Function at 0x6d3f40
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x104]
cmp eax, dword [ecx + 8]
jbe 0x6d5392
sub esp, 0x184
mov ebx, dword [esp + 0x18c]
movzx ebp, byte [ebx]
xchg ebp, eax
cmp al, 9
xchg ebp, eax
ja 0x6d47bc
xchg ebp, eax
cmp al, 4
xchg ebp, eax
ja 0x6d4358
xchg ebp, eax
cmp al, 2
xchg ebp, eax
jbe 0x6d421c
xchg ebp, eax
cmp al, 3
xchg ebp, eax
jne 0x6d41c7
mov ebp, dword [ebx + 0x18]
test ebp, ebp
je 0x6d40c9
mov dword [esp + 0x68], ebp
mov esi, dword [esp + 0x188]
xor eax, eax
xor ecx, ecx
xor edx, edx
xor edi, edi
jmp 0x6d3fdf
mov ebx, dword [esp + 0x18c]
mov ebp, dword [esp + 0x68]
mov esi, dword [esp + 0x188]
mov edi, dword [esp + 0x64]
mov edi, eax
mov eax, dword [esp + 0x64]
mov eax, ecx
mov ecx, edx
mov edx, eax
mov eax, dword [esp + 0x64]
cmp eax, ebp
jge 0x6d40ad
mov dword [esp + 0x50], edi
mov edi, dword [ebx + 0x1c]
mov ebp, dword [ebx + 0x14]
mov dword [esp + 0x78], ebp
lea ebp, [eax + 1]
cmp edi, ebp
jb 0x6d5370
cmp eax, ebp
ja 0x6d5369
mov dword [esp + 0x28], eax
mov dword [esp + 0x64], ebp
mov dword [esp + 0x34], ecx
mov dword [esp + 0x40], edx
movzx ecx, word [ebx + 2]
mov dword [esp], esi
sub edi, eax
mov edx, edi
xchg edi, ebx
neg ebx
xchg edi, ebx
shl eax, 2
sar edi, 0x1f
and eax, edi
mov edi, dword [esp + 0x78]
add eax, edi
mov dword [esp + 4], eax
mov dword [esp + 8], 1
mov dword [esp + 0xc], edx
mov word [esp + 0x10], cx
call fcn.006d5960
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x28]
test ebx, ebx
je 0x6d3fb9
mov ebx, dword [esp + 0x188]
mov dword [esp], ebx
mov ebp, dword [esp + 0x50]
mov dword [esp + 4], ebp
mov ebp, dword [esp + 0x40]
mov dword [esp + 8], ebp
mov ebp, dword [esp + 0x34]
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], ecx
mov dword [esp + 0x18], edx
call fcn.006d53a0
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x24]
jmp 0x6d3fb9
mov dword [esp + 0x190], edi
mov dword [esp + 0x194], edx
mov dword [esp + 0x198], ecx
add esp, 0x184
ret
mov ecx, dword [esp + 0x188]
mov edx, dword [ecx]
nop
mov edx, dword [edx + 4]
mov dword [esp + 0x68], edx
lea edi, [esp + 0x154]
xor eax, eax
call fcn.00460dea
mov byte [esp + 0x154], 6
mov ecx, dword [esp + 0x188]
mov ecx, dword [ecx]
mov ebx, dword [ecx + 4]
mov ebp, dword [ecx]
mov eax, edx
mov edx, dword [ecx + 8]
mov esi, ecx
lea ecx, [ebx + 1]
cmp ecx, edx
ja 0x6d4170
lea ecx, [ebx + 1]
mov dword [esi + 4], ecx
mov ecx, dword [0x10fd360]
lea edx, [ebx + ebx*2]
lea edi, [ebp + edx*8]
test ecx, ecx
jne 0x6d414d
lea esi, [esp + 0x154]
call fcn.004612c4
mov dword [esp + 0x190], eax
shl eax, 1
mov dword [esp + 0x194], eax
mov dword [esp + 0x198], eax
add esp, 0x184
ret
lea eax, [0xb1a040]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x154]
mov dword [esp + 8], eax
call fcn.00411810
mov eax, dword [esp + 0x68]
jmp 0x6d412f
mov dword [esp + 0x74], esi
lea eax, [0xb1a040]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], ebx
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ecx
call fcn.00447080
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0x74]
mov dword [edi + 8], edx
mov edx, dword [0x10fd360]
test edx, edx
jne 0x6d41c0
mov dword [edi], eax
mov esi, edi
mov ebx, ecx
mov ebp, eax
mov eax, dword [esp + 0x68]
jmp 0x6d410c
call fcn.00460b40
jmp 0x6d41b1
mov eax, dword [ebx + 0x14]
mov ecx, dword [ebx + 0x18]
mov edx, dword [ebx + 0x1c]
movzx ebx, word [ebx + 2]
mov ebp, dword [esp + 0x188]
mov dword [esp], ebp
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
mov word [esp + 0x10], bx
call fcn.006d5960
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x14]
mov dword [esp + 0x190], edx
mov dword [esp + 0x194], eax
mov dword [esp + 0x198], ecx
add esp, 0x184
ret
xchg ebp, eax
cmp al, 1
xchg ebp, eax
je 0x6d4330
xchg ebp, eax
cmp al, 2
xchg ebp, eax
jne 0x6d5379
mov ecx, dword [esp + 0x188]
mov edx, dword [ecx]
nop
mov edx, dword [edx + 4]
mov dword [esp + 0x68], edx
lea edi, [esp + 0x16c]
xor eax, eax
call fcn.00460dea
mov byte [esp + 0x16c], 6
mov ecx, dword [esp + 0x188]
mov ecx, dword [ecx]
mov ebx, dword [ecx + 4]
mov ebp, dword [ecx]
mov eax, edx
mov edx, dword [ecx + 8]
mov esi, ecx
lea ecx, [ebx + 1]
cmp ecx, edx
ja 0x6d42d9
lea ecx, [ebx + 1]
mov dword [esi + 4], ecx
mov ecx, dword [0x10fd360]
lea edx, [ebx + ebx*2]
lea edi, [ebp + edx*8]
test ecx, ecx
jne 0x6d42b6
lea esi, [esp + 0x16c]
call fcn.004612c4
mov dword [esp + 0x190], eax
shl eax, 1
mov dword [esp + 0x194], eax
mov dword [esp + 0x198], eax
add esp, 0x184
ret
lea eax, [0xb1a040]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x16c]
mov dword [esp + 8], eax
call fcn.00411810
mov eax, dword [esp + 0x68]
jmp 0x6d4298
mov dword [esp + 0x74], esi
lea eax, [0xb1a040]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], ebx
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ecx
call fcn.00447080
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0x74]
mov dword [edi + 8], edx
mov edx, dword [0x10fd360]
test edx, edx
jne 0x6d4329
mov dword [edi], eax
mov esi, edi
mov ebx, ecx
mov ebp, eax
mov eax, dword [esp + 0x68]
jmp 0x6d4275
call fcn.00460b40
jmp 0x6d431a
mov dword [esp + 0x190], 0
mov dword [esp + 0x194], 0
mov dword [esp + 0x198], 0
add esp, 0x184
ret
xchg ebp, eax
cmp al, 6
xchg ebp, eax
ja 0x6d4422
xchg ebp, eax
cmp al, 5
xchg ebp, eax
jne 0x6d43c6
mov eax, dword [esp + 0x188]
mov dword [esp], eax
mov eax, dword [0x10d9590]
mov ecx, dword [0x10d9594]
mov edx, dword [0x10d9598]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
mov word [esp + 0x10], 0
call fcn.006d5960
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x14]
mov dword [esp + 0x190], edx
mov dword [esp + 0x194], eax
mov dword [esp + 0x198], ecx
add esp, 0x184
ret
mov eax, dword [esp + 0x188]
mov dword [esp], eax
mov eax, dword [0x10d9580]
mov ecx, dword [0x10d9584]
mov edx, dword [0x10d9588]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
mov word [esp + 0x10], 0
call fcn.006d5960
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x14]
mov dword [esp + 0x190], edx
mov dword [esp + 0x194], eax
mov dword [esp + 0x198], ecx
add esp, 0x184
ret
xchg ebp, eax
cmp al, 7
xchg ebp, eax
jne 0x6d4559
mov ecx, dword [esp + 0x188]
mov edx, dword [ecx]
nop
mov edx, dword [edx + 4]
mov dword [esp + 0x68], edx
lea edi, [esp + 0x13c]
xor eax, eax
call fcn.00460dea
mov byte [esp + 0x13c], 3
mov ecx, dword [esp + 0x188]
mov ebx, dword [ecx]
mov ebp, dword [ebx + 4]
mov eax, edx
mov edx, dword [ebx]
mov esi, ecx
mov ecx, dword [ebx + 8]
mov edi, ebx
lea ebx, [ebp + 1]
cmp ebx, ecx
ja 0x6d44fd
lea ecx, [ebp + 1]
mov dword [edi + 4], ecx
mov ecx, dword [0x10fd360]
lea ebx, [ebp + ebp*2]
lea edi, [edx + ebx*8]
test ecx, ecx
jne 0x6d44da
lea esi, [esp + 0x13c]
call fcn.004612c4
mov edx, dword [esp + 0x188]
mov edx, dword [edx]
mov ecx, dword [edx + 4]
mov edx, dword [edx]
cmp eax, ecx
jae 0x6d5364
lea ecx, [eax + eax*2]
lea ecx, [edx + ecx*8 + 8]
mov dword [ecx], 1
mov dword [esp + 0x190], eax
shl eax, 1
mov dword [esp + 0x194], eax
mov dword [esp + 0x198], eax
add esp, 0x184
ret
lea eax, [0xb1a040]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x13c]
mov dword [esp + 8], eax
call fcn.00411810
mov eax, dword [esp + 0x68]
jmp 0x6d4499
mov dword [esp + 0x74], edi
lea eax, [0xb1a040]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebx
call fcn.00447080
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0x74]
mov dword [edi + 8], edx
mov edx, dword [0x10fd360]
test edx, edx
jne 0x6d4552
mov dword [edi], eax
mov esi, dword [esp + 0x188]
mov ebp, ecx
mov edx, eax
mov eax, dword [esp + 0x68]
jmp 0x6d4476
call fcn.00460b40
jmp 0x6d453e
xchg ebp, eax
cmp al, 8
xchg ebp, eax
jne 0x6d4690
mov ecx, dword [esp + 0x188]
mov edx, dword [ecx]
nop
mov edx, dword [edx + 4]
mov dword [esp + 0x68], edx
lea edi, [esp + 0x124]
xor eax, eax
call fcn.00460dea
mov byte [esp + 0x124], 3
mov ecx, dword [esp + 0x188]
mov ebx, dword [ecx]
mov ebp, dword [ebx + 4]
mov eax, edx
mov edx, dword [ebx]
mov esi, ecx
mov ecx, dword [ebx + 8]
mov edi, ebx
lea ebx, [ebp + 1]
cmp ebx, ecx
ja 0x6d4634
lea ecx, [ebp + 1]
mov dword [edi + 4], ecx
mov ecx, dword [0x10fd360]
lea ebx, [ebp + ebp*2]
lea edi, [edx + ebx*8]
test ecx, ecx
jne 0x6d4611
lea esi, [esp + 0x124]
call fcn.004612c4
mov edx, dword [esp + 0x188]
mov edx, dword [edx]
mov ecx, dword [edx + 4]
mov edx, dword [edx]
cmp ecx, eax
jbe 0x6d535f
lea ecx, [eax + eax*2]
lea ecx, [edx + ecx*8 + 8]
mov dword [ecx], 2
mov dword [esp + 0x190], eax
shl eax, 1
mov dword [esp + 0x194], eax
mov dword [esp + 0x198], eax
add esp, 0x184
ret
lea eax, [0xb1a040]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x124]
mov dword [esp + 8], eax
call fcn.00411810
mov eax, dword [esp + 0x68]
jmp 0x6d45d0
mov dword [esp + 0x74], edi
lea eax, [0xb1a040]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebx
call fcn.00447080
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0x74]
mov dword [edi + 8], edx
mov edx, dword [0x10fd360]
test edx, edx
jne 0x6d4689
mov dword [edi], eax
mov esi, dword [esp + 0x188]
mov ebp, ecx
mov edx, eax
mov eax, dword [esp + 0x68]
jmp 0x6d45ad
call fcn.00460b40
jmp 0x6d4675
mov ecx, dword [esp + 0x188]
mov edx, dword [ecx]
nop
mov edx, dword [edx + 4]
mov dword [esp + 0x68], edx
lea edi, [esp + 0x10c]
xor eax, eax
call fcn.00460dea
mov byte [esp + 0x10c], 3
mov ecx, dword [esp + 0x188]
mov ebx, dword [ecx]
mov ebp, dword [ebx + 4]
mov eax, edx
mov edx, dword [ebx]
mov esi, ecx
mov ecx, dword [ebx + 8]
mov edi, ebx
lea ebx, [ebp + 1]
cmp ebx, ecx
ja 0x6d4760
lea ecx, [ebp + 1]
mov dword [edi + 4], ecx
mov ecx, dword [0x10fd360]
lea ebx, [ebp + ebp*2]
lea edi, [edx + ebx*8]
test ecx, ecx
jne 0x6d473d
lea esi, [esp + 0x10c]
call fcn.004612c4
mov edx, dword [esp + 0x188]
mov edx, dword [edx]
mov ecx, dword [edx + 4]
mov edx, dword [edx]
cmp eax, ecx
jae 0x6d535a
lea ecx, [eax + eax*2]
lea ecx, [edx + ecx*8 + 8]
mov dword [ecx], 4
mov dword [esp + 0x190], eax
shl eax, 1
mov dword [esp + 0x194], eax
mov dword [esp + 0x198], eax
add esp, 0x184
ret
lea eax, [0xb1a040]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x10c]
mov dword [esp + 8], eax
call fcn.00411810
mov eax, dword [esp + 0x68]
jmp 0x6d46fc
mov dword [esp + 0x74], edi
lea eax, [0xb1a040]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebx
call fcn.00447080
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0x74]
mov dword [edi + 8], edx
mov edx, dword [0x10fd360]
test edx, edx
jne 0x6d47b5
mov dword [edi], eax
mov esi, dword [esp + 0x188]
mov ebp, ecx
mov edx, eax
mov eax, dword [esp + 0x68]
jmp 0x6d46d9
call fcn.00460b40
jmp 0x6d47a1
xchg ebp, eax
cmp al, 0xd
xchg ebp, eax
jbe 0x6d4c42
xchg ebp, eax
cmp al, 0xf
xchg ebp, eax
jbe 0x6d4b21
xchg ebp, eax
cmp al, 0x10
xchg ebp, eax
je 0x6d4a98
xchg ebp, eax
cmp al, 0x12
xchg ebp, eax
jne 0x6d49ce
mov ecx, dword [ebx + 8]
mov edx, dword [ebx + 4]
test ecx, ecx
je 0x6d48dc
mov dword [esp + 0x68], ecx
mov dword [esp + 0x70], edx
xor eax, eax
xor ebx, ebx
xor ebp, ebp
xor esi, esi
jmp 0x6d481d
mov edi, dword [esp + 0x2c]
inc edi
mov ebx, eax
mov ebp, edx
mov esi, ecx
mov ecx, dword [esp + 0x68]
mov edx, dword [esp + 0x70]
mov eax, edi
cmp ecx, eax
jle 0x6d48c0
mov dword [esp + 0x2c], eax
mov edi, dword [edx + eax*4]
test eax, eax
jne 0x6d4851
mov eax, dword [esp + 0x188]
mov dword [esp], eax
mov dword [esp + 4], edi
call fcn.006d3f40
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
jmp 0x6d4808
mov dword [esp + 0x48], ebx
mov dword [esp + 0x30], ebp
mov dword [esp + 0x44], esi
mov eax, dword [esp + 0x188]
mov dword [esp], eax
mov dword [esp + 4], edi
call fcn.006d3f40
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x188]
mov dword [esp], ebx
mov ebp, dword [esp + 0x48]
mov dword [esp + 4], ebp
mov ebp, dword [esp + 0x44]
mov dword [esp + 8], ebp
mov ebp, dword [esp + 0x30]
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], ecx
mov dword [esp + 0x18], edx
call fcn.006d53a0
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x24]
jmp 0x6d4808
mov dword [esp + 0x190], ebx
mov dword [esp + 0x194], esi
mov dword [esp + 0x198], ebp
add esp, 0x184
ret
mov ecx, dword [esp + 0x188]
mov edx, dword [ecx]
nop
mov edx, dword [edx + 4]
mov dword [esp + 0x68], edx
lea edi, [esp + 0x7c]
xor eax, eax
call fcn.00460dea
mov byte [esp + 0x7c], 6
mov ecx, dword [esp + 0x188]
mov ecx, dword [ecx]
mov ebx, dword [ecx + 4]
mov ebp, dword [ecx]
mov eax, edx
mov edx, dword [ecx + 8]
mov esi, ecx
lea ecx, [ebx + 1]
cmp edx, ecx
jb 0x6d4977
lea ecx, [ebx + 1]
mov dword [esi + 4], ecx
mov ecx, dword [0x10fd360]
lea edx, [ebx + ebx*2]
lea edi, [ebp + edx*8]
test ecx, ecx
jne 0x6d4957
lea esi, [esp + 0x7c]
call fcn.004612c4
mov dword [esp + 0x190], eax
shl eax, 1
mov dword [esp + 0x194], eax
mov dword [esp + 0x198], eax
add esp, 0x184
ret
lea eax, [0xb1a040]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x7c]
mov dword [esp + 8], eax
call fcn.00411810
mov eax, dword [esp + 0x68]
jmp 0x6d4939
mov dword [esp + 0x74], esi
lea eax, [0xb1a040]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], ebx
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ecx
call fcn.00447080
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0x74]
mov dword [edi + 8], edx
mov edx, dword [0x10fd360]
test edx, edx
jne 0x6d49c7
mov dword [edi], eax
mov esi, edi
mov ebx, ecx
mov ebp, eax
mov eax, dword [esp + 0x68]
jmp 0x6d4919
call fcn.00460b40
jmp 0x6d49b8
xchg ebp, eax
cmp al, 0x13
xchg ebp, eax
jne 0x6d5379
mov eax, dword [ebx + 4]
mov dword [esp + 0x6c], eax
mov ecx, dword [ebx + 8]
mov dword [esp + 0x68], ecx
xor edx, edx
xor ebx, ebx
xor ebp, ebp
xor esi, esi
jmp 0x6d4a74
mov dword [esp + 0x38], ebx
mov dword [esp + 0x3c], ebp
mov dword [esp + 0x4c], esi
mov dword [esp + 0x64], edx
mov ecx, dword [eax + edx*4]
mov ebx, dword [esp + 0x188]
mov dword [esp], ebx
mov dword [esp + 4], ecx
call fcn.006d3f40
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x188]
mov dword [esp], ebx
mov ebp, dword [esp + 0x4c]
mov dword [esp + 4], ebp
mov ebp, dword [esp + 0x3c]
mov dword [esp + 8], ebp
mov ebp, dword [esp + 0x38]
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], ecx
mov dword [esp + 0x18], edx
call fcn.006d5430
mov eax, dword [esp + 0x64]
lea edx, [eax + 1]
mov esi, dword [esp + 0x1c]
mov ebp, dword [esp + 0x20]
mov ebx, dword [esp + 0x24]
mov eax, dword [esp + 0x6c]
mov ecx, dword [esp + 0x68]
cmp ecx, edx
jg 0x6d49f4
mov dword [esp + 0x190], esi
mov dword [esp + 0x194], ebp
mov dword [esp + 0x198], ebx
add esp, 0x184
ret
mov ecx, dword [ebx + 8]
mov edx, dword [ebx + 4]
test ecx, ecx
jbe 0x6d531f
mov eax, dword [edx]
mov ecx, dword [esp + 0x188]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.006d3f40
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x18c]
movzx ebx, word [ebx + 2]
mov ebp, dword [esp + 0x188]
mov dword [esp], ebp
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
test bx, 0x20
setne al
mov byte [esp + 0x10], al
call fcn.006d5630
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov dword [esp + 0x190], eax
mov dword [esp + 0x194], ecx
mov dword [esp + 0x198], edx
add esp, 0x184
ret
xchg ebp, eax
cmp al, 0xe
xchg ebp, eax
jne 0x6d4bb5
mov ecx, dword [ebx + 8]
mov edx, dword [ebx + 4]
test ecx, ecx
jbe 0x6d532d
mov eax, dword [edx]
mov ecx, dword [esp + 0x188]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.006d3f40
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x18c]
movzx ebx, word [ebx + 2]
mov ebp, dword [esp + 0x188]
mov dword [esp], ebp
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
test bx, 0x20
setne al
mov byte [esp + 0x10], al
call fcn.006d57e0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov dword [esp + 0x190], eax
mov dword [esp + 0x194], ecx
mov dword [esp + 0x198], edx
add esp, 0x184
ret
mov ecx, dword [ebx + 8]
mov edx, dword [ebx + 4]
test ecx, ecx
jbe 0x6d5326
mov eax, dword [edx]
mov ecx, dword [esp + 0x188]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.006d3f40
mov eax, dword [esp + 8]
mov dword [esp + 0x60], eax
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x18c]
movzx ebx, word [ebx + 2]
mov ebp, dword [esp + 0x188]
mov dword [esp], ebp
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
test bx, 0x20
setne cl
mov byte [esp + 0x10], cl
call fcn.006d57e0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x60]
mov dword [esp + 0x190], edx
mov dword [esp + 0x194], eax
mov dword [esp + 0x198], ecx
add esp, 0x184
ret
xchg ebp, eax
cmp al, 0xb
xchg ebp, eax
ja 0x6d4eb0
xchg ebp, eax
cmp al, 0xa
xchg ebp, eax
jne 0x6d4d84
mov ecx, dword [esp + 0x188]
mov edx, dword [ecx]
nop
mov edx, dword [edx + 4]
mov dword [esp + 0x68], edx
lea edi, [esp + 0xf4]
xor eax, eax
call fcn.00460dea
mov byte [esp + 0xf4], 3
mov ecx, dword [esp + 0x188]
mov ebx, dword [ecx]
mov ebp, dword [ebx + 4]
mov eax, edx
mov edx, dword [ebx]
mov esi, ecx
mov ecx, dword [ebx + 8]
mov edi, ebx
lea ebx, [ebp + 1]
cmp ebx, ecx
ja 0x6d4d28
lea ecx, [ebp + 1]
mov dword [edi + 4], ecx
mov ecx, dword [0x10fd360]
lea ebx, [ebp + ebp*2]
lea edi, [edx + ebx*8]
test ecx, ecx
jne 0x6d4d05
lea esi, [esp + 0xf4]
call fcn.004612c4
mov edx, dword [esp + 0x188]
mov edx, dword [edx]
mov ecx, dword [edx + 4]
mov edx, dword [edx]
cmp ecx, eax
jbe 0x6d5355
lea ecx, [eax + eax*2]
lea ecx, [edx + ecx*8 + 8]
mov dword [ecx], 8
mov dword [esp + 0x190], eax
shl eax, 1
mov dword [esp + 0x194], eax
mov dword [esp + 0x198], eax
add esp, 0x184
ret
lea eax, [0xb1a040]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0xf4]
mov dword [esp + 8], eax
call fcn.00411810
mov eax, dword [esp + 0x68]
jmp 0x6d4cc4
mov dword [esp + 0x74], edi
lea eax, [0xb1a040]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebx
call fcn.00447080
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0x74]
mov dword [edi + 8], edx
mov edx, dword [0x10fd360]
test edx, edx
jne 0x6d4d7d
mov dword [edi], eax
mov esi, dword [esp + 0x188]
mov ebp, ecx
mov edx, eax
mov eax, dword [esp + 0x68]
jmp 0x6d4ca1
call fcn.00460b40
jmp 0x6d4d69
mov ecx, dword [esp + 0x188]
mov edx, dword [ecx]
nop
mov edx, dword [edx + 4]
mov dword [esp + 0x68], edx
lea edi, [esp + 0xdc]
xor eax, eax
call fcn.00460dea
mov byte [esp + 0xdc], 3
mov ecx, dword [esp + 0x188]
mov ebx, dword [ecx]
mov ebp, dword [ebx + 4]
mov eax, edx
mov edx, dword [ebx]
mov esi, ecx
mov ecx, dword [ebx + 8]
mov edi, ebx
lea ebx, [ebp + 1]
cmp ecx, ebx
jb 0x6d4e54
lea ecx, [ebp + 1]
mov dword [edi + 4], ecx
mov ecx, dword [0x10fd360]
lea ebx, [ebp + ebp*2]
lea edi, [edx + ebx*8]
test ecx, ecx
jne 0x6d4e31
lea esi, [esp + 0xdc]
call fcn.004612c4
mov edx, dword [esp + 0x188]
mov edx, dword [edx]
mov ecx, dword [edx + 4]
mov edx, dword [edx]
cmp eax, ecx
jae 0x6d5350
lea ecx, [eax + eax*2]
lea ecx, [edx + ecx*8 + 8]
mov dword [ecx], 0x10
mov dword [esp + 0x190], eax
shl eax, 1
mov dword [esp + 0x194], eax
mov dword [esp + 0x198], eax
add esp, 0x184
ret
lea eax, [0xb1a040]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0xdc]
mov dword [esp + 8], eax
call fcn.00411810
mov eax, dword [esp + 0x68]
jmp 0x6d4df0
mov dword [esp + 0x74], edi
lea eax, [0xb1a040]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebx
call fcn.00447080
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0x74]
mov dword [edi + 8], edx
mov edx, dword [0x10fd360]
test edx, edx
jne 0x6d4ea9
mov dword [edi], eax
mov esi, dword [esp + 0x188]
mov ebp, ecx
mov edx, eax
mov eax, dword [esp + 0x68]
jmp 0x6d4dcd
call fcn.00460b40
jmp 0x6d4e95
xchg ebp, eax
cmp al, 0xc
xchg ebp, eax
jne 0x6d4fe7
mov ecx, dword [esp + 0x188]
mov edx, dword [ecx]
nop
mov edx, dword [edx + 4]
mov dword [esp + 0x68], edx
lea edi, [esp + 0xc4]
xor eax, eax
call fcn.00460dea
mov byte [esp + 0xc4], 3
mov ecx, dword [esp + 0x188]
mov ebx, dword [ecx]
mov ebp, dword [ebx + 4]
mov eax, edx
mov edx, dword [ebx]
mov esi, ecx
mov ecx, dword [ebx + 8]
mov edi, ebx
lea ebx, [ebp + 1]
cmp ecx, ebx
jb 0x6d4f8b
lea ecx, [ebp + 1]
mov dword [edi + 4], ecx
mov ecx, dword [0x10fd360]
lea ebx, [ebp + ebp*2]
lea edi, [edx + ebx*8]
test ecx, ecx
jne 0x6d4f68
lea esi, [esp + 0xc4]
call fcn.004612c4
mov edx, dword [esp + 0x188]
mov edx, dword [edx]
mov ecx, dword [edx + 4]
mov edx, dword [edx]
cmp ecx, eax
jbe 0x6d534b
lea ecx, [eax + eax*2]
lea ecx, [edx + ecx*8 + 8]
mov dword [ecx], 0x20
mov dword [esp + 0x190], eax
shl eax, 1
mov dword [esp + 0x194], eax
mov dword [esp + 0x198], eax
add esp, 0x184
ret
lea eax, [0xb1a040]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0xc4]
mov dword [esp + 8], eax
call fcn.00411810
mov eax, dword [esp + 0x68]
jmp 0x6d4f27
mov dword [esp + 0x74], edi
lea eax, [0xb1a040]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebx
call fcn.00447080
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0x74]
mov dword [edi + 8], edx
mov edx, dword [0x10fd360]
test edx, edx
jne 0x6d4fe0
mov dword [edi], eax
mov esi, dword [esp + 0x188]
mov ebp, ecx
mov edx, eax
mov eax, dword [esp + 0x68]
jmp 0x6d4f04
call fcn.00460b40
jmp 0x6d4fcc
mov ecx, dword [esp + 0x188]
mov edx, dword [ecx]
mov ebp, dword [ebx + 0x30]
mov dword [esp + 0x68], ebp
nop
mov edx, dword [edx + 4]
mov dword [esp + 0x64], edx
lea edi, [esp + 0xac]
xor eax, eax
call fcn.00460dea
mov byte [esp + 0xac], 2
mov ecx, dword [esp + 0x188]
mov esi, ebx
mov ebx, dword [ecx]
mov dword [esp + 0x74], ebx
mov edi, ebp
mov ebp, dword [ebx + 4]
mov edx, dword [ebx]
mov ecx, dword [ebx + 8]
lea ebx, [ebp + 1]
cmp ecx, ebx
jb 0x6d52c5
lea ecx, [ebp + 1]
mov ebx, dword [esp + 0x74]
mov dword [ebx + 4], ecx
mov ecx, dword [0x10fd360]
lea ebx, [ebp + ebp*2]
lea edx, [edx + ebx*8]
test ecx, ecx
jne 0x6d529a
mov edi, edx
mov ebx, esi
lea esi, [esp + 0xac]
call fcn.004612c4
mov edx, dword [esp + 0x188]
mov ebp, dword [edx]
mov ecx, dword [ebp + 4]
mov ebp, dword [ebp]
mov esi, dword [esp + 0x64]
cmp esi, ecx
jae 0x6d5344
mov edi, dword [esp + 0x68]
shl edi, 1
mov ecx, esi
lea esi, [esi + esi*2]
lea ebp, [ebp + esi*8 + 8]
mov dword [ebp], edi
mov ebp, dword [edx]
lea esi, [edi + 1]
cmp dword [ebp + 0x10], esi
jge 0x6d50a2
mov dword [ebp + 0x10], esi
mov ebp, dword [ebx + 8]
mov esi, dword [ebx + 4]
test ebp, ebp
jbe 0x6d533b
mov eax, dword [esi]
mov dword [esp], edx
mov dword [esp + 4], eax
call fcn.006d3f40
mov eax, dword [esp + 0x188]
mov ecx, dword [eax]
mov edx, dword [esp + 8]
mov dword [esp + 0x60], edx
mov ebx, dword [esp + 0xc]
mov dword [esp + 0x5c], ebx
mov ebp, dword [esp + 0x10]
mov dword [esp + 0x58], ebp
mov esi, dword [esp + 0x18c]
mov esi, dword [esi + 0x30]
mov dword [esp + 0x68], esi
nop
mov ecx, dword [ecx + 4]
mov dword [esp + 0x54], ecx
lea edi, [esp + 0x94]
xor eax, eax
call fcn.00460dea
mov byte [esp + 0x94], 2
mov eax, dword [esp + 0x188]
mov ecx, dword [eax]
mov edi, dword [ecx + 4]
mov ebp, dword [ecx]
mov ebx, dword [ecx + 8]
lea edx, [edi + 1]
cmp ebx, edx
jb 0x6d523a
lea edx, [edi + 1]
mov dword [ecx + 4], edx
mov ecx, dword [0x10fd360]
lea edx, [edi + edi*2]
lea edi, [ebp + edx*8]
test ecx, ecx
jne 0x6d5211
lea esi, [esp + 0x94]
call fcn.004612c4
mov edx, dword [eax]
mov ecx, dword [edx + 4]
mov edx, dword [edx]
mov ebx, dword [esp + 0x54]
cmp ecx, ebx
jbe 0x6d5334
mov ecx, dword [esp + 0x68]
shl ecx, 1
or ecx, 1
lea ebp, [ebx + ebx*2]
lea edx, [edx + ebp*8 + 8]
mov dword [edx], ecx
mov edx, dword [eax]
inc ecx
cmp dword [edx + 0x10], ecx
jge 0x6d517e
mov dword [edx + 0x10], ecx
mov dword [esp], eax
mov ecx, dword [esp + 0x64]
mov dword [esp + 4], ecx
shl ecx, 1
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0x60]
mov dword [esp + 0x10], ecx
mov ecx, dword [esp + 0x5c]
mov dword [esp + 0x14], ecx
mov ecx, dword [esp + 0x58]
mov dword [esp + 0x18], ecx
call fcn.006d53a0
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x24]
mov ebx, dword [esp + 0x188]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
mov eax, dword [esp + 0x54]
mov dword [esp + 0x10], eax
shl eax, 1
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], eax
call fcn.006d53a0
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x24]
mov dword [esp + 0x190], eax
mov dword [esp + 0x194], ecx
mov dword [esp + 0x198], edx
add esp, 0x184
ret
lea eax, [0xb1a040]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x94]
mov dword [esp + 8], eax
call fcn.00411810
mov eax, dword [esp + 0x188]
jmp 0x6d514e
mov dword [esp + 0x74], ecx
lea eax, [0xb1a040]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], edi
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], edx
call fcn.00447080
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0x74]
mov dword [edi + 8], edx
mov edx, dword [0x10fd360]
test edx, edx
jne 0x6d5293
mov dword [edi], eax
mov esi, dword [esp + 0x68]
mov ebp, eax
mov eax, dword [esp + 0x188]
mov edx, ecx
mov ecx, edi
mov edi, edx
jmp 0x6d5127
call fcn.00460b40
jmp 0x6d527b
lea eax, [0xb1a040]
mov dword [esp], eax
mov dword [esp + 4], edx
lea eax, [esp + 0xac]
mov dword [esp + 8], eax
call fcn.00411810
xor eax, eax
mov ebx, dword [esp + 0x18c]
jmp 0x6d5068
lea eax, [0xb1a040]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebx
call fcn.00447080
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0x74]
mov dword [edi + 8], edx
mov edx, dword [0x10fd360]
test edx, edx
jne 0x6d5318
mov dword [edi], eax
mov esi, dword [esp + 0x18c]
mov edi, dword [esp + 0x68]
mov ebp, ecx
mov edx, eax
xor eax, eax
jmp 0x6d5039
call fcn.00460b40
jmp 0x6d5302
xor eax, eax
call fcn.00460bc0
xor eax, eax
call fcn.00460bc0
xor eax, eax
call fcn.00460bc0
mov eax, ebx
call fcn.00460bd0
xor eax, eax
mov ecx, ebp
call fcn.00460bc0
mov eax, esi
call fcn.00460bd0
call fcn.00460bd0
call fcn.00460bd0
call fcn.00460bd0
call fcn.00460bd0
call fcn.00460bd0
call fcn.00460bd0
mov ecx, ebp
call fcn.00460c20
mov ecx, ebp
mov edx, edi
call fcn.00460c00
lea eax, [0xaa9660]
mov dword [esp], eax
lea eax, [0xc75da0]
mov dword [esp + 4], eax
call fcn.00433120
nop
call fcn.0045f5f0
jmp fcn.006d3f40