Function at 0x6a3bc0
Capabilities:
Enumerate pe sections
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x64]
cmp eax, dword [ecx + 8]
jbe 0x6a518d
sub esp, 0xe4
mov ecx, dword [esp + 0xf0]
mov dword [esp + 0x54], ecx
mov edx, dword [esp + 0xec]
mov dword [esp + 0x98], edx
cmp ecx, 0xc
jge 0x6a48c1
cmp ecx, 7
jge 0x6a43aa
cmp ecx, 5
jne 0x6a43a2
mov ebx, dword [edx]
cmp ebx, 0x7461703a
jne 0x6a439a
movzx ebx, byte [edx + 4]
cmp bl, 0x68
jne 0x6a3c77
mov ecx, dword [esp + 0xf8]
mov eax, dword [esp + 0xf4]
mov edx, dword [esp + 0xe8]
mov dword [edx + 0x2c], ecx
mov ecx, dword [0xc6f140]
test ecx, ecx
jne 0x6a3c6d
mov dword [edx + 0x28], eax
mov dword [esp + 0x100], 0
mov dword [esp + 0x104], 0
add esp, 0xe4
ret
lea edi, [edx + 0x28]
call fcn.0044c860
jmp 0x6a3c50
cmp ecx, 7
jne 0x6a3c9c
mov eax, dword [edx]
cmp eax, 0x6174733a
jne 0x6a3c9c
movzx eax, word [edx + 4]
cmp ax, 0x7574
jne 0x6a3c9c
movzx eax, byte [edx + 6]
cmp al, 0x73
je 0x6a42a5
mov eax, dword [esp + 0xf0]
mov ecx, dword [esp + 0xec]
test eax, eax
je 0x6a4001
movzx edx, byte [ecx]
cmp dl, 0x3a
jne 0x6a4001
mov eax, 1
test al, al
je 0x6a3cee
mov eax, dword [esp + 0xec]
mov ecx, dword [esp + 0xf0]
cmp ecx, 0xa
je 0x6a3fc4
je 0x6a3f97
xor eax, eax
test al, al
je 0x6a3c50
mov eax, dword [esp + 0xf0]
mov ecx, dword [esp + 0xec]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov eax, dword [esp + 0xf4]
mov ecx, dword [esp + 0xf8]
mov dword [esp + 8], eax
mov dword [esp + 0xc], ecx
call fcn.006a3780
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
mov ebx, dword [esp + 0x10]
test ecx, ecx
je 0x6a3e62
mov dword [esp + 0x8c], eax
je 0x6a3d42
mov ecx, dword [ecx + 4]
mov dword [esp + 0x98], ecx
lea eax, [0x7f92e0]
mov dword [esp], eax
call fcn.00409d90
mov eax, dword [esp + 4]
mov dword [esp + 0x94], eax
lea ecx, [0x80a3e0]
mov dword [esp], ecx
lea edx, [esp + 0xec]
mov dword [esp + 4], edx
call fcn.00407520
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0x94]
mov dword [edx], ecx
mov ecx, dword [0xc6f140]
test ecx, ecx
jne 0x6a3e55
mov dword [edx + 4], eax
lea eax, [0x80a3e0]
mov dword [esp], eax
lea eax, [esp + 0xf4]
mov dword [esp + 4], eax
call fcn.00407520
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0x94]
mov dword [edx + 8], ecx
mov ecx, dword [0xc6f140]
test ecx, ecx
jne 0x6a3e4b
mov dword [edx + 0xc], eax
mov ecx, dword [esp + 0x98]
mov dword [edx + 0x10], ecx
mov ecx, dword [0xc6f140]
test ecx, ecx
jne 0x6a3e3a
mov eax, dword [esp + 0x8c]
mov dword [edx + 0x14], eax
lea eax, [0x8b06ba]
mov dword [esp], eax
mov dword [esp + 4], 0x2d
mov dword [esp + 8], edx
mov dword [esp + 0xc], 3
mov dword [esp + 0x10], 3
call fcn.006a6580
mov dword [esp + 0x100], 0
mov dword [esp + 0x104], 0
add esp, 0xe4
ret
lea edi, [edx + 0x14]
mov eax, dword [esp + 0x8c]
call fcn.0044c860
jmp 0x6a3df3
lea edi, [edx + 0xc]
call fcn.0044c860
jmp 0x6a3dd5
lea edi, [edx + 4]
call fcn.0044c860
jmp 0x6a3d9d
mov dword [esp + 0x58], ebx
mov dword [esp + 0x24], edx
mov eax, dword [esp + 0xf0]
mov ecx, dword [esp + 0xec]
mov ebp, dword [esp + 0xe8]
mov esi, dword [ebp + 0x30]
test esi, esi
je 0x6a3f49
mov edx, dword [ebp + 0x30]
mov dword [esp + 4], edx
lea edx, [0x80f220]
mov dword [esp], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call fcn.0040ede0
mov eax, dword [esp + 0x10]
mov ecx, dword [eax + 8]
mov edx, dword [eax + 4]
mov ebx, dword [eax]
lea ebp, [edx + 1]
cmp ebp, ecx
jg 0x6a3ef0
lea ecx, [edx + 1]
mov dword [eax + 4], ecx
lea ecx, [ebx + edx*8 + 4]
mov ebp, dword [esp + 0x24]
mov dword [ecx], ebp
mov ecx, dword [0xc6f140]
lea edi, [ebx + edx*8]
test ecx, ecx
jne 0x6a3ee2
mov eax, dword [esp + 0x58]
mov dword [edi], eax
jmp 0x6a3c50
mov eax, dword [esp + 0x58]
call fcn.0044c860
jmp 0x6a3c50
mov dword [esp + 0x90], eax
lea eax, [0x80a3e0]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebp
call fcn.00438c30
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0x90]
mov dword [edi + 8], edx
mov edx, dword [0xc6f140]
test edx, edx
jne 0x6a3f42
mov dword [edi], eax
mov edx, ecx
mov ebx, eax
mov eax, edi
jmp 0x6a3eba
call fcn.0044c860
jmp 0x6a3f37
mov dword [esp + 0x40], eax
mov dword [esp + 0x80], ecx
call fcn.0040a810
mov eax, dword [0xc6f140]
mov ecx, dword [esp]
test eax, eax
jne 0x6a3f82
mov eax, dword [esp + 0xe8]
mov dword [eax + 0x30], ecx
mov ecx, dword [esp + 0x80]
mov ebp, eax
mov eax, dword [esp + 0x40]
jmp 0x6a3e8a
mov edx, dword [esp + 0xe8]
lea edi, [edx + 0x30]
mov eax, ecx
call fcn.0044c860
mov eax, edx
jmp 0x6a3f70
mov dword [esp], eax
lea eax, [0x89bb77]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.004021f0
movzx eax, byte [esp + 0xc]
test al, al
je 0x6a3ce4
mov eax, 1
jmp 0x6a3ce6
mov dword [esp + 0x88], eax
mov dword [esp + 0x50], ecx
mov dword [esp], eax
lea edx, [0x89b497]
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.004021f0
movzx eax, byte [esp + 0xc]
test al, al
jne 0x6a3fba
mov ecx, dword [esp + 0x50]
cmp ecx, 0xa
mov eax, dword [esp + 0x88]
jmp 0x6a3cde
mov dword [esp + 0x4c], eax
mov dword [esp + 0x84], ecx
cmp eax, 0xc
jge 0x6a410b
cmp eax, 0xa
jge 0x6a4065
cmp eax, 2
jne 0x6a4060
movzx edx, word [ecx]
cmp dx, 0x6574
jne 0x6a4033
mov eax, 1
jmp 0x6a3cc3
cmp eax, 0xa
je 0x6a403f
xor eax, eax
jmp 0x6a3cc3
mov dword [esp], ecx
lea ecx, [0x89bb77]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.004021f0
movzx eax, byte [esp + 0xc]
test al, al
jne 0x6a4029
jmp 0x6a4038
cmp eax, 0xa
jmp 0x6a4036
je 0x6a40c5
cmp eax, 0xb
je 0x6a4092
cmp eax, 0xc
jne 0x6a4038
mov dword [esp], ecx
lea ecx, [0x89c8ce]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.004021f0
movzx eax, byte [esp + 0xc]
test al, al
jne 0x6a4029
jmp 0x6a4038
mov dword [esp], ecx
lea edx, [0x89c152]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.004021f0
movzx eax, byte [esp + 0xc]
test al, al
jne 0x6a4029
mov eax, dword [esp + 0x4c]
cmp eax, 0xc
mov ecx, dword [esp + 0x84]
jmp 0x6a406f
mov dword [esp], ecx
mov dword [esp + 4], eax
lea edx, [0x89bb77]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 0xa
call fcn.004020a0
mov eax, dword [esp + 0x10]
test eax, eax
jg 0x6a40fb
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0x84]
jmp 0x6a401a
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0x84]
jmp 0x6a4067
je 0x6a425c
je 0x6a41b5
cmp eax, 0xd
je 0x6a4182
cmp eax, 0x11
je 0x6a4152
cmp eax, 0x17
jne 0x6a4038
mov dword [esp], ecx
lea ecx, [0x8a33d4]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.004021f0
movzx eax, byte [esp + 0xc]
test al, al
jne 0x6a4029
jmp 0x6a4038
mov dword [esp], ecx
lea edx, [0x89f551]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.004021f0
movzx eax, byte [esp + 0xc]
test al, al
jne 0x6a4029
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0x84]
jmp 0x6a4121
mov dword [esp], ecx
lea edx, [0x89d1a4]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.004021f0
movzx eax, byte [esp + 0xc]
test al, al
jne 0x6a4029
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0x84]
jmp 0x6a411c
mov dword [esp], ecx
mov dword [esp + 4], eax
lea edx, [0x89c99a]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 0xc
call fcn.004020a0
mov eax, dword [esp + 0x10]
test eax, eax
jg 0x6a424c
mov eax, dword [esp + 0x4c]
cmp eax, 0xc
je 0x6a4219
jne 0x6a4038
mov ecx, dword [esp + 0x84]
mov dword [esp], ecx
lea ecx, [0x89c99a]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.004021f0
movzx eax, byte [esp + 0xc]
test al, al
jne 0x6a4029
jmp 0x6a4038
mov ecx, dword [esp + 0x84]
mov dword [esp], ecx
lea edx, [0x89c98e]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.004021f0
movzx eax, byte [esp + 0xc]
test al, al
jne 0x6a4029
mov eax, dword [esp + 0x4c]
cmp eax, 0xc
jmp 0x6a41e4
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0x84]
jmp 0x6a4117
mov dword [esp], ecx
mov dword [esp + 4], eax
lea edx, [0x89c8ce]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 0xc
call fcn.004020a0
mov eax, dword [esp + 0x10]
test eax, eax
jg 0x6a4292
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0x84]
jmp 0x6a4015
mov eax, dword [esp + 0x4c]
cmp eax, 0xc
mov ecx, dword [esp + 0x84]
jmp 0x6a4111
lea eax, [0x809b20]
mov dword [esp], eax
call fcn.00409d90
mov eax, dword [esp + 4]
mov dword [esp + 0xa0], eax
mov ecx, dword [esp + 0xf8]
mov edx, dword [esp + 0xf4]
mov dword [esp], edx
mov dword [esp + 4], ecx
call fcn.004540d0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0xa0]
mov dword [ebx], ecx
test eax, eax
je 0x6a4370
je 0x6a42f6
mov eax, dword [eax + 4]
mov dword [esp + 0xb4], 0
mov dword [esp + 0xb8], 0
mov dword [esp + 0xb4], eax
mov dword [esp + 0xb8], edx
mov dword [esp], 0xd
lea eax, [0x8abf68]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x24
lea eax, [esp + 0xb4]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 1
mov dword [esp + 0x14], 1
call fcn.0060e170
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x100], ecx
mov dword [esp + 0x104], eax
add esp, 0xe4
ret
mov ecx, dword [esp + 0xe8]
test byte [ecx], al
mov edx, dword [0xc6f140]
test edx, edx
jne 0x6a438b
mov dword [ecx + 0x18], ebx
jmp 0x6a3c50
lea edi, [ecx + 0x18]
mov eax, ebx
call fcn.0044c860
jmp 0x6a3c50
cmp ecx, 7
jmp 0x6a3c7a
cmp ecx, 7
jmp 0x6a3c7a
je 0x6a487b
cmp ecx, 0xb
je 0x6a474c
cmp ecx, 0xc
je 0x6a4434
jne 0x6a3c9c
mov dword [esp], edx
lea eax, [0x89c98e]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.004021f0
movzx eax, byte [esp + 0xc]
test al, al
je 0x6a3c9c
mov eax, dword [esp + 0xf4]
mov ecx, dword [esp + 0xf8]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.006a5c30
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0xe8]
mov dword [edx + 0x14], eax
mov eax, dword [0xc6f140]
test eax, eax
jne 0x6a4425
mov dword [edx + 0x10], ecx
jmp 0x6a3c50
lea edi, [edx + 0x10]
mov eax, ecx
call fcn.0044c860
jmp 0x6a3c50
mov dword [esp], edx
lea eax, [0x89c8ce]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.004021f0
movzx eax, byte [esp + 0xc]
test al, al
je 0x6a4739
mov ecx, dword [esp + 0xf8]
mov dword [esp + 0x38], ecx
mov edx, dword [esp + 0xf4]
mov dword [esp + 0x6c], edx
cmp ecx, 0x10
je 0x6a46fc
jge 0x6a46d0
xor eax, eax
test al, al
je 0x6a46c5
cmp ecx, 0x10
jbe 0x6a5186
movzx ebx, byte [edx + 0x10]
cmp bl, 0x2b
jne 0x6a46b1
add ecx, 0xffffffef
mov ebx, ecx
neg ecx
sar ecx, 0x1f
and ecx, 0x11
add ecx, edx
mov eax, 1
test al, al
je 0x6a4616
mov edx, dword [esp + 0xe8]
mov dword [edx + 0x50], ebx
mov ebx, dword [0xc6f140]
test ebx, ebx
jne 0x6a4607
mov dword [edx + 0x4c], ecx
mov eax, dword [esp + 0xf0]
mov ecx, dword [esp + 0xec]
mov ebx, dword [esp + 0xf4]
mov dword [esp + 0x5c], ebx
mov ebp, dword [esp + 0xf8]
mov dword [esp + 0x28], ebp
mov esi, dword [edx + 0x30]
test esi, esi
je 0x6a45bf
mov edx, dword [edx + 0x30]
mov dword [esp + 4], edx
lea edx, [0x80f220]
mov dword [esp], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call fcn.0040ede0
mov eax, dword [esp + 0x10]
mov ecx, dword [eax + 4]
mov edx, dword [eax + 8]
mov ebx, dword [eax]
lea ebp, [ecx + 1]
cmp ebp, edx
jg 0x6a4568
lea edx, [ecx + 1]
mov dword [eax + 4], edx
lea edx, [ebx + ecx*8 + 4]
mov ebp, dword [esp + 0x28]
mov dword [edx], ebp
lea edi, [ebx + ecx*8]
mov ecx, dword [0xc6f140]
test ecx, ecx
jne 0x6a455a
mov eax, dword [esp + 0x5c]
mov dword [edi], eax
jmp 0x6a3c50
mov eax, dword [esp + 0x5c]
call fcn.0044c860
jmp 0x6a3c50
mov dword [esp + 0x90], eax
lea eax, [0x80a3e0]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ebp
call fcn.00438c30
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0x90]
mov dword [edi + 8], edx
mov edx, dword [0xc6f140]
test edx, edx
jne 0x6a45b8
mov dword [edi], eax
mov ebx, eax
mov eax, edi
jmp 0x6a4532
call fcn.0044c860
jmp 0x6a45af
mov dword [esp + 0x3c], eax
mov dword [esp + 0x78], ecx
call fcn.0040a810
mov eax, dword [0xc6f140]
mov ecx, dword [esp]
test eax, eax
jne 0x6a45f2
mov eax, dword [esp + 0xe8]
mov dword [eax + 0x30], ecx
mov ecx, dword [esp + 0x78]
mov edx, eax
mov eax, dword [esp + 0x3c]
jmp 0x6a4502
mov edx, dword [esp + 0xe8]
lea edi, [edx + 0x30]
mov eax, ecx
call fcn.0044c860
mov eax, edx
jmp 0x6a45e3
lea edi, [edx + 0x4c]
mov eax, ecx
call fcn.0044c860
jmp 0x6a44d3
mov dword [esp + 0xdc], 0
mov dword [esp + 0xe0], 0
lea eax, [0x80a3e0]
mov dword [esp], eax
lea eax, [esp + 0xf4]
mov dword [esp + 4], eax
call fcn.00407520
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
mov dword [esp + 0xdc], ecx
mov dword [esp + 0xe0], eax
mov dword [esp], 0xd
lea eax, [0x8b2fd0]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x32
lea eax, [esp + 0xdc]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 1
mov dword [esp + 0x14], 1
call fcn.0060e170
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x100], ecx
mov dword [esp + 0x104], eax
add esp, 0xe4
ret
cmp bl, 0x3b
je 0x6a449c
xor eax, eax
xor ebx, ebx
xor ecx, ecx
jmp 0x6a44b0
xor eax, eax
xor ebx, ebx
xor ecx, ecx
jmp 0x6a44b0
mov dword [esp], edx
lea eax, [0x89eadf]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x10
call fcn.004021f0
movzx eax, byte [esp + 0xc]
mov ecx, dword [esp + 0x38]
mov edx, dword [esp + 0x6c]
jmp 0x6a447e
mov dword [esp], edx
lea eax, [0x89eadf]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.004021f0
movzx eax, byte [esp + 0xc]
test al, al
je 0x6a4729
mov eax, 1
xor ebx, ebx
xor ecx, ecx
jmp 0x6a44b0
mov ecx, dword [esp + 0x38]
cmp ecx, 0x10
mov edx, dword [esp + 0x6c]
jmp 0x6a4476
mov ecx, dword [esp + 0x54]
cmp ecx, 0xc
mov edx, dword [esp + 0x98]
jmp 0x6a43be
mov dword [esp], edx
lea eax, [0x89c152]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.004021f0
movzx eax, byte [esp + 0xc]
test al, al
jne 0x6a477e
mov ecx, dword [esp + 0x54]
cmp ecx, 0xc
mov edx, dword [esp + 0x98]
jmp 0x6a43bc
lea eax, [0x809b20]
mov dword [esp], eax
call fcn.00409d90
mov eax, dword [esp + 4]
mov dword [esp + 0x9c], eax
mov ecx, dword [esp + 0xf8]
mov edx, dword [esp + 0xf4]
mov dword [esp], edx
mov dword [esp + 4], ecx
call fcn.004540d0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x9c]
mov dword [ebx], eax
test ecx, ecx
je 0x6a4851
je 0x6a484d
mov eax, dword [ecx + 4]
mov dword [esp + 0xd4], 0
mov dword [esp + 0xd8], 0
mov dword [esp + 0xd4], eax
mov dword [esp + 0xd8], edx
mov dword [esp], 0xd
lea eax, [0x8abf44]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x24
lea eax, [esp + 0xd4]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 1
mov dword [esp + 0x14], 1
call fcn.0060e170
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x100], ecx
mov dword [esp + 0x104], eax
add esp, 0xe4
ret
mov eax, ecx
jmp 0x6a47d3
mov ecx, dword [esp + 0xe8]
test byte [ecx], al
mov edx, dword [0xc6f140]
test edx, edx
jne 0x6a486c
mov dword [ecx + 0xc], ebx
jmp 0x6a3c50
lea edi, [ecx + 0xc]
mov eax, ebx
call fcn.0044c860
jmp 0x6a3c50
mov dword [esp], edx
mov dword [esp + 4], ecx
lea eax, [0x899129]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 7
call fcn.004020a0
mov eax, dword [esp + 0x10]
test eax, eax
jg 0x6a48b1
mov ecx, dword [esp + 0x54]
mov edx, dword [esp + 0x98]
jmp 0x6a3c0b
mov ecx, dword [esp + 0x54]
mov edx, dword [esp + 0x98]
jmp 0x6a43b0
je 0x6a5140
cmp ecx, 0xd
jge 0x6a4a2f
cmp ecx, 0xc
je 0x6a4934
cmp ecx, 0xd
jne 0x6a3c9c
mov dword [esp], edx
lea eax, [0x89d1a4]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.004021f0
movzx eax, byte [esp + 0xc]
test al, al
je 0x6a3c9c
mov eax, dword [esp + 0xf4]
mov ecx, dword [esp + 0xf8]
mov edi, dword [esp + 0xe8]
mov dword [edi + 4], ecx
mov ecx, dword [0xc6f140]
test ecx, ecx
jne 0x6a492a
mov dword [edi], eax
jmp 0x6a3c50
call fcn.0044c860
jmp 0x6a3c50
mov dword [esp], edx
lea eax, [0x89c99a]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.004021f0
movzx eax, byte [esp + 0xc]
test al, al
jne 0x6a4966
mov ecx, dword [esp + 0x54]
cmp ecx, 0xd
mov edx, dword [esp + 0x98]
jmp 0x6a48d8
mov eax, dword [esp + 0xe8]
mov byte [eax + 0x1c], 1
mov ecx, dword [esp + 0xf4]
mov edx, dword [esp + 0xf8]
mov dword [esp], ecx
mov dword [esp + 4], edx
call fcn.006a5890
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 8]
mov ebx, dword [esp + 0xc]
mov ebp, dword [esp + 0xe8]
mov dword [ebp + 0x20], edx
mov dword [ebp + 0x24], ebx
test eax, eax
je 0x6a3c50
je 0x6a49b5
mov eax, dword [eax + 4]
mov dword [esp + 0xbc], 0
mov dword [esp + 0xc0], 0
mov dword [esp + 0xbc], eax
mov dword [esp + 0xc0], ecx
mov dword [esp], 0xd
lea eax, [0x8aa317]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x21
lea eax, [esp + 0xbc]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 1
mov dword [esp + 0x14], 1
call fcn.0060e170
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x100], ecx
mov dword [esp + 0x104], eax
add esp, 0xe4
ret
je 0x6a50f4
je 0x6a4e8c
cmp ecx, 0xe
je 0x6a4c32
cmp ecx, 0x17
jne 0x6a3c9c
mov dword [esp], edx
lea eax, [0x8a33d4]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.004021f0
movzx eax, byte [esp + 0xc]
test al, al
je 0x6a3c9c
mov eax, dword [esp + 0xf8]
mov ecx, dword [esp + 0xf4]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.006a35d0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0xc]
mov ebx, dword [esp + 0x10]
mov ebp, dword [esp + 0x18]
test eax, eax
je 0x6a4b21
je 0x6a4aa7
mov eax, dword [eax + 4]
mov dword [esp + 0xcc], 0
mov dword [esp + 0xd0], 0
mov dword [esp + 0xcc], eax
mov dword [esp + 0xd0], ebp
mov dword [esp], 0xd
lea eax, [0x8b1fb4]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x30
lea eax, [esp + 0xcc]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 1
mov dword [esp + 0x14], 1
call fcn.0060e170
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x100], eax
mov dword [esp + 0x104], ecx
add esp, 0xe4
ret
mov dword [esp + 0x68], ecx
mov dword [esp + 0x30], edx
mov dword [esp + 0x34], ebx
lea eax, [0x860920]
mov dword [esp], eax
call fcn.00409d90
mov eax, dword [esp + 4]
mov dword [esp + 0x70], eax
mov ecx, dword [esp + 0x68]
mov dword [esp], ecx
mov ecx, dword [esp + 0x30]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x34]
mov dword [esp + 8], ecx
lea ecx, [0x9249f0]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
call fcn.004ed370
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
test ecx, ecx
je 0x6a4bf8
je 0x6a4b7e
mov ecx, dword [ecx + 4]
mov dword [esp + 0xc4], 0
mov dword [esp + 0xc8], 0
mov dword [esp + 0xc4], ecx
mov dword [esp + 0xc8], eax
mov dword [esp], 0xd
lea eax, [0x8b1fb4]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x30
lea eax, [esp + 0xc4]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 1
mov dword [esp + 0x14], 1
call fcn.0060e170
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x100], ecx
mov dword [esp + 0x104], eax
add esp, 0xe4
ret
mov eax, dword [esp + 0x70]
mov dword [esp], eax
call fcn.0060e240
mov eax, dword [esp + 0xe8]
test byte [eax], al
mov ecx, dword [0xc6f140]
mov edx, dword [esp + 4]
test ecx, ecx
jne 0x6a4c23
mov dword [eax + 8], edx
jmp 0x6a3c50
lea edi, [eax + 8]
mov eax, edx
call fcn.0044c860
jmp 0x6a3c50
mov dword [esp], edx
lea eax, [0x89d93c]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.004021f0
movzx eax, byte [esp + 0xc]
test al, al
jne 0x6a4c61
mov ecx, dword [esp + 0x54]
mov edx, dword [esp + 0x98]
jmp 0x6a4a44
mov eax, dword [esp + 0xf4]
mov ecx, dword [esp + 0xf8]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.006a35d0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 8]
mov ebx, dword [esp + 0xc]
mov ebp, dword [esp + 0x10]
test eax, eax
je 0x6a4d12
je 0x6a4c98
mov eax, dword [eax + 4]
mov dword [esp + 0xa4], 0
mov dword [esp + 0xa8], 0
mov dword [esp + 0xa4], eax
mov dword [esp + 0xa8], ecx
mov dword [esp], 0xd
lea eax, [0x8adaa3]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x27
lea eax, [esp + 0xa4]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 1
mov dword [esp + 0x14], 1
call fcn.0060e170
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x100], ecx
mov dword [esp + 0x104], eax
add esp, 0xe4
ret
mov ecx, dword [esp + 0xe8]
mov dword [ecx + 0x44], ebx
mov dword [ecx + 0x48], ebp
mov esi, dword [0xc6f140]
test esi, esi
jne 0x6a4e7d
mov dword [ecx + 0x40], edx
mov dword [esp], 0
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ebp
call fcn.0043bf50
mov eax, dword [esp + 0xec]
mov ecx, dword [esp + 0xf0]
mov edx, dword [esp + 0x14]
mov dword [esp + 0x20], edx
mov ebx, dword [esp + 0x10]
mov dword [esp + 0x60], ebx
mov ebp, dword [esp + 0xe8]
mov esi, dword [ebp + 0x30]
test esi, esi
je 0x6a4e35
mov edx, dword [ebp + 0x30]
mov dword [esp + 4], edx
lea edx, [0x80f220]
mov dword [esp], edx
mov dword [esp + 8], eax
mov dword [esp + 0xc], ecx
call fcn.0040ede0
mov eax, dword [esp + 0x10]
mov ecx, dword [eax + 4]
mov edx, dword [eax + 8]
mov ebx, dword [eax]
lea ebp, [ecx + 1]
cmp ebp, edx
jg 0x6a4dde
lea edx, [ecx + 1]
mov dword [eax + 4], edx
lea edx, [ebx + ecx*8 + 4]
mov ebp, dword [esp + 0x20]
mov dword [edx], ebp
mov edx, dword [0xc6f140]
lea edi, [ebx + ecx*8]
test edx, edx
jne 0x6a4dd0
mov eax, dword [esp + 0x60]
mov dword [edi], eax
jmp 0x6a3c50
mov eax, dword [esp + 0x60]
call fcn.0044c860
jmp 0x6a3c50
mov dword [esp + 0x90], eax
lea eax, [0x80a3e0]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ebp
call fcn.00438c30
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0x90]
mov dword [edi + 8], edx
mov edx, dword [0xc6f140]
test edx, edx
jne 0x6a4e2e
mov dword [edi], eax
mov ebx, eax
mov eax, edi
jmp 0x6a4da8
call fcn.0044c860
jmp 0x6a4e25
mov dword [esp + 0x74], eax
mov dword [esp + 0x44], ecx
call fcn.0040a810
mov eax, dword [0xc6f140]
mov ecx, dword [esp]
test eax, eax
jne 0x6a4e68
mov eax, dword [esp + 0xe8]
mov dword [eax + 0x30], ecx
mov ecx, dword [esp + 0x44]
mov ebp, eax
mov eax, dword [esp + 0x74]
jmp 0x6a4d78
mov edx, dword [esp + 0xe8]
lea edi, [edx + 0x30]
mov eax, ecx
call fcn.0044c860
mov eax, edx
jmp 0x6a4e59
lea edi, [ecx + 0x40]
mov eax, edx
call fcn.0044c860
jmp 0x6a4d30
mov dword [esp], edx
lea eax, [0x89d1b1]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.004021f0
movzx eax, byte [esp + 0xc]
test al, al
jne 0x6a4ebb
mov ecx, dword [esp + 0x54]
mov edx, dword [esp + 0x98]
jmp 0x6a4a3b
mov eax, dword [esp + 0xf8]
mov ecx, dword [esp + 0xf4]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.006a35d0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0xc]
mov ebx, dword [esp + 0x14]
mov ebp, dword [esp + 0x18]
test ebx, ebx
je 0x6a4f74
je 0x6a4f70
mov eax, dword [ebx + 4]
mov dword [esp + 0xac], 0
mov dword [esp + 0xb0], 0
mov dword [esp + 0xac], eax
mov dword [esp + 0xb0], ebp
mov dword [esp], 0xd
lea eax, [0x8ad2c6]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x26
lea eax, [esp + 0xac]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 1
mov dword [esp + 0x14], 1
call fcn.0060e170
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x100], eax
mov dword [esp + 0x104], ecx
add esp, 0xe4
ret
mov eax, ebx
jmp 0x6a4ef6
mov ebx, dword [esp + 0xe8]
mov dword [ebx + 0x38], edx
mov dword [ebx + 0x3c], eax
mov ebp, dword [0xc6f140]
test ebp, ebp
jne 0x6a50e1
mov dword [ebx + 0x34], ecx
mov dword [esp], 0
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], eax
call fcn.0043bf50
mov eax, dword [esp + 0xf0]
mov ecx, dword [esp + 0xec]
mov edx, dword [esp + 0x14]
mov dword [esp + 0x2c], edx
mov ebx, dword [esp + 0x10]
mov dword [esp + 0x64], ebx
mov ebp, dword [esp + 0xe8]
mov esi, dword [ebp + 0x30]
test esi, esi
je 0x6a5099
mov edx, dword [ebp + 0x30]
mov dword [esp + 4], edx
lea edx, [0x80f220]
mov dword [esp], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call fcn.0040ede0
mov eax, dword [esp + 0x10]
mov ecx, dword [eax + 8]
mov edx, dword [eax + 4]
mov ebx, dword [eax]
lea ebp, [edx + 1]
cmp ebp, ecx
jg 0x6a5040
lea ecx, [edx + 1]
mov dword [eax + 4], ecx
lea ecx, [ebx + edx*8 + 4]
mov ebp, dword [esp + 0x2c]
mov dword [ecx], ebp
lea edi, [ebx + edx*8]
mov ecx, dword [0xc6f140]
test ecx, ecx
jne 0x6a5032
mov eax, dword [esp + 0x64]
mov dword [edi], eax
jmp 0x6a3c50
mov eax, dword [esp + 0x64]
call fcn.0044c860
jmp 0x6a3c50
mov dword [esp + 0x90], eax
lea eax, [0x80a3e0]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebp
call fcn.00438c30
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0x90]
mov dword [edi + 8], edx
mov edx, dword [0xc6f140]
test edx, edx
jne 0x6a5092
mov dword [edi], eax
mov edx, ecx
mov ebx, eax
mov eax, edi
jmp 0x6a500a
call fcn.0044c860
jmp 0x6a5087
mov dword [esp + 0x48], eax
mov dword [esp + 0x7c], ecx
call fcn.0040a810
mov eax, dword [0xc6f140]
mov ecx, dword [esp]
test eax, eax
jne 0x6a50cc
mov eax, dword [esp + 0xe8]
mov dword [eax + 0x30], ecx
mov ecx, dword [esp + 0x7c]
mov ebp, eax
mov eax, dword [esp + 0x48]
jmp 0x6a4fda
mov edx, dword [esp + 0xe8]
lea edi, [edx + 0x30]
mov eax, ecx
call fcn.0044c860
mov eax, edx
jmp 0x6a50bd
lea edi, [ebx + 0x34]
mov ebp, eax
mov eax, ecx
call fcn.0044c860
mov eax, ebp
jmp 0x6a4f92
mov dword [esp], edx
mov dword [esp + 4], ecx
lea eax, [0x89d1a4]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0xd
call fcn.004020a0
mov eax, dword [esp + 0x10]
test eax, eax
jg 0x6a512d
mov ecx, dword [esp + 0x54]
cmp ecx, 0xc
mov edx, dword [esp + 0x98]
jmp 0x6a48d3
mov ecx, dword [esp + 0x54]
cmp ecx, 0xd
mov edx, dword [esp + 0x98]
jmp 0x6a4a35
mov dword [esp], edx
mov dword [esp + 4], ecx
lea eax, [0x89c98e]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0xc
call fcn.004020a0
mov eax, dword [esp + 0x10]
test eax, eax
jg 0x6a5176
mov ecx, dword [esp + 0x54]
mov edx, dword [esp + 0x98]
jmp 0x6a3c02
mov ecx, dword [esp + 0x54]
mov edx, dword [esp + 0x98]
jmp 0x6a48c7
call fcn.00426770
ud2
call fcn.0044b100
jmp fcn.006a3bc0