dword [esp + 8], 4
call fcn.00440170
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x138]
mov dword [ecx + 0xc], 4
mov dword [ecx + 0x10], 4
mov edx, dword [0xe8ff30]
test edx, edx
jne 0x6be880
mov dword [ecx + 8], eax
mov eax, 6
jmp 0x6be4db
lea edi, [ecx + 8]
call fcn.00456ab0
jmp 0x6be876
lea eax, [0x94a0a0]
mov dword [esp], eax
call fcn.0040af00
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x17
lea ecx, [0x9dc2d7]
mov dword [eax], ecx
mov dword [esp + 0x184], 0
mov dword [esp + 0x188], 0
lea ecx, [0xaa4cf0]
mov dword [esp + 0x18c], ecx
mov dword [esp + 0x190], eax
nop
call fcn.0042c900
add esp, 0x164
ret
mov dword [esp], ebx
call fcn.006bf640
mov eax, dword [esp + 8]
mov ecx, dword [esp + 4]
mov dword [esp], 0
lea edx, [0x9d478e]
mov dword [esp + 4], edx
mov dword [esp + 8], 0xe
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
call fcn.00443570
mov eax, dword [esp + 0x14]
mov dword [esp + 0xfc], eax
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x38], ecx
lea edx, [0x94a0a0]
mov dword [esp], edx
call fcn.0040af00
mov edi, dword [esp + 4]
mov eax, dword [esp + 0x38]
mov dword [edi + 4], eax
mov eax, dword [0xe8ff30]
test eax, eax
jne 0x6be98e
mov eax, dword [esp + 0xfc]
mov dword [edi], eax
mov dword [esp + 0x184], 0
mov dword [esp + 0x188], 0
lea eax, [0xaa4cf0]
mov dword [esp + 0x18c], eax
mov dword [esp + 0x190], edi
nop
call fcn.0042c900
add esp, 0x164
ret
mov eax, dword [esp + 0xfc]
call fcn.00456ab0
jmp 0x6be957
movzx eax, bl
mov dword [esp], eax
sar eax, 0x1f
mov dword [esp + 4], eax
mov dword [esp + 8], 0xa
call fcn.0047e8d0
mov dword [esp], 0
lea eax, [0x9e09ac]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x1c
call fcn.00443570
mov eax, dword [esp + 0x18]
mov dword [esp + 0x2c], eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x100], ecx
lea edx, [0x94a0a0]
mov dword [esp], edx
call fcn.0040af00
mov edi, dword [esp + 4]
mov eax, dword [esp + 0x2c]
mov dword [edi + 4], eax
mov eax, dword [0xe8ff30]
test eax, eax
jne 0x6bea4a
mov eax, dword [esp + 0x100]
mov dword [edi], eax
mov dword [esp + 0x184], 0
mov dword [esp + 0x188], 0
lea eax, [0xaa4cf0]
mov dword [esp + 0x18c], eax
mov dword [esp + 0x190], edi
nop
call fcn.0042c900
add esp, 0x164
ret
mov eax, dword [esp + 0x100]
call fcn.00456ab0
jmp 0x6bea13
nop
call fcn.0042c900
add esp, 0x164
ret
nop
call fcn.0042c900
add esp, 0x164
ret
mov dword [esp + 0x5c], eax
lea ebp, [0x92cb00]
mov dword [esp], ebp
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ebx
call fcn.004402d0
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
lea ebx, [eax + 2]
mov eax, dword [esp + 0x5c]
jmp 0x6be30c
mov dword [esp + 0x7c], ecx
lea eax, [0x92cb00]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], edx
call fcn.004402d0
mov ebp, dword [esp + 0x14]
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x7c]
jmp 0x6be2ce
mov dword [esp + 0x5c], edx
lea eax, [0x92cb00]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], ecx
call fcn.004402d0
mov ebp, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
lea ecx, [eax + 1]
mov eax, dword [esp + 0x48]
mov edx, dword [esp + 0x5c]
jmp 0x6be2bb
lea eax, [0x92cb00]
mov dword [esp], eax
mov ebp, dword [esp + 0x128]
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], edx
call fcn.004402d0
mov ebp, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
lea edx, [eax + 1]
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x5c]
jmp 0x6be2ab
lea eax, [0x94a0a0]
mov dword [esp], eax
call fcn.0040af00
mov eax, dword [esp + 4]
mov dword [eax + 4], 0xd
lea ecx, [0x9d33e2]
mov dword [eax], ecx
mov dword [esp + 0x184], 0
mov dword [esp + 0x188], 0
lea ecx, [0xaa4cf0]
mov dword [esp + 0x18c], ecx
mov dword [esp + 0x190], eax
nop
call fcn.0042c900
add esp, 0x164
ret
mov dword [esp + 0xf4], eax
mov dword [esp + 0x28], ecx
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.004f70c0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
test ecx, ecx
je 0x6becd4
mov dword [esp + 0x44], eax
mov dword [esp + 0x10c], ecx
mov edx, dword [esp + 0x5c]
lea ebx, [edx + 1]
mov ebp, dword [esp + 0x60]
cmp ebx, ebp
ja 0x6bec8c
mov esi, dword [esp + 0x128]
mov byte [esi + edx], 1
lea edx, [eax + ebx]
mov dword [esp + 0x5c], edx
cmp edx, ebp
ja 0x6bec51
mov dword [esp + 0x60], ebp
mov dword [esp + 0x128], esi
lea edx, [esi + ebx]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.00457480
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x60]
mov edx, dword [esp + 0x128]
mov ebx, ecx
mov ecx, edx
mov edx, ebx
jmp 0x6be301
mov dword [esp + 0x7c], ebx
lea eax, [0x92cb00]
mov dword [esp], eax
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], edx
call fcn.004402d0
mov ebp, dword [esp + 0x1c]
mov esi, dword [esp + 0x14]
mov eax, dword [esp + 0x44]
mov ecx, dword [esp + 0x10c]
mov ebx, dword [esp + 0x7c]
jmp 0x6bec19
lea eax, [0x92cb00]
mov dword [esp], eax
mov ecx, dword [esp + 0x128]
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], ebx
call fcn.004402d0
mov esi, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ebp, dword [esp + 0x1c]
lea ebx, [eax + 1]
mov eax, dword [esp + 0x44]
mov ecx, dword [esp + 0x10c]
mov edx, dword [esp + 0x5c]
jmp 0x6bec0a
mov eax, dword [esp + 0x28]
cmp eax, 4
jne 0x6beef2
mov eax, dword [esp + 0xf4]
movzx ecx, byte [eax + 1]
movzx edx, byte [eax + 2]
movzx ebx, byte [eax + 3]
movzx eax, byte [eax]
mov dword [esp + 0x80], 0
mov dword [esp + 0x84], 0
mov dword [esp + 0x88], 0
mov dword [esp + 0x8c], 0
mov ebp, dword [0xe71ddc]
mov esi, dword [0xe71dd8]
cmp ebp, 0x10
jge 0x6beee8
mov byte [esp + 0x26], cl
mov byte [esp + 0x25], dl
mov byte [esp + 0x24], bl
mov byte [esp + 0x27], al
lea edi, [esp + 0x80]
cmp esi, edi
je 0x6bed63
mov dword [esp], edi
mov dword [esp + 4], esi
mov dword [esp + 8], ebp
call fcn.00457480
movzx eax, byte [esp + 0x27]
mov byte [esp + 0x8c], al
movzx eax, byte [esp + 0x26]
mov byte [esp + 0x8d], al
movzx eax, byte [esp + 0x25]
mov byte [esp + 0x8e], al
movzx eax, byte [esp + 0x24]
mov byte [esp + 0x8f], al
lea eax, [esp + 0x80]
mov ecx, 0x10
test eax, eax
je 0x6bee90
mov dword [esp + 0x108], eax
mov dword [esp + 0x40], ecx
mov edx, dword [esp + 0x5c]
lea ebx, [edx + 1]
mov ebp, dword [esp + 0x60]
cmp ebx, ebp
ja 0x6bee48
mov esi, dword [esp + 0x128]
mov byte [esi + edx], 4
lea edx, [ecx + ebx]
mov dword [esp + 0x5c], edx
cmp edx, ebp
ja 0x6bee0d
mov dword [esp + 0x128], esi
mov dword [esp + 0x60], ebp
lea edx, [esi + ebx]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00457480
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x60]
mov edx, dword [esp + 0x128]
jmp 0x6bec46
mov dword [esp + 0x7c], ebx
lea eax, [0x92cb00]
mov dword [esp], eax
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], edx
call fcn.004402d0
mov ebp, dword [esp + 0x1c]
mov esi, dword [esp + 0x14]
mov eax, dword [esp + 0x108]
mov ecx, dword [esp + 0x40]
mov ebx, dword [esp + 0x7c]
jmp 0x6beddb
lea eax, [0x92cb00]
mov dword [esp], eax
mov ecx, dword [esp + 0x128]
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], ebx
call fcn.004402d0
mov esi, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ebp, dword [esp + 0x1c]
lea ebx, [eax + 1]
mov eax, dword [esp + 0x108]
mov ecx, dword [esp + 0x40]
mov edx, dword [esp + 0x5c]
jmp 0x6bedcc
lea eax, [0x94a0a0]
mov dword [esp], eax
call fcn.0040af00
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x14
lea ecx, [0x9d9caa]
mov dword [eax], ecx
mov dword [esp + 0x184], 0
mov dword [esp + 0x188], 0
lea ecx, [0xaa4cf0]
mov dword [esp + 0x18c], ecx
mov dword [esp + 0x190], eax
nop
call fcn.0042c900
add esp, 0x164
ret
mov ebp, 0x10
jmp 0x6bed38
cmp eax, 0x10
jne 0x6bef07
mov eax, dword [esp + 0xf4]
mov ecx, dword [esp + 0x28]
jmp 0x6bed9f
xor eax, eax
xor ecx, ecx
jmp 0x6bed9f
mov dword [esp + 0x70], eax
lea eax, [0x92cb00]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], 0
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], 3
call fcn.004402d0
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
lea ebx, [eax + 3]
mov eax, dword [esp + 0x70]
jmp 0x6be23e
mov dword [esp + 0x12c], ebx
mov dword [esp + 0x6c], eax
lea eax, [0x94d360]
mov dword [esp], eax
mov eax, dword [esp + 0x174]
mov dword [esp + 4], eax
mov ecx, dword [esp + 0x178]
mov dword [esp + 8], ecx
call fcn.004089e0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x16c]
mov dword [esp], edx
mov edx, dword [esp + 0x170]
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 0x10], eax
mov edx, dword [esp + 0x12c]
mov eax, dword [edx]
call eax
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x18c], ecx
mov dword [esp + 0x190], eax
test ecx, ecx
jne 0x6befe6
mov ecx, dword [esp + 0x168]
mov edx, dword [esp + 0x124]
jmp 0x6be22a
nop
call fcn.0042c900
add esp, 0x164
ret
lea eax, [0x94a0a0]
mov dword [esp], eax
call fcn.0040af00
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x24
lea ecx, [0x9e668f]
mov dword [eax], ecx
mov dword [esp + 0x184], 0
mov dword [esp + 0x188], 0
lea ecx, [0xaa4cf0]
mov dword [esp + 0x18c], ecx
mov dword [esp + 0x190], eax
nop
call fcn.0042c900
add esp, 0x164
ret
movzx eax, bl
mov dword [esp], eax
sar eax, 0x1f
mov dword [esp + 4], eax
mov dword [esp + 8], 0xa
call fcn.0047e8d0
mov dword [esp], 0
lea eax, [0x9e09ac]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x1c
call fcn.00443570
mov eax, dword [esp + 0x18]
mov dword [esp + 0x34], eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x104], ecx
lea edx, [0x94a0a0]
mov dword [esp], edx
call fcn.0040af00
mov edi, dword [esp + 4]
mov eax, dword [esp + 0x34]
mov dword [edi + 4], eax
mov eax, dword [0xe8ff30]
test eax, eax
jne 0x6bf0f9
mov eax, dword [esp + 0x104]
mov dword [edi], eax
mov dword [esp + 0x184], 0
mov dword [esp + 0x188], 0
lea eax, [0xaa4cf0]
mov dword [esp + 0x18c], eax
mov dword [esp + 0x190], edi
nop
call fcn.0042c900
add esp, 0x164
ret
mov eax, dword [esp + 0x104]
call fcn.00456ab0
jmp 0x6bf0c2
nop
call fcn.0042c900
add esp, 0x164
ret
nop
call fcn.0042c900
add esp, 0x164
ret
lea ebx, [0x92cb00]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], edx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], edi
call fcn.004402d0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
lea edi, [ecx + 1]
mov ebx, dword [esp + 0x168]
mov ebp, dword [esp + 0x7c]
mov esi, dword [esp + 0x130]
mov ecx, edx
mov edx, dword [esp + 0x5c]
jmp 0x6be08b
lea eax, [0x94a0a0]
mov dword [esp], eax
call fcn.0040af00
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x1f
lea ecx, [0x9e2fba]
mov dword [eax], ecx
mov dword [esp + 0x184], 0
mov dword [esp + 0x188], 0
lea ecx, [0xaa4cf0]
mov dword [esp + 0x18c], ecx
mov dword [esp + 0x190], eax
nop
call fcn.0042c900
add esp, 0x164
ret
lea ebp, [edx + 2]
cmp ebp, ecx
ja 0x6bf1d7
mov word [eax + edx], 1
mov edi, ebp
jmp 0x6be10c
lea ebx, [0x92cb00]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], edx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebp
call fcn.004402d0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
lea ebp, [ecx + 2]
mov ebx, dword [esp + 0x168]
mov ecx, edx
mov edx, dword [esp + 0x5c]
jmp 0x6bf1ca
lea edx, [0x92cb00]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], 0
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], 1
call fcn.004402d0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
inc ecx
mov ebx, edx
mov edx, ecx
mov ecx, ebx
jmp 0x6be042
nop
call fcn.0042c900
add esp, 0x164
ret
mov dword [esp], ecx
mov edx, dword [esp + 0x170]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.00402f80
movzx eax, byte [esp + 0xc]
test al, al
jne 0x6be007
jmp 0x6bdf1b
mov eax, dword [esp + 0x174]
mov ecx, dword [eax + 0x20]
mov dword [esp + 0x68], ecx
mov edx, dword [esp + 0x178]
mov dword [esp], edx
mov edi, dword [esp + 0x134]
lea esi, [esp + 0x150]
call fcn.0045725e
mov ecx, dword [esp + 0x68]
call ecx
mov dword [esp + 0xb8], 0x20
mov eax, dword [esp + 0x174]
lea ecx, [eax + 0x20]
mov dword [esp + 0xc8], ecx
mov ecx, dword [esp + 0x178]
mov dword [esp + 0xd4], ecx
lea edi, [esp + 0xd8]
lea esi, [0xe7b720]
call fcn.0045725e
lea ecx, [esp + 0xb8]
mov dword [esp], ecx
call fcn.0042c1c0
test eax, eax
jne 0x6bf30c
jmp 0x6bdf00
nop
call fcn.0042c900
add esp, 0x164
ret
xor eax, eax
jmp 0x6bdef5
mov edx, dword [esp + 0x144]
mov ebx, dword [esp + 0x148]
jmp 0x6bded9
xor eax, eax
jmp 0x6bdef8
mov dword [esp + 0x184], 0
mov dword [esp + 0x188], 0
mov dword [esp + 0x18c], ebp
mov dword [esp + 0x190], ebx
nop
call fcn.0042c900
add esp, 0x164
ret
call fcn.00456b30
call fcn.00456b70
mov ecx, eax
call fcn.00456b70
mov eax, 3
call fcn.00456b30
mov eax, 2
call fcn.00456b30
mov eax, 1
call fcn.00456b30
xor eax, eax
call fcn.00456b30
mov ecx, 4
call fcn.00456b70
mov eax, 1
call fcn.00456b30
xor eax, eax
call fcn.00456b30
mov ecx, 2
call fcn.00456b70
nop
call fcn.00455270
jmp fcn.006bddb0