Function at 0x6ea0e0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x58]
cmp eax, dword [ecx + 8]
jbe 0x6eb3c0
sub esp, 0xd8
mov dword [esp + 0xe8], 0
mov dword [esp + 0xec], 0
mov eax, dword [esp + 0xe0]
test eax, eax
je 0x6eb3a7
mov eax, dword [esp + 0xe0]
lea ecx, [0x844e98]
cmp eax, ecx
je 0x6eac4f
lea edx, [0x844e80]
cmp eax, edx
jne 0x6ea22c
mov eax, dword [esp + 0xe4]
mov ecx, dword [eax + 8]
mov edx, dword [eax + 0xc]
mov ebx, dword [esp + 0xdc]
mov dword [esp], ebx
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.006eb3d0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xe4]
mov ebx, dword [edx + 0xc]
mov ebp, dword [esp + 0x10]
mov dword [esp + 0xb4], ebp
mov esi, dword [esp + 0xc]
mov dword [esp + 0xd4], esi
cmp dword [edx + 8], eax
jne 0x6ea1b6
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
call fcn.00403870
movzx eax, byte [esp + 0xc]
test al, al
jne 0x6eac4f
lea eax, [0x773920]
mov dword [esp], eax
call fcn.0040bcc0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0xe4]
mov edx, dword [ecx]
mov ecx, dword [ecx + 4]
mov dword [eax], edx
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0xd4]
mov dword [eax + 8], ecx
mov ecx, dword [0xaab020]
test ecx, ecx
jne 0x6ea1f9
mov ecx, dword [esp + 0xb4]
mov dword [eax + 0xc], ecx
jmp 0x6ea20c
lea edi, [eax + 0xc]
mov ecx, eax
mov eax, dword [esp + 0xb4]
call fcn.004643b0
mov eax, ecx
lea ecx, [0x844e80]
mov dword [esp + 0xe8], ecx
mov dword [esp + 0xec], eax
call fcn.004358f0
add esp, 0xd8
ret
lea edx, [0x844f40]
cmp eax, edx
jne 0x6ea30a
mov eax, dword [esp + 0xe4]
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov ebx, dword [esp + 0xdc]
mov dword [esp], ebx
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.006eb3d0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xe4]
mov ebx, dword [edx + 4]
mov ebp, dword [esp + 0x10]
mov dword [esp + 0xb0], ebp
mov esi, dword [esp + 0xc]
mov dword [esp + 0xd4], esi
cmp dword [edx], eax
jne 0x6ea2a6
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
call fcn.00403870
movzx eax, byte [esp + 0xc]
test al, al
jne 0x6eac4f
lea eax, [0x769fa0]
mov dword [esp], eax
call fcn.0040bcc0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0xd4]
mov dword [eax], ecx
mov ecx, dword [0xaab020]
test ecx, ecx
jne 0x6ea2d7
mov ecx, dword [esp + 0xb0]
mov dword [eax + 4], ecx
jmp 0x6ea2ea
lea edi, [eax + 4]
mov ecx, eax
mov eax, dword [esp + 0xb0]
call fcn.004643b0
mov eax, ecx
lea ecx, [0x844f40]
mov dword [esp + 0xe8], ecx
mov dword [esp + 0xec], eax
call fcn.004358f0
add esp, 0xd8
ret
lea edx, [0x844f58]
cmp eax, edx
jne 0x6ea450
mov eax, dword [esp + 0xe4]
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov ebx, dword [eax + 8]
mov ebp, dword [esp + 0xdc]
mov dword [esp], ebp
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebx
call fcn.006eb640
movzx eax, byte [esp + 0x1c]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
test al, al
je 0x6eac4f
mov dword [esp + 0x58], ebx
mov dword [esp + 0x54], edx
mov dword [esp + 0x9c], ecx
lea eax, [0x773ce0]
mov dword [esp], eax
call fcn.0040bcc0
mov edi, dword [esp + 4]
mov eax, dword [esp + 0x54]
mov dword [edi + 4], eax
mov eax, dword [esp + 0x58]
mov dword [edi + 8], eax
mov eax, dword [0xaab020]
test eax, eax
jne 0x6ea39f
mov ecx, dword [esp + 0x9c]
mov dword [edi], ecx
jmp 0x6ea3ad
mov eax, dword [esp + 0x9c]
call fcn.004643b0
mov ecx, eax
mov edx, dword [esp + 0xe4]
mov eax, dword [edx + 0xc]
mov ebx, dword [edx + 0x10]
mov edx, dword [edx + 0x14]
mov dword [edi + 0x10], ebx
mov dword [edi + 0x14], edx
mov edx, dword [0xaab020]
test edx, edx
jne 0x6ea3d2
mov dword [edi + 0xc], eax
jmp 0x6ea3e0
lea edx, [edi + 0xc]
mov ebx, edi
mov edi, edx
call fcn.004643b0
mov edi, ebx
nop
test ecx, ecx
jne 0x6ea430
mov dword [esp + 0x78], edi
lea eax, [0x7a90e0]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0
call fcn.0044b030
mov eax, dword [esp + 0xc]
mov edi, dword [esp + 0x78]
mov dword [edi + 4], 0
mov dword [edi + 8], 0
mov ecx, dword [0xaab020]
test ecx, ecx
jne 0x6ea42b
mov dword [edi], eax
jmp 0x6ea430
call fcn.004643b0
lea eax, [0x844f58]
mov dword [esp + 0xe8], eax
mov dword [esp + 0xec], edi
call fcn.004358f0
add esp, 0xd8
ret
lea edx, [0x844f10]
cmp eax, edx
jne 0x6ea52e
mov eax, dword [esp + 0xe4]
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov ebx, dword [esp + 0xdc]
mov dword [esp], ebx
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.006ea0e0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xe4]
mov ebx, dword [edx + 4]
mov ebp, dword [esp + 0x10]
mov dword [esp + 0xbc], ebp
mov esi, dword [esp + 0xc]
mov dword [esp + 0xd4], esi
cmp dword [edx], eax
jne 0x6ea4ca
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
call fcn.00403870
movzx eax, byte [esp + 0xc]
test al, al
jne 0x6eac4f
lea eax, [0x769f40]
mov dword [esp], eax
call fcn.0040bcc0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0xd4]
mov dword [eax], ecx
mov ecx, dword [0xaab020]
test ecx, ecx
jne 0x6ea4fb
mov ecx, dword [esp + 0xbc]
mov dword [eax + 4], ecx
jmp 0x6ea50e
lea edi, [eax + 4]
mov ecx, eax
mov eax, dword [esp + 0xbc]
call fcn.004643b0
mov eax, ecx
lea ecx, [0x844f10]
mov dword [esp + 0xe8], ecx
mov dword [esp + 0xec], eax
call fcn.004358f0
add esp, 0xd8
ret
lea edx, [0x844f70]
cmp eax, edx
jne 0x6ea576
mov eax, dword [esp + 0xdc]
mov dword [esp], eax
mov eax, dword [esp + 0xe4]
mov dword [esp + 4], eax
call fcn.006eb580
mov eax, dword [esp + 8]
lea ecx, [0x844f70]
mov dword [esp + 0xe8], ecx
mov dword [esp + 0xec], eax
call fcn.004358f0
add esp, 0xd8
ret
lea edx, [0x844f28]
cmp eax, edx
jne 0x6ea6b3
mov eax, dword [esp + 0xe4]
mov ecx, dword [eax + 0xc]
mov dword [esp + 0x80], ecx
mov edx, dword [eax + 0x10]
mov ebx, dword [esp + 0xdc]
mov dword [esp], ebx
mov dword [esp + 4], edx
call fcn.006eb580
mov eax, dword [esp + 8]
mov dword [esp + 0x84], eax
mov ecx, dword [esp + 0xe4]
mov edx, dword [ecx + 0x14]
mov ebx, dword [esp + 0xdc]
mov dword [esp], ebx
mov dword [esp + 4], edx
call fcn.006eb580
mov eax, dword [esp + 8]
mov dword [esp + 0x7c], eax
mov ecx, dword [esp + 0x84]
mov edx, dword [esp + 0xe4]
cmp dword [edx + 0x10], ecx
jne 0x6ea5f7
cmp dword [edx + 0x14], eax
je 0x6eac4f
lea eax, [0x795dc0]
mov dword [esp], eax
call fcn.0040bcc0
mov edi, dword [esp + 4]
mov eax, dword [0xaab020]
mov ecx, dword [esp + 0xe4]
mov edx, dword [ecx]
test eax, eax
jne 0x6ea620
mov dword [edi], edx
jmp 0x6ea627
mov eax, edx
call fcn.004643b0
mov edx, dword [0xaab020]
mov eax, dword [ecx + 4]
test edx, edx
jne 0x6ea654
mov dword [edi + 4], eax
mov eax, dword [esp + 0x80]
mov dword [edi + 0xc], eax
mov eax, dword [esp + 0x84]
mov dword [edi + 0x10], eax
mov eax, dword [esp + 0x7c]
mov dword [edi + 0x14], eax
jmp 0x6ea68c
lea edx, [edi + 4]
mov ebx, edi
mov edi, edx
call fcn.004643b0
lea edi, [ebx + 0xc]
mov eax, dword [esp + 0x80]
call fcn.004643b0
lea edi, [ebx + 0x10]
mov eax, dword [esp + 0x84]
call fcn.004643b0
lea edi, [ebx + 0x14]
mov eax, dword [esp + 0x7c]
call fcn.004643b0
mov edi, ebx
movzx eax, byte [ecx + 0x18]
mov byte [edi + 0x18], al
lea eax, [0x844f28]
mov dword [esp + 0xe8], eax
mov dword [esp + 0xec], edi
call fcn.004358f0
add esp, 0xd8
ret
lea edx, [0x844fa0]
cmp eax, edx
jne 0x6ea76b
mov eax, dword [esp + 0xe4]
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov eax, dword [eax + 8]
mov ebx, dword [esp + 0xdc]
mov dword [esp], ebx
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], eax
call fcn.006ebba0
movzx eax, byte [esp + 0x1c]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
test al, al
je 0x6eac4f
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x70], ecx
mov dword [esp + 0x38], edx
lea eax, [0x76a180]
mov dword [esp], eax
call fcn.0040bcc0
mov edi, dword [esp + 4]
mov eax, dword [esp + 0x38]
mov dword [edi + 4], eax
mov eax, dword [esp + 0x3c]
mov dword [edi + 8], eax
mov eax, dword [0xaab020]
test eax, eax
jne 0x6ea742
mov eax, dword [esp + 0x70]
mov dword [edi], eax
jmp 0x6ea74b
mov eax, dword [esp + 0x70]
call fcn.004643b0
lea eax, [0x844fa0]
mov dword [esp + 0xe8], eax
mov dword [esp + 0xec], edi
call fcn.004358f0
add esp, 0xd8
ret
lea edx, [0x844ec8]
cmp eax, edx
jne 0x6ea9f2
mov eax, dword [esp + 0xe4]
mov ecx, dword [eax + 4]
mov edx, dword [eax + 8]
mov ebx, dword [eax + 0xc]
mov ebp, dword [esp + 0xdc]
mov dword [esp], ebp
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebx
call fcn.006eb8c0
movzx eax, byte [esp + 0x1c]
mov byte [esp + 0x2f], al
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x90], ecx
mov edx, dword [esp + 0x14]
mov dword [esp + 0x48], edx
mov ebx, dword [esp + 0x18]
mov dword [esp + 0x4c], ebx
mov ebp, dword [esp + 0xe4]
mov esi, dword [ebp + 0x10]
mov edi, dword [ebp + 0x14]
mov ebx, dword [ebp + 0x18]
mov edx, dword [esp + 0xdc]
mov dword [esp], edx
mov dword [esp + 4], esi
mov dword [esp + 8], edi
mov dword [esp + 0xc], ebx
call fcn.006eba10
movzx eax, byte [esp + 0x1c]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0xa0], ecx
mov edx, dword [esp + 0x14]
mov dword [esp + 0x5c], edx
mov ebx, dword [esp + 0x18]
mov dword [esp + 0x60], ebx
movzx ebp, byte [esp + 0x2f]
xchg ebp, eax
test al, al
xchg ebp, eax
jne 0x6ea826
test al, al
je 0x6eac4f
mov eax, dword [esp + 0xdc]
mov eax, dword [eax + 8]
mov dword [esp + 0xb8], eax
lea ecx, [0x795c80]
mov dword [esp], ecx
call fcn.0040bcc0
mov eax, dword [esp + 4]
mov ecx, dword [0xaab020]
test ecx, ecx
jne 0x6ea85e
mov ecx, dword [esp + 0xb8]
mov dword [eax], ecx
jmp 0x6ea875
mov edi, eax
mov eax, dword [esp + 0xb8]
call fcn.004643b0
mov eax, edi
mov ecx, dword [esp + 0xb8]
mov dword [esp + 0x6c], eax
test ecx, ecx
je 0x6ea924
nop
mov edx, dword [ecx + 0xb8]
inc edx
mov ebx, dword [ecx + 0xb4]
mov ebp, dword [ecx + 0xbc]
cmp ebp, edx
jae 0x6ea8fb
mov dword [esp], ebx
mov dword [esp + 4], edx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], 1
lea eax, [0x767600]
mov dword [esp + 0x10], eax
call fcn.0044b1b0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0xb8]
mov dword [ebx + 0xbc], edx
mov edx, dword [0xaab020]
test edx, edx
jne 0x6ea8e6
mov dword [ebx + 0xb4], eax
jmp 0x6ea8f1
lea edi, [ebx + 0xb4]
call fcn.004643b0
mov edx, ecx
mov ecx, ebx
mov ebx, eax
mov eax, dword [esp + 0x6c]
mov dword [ecx + 0xb8], edx
lea ecx, [ebx + edx*8 - 8]
lea ebp, [0x84423c]
mov dword [ecx], ebp
lea edi, [ebx + edx*8 - 4]
mov ecx, dword [0xaab020]
test ecx, ecx
jne 0x6ea91f
mov dword [edi], eax
jmp 0x6ea924
call fcn.004643b0
mov ecx, dword [esp + 0x5c]
mov dword [eax + 0x14], ecx
mov ecx, dword [esp + 0x60]
mov dword [eax + 0x18], ecx
mov ecx, dword [0xaab020]
test ecx, ecx
jne 0x6ea948
mov ecx, dword [esp + 0xa0]
mov dword [eax + 0x10], ecx
jmp 0x6ea95b
lea edi, [eax + 0x10]
mov ecx, eax
mov eax, dword [esp + 0xa0]
call fcn.004643b0
mov eax, ecx
mov ecx, dword [esp + 0xe4]
movzx edx, byte [ecx + 0x20]
mov byte [eax + 0x20], dl
movzx edx, byte [ecx + 0x21]
mov byte [eax + 0x21], dl
mov edx, dword [esp + 0x90]
mov dword [esp], edx
mov edx, dword [esp + 0x48]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x4c]
mov dword [esp + 8], edx
lea edx, [0x844ec8]
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
mov dword [esp + 0x18], eax
call fcn.006ebd80
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x24]
mov ebx, dword [esp + 0x6c]
mov dword [ebx + 8], ecx
mov dword [ebx + 0xc], edx
mov ecx, dword [0xaab020]
test ecx, ecx
jne 0x6ea9ca
mov dword [ebx + 4], eax
jmp 0x6ea9d2
lea edi, [ebx + 4]
call fcn.004643b0
lea eax, [0x844ec8]
mov dword [esp + 0xe8], eax
mov dword [esp + 0xec], ebx
call fcn.004358f0
add esp, 0xd8
ret
lea edx, [0x844ee0]
cmp eax, edx
jne 0x6eabd7
mov eax, dword [esp + 0xe4]
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov ebx, dword [esp + 0xdc]
mov dword [esp], ebx
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.006ea0e0
mov eax, dword [esp + 0xe4]
mov ecx, dword [eax + 8]
mov edx, dword [eax + 0xc]
mov ebx, dword [esp + 0xc]
mov dword [esp + 0xd0], ebx
mov ebp, dword [esp + 0x10]
mov dword [esp + 0x94], ebp
mov esi, dword [esp + 0x10]
mov dword [esp + 0x98], esi
mov edi, dword [esp + 0xc]
mov dword [esp + 0xd4], edi
mov esi, dword [esp + 0xdc]
mov dword [esp], esi
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.006ea0e0
mov eax, dword [esp + 0xe4]
mov ecx, dword [eax + 4]
mov edx, dword [esp + 0xc]
mov ebx, dword [esp + 0x10]
mov ebp, dword [esp + 0x10]
mov dword [esp + 0xac], ebp
mov esi, dword [esp + 0xc]
mov dword [esp + 0xcc], esi
mov edi, dword [esp + 0xd0]
cmp dword [eax], edi
je 0x6eaaad
mov ecx, 1
jmp 0x6eaaff
mov dword [esp + 0xa4], ebx
mov dword [esp + 0xd0], edx
mov dword [esp], edi
mov eax, dword [esp + 0x94]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00403870
movzx eax, byte [esp + 0xc]
xor eax, 1
mov edx, dword [esp + 0xd0]
mov ebx, dword [esp + 0xa4]
mov ebp, dword [esp + 0xac]
mov esi, dword [esp + 0xcc]
mov ecx, eax
mov eax, dword [esp + 0xe4]
test cl, cl
jne 0x6eab40
mov ecx, dword [eax + 0xc]
cmp dword [eax + 8], edx
je 0x6eab12
mov eax, 1
jmp 0x6eab38
mov dword [esp], edx
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
call fcn.00403870
movzx eax, byte [esp + 0xc]
xor eax, 1
mov ebp, dword [esp + 0xac]
mov esi, dword [esp + 0xcc]
test al, al
je 0x6eac4f
lea eax, [0x773bc0]
mov dword [esp], eax
call fcn.0040bcc0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0xd4]
mov dword [eax], ecx
mov ecx, dword [0xaab020]
test ecx, ecx
jne 0x6eab71
mov ecx, dword [esp + 0x98]
mov dword [eax + 4], ecx
jmp 0x6eab84
lea edi, [eax + 4]
mov ecx, eax
mov eax, dword [esp + 0x98]
call fcn.004643b0
mov eax, ecx
mov ecx, dword [esp + 0xcc]
mov dword [eax + 8], ecx
mov ecx, dword [0xaab020]
test ecx, ecx
jne 0x6eaba4
mov ecx, dword [esp + 0xac]
mov dword [eax + 0xc], ecx
jmp 0x6eabb7
lea edi, [eax + 0xc]
mov ecx, eax
mov eax, dword [esp + 0xac]
call fcn.004643b0
mov eax, ecx
lea ecx, [0x844ee0]
mov dword [esp + 0xe8], ecx
mov dword [esp + 0xec], eax
call fcn.004358f0
add esp, 0xd8
ret
lea edx, [0x844eb0]
cmp eax, edx
jne 0x6eace7
mov eax, dword [esp + 0xe4]
mov ecx, dword [eax + 4]
mov edx, dword [eax + 8]
mov ebx, dword [esp + 0xdc]
mov dword [esp], ebx
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.006ea0e0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xe4]
mov ebx, dword [edx + 8]
mov ebp, dword [esp + 0x10]
mov dword [esp + 0xa8], ebp
mov esi, dword [esp + 0xc]
mov dword [esp + 0xd4], esi
cmp dword [edx + 4], eax
jne 0x6eac77
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
call fcn.00403870
movzx eax, byte [esp + 0xc]
test al, al
je 0x6eac77
mov eax, dword [esp + 0xe0]
mov dword [esp + 0xe8], eax
mov eax, dword [esp + 0xe4]
mov dword [esp + 0xec], eax
call fcn.004358f0
add esp, 0xd8
ret
lea eax, [0x7739e0]
mov dword [esp], eax
call fcn.0040bcc0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0xe4]
mov ecx, dword [ecx]
mov dword [eax], ecx
mov ecx, dword [esp + 0xd4]
mov dword [eax + 4], ecx
mov ecx, dword [0xaab020]
test ecx, ecx
jne 0x6eacb4
mov ecx, dword [esp + 0xa8]
mov dword [eax + 8], ecx
jmp 0x6eacc7
lea edi, [eax + 8]
mov ecx, eax
mov eax, dword [esp + 0xa8]
call fcn.004643b0
mov eax, ecx
lea ecx, [0x844eb0]
mov dword [esp + 0xe8], ecx
mov dword [esp + 0xec], eax
call fcn.004358f0
add esp, 0xd8
ret
lea edx, [0x844ef8]
cmp eax, edx
jne 0x6eaee2
mov eax, dword [esp + 0xdc]
test byte [eax], al
mov ebx, dword [esp + 0xe4]
mov ebp, dword [ebx + 0x10]
test ebp, ebp
je 0x6ead11
mov ebp, dword [ebp]
jmp 0x6ead13
mov ebp, ebx
mov dword [esp + 0x68], ebp
mov dword [esp], ebp
call fcn.006e4550
mov eax, dword [esp + 4]
test eax, eax
je 0x6ead2c
mov edx, dword [eax + 4]
jmp 0x6ead2e
xor edx, edx
test edx, edx
je 0x6eae45
mov ebx, dword [esp + 0xe4]
mov ebp, dword [ebx + 0x10]
test ebp, ebp
je 0x6ead49
mov ebp, dword [ebp + 4]
jmp 0x6ead4b
xor ebp, ebp
test ebp, ebp
je 0x6ead54
mov ebp, dword [ebp + 4]
jmp 0x6ead56
xor ebp, ebp
cmp ebp, edx
jne 0x6eae0f
mov dword [esp + 0x34], edx
lea eax, [0x750280]
mov dword [esp], eax
call fcn.0040bcc0
mov eax, dword [esp + 4]
lea ecx, [0x7a8460]
mov dword [eax], ecx
mov edx, dword [0xaab020]
test edx, edx
jne 0x6ead92
mov ebx, dword [esp + 0xe4]
mov dword [eax + 4], ebx
jmp 0x6eada5
lea edi, [eax + 4]
mov edx, eax
mov eax, dword [esp + 0xe4]
call fcn.004643b0
mov eax, edx
mov ecx, dword [0x7e0974]
lea ebx, [0x7c5db6]
mov dword [esp], ebx
mov dword [esp + 4], 0x1b
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
lea edx, [0x7e0974]
call ecx
mov eax, dword [esp + 0xe4]
mov ecx, dword [eax + 0x10]
test ecx, ecx
je 0x6eadeb
mov ecx, dword [ecx + 4]
jmp 0x6eaded
xor ecx, ecx
test ecx, ecx
je 0x6eadf8
mov edx, dword [ecx]
mov ecx, dword [ecx + 4]
jmp 0x6eadfc
xor ecx, ecx
xor edx, edx
mov dword [esp + 0x30], ecx
mov dword [esp + 0x64], edx
xor ebx, ebx
xor ebp, ebp
xor esi, esi
jmp 0x6eaf7f
mov edx, dword [0xa7b844]
mov ebx, dword [0xa7b840]
test edx, edx
jbe 0x6eaf60
mov eax, dword [ebx]
lea ecx, [0x844e98]
mov dword [esp + 0xe8], ecx
mov dword [esp + 0xec], eax
call fcn.004358f0
add esp, 0xd8
ret
lea eax, [0x750280]
mov dword [esp], eax
call fcn.0040bcc0
mov eax, dword [esp + 4]
lea ecx, [0x7a8460]
mov dword [eax], ecx
mov ecx, dword [0xaab020]
test ecx, ecx
jne 0x6eae75
mov ecx, dword [esp + 0xe4]
mov dword [eax + 4], ecx
jmp 0x6eae88
lea edi, [eax + 4]
mov ecx, eax
mov eax, dword [esp + 0xe4]
call fcn.004643b0
mov eax, ecx
mov ecx, dword [0x7e0974]
lea ebx, [0x7c5dd1]
mov dword [esp], ebx
mov dword [esp + 4], 0x1b
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
lea edx, [0x7e0974]
call ecx
lea eax, [0x844ef8]
mov dword [esp + 0xe8], eax
mov eax, dword [esp + 0xe4]
mov dword [esp + 0xec], eax
call fcn.004358f0
add esp, 0xd8
ret
lea ecx, [0x844f88]
cmp eax, ecx
jne 0x6eaf47
mov eax, dword [esp + 0xdc]
mov eax, dword [eax + 4]
mov ecx, dword [esp + 0xe4]
lea ebx, [0x784c60]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.0040e780
mov eax, dword [esp + 0xc]
mov ecx, dword [eax]
mov eax, dword [eax + 4]
test ecx, ecx
jne 0x6eaf2d
lea ecx, [0x844f88]
mov eax, dword [esp + 0xe4]
mov dword [esp + 0xe8], ecx
mov dword [esp + 0xec], eax
call fcn.004358f0
add esp, 0xd8
ret
nop
lea eax, [0x758c80]
mov dword [esp], eax
lea eax, [0x843904]
mov dword [esp + 4], eax
call fcn.00436340
xor eax, eax
xor ecx, ecx
call fcn.00464430
lea ebx, [edx + 1]
mov edx, dword [esp + 0x64]
mov ebp, eax
mov esi, ecx
mov eax, dword [esp + 0xe4]
mov ecx, dword [esp + 0x30]
cmp ebx, ecx
jge 0x6eb295
mov dword [esp + 0x44], esi
mov dword [esp + 0x8c], ebp
mov dword [esp + 0x50], ebx
lea eax, [edx + ebx*8]
mov ecx, dword [eax]
mov dword [esp + 0x40], ecx
mov eax, dword [eax + 4]
mov dword [esp + 0x74], eax
lea ebp, [0x750840]
mov dword [esp], ebp
call fcn.0040bcc0
mov eax, dword [esp + 4]
mov dword [esp + 0xc8], eax
mov ecx, dword [esp + 0x50]
mov dword [esp], ecx
call fcn.004094f0
mov eax, dword [esp + 4]
lea ecx, [0x7583c0]
mov edx, dword [esp + 0xc8]
mov dword [edx], ecx
mov ebx, dword [0xaab020]
test ebx, ebx
jne 0x6eafed
mov dword [edx + 4], eax
jmp 0x6eaff5
lea edi, [edx + 4]
call fcn.004643b0
mov ebx, dword [esp + 0x40]
test ebx, ebx
je 0x6eb002
mov ebp, dword [ebx + 4]
jmp 0x6eb004
mov ebp, ebx
mov dword [edx + 8], ebp
mov ebp, dword [0xaab020]
test ebp, ebp
jne 0x6eb01a
mov eax, dword [esp + 0x74]
mov dword [edx + 0xc], eax
jmp 0x6eb026
lea edi, [edx + 0xc]
mov eax, dword [esp + 0x74]
call fcn.004643b0
mov eax, dword [0x7e0974]
lea ecx, [0x7bc8fc]
mov dword [esp], ecx
mov dword [esp + 4], 0x10
mov dword [esp + 8], edx
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
lea edx, [0x7e0974]
call eax
mov eax, dword [esp + 0xdc]
mov dword [esp], eax
mov ecx, dword [esp + 0x40]
mov dword [esp + 4], ecx
mov ebx, dword [esp + 0x74]
mov dword [esp + 8], ebx
call fcn.006ea0e0
mov eax, dword [esp + 0xc]
mov dword [esp + 0xd0], eax
mov ecx, dword [esp + 0x10]
mov ebx, dword [esp + 0x10]
mov dword [esp + 0x88], ebx
mov ebp, dword [esp + 0xc]
mov dword [esp + 0xd4], ebp
mov esi, dword [esp + 0x40]
cmp eax, esi
jne 0x6eb0d6
mov dword [esp], eax
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x74]
mov dword [esp + 8], ecx
call fcn.00403870
movzx eax, byte [esp + 0xc]
test al, al
je 0x6eb0d6
mov edx, dword [esp + 0x50]
mov ecx, dword [esp + 0x44]
mov eax, dword [esp + 0x8c]
jmp 0x6eaf69
lea eax, [0x750ac0]
mov dword [esp], eax
call fcn.0040bcc0
mov eax, dword [esp + 4]
mov dword [esp + 0xc4], eax
mov ecx, dword [esp + 0x50]
mov dword [esp], ecx
call fcn.004094f0
mov eax, dword [esp + 4]
lea ecx, [0x7583c0]
mov edx, dword [esp + 0xc4]
mov dword [edx], ecx
mov ebx, dword [0xaab020]
test ebx, ebx
jne 0x6eb123
mov dword [edx + 4], eax
mov ebx, dword [esp + 0x40]
test ebx, ebx
jmp 0x6eb131
lea edi, [edx + 4]
call fcn.004643b0
mov ebx, dword [esp + 0x40]
test ebx, ebx
je 0x6eb136
mov ebx, dword [ebx + 4]
mov dword [edx + 8], ebx
mov ebx, dword [0xaab020]
test ebx, ebx
jne 0x6eb14c
mov ebx, dword [esp + 0x74]
mov dword [edx + 0xc], ebx
jmp 0x6eb158
lea edi, [edx + 0xc]
mov eax, dword [esp + 0x74]
call fcn.004643b0
mov ebx, dword [esp + 0xd0]
test ebx, ebx
je 0x6eb168
mov eax, dword [ebx + 4]
jmp 0x6eb16a
mov eax, ebx
mov dword [edx + 0x10], eax
mov ebx, dword [0xaab020]
test ebx, ebx
jne 0x6eb183
mov eax, dword [esp + 0x88]
mov dword [edx + 0x14], eax
jmp 0x6eb192
lea edi, [edx + 0x14]
mov eax, dword [esp + 0x88]
call fcn.004643b0
mov eax, dword [0x7e0974]
lea ecx, [0x7c9fc3]
mov dword [esp], ecx
mov dword [esp + 4], 0x20
mov dword [esp + 8], edx
mov dword [esp + 0xc], 3
mov dword [esp + 0x10], 3
lea edx, [0x7e0974]
call eax
mov eax, dword [esp + 0x8c]
test eax, eax
je 0x6eb1d6
mov ecx, dword [esp + 0x44]
jmp 0x6eb24c
lea eax, [0x76bbc0]
mov dword [esp], eax
mov ecx, dword [esp + 0x34]
mov dword [esp + 4], ecx
mov dword [esp + 8], ecx
call fcn.0044b030
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0xe4]
mov edx, dword [ecx + 0x10]
test edx, edx
je 0x6eb207
mov edx, dword [edx + 4]
jmp 0x6eb209
xor edx, edx
test edx, edx
je 0x6eb214
mov ebx, dword [edx]
mov edx, dword [edx + 4]
jmp 0x6eb218
xor edx, edx
xor ebx, ebx
mov dword [esp + 0xc0], eax
lea ecx, [0x76bbc0]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov ebp, dword [esp + 0x34]
mov dword [esp + 8], ebp
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], edx
call fcn.00411590
mov ecx, dword [esp + 0x34]
mov eax, dword [esp + 0xc0]
mov edx, dword [esp + 0x50]
cmp ecx, edx
jbe 0x6eb3a0
lea ebx, [eax + edx*8]
mov ebp, dword [esp + 0xd4]
mov dword [ebx], ebp
mov ebx, dword [0xaab020]
lea edi, [eax + edx*8 + 4]
test ebx, ebx
jne 0x6eb280
mov ebx, dword [esp + 0x88]
mov dword [edi], ebx
jmp 0x6eaf69
mov ebx, eax
mov eax, dword [esp + 0x88]
call fcn.004643b0
mov eax, ebx
jmp 0x6eaf69
test ebp, ebp
jne 0x6eb33a
lea eax, [0x750280]
mov dword [esp], eax
call fcn.0040bcc0
mov eax, dword [esp + 4]
lea ecx, [0x7a8460]
mov dword [eax], ecx
mov ecx, dword [0xaab020]
test ecx, ecx
jne 0x6eb2cd
mov ecx, dword [esp + 0xe4]
mov dword [eax + 4], ecx
jmp 0x6eb2e0
lea edi, [eax + 4]
mov ecx, eax
mov eax, dword [esp + 0xe4]
call fcn.004643b0
mov eax, ecx
mov ecx, dword [0x7e0974]
lea ebx, [0x7c9516]
mov dword [esp], ebx
mov dword [esp + 4], 0x1f
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
lea edx, [0x7e0974]
call ecx
lea eax, [0x844ef8]
mov dword [esp + 0xe8], eax
mov eax, dword [esp + 0xe4]
mov dword [esp + 0xec], eax
call fcn.004358f0
add esp, 0xd8
ret
mov eax, dword [esp + 0xdc]
mov ecx, dword [eax + 8]
mov edx, dword [eax]
mov ebx, dword [eax + 0xc]
mov eax, dword [eax + 0x10]
mov dword [esp], ecx
mov dword [esp + 4], edx
lea ecx, [0x844ef8]
mov dword [esp + 8], ecx
mov ecx, dword [esp + 0x68]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebp
mov dword [esp + 0x14], esi
mov dword [esp + 0x18], esi
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x20], eax
call fcn.006e2fa0
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x28]
mov dword [esp + 0xe8], eax
mov dword [esp + 0xec], ecx
call fcn.004358f0
add esp, 0xd8
ret
mov eax, edx
call fcn.00464430
lea eax, [0x758c80]
mov dword [esp], eax
lea eax, [0x8436fc]
mov dword [esp + 4], eax
call fcn.00436340
nop
call fcn.00462fa0
jmp fcn.006ea0e0